source/param/loadparm.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Parameter loading functions
   4    Copyright (C) Karl Auer 1993-1998
   5
   6    Largely re-written by Andrew Tridgell, September 1994
   7
   8    Copyright (C) Simo Sorce 2001
   9    Copyright (C) Alexander Bokovoy 2002
  10    Copyright (C) Stefan (metze) Metzmacher 2002
  11    Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
  12
  13    This program is free software; you can redistribute it and/or modify
  14    it under the terms of the GNU General Public License as published by
  15    the Free Software Foundation; either version 3 of the License, or
  16    (at your option) any later version.
  17
  18    This program is distributed in the hope that it will be useful,
  19    but WITHOUT ANY WARRANTY; without even the implied warranty of
  20    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  21    GNU General Public License for more details.
  22
  23    You should have received a copy of the GNU General Public License
  24    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  25 */
  26
  27 /*
  28  *  Load parameters.
  29  *
  30  *  This module provides suitable callback functions for the params
  31  *  module. It builds the internal table of service details which is
  32  *  then used by the rest of the server.
  33  *
  34  * To add a parameter:
  35  *
  36  * 1) add it to the global or service structure definition
  37  * 2) add it to the parm_table
  38  * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
  39  * 4) If it's a global then initialise it in init_globals. If a local
  40  *    (ie. service) parameter then initialise it in the sDefault structure
  41  *
  42  *
  43  * Notes:
  44  *   The configuration file is processed sequentially for speed. It is NOT
  45  *   accessed randomly as happens in 'real' Windows. For this reason, there
  46  *   is a fair bit of sequence-dependent code here - ie., code which assumes
  47  *   that certain things happen before others. In particular, the code which
  48  *   happens at the boundary between sections is delicately poised, so be
  49  *   careful!
  50  *
  51  */
  52
  53 #include "includes.h"
  54
  55 bool in_client = False;         /* Not in the client by default */
  56 bool bLoaded = False;
  57
  58 extern enum protocol_types Protocol;
  59 extern userdom_struct current_user_info;
  60
  61 #ifndef GLOBAL_NAME
  62 #define GLOBAL_NAME "global"
  63 #endif
  64
  65 #ifndef PRINTERS_NAME
  66 #define PRINTERS_NAME "printers"
  67 #endif
  68
  69 #ifndef HOMES_NAME
  70 #define HOMES_NAME "homes"
  71 #endif
  72
  73 /* the special value for the include parameter
  74  * to be interpreted not as a file name but to
  75  * trigger loading of the global smb.conf options
  76  * from registry. */
  77 #ifndef INCLUDE_REGISTRY_NAME
  78 #define INCLUDE_REGISTRY_NAME "registry"
  79 #endif
  80
  81 static int regdb_last_seqnum = 0;
  82 static bool include_registry_globals = False;
  83
  84 /* some helpful bits */
  85 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
  86 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
  87
  88 #define USERSHARE_VALID 1
  89 #define USERSHARE_PENDING_DELETE 2
  90
  91 extern int extra_time_offset;
  92
  93 static bool defaults_saved = False;
  94
  95 typedef struct _param_opt_struct param_opt_struct;
  96 struct _param_opt_struct {
  97         param_opt_struct *prev, *next;
  98         char *key;
  99         char *value;
 100         char **list;
 101 };
 102
 103 /*
 104  * This structure describes global (ie., server-wide) parameters.
 105  */
 106 typedef struct {
 107         char *smb_ports;
 108         char *dos_charset;
 109         char *unix_charset;
 110         char *display_charset;
 111         char *szPrintcapname;
 112         char *szAddPortCommand;
 113         char *szEnumPortsCommand;
 114         char *szAddPrinterCommand;
 115         char *szDeletePrinterCommand;
 116         char *szOs2DriverMap;
 117         char *szLockDir;
 118         char *szPidDir;
 119         char *szRootdir;
 120         char *szDefaultService;
 121         char *szGetQuota;
 122         char *szSetQuota;
 123         char *szMsgCommand;
 124         char *szServerString;
 125         char *szAutoServices;
 126         char *szPasswdProgram;
 127         char *szPasswdChat;
 128         char *szLogFile;
 129         char *szConfigFile;
 130         char *szSMBPasswdFile;
 131         char *szPrivateDir;
 132         char *szPassdbBackend;
 133         char **szPreloadModules;
 134         char *szPasswordServer;
 135         char *szSocketOptions;
 136         char *szRealm;
 137         char *szAfsUsernameMap;
 138         int iAfsTokenLifetime;
 139         char *szLogNtTokenCommand;
 140         char *szUsernameMap;
 141         char *szLogonScript;
 142         char *szLogonPath;
 143         char *szLogonDrive;
 144         char *szLogonHome;
 145         char **szWINSservers;
 146         char **szInterfaces;
 147         char *szRemoteAnnounce;
 148         char *szRemoteBrowseSync;
 149         char *szSocketAddress;
 150         char *szNISHomeMapName;
 151         char *szAnnounceVersion;        /* This is initialised in init_globals */
 152         char *szWorkgroup;
 153         char *szNetbiosName;
 154         char **szNetbiosAliases;
 155         char *szNetbiosScope;
 156         char *szNameResolveOrder;
 157         char *szPanicAction;
 158         char *szAddUserScript;
 159         char *szRenameUserScript;
 160         char *szDelUserScript;
 161         char *szAddGroupScript;
 162         char *szDelGroupScript;
 163         char *szAddUserToGroupScript;
 164         char *szDelUserFromGroupScript;
 165         char *szSetPrimaryGroupScript;
 166         char *szAddMachineScript;
 167         char *szShutdownScript;
 168         char *szAbortShutdownScript;
 169         char *szUsernameMapScript;
 170         char *szCheckPasswordScript;
 171         char *szWINSHook;
 172         char *szUtmpDir;
 173         char *szWtmpDir;
 174         bool bUtmp;
 175         char *szIdmapUID;
 176         char *szIdmapGID;
 177         bool bPassdbExpandExplicit;
 178         int AlgorithmicRidBase;
 179         char *szTemplateHomedir;
 180         char *szTemplateShell;
 181         char *szWinbindSeparator;
 182         bool bWinbindEnumUsers;
 183         bool bWinbindEnumGroups;
 184         bool bWinbindUseDefaultDomain;
 185         bool bWinbindTrustedDomainsOnly;
 186         bool bWinbindNestedGroups;
 187         int  winbind_expand_groups;
 188         bool bWinbindRefreshTickets;
 189         bool bWinbindOfflineLogon;
 190         bool bWinbindNormalizeNames;
 191         bool bWinbindRpcOnly;
 192         char **szIdmapDomains;
 193         char **szIdmapBackend; /* deprecated */
 194         char *szIdmapAllocBackend;
 195         char *szAddShareCommand;
 196         char *szChangeShareCommand;
 197         char *szDeleteShareCommand;
 198         char **szEventLogs;
 199         char *szGuestaccount;
 200         char *szManglingMethod;
 201         char **szServicesList;
 202         char *szUsersharePath;
 203         char *szUsershareTemplateShare;
 204         char **szUsersharePrefixAllowList;
 205         char **szUsersharePrefixDenyList;
 206         int mangle_prefix;
 207         int max_log_size;
 208         char *szLogLevel;
 209         int max_xmit;
 210         int max_mux;
 211         int max_open_files;
 212         int open_files_db_hash_size;
 213         int pwordlevel;
 214         int unamelevel;
 215         int deadtime;
 216         bool getwd_cache;
 217         int maxprotocol;
 218         int minprotocol;
 219         int security;
 220         char **AuthMethods;
 221         bool paranoid_server_security;
 222         int maxdisksize;
 223         int lpqcachetime;
 224         int iMaxSmbdProcesses;
 225         bool bDisableSpoolss;
 226         int syslog;
 227         int os_level;
 228         bool enhanced_browsing;
 229         int max_ttl;
 230         int max_wins_ttl;
 231         int min_wins_ttl;
 232         int lm_announce;
 233         int lm_interval;
 234         int announce_as;        /* This is initialised in init_globals */
 235         int machine_password_timeout;
 236         int map_to_guest;
 237         int oplock_break_wait_time;
 238         int winbind_cache_time;
 239         int winbind_max_idle_children;
 240         char **szWinbindNssInfo;
 241         int iLockSpinTime;
 242         char *szLdapMachineSuffix;
 243         char *szLdapUserSuffix;
 244         char *szLdapIdmapSuffix;
 245         char *szLdapGroupSuffix;
 246         int ldap_ssl;
 247         char *szLdapSuffix;
 248         char *szLdapAdminDn;
 249         int iAclCompat;
 250         char *szCupsServer;
 251         char *szIPrintServer;
 252         char *ctdbdSocket;
 253         char **szClusterAddresses;
 254         bool clustering;
 255         int ldap_passwd_sync;
 256         int ldap_replication_sleep;
 257         int ldap_timeout; /* This is initialised in init_globals */
 258         int ldap_page_size;
 259         bool ldap_delete_dn;
 260         bool bMsAddPrinterWizard;
 261         bool bDNSproxy;
 262         bool bWINSsupport;
 263         bool bWINSproxy;
 264         bool bLocalMaster;
 265         int  iPreferredMaster;
 266         int iDomainMaster;
 267         bool bDomainLogons;
 268         bool bEncryptPasswords;
 269         bool bUpdateEncrypt;
 270         int  clientSchannel;
 271         int  serverSchannel;
 272         bool bNullPasswords;
 273         bool bObeyPamRestrictions;
 274         bool bLoadPrinters;
 275         int PrintcapCacheTime;
 276         bool bLargeReadwrite;
 277         bool bReadRaw;
 278         bool bWriteRaw;
 279         bool bSyslogOnly;
 280         bool bBrowseList;
 281         bool bNISHomeMap;
 282         bool bTimeServer;
 283         bool bBindInterfacesOnly;
 284         bool bPamPasswordChange;
 285         bool bUnixPasswdSync;
 286         bool bPasswdChatDebug;
 287         int iPasswdChatTimeout;
 288         bool bTimestampLogs;
 289         bool bNTSmbSupport;
 290         bool bNTPipeSupport;
 291         bool bNTStatusSupport;
 292         bool bStatCache;
 293         int iMaxStatCacheSize;
 294         bool bKernelOplocks;
 295         bool bAllowTrustedDomains;
 296         bool bLanmanAuth;
 297         bool bNTLMAuth;
 298         bool bUseSpnego;
 299         bool bClientLanManAuth;
 300         bool bClientNTLMv2Auth;
 301         bool bClientPlaintextAuth;
 302         bool bClientUseSpnego;
 303         bool bDebugPrefixTimestamp;
 304         bool bDebugHiresTimestamp;
 305         bool bDebugPid;
 306         bool bDebugUid;
 307         bool bDebugClass;
 308         bool bEnableCoreFiles;
 309         bool bHostMSDfs;
 310         bool bUseMmap;
 311         bool bHostnameLookups;
 312         bool bUnixExtensions;
 313         bool bDisableNetbios;
 314         bool bUseKerberosKeytab;
 315         bool bDeferSharingViolations;
 316         bool bEnablePrivileges;
 317         bool bASUSupport;
 318         bool bUsershareOwnerOnly;
 319         bool bUsershareAllowGuests;
 320         bool bRegistryShares;
 321         int restrict_anonymous;
 322         int name_cache_timeout;
 323         int client_signing;
 324         int server_signing;
 325         int client_ldap_sasl_wrapping;
 326         int iUsershareMaxShares;
 327         int iIdmapCacheTime;
 328         int iIdmapNegativeCacheTime;
 329
 330         bool bResetOnZeroVC;
 331         int iKeepalive;
 332         int iminreceivefile;
 333         param_opt_struct *param_opt;
 334 } global;
 335
 336 static global Globals;
 337
 338 /*
 339  * This structure describes a single service.
 340  */
 341 typedef struct {
 342         bool valid;
 343         bool autoloaded;
 344         int usershare;
 345         time_t usershare_last_mod;
 346         char *szService;
 347         char *szPath;
 348         char *szUsername;
 349         char **szInvalidUsers;
 350         char **szValidUsers;
 351         char **szAdminUsers;
 352         char *szCopy;
 353         char *szInclude;
 354         char *szPreExec;
 355         char *szPostExec;
 356         char *szRootPreExec;
 357         char *szRootPostExec;
 358         char *szCupsOptions;
 359         char *szPrintcommand;
 360         char *szLpqcommand;
 361         char *szLprmcommand;
 362         char *szLppausecommand;
 363         char *szLpresumecommand;
 364         char *szQueuepausecommand;
 365         char *szQueueresumecommand;
 366         char *szPrintername;
 367         char *szPrintjobUsername;
 368         char *szDontdescend;
 369         char **szHostsallow;
 370         char **szHostsdeny;
 371         char *szMagicScript;
 372         char *szMagicOutput;
 373         char *szVetoFiles;
 374         char *szHideFiles;
 375         char *szVetoOplockFiles;
 376         char *comment;
 377         char *force_user;
 378         char *force_group;
 379         char **readlist;
 380         char **writelist;
 381         char **printer_admin;
 382         char *volume;
 383         char *fstype;
 384         char **szVfsObjects;
 385         char *szMSDfsProxy;
 386         char *szAioWriteBehind;
 387         char *szDfree;
 388         int iMinPrintSpace;
 389         int iMaxPrintJobs;
 390         int iMaxReportedPrintJobs;
 391         int iWriteCacheSize;
 392         int iCreate_mask;
 393         int iCreate_force_mode;
 394         int iSecurity_mask;
 395         int iSecurity_force_mode;
 396         int iDir_mask;
 397         int iDir_force_mode;
 398         int iDir_Security_mask;
 399         int iDir_Security_force_mode;
 400         int iMaxConnections;
 401         int iDefaultCase;
 402         int iPrinting;
 403         int iOplockContentionLimit;
 404         int iCSCPolicy;
 405         int iBlock_size;
 406         int iDfreeCacheTime;
 407         bool bPreexecClose;
 408         bool bRootpreexecClose;
 409         int  iCaseSensitive;
 410         bool bCasePreserve;
 411         bool bShortCasePreserve;
 412         bool bHideDotFiles;
 413         bool bHideSpecialFiles;
 414         bool bHideUnReadable;
 415         bool bHideUnWriteableFiles;
 416         bool bBrowseable;
 417         bool bAvailable;
 418         bool bRead_only;
 419         bool bNo_set_dir;
 420         bool bGuest_only;
 421         bool bGuest_ok;
 422         bool bPrint_ok;
 423         bool bMap_system;
 424         bool bMap_hidden;
 425         bool bMap_archive;
 426         bool bStoreDosAttributes;
 427         bool bDmapiSupport;
 428         bool bLocking;
 429         int iStrictLocking;
 430         bool bPosixLocking;
 431         bool bShareModes;
 432         bool bOpLocks;
 433         bool bLevel2OpLocks;
 434         bool bOnlyUser;
 435         bool bMangledNames;
 436         bool bWidelinks;
 437         bool bSymlinks;
 438         bool bSyncAlways;
 439         bool bStrictAllocate;
 440         bool bStrictSync;
 441         char magic_char;
 442         struct bitmap *copymap;
 443         bool bDeleteReadonly;
 444         bool bFakeOplocks;
 445         bool bDeleteVetoFiles;
 446         bool bDosFilemode;
 447         bool bDosFiletimes;
 448         bool bDosFiletimeResolution;
 449         bool bFakeDirCreateTimes;
 450         bool bBlockingLocks;
 451         bool bInheritPerms;
 452         bool bInheritACLS;
 453         bool bInheritOwner;
 454         bool bMSDfsRoot;
 455         bool bUseClientDriver;
 456         bool bDefaultDevmode;
 457         bool bForcePrintername;
 458         bool bNTAclSupport;
 459         bool bForceUnknownAclUser;
 460         bool bUseSendfile;
 461         bool bProfileAcls;
 462         bool bMap_acl_inherit;
 463         bool bAfs_Share;
 464         bool bEASupport;
 465         bool bAclCheckPermissions;
 466         bool bAclMapFullControl;
 467         bool bAclGroupControl;
 468         bool bChangeNotify;
 469         bool bKernelChangeNotify;
 470         int iallocation_roundup_size;
 471         int iAioReadSize;
 472         int iAioWriteSize;
 473         int iMap_readonly;
 474         int iDirectoryNameCacheSize;
 475         param_opt_struct *param_opt;
 476
 477         char dummy[3];          /* for alignment */
 478 } service;
 479
 480
 481 /* This is a default service used to prime a services structure */
 482 static service sDefault = {
 483         True,                   /* valid */
 484         False,                  /* not autoloaded */
 485         0,                      /* not a usershare */
 486         (time_t)0,              /* No last mod time */
 487         NULL,                   /* szService */
 488         NULL,                   /* szPath */
 489         NULL,                   /* szUsername */
 490         NULL,                   /* szInvalidUsers */
 491         NULL,                   /* szValidUsers */
 492         NULL,                   /* szAdminUsers */
 493         NULL,                   /* szCopy */
 494         NULL,                   /* szInclude */
 495         NULL,                   /* szPreExec */
 496         NULL,                   /* szPostExec */
 497         NULL,                   /* szRootPreExec */
 498         NULL,                   /* szRootPostExec */
 499         NULL,                   /* szCupsOptions */
 500         NULL,                   /* szPrintcommand */
 501         NULL,                   /* szLpqcommand */
 502         NULL,                   /* szLprmcommand */
 503         NULL,                   /* szLppausecommand */
 504         NULL,                   /* szLpresumecommand */
 505         NULL,                   /* szQueuepausecommand */
 506         NULL,                   /* szQueueresumecommand */
 507         NULL,                   /* szPrintername */
 508         NULL,                   /* szPrintjobUsername */
 509         NULL,                   /* szDontdescend */
 510         NULL,                   /* szHostsallow */
 511         NULL,                   /* szHostsdeny */
 512         NULL,                   /* szMagicScript */
 513         NULL,                   /* szMagicOutput */
 514         NULL,                   /* szVetoFiles */
 515         NULL,                   /* szHideFiles */
 516         NULL,                   /* szVetoOplockFiles */
 517         NULL,                   /* comment */
 518         NULL,                   /* force user */
 519         NULL,                   /* force group */
 520         NULL,                   /* readlist */
 521         NULL,                   /* writelist */
 522         NULL,                   /* printer admin */
 523         NULL,                   /* volume */
 524         NULL,                   /* fstype */
 525         NULL,                   /* vfs objects */
 526         NULL,                   /* szMSDfsProxy */
 527         NULL,                   /* szAioWriteBehind */
 528         NULL,                   /* szDfree */
 529         0,                      /* iMinPrintSpace */
 530         1000,                   /* iMaxPrintJobs */
 531         0,                      /* iMaxReportedPrintJobs */
 532         0,                      /* iWriteCacheSize */
 533         0744,                   /* iCreate_mask */
 534         0000,                   /* iCreate_force_mode */
 535         0777,                   /* iSecurity_mask */
 536         0,                      /* iSecurity_force_mode */
 537         0755,                   /* iDir_mask */
 538         0000,                   /* iDir_force_mode */
 539         0777,                   /* iDir_Security_mask */
 540         0,                      /* iDir_Security_force_mode */
 541         0,                      /* iMaxConnections */
 542         CASE_LOWER,             /* iDefaultCase */
 543         DEFAULT_PRINTING,       /* iPrinting */
 544         2,                      /* iOplockContentionLimit */
 545         0,                      /* iCSCPolicy */
 546         1024,                   /* iBlock_size */
 547         0,                      /* iDfreeCacheTime */
 548         False,                  /* bPreexecClose */
 549         False,                  /* bRootpreexecClose */
 550         Auto,                   /* case sensitive */
 551         True,                   /* case preserve */
 552         True,                   /* short case preserve */
 553         True,                   /* bHideDotFiles */
 554         False,                  /* bHideSpecialFiles */
 555         False,                  /* bHideUnReadable */
 556         False,                  /* bHideUnWriteableFiles */
 557         True,                   /* bBrowseable */
 558         True,                   /* bAvailable */
 559         True,                   /* bRead_only */
 560         True,                   /* bNo_set_dir */
 561         False,                  /* bGuest_only */
 562         False,                  /* bGuest_ok */
 563         False,                  /* bPrint_ok */
 564         False,                  /* bMap_system */
 565         False,                  /* bMap_hidden */
 566         True,                   /* bMap_archive */
 567         False,                  /* bStoreDosAttributes */
 568         False,                  /* bDmapiSupport */
 569         True,                   /* bLocking */
 570         Auto,                   /* iStrictLocking */
 571         True,                   /* bPosixLocking */
 572         True,                   /* bShareModes */
 573         True,                   /* bOpLocks */
 574         True,                   /* bLevel2OpLocks */
 575         False,                  /* bOnlyUser */
 576         True,                   /* bMangledNames */
 577         True,                   /* bWidelinks */
 578         True,                   /* bSymlinks */
 579         False,                  /* bSyncAlways */
 580         False,                  /* bStrictAllocate */
 581         False,                  /* bStrictSync */
 582         '~',                    /* magic char */
 583         NULL,                   /* copymap */
 584         False,                  /* bDeleteReadonly */
 585         False,                  /* bFakeOplocks */
 586         False,                  /* bDeleteVetoFiles */
 587         False,                  /* bDosFilemode */
 588         True,                   /* bDosFiletimes */
 589         False,                  /* bDosFiletimeResolution */
 590         False,                  /* bFakeDirCreateTimes */
 591         True,                   /* bBlockingLocks */
 592         False,                  /* bInheritPerms */
 593         False,                  /* bInheritACLS */
 594         False,                  /* bInheritOwner */
 595         False,                  /* bMSDfsRoot */
 596         False,                  /* bUseClientDriver */
 597         True,                   /* bDefaultDevmode */
 598         False,                  /* bForcePrintername */
 599         True,                   /* bNTAclSupport */
 600         False,                  /* bForceUnknownAclUser */
 601         False,                  /* bUseSendfile */
 602         False,                  /* bProfileAcls */
 603         False,                  /* bMap_acl_inherit */
 604         False,                  /* bAfs_Share */
 605         False,                  /* bEASupport */
 606         True,                   /* bAclCheckPermissions */
 607         True,                   /* bAclMapFullControl */
 608         False,                  /* bAclGroupControl */
 609         True,                   /* bChangeNotify */
 610         True,                   /* bKernelChangeNotify */
 611         SMB_ROUNDUP_ALLOCATION_SIZE,            /* iallocation_roundup_size */
 612         0,                      /* iAioReadSize */
 613         0,                      /* iAioWriteSize */
 614         MAP_READONLY_YES,       /* iMap_readonly */
 615 #ifdef BROKEN_DIRECTORY_HANDLING
 616         0,                      /* iDirectoryNameCacheSize */
 617 #else
 618         100,                    /* iDirectoryNameCacheSize */
 619 #endif
 620         NULL,                   /* Parametric options */
 621
 622         ""                      /* dummy */
 623 };
 624
 625 /* local variables */
 626 static service **ServicePtrs = NULL;
 627 static int iNumServices = 0;
 628 static int iServiceIndex = 0;
 629 static struct db_context *ServiceHash;
 630 static int *invalid_services = NULL;
 631 static int num_invalid_services = 0;
 632 static bool bInGlobalSection = True;
 633 static bool bGlobalOnly = False;
 634 static int server_role;
 635 static int default_server_announce;
 636
 637 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
 638
 639 /* prototypes for the special type handlers */
 640 static bool handle_include( int snum, const char *pszParmValue, char **ptr);
 641 static bool handle_copy( int snum, const char *pszParmValue, char **ptr);
 642 static bool handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
 643 static bool handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
 644 static bool handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
 645 static bool handle_debug_list( int snum, const char *pszParmValue, char **ptr );
 646 static bool handle_workgroup( int snum, const char *pszParmValue, char **ptr );
 647 static bool handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
 648 static bool handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
 649 static bool handle_charset( int snum, const char *pszParmValue, char **ptr );
 650 static bool handle_printing( int snum, const char *pszParmValue, char **ptr);
 651
 652 static void set_server_role(void);
 653 static void set_default_server_announce_type(void);
 654 static void set_allowed_client_auth(void);
 655
 656 static const struct enum_list enum_protocol[] = {
 657         {PROTOCOL_NT1, "NT1"},
 658         {PROTOCOL_LANMAN2, "LANMAN2"},
 659         {PROTOCOL_LANMAN1, "LANMAN1"},
 660         {PROTOCOL_CORE, "CORE"},
 661         {PROTOCOL_COREPLUS, "COREPLUS"},
 662         {PROTOCOL_COREPLUS, "CORE+"},
 663         {-1, NULL}
 664 };
 665
 666 static const struct enum_list enum_security[] = {
 667         {SEC_SHARE, "SHARE"},
 668         {SEC_USER, "USER"},
 669         {SEC_SERVER, "SERVER"},
 670         {SEC_DOMAIN, "DOMAIN"},
 671 #ifdef HAVE_ADS
 672         {SEC_ADS, "ADS"},
 673 #endif
 674         {-1, NULL}
 675 };
 676
 677 static const struct enum_list enum_printing[] = {
 678         {PRINT_SYSV, "sysv"},
 679         {PRINT_AIX, "aix"},
 680         {PRINT_HPUX, "hpux"},
 681         {PRINT_BSD, "bsd"},
 682         {PRINT_QNX, "qnx"},
 683         {PRINT_PLP, "plp"},
 684         {PRINT_LPRNG, "lprng"},
 685         {PRINT_CUPS, "cups"},
 686         {PRINT_IPRINT, "iprint"},
 687         {PRINT_LPRNT, "nt"},
 688         {PRINT_LPROS2, "os2"},
 689 #ifdef DEVELOPER
 690         {PRINT_TEST, "test"},
 691         {PRINT_VLP, "vlp"},
 692 #endif /* DEVELOPER */
 693         {-1, NULL}
 694 };
 695
 696 static const struct enum_list enum_ldap_sasl_wrapping[] = {
 697         {0, "plain"},
 698         {ADS_AUTH_SASL_SIGN, "sign"},
 699         {ADS_AUTH_SASL_SEAL, "seal"},
 700         {-1, NULL}
 701 };
 702
 703 static const struct enum_list enum_ldap_ssl[] = {
 704         {LDAP_SSL_OFF, "no"},
 705         {LDAP_SSL_OFF, "No"},
 706         {LDAP_SSL_OFF, "off"},
 707         {LDAP_SSL_OFF, "Off"},
 708         {LDAP_SSL_START_TLS, "start tls"},
 709         {LDAP_SSL_START_TLS, "Start_tls"},
 710         {-1, NULL}
 711 };
 712
 713 static const struct enum_list enum_ldap_passwd_sync[] = {
 714         {LDAP_PASSWD_SYNC_OFF, "no"},
 715         {LDAP_PASSWD_SYNC_OFF, "No"},
 716         {LDAP_PASSWD_SYNC_OFF, "off"},
 717         {LDAP_PASSWD_SYNC_OFF, "Off"},
 718         {LDAP_PASSWD_SYNC_ON, "Yes"},
 719         {LDAP_PASSWD_SYNC_ON, "yes"},
 720         {LDAP_PASSWD_SYNC_ON, "on"},
 721         {LDAP_PASSWD_SYNC_ON, "On"},
 722         {LDAP_PASSWD_SYNC_ONLY, "Only"},
 723         {LDAP_PASSWD_SYNC_ONLY, "only"},
 724         {-1, NULL}
 725 };
 726
 727 /* Types of machine we can announce as. */
 728 #define ANNOUNCE_AS_NT_SERVER 1
 729 #define ANNOUNCE_AS_WIN95 2
 730 #define ANNOUNCE_AS_WFW 3
 731 #define ANNOUNCE_AS_NT_WORKSTATION 4
 732
 733 static const struct enum_list enum_announce_as[] = {
 734         {ANNOUNCE_AS_NT_SERVER, "NT"},
 735         {ANNOUNCE_AS_NT_SERVER, "NT Server"},
 736         {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
 737         {ANNOUNCE_AS_WIN95, "win95"},
 738         {ANNOUNCE_AS_WFW, "WfW"},
 739         {-1, NULL}
 740 };
 741
 742 static const struct enum_list enum_map_readonly[] = {
 743         {MAP_READONLY_NO, "no"},
 744         {MAP_READONLY_NO, "false"},
 745         {MAP_READONLY_NO, "0"},
 746         {MAP_READONLY_YES, "yes"},
 747         {MAP_READONLY_YES, "true"},
 748         {MAP_READONLY_YES, "1"},
 749         {MAP_READONLY_PERMISSIONS, "permissions"},
 750         {MAP_READONLY_PERMISSIONS, "perms"},
 751         {-1, NULL}
 752 };
 753
 754 static const struct enum_list enum_case[] = {
 755         {CASE_LOWER, "lower"},
 756         {CASE_UPPER, "upper"},
 757         {-1, NULL}
 758 };
 759
 760 static const struct enum_list enum_bool_auto[] = {
 761         {False, "No"},
 762         {False, "False"},
 763         {False, "0"},
 764         {True, "Yes"},
 765         {True, "True"},
 766         {True, "1"},
 767         {Auto, "Auto"},
 768         {-1, NULL}
 769 };
 770
 771 /* Client-side offline caching policy types */
 772 #define CSC_POLICY_MANUAL 0
 773 #define CSC_POLICY_DOCUMENTS 1
 774 #define CSC_POLICY_PROGRAMS 2
 775 #define CSC_POLICY_DISABLE 3
 776
 777 static const struct enum_list enum_csc_policy[] = {
 778         {CSC_POLICY_MANUAL, "manual"},
 779         {CSC_POLICY_DOCUMENTS, "documents"},
 780         {CSC_POLICY_PROGRAMS, "programs"},
 781         {CSC_POLICY_DISABLE, "disable"},
 782         {-1, NULL}
 783 };
 784
 785 /* SMB signing types. */
 786 static const struct enum_list enum_smb_signing_vals[] = {
 787         {False, "No"},
 788         {False, "False"},
 789         {False, "0"},
 790         {False, "Off"},
 791         {False, "disabled"},
 792         {True, "Yes"},
 793         {True, "True"},
 794         {True, "1"},
 795         {True, "On"},
 796         {True, "enabled"},
 797         {Auto, "auto"},
 798         {Required, "required"},
 799         {Required, "mandatory"},
 800         {Required, "force"},
 801         {Required, "forced"},
 802         {Required, "enforced"},
 803         {-1, NULL}
 804 };
 805
 806 /* ACL compatibility options. */
 807 static const struct enum_list enum_acl_compat_vals[] = {
 808     { ACL_COMPAT_AUTO, "auto" },
 809     { ACL_COMPAT_WINNT, "winnt" },
 810     { ACL_COMPAT_WIN2K, "win2k" },
 811     { -1, NULL}
 812 };
 813
 814 /*
 815    Do you want session setups at user level security with a invalid
 816    password to be rejected or allowed in as guest? WinNT rejects them
 817    but it can be a pain as it means "net view" needs to use a password
 818
 819    You have 3 choices in the setting of map_to_guest:
 820
 821    "Never" means session setups with an invalid password
 822    are rejected. This is the default.
 823
 824    "Bad User" means session setups with an invalid password
 825    are rejected, unless the username does not exist, in which case it
 826    is treated as a guest login
 827
 828    "Bad Password" means session setups with an invalid password
 829    are treated as a guest login
 830
 831    Note that map_to_guest only has an effect in user or server
 832    level security.
 833 */
 834
 835 static const struct enum_list enum_map_to_guest[] = {
 836         {NEVER_MAP_TO_GUEST, "Never"},
 837         {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
 838         {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
 839         {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
 840         {-1, NULL}
 841 };
 842
 843 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
 844  *
 845  * The FLAG_HIDE is explicit. Paramters set this way do NOT appear in any edit
 846  * screen in SWAT. This is used to exclude parameters as well as to squash all
 847  * parameters that have been duplicated by pseudonyms.
 848  *
 849  * NOTE: To display a parameter in BASIC view set FLAG_BASIC
 850  *       Any parameter that does NOT have FLAG_ADVANCED will not disply at all
 851  *       Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
 852  *        respective views.
 853  *
 854  * NOTE2: Handling of duplicated (synonym) paramters:
 855  *      Only the first occurance of a parameter should be enabled by FLAG_BASIC
 856  *      and/or FLAG_ADVANCED. All duplicates following the first mention should be
 857  *      set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
 858  *      name first, and all synonyms must follow it with the FLAG_HIDE attribute.
