Added "nt status support" parameter. Fix offline synchronisation.
[kai/samba.git] / source3 / param / loadparm.c
index 5407db5024f3012bab8b0b7a69ab082b30ed0c24..7548ff03a8be4a0e51cd691db3631a907bba0b80 100644 (file)
@@ -1,10 +1,11 @@
 /* 
-   Unix SMB/Netbios implementation.
-   Version 1.9.
+   Unix SMB/CIFS implementation.
    Parameter loading functions
    Copyright (C) Karl Auer 1993-1998
 
    Largely re-written by Andrew Tridgell, September 1994
+
+   Copyright (C) Simo Sorce 2001
    
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
 
 #include "includes.h"
 
-/* Set default coding system for KANJI if none specified in Makefile. */
-/* 
- * We treat KANJI specially due to historical precedent (it was the
- * first non-english codepage added to Samba). With the new dynamic
- * codepage support this is not needed anymore.
- *
- * The define 'KANJI' is being overloaded to mean 'use kanji codepage
- * by default' and also 'this is the filename-to-disk conversion 
- * method to use'. This really should be removed and all control
- * over this left in the smb.conf parameters 'client codepage'
- * and 'coding system'.
- */
-#ifndef KANJI
-#define KANJI "sbcs"
-#endif /* KANJI */
-
 BOOL in_client = False;                /* Not in the client by default */
 BOOL bLoaded = False;
 
+extern userdom_struct current_user_info;
 extern int DEBUGLEVEL_CLASS[DBGC_LAST];
 extern pstring user_socket_options;
 extern pstring global_myname;
@@ -86,10 +72,8 @@ pstring global_scope = "";
 #endif
 
 /* some helpful bits */
-#define pSERVICE(i) ServicePtrs[i]
-#define iSERVICE(i) (*pSERVICE(i))
-#define LP_SNUM_OK(iService) (((iService) >= 0) && ((iService) < iNumServices) && iSERVICE(iService).valid)
-#define VALID(i) iSERVICE(i).valid
+#define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && ServicePtrs[(i)]->valid)
+#define VALID(i) ServicePtrs[i]->valid
 
 int keepalive = DEFAULT_KEEPALIVE;
 BOOL use_getwd_cache = True;
@@ -103,6 +87,9 @@ static BOOL defaults_saved = False;
  */
 typedef struct
 {
+       char *dos_charset;
+       char *unix_charset;
+       char *display_charset;
        char *szPrintcapname;
        char *szEnumPortsCommand;
        char *szAddPrinterCommand;
@@ -123,44 +110,27 @@ typedef struct
        char *szSMBPasswdFile;
        char *szPrivateDir;
        char *szPassdbModulePath;
+       char *szPassdbBackend;
        char *szPasswordServer;
        char *szSocketOptions;
-       char *szValidChars;
        char *szWorkGroup;
-       char *szDomainAdminGroup;
-       char *szDomainGuestGroup;
-       char *szDomainAdminUsers;
-       char *szDomainGuestUsers;
-       char *szDomainHostsallow;
-       char *szDomainHostsdeny;
+       char *szRealm;
+       char *szADSserver;
        char *szUsernameMap;
-#ifdef USING_GROUPNAME_MAP
-       char *szGroupnameMap;
-#endif                         /* USING_GROUPNAME_MAP */
-       char *szCharacterSet;
-       char *szCodePageDir;
        char *szLogonScript;
        char *szLogonPath;
        char *szLogonDrive;
        char *szLogonHome;
-       char *szSmbrun;
        char *szWINSserver;
-       char *szCodingSystem;
-       char *szInterfaces;
+       char **szInterfaces;
        char *szRemoteAnnounce;
        char *szRemoteBrowseSync;
        char *szSocketAddress;
        char *szNISHomeMapName;
        char *szAnnounceVersion;        /* This is initialised in init_globals */
-       char *szNetbiosAliases;
+       char **szNetbiosAliases;
        char *szDomainOtherSIDs;
-       char *szDomainGroups;
        char *szNameResolveOrder;
-       char *szLdapServer;
-       char *szLdapSuffix;
-       char *szLdapFilter;
-       char *szLdapRoot;
-       char *szLdapRootPassword;
        char *szPanicAction;
        char *szAddUserScript;
        char *szDelUserScript;
@@ -168,22 +138,30 @@ typedef struct
        char *szDelGroupScript;
        char *szAddUserToGroupScript;
        char *szDelUserToGroupScript;
+       char *szAddMachineScript;
+       char *szShutdownScript;
+       char *szAbortShutdownScript;
        char *szWINSHook;
+       char *szWINSPartners;
 #ifdef WITH_UTMP
        char *szUtmpDir;
        char *szWtmpDir;
-       char *szUtmpHostname;
-       BOOL bUtmpConsolidate;
-#endif                         /* WITH_UTMP */
+       BOOL bUtmp;
+#endif
        char *szSourceEnv;
        char *szWinbindUID;
        char *szWinbindGID;
+       char *szNonUnixAccountRange;
        char *szTemplateHomedir;
        char *szTemplateShell;
        char *szWinbindSeparator;
+       BOOL bWinbindEnumUsers;
+       BOOL bWinbindEnumGroups;
+       BOOL bWinbindUseDefaultDomain;
        char *szAddShareCommand;
        char *szChangeShareCommand;
        char *szDeleteShareCommand;
+       char *szGuestaccount;
        int max_log_size;
        int mangled_stack;
        int max_xmit;
@@ -196,9 +174,12 @@ typedef struct
        int maxprotocol;
        int minprotocol;
        int security;
+       char **AuthMethods;
+       BOOL paranoid_server_security;
        int maxdisksize;
        int lpqcachetime;
        int iMaxSmbdProcesses;
+       BOOL bDisableSpoolss;
        int iTotalPrintJobs;
        int syslog;
        int os_level;
@@ -209,7 +190,6 @@ typedef struct
        int ReadSize;
        int lm_announce;
        int lm_interval;
-       int client_code_page;
        int announce_as;        /* This is initialised in init_globals */
        int machine_password_timeout;
        int change_notify_timeout;
@@ -218,20 +198,28 @@ typedef struct
        int min_passwd_length;
        int oplock_break_wait_time;
        int winbind_cache_time;
-#ifdef WITH_LDAP
+#ifdef WITH_LDAP_SAM
        int ldap_port;
-#endif                         /* WITH_LDAP */
+       int ldap_ssl;
+       char *szLdapServer;
+       char *szLdapSuffix;
+       char *szLdapFilter;
+       char *szLdapAdminDn;
+#endif                         /* WITH_LDAP_SAM */
 #ifdef WITH_SSL
        int sslVersion;
-       char *sslHostsRequire;
-       char *sslHostsResign;
+       char **sslHostsRequire;
+       char **sslHostsResign;
        char *sslCaCertDir;
        char *sslCaCertFile;
-       char *sslCert;
-       char *sslPrivKey;
+       char *sslServerCert;
+       char *sslServerPrivKey;
        char *sslClientCert;
        char *sslClientPrivKey;
        char *sslCiphers;
+       char *sslEgdSocket;
+       char *sslEntropyFile;
+       int  sslEntropyBytes;
        BOOL sslEnabled;
        BOOL sslReqClientCert;
        BOOL sslReqServerCert;
@@ -249,35 +237,40 @@ typedef struct
        BOOL bUpdateEncrypt;
        BOOL bStripDot;
        BOOL bNullPasswords;
+       BOOL bObeyPamRestrictions;
        BOOL bLoadPrinters;
-       BOOL bUseRhosts;
+       BOOL bLargeReadwrite;
        BOOL bReadRaw;
        BOOL bWriteRaw;
        BOOL bReadPrediction;
        BOOL bReadbmpx;
        BOOL bSyslogOnly;
        BOOL bBrowseList;
-       BOOL bUnixRealname;
        BOOL bNISHomeMap;
        BOOL bTimeServer;
        BOOL bBindInterfacesOnly;
+       BOOL bPamPasswordChange;
        BOOL bUnixPasswdSync;
        BOOL bPasswdChatDebug;
        BOOL bTimestampLogs;
        BOOL bNTSmbSupport;
        BOOL bNTPipeSupport;
-       BOOL bNTAclSupport;
+       BOOL bNTStatusSupport;
        BOOL bStatCache;
        BOOL bKernelOplocks;
        BOOL bAllowTrustedDomains;
        BOOL bRestrictAnonymous;
        BOOL bLanmanAuth;
+       BOOL bNTLMAuth;
        BOOL bDebugHiresTimestamp;
        BOOL bDebugPid;
        BOOL bDebugUid;
        BOOL bHostMSDfs;
        BOOL bHideLocalUsers;
        BOOL bUnicode;
+       BOOL bUseMmap;
+       BOOL bHostnameLookups;
+       BOOL bUseSpnego;
 }
 global;
 
@@ -295,10 +288,9 @@ typedef struct
        char *szService;
        char *szPath;
        char *szUsername;
-       char *szGuestaccount;
-       char *szInvalidUsers;
-       char *szValidUsers;
-       char *szAdminUsers;
+       char **szInvalidUsers;
+       char **szValidUsers;
+       char **szAdminUsers;
        char *szCopy;
        char *szInclude;
        char *szPreExec;
@@ -317,8 +309,8 @@ typedef struct
        char *szPrinterDriverLocation;
        char *szDriverFile;
        char *szDontdescend;
-       char *szHostsallow;
-       char *szHostsdeny;
+       char **szHostsallow;
+       char **szHostsdeny;
        char *szMagicScript;
        char *szMagicOutput;
        char *szMangledMap;
@@ -328,9 +320,9 @@ typedef struct
        char *comment;
        char *force_user;
        char *force_group;
-       char *readlist;
-       char *writelist;
-       char *printer_admin;
+       char **readlist;
+       char **writelist;
+       char **printer_admin;
        char *volume;
        char *fstype;
        char *szVfsObjectFile;
@@ -357,8 +349,8 @@ typedef struct
        BOOL bCasePreserve;
        BOOL bShortCasePreserve;
        BOOL bCaseMangle;
-       BOOL status;
        BOOL bHideDotFiles;
+       BOOL bHideUnReadable;
        BOOL bBrowseable;
        BOOL bAvailable;
        BOOL bRead_only;
@@ -373,9 +365,6 @@ typedef struct
        BOOL bLocking;
        BOOL bStrictLocking;
        BOOL bPosixLocking;
-#ifdef WITH_UTMP
-       BOOL bUtmp;
-#endif
        BOOL bShareModes;
        BOOL bOpLocks;
        BOOL bLevel2OpLocks;
@@ -384,6 +373,7 @@ typedef struct
        BOOL bWidelinks;
        BOOL bSymlinks;
        BOOL bSyncAlways;
+       BOOL bStrictAllocate;
        BOOL bStrictSync;
        char magic_char;
        BOOL *copymap;
@@ -397,6 +387,9 @@ typedef struct
        BOOL bBlockingLocks;
        BOOL bInheritPerms;
        BOOL bMSDfsRoot;
+       BOOL bUseClientDriver;
+       BOOL bDefaultDevmode;
+       BOOL bNTAclSupport;
 
        char dummy[3];          /* for alignment */
 }
@@ -410,7 +403,6 @@ static service sDefault = {
        NULL,                   /* szService */
        NULL,                   /* szPath */
        NULL,                   /* szUsername */
-       NULL,                   /* szGuestAccount  - this is set in init_globals() */
        NULL,                   /* szInvalidUsers */
        NULL,                   /* szValidUsers */
        NULL,                   /* szAdminUsers */
@@ -455,12 +447,12 @@ static service sDefault = {
        0,                      /* iWriteCacheSize */
        0744,                   /* iCreate_mask */
        0000,                   /* iCreate_force_mode */
-       -1,                     /* iSecurity_mask */
-       -1,                     /* iSecurity_force_mode */
+       0777,                   /* iSecurity_mask */
+       0,                      /* iSecurity_force_mode */
        0755,                   /* iDir_mask */
        0000,                   /* iDir_force_mode */
-       -1,                     /* iDir_Security_mask */
-       -1,                     /* iDir_Security_force_mode */
+       0777,                   /* iDir_Security_mask */
+       0,                      /* iDir_Security_force_mode */
        0,                      /* iMaxConnections */
        CASE_LOWER,             /* iDefaultCase */
        DEFAULT_PRINTING,       /* iPrinting */
@@ -472,8 +464,8 @@ static service sDefault = {
        True,                   /* case preserve */
        True,                   /* short case preserve */
        False,                  /* case mangle */
-       True,                   /* status */
        True,                   /* bHideDotFiles */
+       False,                  /* bHideUnReadable */
        True,                   /* bBrowseable */
        True,                   /* bAvailable */
        True,                   /* bRead_only */
@@ -486,11 +478,8 @@ static service sDefault = {
        False,                  /* bMap_hidden */
        True,                   /* bMap_archive */
        True,                   /* bLocking */
-       False,                  /* bStrictLocking */
+       True,                   /* bStrictLocking */
        True,                   /* bPosixLocking */
-#ifdef WITH_UTMP
-       False,                  /* bUtmp */
-#endif
        True,                   /* bShareModes */
        True,                   /* bOpLocks */
        True,                   /* bLevel2OpLocks */
@@ -499,6 +488,7 @@ static service sDefault = {
        True,                   /* bWidelinks */
        True,                   /* bSymlinks */
        False,                  /* bSyncAlways */
+       False,                  /* bStrictAllocate */
        False,                  /* bStrictSync */
        '~',                    /* magic char */
        NULL,                   /* copymap */
@@ -512,6 +502,9 @@ static service sDefault = {
        True,                   /* bBlockingLocks */
        False,                  /* bInheritPerms */
        False,                  /* bMSDfsRoot */
+       False,                  /* bUseClientDriver */
+       False,                  /* bDefaultDevmode */
+       True,                   /* bNTAclSupport */
 
        ""                      /* dummy */
 };
@@ -530,16 +523,14 @@ static int default_server_announce;
 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
 
 /* prototypes for the special type handlers */
-static BOOL handle_valid_chars(char *pszParmValue, char **ptr);
 static BOOL handle_include(char *pszParmValue, char **ptr);
 static BOOL handle_copy(char *pszParmValue, char **ptr);
-static BOOL handle_character_set(char *pszParmValue, char **ptr);
-static BOOL handle_coding_system(char *pszParmValue, char **ptr);
-static BOOL handle_client_code_page(char *pszParmValue, char **ptr);
 static BOOL handle_vfs_object(char *pszParmValue, char **ptr);
 static BOOL handle_source_env(char *pszParmValue, char **ptr);
 static BOOL handle_netbios_name(char *pszParmValue, char **ptr);
-static BOOL handle_winbind_id(char *pszParmValue, char **ptr);
+static BOOL handle_winbind_uid(char *pszParmValue, char **ptr);
+static BOOL handle_winbind_gid(char *pszParmValue, char **ptr);
+static BOOL handle_non_unix_account_range(char *pszParmValue, char **ptr);
 static BOOL handle_wins_server_list(char *pszParmValue, char **ptr);
 static BOOL handle_debug_list( char *pszParmValue, char **ptr );
 
@@ -561,6 +552,7 @@ static struct enum_list enum_security[] = {
        {SEC_USER, "USER"},
        {SEC_SERVER, "SERVER"},
        {SEC_DOMAIN, "DOMAIN"},
+       {SEC_ADS, "ADS"},
        {-1, NULL}
 };
 
@@ -583,6 +575,22 @@ static struct enum_list enum_printing[] = {
        {-1, NULL}
 };
 
