smbcacls: add -x argument, prints maximum access
[samba.git] / docs-xml / manpages / smbcacls.1.xml
index 7770fa2fd9efcd119bcb3f32f8b9b95e3e243315..7f87da80329c44aaa77af5776db0cb7170531c3e 100644 (file)
@@ -7,7 +7,7 @@
        <manvolnum>1</manvolnum>
        <refmiscinfo class="source">Samba</refmiscinfo>
        <refmiscinfo class="manual">User Commands</refmiscinfo>
-       <refmiscinfo class="version">4.1</refmiscinfo>
+       <refmiscinfo class="version">&doc.version;</refmiscinfo>
 </refmeta>
 
 
                <arg choice="opt">--numeric</arg>
                <arg choice="opt">-t</arg>
                <arg choice="opt">-U username</arg>
-               <arg choice="opt">-h</arg>
                <arg choice="opt">-d</arg>
                <arg choice="opt">-e</arg>
                <arg choice="opt">-m|--max-protocol LEVEL</arg>
+               <arg choice="opt">--query-security-info FLAGS</arg>
+               <arg choice="opt">--set-security-info FLAGS</arg>
+               <arg choice="opt">--sddl</arg>
+               <arg choice="opt">--domain-sid SID</arg>
+               <arg choice="opt">-x|--maximum-access</arg>
        </cmdsynopsis>
 </refsynopsisdiv>
 
                and masks to a readable string format.  </para></listitem>
                </varlistentry>
                
-               <varlistentry>
-               <term>-e</term>
-               <listitem><para>This command line parameter requires the remote
-               server support the UNIX extensions or that the SMB3 protocol has been selected.
-               Requests that the connection be encrypted. Negotiates SMB encryption using either
-               SMB3 or POSIX extensions via GSSAPI. Uses the given credentials for
-               the encryption negotiation (either kerberos or NTLMv1/v2 if given
-               domain/username/password triple. Fails the connection if encryption
-               cannot be negotiated.
-               </para></listitem>
-               </varlistentry>
-
                <varlistentry>
                <term>-m|--max-protocol PROTOCOL_NAME</term>
                <listitem><para>This allows the user to select the
                the arguments.
                </para></listitem>
                </varlistentry>
-                               
-               &stdarg.help;
+
+               <varlistentry>
+               <term>--query-security-info FLAGS</term>
+               <listitem><para>The security-info flags for queries.
+               </para></listitem>
+               </varlistentry>
+
+               <varlistentry>
+               <term>--set-security-info FLAGS</term>
+               <listitem><para>The security-info flags for queries.
+               </para></listitem>
+               </varlistentry>
+
+               <varlistentry>
+               <term>--sddl</term>
+               <listitem><para>Output and input acls in sddl format.
+               </para></listitem>
+               </varlistentry>
+
+               <varlistentry>
+               <term>--domain-sid SID</term>
+               <listitem><para>SID used for sddl processing.
+               </para></listitem>
+               </varlistentry>
+
+               <varlistentry>
+               <term>-x|--maximum-access</term>
+               <listitem><para>When displaying an ACL additionally query
+               the server for effective maximum permissions. Note that this
+               is only supported with SMB protocol version 2 or higher.
+               </para></listitem>
+               </varlistentry>
+
                &stdarg.server.debug;
                &popt.common.samba;
                &popt.common.credentials;
+               &popt.common.connection;
+               &popt.autohelp;
        </variablelist>
 </refsect1>
 
@@ -271,7 +296,7 @@ ACL:&lt;sid or name&gt;:&lt;type&gt;/&lt;flags&gt;/&lt;mask&gt;
 <refsect1>
        <title>VERSION</title>
 
-       <para>This man page is correct for version 4 of the Samba suite.</para>
+       <para>This man page is part of version &doc.version; of the Samba suite.</para>
 </refsect1>
 
 <refsect1>