 859  */
 860
 861 static struct parm_struct parm_table[] = {
 862         {N_("Base Options"), P_SEP, P_SEPARATOR},
 863
 864         {"dos charset", P_STRING, P_GLOBAL, &Globals.dos_charset, handle_charset, NULL, FLAG_ADVANCED},
 865         {"unix charset", P_STRING, P_GLOBAL, &Globals.unix_charset, handle_charset, NULL, FLAG_ADVANCED},
 866         {"display charset", P_STRING, P_GLOBAL, &Globals.display_charset, handle_charset, NULL, FLAG_ADVANCED},
 867         {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 868         {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 869         {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_HIDE},
 870         {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkgroup, handle_workgroup, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 871 #ifdef WITH_ADS
 872         {"realm", P_USTRING, P_GLOBAL, &Globals.szRealm, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 873 #endif
 874         {"netbios name", P_USTRING, P_GLOBAL, &Globals.szNetbiosName, handle_netbios_name, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 875         {"netbios aliases", P_LIST, P_GLOBAL, &Globals.szNetbiosAliases, handle_netbios_aliases,  NULL, FLAG_ADVANCED},
 876         {"netbios scope", P_USTRING, P_GLOBAL, &Globals.szNetbiosScope, handle_netbios_scope,  NULL, FLAG_ADVANCED},
 877         {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED },
 878         {"interfaces", P_LIST, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 879         {"bind interfaces only", P_BOOL, P_GLOBAL, &Globals.bBindInterfacesOnly, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 880
 881         {N_("Security Options"), P_SEP, P_SEPARATOR},
 882
 883         {"security", P_ENUM, P_GLOBAL, &Globals.security, NULL, enum_security, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 884         {"auth methods", P_LIST, P_GLOBAL, &Globals.AuthMethods, NULL, NULL, FLAG_ADVANCED},
 885         {"encrypt passwords", P_BOOL, P_GLOBAL, &Globals.bEncryptPasswords, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 886         {"update encrypted", P_BOOL, P_GLOBAL, &Globals.bUpdateEncrypt, NULL, NULL, FLAG_ADVANCED},
 887         {"client schannel", P_ENUM, P_GLOBAL, &Globals.clientSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 888         {"server schannel", P_ENUM, P_GLOBAL, &Globals.serverSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 889         {"allow trusted domains", P_BOOL, P_GLOBAL, &Globals.bAllowTrustedDomains, NULL, NULL, FLAG_ADVANCED},
 890         {"map to guest", P_ENUM, P_GLOBAL, &Globals.map_to_guest, NULL, enum_map_to_guest, FLAG_ADVANCED},
 891         {"null passwords", P_BOOL, P_GLOBAL, &Globals.bNullPasswords, NULL, NULL, FLAG_ADVANCED},
 892         {"obey pam restrictions", P_BOOL, P_GLOBAL, &Globals.bObeyPamRestrictions, NULL, NULL, FLAG_ADVANCED},
 893         {"password server", P_STRING, P_GLOBAL, &Globals.szPasswordServer, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 894         {"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, FLAG_ADVANCED},
 895         {"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, FLAG_ADVANCED},
 896         {"passdb backend", P_STRING, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 897         {"algorithmic rid base", P_INTEGER, P_GLOBAL, &Globals.AlgorithmicRidBase, NULL, NULL, FLAG_ADVANCED},
 898         {"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_ADVANCED},
 899         {"root dir", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 900         {"root", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 901         {"guest account", P_STRING, P_GLOBAL, &Globals.szGuestaccount, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
 902         {"enable privileges", P_BOOL, P_GLOBAL, &Globals.bEnablePrivileges, NULL, NULL, FLAG_ADVANCED},
 903
 904         {"pam password change", P_BOOL, P_GLOBAL, &Globals.bPamPasswordChange, NULL, NULL, FLAG_ADVANCED},
 905         {"passwd program", P_STRING, P_GLOBAL, &Globals.szPasswdProgram, NULL, NULL, FLAG_ADVANCED},
 906         {"passwd chat", P_STRING, P_GLOBAL, &Globals.szPasswdChat, NULL, NULL, FLAG_ADVANCED},
 907         {"passwd chat debug", P_BOOL, P_GLOBAL, &Globals.bPasswdChatDebug, NULL, NULL, FLAG_ADVANCED},
 908         {"passwd chat timeout", P_INTEGER, P_GLOBAL, &Globals.iPasswdChatTimeout, NULL, NULL, FLAG_ADVANCED},
 909         {"check password script", P_STRING, P_GLOBAL, &Globals.szCheckPasswordScript, NULL, NULL, FLAG_ADVANCED},
 910         {"username map", P_STRING, P_GLOBAL, &Globals.szUsernameMap, NULL, NULL, FLAG_ADVANCED},
 911         {"password level", P_INTEGER, P_GLOBAL, &Globals.pwordlevel, NULL, NULL, FLAG_ADVANCED},
 912         {"username level", P_INTEGER, P_GLOBAL, &Globals.unamelevel, NULL, NULL, FLAG_ADVANCED},
 913         {"unix password sync", P_BOOL, P_GLOBAL, &Globals.bUnixPasswdSync, NULL, NULL, FLAG_ADVANCED},
 914         {"restrict anonymous", P_INTEGER, P_GLOBAL, &Globals.restrict_anonymous, NULL, NULL, FLAG_ADVANCED},
 915         {"lanman auth", P_BOOL, P_GLOBAL, &Globals.bLanmanAuth, NULL, NULL, FLAG_ADVANCED},
 916         {"ntlm auth", P_BOOL, P_GLOBAL, &Globals.bNTLMAuth, NULL, NULL, FLAG_ADVANCED},
 917         {"client NTLMv2 auth", P_BOOL, P_GLOBAL, &Globals.bClientNTLMv2Auth, NULL, NULL, FLAG_ADVANCED},
 918         {"client lanman auth", P_BOOL, P_GLOBAL, &Globals.bClientLanManAuth, NULL, NULL, FLAG_ADVANCED},
 919         {"client plaintext auth", P_BOOL, P_GLOBAL, &Globals.bClientPlaintextAuth, NULL, NULL, FLAG_ADVANCED},
 920
 921         {"username", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 922         {"user", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 923         {"users", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 924
 925         {"invalid users", P_LIST, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 926         {"valid users", P_LIST, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 927         {"admin users", P_LIST, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 928         {"read list", P_LIST, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 929         {"write list", P_LIST, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 930         {"printer admin", P_LIST, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED },
 931         {"force user", P_STRING, P_LOCAL, &sDefault.force_user, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 932         {"force group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 933         {"group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED},
 934
 935         {"read only", P_BOOL, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE},
 936         {"write ok", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 937         {"writeable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 938         {"writable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 939
 940         {"acl check permissions", P_BOOL, P_LOCAL, &sDefault.bAclCheckPermissions, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 941         {"acl group control", P_BOOL, P_LOCAL, &sDefault.bAclGroupControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE | FLAG_DEPRECATED },
 942         {"acl map full control", P_BOOL, P_LOCAL, &sDefault.bAclMapFullControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 943         {"create mask", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 944         {"create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_HIDE},
 945         {"force create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 946         {"security mask", P_OCTAL, P_LOCAL, &sDefault.iSecurity_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 947         {"force security mode", P_OCTAL, P_LOCAL, &sDefault.iSecurity_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 948         {"directory mask", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 949         {"directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 950         {"force directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 951         {"directory security mask", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 952         {"force directory security mode", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 953         {"force unknown acl user", P_BOOL, P_LOCAL, &sDefault.bForceUnknownAclUser, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 954         {"inherit permissions", P_BOOL, P_LOCAL, &sDefault.bInheritPerms, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 955         {"inherit acls", P_BOOL, P_LOCAL, &sDefault.bInheritACLS, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 956         {"inherit owner", P_BOOL, P_LOCAL, &sDefault.bInheritOwner, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 957         {"guest only", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 958         {"only guest", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_HIDE},
 959
 960         {"guest ok", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 961         {"public", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_HIDE},
 962
 963         {"only user", P_BOOL, P_LOCAL, &sDefault.bOnlyUser, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
 964         {"hosts allow", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 965         {"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_HIDE},
 966         {"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 967         {"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_HIDE},
 968         {"preload modules", P_LIST, P_GLOBAL, &Globals.szPreloadModules, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 969         {"use kerberos keytab", P_BOOL, P_GLOBAL, &Globals.bUseKerberosKeytab, NULL, NULL, FLAG_ADVANCED},
 970
 971         {N_("Logging Options"), P_SEP, P_SEPARATOR},
 972
 973         {"log level", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_ADVANCED},
 974         {"debuglevel", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_HIDE},
 975         {"syslog", P_INTEGER, P_GLOBAL, &Globals.syslog, NULL, NULL, FLAG_ADVANCED},
 976         {"syslog only", P_BOOL, P_GLOBAL, &Globals.bSyslogOnly, NULL, NULL, FLAG_ADVANCED},
 977         {"log file", P_STRING, P_GLOBAL, &Globals.szLogFile, NULL, NULL, FLAG_ADVANCED},
 978
 979         {"max log size", P_INTEGER, P_GLOBAL, &Globals.max_log_size, NULL, NULL, FLAG_ADVANCED},
 980         {"debug timestamp", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 981         {"timestamp logs", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 982         {"debug prefix timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugPrefixTimestamp, NULL, NULL, FLAG_ADVANCED},
 983         {"debug hires timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugHiresTimestamp, NULL, NULL, FLAG_ADVANCED},
 984         {"debug pid", P_BOOL, P_GLOBAL, &Globals.bDebugPid, NULL, NULL, FLAG_ADVANCED},
 985         {"debug uid", P_BOOL, P_GLOBAL, &Globals.bDebugUid, NULL, NULL, FLAG_ADVANCED},
 986         {"debug class", P_BOOL, P_GLOBAL, &Globals.bDebugClass, NULL, NULL, FLAG_ADVANCED},
 987         {"enable core files", P_BOOL, P_GLOBAL, &Globals.bEnableCoreFiles, NULL, NULL, FLAG_ADVANCED},
 988
 989         {N_("Protocol Options"), P_SEP, P_SEPARATOR},
 990
 991         {"allocation roundup size", P_INTEGER, P_LOCAL, &sDefault.iallocation_roundup_size, NULL, NULL, FLAG_ADVANCED},
 992         {"aio read size", P_INTEGER, P_LOCAL, &sDefault.iAioReadSize, NULL, NULL, FLAG_ADVANCED},
 993         {"aio write size", P_INTEGER, P_LOCAL, &sDefault.iAioWriteSize, NULL, NULL, FLAG_ADVANCED},
 994         {"aio write behind", P_STRING, P_LOCAL, &sDefault.szAioWriteBehind, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
 995         {"smb ports", P_STRING, P_GLOBAL, &Globals.smb_ports, NULL, NULL, FLAG_ADVANCED},
 996         {"large readwrite", P_BOOL, P_GLOBAL, &Globals.bLargeReadwrite, NULL, NULL, FLAG_ADVANCED},
 997         {"max protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 998         {"protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 999         {"min protocol", P_ENUM, P_GLOBAL, &Globals.minprotocol, NULL, enum_protocol, FLAG_ADVANCED},
1000         {"min receivefile size", P_INTEGER, P_GLOBAL, &Globals.iminreceivefile, NULL, NULL, FLAG_ADVANCED},
1001         {"read raw", P_BOOL, P_GLOBAL, &Globals.bReadRaw, NULL, NULL, FLAG_ADVANCED},
1002         {"write raw", P_BOOL, P_GLOBAL, &Globals.bWriteRaw, NULL, NULL, FLAG_ADVANCED},
1003         {"disable netbios", P_BOOL, P_GLOBAL, &Globals.bDisableNetbios, NULL, NULL, FLAG_ADVANCED},
1004         {"reset on zero vc", P_BOOL, P_GLOBAL, &Globals.bResetOnZeroVC, NULL, NULL, FLAG_ADVANCED},
1005
1006         {"acl compatibility", P_ENUM, P_GLOBAL, &Globals.iAclCompat, NULL,  enum_acl_compat_vals, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1007         {"defer sharing violations", P_BOOL, P_GLOBAL, &Globals.bDeferSharingViolations, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1008         {"ea support", P_BOOL, P_LOCAL, &sDefault.bEASupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1009         {"nt acl support", P_BOOL, P_LOCAL, &sDefault.bNTAclSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1010         {"nt pipe support", P_BOOL, P_GLOBAL, &Globals.bNTPipeSupport, NULL, NULL, FLAG_ADVANCED},
1011         {"nt status support", P_BOOL, P_GLOBAL, &Globals.bNTStatusSupport, NULL, NULL, FLAG_ADVANCED},
1012         {"profile acls", P_BOOL, P_LOCAL, &sDefault.bProfileAcls, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
1013
1014         {"announce version", P_STRING, P_GLOBAL, &Globals.szAnnounceVersion, NULL, NULL, FLAG_ADVANCED},
1015         {"announce as", P_ENUM, P_GLOBAL, &Globals.announce_as, NULL, enum_announce_as,  FLAG_ADVANCED},
1016         {"map acl inherit", P_BOOL, P_LOCAL, &sDefault.bMap_acl_inherit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1017         {"afs share", P_BOOL, P_LOCAL, &sDefault.bAfs_Share, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1018         {"max mux", P_INTEGER, P_GLOBAL, &Globals.max_mux, NULL, NULL, FLAG_ADVANCED},
1019         {"max xmit", P_INTEGER, P_GLOBAL, &Globals.max_xmit, NULL, NULL, FLAG_ADVANCED},
1020
1021         {"name resolve order", P_STRING, P_GLOBAL, &Globals.szNameResolveOrder, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1022         {"max ttl", P_INTEGER, P_GLOBAL, &Globals.max_ttl, NULL, NULL, FLAG_ADVANCED},
1023         {"max wins ttl", P_INTEGER, P_GLOBAL, &Globals.max_wins_ttl, NULL, NULL, FLAG_ADVANCED},
1024         {"min wins ttl", P_INTEGER, P_GLOBAL, &Globals.min_wins_ttl, NULL, NULL, FLAG_ADVANCED},
1025         {"time server", P_BOOL, P_GLOBAL, &Globals.bTimeServer, NULL, NULL, FLAG_ADVANCED},
1026         {"unix extensions", P_BOOL, P_GLOBAL, &Globals.bUnixExtensions, NULL, NULL, FLAG_ADVANCED},
1027         {"use spnego", P_BOOL, P_GLOBAL, &Globals.bUseSpnego, NULL, NULL, FLAG_ADVANCED},
1028         {"client signing", P_ENUM, P_GLOBAL, &Globals.client_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1029         {"server signing", P_ENUM, P_GLOBAL, &Globals.server_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1030         {"client use spnego", P_BOOL, P_GLOBAL, &Globals.bClientUseSpnego, NULL, NULL, FLAG_ADVANCED},
1031         {"client ldap sasl wrapping", P_ENUM, P_GLOBAL, &Globals.client_ldap_sasl_wrapping, NULL, enum_ldap_sasl_wrapping, FLAG_ADVANCED},
1032         {"enable asu support", P_BOOL, P_GLOBAL, &Globals.bASUSupport, NULL, NULL, FLAG_ADVANCED},
1033         {"svcctl list", P_LIST, P_GLOBAL, &Globals.szServicesList, NULL, NULL, FLAG_ADVANCED},
1034
1035         {N_("Tuning Options"), P_SEP, P_SEPARATOR},
1036
1037         {"block size", P_INTEGER, P_LOCAL, &sDefault.iBlock_size, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1038         {"deadtime", P_INTEGER, P_GLOBAL, &Globals.deadtime, NULL, NULL, FLAG_ADVANCED},
1039         {"getwd cache", P_BOOL, P_GLOBAL, &Globals.getwd_cache, NULL, NULL, FLAG_ADVANCED},
1040         {"keepalive", P_INTEGER, P_GLOBAL, &Globals.iKeepalive, NULL, NULL, FLAG_ADVANCED},
1041         {"change notify", P_BOOL, P_LOCAL, &sDefault.bChangeNotify, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1042         {"directory name cache size", P_INTEGER, P_LOCAL, &sDefault.iDirectoryNameCacheSize, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1043         {"kernel change notify", P_BOOL, P_LOCAL, &sDefault.bKernelChangeNotify, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1044
1045         {"lpq cache time", P_INTEGER, P_GLOBAL, &Globals.lpqcachetime, NULL, NULL, FLAG_ADVANCED},
1046         {"max smbd processes", P_INTEGER, P_GLOBAL, &Globals.iMaxSmbdProcesses, NULL, NULL, FLAG_ADVANCED},
1047         {"max connections", P_INTEGER, P_LOCAL, &sDefault.iMaxConnections, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1048         {"paranoid server security", P_BOOL, P_GLOBAL, &Globals.paranoid_server_security, NULL, NULL, FLAG_ADVANCED},
1049         {"max disk size", P_INTEGER, P_GLOBAL, &Globals.maxdisksize, NULL, NULL, FLAG_ADVANCED},
1050         {"max open files", P_INTEGER, P_GLOBAL, &Globals.max_open_files, NULL, NULL, FLAG_ADVANCED},
1051         {"min print space", P_INTEGER, P_LOCAL, &sDefault.iMinPrintSpace, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1052
1053         {"socket options", P_STRING, P_GLOBAL, &Globals.szSocketOptions, NULL, NULL, FLAG_ADVANCED},
1054         {"strict allocate", P_BOOL, P_LOCAL, &sDefault.bStrictAllocate, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1055         {"strict sync", P_BOOL, P_LOCAL, &sDefault.bStrictSync, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1056         {"sync always", P_BOOL, P_LOCAL, &sDefault.bSyncAlways, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1057         {"use mmap", P_BOOL, P_GLOBAL, &Globals.bUseMmap, NULL, NULL, FLAG_ADVANCED},
1058         {"use sendfile", P_BOOL, P_LOCAL, &sDefault.bUseSendfile, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1059         {"hostname lookups", P_BOOL, P_GLOBAL, &Globals.bHostnameLookups, NULL, NULL, FLAG_ADVANCED},
1060         {"write cache size", P_INTEGER, P_LOCAL, &sDefault.iWriteCacheSize, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
1061
1062         {"name cache timeout", P_INTEGER, P_GLOBAL, &Globals.name_cache_timeout, NULL, NULL, FLAG_ADVANCED},
1063         {"ctdbd socket", P_STRING, P_GLOBAL, &Globals.ctdbdSocket, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1064         {"cluster addresses", P_LIST, P_GLOBAL, &Globals.szClusterAddresses, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1065         {"clustering", P_BOOL, P_GLOBAL, &Globals.clustering, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1066
1067         {N_("Printing Options"), P_SEP, P_SEPARATOR},
1068
1069         {"max reported print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxReportedPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1070         {"max print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1071         {"load printers", P_BOOL, P_GLOBAL, &Globals.bLoadPrinters, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1072         {"printcap cache time", P_INTEGER, P_GLOBAL, &Globals.PrintcapCacheTime, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1073         {"printcap name", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1074         {"printcap", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_HIDE},
1075         {"printable", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1076         {"print ok", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_HIDE},
1077         {"printing", P_ENUM, P_LOCAL, &sDefault.iPrinting, handle_printing, enum_printing, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1078         {"cups options", P_STRING, P_LOCAL, &sDefault.szCupsOptions, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1079         {"cups server", P_STRING, P_GLOBAL, &Globals.szCupsServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1080         {"iprint server", P_STRING, P_GLOBAL, &Globals.szIPrintServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1081         {"print command", P_STRING, P_LOCAL, &sDefault.szPrintcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1082         {"disable spoolss", P_BOOL, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1083         {"enable spoolss", P_BOOLREV, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_HIDE},
1084         {"lpq command", P_STRING, P_LOCAL, &sDefault.szLpqcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1085         {"lprm command", P_STRING, P_LOCAL, &sDefault.szLprmcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1086         {"lppause command", P_STRING, P_LOCAL, &sDefault.szLppausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1087         {"lpresume command", P_STRING, P_LOCAL, &sDefault.szLpresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1088         {"queuepause command", P_STRING, P_LOCAL, &sDefault.szQueuepausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1089         {"queueresume command", P_STRING, P_LOCAL, &sDefault.szQueueresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1090
1091         {"addport command", P_STRING, P_GLOBAL, &Globals.szAddPortCommand, NULL, NULL, FLAG_ADVANCED},
1092         {"enumports command", P_STRING, P_GLOBAL, &Globals.szEnumPortsCommand, NULL, NULL, FLAG_ADVANCED},
1093         {"addprinter command", P_STRING, P_GLOBAL, &Globals.szAddPrinterCommand, NULL, NULL, FLAG_ADVANCED},
1094         {"deleteprinter command", P_STRING, P_GLOBAL, &Globals.szDeletePrinterCommand, NULL, NULL, FLAG_ADVANCED},
1095         {"show add printer wizard", P_BOOL, P_GLOBAL, &Globals.bMsAddPrinterWizard, NULL, NULL, FLAG_ADVANCED},
1096         {"os2 driver map", P_STRING, P_GLOBAL, &Globals.szOs2DriverMap, NULL, NULL, FLAG_ADVANCED},
1097
1098         {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1099         {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_HIDE},
1100         {"use client driver", P_BOOL, P_LOCAL, &sDefault.bUseClientDriver, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1101         {"default devmode", P_BOOL, P_LOCAL, &sDefault.bDefaultDevmode, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1102         {"force printername", P_BOOL, P_LOCAL, &sDefault.bForcePrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1103         {"printjob username", P_STRING, P_LOCAL, &sDefault.szPrintjobUsername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1104
1105         {N_("Filename Handling"), P_SEP, P_SEPARATOR},
1106         {"mangling method", P_STRING, P_GLOBAL, &Globals.szManglingMethod, NULL, NULL, FLAG_ADVANCED},
1107         {"mangle prefix", P_INTEGER, P_GLOBAL, &Globals.mangle_prefix, NULL, NULL, FLAG_ADVANCED},
1108
1109         {"default case", P_ENUM, P_LOCAL, &sDefault.iDefaultCase, NULL, enum_case, FLAG_ADVANCED | FLAG_SHARE},
1110         {"case sensitive", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1111         {"casesignames", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE},
1112         {"preserve case", P_BOOL, P_LOCAL, &sDefault.bCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1113         {"short preserve case", P_BOOL, P_LOCAL, &sDefault.bShortCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1114         {"mangling char", P_CHAR, P_LOCAL, &sDefault.magic_char, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1115         {"hide dot files", P_BOOL, P_LOCAL, &sDefault.bHideDotFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1116         {"hide special files", P_BOOL, P_LOCAL, &sDefault.bHideSpecialFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1117         {"hide unreadable", P_BOOL, P_LOCAL, &sDefault.bHideUnReadable, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1118         {"hide unwriteable files", P_BOOL, P_LOCAL, &sDefault.bHideUnWriteableFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1119         {"delete veto files", P_BOOL, P_LOCAL, &sDefault.bDeleteVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1120         {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1121         {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1122         {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1123         {"map archive", P_BOOL, P_LOCAL, &sDefault.bMap_archive, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1124         {"map hidden", P_BOOL, P_LOCAL, &sDefault.bMap_hidden, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1125         {"map system", P_BOOL, P_LOCAL, &sDefault.bMap_system, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1126         {"map readonly", P_ENUM, P_LOCAL, &sDefault.iMap_readonly, NULL, enum_map_readonly, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1127         {"mangled names", P_BOOL, P_LOCAL, &sDefault.bMangledNames, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1128         {"max stat cache size", P_INTEGER, P_GLOBAL, &Globals.iMaxStatCacheSize, NULL, NULL, FLAG_ADVANCED},
1129         {"stat cache", P_BOOL, P_GLOBAL, &Globals.bStatCache, NULL, NULL, FLAG_ADVANCED},
1130         {"store dos attributes", P_BOOL, P_LOCAL, &sDefault.bStoreDosAttributes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1131         {"dmapi support", P_BOOL, P_LOCAL, &sDefault.bDmapiSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1132
1133
1134         {N_("Domain Options"), P_SEP, P_SEPARATOR},
1135
1136         {"machine password timeout", P_INTEGER, P_GLOBAL, &Globals.machine_password_timeout, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1137
1138         {N_("Logon Options"), P_SEP, P_SEPARATOR},
1139
1140         {"add user script", P_STRING, P_GLOBAL, &Globals.szAddUserScript, NULL, NULL, FLAG_ADVANCED},
1141         {"rename user script", P_STRING, P_GLOBAL, &Globals.szRenameUserScript, NULL, NULL, FLAG_ADVANCED},
1142         {"delete user script", P_STRING, P_GLOBAL, &Globals.szDelUserScript, NULL, NULL, FLAG_ADVANCED},
1143         {"add group script", P_STRING, P_GLOBAL, &Globals.szAddGroupScript, NULL, NULL, FLAG_ADVANCED},
1144         {"delete group script", P_STRING, P_GLOBAL, &Globals.szDelGroupScript, NULL, NULL, FLAG_ADVANCED},
1145         {"add user to group script", P_STRING, P_GLOBAL, &Globals.szAddUserToGroupScript, NULL, NULL, FLAG_ADVANCED},
1146         {"delete user from group script", P_STRING, P_GLOBAL, &Globals.szDelUserFromGroupScript, NULL, NULL, FLAG_ADVANCED},
1147         {"set primary group script", P_STRING, P_GLOBAL, &Globals.szSetPrimaryGroupScript, NULL, NULL, FLAG_ADVANCED},
1148         {"add machine script", P_STRING, P_GLOBAL, &Globals.szAddMachineScript, NULL, NULL, FLAG_ADVANCED},
1149         {"shutdown script", P_STRING, P_GLOBAL, &Globals.szShutdownScript, NULL, NULL, FLAG_ADVANCED},
1150         {"abort shutdown script", P_STRING, P_GLOBAL, &Globals.szAbortShutdownScript, NULL, NULL, FLAG_ADVANCED},
1151         {"username map script", P_STRING, P_GLOBAL, &Globals.szUsernameMapScript, NULL, NULL, FLAG_ADVANCED},
1152
1153         {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, FLAG_ADVANCED},
1154         {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, FLAG_ADVANCED},
1155         {"logon drive", P_STRING, P_GLOBAL, &Globals.szLogonDrive, NULL, NULL, FLAG_ADVANCED},
1156         {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, FLAG_ADVANCED},
1157         {"domain logons", P_BOOL, P_GLOBAL, &Globals.bDomainLogons, NULL, NULL, FLAG_ADVANCED},
1158
1159         {N_("Browse Options"), P_SEP, P_SEPARATOR},
1160
1161         {"os level", P_INTEGER, P_GLOBAL, &Globals.os_level, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1162         {"lm announce", P_ENUM, P_GLOBAL, &Globals.lm_announce, NULL, enum_bool_auto, FLAG_ADVANCED},
1163         {"lm interval", P_INTEGER, P_GLOBAL, &Globals.lm_interval, NULL, NULL, FLAG_ADVANCED},
1164         {"preferred master", P_ENUM, P_GLOBAL, &Globals.iPreferredMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1165         {"prefered master", P_ENUM, P_GLOBAL, &Globals.iPreferredMaster, NULL, enum_bool_auto, FLAG_HIDE},
1166         {"local master", P_BOOL, P_GLOBAL, &Globals.bLocalMaster, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1167         {"domain master", P_ENUM, P_GLOBAL, &Globals.iDomainMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1168         {"browse list", P_BOOL, P_GLOBAL, &Globals.bBrowseList, NULL, NULL, FLAG_ADVANCED},
1169         {"browseable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1170         {"browsable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_HIDE},
1171         {"enhanced browsing", P_BOOL, P_GLOBAL, &Globals.enhanced_browsing, NULL, NULL, FLAG_ADVANCED},
1172
1173         {N_("WINS Options"), P_SEP, P_SEPARATOR},
1174
1175         {"dns proxy", P_BOOL, P_GLOBAL, &Globals.bDNSproxy, NULL, NULL, FLAG_ADVANCED},
1176         {"wins proxy", P_BOOL, P_GLOBAL, &Globals.bWINSproxy, NULL, NULL, FLAG_ADVANCED},
1177
1178         {"wins server", P_LIST, P_GLOBAL, &Globals.szWINSservers, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1179         {"wins support", P_BOOL, P_GLOBAL, &Globals.bWINSsupport, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1180         {"wins hook", P_STRING, P_GLOBAL, &Globals.szWINSHook, NULL, NULL, FLAG_ADVANCED},
1181
1182         {N_("Locking Options"), P_SEP, P_SEPARATOR},
1183
1184         {"blocking locks", P_BOOL, P_LOCAL, &sDefault.bBlockingLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1185         {"csc policy", P_ENUM, P_LOCAL, &sDefault.iCSCPolicy, NULL, enum_csc_policy, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1186         {"fake oplocks", P_BOOL, P_LOCAL, &sDefault.bFakeOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1187         {"kernel oplocks", P_BOOL, P_GLOBAL, &Globals.bKernelOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1188         {"locking", P_BOOL, P_LOCAL, &sDefault.bLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1189         {"lock spin time", P_INTEGER, P_GLOBAL, &Globals.iLockSpinTime, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1190
1191         {"oplocks", P_BOOL, P_LOCAL, &sDefault.bOpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1192         {"level2 oplocks", P_BOOL, P_LOCAL, &sDefault.bLevel2OpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1193         {"oplock break wait time", P_INTEGER, P_GLOBAL, &Globals.oplock_break_wait_time, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1194         {"oplock contention limit", P_INTEGER, P_LOCAL, &sDefault.iOplockContentionLimit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1195         {"posix locking", P_BOOL, P_LOCAL, &sDefault.bPosixLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1196         {"strict locking", P_ENUM, P_LOCAL, &sDefault.iStrictLocking, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1197         {"share modes", P_BOOL, P_LOCAL,  &sDefault.bShareModes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1198
1199         {N_("Ldap Options"), P_SEP, P_SEPARATOR},
1200
1201         {"ldap admin dn", P_STRING, P_GLOBAL, &Globals.szLdapAdminDn, NULL, NULL, FLAG_ADVANCED},
1202         {"ldap delete dn", P_BOOL, P_GLOBAL, &Globals.ldap_delete_dn, NULL, NULL, FLAG_ADVANCED},
1203         {"ldap group suffix", P_STRING, P_GLOBAL, &Globals.szLdapGroupSuffix, NULL, NULL, FLAG_ADVANCED},
1204         {"ldap idmap suffix", P_STRING, P_GLOBAL, &Globals.szLdapIdmapSuffix, NULL, NULL, FLAG_ADVANCED},
1205         {"ldap machine suffix", P_STRING, P_GLOBAL, &Globals.szLdapMachineSuffix, NULL, NULL, FLAG_ADVANCED},
1206         {"ldap passwd sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_ADVANCED},
1207         {"ldap password sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_HIDE},
1208         {"ldap replication sleep", P_INTEGER, P_GLOBAL, &Globals.ldap_replication_sleep, NULL, NULL, FLAG_ADVANCED},
1209         {"ldap suffix", P_STRING, P_GLOBAL, &Globals.szLdapSuffix, NULL, NULL, FLAG_ADVANCED},
1210         {"ldap ssl", P_ENUM, P_GLOBAL, &Globals.ldap_ssl, NULL, enum_ldap_ssl, FLAG_ADVANCED},
1211         {"ldap timeout", P_INTEGER, P_GLOBAL, &Globals.ldap_timeout, NULL, NULL, FLAG_ADVANCED},
1212         {"ldap page size", P_INTEGER, P_GLOBAL, &Globals.ldap_page_size, NULL, NULL, FLAG_ADVANCED},
1213         {"ldap user suffix", P_STRING, P_GLOBAL, &Globals.szLdapUserSuffix, NULL, NULL, FLAG_ADVANCED},
1214
1215         {N_("Miscellaneous Options"), P_SEP, P_SEPARATOR},
1216         {"add share command", P_STRING, P_GLOBAL, &Globals.szAddShareCommand, NULL, NULL, FLAG_ADVANCED},
1217         {"change share command", P_STRING, P_GLOBAL, &Globals.szChangeShareCommand, NULL, NULL, FLAG_ADVANCED},
1218         {"delete share command", P_STRING, P_GLOBAL, &Globals.szDeleteShareCommand, NULL, NULL, FLAG_ADVANCED},
1219
1220         {N_("EventLog Options"), P_SEP, P_SEPARATOR},
1221         {"eventlog list",  P_LIST, P_GLOBAL, &Globals.szEventLogs, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
1222
1223         {"config file", P_STRING, P_GLOBAL, &Globals.szConfigFile, NULL, NULL, FLAG_HIDE},
1224         {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1225         {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1226         {"lock directory", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_ADVANCED},
1227         {"lock dir", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_HIDE},
1228         {"pid directory", P_STRING, P_GLOBAL, &Globals.szPidDir, NULL, NULL, FLAG_ADVANCED},
1229 #ifdef WITH_UTMP
1230         {"utmp directory", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, FLAG_ADVANCED},
1231         {"wtmp directory", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, FLAG_ADVANCED},
1232         {"utmp", P_BOOL, P_GLOBAL, &Globals.bUtmp, NULL, NULL, FLAG_ADVANCED},
1233 #endif
1234
1235         {"default service", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1236         {"default", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1237         {"message command", P_STRING, P_GLOBAL, &Globals.szMsgCommand, NULL, NULL, FLAG_ADVANCED},
1238         {"dfree cache time", P_INTEGER, P_LOCAL, &sDefault.iDfreeCacheTime, NULL, NULL, FLAG_ADVANCED},
1239         {"dfree command", P_STRING, P_LOCAL, &sDefault.szDfree, NULL, NULL, FLAG_ADVANCED},
1240         {"get quota command", P_STRING, P_GLOBAL, &Globals.szGetQuota, NULL, NULL, FLAG_ADVANCED},
1241         {"set quota command", P_STRING, P_GLOBAL, &Globals.szSetQuota, NULL, NULL, FLAG_ADVANCED},
1242         {"remote announce", P_STRING, P_GLOBAL, &Globals.szRemoteAnnounce, NULL, NULL, FLAG_ADVANCED},
1243         {"remote browse sync", P_STRING, P_GLOBAL, &Globals.szRemoteBrowseSync, NULL, NULL, FLAG_ADVANCED},
1244         {"socket address", P_STRING, P_GLOBAL, &Globals.szSocketAddress, NULL, NULL, FLAG_ADVANCED},
1245         {"homedir map", P_STRING, P_GLOBAL, &Globals.szNISHomeMapName, NULL, NULL, FLAG_ADVANCED},
1246         {"afs username map", P_STRING, P_GLOBAL, &Globals.szAfsUsernameMap, NULL, NULL, FLAG_ADVANCED},
1247         {"afs token lifetime", P_INTEGER, P_GLOBAL, &Globals.iAfsTokenLifetime, NULL, NULL, FLAG_ADVANCED},
1248         {"log nt token command", P_STRING, P_GLOBAL, &Globals.szLogNtTokenCommand, NULL, NULL, FLAG_ADVANCED},
1249         {"time offset", P_INTEGER, P_GLOBAL, &extra_time_offset, NULL, NULL, FLAG_ADVANCED},
1250         {"NIS homedir", P_BOOL, P_GLOBAL, &Globals.bNISHomeMap, NULL, NULL, FLAG_ADVANCED},
1251         {"-valid", P_BOOL, P_LOCAL, &sDefault.valid, NULL, NULL, FLAG_HIDE},
1252
1253         {"copy", P_STRING, P_LOCAL, &sDefault.szCopy, handle_copy, NULL, FLAG_HIDE},
1254         {"include", P_STRING, P_LOCAL, &sDefault.szInclude, handle_include, NULL, FLAG_HIDE},
1255         {"preexec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1256         {"exec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED},
1257
1258         {"preexec close", P_BOOL, P_LOCAL, &sDefault.bPreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1259         {"postexec", P_STRING, P_LOCAL, &sDefault.szPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1260         {"root preexec", P_STRING, P_LOCAL, &sDefault.szRootPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1261         {"root preexec close", P_BOOL, P_LOCAL, &sDefault.bRootpreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1262         {"root postexec", P_STRING, P_LOCAL, &sDefault.szRootPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1263         {"available", P_BOOL, P_LOCAL, &sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1264         {"registry shares", P_BOOL, P_GLOBAL, &Globals.bRegistryShares, NULL, NULL, FLAG_ADVANCED},
1265         {"usershare allow guests", P_BOOL, P_GLOBAL, &Globals.bUsershareAllowGuests, NULL, NULL, FLAG_ADVANCED},
1266         {"usershare max shares", P_INTEGER, P_GLOBAL, &Globals.iUsershareMaxShares, NULL, NULL, FLAG_ADVANCED},
1267         {"usershare owner only", P_BOOL, P_GLOBAL, &Globals.bUsershareOwnerOnly, NULL, NULL, FLAG_ADVANCED},
1268         {"usershare path", P_STRING, P_GLOBAL, &Globals.szUsersharePath, NULL, NULL, FLAG_ADVANCED},
1269         {"usershare prefix allow list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixAllowList, NULL, NULL, FLAG_ADVANCED},
1270         {"usershare prefix deny list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixDenyList, NULL, NULL, FLAG_ADVANCED},
1271         {"usershare template share", P_STRING, P_GLOBAL, &Globals.szUsershareTemplateShare, NULL, NULL, FLAG_ADVANCED},
1272         {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1273         {"fstype", P_STRING, P_LOCAL, &sDefault.fstype, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1274         {"set directory", P_BOOLREV, P_LOCAL, &sDefault.bNo_set_dir, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1275         {"wide links", P_BOOL, P_LOCAL, &sDefault.bWidelinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1276         {"follow symlinks", P_BOOL, P_LOCAL, &sDefault.bSymlinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1277         {"dont descend", P_STRING, P_LOCAL, &sDefault.szDontdescend, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1278         {"magic script", P_STRING, P_LOCAL, &sDefault.szMagicScript, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1279         {"magic output", P_STRING, P_LOCAL, &sDefault.szMagicOutput, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1280         {"delete readonly", P_BOOL, P_LOCAL, &sDefault.bDeleteReadonly, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1281         {"dos filemode", P_BOOL, P_LOCAL, &sDefault.bDosFilemode, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1282         {"dos filetimes", P_BOOL, P_LOCAL, &sDefault.bDosFiletimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1283         {"dos filetime resolution", P_BOOL, P_LOCAL, &sDefault.bDosFiletimeResolution, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1284
1285         {"fake directory create times", P_BOOL, P_LOCAL, &sDefault.bFakeDirCreateTimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1286         {"panic action", P_STRING, P_GLOBAL, &Globals.szPanicAction, NULL, NULL, FLAG_ADVANCED},
1287
1288         {N_("VFS module options"), P_SEP, P_SEPARATOR},
1289
1290         {"vfs objects", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1291         {"vfs object", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_HIDE},
1292
1293
1294         {"msdfs root", P_BOOL, P_LOCAL, &sDefault.bMSDfsRoot, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1295         {"msdfs proxy", P_STRING, P_LOCAL, &sDefault.szMSDfsProxy, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1296         {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, FLAG_ADVANCED},
1297
1298         {N_("Winbind options"), P_SEP, P_SEPARATOR},
1299
1300         {"passdb expand explicit", P_BOOL, P_GLOBAL, &Globals.bPassdbExpandExplicit, NULL, NULL, FLAG_ADVANCED},
1301         {"idmap domains", P_LIST, P_GLOBAL, &Globals.szIdmapDomains, NULL, NULL, FLAG_ADVANCED},
1302         {"idmap backend", P_LIST, P_GLOBAL, &Globals.szIdmapBackend, NULL, NULL, FLAG_ADVANCED },
1303         {"idmap alloc backend", P_STRING, P_GLOBAL, &Globals.szIdmapAllocBackend, NULL, NULL, FLAG_ADVANCED},
1304         {"idmap cache time", P_INTEGER, P_GLOBAL, &Globals.iIdmapCacheTime, NULL, NULL, FLAG_ADVANCED},
1305         {"idmap negative cache time", P_INTEGER, P_GLOBAL, &Globals.iIdmapNegativeCacheTime, NULL, NULL, FLAG_ADVANCED},
1306         {"idmap uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_ADVANCED },
1307         {"winbind uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_HIDE },
1308         {"idmap gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_ADVANCED },
1309         {"winbind gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_HIDE },
1310         {"template homedir", P_STRING, P_GLOBAL, &Globals.szTemplateHomedir, NULL, NULL, FLAG_ADVANCED},
1311         {"template shell", P_STRING, P_GLOBAL, &Globals.szTemplateShell, NULL, NULL, FLAG_ADVANCED},
1312         {"winbind separator", P_STRING, P_GLOBAL, &Globals.szWinbindSeparator, NULL, NULL, FLAG_ADVANCED},
1313         {"winbind cache time", P_INTEGER, P_GLOBAL, &Globals.winbind_cache_time, NULL, NULL, FLAG_ADVANCED},
1314         {"winbind enum users", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumUsers, NULL, NULL, FLAG_ADVANCED},
1315         {"winbind enum groups", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumGroups, NULL, NULL, FLAG_ADVANCED},
1316         {"winbind use default domain", P_BOOL, P_GLOBAL, &Globals.bWinbindUseDefaultDomain, NULL, NULL, FLAG_ADVANCED},
1317         {"winbind trusted domains only", P_BOOL, P_GLOBAL, &Globals.bWinbindTrustedDomainsOnly, NULL, NULL, FLAG_ADVANCED},
1318         {"winbind nested groups", P_BOOL, P_GLOBAL, &Globals.bWinbindNestedGroups, NULL, NULL, FLAG_ADVANCED},
1319         {"winbind expand groups", P_INTEGER, P_GLOBAL, &Globals.winbind_expand_groups, NULL, NULL, FLAG_ADVANCED},
1320         {"winbind nss info", P_LIST, P_GLOBAL, &Globals.szWinbindNssInfo, NULL, NULL, FLAG_ADVANCED},
1321         {"winbind refresh tickets", P_BOOL, P_GLOBAL, &Globals.bWinbindRefreshTickets, NULL, NULL, FLAG_ADVANCED},
1322         {"winbind offline logon", P_BOOL, P_GLOBAL, &Globals.bWinbindOfflineLogon, NULL, NULL, FLAG_ADVANCED},
1323         {"winbind normalize names", P_BOOL, P_GLOBAL, &Globals.bWinbindNormalizeNames, NULL, NULL, FLAG_ADVANCED},
1324         {"winbind rpc only", P_BOOL, P_GLOBAL, &Globals.bWinbindRpcOnly, NULL, NULL, FLAG_ADVANCED},
1325
1326         {NULL,  P_BOOL,  P_NONE,  NULL,  NULL,  NULL,  0}
1327 };
1328
1329 /***************************************************************************