+#ifdef WITH_LDAP_SAM
+static struct enum_list enum_ldap_ssl[] = {
+       {LDAP_SSL_ON, "Yes"},
+       {LDAP_SSL_ON, "yes"},
+       {LDAP_SSL_ON, "on"},
+       {LDAP_SSL_ON, "On"},
+       {LDAP_SSL_OFF, "no"},
+       {LDAP_SSL_OFF, "No"},
+       {LDAP_SSL_OFF, "off"},
+       {LDAP_SSL_OFF, "Off"},
+       {LDAP_SSL_START_TLS, "start tls"},
+       {LDAP_SSL_START_TLS, "start_tls"},
+       {-1, NULL}
+};
+#endif /* WITH_LDAP_SAM */
+
 /* Types of machine we can announce as. */
 #define ANNOUNCE_AS_NT_SERVER 1
 #define ANNOUNCE_AS_WIN95 2
@@ -656,24 +664,27 @@ static struct enum_list enum_ssl_version[] = {
 /* note that we do not initialise the defaults union - it is not allowed in ANSI C */
 static struct parm_struct parm_table[] = {
        {"Base Options", P_SEP, P_SEPARATOR},
-       
-       {"coding system", P_STRING, P_GLOBAL, &Globals.szCodingSystem, handle_coding_system, NULL, 0},
-       {"client code page", P_INTEGER, P_GLOBAL, &Globals.client_code_page, handle_client_code_page, NULL, 0},
-       {"code page directory", P_STRING, P_GLOBAL, &Globals.szCodePageDir,   NULL,   NULL,  0},
-       {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_SHARE | FLAG_PRINT | FLAG_DOS_STRING},
-       {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_SHARE | FLAG_PRINT | FLAG_DOS_STRING},
-       {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_DOS_STRING},
-       {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkGroup, NULL, NULL, FLAG_BASIC | FLAG_DOS_STRING},
-       {"netbios name", P_UGSTRING, P_GLOBAL, global_myname, handle_netbios_name, NULL, FLAG_BASIC | FLAG_DOS_STRING},
-       {"netbios aliases", P_STRING, P_GLOBAL, &Globals.szNetbiosAliases, NULL, NULL, FLAG_DOS_STRING},
-       {"netbios scope", P_UGSTRING, P_GLOBAL, global_scope, NULL, NULL, FLAG_DOS_STRING},
-       {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC | FLAG_DOS_STRING},
-       {"interfaces", P_STRING, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC},
+
+       {"dos charset", P_STRING, P_GLOBAL, &Globals.dos_charset, NULL, NULL, 0},
+       {"unix charset", P_STRING, P_GLOBAL, &Globals.unix_charset, NULL, NULL, 0},
+       {"display charset", P_STRING, P_GLOBAL, &Globals.display_charset, NULL, NULL, 0},
+       {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
+       {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
+       {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, 0},
+       {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkGroup, NULL, NULL, FLAG_BASIC},
+       {"realm", P_USTRING, P_GLOBAL, &Globals.szRealm, NULL, NULL, FLAG_BASIC},
+       {"ADS server", P_STRING, P_GLOBAL, &Globals.szADSserver, NULL, NULL, FLAG_BASIC},
+       {"netbios name", P_UGSTRING, P_GLOBAL, global_myname, handle_netbios_name, NULL, FLAG_BASIC},
+       {"netbios aliases", P_LIST, P_GLOBAL, &Globals.szNetbiosAliases, NULL, NULL, 0},
+       {"netbios scope", P_UGSTRING, P_GLOBAL, global_scope, NULL, NULL, 0},
+       {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC },
+       {"interfaces", P_LIST, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC},
        {"bind interfaces only", P_BOOL, P_GLOBAL, &Globals.bBindInterfacesOnly, NULL, NULL, 0},
 
        {"Security Options", P_SEP, P_SEPARATOR},
        
        {"security", P_ENUM, P_GLOBAL, &Globals.security, NULL, enum_security, FLAG_BASIC},
+       {"auth methods", P_LIST, P_GLOBAL, &Globals.AuthMethods, NULL, NULL, FLAG_BASIC},
        {"encrypt passwords", P_BOOL, P_GLOBAL, &Globals.bEncryptPasswords, NULL, NULL, FLAG_BASIC},
        {"update encrypted", P_BOOL, P_GLOBAL, &Globals.bUpdateEncrypt, NULL, NULL, FLAG_BASIC},
        {"allow trusted domains", P_BOOL, P_GLOBAL, &Globals.bAllowTrustedDomains, NULL, NULL, 0},
@@ -683,14 +694,19 @@ static struct parm_struct parm_table[] = {
        {"min password length", P_INTEGER, P_GLOBAL, &Globals.min_passwd_length, NULL, NULL, 0},
        {"map to guest", P_ENUM, P_GLOBAL, &Globals.map_to_guest, NULL, enum_map_to_guest, 0},
        {"null passwords", P_BOOL, P_GLOBAL, &Globals.bNullPasswords, NULL, NULL, 0},
+       {"obey pam restrictions", P_BOOL, P_GLOBAL, &Globals.bObeyPamRestrictions, NULL, NULL, 0},
        {"password server", P_STRING, P_GLOBAL, &Globals.szPasswordServer, NULL, NULL, 0},
        {"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, 0},
        {"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, 0},
        {"passdb module path", P_STRING, P_GLOBAL, &Globals.szPassdbModulePath, NULL, NULL, 0},
+       {"passdb backend", P_STRING, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, 0},
+       {"non unix account range", P_STRING, P_GLOBAL, &Globals.szNonUnixAccountRange, handle_non_unix_account_range, NULL, 0},
        {"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, 0},
        {"root dir", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, 0},
        {"root", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, 0},
+       {"guest account", P_STRING, P_GLOBAL, &Globals.szGuestaccount, NULL, NULL, FLAG_BASIC},
        
+       {"pam password change", P_BOOL, P_GLOBAL, &Globals.bPamPasswordChange, NULL, NULL, 0},
        {"passwd program", P_STRING, P_GLOBAL, &Globals.szPasswdProgram, NULL, NULL, 0},
        {"passwd chat", P_STRING, P_GLOBAL, &Globals.szPasswdChat, NULL, NULL, 0},
        {"passwd chat debug", P_BOOL, P_GLOBAL, &Globals.bPasswdChatDebug, NULL, NULL, 0},
@@ -700,19 +716,18 @@ static struct parm_struct parm_table[] = {
        {"unix password sync", P_BOOL, P_GLOBAL, &Globals.bUnixPasswdSync, NULL, NULL, 0},
        {"restrict anonymous", P_BOOL, P_GLOBAL, &Globals.bRestrictAnonymous, NULL, NULL, 0},
        {"lanman auth", P_BOOL, P_GLOBAL, &Globals.bLanmanAuth, NULL, NULL, 0},
-       {"use rhosts", P_BOOL, P_GLOBAL, &Globals.bUseRhosts, NULL, NULL, 0},
+       {"ntlm auth", P_BOOL, P_GLOBAL, &Globals.bNTLMAuth, NULL, NULL, 0},
        
        {"username", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
        {"user", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, 0},
        {"users", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, 0},
        
-       {"guest account", P_STRING, P_LOCAL, &sDefault.szGuestaccount, NULL, NULL, FLAG_BASIC | FLAG_SHARE | FLAG_PRINT | FLAG_GLOBAL},
-       {"invalid users", P_STRING, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
-       {"valid users", P_STRING, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
-       {"admin users", P_STRING, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
-       {"read list", P_STRING, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
-       {"write list", P_STRING, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
-       {"printer admin", P_STRING, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
+       {"invalid users", P_LIST, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
+       {"valid users", P_LIST, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
+       {"admin users", P_LIST, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
+       {"read list", P_LIST, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
+       {"write list", P_LIST, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE},
+       {"printer admin", P_LIST, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_GLOBAL | FLAG_PRINT},
        {"force user", P_STRING, P_LOCAL, &sDefault.force_user, NULL, NULL, FLAG_SHARE},
        {"force group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_SHARE},
        {"group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, 0},
@@ -740,23 +755,26 @@ static struct parm_struct parm_table[] = {
        {"public", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, 0},
        
        {"only user", P_BOOL, P_LOCAL, &sDefault.bOnlyUser, NULL, NULL, FLAG_SHARE},
-       {"hosts allow", P_STRING, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
-       {"allow hosts", P_STRING, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, 0},
-       {"hosts deny", P_STRING, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
-       {"deny hosts", P_STRING, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, 0},
+       {"hosts allow", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
+       {"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, 0},
+       {"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
+       {"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, 0},
 
 #ifdef WITH_SSL
        {"Secure Socket Layer Options", P_SEP, P_SEPARATOR},
        {"ssl", P_BOOL, P_GLOBAL, &Globals.sslEnabled, NULL, NULL, 0},
        
-       {"ssl hosts", P_STRING, P_GLOBAL, &Globals.sslHostsRequire, NULL, NULL, 0},
-       {"ssl hosts resign", P_STRING, P_GLOBAL, &Globals.sslHostsResign, NULL, NULL, 0},
+       {"ssl hosts", P_LIST, P_GLOBAL, &Globals.sslHostsRequire, NULL, NULL, 0},
+       {"ssl hosts resign", P_LIST, P_GLOBAL, &Globals.sslHostsResign, NULL, NULL, 0},
        {"ssl CA certDir", P_STRING, P_GLOBAL, &Globals.sslCaCertDir, NULL, NULL, 0},
        {"ssl CA certFile", P_STRING, P_GLOBAL, &Globals.sslCaCertFile, NULL, NULL, 0},
-       {"ssl server cert", P_STRING, P_GLOBAL, &Globals.sslCert, NULL, NULL, 0},
-       {"ssl server key", P_STRING, P_GLOBAL, &Globals.sslPrivKey, NULL, NULL, 0},
+       {"ssl server cert", P_STRING, P_GLOBAL, &Globals.sslServerCert, NULL, NULL, 0},
+       {"ssl server key", P_STRING, P_GLOBAL, &Globals.sslServerPrivKey, NULL, NULL, 0},
        {"ssl client cert", P_STRING, P_GLOBAL, &Globals.sslClientCert, NULL, NULL, 0},
        {"ssl client key", P_STRING, P_GLOBAL, &Globals.sslClientPrivKey, NULL, NULL, 0},
+       {"ssl egd socket", P_STRING, P_GLOBAL, &Globals.sslEgdSocket, NULL, NULL, 0},
+       {"ssl entropy file", P_STRING, P_GLOBAL, &Globals.sslEntropyFile, NULL, NULL, 0},
+       {"ssl entropy bytes", P_INTEGER, P_GLOBAL, &Globals.sslEntropyBytes, NULL, NULL, 0},
        {"ssl require clientcert", P_BOOL, P_GLOBAL, &Globals.sslReqClientCert, NULL, NULL, 0},
        {"ssl require servercert", P_BOOL, P_GLOBAL, &Globals.sslReqServerCert, NULL, NULL, 0},
        {"ssl ciphers", P_STRING, P_GLOBAL, &Globals.sslCiphers, NULL, NULL, 0},
@@ -765,7 +783,7 @@ static struct parm_struct parm_table[] = {
 #endif /* WITH_SSL */
 
        {"Logging Options", P_SEP, P_SEPARATOR},
-       {"log level",  P_INTEGER, P_GLOBAL, &DEBUGLEVEL_CLASS[DBGC_ALL], handle_debug_list, NULL, 0},
+       {"log level", P_INTEGER, P_GLOBAL, &DEBUGLEVEL_CLASS[DBGC_ALL], handle_debug_list, NULL, 0},
        {"debuglevel", P_INTEGER, P_GLOBAL, &DEBUGLEVEL_CLASS[DBGC_ALL], handle_debug_list, NULL, 0},
        {"syslog", P_INTEGER, P_GLOBAL, &Globals.syslog, NULL, NULL, 0},
        {"syslog only", P_BOOL, P_GLOBAL, &Globals.bSyslogOnly, NULL, NULL, 0},
@@ -778,11 +796,10 @@ static struct parm_struct parm_table[] = {
        {"debug pid", P_BOOL, P_GLOBAL, &Globals.bDebugPid, NULL, NULL, 0},
        {"debug uid", P_BOOL, P_GLOBAL, &Globals.bDebugUid, NULL, NULL, 0},
        
-       {"status", P_BOOL, P_LOCAL, &sDefault.status, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE | FLAG_PRINT},
-
        {"Protocol Options", P_SEP, P_SEPARATOR},
        
        {"protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, 0},
+       {"large readwrite", P_BOOL, P_GLOBAL, &Globals.bLargeReadwrite, NULL, NULL, 0},
        {"max protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, 0},
        {"min protocol", P_ENUM, P_GLOBAL, &Globals.minprotocol, NULL, enum_protocol, 0},
        {"unicode", P_BOOL, P_GLOBAL, &Globals.bUnicode, NULL, NULL, 0},
@@ -790,9 +807,9 @@ static struct parm_struct parm_table[] = {
        {"read raw", P_BOOL, P_GLOBAL, &Globals.bReadRaw, NULL, NULL, 0},
        {"write raw", P_BOOL, P_GLOBAL, &Globals.bWriteRaw, NULL, NULL, 0},
        
-       {"nt smb support", P_BOOL, P_GLOBAL, &Globals.bNTSmbSupport, NULL, NULL, 0},
        {"nt pipe support", P_BOOL, P_GLOBAL, &Globals.bNTPipeSupport, NULL, NULL, 0},
-       {"nt acl support", P_BOOL, P_GLOBAL, &Globals.bNTAclSupport, NULL, NULL, 0},
+       {"nt acl support", P_BOOL,  P_LOCAL, &sDefault.bNTAclSupport, NULL, NULL, FLAG_GLOBAL | FLAG_SHARE },
+       {"nt status support", P_BOOL, P_GLOBAL, &Globals.bNTStatusSupport, NULL, NULL, 0},
        {"announce version", P_STRING, P_GLOBAL, &Globals.szAnnounceVersion, NULL, NULL, 0},
        {"announce as", P_ENUM, P_GLOBAL, &Globals.announce_as, NULL, enum_announce_as, 0},
        {"max mux", P_INTEGER, P_GLOBAL, &Globals.max_mux, NULL, NULL, 0},
@@ -805,6 +822,7 @@ static struct parm_struct parm_table[] = {
        {"max wins ttl", P_INTEGER, P_GLOBAL, &Globals.max_wins_ttl, NULL, NULL, 0},
        {"min wins ttl", P_INTEGER, P_GLOBAL, &Globals.min_wins_ttl, NULL, NULL, 0},
        {"time server", P_BOOL, P_GLOBAL, &Globals.bTimeServer, NULL, NULL, 0},
+       {"use spnego", P_BOOL, P_GLOBAL, &Globals.bUseSpnego, NULL, NULL, 0},
 
        {"Tuning Options", P_SEP, P_SEPARATOR},
        
@@ -816,6 +834,7 @@ static struct parm_struct parm_table[] = {
        {"lpq cache time", P_INTEGER, P_GLOBAL, &Globals.lpqcachetime, NULL, NULL, 0},
        {"max smbd processes", P_INTEGER, P_GLOBAL, &Globals.iMaxSmbdProcesses, NULL, NULL, 0},
        {"max connections", P_INTEGER, P_LOCAL, &sDefault.iMaxConnections, NULL, NULL, FLAG_SHARE},
+       {"paranoid server security", P_BOOL, P_GLOBAL, &Globals.paranoid_server_security, NULL, NULL, 0},
        {"max disk size", P_INTEGER, P_GLOBAL, &Globals.maxdisksize, NULL, NULL, 0},
        {"max open files", P_INTEGER, P_GLOBAL, &Globals.max_open_files, NULL, NULL, 0},
        {"min print space", P_INTEGER, P_LOCAL, &sDefault.iMinPrintSpace, NULL, NULL, FLAG_PRINT},
@@ -823,8 +842,11 @@ static struct parm_struct parm_table[] = {
        
        {"socket options", P_GSTRING, P_GLOBAL, user_socket_options, NULL, NULL, 0},
        {"stat cache size", P_INTEGER, P_GLOBAL, &Globals.stat_cache_size, NULL, NULL, 0},
+       {"strict allocate", P_BOOL, P_LOCAL, &sDefault.bStrictAllocate, NULL, NULL, FLAG_SHARE},
        {"strict sync", P_BOOL, P_LOCAL, &sDefault.bStrictSync, NULL, NULL, FLAG_SHARE},
        {"sync always", P_BOOL, P_LOCAL, &sDefault.bSyncAlways, NULL, NULL, FLAG_SHARE},
+       {"use mmap", P_BOOL, P_GLOBAL, &Globals.bUseMmap, NULL, NULL, 0},
+       {"hostname lookups", P_BOOL, P_GLOBAL, &Globals.bHostnameLookups, NULL, NULL, 0},
        {"write cache size", P_INTEGER, P_LOCAL, &sDefault.iWriteCacheSize, NULL, NULL, FLAG_SHARE},
 