1330  Initialise the sDefault parameter structure for the printer values.
1331 ***************************************************************************/
1332
1333 static void init_printer_values(service *pService)
1334 {
1335         /* choose defaults depending on the type of printing */
1336         switch (pService->iPrinting) {
1337                 case PRINT_BSD:
1338                 case PRINT_AIX:
1339                 case PRINT_LPRNT:
1340                 case PRINT_LPROS2:
1341                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1342                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1343                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1344                         break;
1345
1346                 case PRINT_LPRNG:
1347                 case PRINT_PLP:
1348                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1349                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1350                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1351                         string_set(&pService->szQueuepausecommand, "lpc stop '%p'");
1352                         string_set(&pService->szQueueresumecommand, "lpc start '%p'");
1353                         string_set(&pService->szLppausecommand, "lpc hold '%p' %j");
1354                         string_set(&pService->szLpresumecommand, "lpc release '%p' %j");
1355                         break;
1356
1357                 case PRINT_CUPS:
1358                 case PRINT_IPRINT:
1359 #ifdef HAVE_CUPS
1360                         /* set the lpq command to contain the destination printer
1361                            name only.  This is used by cups_queue_get() */
1362                         string_set(&pService->szLpqcommand, "%p");
1363                         string_set(&pService->szLprmcommand, "");
1364                         string_set(&pService->szPrintcommand, "");
1365                         string_set(&pService->szLppausecommand, "");
1366                         string_set(&pService->szLpresumecommand, "");
1367                         string_set(&pService->szQueuepausecommand, "");
1368                         string_set(&pService->szQueueresumecommand, "");
1369 #else
1370                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1371                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1372                         string_set(&pService->szPrintcommand, "lpr -P'%p' %s; rm %s");
1373                         string_set(&pService->szLppausecommand, "lp -i '%p-%j' -H hold");
1374                         string_set(&pService->szLpresumecommand, "lp -i '%p-%j' -H resume");
1375                         string_set(&pService->szQueuepausecommand, "disable '%p'");
1376                         string_set(&pService->szQueueresumecommand, "enable '%p'");
1377 #endif /* HAVE_CUPS */
1378                         break;
1379
1380                 case PRINT_SYSV:
1381                 case PRINT_HPUX:
1382                         string_set(&pService->szLpqcommand, "lpstat -o%p");
1383                         string_set(&pService->szLprmcommand, "cancel %p-%j");
1384                         string_set(&pService->szPrintcommand, "lp -c -d%p %s; rm %s");
1385                         string_set(&pService->szQueuepausecommand, "disable %p");
1386                         string_set(&pService->szQueueresumecommand, "enable %p");
1387 #ifndef HPUX
1388                         string_set(&pService->szLppausecommand, "lp -i %p-%j -H hold");
1389                         string_set(&pService->szLpresumecommand, "lp -i %p-%j -H resume");
1390 #endif /* HPUX */
1391                         break;
1392
1393                 case PRINT_QNX:
1394                         string_set(&pService->szLpqcommand, "lpq -P%p");
1395                         string_set(&pService->szLprmcommand, "lprm -P%p %j");
1396                         string_set(&pService->szPrintcommand, "lp -r -P%p %s");
1397                         break;
1398
1399 #ifdef DEVELOPER
1400         case PRINT_TEST:
1401         case PRINT_VLP:
1402                 string_set(&pService->szPrintcommand, "vlp print %p %s");
1403                 string_set(&pService->szLpqcommand, "vlp lpq %p");
1404                 string_set(&pService->szLprmcommand, "vlp lprm %p %j");
1405                 string_set(&pService->szLppausecommand, "vlp lppause %p %j");
1406                 string_set(&pService->szLpresumecommand, "vlp lpresum %p %j");
1407                 string_set(&pService->szQueuepausecommand, "vlp queuepause %p");
1408                 string_set(&pService->szQueueresumecommand, "vlp queueresume %p");
1409                 break;
1410 #endif /* DEVELOPER */
1411
1412         }
1413 }
1414
1415 /***************************************************************************
1416  Initialise the global parameter structure.
1417 ***************************************************************************/
1418
1419 static void init_globals(bool first_time_only)
1420 {
1421         static bool done_init = False;
1422         char *s = NULL;
1423
1424         /* If requested to initialize only once and we've already done it... */
1425         if (first_time_only && done_init) {
1426                 /* ... then we have nothing more to do */
1427                 return;
1428         }
1429
1430         if (!done_init) {
1431                 int i;
1432
1433                 /* The logfile can be set before this is invoked. Free it if so. */
1434                 if (Globals.szLogFile != NULL) {
1435                         string_free(&Globals.szLogFile);
1436                         Globals.szLogFile = NULL;
1437                 }
1438
1439                 memset((void *)&Globals, '\0', sizeof(Globals));
1440
1441                 for (i = 0; parm_table[i].label; i++)
1442                         if ((parm_table[i].type == P_STRING ||
1443                              parm_table[i].type == P_USTRING) &&
1444                             parm_table[i].ptr)
1445                                 string_set((char **)parm_table[i].ptr, "");
1446
1447                 string_set(&sDefault.fstype, FSTYPE_STRING);
1448                 string_set(&sDefault.szPrintjobUsername, "%U");
1449
1450                 init_printer_values(&sDefault);
1451
1452                 done_init = True;
1453         }
1454
1455
1456         DEBUG(3, ("Initialising global parameters\n"));
1457
1458         string_set(&Globals.szSMBPasswdFile, get_dyn_SMB_PASSWD_FILE());
1459         string_set(&Globals.szPrivateDir, get_dyn_PRIVATE_DIR());
1460
1461         /* use the new 'hash2' method by default, with a prefix of 1 */
1462         string_set(&Globals.szManglingMethod, "hash2");
1463         Globals.mangle_prefix = 1;
1464
1465         string_set(&Globals.szGuestaccount, GUEST_ACCOUNT);
1466
1467         /* using UTF8 by default allows us to support all chars */
1468         string_set(&Globals.unix_charset, DEFAULT_UNIX_CHARSET);
1469
1470 #if defined(HAVE_NL_LANGINFO) && defined(CODESET)
1471         /* If the system supports nl_langinfo(), try to grab the value
1472            from the user's locale */
1473         string_set(&Globals.display_charset, "LOCALE");
1474 #else
1475         string_set(&Globals.display_charset, DEFAULT_DISPLAY_CHARSET);
1476 #endif
1477
1478         /* Use codepage 850 as a default for the dos character set */
1479         string_set(&Globals.dos_charset, DEFAULT_DOS_CHARSET);
1480
1481         /*
1482          * Allow the default PASSWD_CHAT to be overridden in local.h.
1483          */
1484         string_set(&Globals.szPasswdChat, DEFAULT_PASSWD_CHAT);
1485
1486         set_global_myname(myhostname());
1487         string_set(&Globals.szNetbiosName,global_myname());
1488
1489         set_global_myworkgroup(WORKGROUP);
1490         string_set(&Globals.szWorkgroup, lp_workgroup());
1491
1492         string_set(&Globals.szPasswdProgram, "");
1493         string_set(&Globals.szPidDir, get_dyn_PIDDIR());
1494         string_set(&Globals.szLockDir, get_dyn_LOCKDIR());
1495         string_set(&Globals.szSocketAddress, "0.0.0.0");
1496
1497         if (asprintf(&s, "Samba %s", SAMBA_VERSION_STRING) < 0) {
1498                 smb_panic("init_globals: ENOMEM");
1499         }
1500         string_set(&Globals.szServerString, s);
1501         SAFE_FREE(s);
1502         if (asprintf(&s, "%d.%d", DEFAULT_MAJOR_VERSION,
1503                         DEFAULT_MINOR_VERSION) < 0) {
1504                 smb_panic("init_globals: ENOMEM");
1505         }
1506         string_set(&Globals.szAnnounceVersion, s);
1507         SAFE_FREE(s);
1508 #ifdef DEVELOPER
1509         string_set(&Globals.szPanicAction, "/bin/sleep 999999999");
1510 #endif
1511
1512         string_set(&Globals.szSocketOptions, DEFAULT_SOCKET_OPTIONS);
1513
1514         string_set(&Globals.szLogonDrive, "");
1515         /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
1516         string_set(&Globals.szLogonHome, "\\\\%N\\%U");
1517         string_set(&Globals.szLogonPath, "\\\\%N\\%U\\profile");
1518
1519         string_set(&Globals.szNameResolveOrder, "lmhosts wins host bcast");
1520         string_set(&Globals.szPasswordServer, "*");
1521
1522         Globals.AlgorithmicRidBase = BASE_RID;
1523
1524         Globals.bLoadPrinters = True;
1525         Globals.PrintcapCacheTime = 750;        /* 12.5 minutes */
1526
1527         /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
1528         /* Discovered by 2 days of pain by Don McCall @ HP :-). */
1529         Globals.max_xmit = 0x4104;
1530         Globals.max_mux = 50;   /* This is *needed* for profile support. */
1531         Globals.lpqcachetime = 30;      /* changed to handle large print servers better -- jerry */
1532         Globals.bDisableSpoolss = False;
1533         Globals.iMaxSmbdProcesses = 0;/* no limit specified */
1534         Globals.pwordlevel = 0;
1535         Globals.unamelevel = 0;
1536         Globals.deadtime = 0;
1537         Globals.getwd_cache = true;
1538         Globals.bLargeReadwrite = True;
1539         Globals.max_log_size = 5000;
1540         Globals.max_open_files = MAX_OPEN_FILES;
1541         Globals.open_files_db_hash_size = SMB_OPEN_DATABASE_TDB_HASH_SIZE;
1542         Globals.maxprotocol = PROTOCOL_NT1;
1543         Globals.minprotocol = PROTOCOL_CORE;
1544         Globals.security = SEC_USER;
1545         Globals.paranoid_server_security = True;
1546         Globals.bEncryptPasswords = True;
1547         Globals.bUpdateEncrypt = False;
1548         Globals.clientSchannel = Auto;
1549         Globals.serverSchannel = Auto;
1550         Globals.bReadRaw = True;
1551         Globals.bWriteRaw = True;
1552         Globals.bNullPasswords = False;
1553         Globals.bObeyPamRestrictions = False;
1554         Globals.syslog = 1;
1555         Globals.bSyslogOnly = False;
1556         Globals.bTimestampLogs = True;
1557         string_set(&Globals.szLogLevel, "0");
1558         Globals.bDebugPrefixTimestamp = False;
1559         Globals.bDebugHiresTimestamp = False;
1560         Globals.bDebugPid = False;
1561         Globals.bDebugUid = False;
1562         Globals.bDebugClass = False;
1563         Globals.bEnableCoreFiles = True;
1564         Globals.max_ttl = 60 * 60 * 24 * 3;     /* 3 days default. */
1565         Globals.max_wins_ttl = 60 * 60 * 24 * 6;        /* 6 days default. */
1566         Globals.min_wins_ttl = 60 * 60 * 6;     /* 6 hours default. */
1567         Globals.machine_password_timeout = 60 * 60 * 24 * 7;    /* 7 days default. */
1568         Globals.lm_announce = 2;        /* = Auto: send only if LM clients found */
1569         Globals.lm_interval = 60;
1570         Globals.announce_as = ANNOUNCE_AS_NT_SERVER;
1571 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
1572         Globals.bNISHomeMap = False;
1573 #ifdef WITH_NISPLUS_HOME
1574         string_set(&Globals.szNISHomeMapName, "auto_home.org_dir");
1575 #else
1576         string_set(&Globals.szNISHomeMapName, "auto.home");
1577 #endif
1578 #endif
1579         Globals.bTimeServer = False;
1580         Globals.bBindInterfacesOnly = False;
1581         Globals.bUnixPasswdSync = False;
1582         Globals.bPamPasswordChange = False;
1583         Globals.bPasswdChatDebug = False;
1584         Globals.iPasswdChatTimeout = 2; /* 2 second default. */
1585         Globals.bNTPipeSupport = True;  /* Do NT pipes by default. */
1586         Globals.bNTStatusSupport = True; /* Use NT status by default. */
1587         Globals.bStatCache = True;      /* use stat cache by default */
1588         Globals.iMaxStatCacheSize = 1024; /* one Meg by default. */
1589         Globals.restrict_anonymous = 0;
1590         Globals.bClientLanManAuth = False;      /* Do NOT use the LanMan hash if it is available */
1591         Globals.bClientPlaintextAuth = False;   /* Do NOT use a plaintext password even if is requested by the server */
1592         Globals.bLanmanAuth = False;    /* Do NOT use the LanMan hash, even if it is supplied */
1593         Globals.bNTLMAuth = True;       /* Do use NTLMv1 if it is supplied by the client (otherwise NTLMv2) */
1594         Globals.bClientNTLMv2Auth = False; /* Client should not use NTLMv2, as we can't tell that the server supports it. */
1595         /* Note, that we will use NTLM2 session security (which is different), if it is available */
1596
1597         Globals.map_to_guest = 0;       /* By Default, "Never" */
1598         Globals.oplock_break_wait_time = 0;     /* By Default, 0 msecs. */
1599         Globals.enhanced_browsing = true;
1600         Globals.iLockSpinTime = WINDOWS_MINIMUM_LOCK_TIMEOUT_MS; /* msec. */
1601 #ifdef MMAP_BLACKLIST
1602         Globals.bUseMmap = False;
1603 #else
1604         Globals.bUseMmap = True;
1605 #endif
1606         Globals.bUnixExtensions = True;
1607         Globals.bResetOnZeroVC = False;
1608
1609         /* hostname lookups can be very expensive and are broken on
1610            a large number of sites (tridge) */
1611         Globals.bHostnameLookups = False;
1612
1613         string_set(&Globals.szPassdbBackend, "smbpasswd");
1614         string_set(&Globals.szLdapSuffix, "");
1615         string_set(&Globals.szLdapMachineSuffix, "");
1616         string_set(&Globals.szLdapUserSuffix, "");
1617         string_set(&Globals.szLdapGroupSuffix, "");
1618         string_set(&Globals.szLdapIdmapSuffix, "");
1619
1620         string_set(&Globals.szLdapAdminDn, "");
1621         Globals.ldap_ssl = LDAP_SSL_ON;
1622         Globals.ldap_passwd_sync = LDAP_PASSWD_SYNC_OFF;
1623         Globals.ldap_delete_dn = False;
1624         Globals.ldap_replication_sleep = 1000; /* wait 1 sec for replication */
1625         Globals.ldap_timeout = LDAP_CONNECT_DEFAULT_TIMEOUT;
1626         Globals.ldap_page_size = LDAP_PAGE_SIZE;
1627
1628         /* This is what we tell the afs client. in reality we set the token
1629          * to never expire, though, when this runs out the afs client will
1630          * forget the token. Set to 0 to get NEVERDATE.*/
1631         Globals.iAfsTokenLifetime = 604800;
1632
1633 /* these parameters are set to defaults that are more appropriate
1634    for the increasing samba install base:
1635
1636    as a member of the workgroup, that will possibly become a
1637    _local_ master browser (lm = True).  this is opposed to a forced
1638    local master browser startup (pm = True).
1639
1640    doesn't provide WINS server service by default (wsupp = False),
1641    and doesn't provide domain master browser services by default, either.
1642
1643 */
1644
1645         Globals.bMsAddPrinterWizard = True;
1646         Globals.os_level = 20;
1647         Globals.bLocalMaster = True;
1648         Globals.iDomainMaster = Auto;   /* depending on bDomainLogons */
1649         Globals.bDomainLogons = False;
1650         Globals.bBrowseList = True;
1651         Globals.bWINSsupport = False;
1652         Globals.bWINSproxy = False;
1653
1654         Globals.bDNSproxy = True;
1655
1656         /* this just means to use them if they exist */
1657         Globals.bKernelOplocks = True;
1658
1659         Globals.bAllowTrustedDomains = True;
1660
1661         string_set(&Globals.szTemplateShell, "/bin/false");
1662         string_set(&Globals.szTemplateHomedir, "/home/%D/%U");
1663         string_set(&Globals.szWinbindSeparator, "\\");
1664
1665         string_set(&Globals.szCupsServer, "");
1666         string_set(&Globals.szIPrintServer, "");
1667
1668         string_set(&Globals.ctdbdSocket, "");
1669         Globals.szClusterAddresses = NULL;
1670         Globals.clustering = False;
1671
1672         Globals.winbind_cache_time = 300;       /* 5 minutes */
1673         Globals.bWinbindEnumUsers = False;
1674         Globals.bWinbindEnumGroups = False;
1675         Globals.bWinbindUseDefaultDomain = False;
1676         Globals.bWinbindTrustedDomainsOnly = False;
1677         Globals.bWinbindNestedGroups = True;
1678         Globals.winbind_expand_groups = 1;
1679         Globals.szWinbindNssInfo = str_list_make("template", NULL);
1680         Globals.bWinbindRefreshTickets = False;
1681         Globals.bWinbindOfflineLogon = False;
1682
1683         Globals.iIdmapCacheTime = 900; /* 15 minutes by default */
1684         Globals.iIdmapNegativeCacheTime = 120; /* 2 minutes by default */
1685
1686         Globals.bPassdbExpandExplicit = False;
1687
1688         Globals.name_cache_timeout = 660; /* In seconds */
1689
1690         Globals.bUseSpnego = True;
1691         Globals.bClientUseSpnego = True;
1692
1693         Globals.client_signing = Auto;
1694         Globals.server_signing = False;
1695
1696         Globals.bDeferSharingViolations = True;
1697         string_set(&Globals.smb_ports, SMB_PORTS);
1698
1699         Globals.bEnablePrivileges = True;
1700         Globals.bHostMSDfs        = True;
1701         Globals.bASUSupport       = False;
1702
1703         /* User defined shares. */
1704         if (asprintf(&s, "%s/usershares", get_dyn_STATEDIR()) < 0) {
1705                 smb_panic("init_globals: ENOMEM");
1706         }
1707         string_set(&Globals.szUsersharePath, s);
1708         SAFE_FREE(s);
1709         string_set(&Globals.szUsershareTemplateShare, "");
1710         Globals.iUsershareMaxShares = 0;
1711         /* By default disallow sharing of directories not owned by the sharer. */
1712         Globals.bUsershareOwnerOnly = True;
1713         /* By default disallow guest access to usershares. */
1714         Globals.bUsershareAllowGuests = False;
1715
1716         Globals.iKeepalive = DEFAULT_KEEPALIVE;
1717
1718         /* By default no shares out of the registry */
1719         Globals.bRegistryShares = False;
1720
1721         Globals.iminreceivefile = 0;
1722 }
1723
1724 /*******************************************************************
1725  Convenience routine to grab string parameters into temporary memory
1726  and run standard_sub_basic on them. The buffers can be written to by
1727  callers without affecting the source string.
1728 ********************************************************************/
1729
1730 static char *lp_string(const char *s)
1731 {
1732         char *ret;
1733         TALLOC_CTX *ctx = talloc_tos();
1734
1735         /* The follow debug is useful for tracking down memory problems
1736            especially if you have an inner loop that is calling a lp_*()
1737            function that returns a string.  Perhaps this debug should be
1738            present all the time? */
1739
1740 #if 0
1741         DEBUG(10, ("lp_string(%s)\n", s));
1742 #endif
1743
1744         ret = talloc_sub_basic(ctx,
1745                         get_current_username(),
1746                         current_user_info.domain,
1747                         s);
1748         if (trim_char(ret, '\"', '\"')) {
1749                 if (strchr(ret,'\"') != NULL) {
1750                         TALLOC_FREE(ret);
1751                         ret = talloc_sub_basic(ctx,
1752                                         get_current_username(),
1753                                         current_user_info.domain,
1754                                         s);
1755                 }
1756         }
1757         return ret;
1758 }
1759
1760 /*
1761    In this section all the functions that are used to access the
1762    parameters from the rest of the program are defined
1763 */
1764
1765 #define FN_GLOBAL_STRING(fn_name,ptr) \
1766  char *fn_name(void) {return(lp_string(*(char **)(ptr) ? *(char **)(ptr) : ""));}
1767 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1768  const char *fn_name(void) {return(*(const char **)(ptr) ? *(const char **)(ptr) : "");}
1769 #define FN_GLOBAL_LIST(fn_name,ptr) \
1770  const char **fn_name(void) {return(*(const char ***)(ptr));}
1771 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1772  bool fn_name(void) {return(*(bool *)(ptr));}
1773 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1774  char fn_name(void) {return(*(char *)(ptr));}
1775 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1776  int fn_name(void) {return(*(int *)(ptr));}
1777
1778 #define FN_LOCAL_STRING(fn_name,val) \
1779  char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1780 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1781  const char *fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1782 #define FN_LOCAL_LIST(fn_name,val) \
1783  const char **fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1784 #define FN_LOCAL_BOOL(fn_name,val) \
1785  bool fn_name(int i) {return(bool)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1786 #define FN_LOCAL_INTEGER(fn_name,val) \
1787  int fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1788
1789 #define FN_LOCAL_PARM_BOOL(fn_name,val) \
1790  bool fn_name(const struct share_params *p) {return(bool)(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1791 #define FN_LOCAL_PARM_INTEGER(fn_name,val) \
1792  int fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1793 #define FN_LOCAL_PARM_STRING(fn_name,val) \
1794  char *fn_name(const struct share_params *p) {return(lp_string((LP_SNUM_OK(p->service) && ServicePtrs[(p->service)]->val) ? ServicePtrs[(p->service)]->val : sDefault.val));}
1795 #define FN_LOCAL_CHAR(fn_name,val) \
1796  char fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1797
1798 FN_GLOBAL_STRING(lp_smb_ports, &Globals.smb_ports)
1799 FN_GLOBAL_STRING(lp_dos_charset, &Globals.dos_charset)
1800 FN_GLOBAL_STRING(lp_unix_charset, &Globals.unix_charset)
1801 FN_GLOBAL_STRING(lp_display_charset, &Globals.display_charset)
1802 FN_GLOBAL_STRING(lp_logfile, &Globals.szLogFile)
1803 FN_GLOBAL_STRING(lp_configfile, &Globals.szConfigFile)
1804 FN_GLOBAL_STRING(lp_smb_passwd_file, &Globals.szSMBPasswdFile)
1805 FN_GLOBAL_STRING(lp_private_dir, &Globals.szPrivateDir)
1806 FN_GLOBAL_STRING(lp_serverstring, &Globals.szServerString)
1807 FN_GLOBAL_INTEGER(lp_printcap_cache_time, &Globals.PrintcapCacheTime)
1808 FN_GLOBAL_STRING(lp_addport_cmd, &Globals.szAddPortCommand)
1809 FN_GLOBAL_STRING(lp_enumports_cmd, &Globals.szEnumPortsCommand)
1810 FN_GLOBAL_STRING(lp_addprinter_cmd, &Globals.szAddPrinterCommand)
1811 FN_GLOBAL_STRING(lp_deleteprinter_cmd, &Globals.szDeletePrinterCommand)
1812 FN_GLOBAL_STRING(lp_os2_driver_map, &Globals.szOs2DriverMap)
1813 FN_GLOBAL_STRING(lp_lockdir, &Globals.szLockDir)
1814 FN_GLOBAL_STRING(lp_piddir, &Globals.szPidDir)
1815 FN_GLOBAL_STRING(lp_mangling_method, &Globals.szManglingMethod)
1816 FN_GLOBAL_INTEGER(lp_mangle_prefix, &Globals.mangle_prefix)
1817 FN_GLOBAL_STRING(lp_utmpdir, &Globals.szUtmpDir)
1818 FN_GLOBAL_STRING(lp_wtmpdir, &Globals.szWtmpDir)
1819 FN_GLOBAL_BOOL(lp_utmp, &Globals.bUtmp)
1820 FN_GLOBAL_STRING(lp_rootdir, &Globals.szRootdir)
1821 FN_GLOBAL_STRING(lp_defaultservice, &Globals.szDefaultService)
1822 FN_GLOBAL_STRING(lp_msg_command, &Globals.szMsgCommand)
1823 FN_GLOBAL_STRING(lp_get_quota_command, &Globals.szGetQuota)
1824 FN_GLOBAL_STRING(lp_set_quota_command, &Globals.szSetQuota)
1825 FN_GLOBAL_STRING(lp_auto_services, &Globals.szAutoServices)
1826 FN_GLOBAL_STRING(lp_passwd_program, &Globals.szPasswdProgram)
1827 FN_GLOBAL_STRING(lp_passwd_chat, &Globals.szPasswdChat)
1828 FN_GLOBAL_STRING(lp_passwordserver, &Globals.szPasswordServer)
1829 FN_GLOBAL_STRING(lp_name_resolve_order, &Globals.szNameResolveOrder)
1830 FN_GLOBAL_STRING(lp_realm, &Globals.szRealm)
1831 FN_GLOBAL_CONST_STRING(lp_afs_username_map, &Globals.szAfsUsernameMap)
1832 FN_GLOBAL_INTEGER(lp_afs_token_lifetime, &Globals.iAfsTokenLifetime)
1833 FN_GLOBAL_STRING(lp_log_nt_token_command, &Globals.szLogNtTokenCommand)
1834 FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
1835 FN_GLOBAL_CONST_STRING(lp_logon_script, &Globals.szLogonScript)
1836 FN_GLOBAL_CONST_STRING(lp_logon_path, &Globals.szLogonPath)
1837 FN_GLOBAL_CONST_STRING(lp_logon_drive, &Globals.szLogonDrive)
1838 FN_GLOBAL_CONST_STRING(lp_logon_home, &Globals.szLogonHome)
1839 FN_GLOBAL_STRING(lp_remote_announce, &Globals.szRemoteAnnounce)
1840 FN_GLOBAL_STRING(lp_remote_browse_sync, &Globals.szRemoteBrowseSync)
1841 FN_GLOBAL_LIST(lp_wins_server_list, &Globals.szWINSservers)
1842 FN_GLOBAL_LIST(lp_interfaces, &Globals.szInterfaces)
1843 FN_GLOBAL_STRING(lp_socket_address, &Globals.szSocketAddress)
1844 FN_GLOBAL_STRING(lp_nis_home_map_name, &Globals.szNISHomeMapName)
1845 static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
1846 FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
1847 /* FN_GLOBAL_STRING(lp_passdb_backend, &Globals.szPassdbBackend)
1848  * lp_passdb_backend() should be replace by the this macro again after
1849  * some releases.