        {"Printing Options", P_SEP, P_SEPARATOR},
@@ -839,6 +861,7 @@ static struct parm_struct parm_table[] = {
        {"postscript", P_BOOL, P_LOCAL, &sDefault.bPostscript, NULL, NULL, FLAG_PRINT},
        {"printing", P_ENUM, P_LOCAL, &sDefault.iPrinting, NULL, enum_printing, FLAG_PRINT | FLAG_GLOBAL},
        {"print command", P_STRING, P_LOCAL, &sDefault.szPrintcommand, NULL, NULL, FLAG_PRINT | FLAG_GLOBAL},
+       {"disable spoolss", P_BOOL, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_PRINT | FLAG_GLOBAL},
        {"lpq command", P_STRING, P_LOCAL, &sDefault.szLpqcommand, NULL, NULL, FLAG_PRINT | FLAG_GLOBAL},
        {"lprm command", P_STRING, P_LOCAL, &sDefault.szLprmcommand, NULL, NULL, FLAG_PRINT | FLAG_GLOBAL},
        {"lppause command", P_STRING, P_LOCAL, &sDefault.szLppausecommand, NULL, NULL, FLAG_PRINT | FLAG_GLOBAL},
@@ -852,8 +875,10 @@ static struct parm_struct parm_table[] = {
        {"show add printer wizard", P_BOOL, P_GLOBAL, &Globals.bMsAddPrinterWizard, NULL, NULL, 0},
     {"os2 driver map", P_STRING, P_GLOBAL, &Globals.szOs2DriverMap, NULL, NULL, 0},
        
-       {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_PRINT|FLAG_DOS_STRING},
-       {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_DOS_STRING},
+       {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_PRINT},
+       {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, 0},
+       {"use client driver", P_BOOL, P_LOCAL, &sDefault.bUseClientDriver, NULL, NULL, FLAG_PRINT},
+       {"default devmode", P_BOOL, P_LOCAL, &sDefault.bDefaultDevmode, NULL, NULL, FLAG_PRINT},
        {"printer driver", P_STRING, P_LOCAL, &sDefault.szPrinterDriver, NULL, NULL, FLAG_PRINT},
        {"printer driver file", P_STRING, P_LOCAL, &sDefault.szDriverFile, NULL, NULL, FLAG_PRINT},
        {"printer driver location", P_STRING, P_LOCAL, &sDefault.szPrinterDriverLocation, NULL, NULL, FLAG_PRINT | FLAG_GLOBAL},
@@ -861,7 +886,6 @@ static struct parm_struct parm_table[] = {
        {"Filename Handling", P_SEP, P_SEPARATOR},
        {"strip dot", P_BOOL, P_GLOBAL, &Globals.bStripDot, NULL, NULL, 0},
        
-       {"character set", P_STRING, P_GLOBAL, &Globals.szCharacterSet, handle_character_set, NULL, 0},
        {"mangled stack", P_INTEGER, P_GLOBAL, &Globals.mangled_stack, NULL, NULL, 0},
        {"default case", P_ENUM, P_LOCAL, &sDefault.iDefaultCase, NULL, enum_case, FLAG_SHARE},
        {"case sensitive", P_BOOL, P_LOCAL, &sDefault.bCaseSensitive, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
@@ -871,10 +895,11 @@ static struct parm_struct parm_table[] = {
        {"mangle case", P_BOOL, P_LOCAL, &sDefault.bCaseMangle, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"mangling char", P_CHAR, P_LOCAL, &sDefault.magic_char, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"hide dot files", P_BOOL, P_LOCAL, &sDefault.bHideDotFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
+       {"hide unreadable", P_BOOL, P_LOCAL, &sDefault.bHideUnReadable, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"delete veto files", P_BOOL, P_LOCAL, &sDefault.bDeleteVetoFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
-       {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL | FLAG_DOS_STRING},
-       {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL | FLAG_DOS_STRING},
-       {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL | FLAG_DOS_STRING},
+       {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL },
+       {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL },
+       {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL },
        {"map system", P_BOOL, P_LOCAL, &sDefault.bMap_system, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"map hidden", P_BOOL, P_LOCAL, &sDefault.bMap_hidden, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"map archive", P_BOOL, P_LOCAL, &sDefault.bMap_archive, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
@@ -884,31 +909,24 @@ static struct parm_struct parm_table[] = {
 
        {"Domain Options", P_SEP, P_SEPARATOR},
        
-       {"domain groups", P_STRING, P_GLOBAL, &Globals.szDomainGroups, NULL, NULL, 0},
-       {"domain admin group", P_STRING, P_GLOBAL, &Globals.szDomainAdminGroup, NULL, NULL, 0},
-       {"domain guest group", P_STRING, P_GLOBAL, &Globals.szDomainGuestGroup, NULL, NULL, 0},
-       {"domain admin users", P_STRING, P_GLOBAL, &Globals.szDomainAdminUsers, NULL, NULL, 0},
-       {"domain guest users", P_STRING, P_GLOBAL, &Globals.szDomainGuestUsers, NULL, NULL, 0},
-#ifdef USING_GROUPNAME_MAP
-       
-       {"groupname map", P_STRING, P_GLOBAL, &Globals.szGroupnameMap, NULL, NULL, 0},
-#endif /* USING_GROUPNAME_MAP */
-       
        {"machine password timeout", P_INTEGER, P_GLOBAL, &Globals.machine_password_timeout, NULL, NULL, 0},
 
        {"Logon Options", P_SEP, P_SEPARATOR},
-       
+
        {"add user script", P_STRING, P_GLOBAL, &Globals.szAddUserScript, NULL, NULL, 0},
        {"delete user script", P_STRING, P_GLOBAL, &Globals.szDelUserScript, NULL, NULL, 0},
        {"add group script", P_STRING, P_GLOBAL, &Globals.szAddGroupScript, NULL, NULL, 0},
        {"delete group script", P_STRING, P_GLOBAL, &Globals.szDelGroupScript, NULL, NULL, 0},
        {"add user to group script", P_STRING, P_GLOBAL, &Globals.szAddUserToGroupScript, NULL, NULL, 0},
        {"delete user from group script", P_STRING, P_GLOBAL, &Globals.szDelUserToGroupScript, NULL, NULL, 0},
+       {"add machine script", P_STRING, P_GLOBAL, &Globals.szAddMachineScript, NULL, NULL, 0},
+       {"shutdown script", P_STRING, P_GLOBAL, &Globals.szShutdownScript, NULL, NULL, 0},
+       {"abort shutdown script", P_STRING, P_GLOBAL, &Globals.szAbortShutdownScript, NULL, NULL, 0},
 
-       {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, FLAG_DOS_STRING},
-       {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, FLAG_DOS_STRING},
+       {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, 0},
+       {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, 0},
        {"logon drive", P_STRING, P_GLOBAL, &Globals.szLogonDrive, NULL, NULL, 0},
-       {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, FLAG_DOS_STRING},
+       {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, 0},
        {"domain logons", P_BOOL, P_GLOBAL, &Globals.bDomainLogons, NULL, NULL, 0},
 
        {"Browse Options", P_SEP, P_SEPARATOR},
@@ -932,6 +950,7 @@ static struct parm_struct parm_table[] = {
        {"wins server", P_STRING, P_GLOBAL, &Globals.szWINSserver, handle_wins_server_list, NULL, FLAG_BASIC},
        {"wins support", P_BOOL, P_GLOBAL, &Globals.bWINSsupport, NULL, NULL, FLAG_BASIC},
        {"wins hook", P_STRING, P_GLOBAL, &Globals.szWINSHook, NULL, NULL, 0},
+       {"wins partners", P_STRING, P_GLOBAL, &Globals.szWINSPartners, NULL, NULL, 0},
 
        {"Locking Options", P_SEP, P_SEPARATOR},
        
@@ -939,9 +958,6 @@ static struct parm_struct parm_table[] = {
        {"fake oplocks", P_BOOL, P_LOCAL, &sDefault.bFakeOplocks, NULL, NULL, FLAG_SHARE},
        {"kernel oplocks", P_BOOL, P_GLOBAL, &Globals.bKernelOplocks, NULL, NULL, FLAG_GLOBAL},
        {"locking", P_BOOL, P_LOCAL, &sDefault.bLocking, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
-#ifdef WITH_UTMP
-       {"utmp", P_BOOL, P_LOCAL, &sDefault.bUtmp, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
-#endif
        
        {"oplocks", P_BOOL, P_LOCAL, &sDefault.bOpLocks, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"level2 oplocks", P_BOOL, P_LOCAL, &sDefault.bLevel2OpLocks, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
@@ -951,49 +967,42 @@ static struct parm_struct parm_table[] = {
        {"strict locking", P_BOOL, P_LOCAL, &sDefault.bStrictLocking, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
        {"share modes", P_BOOL, P_LOCAL, &sDefault.bShareModes, NULL, NULL, FLAG_SHARE | FLAG_GLOBAL},
 
-#ifdef WITH_LDAP
+#ifdef WITH_LDAP_SAM
        {"Ldap Options", P_SEP, P_SEPARATOR},
        
        {"ldap server", P_STRING, P_GLOBAL, &Globals.szLdapServer, NULL, NULL, 0},
        {"ldap port", P_INTEGER, P_GLOBAL, &Globals.ldap_port, NULL, NULL, 0}, 
        {"ldap suffix", P_STRING, P_GLOBAL, &Globals.szLdapSuffix, NULL, NULL, 0},
        {"ldap filter", P_STRING, P_GLOBAL, &Globals.szLdapFilter, NULL, NULL, 0},
-       {"ldap root", P_STRING, P_GLOBAL, &Globals.szLdapRoot, NULL, NULL, 0},
-       {"ldap root passwd", P_STRING, P_GLOBAL, &Globals.szLdapRootPassword, NULL, NULL, 0},
-#endif /* WITH_LDAP */
+       {"ldap admin dn", P_STRING, P_GLOBAL, &Globals.szLdapAdminDn, NULL, NULL, 0},
+       {"ldap ssl", P_ENUM, P_GLOBAL, &Globals.ldap_ssl, NULL, enum_ldap_ssl, 0},
+#endif /* WITH_LDAP_SAM */
 
        {"Miscellaneous Options", P_SEP, P_SEPARATOR},
        {"add share command", P_STRING, P_GLOBAL, &Globals.szAddShareCommand, NULL, NULL, 0},
        {"change share command", P_STRING, P_GLOBAL, &Globals.szChangeShareCommand, NULL, NULL, 0},
        {"delete share command", P_STRING, P_GLOBAL, &Globals.szDeleteShareCommand, NULL, NULL, 0},
-       {"smbrun", P_STRING, P_GLOBAL, &Globals.szSmbrun, NULL, NULL, 0},
        
        {"config file", P_STRING, P_GLOBAL, &Globals.szConfigFile, NULL, NULL, FLAG_HIDE},
-       {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_DOS_STRING},
-       {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_DOS_STRING},
+       {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, 0},
+       {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, 0},
        {"lock dir", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, 0}, 
        {"lock directory", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, 0},
 #ifdef WITH_UTMP
-       {"utmp dir", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, 0},
        {"utmp directory", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, 0},
-       {"wtmp dir", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, 0},
        {"wtmp directory", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, 0},
-       {"utmp hostname", P_STRING, P_GLOBAL, &Globals.szUtmpHostname, NULL, NULL, 0},
-       {"utmp consolidate", P_BOOL, P_GLOBAL, &Globals.bUtmpConsolidate, NULL, NULL, 0},
-#endif /* WITH_UTMP */
+       {"utmp",          P_BOOL, P_GLOBAL, &Globals.bUtmp, NULL, NULL, 0},
+#endif
        
-       {"default service", P_STRING, P_GLOBAL,
-        &Globals.szDefaultService, NULL, NULL, 0},
+       {"default service", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, 0},
        {"default", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, 0},
        {"message command", P_STRING, P_GLOBAL, &Globals.szMsgCommand, NULL, NULL, 0},
        {"dfree command", P_STRING, P_GLOBAL, &Globals.szDfree, NULL, NULL, 0},
-       {"valid chars", P_STRING, P_GLOBAL, &Globals.szValidChars, handle_valid_chars, NULL, 0},
        {"remote announce", P_STRING, P_GLOBAL, &Globals.szRemoteAnnounce, NULL, NULL, 0},
        {"remote browse sync", P_STRING, P_GLOBAL, &Globals.szRemoteBrowseSync, NULL, NULL, 0},
        {"socket address", P_STRING, P_GLOBAL, &Globals.szSocketAddress, NULL, NULL, 0},
        {"homedir map", P_STRING, P_GLOBAL, &Globals.szNISHomeMapName, NULL, NULL, 0},
        {"time offset", P_INTEGER, P_GLOBAL, &extra_time_offset, NULL, NULL, 0},
-       {"unix realname", P_BOOL, P_GLOBAL, &Globals.bUnixRealname, NULL, NULL, 0},
        {"NIS homedir", P_BOOL, P_GLOBAL, &Globals.bNISHomeMap, NULL, NULL, 0},
        {"-valid", P_BOOL, P_LOCAL, &sDefault.valid, NULL, NULL, FLAG_HIDE},
        
@@ -1008,7 +1017,7 @@ static struct parm_struct parm_table[] = {
        {"root preexec close", P_BOOL, P_LOCAL, &sDefault.bRootpreexecClose, NULL, NULL, FLAG_SHARE},
        {"root postexec", P_STRING, P_LOCAL, &sDefault.szRootPostExec, NULL, NULL, FLAG_SHARE | FLAG_PRINT},
        {"available", P_BOOL, P_LOCAL, &sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_SHARE | FLAG_PRINT},
-       {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_SHARE},
+       {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_SHARE },
        {"fstype", P_STRING, P_LOCAL, &sDefault.fstype, NULL, NULL, FLAG_SHARE},
        {"set directory", P_BOOLREV, P_LOCAL, &sDefault.bNo_set_dir, NULL, NULL, FLAG_SHARE},
        {"source environment", P_STRING, P_GLOBAL, &Globals.szSourceEnv, handle_source_env, NULL, 0},
@@ -1029,21 +1038,24 @@ static struct parm_struct parm_table[] = {
 
        {"VFS options", P_SEP, P_SEPARATOR},
        
-       {"vfs object", P_STRING, P_LOCAL, &sDefault.szVfsObjectFile, handle_vfs_object, NULL, 0},
-       {"vfs options", P_STRING, P_LOCAL, &sDefault.szVfsOptions, NULL, NULL, 0},
+       {"vfs object", P_STRING, P_LOCAL, &sDefault.szVfsObjectFile, handle_vfs_object, NULL, FLAG_SHARE},
+       {"vfs options", P_STRING, P_LOCAL, &sDefault.szVfsOptions, NULL, NULL, FLAG_SHARE},
 
        
        {"msdfs root", P_BOOL, P_LOCAL, &sDefault.bMSDfsRoot, NULL, NULL, FLAG_SHARE},
-       {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, FLAG_GLOBAL},
+       {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, 0},
 
        {"Winbind options", P_SEP, P_SEPARATOR},
 
-       {"winbind uid", P_STRING, P_GLOBAL, &Globals.szWinbindUID, handle_winbind_id, NULL, 0},
-       {"winbind gid", P_STRING, P_GLOBAL, &Globals.szWinbindGID, handle_winbind_id, NULL, 0},
+       {"winbind uid", P_STRING, P_GLOBAL, &Globals.szWinbindUID, handle_winbind_uid, NULL, 0},
+       {"winbind gid", P_STRING, P_GLOBAL, &Globals.szWinbindGID, handle_winbind_gid, NULL, 0},
        {"template homedir", P_STRING, P_GLOBAL, &Globals.szTemplateHomedir, NULL, NULL, 0},
        {"template shell", P_STRING, P_GLOBAL, &Globals.szTemplateShell, NULL, NULL, 0},
        {"winbind separator", P_STRING, P_GLOBAL, &Globals.szWinbindSeparator, NULL, NULL, 0},
        {"winbind cache time", P_INTEGER, P_GLOBAL, &Globals.winbind_cache_time, NULL, NULL, 0},
+       {"winbind enum users", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumUsers, NULL, NULL, 0},
+       {"winbind enum groups", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumGroups, NULL, NULL, 0},
+       {"winbind use default domain", P_BOOL, P_GLOBAL, &Globals.bWinbindUseDefaultDomain, NULL, NULL, 0},
 