1850  * */
1851 const char *lp_passdb_backend(void)
1852 {
1853         char *delim, *quote;
1854
1855         delim = strchr( Globals.szPassdbBackend, ' ');
1856         /* no space at all */
1857         if (delim == NULL) {
1858                 goto out;
1859         }
1860
1861         quote = strchr(Globals.szPassdbBackend, '"');
1862         /* no quote char or non in the first part */
1863         if (quote == NULL || quote > delim) {
1864                 *delim = '\0';
1865                 goto warn;
1866         }
1867
1868         quote = strchr(quote+1, '"');
1869         if (quote == NULL) {
1870                 DEBUG(0, ("WARNING: Your 'passdb backend' configuration is invalid due to a missing second \" char.\n"));
1871                 goto out;
1872         } else if (*(quote+1) == '\0') {
1873                 /* space, fitting quote char, and one backend only */
1874                 goto out;
1875         } else {
1876                 /* terminate string after the fitting quote char */
1877                 *(quote+1) = '\0';
1878         }
1879
1880 warn:
1881         DEBUG(0, ("WARNING: Your 'passdb backend' configuration includes multiple backends.  This\n"
1882                 "is deprecated since Samba 3.0.23.  Please check WHATSNEW.txt or the section 'Passdb\n"
1883                 "Changes' from the ChangeNotes as part of the Samba HOWTO collection.  Only the first\n"
1884                 "backend (%s) is used.  The rest is ignored.\n", Globals.szPassdbBackend));
1885
1886 out:
1887         return Globals.szPassdbBackend;
1888 }
1889 FN_GLOBAL_LIST(lp_preload_modules, &Globals.szPreloadModules)
1890 FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
1891 FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
1892 FN_GLOBAL_STRING(lp_renameuser_script, &Globals.szRenameUserScript)
1893 FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
1894
1895 FN_GLOBAL_CONST_STRING(lp_guestaccount, &Globals.szGuestaccount)
1896 FN_GLOBAL_STRING(lp_addgroup_script, &Globals.szAddGroupScript)
1897 FN_GLOBAL_STRING(lp_delgroup_script, &Globals.szDelGroupScript)
1898 FN_GLOBAL_STRING(lp_addusertogroup_script, &Globals.szAddUserToGroupScript)
1899 FN_GLOBAL_STRING(lp_deluserfromgroup_script, &Globals.szDelUserFromGroupScript)
1900 FN_GLOBAL_STRING(lp_setprimarygroup_script, &Globals.szSetPrimaryGroupScript)
1901
1902 FN_GLOBAL_STRING(lp_addmachine_script, &Globals.szAddMachineScript)
1903
1904 FN_GLOBAL_STRING(lp_shutdown_script, &Globals.szShutdownScript)
1905 FN_GLOBAL_STRING(lp_abort_shutdown_script, &Globals.szAbortShutdownScript)
1906 FN_GLOBAL_STRING(lp_username_map_script, &Globals.szUsernameMapScript)
1907
1908 FN_GLOBAL_STRING(lp_check_password_script, &Globals.szCheckPasswordScript)
1909
1910 FN_GLOBAL_STRING(lp_wins_hook, &Globals.szWINSHook)
1911 FN_GLOBAL_CONST_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
1912 FN_GLOBAL_CONST_STRING(lp_template_shell, &Globals.szTemplateShell)
1913 FN_GLOBAL_CONST_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
1914 FN_GLOBAL_INTEGER(lp_acl_compatibility, &Globals.iAclCompat)
1915 FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
1916 FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
1917 FN_GLOBAL_BOOL(lp_winbind_use_default_domain, &Globals.bWinbindUseDefaultDomain)
1918 FN_GLOBAL_BOOL(lp_winbind_trusted_domains_only, &Globals.bWinbindTrustedDomainsOnly)
1919 FN_GLOBAL_BOOL(lp_winbind_nested_groups, &Globals.bWinbindNestedGroups)
1920 FN_GLOBAL_INTEGER(lp_winbind_expand_groups, &Globals.winbind_expand_groups)
1921 FN_GLOBAL_BOOL(lp_winbind_refresh_tickets, &Globals.bWinbindRefreshTickets)
1922 FN_GLOBAL_BOOL(lp_winbind_offline_logon, &Globals.bWinbindOfflineLogon)
1923 FN_GLOBAL_BOOL(lp_winbind_normalize_names, &Globals.bWinbindNormalizeNames)
1924 FN_GLOBAL_BOOL(lp_winbind_rpc_only, &Globals.bWinbindRpcOnly)
1925
1926 FN_GLOBAL_LIST(lp_idmap_domains, &Globals.szIdmapDomains)
1927 FN_GLOBAL_LIST(lp_idmap_backend, &Globals.szIdmapBackend) /* deprecated */
1928 FN_GLOBAL_STRING(lp_idmap_alloc_backend, &Globals.szIdmapAllocBackend)
1929 FN_GLOBAL_INTEGER(lp_idmap_cache_time, &Globals.iIdmapCacheTime)
1930 FN_GLOBAL_INTEGER(lp_idmap_negative_cache_time, &Globals.iIdmapNegativeCacheTime)
1931 FN_GLOBAL_INTEGER(lp_keepalive, &Globals.iKeepalive)
1932 FN_GLOBAL_BOOL(lp_passdb_expand_explicit, &Globals.bPassdbExpandExplicit)
1933
1934 FN_GLOBAL_STRING(lp_ldap_suffix, &Globals.szLdapSuffix)
1935 FN_GLOBAL_STRING(lp_ldap_admin_dn, &Globals.szLdapAdminDn)
1936 FN_GLOBAL_INTEGER(lp_ldap_ssl, &Globals.ldap_ssl)
1937 FN_GLOBAL_INTEGER(lp_ldap_passwd_sync, &Globals.ldap_passwd_sync)
1938 FN_GLOBAL_BOOL(lp_ldap_delete_dn, &Globals.ldap_delete_dn)
1939 FN_GLOBAL_INTEGER(lp_ldap_replication_sleep, &Globals.ldap_replication_sleep)
1940 FN_GLOBAL_INTEGER(lp_ldap_timeout, &Globals.ldap_timeout)
1941 FN_GLOBAL_INTEGER(lp_ldap_page_size, &Globals.ldap_page_size)
1942 FN_GLOBAL_STRING(lp_add_share_cmd, &Globals.szAddShareCommand)
1943 FN_GLOBAL_STRING(lp_change_share_cmd, &Globals.szChangeShareCommand)
1944 FN_GLOBAL_STRING(lp_delete_share_cmd, &Globals.szDeleteShareCommand)
1945 FN_GLOBAL_STRING(lp_usershare_path, &Globals.szUsersharePath)
1946 FN_GLOBAL_LIST(lp_usershare_prefix_allow_list, &Globals.szUsersharePrefixAllowList)
1947 FN_GLOBAL_LIST(lp_usershare_prefix_deny_list, &Globals.szUsersharePrefixDenyList)
1948
1949 FN_GLOBAL_LIST(lp_eventlog_list, &Globals.szEventLogs)
1950
1951 FN_GLOBAL_BOOL(lp_registry_shares, &Globals.bRegistryShares)
1952 FN_GLOBAL_BOOL(lp_usershare_allow_guests, &Globals.bUsershareAllowGuests)
1953 FN_GLOBAL_BOOL(lp_usershare_owner_only, &Globals.bUsershareOwnerOnly)
1954 FN_GLOBAL_BOOL(lp_disable_netbios, &Globals.bDisableNetbios)
1955 FN_GLOBAL_BOOL(lp_reset_on_zero_vc, &Globals.bResetOnZeroVC)
1956 FN_GLOBAL_BOOL(lp_ms_add_printer_wizard, &Globals.bMsAddPrinterWizard)
1957 FN_GLOBAL_BOOL(lp_dns_proxy, &Globals.bDNSproxy)
1958 FN_GLOBAL_BOOL(lp_wins_support, &Globals.bWINSsupport)
1959 FN_GLOBAL_BOOL(lp_we_are_a_wins_server, &Globals.bWINSsupport)
1960 FN_GLOBAL_BOOL(lp_wins_proxy, &Globals.bWINSproxy)
1961 FN_GLOBAL_BOOL(lp_local_master, &Globals.bLocalMaster)
1962 FN_GLOBAL_BOOL(lp_domain_logons, &Globals.bDomainLogons)
1963 FN_GLOBAL_BOOL(lp_load_printers, &Globals.bLoadPrinters)
1964 FN_GLOBAL_BOOL(lp_readraw, &Globals.bReadRaw)
1965 FN_GLOBAL_BOOL(lp_large_readwrite, &Globals.bLargeReadwrite)
1966 FN_GLOBAL_BOOL(lp_writeraw, &Globals.bWriteRaw)
1967 FN_GLOBAL_BOOL(lp_null_passwords, &Globals.bNullPasswords)
1968 FN_GLOBAL_BOOL(lp_obey_pam_restrictions, &Globals.bObeyPamRestrictions)
1969 FN_GLOBAL_BOOL(lp_encrypted_passwords, &Globals.bEncryptPasswords)
1970 FN_GLOBAL_BOOL(lp_update_encrypted, &Globals.bUpdateEncrypt)
1971 FN_GLOBAL_INTEGER(lp_client_schannel, &Globals.clientSchannel)
1972 FN_GLOBAL_INTEGER(lp_server_schannel, &Globals.serverSchannel)
1973 FN_GLOBAL_BOOL(lp_syslog_only, &Globals.bSyslogOnly)
1974 FN_GLOBAL_BOOL(lp_timestamp_logs, &Globals.bTimestampLogs)
1975 FN_GLOBAL_BOOL(lp_debug_prefix_timestamp, &Globals.bDebugPrefixTimestamp)
1976 FN_GLOBAL_BOOL(lp_debug_hires_timestamp, &Globals.bDebugHiresTimestamp)
1977 FN_GLOBAL_BOOL(lp_debug_pid, &Globals.bDebugPid)
1978 FN_GLOBAL_BOOL(lp_debug_uid, &Globals.bDebugUid)
1979 FN_GLOBAL_BOOL(lp_debug_class, &Globals.bDebugClass)
1980 FN_GLOBAL_BOOL(lp_enable_core_files, &Globals.bEnableCoreFiles)
1981 FN_GLOBAL_BOOL(lp_browse_list, &Globals.bBrowseList)
1982 FN_GLOBAL_BOOL(lp_nis_home_map, &Globals.bNISHomeMap)
1983 static FN_GLOBAL_BOOL(lp_time_server, &Globals.bTimeServer)
1984 FN_GLOBAL_BOOL(lp_bind_interfaces_only, &Globals.bBindInterfacesOnly)
1985 FN_GLOBAL_BOOL(lp_pam_password_change, &Globals.bPamPasswordChange)
1986 FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync)
1987 FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug)
1988 FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout)
1989 FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport)
1990 FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport)
1991 FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache)
1992 FN_GLOBAL_INTEGER(lp_max_stat_cache_size, &Globals.iMaxStatCacheSize)
1993 FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains)
1994 FN_GLOBAL_INTEGER(lp_restrict_anonymous, &Globals.restrict_anonymous)
1995 FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth)
1996 FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth)
1997 FN_GLOBAL_BOOL(lp_client_plaintext_auth, &Globals.bClientPlaintextAuth)
1998 FN_GLOBAL_BOOL(lp_client_lanman_auth, &Globals.bClientLanManAuth)
1999 FN_GLOBAL_BOOL(lp_client_ntlmv2_auth, &Globals.bClientNTLMv2Auth)
2000 FN_GLOBAL_BOOL(lp_host_msdfs, &Globals.bHostMSDfs)
2001 FN_GLOBAL_BOOL(lp_kernel_oplocks, &Globals.bKernelOplocks)
2002 FN_GLOBAL_BOOL(lp_enhanced_browsing, &Globals.enhanced_browsing)
2003 FN_GLOBAL_BOOL(lp_use_mmap, &Globals.bUseMmap)
2004 FN_GLOBAL_BOOL(lp_unix_extensions, &Globals.bUnixExtensions)
2005 FN_GLOBAL_BOOL(lp_use_spnego, &Globals.bUseSpnego)
2006 FN_GLOBAL_BOOL(lp_client_use_spnego, &Globals.bClientUseSpnego)
2007 FN_GLOBAL_BOOL(lp_hostname_lookups, &Globals.bHostnameLookups)
2008 FN_LOCAL_PARM_BOOL(lp_change_notify, bChangeNotify)
2009 FN_LOCAL_PARM_BOOL(lp_kernel_change_notify, bKernelChangeNotify)
2010 FN_GLOBAL_BOOL(lp_use_kerberos_keytab, &Globals.bUseKerberosKeytab)
2011 FN_GLOBAL_BOOL(lp_defer_sharing_violations, &Globals.bDeferSharingViolations)
2012 FN_GLOBAL_BOOL(lp_enable_privileges, &Globals.bEnablePrivileges)
2013 FN_GLOBAL_BOOL(lp_enable_asu_support, &Globals.bASUSupport)
2014 FN_GLOBAL_INTEGER(lp_os_level, &Globals.os_level)
2015 FN_GLOBAL_INTEGER(lp_max_ttl, &Globals.max_ttl)
2016 FN_GLOBAL_INTEGER(lp_max_wins_ttl, &Globals.max_wins_ttl)
2017 FN_GLOBAL_INTEGER(lp_min_wins_ttl, &Globals.min_wins_ttl)
2018 FN_GLOBAL_INTEGER(lp_max_log_size, &Globals.max_log_size)
2019 FN_GLOBAL_INTEGER(lp_max_open_files, &Globals.max_open_files)
2020 FN_GLOBAL_INTEGER(lp_open_files_db_hash_size, &Globals.open_files_db_hash_size)
2021 FN_GLOBAL_INTEGER(lp_maxxmit, &Globals.max_xmit)
2022 FN_GLOBAL_INTEGER(lp_maxmux, &Globals.max_mux)
2023 FN_GLOBAL_INTEGER(lp_passwordlevel, &Globals.pwordlevel)
2024 FN_GLOBAL_INTEGER(lp_usernamelevel, &Globals.unamelevel)
2025 FN_GLOBAL_INTEGER(lp_deadtime, &Globals.deadtime)
2026 FN_GLOBAL_BOOL(lp_getwd_cache, &Globals.getwd_cache)
2027 FN_GLOBAL_INTEGER(lp_maxprotocol, &Globals.maxprotocol)
2028 FN_GLOBAL_INTEGER(lp_minprotocol, &Globals.minprotocol)
2029 FN_GLOBAL_INTEGER(lp_security, &Globals.security)
2030 FN_GLOBAL_LIST(lp_auth_methods, &Globals.AuthMethods)
2031 FN_GLOBAL_BOOL(lp_paranoid_server_security, &Globals.paranoid_server_security)
2032 FN_GLOBAL_INTEGER(lp_maxdisksize, &Globals.maxdisksize)
2033 FN_GLOBAL_INTEGER(lp_lpqcachetime, &Globals.lpqcachetime)
2034 FN_GLOBAL_INTEGER(lp_max_smbd_processes, &Globals.iMaxSmbdProcesses)
2035 FN_GLOBAL_BOOL(_lp_disable_spoolss, &Globals.bDisableSpoolss)
2036 FN_GLOBAL_INTEGER(lp_syslog, &Globals.syslog)
2037 static FN_GLOBAL_INTEGER(lp_announce_as, &Globals.announce_as)
2038 FN_GLOBAL_INTEGER(lp_lm_announce, &Globals.lm_announce)
2039 FN_GLOBAL_INTEGER(lp_lm_interval, &Globals.lm_interval)
2040 FN_GLOBAL_INTEGER(lp_machine_password_timeout, &Globals.machine_password_timeout)
2041 FN_GLOBAL_INTEGER(lp_map_to_guest, &Globals.map_to_guest)
2042 FN_GLOBAL_INTEGER(lp_oplock_break_wait_time, &Globals.oplock_break_wait_time)
2043 FN_GLOBAL_INTEGER(lp_lock_spin_time, &Globals.iLockSpinTime)
2044 FN_GLOBAL_INTEGER(lp_usershare_max_shares, &Globals.iUsershareMaxShares)
2045 FN_GLOBAL_CONST_STRING(lp_socket_options, &Globals.szSocketOptions)
2046
2047 FN_LOCAL_STRING(lp_preexec, szPreExec)
2048 FN_LOCAL_STRING(lp_postexec, szPostExec)
2049 FN_LOCAL_STRING(lp_rootpreexec, szRootPreExec)
2050 FN_LOCAL_STRING(lp_rootpostexec, szRootPostExec)
2051 FN_LOCAL_STRING(lp_servicename, szService)
2052 FN_LOCAL_CONST_STRING(lp_const_servicename, szService)
2053 FN_LOCAL_STRING(lp_pathname, szPath)
2054 FN_LOCAL_STRING(lp_dontdescend, szDontdescend)
2055 FN_LOCAL_STRING(lp_username, szUsername)
2056 FN_LOCAL_LIST(lp_invalid_users, szInvalidUsers)
2057 FN_LOCAL_LIST(lp_valid_users, szValidUsers)
2058 FN_LOCAL_LIST(lp_admin_users, szAdminUsers)
2059 FN_GLOBAL_LIST(lp_svcctl_list, &Globals.szServicesList)
2060 FN_LOCAL_STRING(lp_cups_options, szCupsOptions)
2061 FN_GLOBAL_STRING(lp_cups_server, &Globals.szCupsServer)
2062 FN_GLOBAL_STRING(lp_iprint_server, &Globals.szIPrintServer)
2063 FN_GLOBAL_CONST_STRING(lp_ctdbd_socket, &Globals.ctdbdSocket)
2064 FN_GLOBAL_LIST(lp_cluster_addresses, &Globals.szClusterAddresses)
2065 FN_GLOBAL_BOOL(lp_clustering, &Globals.clustering);
2066 FN_LOCAL_STRING(lp_printcommand, szPrintcommand)
2067 FN_LOCAL_STRING(lp_lpqcommand, szLpqcommand)
2068 FN_LOCAL_STRING(lp_lprmcommand, szLprmcommand)
2069 FN_LOCAL_STRING(lp_lppausecommand, szLppausecommand)
2070 FN_LOCAL_STRING(lp_lpresumecommand, szLpresumecommand)
2071 FN_LOCAL_STRING(lp_queuepausecommand, szQueuepausecommand)
2072 FN_LOCAL_STRING(lp_queueresumecommand, szQueueresumecommand)
2073 static FN_LOCAL_STRING(_lp_printername, szPrintername)
2074 FN_LOCAL_CONST_STRING(lp_printjob_username, szPrintjobUsername)
2075 FN_LOCAL_LIST(lp_hostsallow, szHostsallow)
2076 FN_LOCAL_LIST(lp_hostsdeny, szHostsdeny)
2077 FN_LOCAL_STRING(lp_magicscript, szMagicScript)
2078 FN_LOCAL_STRING(lp_magicoutput, szMagicOutput)
2079 FN_LOCAL_STRING(lp_comment, comment)
2080 FN_LOCAL_STRING(lp_force_user, force_user)
2081 FN_LOCAL_STRING(lp_force_group, force_group)
2082 FN_LOCAL_LIST(lp_readlist, readlist)
2083 FN_LOCAL_LIST(lp_writelist, writelist)
2084 FN_LOCAL_LIST(lp_printer_admin, printer_admin)
2085 FN_LOCAL_STRING(lp_fstype, fstype)
2086 FN_LOCAL_LIST(lp_vfs_objects, szVfsObjects)
2087 FN_LOCAL_STRING(lp_msdfs_proxy, szMSDfsProxy)
2088 static FN_LOCAL_STRING(lp_volume, volume)
2089 FN_LOCAL_STRING(lp_veto_files, szVetoFiles)
2090 FN_LOCAL_STRING(lp_hide_files, szHideFiles)
2091 FN_LOCAL_STRING(lp_veto_oplocks, szVetoOplockFiles)
2092 FN_LOCAL_BOOL(lp_msdfs_root, bMSDfsRoot)
2093 FN_LOCAL_STRING(lp_aio_write_behind, szAioWriteBehind)
2094 FN_LOCAL_STRING(lp_dfree_command, szDfree)
2095 FN_LOCAL_BOOL(lp_autoloaded, autoloaded)
2096 FN_LOCAL_BOOL(lp_preexec_close, bPreexecClose)
2097 FN_LOCAL_BOOL(lp_rootpreexec_close, bRootpreexecClose)
2098 FN_LOCAL_INTEGER(lp_casesensitive, iCaseSensitive)
2099 FN_LOCAL_BOOL(lp_preservecase, bCasePreserve)
2100 FN_LOCAL_BOOL(lp_shortpreservecase, bShortCasePreserve)
2101 FN_LOCAL_BOOL(lp_hide_dot_files, bHideDotFiles)
2102 FN_LOCAL_BOOL(lp_hide_special_files, bHideSpecialFiles)
2103 FN_LOCAL_BOOL(lp_hideunreadable, bHideUnReadable)
2104 FN_LOCAL_BOOL(lp_hideunwriteable_files, bHideUnWriteableFiles)
2105 FN_LOCAL_BOOL(lp_browseable, bBrowseable)
2106 FN_LOCAL_BOOL(lp_readonly, bRead_only)
2107 FN_LOCAL_BOOL(lp_no_set_dir, bNo_set_dir)
2108 FN_LOCAL_BOOL(lp_guest_ok, bGuest_ok)
2109 FN_LOCAL_BOOL(lp_guest_only, bGuest_only)
2110 FN_LOCAL_BOOL(lp_print_ok, bPrint_ok)
2111 FN_LOCAL_BOOL(lp_map_hidden, bMap_hidden)
2112 FN_LOCAL_BOOL(lp_map_archive, bMap_archive)
2113 FN_LOCAL_BOOL(lp_store_dos_attributes, bStoreDosAttributes)
2114 FN_LOCAL_BOOL(lp_dmapi_support, bDmapiSupport)
2115 FN_LOCAL_PARM_BOOL(lp_locking, bLocking)
2116 FN_LOCAL_PARM_INTEGER(lp_strict_locking, iStrictLocking)
2117 FN_LOCAL_PARM_BOOL(lp_posix_locking, bPosixLocking)
2118 FN_LOCAL_BOOL(lp_share_modes, bShareModes)
2119 FN_LOCAL_BOOL(lp_oplocks, bOpLocks)
2120 FN_LOCAL_BOOL(lp_level2_oplocks, bLevel2OpLocks)
2121 FN_LOCAL_BOOL(lp_onlyuser, bOnlyUser)
2122 FN_LOCAL_PARM_BOOL(lp_manglednames, bMangledNames)
2123 FN_LOCAL_BOOL(lp_widelinks, bWidelinks)
2124 FN_LOCAL_BOOL(lp_symlinks, bSymlinks)
2125 FN_LOCAL_BOOL(lp_syncalways, bSyncAlways)
2126 FN_LOCAL_BOOL(lp_strict_allocate, bStrictAllocate)
2127 FN_LOCAL_BOOL(lp_strict_sync, bStrictSync)
2128 FN_LOCAL_BOOL(lp_map_system, bMap_system)
2129 FN_LOCAL_BOOL(lp_delete_readonly, bDeleteReadonly)
2130 FN_LOCAL_BOOL(lp_fake_oplocks, bFakeOplocks)
2131 FN_LOCAL_BOOL(lp_recursive_veto_delete, bDeleteVetoFiles)
2132 FN_LOCAL_BOOL(lp_dos_filemode, bDosFilemode)
2133 FN_LOCAL_BOOL(lp_dos_filetimes, bDosFiletimes)
2134 FN_LOCAL_BOOL(lp_dos_filetime_resolution, bDosFiletimeResolution)
2135 FN_LOCAL_BOOL(lp_fake_dir_create_times, bFakeDirCreateTimes)
2136 FN_LOCAL_BOOL(lp_blocking_locks, bBlockingLocks)
2137 FN_LOCAL_BOOL(lp_inherit_perms, bInheritPerms)
2138 FN_LOCAL_BOOL(lp_inherit_acls, bInheritACLS)
2139 FN_LOCAL_BOOL(lp_inherit_owner, bInheritOwner)
2140 FN_LOCAL_BOOL(lp_use_client_driver, bUseClientDriver)
2141 FN_LOCAL_BOOL(lp_default_devmode, bDefaultDevmode)
2142 FN_LOCAL_BOOL(lp_force_printername, bForcePrintername)
2143 FN_LOCAL_BOOL(lp_nt_acl_support, bNTAclSupport)
2144 FN_LOCAL_BOOL(lp_force_unknown_acl_user, bForceUnknownAclUser)
2145 FN_LOCAL_BOOL(lp_ea_support, bEASupport)
2146 FN_LOCAL_BOOL(_lp_use_sendfile, bUseSendfile)
2147 FN_LOCAL_BOOL(lp_profile_acls, bProfileAcls)
2148 FN_LOCAL_BOOL(lp_map_acl_inherit, bMap_acl_inherit)
2149 FN_LOCAL_BOOL(lp_afs_share, bAfs_Share)
2150 FN_LOCAL_BOOL(lp_acl_check_permissions, bAclCheckPermissions)
2151 FN_LOCAL_BOOL(lp_acl_group_control, bAclGroupControl)
2152 FN_LOCAL_BOOL(lp_acl_map_full_control, bAclMapFullControl)
2153 FN_LOCAL_INTEGER(lp_create_mask, iCreate_mask)
2154 FN_LOCAL_INTEGER(lp_force_create_mode, iCreate_force_mode)
2155 FN_LOCAL_INTEGER(lp_security_mask, iSecurity_mask)
2156 FN_LOCAL_INTEGER(lp_force_security_mode, iSecurity_force_mode)
2157 FN_LOCAL_INTEGER(lp_dir_mask, iDir_mask)
2158 FN_LOCAL_INTEGER(lp_force_dir_mode, iDir_force_mode)
2159 FN_LOCAL_INTEGER(lp_dir_security_mask, iDir_Security_mask)
2160 FN_LOCAL_INTEGER(lp_force_dir_security_mode, iDir_Security_force_mode)
2161 FN_LOCAL_INTEGER(lp_max_connections, iMaxConnections)
2162 FN_LOCAL_INTEGER(lp_defaultcase, iDefaultCase)
2163 FN_LOCAL_INTEGER(lp_minprintspace, iMinPrintSpace)
2164 FN_LOCAL_INTEGER(lp_printing, iPrinting)
2165 FN_LOCAL_INTEGER(lp_max_reported_jobs, iMaxReportedPrintJobs)
2166 FN_LOCAL_INTEGER(lp_oplock_contention_limit, iOplockContentionLimit)
2167 FN_LOCAL_INTEGER(lp_csc_policy, iCSCPolicy)
2168 FN_LOCAL_INTEGER(lp_write_cache_size, iWriteCacheSize)
2169 FN_LOCAL_INTEGER(lp_block_size, iBlock_size)
2170 FN_LOCAL_INTEGER(lp_dfree_cache_time, iDfreeCacheTime)
2171 FN_LOCAL_INTEGER(lp_allocation_roundup_size, iallocation_roundup_size)
2172 FN_LOCAL_INTEGER(lp_aio_read_size, iAioReadSize)
2173 FN_LOCAL_INTEGER(lp_aio_write_size, iAioWriteSize)
2174 FN_LOCAL_INTEGER(lp_map_readonly, iMap_readonly)
2175 FN_LOCAL_INTEGER(lp_directory_name_cache_size, iDirectoryNameCacheSize)
2176 FN_LOCAL_CHAR(lp_magicchar, magic_char)
2177 FN_GLOBAL_INTEGER(lp_winbind_cache_time, &Globals.winbind_cache_time)
2178 FN_GLOBAL_LIST(lp_winbind_nss_info, &Globals.szWinbindNssInfo)
2179 FN_GLOBAL_INTEGER(lp_algorithmic_rid_base, &Globals.AlgorithmicRidBase)
2180 FN_GLOBAL_INTEGER(lp_name_cache_timeout, &Globals.name_cache_timeout)
2181 FN_GLOBAL_INTEGER(lp_client_signing, &Globals.client_signing)
2182 FN_GLOBAL_INTEGER(lp_server_signing, &Globals.server_signing)
2183 FN_GLOBAL_INTEGER(lp_client_ldap_sasl_wrapping, &Globals.client_ldap_sasl_wrapping)
2184
2185 /* local prototypes */
2186
2187 static int map_parameter(const char *pszParmName);
2188 static int map_parameter_canonical(const char *pszParmName, bool *inverse);
2189 static bool set_boolean(bool *pb, const char *pszParmValue);
2190 static const char *get_boolean(bool bool_value);
2191 static int getservicebyname(const char *pszServiceName,
2192                             service * pserviceDest);
2193 static void copy_service(service * pserviceDest,
2194                          service * pserviceSource,
2195                          struct bitmap *pcopymapDest);
2196 static bool do_parameter(const char *pszParmName, const char *pszParmValue);
2197 static bool do_section(const char *pszSectionName);
2198 static void init_copymap(service * pservice);
2199 static bool hash_a_service(const char *name, int number);
2200 static void free_service_byindex(int iService);
2201 static char * canonicalize_servicename(const char *name);
2202 static void show_parameter(int parmIndex);
2203 static bool is_synonym_of(int parm1, int parm2, bool *inverse);
2204
2205 /* This is a helper function for parametrical options support. */
2206 /* It returns a pointer to parametrical option value if it exists or NULL otherwise */
2207 /* Actual parametrical functions are quite simple */
2208 static param_opt_struct *get_parametrics(int snum, const char *type, const char *option)
2209 {
2210         bool global_section = False;
2211         char* param_key;
2212         param_opt_struct *data;
2213
2214         if (snum >= iNumServices) return NULL;
2215
2216         if (snum < 0) {
2217                 data = Globals.param_opt;
2218                 global_section = True;
2219         } else {
2220                 data = ServicePtrs[snum]->param_opt;
2221         }
2222
2223         asprintf(&param_key, "%s:%s", type, option);
2224         if (!param_key) {
2225                 DEBUG(0,("asprintf failed!\n"));
2226                 return NULL;
2227         }
2228
2229         while (data) {
2230                 if (strcmp(data->key, param_key) == 0) {
2231                         string_free(&param_key);
2232                         return data;
2233                 }
2234                 data = data->next;
2235         }
2236
2237         if (!global_section) {
2238                 /* Try to fetch the same option but from globals */
2239                 /* but only if we are not already working with Globals */
2240                 data = Globals.param_opt;
2241                 while (data) {
2242                         if (strcmp(data->key, param_key) == 0) {
2243                                 string_free(&param_key);
2244                                 return data;
2245                         }
2246                         data = data->next;
2247                 }
2248         }
2249
2250         string_free(&param_key);
2251
2252         return NULL;
2253 }
2254
2255
2256 #define MISSING_PARAMETER(name) \
2257     DEBUG(0, ("%s(): value is NULL or empty!\n", #name))
2258
2259 /*******************************************************************
2260 convenience routine to return int parameters.
2261 ********************************************************************/
2262 static int lp_int(const char *s)
2263 {
2264
2265         if (!s || !*s) {
2266                 MISSING_PARAMETER(lp_int);
2267                 return (-1);
2268         }
2269
2270         return (int)strtol(s, NULL, 0);
2271 }
2272
2273 /*******************************************************************
2274 convenience routine to return unsigned long parameters.
2275 ********************************************************************/
2276 static unsigned long lp_ulong(const char *s)
2277 {
2278
2279         if (!s || !*s) {
2280                 MISSING_PARAMETER(lp_ulong);
2281                 return (0);
2282         }
2283
2284         return strtoul(s, NULL, 0);
2285 }
2286
2287 /*******************************************************************
2288 convenience routine to return boolean parameters.
2289 ********************************************************************/
2290 static bool lp_bool(const char *s)
2291 {
2292         bool ret = False;
2293
2294         if (!s || !*s) {
2295                 MISSING_PARAMETER(lp_bool);
2296                 return False;
2297         }
2298
2299         if (!set_boolean(&ret,s)) {
2300                 DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
2301                 return False;
2302         }
2303
2304         return ret;
2305 }
2306
2307 /*******************************************************************
2308 convenience routine to return enum parameters.
2309 ********************************************************************/
2310 static int lp_enum(const char *s,const struct enum_list *_enum)
2311 {
2312         int i;
2313
2314         if (!s || !*s || !_enum) {
2315                 MISSING_PARAMETER(lp_enum);
2316                 return (-1);
2317         }
2318
2319         for (i=0; _enum[i].name; i++) {
2320                 if (strequal(_enum[i].name,s))
2321                         return _enum[i].value;
2322         }
2323
2324         DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
2325         return (-1);
2326 }
2327
2328 #undef MISSING_PARAMETER
2329
2330 /* DO NOT USE lp_parm_string ANYMORE!!!!
2331  * use lp_parm_const_string or lp_parm_talloc_string
2332  *
2333  * lp_parm_string is only used to let old modules find this symbol
2334  */
2335 #undef lp_parm_string
2336  char *lp_parm_string(const char *servicename, const char *type, const char *option);
2337  char *lp_parm_string(const char *servicename, const char *type, const char *option)
2338 {
2339         return lp_parm_talloc_string(lp_servicenumber(servicename), type, option, NULL);
2340 }
2341
2342 /* Return parametric option from a given service. Type is a part of option before ':' */
2343 /* Parametric option has following syntax: 'Type: option = value' */
2344 /* the returned value is talloced on the talloc_tos() */
2345 char *lp_parm_talloc_string(int snum, const char *type, const char *option, const char *def)
2346 {
2347         param_opt_struct *data = get_parametrics(snum, type, option);
2348
2349         if (data == NULL||data->value==NULL) {
2350                 if (def) {
2351                         return lp_string(def);
2352                 } else {
2353                         return NULL;
2354                 }
2355         }
2356
2357         return lp_string(data->value);
2358 }
2359
2360 /* Return parametric option from a given service. Type is a part of option before ':' */
2361 /* Parametric option has following syntax: 'Type: option = value' */
2362 const char *lp_parm_const_string(int snum, const char *type, const char *option, const char *def)
2363 {
2364         param_opt_struct *data = get_parametrics(snum, type, option);
2365
2366         if (data == NULL||data->value==NULL)
2367                 return def;
2368
2369         return data->value;
2370 }
2371
2372 /* Return parametric option from a given service. Type is a part of option before ':' */
2373 /* Parametric option has following syntax: 'Type: option = value' */
2374
2375 const char **lp_parm_string_list(int snum, const char *type, const char *option, const char **def)
2376 {
2377         param_opt_struct *data = get_parametrics(snum, type, option);
2378
2379         if (data == NULL||data->value==NULL)
2380                 return (const char **)def;
2381
2382         if (data->list==NULL) {
2383                 data->list = str_list_make(data->value, NULL);
2384         }
2385
2386         return (const char **)data->list;
2387 }
2388
2389 /* Return parametric option from a given service. Type is a part of option before ':' */
2390 /* Parametric option has following syntax: 'Type: option = value' */
2391
2392 int lp_parm_int(int snum, const char *type, const char *option, int def)
2393 {
2394         param_opt_struct *data = get_parametrics(snum, type, option);
2395
2396         if (data && data->value && *data->value)
2397                 return lp_int(data->value);
2398
2399         return def;
2400 }
2401
2402 /* Return parametric option from a given service. Type is a part of option before ':' */
2403 /* Parametric option has following syntax: 'Type: option = value' */
2404
2405 unsigned long lp_parm_ulong(int snum, const char *type, const char *option, unsigned long def)
2406 {
2407         param_opt_struct *data = get_parametrics(snum, type, option);
2408
2409         if (data && data->value && *data->value)
2410                 return lp_ulong(data->value);
2411
2412         return def;
2413 }
2414
2415 /* Return parametric option from a given service. Type is a part of option before ':' */
2416 /* Parametric option has following syntax: 'Type: option = value' */
2417
2418 bool lp_parm_bool(int snum, const char *type, const char *option, bool def)
2419 {
2420         param_opt_struct *data = get_parametrics(snum, type, option);
2421
2422         if (data && data->value && *data->value)
2423                 return lp_bool(data->value);
2424
2425         return def;
2426 }
2427
2428 /* Return parametric option from a given service. Type is a part of option before ':' */
2429 /* Parametric option has following syntax: 'Type: option = value' */
2430
2431 int lp_parm_enum(int snum, const char *type, const char *option,
2432                  const struct enum_list *_enum, int def)
2433 {
2434         param_opt_struct *data = get_parametrics(snum, type, option);
2435
2436         if (data && data->value && *data->value && _enum)
2437                 return lp_enum(data->value, _enum);
2438
2439         return def;
2440 }
2441
2442
2443 /***************************************************************************
2444  Initialise a service to the defaults.
2445 ***************************************************************************/
2446
2447 static void init_service(service * pservice)
2448 {
2449         memset((char *)pservice, '\0', sizeof(service));
2450         copy_service(pservice, &sDefault, NULL);
2451 }
2452
2453 /***************************************************************************
2454  Free the dynamically allocated parts of a service struct.
2455 ***************************************************************************/
2456
2457 static void free_service(service *pservice)
2458 {
2459         int i;
2460         param_opt_struct *data, *pdata;
2461         if (!pservice)
2462                 return;
2463
2464         if (pservice->szService)
2465                 DEBUG(5, ("free_service: Freeing service %s\n",
2466                        pservice->szService));
2467
2468         string_free(&pservice->szService);
2469         bitmap_free(pservice->copymap);
2470
2471         for (i = 0; parm_table[i].label; i++) {
2472                 if ((parm_table[i].type == P_STRING ||
2473                      parm_table[i].type == P_USTRING) &&
2474                     parm_table[i].p_class == P_LOCAL)
2475                         string_free((char **)
2476                                     (((char *)pservice) +
2477                                      PTR_DIFF(parm_table[i].ptr, &sDefault)));
2478                 else if (parm_table[i].type == P_LIST &&
2479                          parm_table[i].p_class == P_LOCAL)
2480                              str_list_free((char ***)
2481                                             (((char *)pservice) +
2482                                              PTR_DIFF(parm_table[i].ptr, &sDefault)));
2483         }
2484
2485         data = pservice->param_opt;
2486         if (data)
2487                 DEBUG(5,("Freeing parametrics:\n"));
2488         while (data) {
2489                 DEBUG(5,("[%s = %s]\n", data->key, data->value));
2490                 string_free(&data->key);
2491                 string_free(&data->value);
2492                 str_list_free(&data->list);
2493                 pdata = data->next;
2494                 SAFE_FREE(data);
2495                 data = pdata;
2496         }
2497
2498         ZERO_STRUCTP(pservice);
2499 }
2500
2501
2502 /***************************************************************************
2503  remove a service indexed in the ServicePtrs array from the ServiceHash
2504  and free the dynamically allocated parts
2505 ***************************************************************************/
2506
2507 static void free_service_byindex(int idx)
2508 {
2509         if ( !LP_SNUM_OK(idx) )
2510                 return;
2511
2512         ServicePtrs[idx]->valid = False;
2513         invalid_services[num_invalid_services++] = idx;
2514
2515         /* we have to cleanup the hash record */
2516
2517         if (ServicePtrs[idx]->szService) {
2518                 char *canon_name = canonicalize_servicename(
2519                         ServicePtrs[idx]->szService );
2520
2521                 dbwrap_delete_bystring(ServiceHash, canon_name );
2522                 TALLOC_FREE(canon_name);
2523         }
2524
2525         free_service(ServicePtrs[idx]);
2526 }
2527
2528 /***************************************************************************
2529  Add a new service to the services array initialising it with the given
2530  service.
2531 ***************************************************************************/
2532
2533 static int add_a_service(const service *pservice, const char *name)
2534 {
2535         int i;
2536         service tservice;
2537         int num_to_alloc = iNumServices + 1;
2538         param_opt_struct *data, *pdata;
2539
2540         tservice = *pservice;
2541
2542         /* it might already exist */
2543         if (name) {
2544                 i = getservicebyname(name, NULL);
2545                 if (i >= 0) {
2546                         /* Clean all parametric options for service */
2547                         /* They will be added during parsing again */
2548                         data = ServicePtrs[i]->param_opt;
2549                         while (data) {
2550                                 string_free(&data->key);
2551                                 string_free(&data->value);
2552                                 str_list_free(&data->list);
2553                                 pdata = data->next;
2554                                 SAFE_FREE(data);
2555                                 data = pdata;
2556                         }
2557                         ServicePtrs[i]->param_opt = NULL;
2558                         return (i);
2559                 }
2560         }
2561
2562         /* find an invalid one */
2563         i = iNumServices;
2564         if (num_invalid_services > 0) {
2565                 i = invalid_services[--num_invalid_services];
2566         }
2567
2568         /* if not, then create one */
2569         if (i == iNumServices) {
2570                 service **tsp;
2571                 int *tinvalid;
2572
2573                 tsp = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(ServicePtrs, service *, num_to_alloc);
2574                 if (tsp == NULL) {
2575                         DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
2576                         return (-1);
2577                 }
2578                 ServicePtrs = tsp;
2579                 ServicePtrs[iNumServices] = SMB_MALLOC_P(service);
2580                 if (!ServicePtrs[iNumServices]) {
2581                         DEBUG(0,("add_a_service: out of memory!\n"));
2582                         return (-1);
2583                 }
2584                 iNumServices++;
2585
2586                 /* enlarge invalid_services here for now... */
2587                 tinvalid = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(invalid_services, int,
2588                                              num_to_alloc);
2589                 if (tinvalid == NULL) {
2590                         DEBUG(0,("add_a_service: failed to enlarge "
2591                                  "invalid_services!\n"));
2592                         return (-1);
2593                 }
2594                 invalid_services = tinvalid;
2595         } else {
2596                 free_service_byindex(i);
2597         }
2598
2599         ServicePtrs[i]->valid = True;
2600
2601         init_service(ServicePtrs[i]);
2602         copy_service(ServicePtrs[i], &tservice, NULL);
2603         if (name)
2604                 string_set(&ServicePtrs[i]->szService, name);
2605
2606         DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
2607                 i, ServicePtrs[i]->szService));
2608
2609         if (!hash_a_service(ServicePtrs[i]->szService, i)) {
2610                 return (-1);
2611         }
2612
2613         return (i);
2614 }
2615
2616 /***************************************************************************
2617   Convert a string to uppercase and remove whitespaces.
2618 ***************************************************************************/
2619
2620 static char *canonicalize_servicename(const char *src)
2621 {
2622         char *result;
2623
2624         if ( !src ) {
2625                 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
2626                 return NULL;
2627         }
2628
2629         result = talloc_strdup(talloc_tos(), src);
2630         SMB_ASSERT(result != NULL);
2631
2632         strlower_m(result);
2633         return result;
2634 }
2635
2636 /***************************************************************************
2637   Add a name/index pair for the services array to the hash table.
2638 ***************************************************************************/
2639
2640 static bool hash_a_service(const char *name, int idx)
2641 {
2642         char *canon_name;
2643
2644         if ( !ServiceHash ) {
2645                 DEBUG(10,("hash_a_service: creating servicehash\n"));
2646                 ServiceHash = db_open_rbt(NULL);
2647                 if ( !ServiceHash ) {
2648                         DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
2649                         return False;
2650                 }
2651         }
2652
2653         DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
2654                 idx, name));
2655
2656         canon_name = canonicalize_servicename( name );
2657
2658         dbwrap_store_bystring(ServiceHash, canon_name,
2659                               make_tdb_data((uint8 *)&idx, sizeof(idx)),
2660                               TDB_REPLACE);
2661
2662         TALLOC_FREE(canon_name);
2663
2664         return True;
2665 }
2666
2667 /***************************************************************************
2668  Add a new home service, with the specified home directory, defaults coming
2669  from service ifrom.
2670 ***************************************************************************/
2671
2672 bool lp_add_home(const char *pszHomename, int iDefaultService,
2673                  const char *user, const char *pszHomedir)
2674 {
2675         int i;
2676
2677         i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
2678
2679         if (i < 0)
2680                 return (False);
2681
2682         if (!(*(ServicePtrs[iDefaultService]->szPath))
2683             || strequal(ServicePtrs[iDefaultService]->szPath, lp_pathname(GLOBAL_SECTION_SNUM))) {
2684                 string_set(&ServicePtrs[i]->szPath, pszHomedir);
2685         }
2686
2687         if (!(*(ServicePtrs[i]->comment))) {
2688                 char *comment = NULL;
2689                 if (asprintf(&comment, "Home directory of %s", user) < 0) {
2690                         return false;
2691                 }
2692                 string_set(&ServicePtrs[i]->comment, comment);
2693                 SAFE_FREE(comment);
2694         }
2695
2696         /* set the browseable flag from the global default */
2697
2698         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2699
2700         ServicePtrs[i]->autoloaded = True;
2701
2702         DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename,
2703                user, ServicePtrs[i]->szPath ));
2704
2705         return (True);
2706 }
2707
2708 /***************************************************************************
2709  Add a new service, based on an old one.
2710 ***************************************************************************/
2711
2712 int lp_add_service(const char *pszService, int iDefaultService)
2713 {
2714         if (iDefaultService < 0) {
2715                 return add_a_service(&sDefault, pszService);
2716         }
2717
2718         return (add_a_service(ServicePtrs[iDefaultService], pszService));
2719 }
2720
2721 /***************************************************************************
2722  Add the IPC service.
2723 ***************************************************************************/
2724
2725 static bool lp_add_ipc(const char *ipc_name, bool guest_ok)
2726 {
2727         char *comment = NULL;
2728         int i = add_a_service(&sDefault, ipc_name);
2729
2730         if (i < 0)
2731                 return (False);
2732
2733         if (asprintf(&comment, "IPC Service (%s)",
2734                                 Globals.szServerString) < 0) {
2735                 return (False);
2736         }
2737
2738         string_set(&ServicePtrs[i]->szPath, tmpdir());
2739         string_set(&ServicePtrs[i]->szUsername, "");
2740         string_set(&ServicePtrs[i]->comment, comment);
2741         string_set(&ServicePtrs[i]->fstype, "IPC");
2742         ServicePtrs[i]->iMaxConnections = 0;
2743         ServicePtrs[i]->bAvailable = True;
2744         ServicePtrs[i]->bRead_only = True;
2745         ServicePtrs[i]->bGuest_only = False;
2746         ServicePtrs[i]->bGuest_ok = guest_ok;
2747         ServicePtrs[i]->bPrint_ok = False;
2748         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2749
2750         DEBUG(3, ("adding IPC service\n"));
2751
2752         SAFE_FREE(comment);
2753         return (True);
2754 }
2755
2756 /***************************************************************************
2757  Add a new printer service, with defaults coming from service iFrom.
2758 ***************************************************************************/
2759
2760 bool lp_add_printer(const char *pszPrintername, int iDefaultService)
2761 {
2762         const char *comment = "From Printcap";
2763         int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
2764
2765         if (i < 0)
2766                 return (False);
2767
2768         /* note that we do NOT default the availability flag to True - */
2769         /* we take it from the default service passed. This allows all */
2770         /* dynamic printers to be disabled by disabling the [printers] */
2771         /* entry (if/when the 'available' keyword is implemented!).    */
2772
2773         /* the printer name is set to the service name. */
2774         string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
2775         string_set(&ServicePtrs[i]->comment, comment);
2776
2777         /* set the browseable flag from the gloabl default */
2778         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2779
2780         /* Printers cannot be read_only. */
2781         ServicePtrs[i]->bRead_only = False;
2782         /* No share modes on printer services. */
2783         ServicePtrs[i]->bShareModes = False;
2784         /* No oplocks on printer services. */
2785         ServicePtrs[i]->bOpLocks = False;
2786         /* Printer services must be printable. */
2787         ServicePtrs[i]->bPrint_ok = True;
2788
2789         DEBUG(3, ("adding printer service %s\n", pszPrintername));
2790
2791         return (True);
2792 }
2793
2794
2795 /***************************************************************************
2796  Check whether the given parameter name is valid.
2797  Parametric options (names containing a colon) are considered valid.
2798 ***************************************************************************/
2799
2800 bool lp_parameter_is_valid(const char *pszParmName)
2801 {
2802         return ((map_parameter(pszParmName) != -1) ||
2803                 (strchr(pszParmName, ':') != NULL));
2804 }
2805
2806 /***************************************************************************
2807  Check whether the given name is the name of a global parameter.
2808  Returns True for strings belonging to parameters of class
2809  P_GLOBAL, False for all other strings, also for parametric options
2810  and strings not belonging to any option.
2811 ***************************************************************************/
2812
2813 bool lp_parameter_is_global(const char *pszParmName)
2814 {
2815         int num = map_parameter(pszParmName);
2816
2817         if (num >= 0) {
2818                 return (parm_table[num].p_class == P_GLOBAL);
2819         }
2820
2821         return False;
2822 }
2823
2824 /**************************************************************************
2825  Check whether the given name is the canonical name of a parameter.
2826  Returns False if it is not a valid parameter Name.
2827  For parametric options, True is returned.
2828 **************************************************************************/
2829
2830 bool lp_parameter_is_canonical(const char *parm_name)
2831 {
2832         if (!lp_parameter_is_valid(parm_name)) {
2833                 return False;
2834         }
2835
2836         return (map_parameter(parm_name) ==
2837                 map_parameter_canonical(parm_name, NULL));
2838 }
2839
2840 /**************************************************************************
2841  Determine the canonical name for a parameter.
2842  Indicate when it is an inverse (boolean) synonym instead of a
2843  "usual" synonym.
2844 **************************************************************************/
2845
2846 bool lp_canonicalize_parameter(const char *parm_name, const char **canon_parm,
2847                                bool *inverse)
2848 {
2849         int num;
2850
2851         if (!lp_parameter_is_valid(parm_name)) {
2852                 *canon_parm = NULL;
2853                 return False;
2854         }
2855
2856         num = map_parameter_canonical(parm_name, inverse);
2857         if (num < 0) {
2858                 /* parametric option */
2859                 *canon_parm = parm_name;
2860         } else {
2861                 *canon_parm = parm_table[num].label;
2862         }
2863
2864         return True;
2865
2866 }
2867
2868 /**************************************************************************
2869  Determine the canonical name for a parameter.
2870  Turn the value given into the inverse boolean expression when
2871  the synonym is an invers boolean synonym.
2872
2873  Return True if parm_name is a valid parameter name and
2874  in case it is an invers boolean synonym, if the val string could
2875  successfully be converted to the reverse bool.
2876  Return false in all other cases.
2877 **************************************************************************/
2878
2879 bool lp_canonicalize_parameter_with_value(const char *parm_name,
2880                                           const char *val,
2881                                           const char **canon_parm,
2882                                           const char **canon_val)
2883 {
2884         int num;
2885         bool inverse;
2886
2887         if (!lp_parameter_is_valid(parm_name)) {
2888                 *canon_parm = NULL;
2889                 *canon_val = NULL;
2890                 return False;
2891         }
2892
2893         num = map_parameter_canonical(parm_name, &inverse);
2894         if (num < 0) {
2895                 /* parametric option */
2896                 *canon_parm = parm_name;
2897                 *canon_val = val;
2898         } else {
2899                 *canon_parm = parm_table[num].label;
2900                 if (inverse) {
2901                         if (!lp_invert_boolean(val, canon_val)) {
2902                                 *canon_val = NULL;
2903                                 return False;
2904                         }
2905                 } else {
2906                         *canon_val = val;
2907                 }
2908         }
2909
2910         return True;
2911 }
2912
2913 /***************************************************************************
2914  Map a parameter's string representation to something we can use.
2915  Returns False if the parameter string is not recognised, else TRUE.
2916 ***************************************************************************/
2917
2918 static int map_parameter(const char *pszParmName)
2919 {
2920         int iIndex;
2921
2922         if (*pszParmName == '-')
2923                 return (-1);
2924
2925         for (iIndex = 0; parm_table[iIndex].label; iIndex++)
2926                 if (strwicmp(parm_table[iIndex].label, pszParmName) == 0)
2927                         return (iIndex);
2928
2929         /* Warn only if it isn't parametric option */
2930         if (strchr(pszParmName, ':') == NULL)
2931                 DEBUG(0, ("Unknown parameter encountered: \"%s\"\n", pszParmName));
2932         /* We do return 'fail' for parametric options as well because they are
2933            stored in different storage
2934          */
2935         return (-1);
2936 }
2937
2938 /***************************************************************************
2939  Map a parameter's string representation to the index of the canonical
2940  form of the parameter (it might be a synonym).
2941  Returns -1 if the parameter string is not recognised.
2942 ***************************************************************************/
2943
2944 static int map_parameter_canonical(const char *pszParmName, bool *inverse)
2945 {
2946         int parm_num, canon_num;
2947         bool loc_inverse = False;
2948
2949         parm_num = map_parameter(pszParmName);
2950         if ((parm_num < 0) || !(parm_table[parm_num].flags & FLAG_HIDE)) {
2951                 /* invalid, parametric or no canidate for synonyms ... */
2952                 goto done;
2953         }
2954
2955         for (canon_num = 0; parm_table[canon_num].label; canon_num++) {
2956                 if (is_synonym_of(parm_num, canon_num, &loc_inverse)) {
2957                         parm_num = canon_num;
2958                         goto done;
2959                 }
2960         }
2961
2962 done:
2963         if (inverse != NULL) {
2964                 *inverse = loc_inverse;
2965         }
2966         return parm_num;
2967 }
2968
2969 /***************************************************************************
2970  return true if parameter number parm1 is a synonym of parameter
2971  number parm2 (parm2 being the principal name).
2972  set inverse to True if parm1 is P_BOOLREV and parm2 is P_BOOL,
2973  False otherwise.
2974 ***************************************************************************/
2975
2976 static bool is_synonym_of(int parm1, int parm2, bool *inverse)
2977 {
2978         if ((parm_table[parm1].ptr == parm_table[parm2].ptr) &&
2979             (parm_table[parm1].flags & FLAG_HIDE) &&
2980             !(parm_table[parm2].flags & FLAG_HIDE))
2981         {
2982                 if (inverse != NULL) {
2983                         if ((parm_table[parm1].type == P_BOOLREV) &&
2984                             (parm_table[parm2].type == P_BOOL))
2985                         {
2986                                 *inverse = True;
2987                         } else {
2988                                 *inverse = False;
2989                         }
2990                 }
2991                 return True;
2992         }
2993         return False;
2994 }
2995
2996 /***************************************************************************
2997  Show one parameter's name, type, [values,] and flags.
2998  (helper functions for show_parameter_list)
2999 ***************************************************************************/
3000
3001 static void show_parameter(int parmIndex)
3002 {
3003         int enumIndex, flagIndex;
3004         int parmIndex2;
3005         bool hadFlag;
3006         bool hadSyn;
3007         bool inverse;
3008         const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
3009                 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING",
3010                 "P_ENUM", "P_SEP"};
3011         unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
3012                 FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
3013                 FLAG_HIDE, FLAG_DOS_STRING};
3014         const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
3015                 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
3016                 "FLAG_DEPRECATED", "FLAG_HIDE", "FLAG_DOS_STRING", NULL};
3017
3018         printf("%s=%s", parm_table[parmIndex].label,
3019                type[parm_table[parmIndex].type]);
3020         if (parm_table[parmIndex].type == P_ENUM) {
3021                 printf(",");
3022                 for (enumIndex=0;
3023                      parm_table[parmIndex].enum_list[enumIndex].name;
3024                      enumIndex++)
3025                 {
3026                         printf("%s%s",
3027                                enumIndex ? "|" : "",
3028                                parm_table[parmIndex].enum_list[enumIndex].name);
3029                 }
3030         }
3031         printf(",");
3032         hadFlag = False;
3033         for (flagIndex=0; flag_names[flagIndex]; flagIndex++) {
3034                 if (parm_table[parmIndex].flags & flags[flagIndex]) {
3035                         printf("%s%s",
3036                                 hadFlag ? "|" : "",
3037                                 flag_names[flagIndex]);
3038                         hadFlag = True;
3039                 }
3040         }
3041
3042         /* output synonyms */
3043         hadSyn = False;
3044         for (parmIndex2=0; parm_table[parmIndex2].label; parmIndex2++) {
3045                 if (is_synonym_of(parmIndex, parmIndex2, &inverse)) {
3046                         printf(" (%ssynonym of %s)", inverse ? "inverse " : "",
3047                                parm_table[parmIndex2].label);
3048                 } else if (is_synonym_of(parmIndex2, parmIndex, &inverse)) {
3049                         if (!hadSyn) {
3050                                 printf(" (synonyms: ");
3051                                 hadSyn = True;
3052                         } else {
3053                                 printf(", ");
3054                         }
3055                         printf("%s%s", parm_table[parmIndex2].label,
3056                                inverse ? "[i]" : "");
3057                 }
3058         }
3059         if (hadSyn) {
3060                 printf(")");
3061         }
3062
3063         printf("\n");
3064 }
3065
3066 /***************************************************************************
3067  Show all parameter's name, type, [values,] and flags.
3068 ***************************************************************************/
3069
3070 void show_parameter_list(void)
3071 {
3072         int classIndex, parmIndex;
3073         const char *section_names[] = { "local", "global", NULL};
3074
3075         for (classIndex=0; section_names[classIndex]; classIndex++) {
3076                 printf("[%s]\n", section_names[classIndex]);
3077                 for (parmIndex = 0; parm_table[parmIndex].label; parmIndex++) {
3078                         if (parm_table[parmIndex].p_class == classIndex) {
3079                                 show_parameter(parmIndex);
3080                         }
3081                 }
3082         }
3083 }
3084
3085 /***************************************************************************
3086  Set a boolean variable from the text value stored in the passed string.
3087  Returns True in success, False if the passed string does not correctly
3088  represent a boolean.
3089 ***************************************************************************/
3090
3091 static bool set_boolean(bool *pb, const char *pszParmValue)
3092 {
3093         bool bRetval;
3094         bool value;
3095
3096         bRetval = True;
3097         value = False;
3098         if (strwicmp(pszParmValue, "yes") == 0 ||
3099             strwicmp(pszParmValue, "true") == 0 ||
3100             strwicmp(pszParmValue, "1") == 0)
3101                 value = True;
3102         else if (strwicmp(pszParmValue, "no") == 0 ||
3103                     strwicmp(pszParmValue, "False") == 0 ||
3104                     strwicmp(pszParmValue, "0") == 0)
3105                 value = False;
3106         else {
3107                 DEBUG(2,
3108                       ("ERROR: Badly formed boolean in configuration file: \"%s\".\n",
3109                        pszParmValue));
3110                 bRetval = False;
3111         }
3112
3113         if ((pb != NULL) && (bRetval != False)) {
3114                 *pb = value;
3115         }
3116
3117         return (bRetval);
3118 }
3119
3120
3121 /***************************************************************************
3122  Check if a given string correctly represents a boolean value.
3123 ***************************************************************************/
3124
3125 bool lp_string_is_valid_boolean(const char *parm_value)
3126 {
3127         return set_boolean(NULL, parm_value);
3128 }
3129
3130 /***************************************************************************
3131  Get the standard string representation of a boolean value ("yes" or "no")
3132 ***************************************************************************/
3133
3134 static const char *get_boolean(bool bool_value)
3135 {
3136         static const char *yes_str = "yes";
3137         static const char *no_str = "no";
3138
3139         return (bool_value ? yes_str : no_str);
3140 }
3141
3142 /***************************************************************************
3143  Provide the string of the negated boolean value associated to the boolean
3144  given as a string. Returns False if the passed string does not correctly
3145  represent a boolean.
3146 ***************************************************************************/
3147
3148 bool lp_invert_boolean(const char *str, const char **inverse_str)
3149 {
3150         bool val;
3151
3152         if (!set_boolean(&val, str)) {
3153                 return False;
3154         }
3155
3156         *inverse_str = get_boolean(!val);
3157         return True;
3158 }
3159
3160 /***************************************************************************
3161  Provide the canonical string representation of a boolean value given
3162  as a string. Return True on success, False if the string given does
3163  not correctly represent a boolean.
3164 ***************************************************************************/
3165
3166 bool lp_canonicalize_boolean(const char *str, const char**canon_str)
3167 {
3168         bool val;
3169
3170         if (!set_boolean(&val, str)) {
3171                 return False;
3172         }
3173
3174         *canon_str = get_boolean(val);
3175         return True;
3176 }
3177
3178 /***************************************************************************
3179 Find a service by name. Otherwise works like get_service.
3180 ***************************************************************************/
3181
3182 static int getservicebyname(const char *pszServiceName, service * pserviceDest)
3183 {
3184         int iService = -1;
3185         char *canon_name;
3186         TDB_DATA data;
3187
3188         if (ServiceHash == NULL) {
3189                 return -1;
3190         }
3191
3192         canon_name = canonicalize_servicename(pszServiceName);
3193
3194         data = dbwrap_fetch_bystring(ServiceHash, canon_name, canon_name);
3195
3196         if ((data.dptr != NULL) && (data.dsize == sizeof(iService))) {
3197                 iService = *(int *)data.dptr;
3198         }
3199
3200         TALLOC_FREE(canon_name);
3201
3202         if ((iService != -1) && (LP_SNUM_OK(iService))
3203             && (pserviceDest != NULL)) {
3204                 copy_service(pserviceDest, ServicePtrs[iService], NULL);
3205         }
3206
3207         return (iService);
3208 }
3209
3210 /***************************************************************************
3211  Copy a service structure to another.
3212  If pcopymapDest is NULL then copy all fields
3213 ***************************************************************************/
3214
3215 static void copy_service(service * pserviceDest, service * pserviceSource,
3216                          struct bitmap *pcopymapDest)
3217 {
3218         int i;
3219         bool bcopyall = (pcopymapDest == NULL);
3220         param_opt_struct *data, *pdata, *paramo;
3221         bool not_added;
3222
3223         for (i = 0; parm_table[i].label; i++)
3224                 if (parm_table[i].ptr && parm_table[i].p_class == P_LOCAL &&
3225                     (bcopyall || bitmap_query(pcopymapDest,i))) {
3226                         void *def_ptr = parm_table[i].ptr;
3227                         void *src_ptr =
3228                                 ((char *)pserviceSource) + PTR_DIFF(def_ptr,
3229                                                                     &sDefault);
3230                         void *dest_ptr =
3231                                 ((char *)pserviceDest) + PTR_DIFF(def_ptr,
3232                                                                   &sDefault);
3233
3234                         switch (parm_table[i].type) {
3235                                 case P_BOOL:
3236                                 case P_BOOLREV:
3237                                         *(bool *)dest_ptr = *(bool *)src_ptr;
3238                                         break;
3239
3240                                 case P_INTEGER:
3241                                 case P_ENUM:
3242                                 case P_OCTAL:
3243                                         *(int *)dest_ptr = *(int *)src_ptr;
3244                                         break;
3245
3246                                 case P_CHAR:
3247                                         *(char *)dest_ptr = *(char *)src_ptr;
3248                                         break;
3249
3250                                 case P_STRING:
3251                                         string_set((char **)dest_ptr,
3252                                                    *(char **)src_ptr);
3253                                         break;
3254
3255                                 case P_USTRING:
3256                                         string_set((char **)dest_ptr,
3257                                                    *(char **)src_ptr);
3258                                         strupper_m(*(char **)dest_ptr);
3259                                         break;
3260                                 case P_LIST:
3261                                         str_list_free((char ***)dest_ptr);
3262                                         str_list_copy((char ***)dest_ptr, *(const char ***)src_ptr);
3263                                         break;
3264                                 default:
3265                                         break;
3266                         }
3267                 }
3268
3269         if (bcopyall) {
3270                 init_copymap(pserviceDest);
3271                 if (pserviceSource->copymap)
3272                         bitmap_copy(pserviceDest->copymap,
3273                                     pserviceSource->copymap);
3274         }
3275
3276         data = pserviceSource->param_opt;
3277         while (data) {
3278                 not_added = True;
3279                 pdata = pserviceDest->param_opt;
3280                 /* Traverse destination */
3281                 while (pdata) {
3282                         /* If we already have same option, override it */
3283                         if (strcmp(pdata->key, data->key) == 0) {
3284                                 string_free(&pdata->value);
3285                                 str_list_free(&data->list);
3286                                 pdata->value = SMB_STRDUP(data->value);
3287                                 not_added = False;
3288                                 break;
3289                         }
3290                         pdata = pdata->next;
3291                 }
3292                 if (not_added) {
3293                     paramo = SMB_XMALLOC_P(param_opt_struct);
3294                     paramo->key = SMB_STRDUP(data->key);
3295                     paramo->value = SMB_STRDUP(data->value);
3296                     paramo->list = NULL;
3297                     DLIST_ADD(pserviceDest->param_opt, paramo);
3298                 }
3299                 data = data->next;
3300         }
3301 }
3302
3303 /***************************************************************************
3304 Check a service for consistency. Return False if the service is in any way
3305 incomplete or faulty, else True.