        {NULL, P_BOOL, P_NONE, NULL, NULL, NULL, 0}
 };
@@ -1055,7 +1067,7 @@ Initialise the sDefault parameter structure for the printer values.
 static void init_printer_values(void)
 {
        string_set(&sDefault.szPrinterDriver, "");
-       string_set(&sDefault.szDriverFile, DRIVERFILE);
+       string_set(&sDefault.szDriverFile, dyn_DRIVERFILE);
 
        /* choose defaults depending on the type of printing */
        switch (sDefault.iPrinting)
@@ -1087,7 +1099,7 @@ static void init_printer_values(void)
                        break;
 
                case PRINT_CUPS:
-#ifdef HAVE_LIBCUPS
+#ifdef HAVE_CUPS
                        string_set(&sDefault.szLpqcommand, "");
                        string_set(&sDefault.szLprmcommand, "");
                        string_set(&sDefault.szPrintcommand, "");
@@ -1113,7 +1125,7 @@ static void init_printer_values(void)
                        string_set(&sDefault.szQueueresumecommand,
                                   "/usr/bin/enable %p");
                        string_set(&Globals.szPrintcapname, "lpstat");
-#endif /* HAVE_LIBCUPS */
+#endif /* HAVE_CUPS */
                        break;
 
                case PRINT_SYSV:
@@ -1186,7 +1198,6 @@ static void init_globals(void)
                            parm_table[i].ptr)
                                string_set(parm_table[i].ptr, "");
 
-               string_set(&sDefault.szGuestaccount, GUEST_ACCOUNT);
                string_set(&sDefault.fstype, FSTYPE_STRING);
 
                init_printer_values();
@@ -1197,25 +1208,21 @@ static void init_globals(void)
 
        DEBUG(3, ("Initialising global parameters\n"));
 
-       string_set(&Globals.szSMBPasswdFile, SMB_PASSWD_FILE);
-       string_set(&Globals.szPrivateDir, PRIVATE_DIR);
+       string_set(&Globals.szSMBPasswdFile, dyn_SMB_PASSWD_FILE);
+       string_set(&Globals.szPrivateDir, dyn_PRIVATE_DIR);
        string_set(&Globals.szPassdbModulePath, "");
-       
+       string_set(&Globals.szPassdbBackend, "smbpasswd");
+
+       string_set(&Globals.szGuestaccount, GUEST_ACCOUNT);
+
        /*
         * Allow the default PASSWD_CHAT to be overridden in local.h.
         */
        string_set(&Globals.szPasswdChat, DEFAULT_PASSWD_CHAT);
        string_set(&Globals.szWorkGroup, WORKGROUP);
-       string_set(&Globals.szPasswdProgram, PASSWD_PROGRAM);
+       string_set(&Globals.szPasswdProgram, "");
        string_set(&Globals.szPrintcapname, PRINTCAP_NAME);
-       string_set(&Globals.szLockDir, LOCKDIR);
-#ifdef WITH_UTMP
-       string_set(&Globals.szUtmpDir, "");
-       string_set(&Globals.szWtmpDir, "");
-       string_set(&Globals.szUtmpHostname, "%m");
-       Globals.bUtmpConsolidate = False;
-#endif /* WITH_UTMP */
-       string_set(&Globals.szSmbrun, SMBRUN);
+       string_set(&Globals.szLockDir, dyn_LOCKDIR);
        string_set(&Globals.szSocketAddress, "0.0.0.0");
        pstrcpy(s, "Samba ");
        pstrcat(s, VERSION);
@@ -1231,33 +1238,36 @@ static void init_globals(void)
        string_set(&Globals.szLogonHome, "\\\\%N\\%U");
        string_set(&Globals.szLogonPath, "\\\\%N\\%U\\profile");
 
-       string_set(&Globals.szNameResolveOrder, "lmhosts host wins bcast");
-       string_set(&Globals.szCodePageDir, CODEPAGEDIR);
+       string_set(&Globals.szNameResolveOrder, "lmhosts wins host bcast");
+       string_set(&Globals.szPasswordServer, "*");
 
        Globals.bLoadPrinters = True;
-       Globals.bUseRhosts = False;
        Globals.max_packet = 65535;
        Globals.mangled_stack = 50;
        Globals.max_xmit = 65535;
        Globals.max_mux = 50;   /* This is *needed* for profile support. */
        Globals.lpqcachetime = 10;
+       Globals.bDisableSpoolss = False;
        Globals.iMaxSmbdProcesses = 0;/* no limit specified */
        Globals.iTotalPrintJobs = 0;  /* no limit specified */
        Globals.pwordlevel = 0;
        Globals.unamelevel = 0;
        Globals.deadtime = 0;
+       Globals.bLargeReadwrite = True;
        Globals.max_log_size = 5000;
        Globals.max_open_files = MAX_OPEN_FILES;
        Globals.maxprotocol = PROTOCOL_NT1;
        Globals.minprotocol = PROTOCOL_CORE;
        Globals.security = SEC_USER;
-       Globals.bEncryptPasswords = False;
+       Globals.paranoid_server_security = True;
+       Globals.bEncryptPasswords = True;
        Globals.bUpdateEncrypt = False;
        Globals.bReadRaw = True;
        Globals.bWriteRaw = True;
        Globals.bReadPrediction = False;
        Globals.bReadbmpx = False;
        Globals.bNullPasswords = False;
+       Globals.bObeyPamRestrictions = False;
        Globals.bStripDot = False;
        Globals.syslog = 1;
        Globals.bSyslogOnly = False;
@@ -1275,7 +1285,6 @@ static void init_globals(void)
        Globals.lm_interval = 60;
        Globals.stat_cache_size = 50;   /* Number of stat translations we'll keep */
        Globals.announce_as = ANNOUNCE_AS_NT_SERVER;
-       Globals.bUnixRealname = True;
 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
        Globals.bNISHomeMap = False;
 #ifdef WITH_NISPLUS_HOME
@@ -1284,40 +1293,55 @@ static void init_globals(void)
        string_set(&Globals.szNISHomeMapName, "auto.home");
 #endif
 #endif
-       Globals.client_code_page = DEFAULT_CLIENT_CODE_PAGE;
        Globals.bTimeServer = False;
        Globals.bBindInterfacesOnly = False;
        Globals.bUnixPasswdSync = False;
+       Globals.bPamPasswordChange = False;
        Globals.bPasswdChatDebug = False;
        Globals.bUnicode = True;        /* Do unicode on the wire by default */
-       Globals.bNTSmbSupport = True;   /* Do NT SMB's by default. */
        Globals.bNTPipeSupport = True;  /* Do NT pipes by default. */
-       Globals.bNTAclSupport = True;   /* Use NT ACLs by default. */
+       Globals.bNTStatusSupport = True; /* Use NT status by default. */
        Globals.bStatCache = True;      /* use stat cache by default */
        Globals.bRestrictAnonymous = False;
        Globals.bLanmanAuth = True;     /* Do use the LanMan hash if it is available */
+       Globals.bNTLMAuth = True;       /* Do use NTLMv1 if it is available (otherwise NTLMv2) */
        Globals.map_to_guest = 0;       /* By Default, "Never" */
        Globals.min_passwd_length = MINPASSWDLENGTH;    /* By Default, 5. */
        Globals.oplock_break_wait_time = 0;     /* By Default, 0 msecs. */
        Globals.enhanced_browsing = True; 
+#ifdef MMAP_BLACKLIST
+       Globals.bUseMmap = False;
+#else
+       Globals.bUseMmap = True;
+#endif
+
+       /* hostname lookups can be very expensive and are broken on
+          a large number of sites (tridge) */
+       Globals.bHostnameLookups = False;
 
-#ifdef WITH_LDAP
-       /* default values for ldap */
+#ifdef WITH_LDAP_SAM
        string_set(&Globals.szLdapServer, "localhost");
-       Globals.ldap_port = 389;
-#endif /* WITH_LDAP */
+       string_set(&Globals.szLdapSuffix, "");
+       string_set(&Globals.szLdapFilter, "(&(uid=%u)(objectclass=sambaAccount))");
+       string_set(&Globals.szLdapAdminDn, "");
+       Globals.ldap_port = 636;
+       Globals.ldap_ssl = LDAP_SSL_ON;
+#endif /* WITH_LDAP_SAM */
 
 #ifdef WITH_SSL
        Globals.sslVersion = SMB_SSL_V23;
-       string_set(&Globals.sslHostsRequire, "");
-       string_set(&Globals.sslHostsResign, "");
+       /* Globals.sslHostsRequire = NULL;
+       Globals.sslHostsResign = NULL; */
        string_set(&Globals.sslCaCertDir, "");
        string_set(&Globals.sslCaCertFile, "");
-       string_set(&Globals.sslCert, "");
-       string_set(&Globals.sslPrivKey, "");
+       string_set(&Globals.sslServerCert, "");
+       string_set(&Globals.sslServerPrivKey, "");
        string_set(&Globals.sslClientCert, "");
        string_set(&Globals.sslClientPrivKey, "");
        string_set(&Globals.sslCiphers, "");
+       string_set(&Globals.sslEgdSocket, "");
+       string_set(&Globals.sslEntropyFile, "");
+       Globals.sslEntropyBytes = 256;
        Globals.sslEnabled = False;
        Globals.sslReqClientCert = False;
        Globals.sslReqServerCert = False;
@@ -1356,14 +1380,14 @@ static void init_globals(void)
        string_set(&Globals.szTemplateShell, "/bin/false");
        string_set(&Globals.szTemplateHomedir, "/home/%D/%U");
        string_set(&Globals.szWinbindSeparator, "\\");
+
        Globals.winbind_cache_time = 15;
+       Globals.bWinbindEnumUsers = True;
+       Globals.bWinbindEnumGroups = True;
+       Globals.bWinbindUseDefaultDomain = False;
 
-       /*
-        * This must be done last as it checks the value in 
-        * client_code_page.
-        */
+       Globals.bUseSpnego = True;
 
-       interpret_coding_system(KANJI);
 }
 
 static TALLOC_CTX *lp_talloc;
@@ -1389,8 +1413,17 @@ static char *lp_string(const char *s)
        size_t len = s ? strlen(s) : 0;
        char *ret;
 
+       /* The follow debug is useful for tracking down memory problems
+          especially if you have an inner loop that is calling a lp_*()
+          function that returns a string.  Perhaps this debug should be
+          present all the time? */
+
+#if 0
+       DEBUG(10, ("lp_string(%s)\n", s));
+#endif
+
        if (!lp_talloc)
-               lp_talloc = talloc_init();
+               lp_talloc = talloc_init_named("lp_talloc");
 
        ret = (char *)talloc(lp_talloc, len + 100);     /* leave room for substitution */
 
@@ -1404,7 +1437,7 @@ static char *lp_string(const char *s)
 
        trim_string(ret, "\"", "\"");
 
-       standard_sub_basic(ret);
+       standard_sub_basic(current_user_info.smb_name,ret);
        return (ret);
 }
 
@@ -1416,6 +1449,8 @@ static char *lp_string(const char *s)
 
 #define FN_GLOBAL_STRING(fn_name,ptr) \
  char *fn_name(void) {return(lp_string(*(char **)(ptr) ? *(char **)(ptr) : ""));}
+#define FN_GLOBAL_LIST(fn_name,ptr) \
+ char **fn_name(void) {return(*(char ***)(ptr));}
 #define FN_GLOBAL_BOOL(fn_name,ptr) \
  BOOL fn_name(void) {return(*(BOOL *)(ptr));}
 #define FN_GLOBAL_CHAR(fn_name,ptr) \
@@ -1424,20 +1459,25 @@ static char *lp_string(const char *s)
  int fn_name(void) {return(*(int *)(ptr));}
 
 #define FN_LOCAL_STRING(fn_name,val) \
- char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i)&&pSERVICE(i)->val)?pSERVICE(i)->val : sDefault.val));}
+ char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
+#define FN_LOCAL_LIST(fn_name,val) \
+ char **fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
 #define FN_LOCAL_BOOL(fn_name,val) \
- BOOL fn_name(int i) {return(LP_SNUM_OK(i)? pSERVICE(i)->val : sDefault.val);}
+ BOOL fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
 #define FN_LOCAL_CHAR(fn_name,val) \
- char fn_name(int i) {return(LP_SNUM_OK(i)? pSERVICE(i)->val : sDefault.val);}
+ char fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
 #define FN_LOCAL_INTEGER(fn_name,val) \
- int fn_name(int i) {return(LP_SNUM_OK(i)? pSERVICE(i)->val : sDefault.val);}
+ int fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
 
+FN_GLOBAL_STRING(lp_dos_charset, &Globals.dos_charset)
+FN_GLOBAL_STRING(lp_unix_charset, &Globals.unix_charset)
+FN_GLOBAL_STRING(lp_display_charset, &Globals.display_charset)
 FN_GLOBAL_STRING(lp_logfile, &Globals.szLogFile)
-FN_GLOBAL_STRING(lp_smbrun, &Globals.szSmbrun)
 FN_GLOBAL_STRING(lp_configfile, &Globals.szConfigFile)
 FN_GLOBAL_STRING(lp_smb_passwd_file, &Globals.szSMBPasswdFile)
 FN_GLOBAL_STRING(lp_private_dir, &Globals.szPrivateDir)
 FN_GLOBAL_STRING(lp_passdb_module_path, &Globals.szPassdbModulePath)
+FN_GLOBAL_STRING(lp_passdb_backend, &Globals.szPassdbBackend)
 FN_GLOBAL_STRING(lp_serverstring, &Globals.szServerString)
 FN_GLOBAL_STRING(lp_printcapname, &Globals.szPrintcapname)
 FN_GLOBAL_STRING(lp_enumports_cmd, &Globals.szEnumPortsCommand)
@@ -1448,9 +1488,8 @@ FN_GLOBAL_STRING(lp_lockdir, &Globals.szLockDir)
 #ifdef WITH_UTMP
 FN_GLOBAL_STRING(lp_utmpdir, &Globals.szUtmpDir)
 FN_GLOBAL_STRING(lp_wtmpdir, &Globals.szWtmpDir)
-FN_GLOBAL_STRING(lp_utmp_hostname, &Globals.szUtmpHostname)
-FN_GLOBAL_BOOL(lp_utmp_consolidate, &Globals.bUtmpConsolidate)
-#endif /* WITH_UTMP */
+FN_GLOBAL_BOOL(lp_utmp, &Globals.bUtmp)
+#endif
 FN_GLOBAL_STRING(lp_rootdir, &Globals.szRootdir)
 FN_GLOBAL_STRING(lp_source_environment, &Globals.szSourceEnv)
 FN_GLOBAL_STRING(lp_defaultservice, &Globals.szDefaultService)
@@ -1463,65 +1502,70 @@ FN_GLOBAL_STRING(lp_passwd_chat, &Globals.szPasswdChat)
 FN_GLOBAL_STRING(lp_passwordserver, &Globals.szPasswordServer)
 FN_GLOBAL_STRING(lp_name_resolve_order, &Globals.szNameResolveOrder)
 FN_GLOBAL_STRING(lp_workgroup, &Globals.szWorkGroup)
+FN_GLOBAL_STRING(lp_realm, &Globals.szRealm)
+FN_GLOBAL_STRING(lp_ads_server, &Globals.szADSserver)
 FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
-#ifdef USING_GROUPNAME_MAP
-FN_GLOBAL_STRING(lp_groupname_map, &Globals.szGroupnameMap)
-#endif /* USING_GROUPNAME_MAP */
 FN_GLOBAL_STRING(lp_logon_script, &Globals.szLogonScript)
 FN_GLOBAL_STRING(lp_logon_path, &Globals.szLogonPath)
 FN_GLOBAL_STRING(lp_logon_drive, &Globals.szLogonDrive)
 FN_GLOBAL_STRING(lp_logon_home, &Globals.szLogonHome)
 FN_GLOBAL_STRING(lp_remote_announce, &Globals.szRemoteAnnounce)
 FN_GLOBAL_STRING(lp_remote_browse_sync, &Globals.szRemoteBrowseSync)
-FN_GLOBAL_STRING(lp_wins_server, &Globals.szWINSserver)
-FN_GLOBAL_STRING(lp_interfaces, &Globals.szInterfaces)
+FN_GLOBAL_STRING(lp_wins_server_list, &Globals.szWINSserver)
+FN_GLOBAL_LIST(lp_interfaces, &Globals.szInterfaces)
 FN_GLOBAL_STRING(lp_socket_address, &Globals.szSocketAddress)
 FN_GLOBAL_STRING(lp_nis_home_map_name, &Globals.szNISHomeMapName)
 static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
-FN_GLOBAL_STRING(lp_netbios_aliases, &Globals.szNetbiosAliases)
+FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
 FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
 FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
 FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
 