3306 ***************************************************************************/
3307
3308 bool service_ok(int iService)
3309 {
3310         bool bRetval;
3311
3312         bRetval = True;
3313         if (ServicePtrs[iService]->szService[0] == '\0') {
3314                 DEBUG(0, ("The following message indicates an internal error:\n"));
3315                 DEBUG(0, ("No service name in service entry.\n"));
3316                 bRetval = False;
3317         }
3318
3319         /* The [printers] entry MUST be printable. I'm all for flexibility, but */
3320         /* I can't see why you'd want a non-printable printer service...        */
3321         if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
3322                 if (!ServicePtrs[iService]->bPrint_ok) {
3323                         DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
3324                                ServicePtrs[iService]->szService));
3325                         ServicePtrs[iService]->bPrint_ok = True;
3326                 }
3327                 /* [printers] service must also be non-browsable. */
3328                 if (ServicePtrs[iService]->bBrowseable)
3329                         ServicePtrs[iService]->bBrowseable = False;
3330         }
3331
3332         if (ServicePtrs[iService]->szPath[0] == '\0' &&
3333             strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0 &&
3334             ServicePtrs[iService]->szMSDfsProxy[0] == '\0'
3335             ) {
3336                 DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
3337                         ServicePtrs[iService]->szService));
3338                 ServicePtrs[iService]->bAvailable = False;
3339         }
3340
3341         /* If a service is flagged unavailable, log the fact at level 1. */
3342         if (!ServicePtrs[iService]->bAvailable)
3343                 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
3344                           ServicePtrs[iService]->szService));
3345
3346         return (bRetval);
3347 }
3348
3349 /*
3350  * lp_regdb_open - regdb helper function
3351  *
3352  * this should be considered an interim solution that becomes
3353  * superfluous once the registry code has been rewritten
3354  * do allow use of the tdb portion of the registry alone.
3355  *
3356  * in the meanwhile this provides a lean access
3357  * to the registry globals.
3358  */
3359
3360 static struct tdb_wrap *lp_regdb_open(void)
3361 {
3362         struct tdb_wrap *reg_tdb = NULL;
3363         const char *vstring = "INFO/version";
3364         uint32 vers_id;
3365
3366         become_root();
3367         reg_tdb = tdb_wrap_open(NULL, state_path("registry.tdb"), 0,
3368                                 REG_TDB_FLAGS, O_RDWR, 0600);
3369         unbecome_root();
3370         if (!reg_tdb) {
3371                 DEBUG(1, ("lp_regdb_open: failed to open %s: %s\n",
3372                          state_path("registry.tdb"), strerror(errno)));
3373                 goto done;
3374         }
3375         else {
3376                 DEBUG(10, ("lp_regdb_open: reg tdb opened.\n"));
3377         }
3378
3379         vers_id = tdb_fetch_int32(reg_tdb->tdb, vstring);
3380         if (vers_id != REGVER_V1) {
3381                 DEBUG(10, ("lp_regdb_open: INFO: registry tdb %s has wrong "
3382                           "INFO/version (got %d, expected %d)\n",
3383                           state_path("registry.tdb"), vers_id, REGVER_V1));
3384                 /* this is apparently not implemented in the tdb */
3385         }
3386
3387 done:
3388         return reg_tdb;
3389 }
3390
3391 /*
3392  * process_registry_globals
3393  *
3394  * this is the interim version of process_registry globals
3395  *
3396  * until we can do it as we would like using the api and only
3397  * using the tdb portion of the registry (see below),
3398  * this just provides the needed functionality of regdb_fetch_values
3399  * and regdb_unpack_values, circumventing any fancy stuff, to
3400  * give us access to the registry globals.
3401  */
3402 static bool process_registry_globals(bool (*pfunc)(const char *, const char *))
3403 {
3404         bool ret = False;
3405         struct tdb_wrap *reg_tdb = NULL;
3406         WERROR err;
3407         char *keystr;
3408         TDB_DATA data;
3409         /* vars for the tdb unpack loop */
3410         int len = 0;
3411         int i;
3412         int buflen;
3413         uint8 *buf;
3414         uint32 type;
3415         uint32 size;
3416         uint32 num_values = 0;
3417         uint8 *data_p;
3418         char * valstr;
3419         struct registry_value *value = NULL;
3420
3421         include_registry_globals = True;
3422
3423         ZERO_STRUCT(data);
3424
3425         reg_tdb = lp_regdb_open();
3426         if (!reg_tdb) {
3427                 DEBUG(1, ("Error opening the registry!\n"));
3428                 goto done;
3429         }
3430
3431         /* reg_tdb is from now on used as talloc ctx.
3432          * freeing it closes the tdb (if refcount is 0) */
3433
3434         keystr = talloc_asprintf(reg_tdb,"%s/%s/%s", REG_VALUE_PREFIX,
3435                                  KEY_SMBCONF, GLOBAL_NAME);
3436         normalize_dbkey(keystr);
3437
3438         DEBUG(10, ("process_registry_globals: fetching key '%s'\n",
3439                    keystr));
3440
3441         data = tdb_fetch_bystring(reg_tdb->tdb, keystr);
3442         if (!data.dptr) {
3443                 ret = True;
3444                 goto done;
3445         }
3446
3447         buf = data.dptr;
3448         buflen = data.dsize;
3449
3450         /* unpack number of values */
3451         len = tdb_unpack(buf, buflen, "d", &num_values);
3452         DEBUG(10, ("process_registry_globals: got %d values from tdb\n",
3453                    num_values));
3454
3455         /* unpack the values */
3456         for (i=0; i < num_values; i++) {
3457                 fstring valname;
3458                 type = REG_NONE;
3459                 size = 0;
3460                 data_p = NULL;
3461                 len += tdb_unpack(buf+len, buflen-len, "fdB",
3462                                   valname,
3463                                   &type,
3464                                   &size,
3465                                   &data_p);
3466                 if (registry_smbconf_valname_forbidden(valname)) {
3467                         DEBUG(10, ("process_registry_globals: Ignoring "
3468                                    "parameter '%s' in registry.\n", valname));
3469                         continue;
3470                 }
3471                 DEBUG(10, ("process_registry_globals: got value '%s'\n",
3472                            valname));
3473                 if (size && data_p) {
3474                         err = registry_pull_value(reg_tdb,
3475                                                   &value,
3476                                                   (enum winreg_Type)type,
3477                                                   data_p,
3478                                                   size,
3479                                                   size);
3480                         SAFE_FREE(data_p);
3481                         if (!W_ERROR_IS_OK(err)) {
3482                                 goto done;
3483                         }
3484                         switch(type) {
3485                         case REG_DWORD:
3486                                 valstr = talloc_asprintf(reg_tdb, "%d",
3487                                                          value->v.dword);
3488                                 pfunc(valname, valstr);
3489                                 break;
3490                         case REG_SZ:
3491                                 pfunc(valname, value->v.sz.str);
3492                                 break;
3493                         default:
3494                                 /* ignore other types */
3495                                 break;
3496                         }
3497                 }
3498         }
3499
3500         ret = pfunc("registry shares", "yes");
3501         regdb_last_seqnum = tdb_get_seqnum(reg_tdb->tdb);
3502
3503 done:
3504         TALLOC_FREE(reg_tdb);
3505         SAFE_FREE(data.dptr);
3506         return ret;
3507 }
3508
3509 #if 0
3510 /*
3511  * this is process_registry_globals as it _should_ be (roughly)
3512  * using the reg_api functions...
3513  *
3514  */
3515 static bool process_registry_globals(bool (*pfunc)(const char *, const char *))
3516 {
3517         bool ret = False;
3518         TALLOC_CTX *ctx = NULL;
3519         char *regpath = NULL;
3520         WERROR werr = WERR_OK;
3521         struct registry_key *key = NULL;
3522         struct registry_value *value = NULL;
3523         char *valname = NULL;
3524         char *valstr = NULL;
3525         uint32 idx = 0;
3526         NT_USER_TOKEN *token;
3527
3528         ctx = talloc_init("process_registry_globals");
3529         if (!ctx) {
3530                 smb_panic("Failed to create talloc context!");
3531         }
3532
3533         include_registry_globals = True;
3534
3535         if (!registry_init_regdb()) {
3536                 DEBUG(1, ("Error initializing the registry.\n"));
3537                 goto done;
3538         }
3539
3540         if (!(token = registry_create_admin_token(ctx))) {
3541                 DEBUG(1, ("Error creating admin token\n"));
3542                 goto done;
3543         }
3544
3545         regpath = talloc_asprintf(ctx,"%s\\%s", KEY_SMBCONF, GLOBAL_NAME);
3546         werr = reg_open_path(ctx, regpath, REG_KEY_READ, token, &key);
3547         if (!W_ERROR_IS_OK(werr)) {
3548                 DEBUG(1, ("Registry smbconf global section does not exist.\n"));
3549                 DEBUGADD(1, ("Error opening registry path '%s\\%s: %s\n",
3550                              KEY_SMBCONF, GLOBAL_NAME, dos_errstr(werr)));
3551                 goto done;
3552         }
3553
3554         for (idx = 0;
3555              W_ERROR_IS_OK(werr = reg_enumvalue(ctx, key, idx, &valname,
3556                                                 &value));
3557              idx++)
3558         {
3559                 DEBUG(5, ("got global registry parameter '%s'\n", valname));
3560                 switch(value->type) {
3561                 case REG_DWORD:
3562                         valstr = talloc_asprintf(ctx, "%d", value->v.dword);
3563                         pfunc(valname, valstr);
3564                         TALLOC_FREE(valstr);
3565                         break;
3566                 case REG_SZ:
3567                         pfunc(valname, value->v.sz.str);
3568                         break;
3569                 default:
3570                         /* ignore other types */
3571                         break;
3572                 }
3573                 TALLOC_FREE(value);
3574                 TALLOC_FREE(valstr);
3575         }
3576
3577         ret = pfunc("registry shares", "yes");
3578
3579         regdb_last_seqnum = regdb_get_seqnum();
3580
3581 done:
3582         talloc_destroy(ctx);
3583         return ret;
3584 }
3585 #endif /* if 0 */
3586
3587 static struct file_lists {
3588         struct file_lists *next;
3589         char *name;
3590         char *subfname;
3591         time_t modtime;
3592 } *file_lists = NULL;
3593
3594 /*******************************************************************
3595  Keep a linked list of all config files so we know when one has changed
3596  it's date and needs to be reloaded.
3597 ********************************************************************/
3598
3599 static void add_to_file_list(const char *fname, const char *subfname)
3600 {
3601         struct file_lists *f = file_lists;
3602
3603         while (f) {
3604                 if (f->name && !strcmp(f->name, fname))
3605                         break;
3606                 f = f->next;
3607         }
3608
3609         if (!f) {
3610                 f = SMB_MALLOC_P(struct file_lists);
3611                 if (!f)
3612                         return;
3613                 f->next = file_lists;
3614                 f->name = SMB_STRDUP(fname);
3615                 if (!f->name) {
3616                         SAFE_FREE(f);
3617                         return;
3618                 }
3619                 f->subfname = SMB_STRDUP(subfname);
3620                 if (!f->subfname) {
3621                         SAFE_FREE(f);
3622                         return;
3623                 }
3624                 file_lists = f;
3625                 f->modtime = file_modtime(subfname);
3626         } else {
3627                 time_t t = file_modtime(subfname);
3628                 if (t)
3629                         f->modtime = t;
3630         }
3631 }
3632
3633 bool lp_include_registry_globals(void)
3634 {
3635         return include_registry_globals;
3636 }
3637
3638 /*******************************************************************
3639  Check if a config file has changed date.
3640 ********************************************************************/
3641
3642 bool lp_file_list_changed(void)
3643 {
3644         struct file_lists *f = file_lists;
3645         struct tdb_wrap *reg_tdb = NULL;
3646
3647         DEBUG(6, ("lp_file_list_changed()\n"));
3648
3649         if (include_registry_globals) {
3650                 reg_tdb = lp_regdb_open();
3651                 if (reg_tdb && (regdb_last_seqnum != tdb_get_seqnum(reg_tdb->tdb)))
3652                 {
3653                         DEBUGADD(6, ("regdb seqnum changed: old = %d, new = %d\n",
3654                                     regdb_last_seqnum, tdb_get_seqnum(reg_tdb->tdb)));
3655                         TALLOC_FREE(reg_tdb);
3656                         return true;
3657                 }
3658         }
3659
3660         while (f) {
3661                 char *n2 = NULL;
3662                 time_t mod_time;
3663
3664                 n2 = alloc_sub_basic(get_current_username(),
3665                                     current_user_info.domain,
3666                                     f->name);
3667                 if (!n2) {
3668                         return false;
3669                 }
3670                 DEBUGADD(6, ("file %s -> %s  last mod_time: %s\n",
3671                              f->name, n2, ctime(&f->modtime)));
3672
3673                 mod_time = file_modtime(n2);
3674
3675                 if (mod_time && ((f->modtime != mod_time) || (f->subfname == NULL) || (strcmp(n2, f->subfname) != 0))) {
3676                         DEBUGADD(6,
3677                                  ("file %s modified: %s\n", n2,
3678                                   ctime(&mod_time)));
3679                         f->modtime = mod_time;
3680                         SAFE_FREE(f->subfname);
3681                         f->subfname = n2; /* Passing ownership of
3682                                              return from alloc_sub_basic
3683                                              above. */
3684                         return true;
3685                 }
3686                 SAFE_FREE(n2);
3687                 f = f->next;
3688         }
3689         return (False);
3690 }
3691
3692 /***************************************************************************
3693  Run standard_sub_basic on netbios name... needed because global_myname
3694  is not accessed through any lp_ macro.
3695  Note: We must *NOT* use string_set() here as ptr points to global_myname.
3696 ***************************************************************************/
3697
3698 static bool handle_netbios_name(int snum, const char *pszParmValue, char **ptr)
3699 {
3700         bool ret;
3701         char *netbios_name = alloc_sub_basic(get_current_username(),
3702                                         current_user_info.domain,
3703                                         pszParmValue);
3704
3705         ret = set_global_myname(netbios_name);
3706         SAFE_FREE(netbios_name);
3707         string_set(&Globals.szNetbiosName,global_myname());
3708
3709         DEBUG(4, ("handle_netbios_name: set global_myname to: %s\n",
3710                global_myname()));
3711
3712         return ret;
3713 }
3714
3715 static bool handle_charset(int snum, const char *pszParmValue, char **ptr)
3716 {
3717         if (strcmp(*ptr, pszParmValue) != 0) {
3718                 string_set(ptr, pszParmValue);
3719                 init_iconv();
3720         }
3721         return True;
3722 }
3723
3724
3725
3726 static bool handle_workgroup(int snum, const char *pszParmValue, char **ptr)
3727 {
3728         bool ret;
3729
3730         ret = set_global_myworkgroup(pszParmValue);
3731         string_set(&Globals.szWorkgroup,lp_workgroup());
3732
3733         return ret;
3734 }
3735
3736 static bool handle_netbios_scope(int snum, const char *pszParmValue, char **ptr)
3737 {
3738         bool ret;
3739
3740         ret = set_global_scope(pszParmValue);
3741         string_set(&Globals.szNetbiosScope,global_scope());
3742
3743         return ret;
3744 }
3745
3746 static bool handle_netbios_aliases(int snum, const char *pszParmValue, char **ptr)
3747 {
3748         str_list_free(&Globals.szNetbiosAliases);
3749         Globals.szNetbiosAliases = str_list_make(pszParmValue, NULL);
3750         return set_netbios_aliases((const char **)Globals.szNetbiosAliases);
3751 }
3752
3753 /***************************************************************************
3754  Handle the include operation.
3755 ***************************************************************************/
3756
3757 static bool handle_include(int snum, const char *pszParmValue, char **ptr)
3758 {
3759         char *fname;
3760
3761         if (strequal(pszParmValue, INCLUDE_REGISTRY_NAME)) {
3762                 if (bInGlobalSection) {
3763                         return process_registry_globals(do_parameter);
3764                 }
3765                 else {
3766                         DEBUG(1, ("\"include = registry\" only effective "
3767                                   "in %s section\n", GLOBAL_NAME));
3768                         return false;
3769                 }
3770         }
3771
3772         fname = alloc_sub_basic(get_current_username(),
3773                                 current_user_info.domain,
3774                                 pszParmValue);
3775
3776         add_to_file_list(pszParmValue, fname);
3777
3778         string_set(ptr, fname);
3779
3780         if (file_exist(fname, NULL)) {
3781                 bool ret = pm_process(fname, do_section, do_parameter);
3782                 SAFE_FREE(fname);
3783                 return ret;
3784         }
3785
3786         DEBUG(2, ("Can't find include file %s\n", fname));
3787         SAFE_FREE(fname);
3788         return false;
3789 }
3790
3791 /***************************************************************************
3792  Handle the interpretation of the copy parameter.
3793 ***************************************************************************/
3794
3795 static bool handle_copy(int snum, const char *pszParmValue, char **ptr)
3796 {
3797         bool bRetval;
3798         int iTemp;
3799         service serviceTemp;
3800
3801         string_set(ptr, pszParmValue);
3802
3803         init_service(&serviceTemp);
3804
3805         bRetval = False;
3806
3807         DEBUG(3, ("Copying service from service %s\n", pszParmValue));
3808
3809         if ((iTemp = getservicebyname(pszParmValue, &serviceTemp)) >= 0) {
3810                 if (iTemp == iServiceIndex) {
3811                         DEBUG(0, ("Can't copy service %s - unable to copy self!\n", pszParmValue));
3812                 } else {
3813                         copy_service(ServicePtrs[iServiceIndex],
3814                                      &serviceTemp,
3815                                      ServicePtrs[iServiceIndex]->copymap);
3816                         bRetval = True;
3817                 }
3818         } else {
3819                 DEBUG(0, ("Unable to copy service - source not found: %s\n", pszParmValue));
3820                 bRetval = False;
3821         }
3822
3823         free_service(&serviceTemp);
3824         return (bRetval);
3825 }
3826
3827 /***************************************************************************
3828  Handle idmap/non unix account uid and gid allocation parameters.  The format of these
3829  parameters is:
3830
3831  [global]
3832
3833         idmap uid = 1000-1999
3834         idmap gid = 700-899
3835
3836  We only do simple parsing checks here.  The strings are parsed into useful
3837  structures in the idmap daemon code.
3838
3839 ***************************************************************************/
3840
3841 /* Some lp_ routines to return idmap [ug]id information */
3842
3843 static uid_t idmap_uid_low, idmap_uid_high;
3844 static gid_t idmap_gid_low, idmap_gid_high;
3845
3846 bool lp_idmap_uid(uid_t *low, uid_t *high)
3847 {
3848         if (idmap_uid_low == 0 || idmap_uid_high == 0)
3849                 return False;
3850
3851         if (low)
3852                 *low = idmap_uid_low;
3853
3854         if (high)
3855                 *high = idmap_uid_high;
3856
3857         return True;
3858 }
3859
3860 bool lp_idmap_gid(gid_t *low, gid_t *high)
3861 {
3862         if (idmap_gid_low == 0 || idmap_gid_high == 0)
3863                 return False;
3864
3865         if (low)
3866                 *low = idmap_gid_low;
3867
3868         if (high)
3869                 *high = idmap_gid_high;
3870
3871         return True;
3872 }
3873
3874 /* Do some simple checks on "idmap [ug]id" parameter values */
3875
3876 static bool handle_idmap_uid(int snum, const char *pszParmValue, char **ptr)
3877 {
3878         uint32 low, high;
3879
3880         if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3881                 return False;
3882
3883         /* Parse OK */
3884
3885         string_set(ptr, pszParmValue);
3886
3887         idmap_uid_low = low;
3888         idmap_uid_high = high;
3889
3890         return True;
3891 }
3892
3893 static bool handle_idmap_gid(int snum, const char *pszParmValue, char **ptr)
3894 {
3895         uint32 low, high;
3896
3897         if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3898                 return False;
3899
3900         /* Parse OK */
3901
3902         string_set(ptr, pszParmValue);
3903
3904         idmap_gid_low = low;
3905         idmap_gid_high = high;
3906
3907         return True;
3908 }
3909
3910 /***************************************************************************
3911  Handle the DEBUG level list.
3912 ***************************************************************************/
3913
3914 static bool handle_debug_list( int snum, const char *pszParmValueIn, char **ptr )
3915 {
3916         string_set(ptr, pszParmValueIn);
3917         return debug_parse_levels(pszParmValueIn);
3918 }
3919
3920 /***************************************************************************
3921  Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
3922 ***************************************************************************/
3923
3924 static const char *append_ldap_suffix( const char *str )
3925 {
3926         const char *suffix_string;
3927
3928
3929         suffix_string = talloc_asprintf(talloc_tos(), "%s,%s", str,
3930                                         Globals.szLdapSuffix );
3931         if ( !suffix_string ) {
3932                 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
3933                 return "";
3934         }
3935
3936         return suffix_string;
3937 }
3938
3939 const char *lp_ldap_machine_suffix(void)
3940 {
3941         if (Globals.szLdapMachineSuffix[0])
3942                 return append_ldap_suffix(Globals.szLdapMachineSuffix);
3943
3944         return lp_string(Globals.szLdapSuffix);
3945 }
3946
3947 const char *lp_ldap_user_suffix(void)
3948 {
3949         if (Globals.szLdapUserSuffix[0])
3950                 return append_ldap_suffix(Globals.szLdapUserSuffix);
3951
3952         return lp_string(Globals.szLdapSuffix);
3953 }
3954
3955 const char *lp_ldap_group_suffix(void)
3956 {
3957         if (Globals.szLdapGroupSuffix[0])
3958                 return append_ldap_suffix(Globals.szLdapGroupSuffix);
3959
3960         return lp_string(Globals.szLdapSuffix);
3961 }
3962
3963 const char *lp_ldap_idmap_suffix(void)
3964 {
3965         if (Globals.szLdapIdmapSuffix[0])
3966                 return append_ldap_suffix(Globals.szLdapIdmapSuffix);
3967
3968         return lp_string(Globals.szLdapSuffix);
3969 }
3970
3971 /****************************************************************************
3972  set the value for a P_ENUM
3973  ***************************************************************************/
3974
3975 static void lp_set_enum_parm( struct parm_struct *parm, const char *pszParmValue,
3976                               int *ptr )
3977 {
3978         int i;
3979
3980         for (i = 0; parm->enum_list[i].name; i++) {
3981                 if ( strequal(pszParmValue, parm->enum_list[i].name)) {
3982                         *ptr = parm->enum_list[i].value;
3983                         break;
3984                 }
3985         }
3986 }
3987
3988 /***************************************************************************
3989 ***************************************************************************/
3990
3991 static bool handle_printing(int snum, const char *pszParmValue, char **ptr)
3992 {
3993         static int parm_num = -1;
3994         service *s;
3995
3996         if ( parm_num == -1 )
3997                 parm_num = map_parameter( "printing" );
3998
3999         lp_set_enum_parm( &parm_table[parm_num], pszParmValue, (int*)ptr );
4000
4001         if ( snum < 0 )
4002                 s = &sDefault;
4003         else
4004                 s = ServicePtrs[snum];
4005
4006         init_printer_values( s );
4007
4008         return True;
4009 }
4010
4011
4012 /***************************************************************************
4013  Initialise a copymap.
4014 ***************************************************************************/
4015
4016 static void init_copymap(service * pservice)
4017 {
4018         int i;
4019         if (pservice->copymap) {
4020                 bitmap_free(pservice->copymap);
4021         }
4022         pservice->copymap = bitmap_allocate(NUMPARAMETERS);
4023         if (!pservice->copymap)
4024                 DEBUG(0,
4025                       ("Couldn't allocate copymap!! (size %d)\n",
4026                        (int)NUMPARAMETERS));
4027         else
4028                 for (i = 0; i < NUMPARAMETERS; i++)
4029                         bitmap_set(pservice->copymap, i);
4030 }
4031
4032 /***************************************************************************
4033  Return the local pointer to a parameter given the service number and the
4034  pointer into the default structure.
4035 ***************************************************************************/
4036
4037 void *lp_local_ptr(int snum, void *ptr)
4038 {
4039         return (void *)(((char *)ServicePtrs[snum]) + PTR_DIFF(ptr, &sDefault));
4040 }
4041
4042 /***************************************************************************
4043  Process a parameter for a particular service number. If snum < 0
4044  then assume we are in the globals.
4045 ***************************************************************************/
4046
4047 bool lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
4048 {
4049         int parmnum, i, slen;
4050         void *parm_ptr = NULL;  /* where we are going to store the result */
4051         void *def_ptr = NULL;
4052         char *param_key = NULL;
4053         char *sep;
4054         param_opt_struct *paramo, *data;
4055         bool not_added;
4056
4057         parmnum = map_parameter(pszParmName);
4058
4059         if (parmnum < 0) {
4060                 if ((sep=strchr(pszParmName, ':')) != NULL) {
4061                         TALLOC_CTX *frame = talloc_stackframe();
4062
4063                         *sep = '\0';
4064                         param_key = talloc_asprintf(frame, "%s:", pszParmName);
4065                         if (!param_key) {
4066                                 TALLOC_FREE(frame);
4067                                 return false;
4068                         }
4069                         slen = strlen(param_key);
4070                         param_key = talloc_asprintf_append(param_key, sep+1);
4071                         if (!param_key) {
4072                                 TALLOC_FREE(frame);
4073                                 return false;
4074                         }
4075                         trim_char(param_key+slen, ' ', ' ');
4076                         not_added = True;
4077                         data = (snum < 0) ? Globals.param_opt :
4078                                 ServicePtrs[snum]->param_opt;
4079                         /* Traverse destination */
4080                         while (data) {
4081                                 /* If we already have same option, override it */
4082                                 if (strcmp(data->key, param_key) == 0) {
4083                                         string_free(&data->value);
4084                                         str_list_free(&data->list);
4085                                         data->value = SMB_STRDUP(pszParmValue);
4086                                         not_added = False;
4087                                         break;
4088                                 }
4089                                 data = data->next;
4090                         }
4091                         if (not_added) {
4092                                 paramo = SMB_XMALLOC_P(param_opt_struct);
4093                                 paramo->key = SMB_STRDUP(param_key);
4094                                 paramo->value = SMB_STRDUP(pszParmValue);
4095                                 paramo->list = NULL;
4096                                 if (snum < 0) {
4097                                         DLIST_ADD(Globals.param_opt, paramo);
4098                                 } else {
4099                                         DLIST_ADD(ServicePtrs[snum]->param_opt, paramo);
4100                                 }
4101                         }
4102
4103                         *sep = ':';
4104                         TALLOC_FREE(frame);
4105                         return (True);
4106                 }
4107                 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName));
4108                 return (True);
4109         }
4110
4111         if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
4112                 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
4113                           pszParmName));
4114         }
4115
4116         def_ptr = parm_table[parmnum].ptr;
4117
4118         /* we might point at a service, the default service or a global */
4119         if (snum < 0) {
4120                 parm_ptr = def_ptr;
4121         } else {
4122                 if (parm_table[parmnum].p_class == P_GLOBAL) {
4123                         DEBUG(0,
4124                               ("Global parameter %s found in service section!\n",
4125                                pszParmName));
4126                         return (True);
4127                 }
4128                 parm_ptr =
4129                         ((char *)ServicePtrs[snum]) + PTR_DIFF(def_ptr,
4130                                                             &sDefault);
4131         }
4132
4133         if (snum >= 0) {
4134                 if (!ServicePtrs[snum]->copymap)
4135                         init_copymap(ServicePtrs[snum]);
4136
4137                 /* this handles the aliases - set the copymap for other entries with
4138                    the same data pointer */
4139                 for (i = 0; parm_table[i].label; i++)
4140                         if (parm_table[i].ptr == parm_table[parmnum].ptr)
4141                                 bitmap_clear(ServicePtrs[snum]->copymap, i);
4142         }
4143
4144         /* if it is a special case then go ahead */
4145         if (parm_table[parmnum].special) {
4146                 parm_table[parmnum].special(snum, pszParmValue, (char **)parm_ptr);
4147                 return (True);
4148         }
4149
4150         /* now switch on the type of variable it is */
4151         switch (parm_table[parmnum].type)
4152         {
4153                 case P_BOOL:
4154                         *(bool *)parm_ptr = lp_bool(pszParmValue);
4155                         break;
4156
4157                 case P_BOOLREV:
4158                         *(bool *)parm_ptr = !lp_bool(pszParmValue);
4159                         break;
4160
4161                 case P_INTEGER:
4162                         *(int *)parm_ptr = lp_int(pszParmValue);
4163                         break;
4164
4165                 case P_CHAR:
4166                         *(char *)parm_ptr = *pszParmValue;
4167                         break;
4168
4169                 case P_OCTAL:
4170                         i = sscanf(pszParmValue, "%o", (int *)parm_ptr);
4171                         if ( i != 1 ) {
4172                             DEBUG ( 0, ("Invalid octal number %s\n", pszParmName ));
4173                         }
4174                         break;
4175
4176                 case P_LIST:
4177                         str_list_free((char ***)parm_ptr);
4178                         *(char ***)parm_ptr = str_list_make(pszParmValue, NULL);
4179                         break;
4180
4181                 case P_STRING:
4182                         string_set((char **)parm_ptr, pszParmValue);
4183                         break;
4184
4185                 case P_USTRING:
4186                         string_set((char **)parm_ptr, pszParmValue);
4187                         strupper_m(*(char **)parm_ptr);
4188                         break;
4189
4190                 case P_ENUM:
4191                         lp_set_enum_parm( &parm_table[parmnum], pszParmValue, (int*)parm_ptr );
4192                         break;
4193                 case P_SEP:
4194                         break;
4195         }
4196
4197         return (True);
4198 }
4199
4200 /***************************************************************************
4201  Process a parameter.
4202 ***************************************************************************/
4203
4204 static bool do_parameter(const char *pszParmName, const char *pszParmValue)
4205 {
4206         if (!bInGlobalSection && bGlobalOnly)
4207                 return (True);
4208
4209         DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
4210
4211         return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
4212                                 pszParmName, pszParmValue));
4213 }
4214
4215 /***************************************************************************
4216  Print a parameter of the specified type.
4217 ***************************************************************************/
4218
4219 static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
4220 {
4221         int i;
4222         switch (p->type)
4223         {
4224                 case P_ENUM:
4225                         for (i = 0; p->enum_list[i].name; i++) {
4226                                 if (*(int *)ptr == p->enum_list[i].value) {
4227                                         fprintf(f, "%s",
4228                                                 p->enum_list[i].name);
4229                                         break;
4230                                 }
4231                         }
4232                         break;
4233
4234                 case P_BOOL:
4235                         fprintf(f, "%s", BOOLSTR(*(bool *)ptr));
4236                         break;
4237
4238                 case P_BOOLREV:
4239                         fprintf(f, "%s", BOOLSTR(!*(bool *)ptr));
4240                         break;
4241
4242                 case P_INTEGER:
4243                         fprintf(f, "%d", *(int *)ptr);
4244                         break;
4245
4246                 case P_CHAR:
4247                         fprintf(f, "%c", *(char *)ptr);
4248                         break;
4249
4250                 case P_OCTAL: {
4251                         char *o = octal_string(*(int *)ptr);
4252                         fprintf(f, "%s", o);
4253                         TALLOC_FREE(o);
4254                         break;
4255                 }
4256
4257                 case P_LIST:
4258                         if ((char ***)ptr && *(char ***)ptr) {
4259                                 char **list = *(char ***)ptr;
4260                                 for (; *list; list++) {
4261                                         /* surround strings with whitespace in double quotes */
4262                                         if ( strchr_m( *list, ' ' ) )
4263                                                 fprintf(f, "\"%s\"%s", *list, ((*(list+1))?", ":""));
4264                                         else
4265                                                 fprintf(f, "%s%s", *list, ((*(list+1))?", ":""));
4266                                 }
4267                         }
4268                         break;
4269
4270                 case P_STRING:
4271                 case P_USTRING:
4272                         if (*(char **)ptr) {
4273                                 fprintf(f, "%s", *(char **)ptr);
4274                         }
4275                         break;
4276                 case P_SEP:
4277                         break;
4278         }
4279 }
4280
4281 /***************************************************************************