+FN_GLOBAL_STRING(lp_guestaccount, &Globals.szGuestaccount)
 FN_GLOBAL_STRING(lp_addgroup_script, &Globals.szAddGroupScript)
 FN_GLOBAL_STRING(lp_delgroup_script, &Globals.szDelGroupScript)
 FN_GLOBAL_STRING(lp_addusertogroup_script, &Globals.szAddUserToGroupScript)
 FN_GLOBAL_STRING(lp_deluserfromgroup_script, &Globals.szDelUserToGroupScript)
 
+FN_GLOBAL_STRING(lp_addmachine_script, &Globals.szAddMachineScript)
+
+FN_GLOBAL_STRING(lp_shutdown_script, &Globals.szShutdownScript)
+FN_GLOBAL_STRING(lp_abort_shutdown_script, &Globals.szAbortShutdownScript)
+
 FN_GLOBAL_STRING(lp_wins_hook, &Globals.szWINSHook)
-FN_GLOBAL_STRING(lp_domain_groups, &Globals.szDomainGroups)
-FN_GLOBAL_STRING(lp_domain_admin_group, &Globals.szDomainAdminGroup)
-FN_GLOBAL_STRING(lp_domain_guest_group, &Globals.szDomainGuestGroup)
-FN_GLOBAL_STRING(lp_domain_admin_users, &Globals.szDomainAdminUsers)
-FN_GLOBAL_STRING(lp_domain_guest_users, &Globals.szDomainGuestUsers)
-FN_GLOBAL_STRING(lp_winbind_uid, &Globals.szWinbindUID)
-FN_GLOBAL_STRING(lp_winbind_gid, &Globals.szWinbindGID)
+FN_GLOBAL_STRING(lp_wins_partners, &Globals.szWINSPartners)
 FN_GLOBAL_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
 FN_GLOBAL_STRING(lp_template_shell, &Globals.szTemplateShell)
 FN_GLOBAL_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
-FN_GLOBAL_STRING(lp_codepagedir,&Globals.szCodePageDir)
-#ifdef WITH_LDAP
+FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
+FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
+FN_GLOBAL_BOOL(lp_winbind_use_default_domain, &Globals.bWinbindUseDefaultDomain)
+#ifdef WITH_LDAP_SAM
 FN_GLOBAL_STRING(lp_ldap_server, &Globals.szLdapServer)
 FN_GLOBAL_STRING(lp_ldap_suffix, &Globals.szLdapSuffix)
 FN_GLOBAL_STRING(lp_ldap_filter, &Globals.szLdapFilter)
-FN_GLOBAL_STRING(lp_ldap_root, &Globals.szLdapRoot)
-FN_GLOBAL_STRING(lp_ldap_rootpasswd, &Globals.szLdapRootPassword)
-#endif /* WITH_LDAP */
+FN_GLOBAL_STRING(lp_ldap_admin_dn, &Globals.szLdapAdminDn)
+FN_GLOBAL_INTEGER(lp_ldap_port, &Globals.ldap_port)
+FN_GLOBAL_INTEGER(lp_ldap_ssl, &Globals.ldap_ssl)
+#endif /* WITH_LDAP_SAM */
 FN_GLOBAL_STRING(lp_add_share_cmd, &Globals.szAddShareCommand)
 FN_GLOBAL_STRING(lp_change_share_cmd, &Globals.szChangeShareCommand)
 FN_GLOBAL_STRING(lp_delete_share_cmd, &Globals.szDeleteShareCommand)
 
 #ifdef WITH_SSL
 FN_GLOBAL_INTEGER(lp_ssl_version, &Globals.sslVersion)
-FN_GLOBAL_STRING(lp_ssl_hosts, &Globals.sslHostsRequire)
-FN_GLOBAL_STRING(lp_ssl_hosts_resign, &Globals.sslHostsResign)
+FN_GLOBAL_LIST(lp_ssl_hosts, &Globals.sslHostsRequire)
+FN_GLOBAL_LIST(lp_ssl_hosts_resign, &Globals.sslHostsResign)
 FN_GLOBAL_STRING(lp_ssl_cacertdir, &Globals.sslCaCertDir)
 FN_GLOBAL_STRING(lp_ssl_cacertfile, &Globals.sslCaCertFile)
-FN_GLOBAL_STRING(lp_ssl_cert, &Globals.sslCert)
-FN_GLOBAL_STRING(lp_ssl_privkey, &Globals.sslPrivKey)
+FN_GLOBAL_STRING(lp_ssl_server_cert, &Globals.sslServerCert)
+FN_GLOBAL_STRING(lp_ssl_server_privkey, &Globals.sslServerPrivKey)
 FN_GLOBAL_STRING(lp_ssl_client_cert, &Globals.sslClientCert)
 FN_GLOBAL_STRING(lp_ssl_client_privkey, &Globals.sslClientPrivKey)
 FN_GLOBAL_STRING(lp_ssl_ciphers, &Globals.sslCiphers)
+FN_GLOBAL_STRING(lp_ssl_egdsocket, &Globals.sslEgdSocket)
+FN_GLOBAL_STRING(lp_ssl_entropyfile, &Globals.sslEntropyFile)
+FN_GLOBAL_INTEGER(lp_ssl_entropybytes, &Globals.sslEntropyBytes)
 FN_GLOBAL_BOOL(lp_ssl_enabled, &Globals.sslEnabled)
 FN_GLOBAL_BOOL(lp_ssl_reqClientCert, &Globals.sslReqClientCert)
 FN_GLOBAL_BOOL(lp_ssl_reqServerCert, &Globals.sslReqServerCert)
@@ -1536,12 +1580,13 @@ FN_GLOBAL_BOOL(lp_wins_proxy, &Globals.bWINSproxy)
 FN_GLOBAL_BOOL(lp_local_master, &Globals.bLocalMaster)
 FN_GLOBAL_BOOL(lp_domain_logons, &Globals.bDomainLogons)
 FN_GLOBAL_BOOL(lp_load_printers, &Globals.bLoadPrinters)
-FN_GLOBAL_BOOL(lp_use_rhosts, &Globals.bUseRhosts)
 FN_GLOBAL_BOOL(lp_readprediction, &Globals.bReadPrediction)
 FN_GLOBAL_BOOL(lp_readbmpx, &Globals.bReadbmpx)
 FN_GLOBAL_BOOL(lp_readraw, &Globals.bReadRaw)
+FN_GLOBAL_BOOL(lp_large_readwrite, &Globals.bLargeReadwrite)
 FN_GLOBAL_BOOL(lp_writeraw, &Globals.bWriteRaw)
 FN_GLOBAL_BOOL(lp_null_passwords, &Globals.bNullPasswords)
+FN_GLOBAL_BOOL(lp_obey_pam_restrictions, &Globals.bObeyPamRestrictions)
 FN_GLOBAL_BOOL(lp_strip_dot, &Globals.bStripDot)
 FN_GLOBAL_BOOL(lp_encrypted_passwords, &Globals.bEncryptPasswords)
 FN_GLOBAL_BOOL(lp_update_encrypted, &Globals.bUpdateEncrypt)
@@ -1551,23 +1596,26 @@ FN_GLOBAL_BOOL(lp_debug_hires_timestamp, &Globals.bDebugHiresTimestamp)
 FN_GLOBAL_BOOL(lp_debug_pid, &Globals.bDebugPid)
 FN_GLOBAL_BOOL(lp_debug_uid, &Globals.bDebugUid)
 FN_GLOBAL_BOOL(lp_browse_list, &Globals.bBrowseList)
-FN_GLOBAL_BOOL(lp_unix_realname, &Globals.bUnixRealname)
 FN_GLOBAL_BOOL(lp_nis_home_map, &Globals.bNISHomeMap)
 static FN_GLOBAL_BOOL(lp_time_server, &Globals.bTimeServer)
 FN_GLOBAL_BOOL(lp_bind_interfaces_only, &Globals.bBindInterfacesOnly)
+FN_GLOBAL_BOOL(lp_pam_password_change, &Globals.bPamPasswordChange)
 FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync)
 FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug)
-FN_GLOBAL_BOOL(lp_nt_smb_support, &Globals.bNTSmbSupport)
 FN_GLOBAL_BOOL(lp_unicode, &Globals.bUnicode)
 FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport)
-FN_GLOBAL_BOOL(lp_nt_acl_support, &Globals.bNTAclSupport)
+FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport)
 FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache)
 FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains)
 FN_GLOBAL_BOOL(lp_restrict_anonymous, &Globals.bRestrictAnonymous)
 FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth)
+FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth)
 FN_GLOBAL_BOOL(lp_host_msdfs, &Globals.bHostMSDfs)
 FN_GLOBAL_BOOL(lp_kernel_oplocks, &Globals.bKernelOplocks)
 FN_GLOBAL_BOOL(lp_enhanced_browsing, &Globals.enhanced_browsing)
+FN_GLOBAL_BOOL(lp_use_mmap, &Globals.bUseMmap)
+FN_GLOBAL_BOOL(lp_use_spnego, &Globals.bUseSpnego)
+FN_GLOBAL_BOOL(lp_hostname_lookups, &Globals.bHostnameLookups)
 FN_GLOBAL_INTEGER(lp_os_level, &Globals.os_level)
 FN_GLOBAL_INTEGER(lp_max_ttl, &Globals.max_ttl)
 FN_GLOBAL_INTEGER(lp_max_wins_ttl, &Globals.max_wins_ttl)
@@ -1583,12 +1631,14 @@ FN_GLOBAL_INTEGER(lp_deadtime, &Globals.deadtime)
 FN_GLOBAL_INTEGER(lp_maxprotocol, &Globals.maxprotocol)
 FN_GLOBAL_INTEGER(lp_minprotocol, &Globals.minprotocol)
 FN_GLOBAL_INTEGER(lp_security, &Globals.security)
+FN_GLOBAL_LIST(lp_auth_methods, &Globals.AuthMethods)
+FN_GLOBAL_BOOL(lp_paranoid_server_security, &Globals.paranoid_server_security)
 FN_GLOBAL_INTEGER(lp_maxdisksize, &Globals.maxdisksize)
 FN_GLOBAL_INTEGER(lp_lpqcachetime, &Globals.lpqcachetime)
 FN_GLOBAL_INTEGER(lp_max_smbd_processes, &Globals.iMaxSmbdProcesses)
+FN_GLOBAL_INTEGER(lp_disable_spoolss, &Globals.bDisableSpoolss)
 FN_GLOBAL_INTEGER(lp_totalprintjobs, &Globals.iTotalPrintJobs)
 FN_GLOBAL_INTEGER(lp_syslog, &Globals.syslog)
-FN_GLOBAL_INTEGER(lp_client_code_page, &Globals.client_code_page)
 static FN_GLOBAL_INTEGER(lp_announce_as, &Globals.announce_as)
 FN_GLOBAL_INTEGER(lp_lm_announce, &Globals.lm_announce)
 FN_GLOBAL_INTEGER(lp_lm_interval, &Globals.lm_interval)
@@ -1598,9 +1648,6 @@ FN_GLOBAL_INTEGER(lp_stat_cache_size, &Globals.stat_cache_size)
 FN_GLOBAL_INTEGER(lp_map_to_guest, &Globals.map_to_guest)
 FN_GLOBAL_INTEGER(lp_min_passwd_length, &Globals.min_passwd_length)
 FN_GLOBAL_INTEGER(lp_oplock_break_wait_time, &Globals.oplock_break_wait_time)
-#ifdef WITH_LDAP
-FN_GLOBAL_INTEGER(lp_ldap_port, &Globals.ldap_port)
-#endif                         /* WITH_LDAP */
 FN_LOCAL_STRING(lp_preexec, szPreExec)
 FN_LOCAL_STRING(lp_postexec, szPostExec)
 FN_LOCAL_STRING(lp_rootpreexec, szRootPreExec)
@@ -1609,10 +1656,9 @@ FN_LOCAL_STRING(lp_servicename, szService)
 FN_LOCAL_STRING(lp_pathname, szPath)
 FN_LOCAL_STRING(lp_dontdescend, szDontdescend)
 FN_LOCAL_STRING(lp_username, szUsername)
-FN_LOCAL_STRING(lp_guestaccount, szGuestaccount)
-FN_LOCAL_STRING(lp_invalid_users, szInvalidUsers)
-FN_LOCAL_STRING(lp_valid_users, szValidUsers)
-FN_LOCAL_STRING(lp_admin_users, szAdminUsers)
+FN_LOCAL_LIST(lp_invalid_users, szInvalidUsers)
+FN_LOCAL_LIST(lp_valid_users, szValidUsers)
+FN_LOCAL_LIST(lp_admin_users, szAdminUsers)
 FN_LOCAL_STRING(lp_printcommand, szPrintcommand)
 FN_LOCAL_STRING(lp_lpqcommand, szLpqcommand)
 FN_LOCAL_STRING(lp_lprmcommand, szLprmcommand)
@@ -1623,16 +1669,16 @@ FN_LOCAL_STRING(lp_queueresumecommand, szQueueresumecommand)
 static FN_LOCAL_STRING(_lp_printername, szPrintername)
 FN_LOCAL_STRING(lp_driverfile, szDriverFile)
 FN_LOCAL_STRING(lp_printerdriver, szPrinterDriver)
-FN_LOCAL_STRING(lp_hostsallow, szHostsallow)
-FN_LOCAL_STRING(lp_hostsdeny, szHostsdeny)
+FN_LOCAL_LIST(lp_hostsallow, szHostsallow)
+FN_LOCAL_LIST(lp_hostsdeny, szHostsdeny)
 FN_LOCAL_STRING(lp_magicscript, szMagicScript)
 FN_LOCAL_STRING(lp_magicoutput, szMagicOutput)
 FN_LOCAL_STRING(lp_comment, comment)
 FN_LOCAL_STRING(lp_force_user, force_user)
 FN_LOCAL_STRING(lp_force_group, force_group)
-FN_LOCAL_STRING(lp_readlist, readlist)
-FN_LOCAL_STRING(lp_writelist, writelist)
-FN_LOCAL_STRING(lp_printer_admin, printer_admin)
+FN_LOCAL_LIST(lp_readlist, readlist)
+FN_LOCAL_LIST(lp_writelist, writelist)
+FN_LOCAL_LIST(lp_printer_admin, printer_admin)
 FN_LOCAL_STRING(lp_fstype, fstype)
 FN_LOCAL_STRING(lp_vfsobj, szVfsObjectFile)
 static FN_LOCAL_STRING(lp_volume, volume)
@@ -1649,8 +1695,8 @@ FN_LOCAL_BOOL(lp_casesensitive, bCaseSensitive)
 FN_LOCAL_BOOL(lp_preservecase, bCasePreserve)
 FN_LOCAL_BOOL(lp_shortpreservecase, bShortCasePreserve)
 FN_LOCAL_BOOL(lp_casemangle, bCaseMangle)
-FN_LOCAL_BOOL(lp_status, status)
 FN_LOCAL_BOOL(lp_hide_dot_files, bHideDotFiles)
+FN_LOCAL_BOOL(lp_hideunreadable, bHideUnReadable)
 FN_LOCAL_BOOL(lp_browseable, bBrowseable)
 FN_LOCAL_BOOL(lp_readonly, bRead_only)
 FN_LOCAL_BOOL(lp_no_set_dir, bNo_set_dir)
@@ -1663,9 +1709,6 @@ FN_LOCAL_BOOL(lp_map_archive, bMap_archive)
 FN_LOCAL_BOOL(lp_locking, bLocking)
 FN_LOCAL_BOOL(lp_strict_locking, bStrictLocking)
 FN_LOCAL_BOOL(lp_posix_locking, bPosixLocking)
-#ifdef WITH_UTMP
-FN_LOCAL_BOOL(lp_utmp, bUtmp)
-#endif
 FN_LOCAL_BOOL(lp_share_modes, bShareModes)
 FN_LOCAL_BOOL(lp_oplocks, bOpLocks)
 FN_LOCAL_BOOL(lp_level2_oplocks, bLevel2OpLocks)
@@ -1674,6 +1717,7 @@ FN_LOCAL_BOOL(lp_manglednames, bMangledNames)
 FN_LOCAL_BOOL(lp_widelinks, bWidelinks)
 FN_LOCAL_BOOL(lp_symlinks, bSymlinks)
 FN_LOCAL_BOOL(lp_syncalways, bSyncAlways)
+FN_LOCAL_BOOL(lp_strict_allocate, bStrictAllocate)
 FN_LOCAL_BOOL(lp_strict_sync, bStrictSync)
 FN_LOCAL_BOOL(lp_map_system, bMap_system)
 FN_LOCAL_BOOL(lp_delete_readonly, bDeleteReadonly)
@@ -1685,14 +1729,17 @@ FN_LOCAL_BOOL(lp_dos_filetime_resolution, bDosFiletimeResolution)
 FN_LOCAL_BOOL(lp_fake_dir_create_times, bFakeDirCreateTimes)
 FN_LOCAL_BOOL(lp_blocking_locks, bBlockingLocks)
 FN_LOCAL_BOOL(lp_inherit_perms, bInheritPerms)
+FN_LOCAL_BOOL(lp_use_client_driver, bUseClientDriver)
+FN_LOCAL_BOOL(lp_default_devmode, bDefaultDevmode)
+FN_LOCAL_BOOL(lp_nt_acl_support, bNTAclSupport)
 FN_LOCAL_INTEGER(lp_create_mask, iCreate_mask)
 FN_LOCAL_INTEGER(lp_force_create_mode, iCreate_force_mode)
-FN_LOCAL_INTEGER(_lp_security_mask, iSecurity_mask)
-FN_LOCAL_INTEGER(_lp_force_security_mode, iSecurity_force_mode)
+FN_LOCAL_INTEGER(lp_security_mask, iSecurity_mask)
+FN_LOCAL_INTEGER(lp_force_security_mode, iSecurity_force_mode)
 FN_LOCAL_INTEGER(lp_dir_mask, iDir_mask)
 FN_LOCAL_INTEGER(lp_force_dir_mode, iDir_force_mode)
-FN_LOCAL_INTEGER(_lp_dir_security_mask, iDir_Security_mask)
-FN_LOCAL_INTEGER(_lp_force_dir_security_mode, iDir_Security_force_mode)
+FN_LOCAL_INTEGER(lp_dir_security_mask, iDir_Security_mask)
+FN_LOCAL_INTEGER(lp_force_dir_security_mode, iDir_Security_force_mode)
 FN_LOCAL_INTEGER(lp_max_connections, iMaxConnections)
 FN_LOCAL_INTEGER(lp_defaultcase, iDefaultCase)
 FN_LOCAL_INTEGER(lp_minprintspace, iMinPrintSpace)
@@ -1708,10 +1755,10 @@ FN_GLOBAL_BOOL(lp_hide_local_users, &Globals.bHideLocalUsers)
 