4282  Check if two parameters are equal.
4283 ***************************************************************************/
4284
4285 static bool equal_parameter(parm_type type, void *ptr1, void *ptr2)
4286 {
4287         switch (type) {
4288                 case P_BOOL:
4289                 case P_BOOLREV:
4290                         return (*((bool *)ptr1) == *((bool *)ptr2));
4291
4292                 case P_INTEGER:
4293                 case P_ENUM:
4294                 case P_OCTAL:
4295                         return (*((int *)ptr1) == *((int *)ptr2));
4296
4297                 case P_CHAR:
4298                         return (*((char *)ptr1) == *((char *)ptr2));
4299
4300                 case P_LIST:
4301                         return str_list_compare(*(char ***)ptr1, *(char ***)ptr2);
4302
4303                 case P_STRING:
4304                 case P_USTRING:
4305                 {
4306                         char *p1 = *(char **)ptr1, *p2 = *(char **)ptr2;
4307                         if (p1 && !*p1)
4308                                 p1 = NULL;
4309                         if (p2 && !*p2)
4310                                 p2 = NULL;
4311                         return (p1 == p2 || strequal(p1, p2));
4312                 }
4313                 case P_SEP:
4314                         break;
4315         }
4316         return (False);
4317 }
4318
4319 /***************************************************************************
4320  Initialize any local varients in the sDefault table.
4321 ***************************************************************************/
4322
4323 void init_locals(void)
4324 {
4325         /* None as yet. */
4326 }
4327
4328 /***************************************************************************
4329  Process a new section (service). At this stage all sections are services.
4330  Later we'll have special sections that permit server parameters to be set.
4331  Returns True on success, False on failure.
4332 ***************************************************************************/
4333
4334 static bool do_section(const char *pszSectionName)
4335 {
4336         bool bRetval;
4337         bool isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
4338                          (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
4339         bRetval = False;
4340
4341         /* if we were in a global section then do the local inits */
4342         if (bInGlobalSection && !isglobal)
4343                 init_locals();
4344
4345         /* if we've just struck a global section, note the fact. */
4346         bInGlobalSection = isglobal;
4347
4348         /* check for multiple global sections */
4349         if (bInGlobalSection) {
4350                 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName));
4351                 return (True);
4352         }
4353
4354         if (!bInGlobalSection && bGlobalOnly)
4355                 return (True);
4356
4357         /* if we have a current service, tidy it up before moving on */
4358         bRetval = True;
4359
4360         if (iServiceIndex >= 0)
4361                 bRetval = service_ok(iServiceIndex);
4362
4363         /* if all is still well, move to the next record in the services array */
4364         if (bRetval) {
4365                 /* We put this here to avoid an odd message order if messages are */
4366                 /* issued by the post-processing of a previous section. */
4367                 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName));
4368
4369                 if ((iServiceIndex = add_a_service(&sDefault, pszSectionName))
4370                     < 0) {
4371                         DEBUG(0, ("Failed to add a new service\n"));
4372                         return (False);
4373                 }
4374         }
4375
4376         return (bRetval);
4377 }
4378
4379
4380 /***************************************************************************
4381  Determine if a partcular base parameter is currentl set to the default value.
4382 ***************************************************************************/
4383
4384 static bool is_default(int i)
4385 {
4386         if (!defaults_saved)
4387                 return False;
4388         switch (parm_table[i].type) {
4389                 case P_LIST:
4390                         return str_list_compare (parm_table[i].def.lvalue,
4391                                                 *(char ***)parm_table[i].ptr);
4392                 case P_STRING:
4393                 case P_USTRING:
4394                         return strequal(parm_table[i].def.svalue,
4395                                         *(char **)parm_table[i].ptr);
4396                 case P_BOOL:
4397                 case P_BOOLREV:
4398                         return parm_table[i].def.bvalue ==
4399                                 *(bool *)parm_table[i].ptr;
4400                 case P_CHAR:
4401                         return parm_table[i].def.cvalue ==
4402                                 *(char *)parm_table[i].ptr;
4403                 case P_INTEGER:
4404                 case P_OCTAL:
4405                 case P_ENUM:
4406                         return parm_table[i].def.ivalue ==
4407                                 *(int *)parm_table[i].ptr;
4408                 case P_SEP:
4409                         break;
4410         }
4411         return False;
4412 }
4413
4414 /***************************************************************************
4415 Display the contents of the global structure.
4416 ***************************************************************************/
4417
4418 static void dump_globals(FILE *f)
4419 {
4420         int i;
4421         param_opt_struct *data;
4422
4423         fprintf(f, "[global]\n");
4424
4425         for (i = 0; parm_table[i].label; i++)
4426                 if (parm_table[i].p_class == P_GLOBAL &&
4427                     parm_table[i].ptr &&
4428                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr))) {
4429                         if (defaults_saved && is_default(i))
4430                                 continue;
4431                         fprintf(f, "\t%s = ", parm_table[i].label);
4432                         print_parameter(&parm_table[i], parm_table[i].ptr, f);
4433                         fprintf(f, "\n");
4434         }
4435         if (Globals.param_opt != NULL) {
4436                 data = Globals.param_opt;
4437                 while(data) {
4438                         fprintf(f, "\t%s = %s\n", data->key, data->value);
4439                         data = data->next;
4440                 }
4441         }
4442
4443 }
4444
4445 /***************************************************************************
4446  Return True if a local parameter is currently set to the global default.
4447 ***************************************************************************/
4448
4449 bool lp_is_default(int snum, struct parm_struct *parm)
4450 {
4451         int pdiff = PTR_DIFF(parm->ptr, &sDefault);
4452
4453         return equal_parameter(parm->type,
4454                                ((char *)ServicePtrs[snum]) + pdiff,
4455                                ((char *)&sDefault) + pdiff);
4456 }
4457
4458 /***************************************************************************
4459  Display the contents of a single services record.
4460 ***************************************************************************/
4461
4462 static void dump_a_service(service * pService, FILE * f)
4463 {
4464         int i;
4465         param_opt_struct *data;
4466
4467         if (pService != &sDefault)
4468                 fprintf(f, "[%s]\n", pService->szService);
4469
4470         for (i = 0; parm_table[i].label; i++) {
4471
4472                 if (parm_table[i].p_class == P_LOCAL &&
4473                     parm_table[i].ptr &&
4474                     (*parm_table[i].label != '-') &&
4475                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
4476                 {
4477
4478                         int pdiff = PTR_DIFF(parm_table[i].ptr, &sDefault);
4479
4480                         if (pService == &sDefault) {
4481                                 if (defaults_saved && is_default(i))
4482                                         continue;
4483                         } else {
4484                                 if (equal_parameter(parm_table[i].type,
4485                                                     ((char *)pService) +
4486                                                     pdiff,
4487                                                     ((char *)&sDefault) +
4488                                                     pdiff))
4489                                         continue;
4490                         }
4491
4492                         fprintf(f, "\t%s = ", parm_table[i].label);
4493                         print_parameter(&parm_table[i],
4494                                         ((char *)pService) + pdiff, f);
4495                         fprintf(f, "\n");
4496                 }
4497         }
4498
4499                 if (pService->param_opt != NULL) {
4500                         data = pService->param_opt;
4501                         while(data) {
4502                                 fprintf(f, "\t%s = %s\n", data->key, data->value);
4503                                 data = data->next;
4504                         }
4505                 }
4506 }
4507
4508 /***************************************************************************
4509  Display the contents of a parameter of a single services record.
4510 ***************************************************************************/
4511
4512 bool dump_a_parameter(int snum, char *parm_name, FILE * f, bool isGlobal)
4513 {
4514         int i;
4515         bool result = False;
4516         parm_class p_class;
4517         unsigned flag = 0;
4518         fstring local_parm_name;
4519         char *parm_opt;
4520         const char *parm_opt_value;
4521
4522         /* check for parametrical option */
4523         fstrcpy( local_parm_name, parm_name);
4524         parm_opt = strchr( local_parm_name, ':');
4525
4526         if (parm_opt) {
4527                 *parm_opt = '\0';
4528                 parm_opt++;
4529                 if (strlen(parm_opt)) {
4530                         parm_opt_value = lp_parm_const_string( snum,
4531                                 local_parm_name, parm_opt, NULL);
4532                         if (parm_opt_value) {
4533                                 printf( "%s\n", parm_opt_value);
4534                                 result = True;
4535                         }
4536                 }
4537                 return result;
4538         }
4539
4540         /* check for a key and print the value */
4541         if (isGlobal) {
4542                 p_class = P_GLOBAL;
4543                 flag = FLAG_GLOBAL;
4544         } else
4545                 p_class = P_LOCAL;
4546
4547         for (i = 0; parm_table[i].label; i++) {
4548                 if (strwicmp(parm_table[i].label, parm_name) == 0 &&
4549                     (parm_table[i].p_class == p_class || parm_table[i].flags & flag) &&
4550                     parm_table[i].ptr &&
4551                     (*parm_table[i].label != '-') &&
4552                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
4553                 {
4554                         void *ptr;
4555
4556                         if (isGlobal) {
4557                                 ptr = parm_table[i].ptr;
4558                         } else {
4559                                 service * pService = ServicePtrs[snum];
4560                                 ptr = ((char *)pService) +
4561                                         PTR_DIFF(parm_table[i].ptr, &sDefault);
4562                         }
4563
4564                         print_parameter(&parm_table[i],
4565                                         ptr, f);
4566                         fprintf(f, "\n");
4567                         result = True;
4568                         break;
4569                 }
4570         }
4571
4572         return result;
4573 }
4574
4575 /***************************************************************************
4576  Return info about the requested parameter (given as a string).
4577  Return NULL when the string is not a valid parameter name.
4578 ***************************************************************************/
4579
4580 struct parm_struct *lp_get_parameter(const char *param_name)
4581 {
4582         int num = map_parameter(param_name);
4583
4584         if (num < 0) {
4585                 return NULL;
4586         }
4587
4588         return &parm_table[num];
4589 }
4590
4591 /***************************************************************************
4592  Return info about the next parameter in a service.
4593  snum==GLOBAL_SECTION_SNUM gives the globals.
4594  Return NULL when out of parameters.
4595 ***************************************************************************/
4596
4597 struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
4598 {
4599         if (snum < 0) {
4600                 /* do the globals */
4601                 for (; parm_table[*i].label; (*i)++) {
4602                         if (parm_table[*i].p_class == P_SEPARATOR)
4603                                 return &parm_table[(*i)++];
4604
4605                         if (!parm_table[*i].ptr
4606                             || (*parm_table[*i].label == '-'))
4607                                 continue;
4608
4609                         if ((*i) > 0
4610                             && (parm_table[*i].ptr ==
4611                                 parm_table[(*i) - 1].ptr))
4612                                 continue;
4613
4614                         if (is_default(*i) && !allparameters)
4615                                 continue;
4616
4617                         return &parm_table[(*i)++];
4618                 }
4619         } else {
4620                 service *pService = ServicePtrs[snum];
4621
4622                 for (; parm_table[*i].label; (*i)++) {
4623                         if (parm_table[*i].p_class == P_SEPARATOR)
4624                                 return &parm_table[(*i)++];
4625
4626                         if (parm_table[*i].p_class == P_LOCAL &&
4627                             parm_table[*i].ptr &&
4628                             (*parm_table[*i].label != '-') &&
4629                             ((*i) == 0 ||
4630                              (parm_table[*i].ptr !=
4631                               parm_table[(*i) - 1].ptr)))
4632                         {
4633                                 int pdiff =
4634                                         PTR_DIFF(parm_table[*i].ptr,
4635                                                  &sDefault);
4636
4637                                 if (allparameters ||
4638                                     !equal_parameter(parm_table[*i].type,
4639                                                      ((char *)pService) +
4640                                                      pdiff,
4641                                                      ((char *)&sDefault) +
4642                                                      pdiff))
4643                                 {
4644                                         return &parm_table[(*i)++];
4645                                 }
4646                         }
4647                 }
4648         }
4649
4650         return NULL;
4651 }
4652
4653
4654 #if 0
4655 /***************************************************************************
4656  Display the contents of a single copy structure.
4657 ***************************************************************************/
4658 static void dump_copy_map(bool *pcopymap)
4659 {
4660         int i;
4661         if (!pcopymap)
4662                 return;
4663
4664         printf("\n\tNon-Copied parameters:\n");
4665
4666         for (i = 0; parm_table[i].label; i++)
4667                 if (parm_table[i].p_class == P_LOCAL &&
4668                     parm_table[i].ptr && !pcopymap[i] &&
4669                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
4670                 {
4671                         printf("\t\t%s\n", parm_table[i].label);
4672                 }
4673 }
4674 #endif
4675
4676 /***************************************************************************
4677  Return TRUE if the passed service number is within range.
4678 ***************************************************************************/
4679
4680 bool lp_snum_ok(int iService)
4681 {
4682         return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
4683 }
4684
4685 /***************************************************************************
4686  Auto-load some home services.
4687 ***************************************************************************/
4688
4689 static void lp_add_auto_services(char *str)
4690 {
4691         char *s;
4692         char *p;
4693         int homes;
4694
4695         if (!str)
4696                 return;
4697
4698         s = SMB_STRDUP(str);
4699         if (!s)
4700                 return;
4701
4702         homes = lp_servicenumber(HOMES_NAME);
4703
4704         for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP)) {
4705                 char *home;
4706
4707                 if (lp_servicenumber(p) >= 0)
4708                         continue;
4709
4710                 home = get_user_home_dir(talloc_tos(), p);
4711
4712                 if (home && homes >= 0)
4713                         lp_add_home(p, homes, p, home);
4714
4715                 TALLOC_FREE(home);
4716         }
4717         SAFE_FREE(s);
4718 }
4719
4720 /***************************************************************************
4721  Auto-load one printer.
4722 ***************************************************************************/
4723
4724 void lp_add_one_printer(char *name, char *comment)
4725 {
4726         int printers = lp_servicenumber(PRINTERS_NAME);
4727         int i;
4728
4729         if (lp_servicenumber(name) < 0) {
4730                 lp_add_printer(name, printers);
4731                 if ((i = lp_servicenumber(name)) >= 0) {
4732                         string_set(&ServicePtrs[i]->comment, comment);
4733                         ServicePtrs[i]->autoloaded = True;
4734                 }
4735         }
4736 }
4737
4738 /***************************************************************************
4739  Have we loaded a services file yet?
4740 ***************************************************************************/
4741
4742 bool lp_loaded(void)
4743 {
4744         return (bLoaded);
4745 }
4746
4747 /***************************************************************************
4748  Unload unused services.
4749 ***************************************************************************/
4750
4751 void lp_killunused(bool (*snumused) (int))
4752 {
4753         int i;
4754         for (i = 0; i < iNumServices; i++) {
4755                 if (!VALID(i))
4756                         continue;
4757
4758                 /* don't kill autoloaded or usershare services */
4759                 if ( ServicePtrs[i]->autoloaded ||
4760                                 ServicePtrs[i]->usershare == USERSHARE_VALID) {
4761                         continue;
4762                 }
4763
4764                 if (!snumused || !snumused(i)) {
4765                         free_service_byindex(i);
4766                 }
4767         }
4768 }
4769
4770 /***************************************************************************
4771  Unload a service.
4772 ***************************************************************************/
4773
4774 void lp_killservice(int iServiceIn)
4775 {
4776         if (VALID(iServiceIn)) {
4777                 free_service_byindex(iServiceIn);
4778         }
4779 }
4780
4781 /***************************************************************************
4782  Save the curent values of all global and sDefault parameters into the
4783  defaults union. This allows swat and testparm to show only the
4784  changed (ie. non-default) parameters.
4785 ***************************************************************************/
4786
4787 static void lp_save_defaults(void)
4788 {
4789         int i;
4790         for (i = 0; parm_table[i].label; i++) {
4791                 if (i > 0 && parm_table[i].ptr == parm_table[i - 1].ptr)
4792                         continue;
4793                 switch (parm_table[i].type) {
4794                         case P_LIST:
4795                                 str_list_copy(&(parm_table[i].def.lvalue),
4796                                             *(const char ***)parm_table[i].ptr);
4797                                 break;
4798                         case P_STRING:
4799                         case P_USTRING:
4800                                 if (parm_table[i].ptr) {
4801                                         parm_table[i].def.svalue = SMB_STRDUP(*(char **)parm_table[i].ptr);
4802                                 } else {
4803                                         parm_table[i].def.svalue = NULL;
4804                                 }
4805                                 break;
4806                         case P_BOOL:
4807                         case P_BOOLREV:
4808                                 parm_table[i].def.bvalue =
4809                                         *(bool *)parm_table[i].ptr;
4810                                 break;
4811                         case P_CHAR:
4812                                 parm_table[i].def.cvalue =
4813                                         *(char *)parm_table[i].ptr;
4814                                 break;
4815                         case P_INTEGER:
4816                         case P_OCTAL:
4817                         case P_ENUM:
4818                                 parm_table[i].def.ivalue =
4819                                         *(int *)parm_table[i].ptr;
4820                                 break;
4821                         case P_SEP:
4822                                 break;
4823                 }
4824         }
4825         defaults_saved = True;
4826 }
4827
4828 /*******************************************************************
4829  Set the server type we will announce as via nmbd.
4830 ********************************************************************/
4831
4832 static const struct srv_role_tab {
4833         uint32 role;
4834         const char *role_str;
4835 } srv_role_tab [] = {
4836         { ROLE_STANDALONE, "ROLE_STANDALONE" },
4837         { ROLE_DOMAIN_MEMBER, "ROLE_DOMAIN_MEMBER" },
4838         { ROLE_DOMAIN_BDC, "ROLE_DOMAIN_BDC" },
4839         { ROLE_DOMAIN_PDC, "ROLE_DOMAIN_PDC" },
4840         { 0, NULL }
4841 };
4842
4843 const char* server_role_str(uint32 role)
4844 {
4845         int i = 0;
4846         for (i=0; srv_role_tab[i].role_str; i++) {
4847                 if (role == srv_role_tab[i].role) {
4848                         return srv_role_tab[i].role_str;
4849                 }
4850         }
4851         return NULL;
4852 }
4853
4854 static void set_server_role(void)
4855 {
4856         server_role = ROLE_STANDALONE;
4857
4858         switch (lp_security()) {
4859                 case SEC_SHARE:
4860                         if (lp_domain_logons())
4861                                 DEBUG(0, ("Server's Role (logon server) conflicts with share-level security\n"));
4862                         break;
4863                 case SEC_SERVER:
4864                         if (lp_domain_logons())
4865                                 DEBUG(0, ("Server's Role (logon server) conflicts with server-level security\n"));
4866                         /* this used to be considered ROLE_DOMAIN_MEMBER but that's just wrong */
4867                         server_role = ROLE_STANDALONE;
4868                         break;
4869                 case SEC_DOMAIN:
4870                         if (lp_domain_logons()) {
4871                                 DEBUG(1, ("Server's Role (logon server) NOT ADVISED with domain-level security\n"));
4872                                 server_role = ROLE_DOMAIN_BDC;
4873                                 break;
4874                         }
4875                         server_role = ROLE_DOMAIN_MEMBER;
4876                         break;
4877                 case SEC_ADS:
4878                         if (lp_domain_logons()) {
4879                                 server_role = ROLE_DOMAIN_PDC;
4880                                 break;
4881                         }
4882                         server_role = ROLE_DOMAIN_MEMBER;
4883                         break;
4884                 case SEC_USER:
4885                         if (lp_domain_logons()) {
4886
4887                                 if (Globals.iDomainMaster) /* auto or yes */
4888                                         server_role = ROLE_DOMAIN_PDC;
4889                                 else
4890                                         server_role = ROLE_DOMAIN_BDC;
4891                         }
4892                         break;
4893                 default:
4894                         DEBUG(0, ("Server's Role undefined due to unknown security mode\n"));
4895                         break;
4896         }
4897
4898         DEBUG(10, ("set_server_role: role = %s\n", server_role_str(server_role)));
4899 }
4900
4901 /***********************************************************
4902  If we should send plaintext/LANMAN passwords in the clinet
4903 ************************************************************/
4904
4905 static void set_allowed_client_auth(void)
4906 {
4907         if (Globals.bClientNTLMv2Auth) {
4908                 Globals.bClientLanManAuth = False;
4909         }
4910         if (!Globals.bClientLanManAuth) {
4911                 Globals.bClientPlaintextAuth = False;
4912         }
4913 }
4914
4915 /***************************************************************************
4916  JRA.
4917  The following code allows smbd to read a user defined share file.
4918  Yes, this is my intent. Yes, I'm comfortable with that...
4919
4920  THE FOLLOWING IS SECURITY CRITICAL CODE.
4921
4922  It washes your clothes, it cleans your house, it guards you while you sleep...
4923  Do not f%^k with it....
4924 ***************************************************************************/
4925
4926 #define MAX_USERSHARE_FILE_SIZE (10*1024)
4927
4928 /***************************************************************************
4929  Check allowed stat state of a usershare file.
4930  Ensure we print out who is dicking with us so the admin can
4931  get their sorry ass fired.
4932 ***************************************************************************/
4933
4934 static bool check_usershare_stat(const char *fname, SMB_STRUCT_STAT *psbuf)
4935 {
4936         if (!S_ISREG(psbuf->st_mode)) {
4937                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4938                         "not a regular file\n",
4939                         fname, (unsigned int)psbuf->st_uid ));
4940                 return False;
4941         }
4942
4943         /* Ensure this doesn't have the other write bit set. */
4944         if (psbuf->st_mode & S_IWOTH) {
4945                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
4946                         "public write. Refusing to allow as a usershare file.\n",
4947                         fname, (unsigned int)psbuf->st_uid ));
4948                 return False;
4949         }
4950
4951         /* Should be 10k or less. */
4952         if (psbuf->st_size > MAX_USERSHARE_FILE_SIZE) {
4953                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4954                         "too large (%u) to be a user share file.\n",
4955                         fname, (unsigned int)psbuf->st_uid,
4956                         (unsigned int)psbuf->st_size ));
4957                 return False;
4958         }
4959
4960         return True;
4961 }
4962
4963 /***************************************************************************
4964  Parse the contents of a usershare file.
4965 ***************************************************************************/
4966
4967 enum usershare_err parse_usershare_file(TALLOC_CTX *ctx,
4968                         SMB_STRUCT_STAT *psbuf,
4969                         const char *servicename,
4970                         int snum,
4971                         char **lines,
4972                         int numlines,
4973                         char **pp_sharepath,
4974                         char **pp_comment,
4975                         SEC_DESC **ppsd,
4976                         bool *pallow_guest)
4977 {
4978         const char **prefixallowlist = lp_usershare_prefix_allow_list();
4979         const char **prefixdenylist = lp_usershare_prefix_deny_list();
4980         int us_vers;
4981         SMB_STRUCT_DIR *dp;
4982         SMB_STRUCT_STAT sbuf;
4983         char *sharepath = NULL;
4984         char *comment = NULL;
4985
4986         *pp_sharepath = NULL;
4987         *pp_comment = NULL;
4988
4989         *pallow_guest = False;
4990
4991         if (numlines < 4) {
4992                 return USERSHARE_MALFORMED_FILE;
4993         }
4994
4995         if (strcmp(lines[0], "#VERSION 1") == 0) {
4996                 us_vers = 1;
4997         } else if (strcmp(lines[0], "#VERSION 2") == 0) {
4998                 us_vers = 2;
4999                 if (numlines < 5) {
5000                         return USERSHARE_MALFORMED_FILE;
5001                 }
5002         } else {
5003                 return USERSHARE_BAD_VERSION;
5004         }
5005
5006         if (strncmp(lines[1], "path=", 5) != 0) {
5007                 return USERSHARE_MALFORMED_PATH;
5008         }
5009
5010         sharepath = talloc_strdup(ctx, &lines[1][5]);
5011         if (!sharepath) {
5012                 return USERSHARE_POSIX_ERR;
5013         }
5014         trim_string(sharepath, " ", " ");
5015
5016         if (strncmp(lines[2], "comment=", 8) != 0) {
5017                 return USERSHARE_MALFORMED_COMMENT_DEF;
5018         }
5019
5020         comment = talloc_strdup(ctx, &lines[2][8]);
5021         if (!comment) {
5022                 return USERSHARE_POSIX_ERR;
5023         }
5024         trim_string(comment, " ", " ");
5025         trim_char(comment, '"', '"');
5026
5027         if (strncmp(lines[3], "usershare_acl=", 14) != 0) {
5028                 return USERSHARE_MALFORMED_ACL_DEF;
5029         }
5030
5031         if (!parse_usershare_acl(ctx, &lines[3][14], ppsd)) {
5032                 return USERSHARE_ACL_ERR;
5033         }
5034
5035         if (us_vers == 2) {
5036                 if (strncmp(lines[4], "guest_ok=", 9) != 0) {
5037                         return USERSHARE_MALFORMED_ACL_DEF;
5038                 }
5039                 if (lines[4][9] == 'y') {
5040                         *pallow_guest = True;
5041                 }
5042         }
5043
5044         if (snum != -1 && (strcmp(sharepath, ServicePtrs[snum]->szPath) == 0)) {
5045                 /* Path didn't change, no checks needed. */
5046                 *pp_sharepath = sharepath;
5047                 *pp_comment = comment;
5048                 return USERSHARE_OK;
5049         }
5050
5051         /* The path *must* be absolute. */
5052         if (sharepath[0] != '/') {
5053                 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
5054                         servicename, sharepath));
5055                 return USERSHARE_PATH_NOT_ABSOLUTE;
5056         }
5057
5058         /* If there is a usershare prefix deny list ensure one of these paths
5059            doesn't match the start of the user given path. */
5060         if (prefixdenylist) {
5061                 int i;
5062                 for ( i=0; prefixdenylist[i]; i++ ) {
5063                         DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
5064                                 servicename, i, prefixdenylist[i], sharepath ));
5065                         if (memcmp( sharepath, prefixdenylist[i], strlen(prefixdenylist[i])) == 0) {
5066                                 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
5067                                         "usershare prefix deny list entries.\n",
5068                                         servicename, sharepath));
5069                                 return USERSHARE_PATH_IS_DENIED;
5070                         }
5071                 }
5072         }
5073
5074         /* If there is a usershare prefix allow list ensure one of these paths
5075            does match the start of the user given path. */
5076
5077         if (prefixallowlist) {
5078                 int i;
5079                 for ( i=0; prefixallowlist[i]; i++ ) {
5080                         DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
5081                                 servicename, i, prefixallowlist[i], sharepath ));
5082                         if (memcmp( sharepath, prefixallowlist[i], strlen(prefixallowlist[i])) == 0) {
5083                                 break;
5084                         }
5085                 }
5086                 if (prefixallowlist[i] == NULL) {
5087                         DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
5088                                 "usershare prefix allow list entries.\n",
5089                                 servicename, sharepath));
5090                         return USERSHARE_PATH_NOT_ALLOWED;
5091                 }
5092         }
5093
5094         /* Ensure this is pointing to a directory. */
5095         dp = sys_opendir(sharepath);
5096
5097         if (!dp) {
5098                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
5099                         servicename, sharepath));
5100                 return USERSHARE_PATH_NOT_DIRECTORY;
5101         }
5102
5103         /* Ensure the owner of the usershare file has permission to share
5104            this directory. */
5105
5106         if (sys_stat(sharepath, &sbuf) == -1) {
5107                 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
5108                         servicename, sharepath, strerror(errno) ));
5109                 sys_closedir(dp);
5110                 return USERSHARE_POSIX_ERR;
5111         }
5112
5113         sys_closedir(dp);
5114
5115         if (!S_ISDIR(sbuf.st_mode)) {
5116                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
5117                         servicename, sharepath ));
5118                 return USERSHARE_PATH_NOT_DIRECTORY;
5119         }
5120
5121         /* Check if sharing is restricted to owner-only. */
5122         /* psbuf is the stat of the usershare definition file,
5123            sbuf is the stat of the target directory to be shared. */
5124
5125         if (lp_usershare_owner_only()) {
5126                 /* root can share anything. */
5127                 if ((psbuf->st_uid != 0) && (sbuf.st_uid != psbuf->st_uid)) {
5128                         return USERSHARE_PATH_NOT_ALLOWED;
5129                 }
5130         }
5131
5132         *pp_sharepath = sharepath;
5133         *pp_comment = comment;
5134         return USERSHARE_OK;
5135 }
5136
5137 /***************************************************************************
5138  Deal with a usershare file.
5139  Returns:
5140         >= 0 - snum
5141         -1 - Bad name, invalid contents.
5142            - service name already existed and not a usershare, problem
5143             with permissions to share directory etc.
5144 ***************************************************************************/
5145
5146 static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template)
5147 {
5148         SMB_STRUCT_STAT sbuf;
5149         SMB_STRUCT_STAT lsbuf;
5150         char *fname = NULL;
5151         char *sharepath = NULL;
5152         char *comment = NULL;
5153         fstring service_name;
5154         char **lines = NULL;
5155         int numlines = 0;
5156         int fd = -1;
5157         int iService = -1;
5158         TALLOC_CTX *ctx = NULL;
5159         SEC_DESC *psd = NULL;
5160         bool guest_ok = False;
5161
5162         /* Ensure share name doesn't contain invalid characters. */
5163         if (!validate_net_name(file_name, INVALID_SHARENAME_CHARS, strlen(file_name))) {
5164                 DEBUG(0,("process_usershare_file: share name %s contains "
5165                         "invalid characters (any of %s)\n",
5166                         file_name, INVALID_SHARENAME_CHARS ));
5167                 return -1;
5168         }
5169
5170         fstrcpy(service_name, file_name);
5171
5172         if (asprintf(&fname, "%s/%s", dir_name, file_name) < 0) {
5173         }
5174
5175         /* Minimize the race condition by doing an lstat before we
5176            open and fstat. Ensure this isn't a symlink link. */
5177
5178         if (sys_lstat(fname, &lsbuf) != 0) {
5179                 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
5180                         fname, strerror(errno) ));
5181                 SAFE_FREE(fname);
5182                 return -1;
5183         }
5184
5185         /* This must be a regular file, not a symlink, directory or
5186            other strange filetype. */
5187         if (!check_usershare_stat(fname, &lsbuf)) {
5188                 SAFE_FREE(fname);
5189                 return -1;
5190         }
5191
5192         {
5193                 char *canon_name = canonicalize_servicename(service_name);
5194                 TDB_DATA data = dbwrap_fetch_bystring(
5195                         ServiceHash, canon_name, canon_name);
5196
5197                 iService = -1;
5198
5199                 if ((data.dptr != NULL) && (data.dsize == sizeof(iService))) {
5200                         iService = *(int *)data.dptr;
5201                 }
5202                 TALLOC_FREE(canon_name);
5203         }
5204
5205         if (iService != -1 && ServicePtrs[iService]->usershare_last_mod == lsbuf.st_mtime) {
5206                 /* Nothing changed - Mark valid and return. */
5207                 DEBUG(10,("process_usershare_file: service %s not changed.\n",
5208                         service_name ));
5209                 ServicePtrs[iService]->usershare = USERSHARE_VALID;
5210                 SAFE_FREE(fname);
5211                 return iService;
5212         }
5213
5214         /* Try and open the file read only - no symlinks allowed. */
5215 #ifdef O_NOFOLLOW
5216         fd = sys_open(fname, O_RDONLY|O_NOFOLLOW, 0);
5217 #else
5218         fd = sys_open(fname, O_RDONLY, 0);
5219 #endif
5220
5221         if (fd == -1) {
5222                 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
5223                         fname, strerror(errno) ));
5224                 SAFE_FREE(fname);
5225                 return -1;
5226         }
5227
5228         /* Now fstat to be *SURE* it's a regular file. */
5229         if (sys_fstat(fd, &sbuf) != 0) {
5230                 close(fd);
5231                 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
5232                         fname, strerror(errno) ));
5233                 SAFE_FREE(fname);
5234                 return -1;
5235         }
5236
5237         /* Is it the same dev/inode as was lstated ? */
5238         if (lsbuf.st_dev != sbuf.st_dev || lsbuf.st_ino != sbuf.st_ino) {
5239                 close(fd);
5240                 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
5241                         "Symlink spoofing going on ?\n", fname ));
5242                 SAFE_FREE(fname);
5243                 return -1;
5244         }
5245
5246         /* This must be a regular file, not a symlink, directory or
5247            other strange filetype. */
5248         if (!check_usershare_stat(fname, &sbuf)) {
5249                 SAFE_FREE(fname);
5250                 return -1;
5251         }
5252
5253         lines = fd_lines_load(fd, &numlines, MAX_USERSHARE_FILE_SIZE);
5254
5255         close(fd);
5256         if (lines == NULL) {
5257                 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
5258                         fname, (unsigned int)sbuf.st_uid ));
5259                 SAFE_FREE(fname);
5260                 return -1;
5261         }
5262
5263         SAFE_FREE(fname);
5264
5265         /* Should we allow printers to be shared... ? */
5266         ctx = talloc_init("usershare_sd_xctx");
5267         if (!ctx) {
5268                 file_lines_free(lines);
5269                 return 1;
5270         }
5271
5272         if (parse_usershare_file(ctx, &sbuf, service_name,
5273                         iService, lines, numlines, &sharepath,
5274                         &comment, &psd, &guest_ok) != USERSHARE_OK) {
5275                 talloc_destroy(ctx);
5276                 file_lines_free(lines);
5277                 return -1;
5278         }
5279
5280         file_lines_free(lines);
5281
5282         /* Everything ok - add the service possibly using a template. */
5283         if (iService < 0) {
5284                 const service *sp = &sDefault;
5285                 if (snum_template != -1) {
5286                         sp = ServicePtrs[snum_template];
5287                 }
5288
5289                 if ((iService = add_a_service(sp, service_name)) < 0) {
5290                         DEBUG(0, ("process_usershare_file: Failed to add "
5291                                 "new service %s\n", service_name));
5292                         talloc_destroy(ctx);
5293                         return -1;
5294                 }
5295
5296                 /* Read only is controlled by usershare ACL below. */
5297                 ServicePtrs[iService]->bRead_only = False;
5298         }
5299
5300         /* Write the ACL of the new/modified share. */
5301         if (!set_share_security(service_name, psd)) {
5302                  DEBUG(0, ("process_usershare_file: Failed to set share "
5303                         "security for user share %s\n",
5304                         service_name ));
5305                 lp_remove_service(iService);
5306                 talloc_destroy(ctx);
5307                 return -1;
5308         }
5309
5310         /* If from a template it may be marked invalid. */
5311         ServicePtrs[iService]->valid = True;
5312
5313         /* Set the service as a valid usershare. */
5314         ServicePtrs[iService]->usershare = USERSHARE_VALID;
5315
5316         /* Set guest access. */
5317         if (lp_usershare_allow_guests()) {
5318                 ServicePtrs[iService]->bGuest_ok = guest_ok;
5319         }
5320
5321         /* And note when it was loaded. */
5322         ServicePtrs[iService]->usershare_last_mod = sbuf.st_mtime;
5323         string_set(&ServicePtrs[iService]->szPath, sharepath);
5324         string_set(&ServicePtrs[iService]->comment, comment);
5325
5326         talloc_destroy(ctx);
5327
5328         return iService;
5329 }
5330
5331 /***************************************************************************
5332  Checks if a usershare entry has been modified since last load.
5333 ***************************************************************************/
5334
5335 static bool usershare_exists(int iService, time_t *last_mod)
5336 {
5337         SMB_STRUCT_STAT lsbuf;
5338         const char *usersharepath = Globals.szUsersharePath;
5339         char *fname;
5340
5341         if (asprintf(&fname, "%s/%s",
5342                                 usersharepath,
5343                                 ServicePtrs[iService]->szService) < 0) {
5344                 return false;
5345         }
5346
5347         if (sys_lstat(fname, &lsbuf) != 0) {
5348                 SAFE_FREE(fname);
5349                 return false;
5350         }
5351
5352         if (!S_ISREG(lsbuf.st_mode)) {
5353                 SAFE_FREE(fname);
5354                 return false;
5355         }
5356
5357         SAFE_FREE(fname);
5358         *last_mod = lsbuf.st_mtime;
5359         return true;
5360 }
5361
5362 /***************************************************************************
5363  Load a usershare service by name. Returns a valid servicenumber or -1.
5364 ***************************************************************************/
5365
5366 int load_usershare_service(const char *servicename)
5367 {
5368         SMB_STRUCT_STAT sbuf;
5369         const char *usersharepath = Globals.szUsersharePath;
5370         int max_user_shares = Globals.iUsershareMaxShares;
5371         int snum_template = -1;
5372
5373         if (*usersharepath == 0 ||  max_user_shares == 0) {
5374                 return -1;
5375         }
5376
5377         if (sys_stat(usersharepath, &sbuf) != 0) {
5378                 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
5379                         usersharepath, strerror(errno) ));
5380                 return -1;
5381         }
5382
5383         if (!S_ISDIR(sbuf.st_mode)) {
5384                 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
5385                         usersharepath ));
5386                 return -1;
5387         }
5388
5389         /*
5390          * This directory must be owned by root, and have the 't' bit set.
5391          * It also must not be writable by "other".
5392          */
5393
5394 #ifdef S_ISVTX
5395         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
5396 #else
5397         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
5398 #endif
5399                 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
5400                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
5401                         usersharepath ));
5402                 return -1;
5403         }
5404
5405         /* Ensure the template share exists if it's set. */
5406         if (Globals.szUsershareTemplateShare[0]) {
5407                 /* We can't use lp_servicenumber here as we are recommending that
5408                    template shares have -valid=False set. */
5409                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
5410                         if (ServicePtrs[snum_template]->szService &&
5411                                         strequal(ServicePtrs[snum_template]->szService,
5412                                                 Globals.szUsershareTemplateShare)) {
5413                                 break;
5414                         }
5415                 }
5416
5417                 if (snum_template == -1) {
5418                         DEBUG(0,("load_usershare_service: usershare template share %s "
5419                                 "does not exist.\n",
5420                                 Globals.szUsershareTemplateShare ));
5421                         return -1;
5422                 }
5423         }
5424
5425         return process_usershare_file(usersharepath, servicename, snum_template);
5426 }
5427
5428 /***************************************************************************
5429  Load all user defined shares from the user share directory.
5430  We only do this if we're enumerating the share list.
5431  This is the function that can delete usershares that have
5432  been removed.
5433 ***************************************************************************/
5434
5435 int load_usershare_shares(void)
5436 {
5437         SMB_STRUCT_DIR *dp;
5438         SMB_STRUCT_STAT sbuf;
5439         SMB_STRUCT_DIRENT *de;
5440         int num_usershares = 0;
5441         int max_user_shares = Globals.iUsershareMaxShares;
5442         unsigned int num_dir_entries, num_bad_dir_entries, num_tmp_dir_entries;
5443         unsigned int allowed_bad_entries = ((2*max_user_shares)/10);
5444         unsigned int allowed_tmp_entries = ((2*max_user_shares)/10);
5445         int iService;
5446         int snum_template = -1;
5447         const char *usersharepath = Globals.szUsersharePath;
5448         int ret = lp_numservices();
5449
5450         if (max_user_shares == 0 || *usersharepath == '\0') {
5451                 return lp_numservices();
5452         }
5453
5454         if (sys_stat(usersharepath, &sbuf) != 0) {
5455                 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
5456                         usersharepath, strerror(errno) ));
5457                 return ret;
5458         }
5459
5460         /*
5461          * This directory must be owned by root, and have the 't' bit set.
5462          * It also must not be writable by "other".
5463          */
5464
5465 #ifdef S_ISVTX
5466         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
5467 #else
5468         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
5469 #endif
5470                 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
5471                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
5472                         usersharepath ));
5473                 return ret;
5474         }
5475
5476         /* Ensure the template share exists if it's set. */
5477         if (Globals.szUsershareTemplateShare[0]) {
5478                 /* We can't use lp_servicenumber here as we are recommending that
5479                    template shares have -valid=False set. */
5480                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
5481                         if (ServicePtrs[snum_template]->szService &&
5482                                         strequal(ServicePtrs[snum_template]->szService,
5483                                                 Globals.szUsershareTemplateShare)) {
5484                                 break;
5485                         }
5486                 }
5487
5488                 if (snum_template == -1) {
5489                         DEBUG(0,("load_usershare_shares: usershare template share %s "
5490                                 "does not exist.\n",
5491                                 Globals.szUsershareTemplateShare ));
5492                         return ret;
5493                 }
5494         }
5495
5496         /* Mark all existing usershares as pending delete. */
5497         for (iService = iNumServices - 1; iService >= 0; iService--) {
5498                 if (VALID(iService) && ServicePtrs[iService]->usershare) {
5499                         ServicePtrs[iService]->usershare = USERSHARE_PENDING_DELETE;
5500                 }
5501         }
5502
5503         dp = sys_opendir(usersharepath);
5504         if (!dp) {
5505                 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
5506                         usersharepath, strerror(errno) ));
5507                 return ret;
5508         }
5509
5510         for (num_dir_entries = 0, num_bad_dir_entries = 0, num_tmp_dir_entries = 0;
5511                         (de = sys_readdir(dp));
5512                         num_dir_entries++ ) {
5513                 int r;
5514                 const char *n = de->d_name;
5515
5516                 /* Ignore . and .. */
5517                 if (*n == '.') {
5518                         if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
5519                                 continue;
5520                         }
5521                 }
5522
5523                 if (n[0] == ':') {
5524                         /* Temporary file used when creating a share. */
5525                         num_tmp_dir_entries++;
5526                 }
5527
5528                 /* Allow 20% tmp entries. */
5529                 if (num_tmp_dir_entries > allowed_tmp_entries) {
5530                         DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
5531                                 "in directory %s\n",
5532                                 num_tmp_dir_entries, usersharepath));
5533                         break;
5534                 }
5535
5536                 r = process_usershare_file(usersharepath, n, snum_template);
5537                 if (r == 0) {
5538                         /* Update the services count. */
5539                         num_usershares++;
5540                         if (num_usershares >= max_user_shares) {
5541                                 DEBUG(0,("load_usershare_shares: max user shares reached "
5542                                         "on file %s in directory %s\n",
5543                                         n, usersharepath ));
5544                                 break;
5545                         }
5546                 } else if (r == -1) {
5547                         num_bad_dir_entries++;
5548                 }
5549
5550                 /* Allow 20% bad entries. */
5551                 if (num_bad_dir_entries > allowed_bad_entries) {
5552                         DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
5553                                 "in directory %s\n",
5554                                 num_bad_dir_entries, usersharepath));
5555                         break;
5556                 }
5557
5558                 /* Allow 20% bad entries. */
5559                 if (num_dir_entries > max_user_shares + allowed_bad_entries) {
5560                         DEBUG(0,("load_usershare_shares: too many total entries (%u) "
5561                         "in directory %s\n",
5562                         num_dir_entries, usersharepath));
5563                         break;
5564                 }
5565         }
5566
5567         sys_closedir(dp);
5568
5569         /* Sweep through and delete any non-refreshed usershares that are
5570            not currently in use. */
5571         for (iService = iNumServices - 1; iService >= 0; iService--) {
5572                 if (VALID(iService) && (ServicePtrs[iService]->usershare == USERSHARE_PENDING_DELETE)) {
5573                         if (conn_snum_used(iService)) {
5574                                 continue;
5575                         }
5576                         /* Remove from the share ACL db. */
5577                         DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
5578                                 lp_servicename(iService) ));
5579                         delete_share_security(lp_servicename(iService));
5580                         free_service_byindex(iService);
5581                 }
5582         }
5583
5584         return lp_numservices();
5585 }
5586
5587 /********************************************************
5588  Destroy global resources allocated in this file
5589 ********************************************************/
5590
5591 void gfree_loadparm(void)
5592 {
5593         struct file_lists *f;
5594         struct file_lists *next;
5595         int i;
5596
5597         /* Free the file lists */
5598
5599         f = file_lists;
5600         while( f ) {
5601                 next = f->next;
5602                 SAFE_FREE( f->name );
5603                 SAFE_FREE( f->subfname );
5604                 SAFE_FREE( f );
5605                 f = next;
5606         }
5607
5608         /* Free resources allocated to services */
5609
5610         for ( i = 0; i < iNumServices; i++ ) {
5611                 if ( VALID(i) ) {
5612                         free_service_byindex(i);
5613                 }
5614         }
5615
5616         SAFE_FREE( ServicePtrs );
5617         iNumServices = 0;
5618
5619         /* Now release all resources allocated to global
5620            parameters and the default service */
5621
5622         for (i = 0; parm_table[i].label; i++)
5623         {
5624                 if ( parm_table[i].type == P_STRING
5625                         || parm_table[i].type == P_USTRING )
5626                 {
5627                         string_free( (char**)parm_table[i].ptr );
5628                 }
5629                 else if (parm_table[i].type == P_LIST) {
5630                         str_list_free( (char***)parm_table[i].ptr );
5631                 }
5632         }
5633 }
5634
5635 /***************************************************************************
5636  Load the services array from the services file. Return True on success,
5637  False on failure.
5638 ***************************************************************************/
5639
5640 bool lp_load(const char *pszFname,
5641              bool global_only,
5642              bool save_defaults,
5643              bool add_ipc,
5644              bool initialize_globals)
5645 {
5646         char *n2 = NULL;
5647         bool bRetval;
5648         param_opt_struct *data, *pdata;
5649
5650         n2 = alloc_sub_basic(get_current_username(),
5651                                 current_user_info.domain,
5652                                 pszFname);
5653         if (!n2) {
5654                 smb_panic("lp_load: out of memory");
5655         }
5656
5657         add_to_file_list(pszFname, n2);
5658
5659         bRetval = False;
5660
5661         DEBUG(3, ("lp_load: refreshing parameters\n"));
5662
5663         bInGlobalSection = True;
5664         bGlobalOnly = global_only;
5665
5666         init_globals(! initialize_globals);
5667         debug_init();
5668
5669         if (save_defaults) {
5670                 init_locals();
5671                 lp_save_defaults();
5672         }
5673
5674         if (Globals.param_opt != NULL) {
5675                 data = Globals.param_opt;
5676                 while (data) {
5677                         string_free(&data->key);
5678                         string_free(&data->value);
5679                         str_list_free(&data->list);
5680                         pdata = data->next;
5681                         SAFE_FREE(data);
5682                         data = pdata;
5683                 }
5684                 Globals.param_opt = NULL;
5685         }
5686
5687         /* We get sections first, so have to start 'behind' to make up */
5688         iServiceIndex = -1;
5689         bRetval = pm_process(n2, do_section, do_parameter);
5690         SAFE_FREE(n2);
5691
5692         /* finish up the last section */
5693         DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
5694         if (bRetval) {
5695                 if (iServiceIndex >= 0) {
5696                         bRetval = service_ok(iServiceIndex);
5697                 }
5698         }
5699
5700         lp_add_auto_services(lp_auto_services());
5701
5702         if (add_ipc) {
5703                 /* When 'restrict anonymous = 2' guest connections to ipc$
5704                    are denied */
5705                 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
5706                 if ( lp_enable_asu_support() ) {
5707                         lp_add_ipc("ADMIN$", false);
5708                 }
5709         }
5710
5711         set_server_role();
5712         set_default_server_announce_type();
5713         set_allowed_client_auth();
5714
5715         bLoaded = True;
5716
5717         /* Now we check bWINSsupport and set szWINSserver to 127.0.0.1 */
5718         /* if bWINSsupport is true and we are in the client            */
5719         if (in_client && Globals.bWINSsupport) {
5720                 lp_do_parameter(GLOBAL_SECTION_SNUM, "wins server", "127.0.0.1");
5721         }
5722
5723         init_iconv();
5724
5725         return (bRetval);
5726 }
5727
5728 /***************************************************************************
5729  Reset the max number of services.
5730 ***************************************************************************/
5731
5732 void lp_resetnumservices(void)
5733 {
5734         iNumServices = 0;
5735 }
5736
5737 /***************************************************************************
5738  Return the max number of services.
5739 ***************************************************************************/
5740
5741 int lp_numservices(void)
5742 {
5743         return (iNumServices);
5744 }
5745
5746 /***************************************************************************
5747 Display the contents of the services array in human-readable form.
5748 ***************************************************************************/
5749
5750 void lp_dump(FILE *f, bool show_defaults, int maxtoprint)
5751 {
5752         int iService;
5753
5754         if (show_defaults)
5755                 defaults_saved = False;
5756
5757         dump_globals(f);
5758
5759         dump_a_service(&sDefault, f);
5760
5761         for (iService = 0; iService < maxtoprint; iService++) {
5762                 fprintf(f,"\n");
5763                 lp_dump_one(f, show_defaults, iService);
5764         }
5765 }
5766
5767 /***************************************************************************
5768 Display the contents of one service in human-readable form.
5769 ***************************************************************************/
5770
5771 void lp_dump_one(FILE * f, bool show_defaults, int snum)
5772 {
5773         if (VALID(snum)) {
5774                 if (ServicePtrs[snum]->szService[0] == '\0')
5775                         return;
5776                 dump_a_service(ServicePtrs[snum], f);
5777         }
5778 }
5779
5780 /***************************************************************************
5781 Return the number of the service with the given name, or -1 if it doesn't
5782 exist. Note that this is a DIFFERENT ANIMAL from the internal function
5783 getservicebyname()! This works ONLY if all services have been loaded, and
5784 does not copy the found service.
5785 ***************************************************************************/
5786
5787 int lp_servicenumber(const char *pszServiceName)
5788 {
5789         int iService;
5790         fstring serviceName;
5791
5792         if (!pszServiceName) {
5793                 return GLOBAL_SECTION_SNUM;
5794         }
5795
5796         for (iService = iNumServices - 1; iService >= 0; iService--) {
5797                 if (VALID(iService) && ServicePtrs[iService]->szService) {
5798                         /*
5799                          * The substitution here is used to support %U is
5800                          * service names
5801                          */
5802                         fstrcpy(serviceName, ServicePtrs[iService]->szService);
5803                         standard_sub_basic(get_current_username(),
5804                                            current_user_info.domain,
5805                                            serviceName,sizeof(serviceName));
5806                         if (strequal(serviceName, pszServiceName)) {
5807                                 break;
5808                         }
5809                 }
5810         }
5811
5812         if (iService >= 0 && ServicePtrs[iService]->usershare == USERSHARE_VALID) {
5813                 time_t last_mod;
5814
5815                 if (!usershare_exists(iService, &last_mod)) {
5816                         /* Remove the share security tdb entry for it. */
5817                         delete_share_security(lp_servicename(iService));
5818                         /* Remove it from the array. */
5819                         free_service_byindex(iService);
5820                         /* Doesn't exist anymore. */
5821                         return GLOBAL_SECTION_SNUM;
5822                 }
5823
5824                 /* Has it been modified ? If so delete and reload. */
5825                 if (ServicePtrs[iService]->usershare_last_mod < last_mod) {
5826                         /* Remove it from the array. */
5827                         free_service_byindex(iService);
5828                         /* and now reload it. */
5829                         iService = load_usershare_service(pszServiceName);
5830                 }
5831         }
5832
5833         if (iService < 0) {
5834                 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
5835                 return GLOBAL_SECTION_SNUM;
5836         }
5837
5838         return (iService);
5839 }
5840
5841 bool share_defined(const char *service_name)
5842 {
5843         return (lp_servicenumber(service_name) != -1);
5844 }
5845
5846 struct share_params *get_share_params(TALLOC_CTX *mem_ctx,
5847                                       const char *sharename)
5848 {
5849         struct share_params *result;
5850         char *sname;
5851         int snum;
5852
5853         if (!(sname = SMB_STRDUP(sharename))) {
5854                 return NULL;
5855         }
5856
5857         snum = find_service(sname);
5858         SAFE_FREE(sname);
5859
5860         if (snum < 0) {
5861                 return NULL;
5862         }
5863
5864         if (!(result = TALLOC_P(mem_ctx, struct share_params))) {
5865                 DEBUG(0, ("talloc failed\n"));
5866                 return NULL;
5867         }
5868
5869         result->service = snum;
5870         return result;
5871 }
5872
5873 struct share_iterator *share_list_all(TALLOC_CTX *mem_ctx)
5874 {
5875         struct share_iterator *result;
5876
5877         if (!(result = TALLOC_P(mem_ctx, struct share_iterator))) {
5878                 DEBUG(0, ("talloc failed\n"));
5879                 return NULL;
5880         }
5881
5882         result->next_id = 0;
5883         return result;
5884 }
5885
5886 struct share_params *next_share(struct share_iterator *list)
5887 {
5888         struct share_params *result;
5889
5890         while (!lp_snum_ok(list->next_id) &&
5891                (list->next_id < lp_numservices())) {
5892                 list->next_id += 1;
5893         }
5894
5895         if (list->next_id >= lp_numservices()) {
5896                 return NULL;
5897         }
5898
5899         if (!(result = TALLOC_P(list, struct share_params))) {
5900                 DEBUG(0, ("talloc failed\n"));
5901                 return NULL;
5902         }
5903
5904         result->service = list->next_id;
5905         list->next_id += 1;
5906         return result;
5907 }
5908
5909 struct share_params *next_printer(struct share_iterator *list)
5910 {
5911         struct share_params *result;
5912
5913         while ((result = next_share(list)) != NULL) {
5914                 if (lp_print_ok(result->service)) {
5915                         break;
5916                 }
5917         }
5918         return result;
5919 }
5920
5921 /*
5922  * This is a hack for a transition period until we transformed all code from
5923  * service numbers to struct share_params.
5924  */
5925
5926 struct share_params *snum2params_static(int snum)
5927 {
5928         static struct share_params result;
5929         result.service = snum;
5930         return &result;
5931 }
5932
5933 /*******************************************************************
5934  A useful volume label function.
5935 ********************************************************************/
5936
5937 const char *volume_label(int snum)
5938 {
5939         char *ret;
5940         const char *label = lp_volume(snum);
5941         if (!*label) {
5942                 label = lp_servicename(snum);
5943         }
5944
5945         /* This returns a 33 byte guarenteed null terminated string. */
5946         ret = talloc_strndup(talloc_tos(), label, 32);
5947         if (!ret) {
5948                 return "";
5949         }
5950         return ret;
5951 }
5952
5953 /*******************************************************************
5954  Set the server type we will announce as via nmbd.
5955 ********************************************************************/
5956
5957 static void set_default_server_announce_type(void)
5958 {
5959         default_server_announce = 0;
5960         default_server_announce |= SV_TYPE_WORKSTATION;
5961         default_server_announce |= SV_TYPE_SERVER;
5962         default_server_announce |= SV_TYPE_SERVER_UNIX;
5963
5964         /* note that the flag should be set only if we have a
5965            printer service but nmbd doesn't actually load the
5966            services so we can't tell   --jerry */
5967
5968         default_server_announce |= SV_TYPE_PRINTQ_SERVER;
5969
5970         switch (lp_announce_as()) {
5971                 case ANNOUNCE_AS_NT_SERVER:
5972                         default_server_announce |= SV_TYPE_SERVER_NT;
5973                         /* fall through... */
5974                 case ANNOUNCE_AS_NT_WORKSTATION:
5975                         default_server_announce |= SV_TYPE_NT;
5976                         break;
5977                 case ANNOUNCE_AS_WIN95:
5978                         default_server_announce |= SV_TYPE_WIN95_PLUS;
5979                         break;
5980                 case ANNOUNCE_AS_WFW:
5981                         default_server_announce |= SV_TYPE_WFW;
5982                         break;
5983                 default:
5984                         break;
5985         }
5986
5987         switch (lp_server_role()) {
5988                 case ROLE_DOMAIN_MEMBER:
5989                         default_server_announce |= SV_TYPE_DOMAIN_MEMBER;
5990                         break;
5991                 case ROLE_DOMAIN_PDC:
5992                         default_server_announce |= SV_TYPE_DOMAIN_CTRL;
5993                         break;
5994                 case ROLE_DOMAIN_BDC:
5995                         default_server_announce |= SV_TYPE_DOMAIN_BAKCTRL;
5996                         break;
5997                 case ROLE_STANDALONE:
5998                 default:
5999                         break;
6000         }
6001         if (lp_time_server())
6002                 default_server_announce |= SV_TYPE_TIME_SOURCE;
6003
6004         if (lp_host_msdfs())
6005                 default_server_announce |= SV_TYPE_DFS_SERVER;
6006 }
6007
6008 /***********************************************************
6009  returns role of Samba server
6010 ************************************************************/
6011
6012 int lp_server_role(void)
6013 {
6014         return server_role;
6015 }
6016
6017 /***********************************************************
6018  If we are PDC then prefer us as DMB
6019 ************************************************************/
6020
6021 bool lp_domain_master(void)
6022 {
6023         if (Globals.iDomainMaster == Auto)
6024                 return (lp_server_role() == ROLE_DOMAIN_PDC);
6025
6026         return (bool)Globals.iDomainMaster;
6027 }
6028
6029 /***********************************************************
6030  If we are DMB then prefer us as LMB
6031 ************************************************************/
6032
6033 bool lp_preferred_master(void)
6034 {
6035         if (Globals.iPreferredMaster == Auto)
6036                 return (lp_local_master() && lp_domain_master());
6037
6038         return (bool)Globals.iPreferredMaster;
6039 }
6040
6041 /*******************************************************************
6042  Remove a service.
6043 ********************************************************************/
6044
6045 void lp_remove_service(int snum)
6046 {
6047         ServicePtrs[snum]->valid = False;
6048         invalid_services[num_invalid_services++] = snum;
6049 }
6050
6051 /*******************************************************************
6052  Copy a service.
6053 ********************************************************************/
6054
6055 void lp_copy_service(int snum, const char *new_name)
6056 {
6057         do_section(new_name);
6058         if (snum >= 0) {
6059                 snum = lp_servicenumber(new_name);
6060                 if (snum >= 0)
6061                         lp_do_parameter(snum, "copy", lp_servicename(snum));
6062         }
6063 }
6064
6065
6066 /*******************************************************************
6067  Get the default server type we will announce as via nmbd.
6068 ********************************************************************/
6069
6070 int lp_default_server_announce(void)
6071 {
6072         return default_server_announce;
6073 }
6074
6075 /*******************************************************************
6076  Split the announce version into major and minor numbers.
6077 ********************************************************************/
6078
6079 int lp_major_announce_version(void)
6080 {
6081         static bool got_major = False;
6082         static int major_version = DEFAULT_MAJOR_VERSION;
6083         char *vers;
6084         char *p;
6085
6086         if (got_major)
6087                 return major_version;
6088
6089         got_major = True;
6090         if ((vers = lp_announce_version()) == NULL)
6091                 return major_version;
6092
6093         if ((p = strchr_m(vers, '.')) == 0)
6094                 return major_version;
6095
6096         *p = '\0';
6097         major_version = atoi(vers);
6098         return major_version;
6099 }
6100
6101 int lp_minor_announce_version(void)
6102 {
6103         static bool got_minor = False;
6104         static int minor_version = DEFAULT_MINOR_VERSION;
6105         char *vers;
6106         char *p;
6107
6108         if (got_minor)
6109                 return minor_version;
6110
6111         got_minor = True;
6112         if ((vers = lp_announce_version()) == NULL)
6113                 return minor_version;
6114
6115         if ((p = strchr_m(vers, '.')) == 0)
6116                 return minor_version;
6117
6118         p++;
6119         minor_version = atoi(p);
6120         return minor_version;
6121 }
6122
6123 /***********************************************************
6124  Set the global name resolution order (used in smbclient).
6125 ************************************************************/
6126
6127 void lp_set_name_resolve_order(const char *new_order)
6128 {
6129         string_set(&Globals.szNameResolveOrder, new_order);
6130 }
6131
6132 const char *lp_printername(int snum)
6133 {
6134         const char *ret = _lp_printername(snum);
6135         if (ret == NULL || (ret != NULL && *ret == '\0'))
6136                 ret = lp_const_servicename(snum);
6137
6138         return ret;
6139 }
6140
6141
6142 /***********************************************************
6143  Allow daemons such as winbindd to fix their logfile name.
6144 ************************************************************/
6145
6146 void lp_set_logfile(const char *name)
6147 {
6148         string_set(&Globals.szLogFile, name);
6149         debug_set_logfile(name);
6150 }
6151
6152 /*******************************************************************
6153  Return the max print jobs per queue.
6154 ********************************************************************/
6155
6156 int lp_maxprintjobs(int snum)
6157 {
6158         int maxjobs = LP_SNUM_OK(snum) ? ServicePtrs[snum]->iMaxPrintJobs : sDefault.iMaxPrintJobs;
6159         if (maxjobs <= 0 || maxjobs >= PRINT_MAX_JOBID)
6160                 maxjobs = PRINT_MAX_JOBID - 1;
6161
6162         return maxjobs;
6163 }
6164
6165 const char *lp_printcapname(void)
6166 {
6167         if ((Globals.szPrintcapname != NULL) &&
6168             (Globals.szPrintcapname[0] != '\0'))
6169                 return Globals.szPrintcapname;
6170
6171         if (sDefault.iPrinting == PRINT_CUPS) {
6172 #ifdef HAVE_CUPS
6173                 return "cups";
6174 #else
6175                 return "lpstat";
6176 #endif
6177         }
6178
6179         if (sDefault.iPrinting == PRINT_BSD)
6180                 return "/etc/printcap";
6181
6182         return PRINTCAP_NAME;
6183 }
6184
6185 /*******************************************************************
6186  Ensure we don't use sendfile if server smb signing is active.
6187 ********************************************************************/
6188
6189 static uint32 spoolss_state;
6190
6191 bool lp_disable_spoolss( void )
6192 {
6193         if ( spoolss_state == SVCCTL_STATE_UNKNOWN )
6194                 spoolss_state = _lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
6195
6196         return spoolss_state == SVCCTL_STOPPED ? True : False;
6197 }
6198
6199 void lp_set_spoolss_state( uint32 state )
6200 {
6201         SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
6202
6203         spoolss_state = state;
6204 }
6205
6206 uint32 lp_get_spoolss_state( void )
6207 {
6208         return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
6209 }
6210
6211 /*******************************************************************
6212  Ensure we don't use sendfile if server smb signing is active.
6213 ********************************************************************/
6214
6215 bool lp_use_sendfile(int snum)
6216 {
6217         /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
6218         if (Protocol < PROTOCOL_NT1) {
6219                 return False;
6220         }
6221         return (_lp_use_sendfile(snum) && (get_remote_arch() != RA_WIN95) && !srv_is_signing_active());
6222 }
6223
6224 /*******************************************************************
6225  Turn off sendfile if we find the underlying OS doesn't support it.
6226 ********************************************************************/
6227
6228 void set_use_sendfile(int snum, bool val)
6229 {
6230         if (LP_SNUM_OK(snum))
6231                 ServicePtrs[snum]->bUseSendfile = val;
6232         else
6233                 sDefault.bUseSendfile = val;
6234 }
6235
6236 /*******************************************************************
6237  Turn off storing DOS attributes if this share doesn't support it.
6238 ********************************************************************/
6239
6240 void set_store_dos_attributes(int snum, bool val)
6241 {
6242         if (!LP_SNUM_OK(snum))
6243                 return;
6244         ServicePtrs[(snum)]->bStoreDosAttributes = val;
6245 }
6246
6247 void lp_set_mangling_method(const char *new_method)
6248 {
6249         string_set(&Globals.szManglingMethod, new_method);
6250 }
6251
6252 /*******************************************************************
6253  Global state for POSIX pathname processing.
6254 ********************************************************************/
6255
6256 static bool posix_pathnames;
6257
6258 bool lp_posix_pathnames(void)
6259 {
6260         return posix_pathnames;
6261 }
6262
6263 /*******************************************************************
6264  Change everything needed to ensure POSIX pathname processing (currently
6265  not much).
6266 ********************************************************************/
6267
6268 void lp_set_posix_pathnames(void)
6269 {
6270         posix_pathnames = True;
6271 }
6272
6273 /*******************************************************************
6274  Global state for POSIX lock processing - CIFS unix extensions.
6275 ********************************************************************/
6276
6277 bool posix_default_lock_was_set;
6278 static enum brl_flavour posix_cifsx_locktype; /* By default 0 == WINDOWS_LOCK */
6279
6280 enum brl_flavour lp_posix_cifsu_locktype(files_struct *fsp)
6281 {
6282         if (posix_default_lock_was_set) {
6283                 return posix_cifsx_locktype;
6284         } else {
6285                 return fsp->posix_open ? POSIX_LOCK : WINDOWS_LOCK;
6286         }
6287 }
6288
6289 /*******************************************************************
6290 ********************************************************************/
6291
6292 void lp_set_posix_default_cifsx_readwrite_locktype(enum brl_flavour val)
6293 {
6294         posix_default_lock_was_set = True;
6295         posix_cifsx_locktype = val;
6296 }
6297
6298 int lp_min_receive_file_size(void)
6299 {
6300         if (Globals.iminreceivefile < 0) {
6301                 return 0;
6302         }
6303         return MIN(Globals.iminreceivefile, BUFFER_SIZE);
6304 }