 static int map_parameter(char *pszParmName);
 static BOOL set_boolean(BOOL *pb, char *pszParmValue);
-static int getservicebyname(char *pszServiceName,
-                        service * pserviceDest);
+static int getservicebyname(const char *pszServiceName,
+                           service * pserviceDest);
 static void copy_service(service * pserviceDest,
-                     service * pserviceSource, BOOL *pcopymapDest);
+                        service * pserviceSource, BOOL *pcopymapDest);
 static BOOL service_ok(int iService);
 static BOOL do_parameter(char *pszParmName, char *pszParmValue);
 static BOOL do_section(char *pszSectionName);
@@ -1743,26 +1790,32 @@ static void free_service(service * pservice)
                       pservice->szService));
 
        string_free(&pservice->szService);
-       if (pservice->copymap)
-       {
-               free(pservice->copymap);
-               pservice->copymap = NULL;
-       }
+       SAFE_FREE(pservice->copymap);
 
        for (i = 0; parm_table[i].label; i++)
+       {
                if ((parm_table[i].type == P_STRING ||
                     parm_table[i].type == P_USTRING) &&
                    parm_table[i].class == P_LOCAL)
                        string_free((char **)
                                    (((char *)pservice) +
                                     PTR_DIFF(parm_table[i].ptr, &sDefault)));
+               else if (parm_table[i].type == P_LIST &&
+                        parm_table[i].class == P_LOCAL)
+                            lp_list_free((char ***)
+                                           (((char *)pservice) +
+                                            PTR_DIFF(parm_table[i].ptr, &sDefault)));
+       }
+                               
+
+       ZERO_STRUCTP(pservice);
 }
 
 /***************************************************************************
 add a new service to the services array initialising it with the given 
-service. name must be in DOS codepage.
+service. 
 ***************************************************************************/
-static int add_a_service(service * pservice, char *name)
+static int add_a_service(const service * pservice, const char *name)
 {
        int i;
        service tservice;
@@ -1780,62 +1833,79 @@ static int add_a_service(service * pservice, char *name)
 
        /* find an invalid one */
        for (i = 0; i < iNumServices; i++)
-               if (!pSERVICE(i)->valid)
+               if (!ServicePtrs[i]->valid)
                        break;
 
        /* if not, then create one */
        if (i == iNumServices)
        {
-               ServicePtrs =
-                       (service **) Realloc(ServicePtrs,
-                                            sizeof(service *) *
-                                            num_to_alloc);
-               if (ServicePtrs)
-                       pSERVICE(iNumServices) =
+               service **tsp;
+               
+               tsp = (service **) Realloc(ServicePtrs,
+                                          sizeof(service *) *
+                                          num_to_alloc);
+                                          
+               if (!tsp) {
+                       DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
+                       return (-1);
+               }
+               else {
+                       ServicePtrs = tsp;
+                       ServicePtrs[iNumServices] =
                                (service *) malloc(sizeof(service));
-
-               if (!ServicePtrs || !pSERVICE(iNumServices))
+               }
+               if (!ServicePtrs[iNumServices]) {
+                       DEBUG(0,("add_a_service: out of memory!\n"));
                        return (-1);
+               }
 
                iNumServices++;
        }
        else
-               free_service(pSERVICE(i));
+               free_service(ServicePtrs[i]);
 
-       pSERVICE(i)->valid = True;
+       ServicePtrs[i]->valid = True;
 
-       init_service(pSERVICE(i));
-       copy_service(pSERVICE(i), &tservice, NULL);
+       init_service(ServicePtrs[i]);
+       copy_service(ServicePtrs[i], &tservice, NULL);
        if (name)
        {
-               string_set(&iSERVICE(i).szService, name);
+               string_set(&ServicePtrs[i]->szService, name);
        }
        return (i);
 }
 
 /***************************************************************************
 add a new home service, with the specified home directory, defaults coming 
-from service ifrom. homename must be in DOS codepage.
+from service ifrom.
 ***************************************************************************/
-BOOL lp_add_home(char *pszHomename, int iDefaultService, char *pszHomedir)
+BOOL lp_add_home(const char *pszHomename, int iDefaultService, const char *pszHomedir)
 {
-       int i = add_a_service(pSERVICE(iDefaultService), pszHomename);
+       int i;
+       SMB_STRUCT_STAT buf;
+
+       /* if the user's home directory doesn't exist, then don't
+          add it to the list of available shares */
+       if (sys_stat(pszHomedir, &buf))
+               return False;
+
+       i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
 
        if (i < 0)
                return (False);
 
-       if (!(*(iSERVICE(i).szPath))
-           || strequal(iSERVICE(i).szPath, lp_pathname(-1)))
-               string_set(&iSERVICE(i).szPath, pszHomedir);
-       if (!(*(iSERVICE(i).comment)))
+       if (!(*(ServicePtrs[i]->szPath))
+           || strequal(ServicePtrs[i]->szPath, lp_pathname(-1)))
+               string_set(&ServicePtrs[i]->szPath, pszHomedir);
+       if (!(*(ServicePtrs[i]->comment)))
        {
                pstring comment;
                slprintf(comment, sizeof(comment) - 1,
                         "Home directory of %s", pszHomename);
-               string_set(&iSERVICE(i).comment, comment);
+               string_set(&ServicePtrs[i]->comment, comment);
        }
-       iSERVICE(i).bAvailable = sDefault.bAvailable;
-       iSERVICE(i).bBrowseable = sDefault.bBrowseable;
+       ServicePtrs[i]->bAvailable = sDefault.bAvailable;
+       ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
 
        DEBUG(3,
              ("adding home directory %s at %s\n", pszHomename, pszHomedir));
@@ -1844,11 +1914,11 @@ BOOL lp_add_home(char *pszHomename, int iDefaultService, char *pszHomedir)
 }
 
 /***************************************************************************
-add a new service, based on an old one. pszService must be in DOS codepage.
+add a new service, based on an old one.
 ***************************************************************************/
-int lp_add_service(char *pszService, int iDefaultService)
+int lp_add_service(const char *pszService, int iDefaultService)
 {
-       return (add_a_service(pSERVICE(iDefaultService), pszService));
+       return (add_a_service(ServicePtrs[iDefaultService], pszService));
 }
 
 
@@ -1866,18 +1936,17 @@ static BOOL lp_add_ipc(char *ipc_name, BOOL guest_ok)
        slprintf(comment, sizeof(comment) - 1,
                 "IPC Service (%s)", Globals.szServerString);
 
-       string_set(&iSERVICE(i).szPath, tmpdir());
-       string_set(&iSERVICE(i).szUsername, "");
-       string_set(&iSERVICE(i).comment, comment);
-       string_set(&iSERVICE(i).fstype, "IPC");
-       iSERVICE(i).status = False;
-       iSERVICE(i).iMaxConnections = 0;
-       iSERVICE(i).bAvailable = True;
-       iSERVICE(i).bRead_only = True;
-       iSERVICE(i).bGuest_only = False;
-       iSERVICE(i).bGuest_ok = guest_ok;
-       iSERVICE(i).bPrint_ok = False;
-       iSERVICE(i).bBrowseable = sDefault.bBrowseable;
+       string_set(&ServicePtrs[i]->szPath, tmpdir());
+       string_set(&ServicePtrs[i]->szUsername, "");
+       string_set(&ServicePtrs[i]->comment, comment);
+       string_set(&ServicePtrs[i]->fstype, "IPC");
+       ServicePtrs[i]->iMaxConnections = 0;
+       ServicePtrs[i]->bAvailable = True;
+       ServicePtrs[i]->bRead_only = True;
+       ServicePtrs[i]->bGuest_only = False;
+       ServicePtrs[i]->bGuest_ok = guest_ok;
+       ServicePtrs[i]->bPrint_ok = False;
+       ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
 
        DEBUG(3, ("adding IPC service\n"));
 
@@ -1887,12 +1956,11 @@ static BOOL lp_add_ipc(char *ipc_name, BOOL guest_ok)
 
 /***************************************************************************
 add a new printer service, with defaults coming from service iFrom.
-printername must be in DOS codepage.
 ***************************************************************************/
 BOOL lp_add_printer(char *pszPrintername, int iDefaultService)
 {
        char *comment = "From Printcap";
-       int i = add_a_service(pSERVICE(iDefaultService), pszPrintername);
+       int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
 
        if (i < 0)
                return (False);
@@ -1903,17 +1971,17 @@ BOOL lp_add_printer(char *pszPrintername, int iDefaultService)
        /* entry (if/when the 'available' keyword is implemented!).    */
 
        /* the printer name is set to the service name. */
-       string_set(&iSERVICE(i).szPrintername, pszPrintername);
-       string_set(&iSERVICE(i).comment, comment);
-       iSERVICE(i).bBrowseable = sDefault.bBrowseable;
+       string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
+       string_set(&ServicePtrs[i]->comment, comment);
+       ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
        /* Printers cannot be read_only. */
-       iSERVICE(i).bRead_only = False;
+       ServicePtrs[i]->bRead_only = False;
        /* No share modes on printer services. */
-       iSERVICE(i).bShareModes = False;
+       ServicePtrs[i]->bShareModes = False;
        /* No oplocks on printer services. */
-       iSERVICE(i).bOpLocks = False;
+       ServicePtrs[i]->bOpLocks = False;
        /* Printer services must be printable. */
-       iSERVICE(i).bPrint_ok = True;
+       ServicePtrs[i]->bPrint_ok = True;
 
        DEBUG(3, ("adding printer service %s\n", pszPrintername));
 
@@ -1972,18 +2040,16 @@ static BOOL set_boolean(BOOL *pb, char *pszParmValue)
 /***************************************************************************
 Find a service by name. Otherwise works like get_service.
 ***************************************************************************/
-static int getservicebyname(char *pszServiceName, service * pserviceDest)
+static int getservicebyname(const char *pszServiceName, service * pserviceDest)
 {
        int iService;
 
        for (iService = iNumServices - 1; iService >= 0; iService--)
                if (VALID(iService) &&
-                   strwicmp(iSERVICE(iService).szService,
-                            pszServiceName) == 0)
+                   strwicmp(ServicePtrs[iService]->szService, pszServiceName) == 0)
                {
                        if (pserviceDest != NULL)
-                               copy_service(pserviceDest, pSERVICE(iService),
-                                            NULL);
+                               copy_service(pserviceDest, ServicePtrs[iService], NULL);
                        break;
                }
 
@@ -2042,6 +2108,9 @@ static void copy_service(service * pserviceDest,
                                                   *(char **)src_ptr);
                                        strupper(*(char **)dest_ptr);
                                        break;
+                               case P_LIST:
+                                       lp_list_copy((char ***)dest_ptr, *(char ***)src_ptr);
+                                       break;
                                default:
                                        break;
                        }
@@ -2066,7 +2135,7 @@ static BOOL service_ok(int iService)
        BOOL bRetval;
 
        bRetval = True;
-       if (iSERVICE(iService).szService[0] == '\0')
+       if (ServicePtrs[iService]->szService[0] == '\0')
        {
                DEBUG(0,
                      ("The following message indicates an internal error:\n"));
@@ -2076,31 +2145,31 @@ static BOOL service_ok(int iService)
 
        /* The [printers] entry MUST be printable. I'm all for flexibility, but */
        /* I can't see why you'd want a non-printable printer service...        */
-       if (strwicmp(iSERVICE(iService).szService, PRINTERS_NAME) == 0) {
-               if (!iSERVICE(iService).bPrint_ok) {
+       if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
+               if (!ServicePtrs[iService]->bPrint_ok) {
                        DEBUG(0,
                              ("WARNING: [%s] service MUST be printable!\n",
-                              iSERVICE(iService).szService));
-                       iSERVICE(iService).bPrint_ok = True;
+                              ServicePtrs[iService]->szService));
+                       ServicePtrs[iService]->bPrint_ok = True;
                }
                /* [printers] service must also be non-browsable. */
-               if (iSERVICE(iService).bBrowseable)
-                       iSERVICE(iService).bBrowseable = False;
+               if (ServicePtrs[iService]->bBrowseable)
+                       ServicePtrs[iService]->bBrowseable = False;
        }
 
-       if (iSERVICE(iService).szPath[0] == '\0' &&
-           strwicmp(iSERVICE(iService).szService, HOMES_NAME) != 0)
+       if (ServicePtrs[iService]->szPath[0] == '\0' &&
+           strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0)
        {
                DEBUG(0,
                      ("No path in service %s - using %s\n",
-                      iSERVICE(iService).szService, tmpdir()));
-               string_set(&iSERVICE(iService).szPath, tmpdir());
+                      ServicePtrs[iService]->szService, tmpdir()));
+               string_set(&ServicePtrs[iService]->szPath, tmpdir());
        }
 
        /* If a service is flagged unavailable, log the fact at level 0. */
-       if (!iSERVICE(iService).bAvailable)
+       if (!ServicePtrs[iService]->bAvailable)
                DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
-                         iSERVICE(iService).szService));
+                         ServicePtrs[iService]->szService));
 
        return (bRetval);
 }
@@ -2109,6 +2178,7 @@ static struct file_lists
 {
        struct file_lists *next;
        char *name;
+       char *subfname;
        time_t modtime;
 }
  *file_lists = NULL;
@@ -2117,7 +2187,7 @@ static struct file_lists
 keep a linked list of all config files so we know when one has changed 
 it's date and needs to be reloaded
 ********************************************************************/
-static void add_to_file_list(char *fname)
+static void add_to_file_list(const char *fname, const char *subfname)
 {
        struct file_lists *f = file_lists;
 
@@ -2137,18 +2207,19 @@ static void add_to_file_list(char *fname)
                f->name = strdup(fname);
                if (!f->name)
                {
-                       free(f);
+                       SAFE_FREE(f);
+                       return;
+               }
+               f->subfname = strdup(subfname);
+               if (!f->subfname)
+               {
+                       SAFE_FREE(f);
                        return;
                }
                file_lists = f;
        }
 
-       {
-               pstring n2;
-               pstrcpy(n2, fname);
-               standard_sub_basic(n2);
-               f->modtime = file_modtime(n2);
-       }
+       f->modtime = file_modtime(subfname);
 
 }
 
@@ -2166,19 +2237,21 @@ BOOL lp_file_list_changed(void)
                time_t mod_time;
 
                pstrcpy(n2, f->name);
-               standard_sub_basic(n2);
+               standard_sub_basic(current_user_info.smb_name, n2);
 
                DEBUGADD(6, ("file %s -> %s  last mod_time: %s\n",
                             f->name, n2, ctime(&f->modtime)));
 
                mod_time = file_modtime(n2);
 
-               if (f->modtime != mod_time)
+               if ((f->modtime != mod_time) || (f->subfname == NULL) || (strcmp(n2, f->subfname) != 0))
                {
                        DEBUGADD(6,
                                 ("file %s modified: %s\n", n2,
                                  ctime(&mod_time)));
                        f->modtime = mod_time;
+                       SAFE_FREE(f->subfname);
+                       f->subfname = strdup(n2);
                        return (True);
                }
                f = f->next;
@@ -2198,14 +2271,9 @@ static BOOL handle_netbios_name(char *pszParmValue, char **ptr)
 
        pstrcpy(netbios_name, pszParmValue);
 
-       standard_sub_basic(netbios_name);
+       standard_sub_basic(current_user_info.smb_name, netbios_name);
        strupper(netbios_name);
 
-       /*
-        * Convert from UNIX to DOS string - the UNIX to DOS converter
-        * isn't called on the special handlers.
-        */
-       unix_to_dos(netbios_name, True);
        pstrcpy(global_myname, netbios_name);
 
        DEBUG(4,
@@ -2246,7 +2314,7 @@ static BOOL source_env(char **lines)
                strncpy(varval, line, len);
                varval[len] = '\0';
 
-               p = strchr(line, (int)'=');
+               p = strchr_m(line, (int)'=');
                if (p == NULL)
                {
                        DEBUG(4, ("source_env: missing '=': %s\n", line));
@@ -2285,7 +2353,7 @@ static BOOL handle_source_env(char *pszParmValue, char **ptr)
 
        pstrcpy(fname, pszParmValue);
 
-       standard_sub_basic(fname);
+       standard_sub_basic(current_user_info.smb_name, fname);
 
        string_set(ptr, pszParmValue);
 
@@ -2297,11 +2365,11 @@ static BOOL handle_source_env(char *pszParmValue, char **ptr)
 
        if (*p == '|')
        {
-               lines = file_lines_pload(p + 1, NULL, True);
+               lines = file_lines_pload(p + 1, NULL);
        }
        else
        {
-               lines = file_lines_load(fname, NULL, True);
+               lines = file_lines_load(fname, NULL);
        }
 
        if (!lines)
@@ -2333,67 +2401,6 @@ static BOOL handle_vfs_object(char *pszParmValue, char **ptr)
        return True;
 }
 
-/***************************************************************************
-  handle the interpretation of the coding system parameter
-  *************************************************************************/
-static BOOL handle_coding_system(char *pszParmValue, char **ptr)
-{
-       string_set(ptr, pszParmValue);
-       interpret_coding_system(pszParmValue);
-       return (True);
-}
-
-/***************************************************************************
- Handle the interpretation of the character set system parameter.
-***************************************************************************/
-
-static char *saved_character_set = NULL;
-
-static BOOL handle_character_set(char *pszParmValue, char **ptr)
-{
-       /* A dependency here is that the parameter client code page should be
-          set before this is called.
-        */
-       string_set(ptr, pszParmValue);
-       strupper(*ptr);
-       saved_character_set = strdup(*ptr);
-       interpret_character_set(*ptr, lp_client_code_page());
-       return (True);
-}
-
-/***************************************************************************
- Handle the interpretation of the client code page parameter.
- We handle this separately so that we can reset the character set
- parameter in case this came before 'client code page' in the smb.conf.
-***************************************************************************/
-
-static BOOL handle_client_code_page(char *pszParmValue, char **ptr)
-{
-       Globals.client_code_page = atoi(pszParmValue);
-       if (saved_character_set != NULL)
-               interpret_character_set(saved_character_set,
-                                       lp_client_code_page());
-       codepage_initialise(lp_client_code_page());
-       return (True);
-}
-
-/***************************************************************************
-handle the valid chars lines
-***************************************************************************/
-
-static BOOL handle_valid_chars(char *pszParmValue, char **ptr)
-{
-       string_set(ptr, pszParmValue);
-
-       /* A dependency here is that the parameter client code page must be
-          set before this is called - as calling codepage_initialise()
-          would overwrite the valid char lines.
-        */
-       codepage_initialise(lp_client_code_page());
-
-       add_char_string(pszParmValue);
-       return (True);
-}
 
 /***************************************************************************
 handle the include operation
@@ -2404,9 +2411,9 @@ static BOOL handle_include(char *pszParmValue, char **ptr)
        pstring fname;
        pstrcpy(fname, pszParmValue);
 
-       add_to_file_list(fname);
+       standard_sub_basic(current_user_info.smb_name, fname);
 
-       standard_sub_basic(fname);
+       add_to_file_list(pszParmValue, fname);
 
        string_set(ptr, fname);
 
@@ -2446,9 +2453,9 @@ static BOOL handle_copy(char *pszParmValue, char **ptr)
                }
                else
                {
-                       copy_service(pSERVICE(iServiceIndex),
+                       copy_service(ServicePtrs[iServiceIndex],
                                     &serviceTemp,
-                                    iSERVICE(iServiceIndex).copymap);
+                                    ServicePtrs[iServiceIndex]->copymap);
                        bRetval = True;
                }
        }
@@ -2464,7 +2471,7 @@ static BOOL handle_copy(char *pszParmValue, char **ptr)
 }
 
 /***************************************************************************
- Handle winbind uid and gid allocation parameters.  The format of these
+ Handle winbind/non unix account uid and gid allocation parameters.  The format of these
  parameters is:
 
  [global]
@@ -2477,21 +2484,106 @@ static BOOL handle_copy(char *pszParmValue, char **ptr)
 
 ***************************************************************************/
 
-/* Do some simple checks on "winbind [ug]id" parameter value */
+/* Some lp_ routines to return winbind [ug]id information */
+
+static uid_t winbind_uid_low, winbind_uid_high;
+static gid_t winbind_gid_low, winbind_gid_high;
+static uint32 non_unix_account_low, non_unix_account_high;
 
-static BOOL handle_winbind_id(char *pszParmValue, char **ptr)
+BOOL lp_winbind_uid(uid_t *low, uid_t *high)
 {
-       int low, high;
+        if (winbind_uid_low == 0 || winbind_uid_high == 0)
+                return False;
 
-       if (sscanf(pszParmValue, "%d-%d", &low, &high) != 2)
-       {
+        if (low)
+                *low = winbind_uid_low;
+
+        if (high)
+                *high = winbind_uid_high;
+
+        return True;
+}
+
+BOOL lp_winbind_gid(gid_t *low, gid_t *high)
+{
+        if (winbind_gid_low == 0 || winbind_gid_high == 0)
+                return False;
+
+        if (low)
+                *low = winbind_gid_low;
+
+        if (high)
+                *high = winbind_gid_high;
+
+        return True;
+}
+
+BOOL lp_non_unix_account_range(uint32 *low, uint32 *high)
+{
+        if (non_unix_account_low == 0 || non_unix_account_high == 0)
+                return False;
+
+        if (low)
+                *low = non_unix_account_low;
+
+        if (high)
+                *high = non_unix_account_high;
+
+        return True;
+}
+
+/* Do some simple checks on "winbind [ug]id" parameter values */
+
+static BOOL handle_winbind_uid(char *pszParmValue, char **ptr)
+{
+       uint32 low, high;
+
+       if (sscanf(pszParmValue, "%u-%u", &low, &high) != 2 || high < low)
                return False;
-       }
 
        /* Parse OK */
 
        string_set(ptr, pszParmValue);
 
+        winbind_uid_low = low;
+        winbind_uid_high = high;
+
+       return True;
+}
+
+static BOOL handle_winbind_gid(char *pszParmValue, char **ptr)
+{
+       uint32 low, high;
+
+       if (sscanf(pszParmValue, "%u-%u", &low, &high) != 2 || high < low)
+               return False;
+
+       /* Parse OK */
+
+       string_set(ptr, pszParmValue);
+
+        winbind_gid_low = low;
+        winbind_gid_high = high;
+
+       return True;
+}
+
+/* Do some simple checks on "non unix account range" parameter values */
+
+static BOOL handle_non_unix_account_range(char *pszParmValue, char **ptr)
+{
+       uint32 low, high;
+
+       if (sscanf(pszParmValue, "%u-%u", &low, &high) != 2 || high < low)
+               return False;
+
+       /* Parse OK */
+
+       string_set(ptr, pszParmValue);
+
+        non_unix_account_low = low;
+        non_unix_account_high = high;
+
        return True;
 }
 
@@ -2526,8 +2618,7 @@ initialise a copymap
 static void init_copymap(service * pservice)
 {
        int i;
-       if (pservice->copymap)
-               free(pservice->copymap);
+       SAFE_FREE(pservice->copymap);
        pservice->copymap = (BOOL *)malloc(sizeof(BOOL) * NUMPARAMETERS);
        if (!pservice->copymap)
                DEBUG(0,
@@ -2545,7 +2636,7 @@ static void init_copymap(service * pservice)
 ***************************************************************************/
 void *lp_local_ptr(int snum, void *ptr)
 {
-       return (void *)(((char *)pSERVICE(snum)) + PTR_DIFF(ptr, &sDefault));
+       return (void *)(((char *)ServicePtrs[snum]) + PTR_DIFF(ptr, &sDefault));
 }
 
 /***************************************************************************
@@ -2590,20 +2681,20 @@ BOOL lp_do_parameter(int snum, char *pszParmName, char *pszParmValue)
                        return (True);
                }
                parm_ptr =
-                       ((char *)pSERVICE(snum)) + PTR_DIFF(def_ptr,
+                       ((char *)ServicePtrs[snum]) + PTR_DIFF(def_ptr,
                                                            &sDefault);
        }
 
        if (snum >= 0)
        {
-               if (!iSERVICE(snum).copymap)
-                       init_copymap(pSERVICE(snum));
+               if (!ServicePtrs[snum]->copymap)
+                       init_copymap(ServicePtrs[snum]);
 
                /* this handles the aliases - set the copymap for other entries with
                   the same data pointer */
                for (i = 0; parm_table[i].label; i++)
                        if (parm_table[i].ptr == parm_table[parmnum].ptr)
-                               iSERVICE(snum).copymap[i] = False;
+                               ServicePtrs[snum]->copymap[i] = False;
        }
 
        /* if it is a special case then go ahead */
@@ -2637,29 +2728,25 @@ BOOL lp_do_parameter(int snum, char *pszParmName, char *pszParmValue)
                        sscanf(pszParmValue, "%o", (int *)parm_ptr);
                        break;
 
+               case P_LIST:
+                       *(char ***)parm_ptr = lp_list_make(pszParmValue);
+                       break;
+
                case P_STRING:
                        string_set(parm_ptr, pszParmValue);
-                       if (parm_table[parmnum].flags & FLAG_DOS_STRING)
-                               unix_to_dos(*(char **)parm_ptr, True);
                        break;
 
                case P_USTRING:
                        string_set(parm_ptr, pszParmValue);
-                       if (parm_table[parmnum].flags & FLAG_DOS_STRING)
-                               unix_to_dos(*(char **)parm_ptr, True);
                        strupper(*(char **)parm_ptr);
                        break;
 
                case P_GSTRING:
                        pstrcpy((char *)parm_ptr, pszParmValue);
-                       if (parm_table[parmnum].flags & FLAG_DOS_STRING)
-                               unix_to_dos((char *)parm_ptr, True);
                        break;
 
                case P_UGSTRING:
                        pstrcpy((char *)parm_ptr, pszParmValue);
-                       if (parm_table[parmnum].flags & FLAG_DOS_STRING)
-                               unix_to_dos((char *)parm_ptr, True);
                        strupper((char *)parm_ptr);
                        break;
 
@@ -2703,7 +2790,7 @@ static BOOL do_parameter(char *pszParmName, char *pszParmValue)
 /***************************************************************************
 print a parameter of the specified type
 ***************************************************************************/
-static void print_parameter(struct parm_struct *p, void *ptr, FILE * f,  char *(*dos_to_ext)(char *, BOOL))
+static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
 {
        int i;
        switch (p->type)
@@ -2740,23 +2827,27 @@ static void print_parameter(struct parm_struct *p, void *ptr, FILE * f,  char *(
                        fprintf(f, "%s", octal_string(*(int *)ptr));
                        break;
 
+               case P_LIST:
+                       if ((char ***)ptr && *(char ***)ptr) {
+                               char **list = *(char ***)ptr;
+                               
+                               for (; *list; list++)
+                                       fprintf(f, "%s%s", *list,
+                                               ((*(list+1))?", ":""));
+                       }
+                       break;
+
                case P_GSTRING:
                case P_UGSTRING:
                        if ((char *)ptr) {
-                               if (p->flags & FLAG_DOS_STRING)
-                                       fprintf(f, "%s", dos_to_ext((char *)ptr, False));
-                               else
-                                       fprintf(f, "%s", (char *)ptr);
+                               fprintf(f, "%s", (char *)ptr);
                        }
                        break;
 
                case P_STRING:
                case P_USTRING:
                        if (*(char **)ptr) {
-                               if(p->flags & FLAG_DOS_STRING)
-                                       fprintf(f,"%s",dos_to_ext(*(char **)ptr, False));
-                               else
-                                       fprintf(f, "%s", *(char **)ptr);
+                               fprintf(f, "%s", *(char **)ptr);
                        }
                        break;
                case P_SEP:
@@ -2783,6 +2874,9 @@ static BOOL equal_parameter(parm_type type, void *ptr1, void *ptr2)
 
                case P_CHAR:
                        return (*((char *)ptr1) == *((char *)ptr2));
+               
+               case P_LIST:
+                       return lp_list_compare(*(char ***)ptr1, *(char ***)ptr2);
 
                case P_GSTRING:
                case P_UGSTRING:
@@ -2822,7 +2916,7 @@ void init_locals(void)
 /***************************************************************************
 Process a new section (service). At this stage all sections are services.
 Later we'll have special sections that permit server parameters to be set.
-Returns True on success, False on failure. SectionName must be in DOS codepage.
+Returns True on success, False on failure. 
 ***************************************************************************/
 static BOOL do_section(char *pszSectionName)
 {
@@ -2874,7 +2968,7 @@ static BOOL do_section(char *pszSectionName)
 
 
 /***************************************************************************
-determine if a partcular base parameter is currently set to the default value.
+determine if a partcular base parameter is currentl set to the default value.
 ***************************************************************************/
 static BOOL is_default(int i)
 {
@@ -2882,6 +2976,9 @@ static BOOL is_default(int i)
                return False;
        switch (parm_table[i].type)
        {
+               case P_LIST:
+                       return lp_list_compare (parm_table[i].def.lvalue, 
+                                               *(char ***)parm_table[i].ptr);
                case P_STRING:
                case P_USTRING:
                        return strequal(parm_table[i].def.svalue,
@@ -2912,7 +3009,7 @@ static BOOL is_default(int i)
 /***************************************************************************
 Display the contents of the global structure.
 ***************************************************************************/
-static void dump_globals(FILE *f, char *(*dos_to_ext)(char *, BOOL))
+static void dump_globals(FILE *f)
 {
        int i;
        fprintf(f, "# Global parameters\n[global]\n");
@@ -2925,7 +3022,7 @@ static void dump_globals(FILE *f, char *(*dos_to_ext)(char *, BOOL))
                        if (defaults_saved && is_default(i))
                                continue;
                        fprintf(f, "\t%s = ", parm_table[i].label);
-                       print_parameter(&parm_table[i], parm_table[i].ptr, f, dos_to_ext);
+                       print_parameter(&parm_table[i], parm_table[i].ptr, f);
                        fprintf(f, "\n");
                }
 }
@@ -2938,7 +3035,7 @@ BOOL lp_is_default(int snum, struct parm_struct *parm)
        int pdiff = PTR_DIFF(parm->ptr, &sDefault);
 
        return equal_parameter(parm->type,
-                              ((char *)pSERVICE(snum)) + pdiff,
+                              ((char *)ServicePtrs[snum]) + pdiff,
                               ((char *)&sDefault) + pdiff);
 }
 
@@ -2946,7 +3043,7 @@ BOOL lp_is_default(int snum, struct parm_struct *parm)
 /***************************************************************************
 Display the contents of a single services record.
 ***************************************************************************/
-static void dump_a_service(service * pService, FILE * f, char *(*dos_to_ext)(char *, BOOL))
+static void dump_a_service(service * pService, FILE * f)
 {
        int i;
        if (pService != &sDefault)
@@ -2977,7 +3074,7 @@ static void dump_a_service(service * pService, FILE * f, char *(*dos_to_ext)(cha
 
                        fprintf(f, "\t%s = ", parm_table[i].label);
                        print_parameter(&parm_table[i],
-                                       ((char *)pService) + pdiff, f, dos_to_ext);
+                                       ((char *)pService) + pdiff, f);
                        fprintf(f, "\n");
                }
 }
@@ -3012,7 +3109,7 @@ struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
        }
        else
        {
-               service *pService = pSERVICE(snum);
+               service *pService = ServicePtrs[snum];
 
                for (; parm_table[*i].label; (*i)++)
                {
@@ -3072,15 +3169,16 @@ static void dump_copy_map(BOOL *pcopymap)
 /***************************************************************************
 Return TRUE if the passed service number is within range.
 ***************************************************************************/
+
 BOOL lp_snum_ok(int iService)
 {
-       return (LP_SNUM_OK(iService) && iSERVICE(iService).bAvailable);
+       return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
 }
 
-
 /***************************************************************************
-auto-load some home services
+ Auto-load some home services.
 ***************************************************************************/
+
 static void lp_add_auto_services(char *str)
 {
        char *s;
@@ -3096,95 +3194,92 @@ static void lp_add_auto_services(char *str)
 
        homes = lp_servicenumber(HOMES_NAME);
 
-       for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP))
-       {
-               char *home = get_user_home_dir(p);
+       for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP)) {
+               char *home = get_user_service_home_dir(p);
 
                if (lp_servicenumber(p) >= 0)
                        continue;
 
                if (home && homes >= 0)
-               {
                        lp_add_home(p, homes, home);
-               }
        }
-       free(s);
+       SAFE_FREE(s);
 }
 
 /***************************************************************************
-auto-load one printer
+ Auto-load one printer.
 ***************************************************************************/
+
 void lp_add_one_printer(char *name, char *comment)
 {
        int printers = lp_servicenumber(PRINTERS_NAME);
        int i;
 
-       if (lp_servicenumber(name) < 0)
-       {
+       if (lp_servicenumber(name) < 0) {
                lp_add_printer(name, printers);
-               if ((i = lp_servicenumber(name)) >= 0)
-               {
-                       string_set(&iSERVICE(i).comment, comment);
-            unix_to_dos(iSERVICE(i).comment, True);
-                       iSERVICE(i).autoloaded = True;
+               if ((i = lp_servicenumber(name)) >= 0) {
+                       string_set(&ServicePtrs[i]->comment, comment);
+                       ServicePtrs[i]->autoloaded = True;
                }
        }
 }
 
 /***************************************************************************
-have we loaded a services file yet?
+ Have we loaded a services file yet?
 ***************************************************************************/
+
 BOOL lp_loaded(void)
 {
        return (bLoaded);
 }
 
 /***************************************************************************
-unload unused services
+ Unload unused services.
 ***************************************************************************/
+
 void lp_killunused(BOOL (*snumused) (int))
 {
        int i;
-       for (i = 0; i < iNumServices; i++)
-       {
+       for (i = 0; i < iNumServices; i++) {
                if (!VALID(i))
                        continue;
 
-               if (!snumused || !snumused(i))
-               {
-                       iSERVICE(i).valid = False;
-                       free_service(pSERVICE(i));
+               if (!snumused || !snumused(i)) {
+                       ServicePtrs[i]->valid = False;
+                       free_service(ServicePtrs[i]);
                }
        }
 }
 
-
 /***************************************************************************
-unload a service
+ Unload a service.
 ***************************************************************************/
+
 void lp_killservice(int iServiceIn)
 {
-       if (VALID(iServiceIn))
-       {
-               iSERVICE(iServiceIn).valid = False;
-               free_service(pSERVICE(iServiceIn));
+       if (VALID(iServiceIn)) {
+               ServicePtrs[iServiceIn]->valid = False;
+               free_service(ServicePtrs[iServiceIn]);
        }
 }
 
 /***************************************************************************
-save the curent values of all global and sDefault parameters into the 
-defaults union. This allows swat and testparm to show only the
-changed (ie. non-default) parameters.
+ Save the curent values of all global and sDefault parameters into the 
+ defaults union. This allows swat and testparm to show only the
+ changed (ie. non-default) parameters.
 ***************************************************************************/
+
 static void lp_save_defaults(void)
 {
        int i;
-       for (i = 0; parm_table[i].label; i++)
-       {
+       for (i = 0; parm_table[i].label; i++) {
                if (i > 0 && parm_table[i].ptr == parm_table[i - 1].ptr)
                        continue;
-               switch (parm_table[i].type)
-               {
+               switch (parm_table[i].type) {
+                       case P_LIST:
+                               lp_list_copy(&(parm_table[i].def.lvalue),
+                                           *(char ***)parm_table[i].ptr);
+                               break;
                        case P_STRING:
                        case P_USTRING:
                                parm_table[i].def.svalue =
@@ -3220,16 +3315,15 @@ static void lp_save_defaults(void)
 /*******************************************************************
  Set the server type we will announce as via nmbd.
 ********************************************************************/
+
 static void set_server_role(void)
 {
        server_role = ROLE_STANDALONE;
 
-       switch (lp_security())
-       {
+       switch (lp_security()) {
                case SEC_SHARE:
                {
-                       if (lp_domain_logons())
-                       {
+                       if (lp_domain_logons()) {
                                DEBUG(0,
                                      ("Server's Role (logon server) conflicts with share-level security\n"));
                        }
@@ -3237,9 +3331,9 @@ static void set_server_role(void)
                }
                case SEC_SERVER:
                case SEC_DOMAIN:
+               case SEC_ADS:
                {
-                       if (lp_domain_logons())
-                       {
+                       if (lp_domain_logons()) {
                                server_role = ROLE_DOMAIN_BDC;
                                break;
                        }
@@ -3248,8 +3342,7 @@ static void set_server_role(void)
                }
                case SEC_USER:
                {
-                       if (lp_domain_logons())
-                       {
+                       if (lp_domain_logons()) {
                                server_role = ROLE_DOMAIN_PDC;
                                break;
                        }
@@ -3268,13 +3361,16 @@ static void set_server_role(void)
 Load the services array from the services file. Return True on success, 
 False on failure.
 ***************************************************************************/
-BOOL lp_load(char *pszFname, BOOL global_only, BOOL save_defaults,
+BOOL lp_load(const char *pszFname, BOOL global_only, BOOL save_defaults,
             BOOL add_ipc)
 {
        pstring n2;
        BOOL bRetval;
 
-       add_to_file_list(pszFname);
+       pstrcpy(n2, pszFname);
+       standard_sub_basic(current_user_info.smb_name, n2);
+
+       add_to_file_list(pszFname, n2);
 
        bRetval = False;
 
@@ -3289,9 +3385,6 @@ BOOL lp_load(char *pszFname, BOOL global_only, BOOL save_defaults,
                lp_save_defaults();
        }
 
-       pstrcpy(n2, pszFname);
-       standard_sub_basic(n2);
-
        /* We get sections first, so have to start 'behind' to make up */
        iServiceIndex = -1;
        bRetval = pm_process(n2, do_section, do_parameter);
@@ -3316,14 +3409,12 @@ BOOL lp_load(char *pszFname, BOOL global_only, BOOL save_defaults,
 
        /* Now we check bWINSsupport and set szWINSserver to 127.0.0.1 */
        /* if bWINSsupport is true and we are in the client            */
-
-       if (in_client && Globals.bWINSsupport)
-       {
-
+       if (in_client && Globals.bWINSsupport) {
                string_set(&Globals.szWINSserver, "127.0.0.1");
-
        }
 
+       init_iconv();
+
        return (bRetval);
 }
 
@@ -3347,7 +3438,7 @@ int lp_numservices(void)
 /***************************************************************************
 Display the contents of the services array in human-readable form.
 ***************************************************************************/
-void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint, char *(*dos_to_ext)(char *, BOOL))
+void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint)
 {
        int iService;
 
@@ -3356,24 +3447,24 @@ void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint, char *(*dos_to_ext)(ch
                defaults_saved = False;
        }
 
-       dump_globals(f, dos_to_ext);
+       dump_globals(f);
 
-       dump_a_service(&sDefault, f, dos_to_ext);
+       dump_a_service(&sDefault, f);
 
        for (iService = 0; iService < maxtoprint; iService++)
-               lp_dump_one(f, show_defaults, iService, dos_to_ext);
+               lp_dump_one(f, show_defaults, iService);
 }
 
 /***************************************************************************
 Display the contents of one service in human-readable form.
 ***************************************************************************/
-void lp_dump_one(FILE * f, BOOL show_defaults, int snum, char *(*dos_to_ext)(char *, BOOL))
+void lp_dump_one(FILE * f, BOOL show_defaults, int snum)
 {
        if (VALID(snum))
        {
-               if (iSERVICE(snum).szService[0] == '\0')
+               if (ServicePtrs[snum]->szService[0] == '\0')
                        return;
-               dump_a_service(pSERVICE(snum), f, dos_to_ext);
+               dump_a_service(ServicePtrs[snum], f);
        }
 }
 
@@ -3384,38 +3475,42 @@ exist. Note that this is a DIFFERENT ANIMAL from the internal function
 getservicebyname()! This works ONLY if all services have been loaded, and
 does not copy the found service.
 ***************************************************************************/
-int lp_servicenumber(char *pszServiceName)
+int lp_servicenumber(const char *pszServiceName)
 {
        int iService;
-
+        fstring serviceName;
        for (iService = iNumServices - 1; iService >= 0; iService--)
-               if (VALID(iService) &&
-                   strequal(lp_servicename(iService), pszServiceName))
-                       break;
+       {
+               if (VALID(iService) && ServicePtrs[iService]->szService)
+               {
+                       /*
+                        * The substitution here is used to support %U is
+                        * service names
+                        */
+                       fstrcpy(serviceName, ServicePtrs[iService]->szService);
+                       standard_sub_basic(current_user_info.smb_name, serviceName);
+                       if (strequal(serviceName, pszServiceName))
+                               break;
+               }
+       }
 
        if (iService < 0)
-               DEBUG(7,
-                     ("lp_servicenumber: couldn't find %s\n",
-                      pszServiceName));
+               DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
 
        return (iService);
 }
 
 /*******************************************************************
-  a useful volume label function
-  ******************************************************************/
+ A useful volume label function. Returns a string in DOS codepage.
+********************************************************************/
+
 char *volume_label(int snum)
 {
        char *ret = lp_volume(snum);
-       if (!*ret) {
-               /* lp_volume returns a unix charset - lp_servicename returns a
-                  dos codepage - convert so volume_label() always returns UNIX.
-               */
-               char *p = dos_to_unix(lp_servicename(snum), False);
-               int len = strlen(p)+1;
-               ret = (char *)talloc(lp_talloc, len);
-               memcpy(ret, p, len);
-       }
+       if (!*ret)
+               return lp_servicename(snum);
        return (ret);
 }
 
@@ -3538,11 +3633,11 @@ remove a service
 ********************************************************************/
 void lp_remove_service(int snum)
 {
-       pSERVICE(snum)->valid = False;
+       ServicePtrs[snum]->valid = False;
 }
 
 /*******************************************************************
-copy a service. new_name must be in dos codepage
+copy a service. 
 ********************************************************************/
 void lp_copy_service(int snum, char *new_name)
 {
@@ -3582,7 +3677,7 @@ int lp_major_announce_version(void)
        if ((vers = lp_announce_version()) == NULL)
                return major_version;
 
-       if ((p = strchr(vers, '.')) == 0)
+       if ((p = strchr_m(vers, '.')) == 0)
                return major_version;
 
        *p = '\0';
@@ -3604,7 +3699,7 @@ int lp_minor_announce_version(void)
        if ((vers = lp_announce_version()) == NULL)
                return minor_version;
 
-       if ((p = strchr(vers, '.')) == 0)
+       if ((p = strchr_m(vers, '.')) == 0)
                return minor_version;
 
        p++;
@@ -3621,48 +3716,246 @@ void lp_set_name_resolve_order(char *new_order)
        Globals.szNameResolveOrder = new_order;
 }
 
+char *lp_printername(int snum)
+{
+       char *ret = _lp_printername(snum);
+       if (ret == NULL || (ret != NULL && *ret == '\0'))
+               ret = lp_servicename(snum);
+
+       return ret;
+}
+
+
 /***********************************************************
- Functions to return the current security masks/modes. If
- set to -1 then return the create mask/mode instead.
-************************************************************/
+ List Parameters manipulation functions
+***********************************************************/
+
+#define P_LIST_ABS 16 /* P_LIST Allocation Block Size */
 
-int lp_security_mask(int snum)
+char **lp_list_make(char *string)
 {
-       int val = _lp_security_mask(snum);
-       if (val == -1)
-               return lp_create_mask(snum);
-       return val;
+       char **list, **rlist;
+       char *str, *s;
+       int num, lsize;
+       pstring tok;
+       
+       if (!string || !*string) return NULL;
+       s = strdup(string);
+       if (!s) {
+               DEBUG(0,("lp_list_make: Unable to allocate memory"));
+               return NULL;
+       }
+       
+       num = lsize = 0;
+       list = NULL;
+       
+       str = s;
+       while (next_token(&str, tok, LIST_SEP, sizeof(pstring)))
+       {               
+               if (num == lsize) {
+                       lsize += P_LIST_ABS;
+                       rlist = (char **)Realloc(list, ((sizeof(char **)) * (lsize +1)));
+                       if (!rlist) {
+                               DEBUG(0,("lp_list_make: Unable to allocate memory"));
+                               lp_list_free(&list);
+                               SAFE_FREE(s);
+                               return NULL;
+                       }
+                       else list = rlist;
+                       memset (&list[num], 0, ((sizeof(char**)) * (P_LIST_ABS +1)));
+               }
+               
+               list[num] = strdup(tok);
+               if (!list[num]) {
+                       DEBUG(0,("lp_list_make: Unable to allocate memory"));
+                       lp_list_free(&list);
+                       SAFE_FREE(s);
+                       return NULL;
+               }
+       
+               num++;  
+       }
+       
+       SAFE_FREE(s);
+       return list;
 }
 
-int lp_force_security_mode(int snum)
+BOOL lp_list_copy(char ***dest, char **src)
 {
-       int val = _lp_force_security_mode(snum);
-       if (val == -1)
-               return lp_force_create_mode(snum);
-       return val;
+       char **list, **rlist;
+       int num, lsize;
+       
+       *dest = NULL;
+       if (!src) return False;
+       
+       num = lsize = 0;
+       list = NULL;
+               
+       while (src[num])
+       {
+               if (num == lsize) {
+                       lsize += P_LIST_ABS;
+                       rlist = (char **)Realloc(list, ((sizeof(char **)) * (lsize +1)));
+                       if (!rlist) {
+                               DEBUG(0,("lp_list_copy: Unable to allocate memory"));
+                               lp_list_free(&list);
+                               return False;
+                       }
+                       else list = rlist;
+                       memset (&list[num], 0, ((sizeof(char **)) * (P_LIST_ABS +1)));
+               }
+               
+               list[num] = strdup(src[num]);
+               if (!list[num]) {
+                       DEBUG(0,("lp_list_copy: Unable to allocate memory"));
+                       lp_list_free(&list);
+                       return False;
+               }
+
+               num++;
+       }
+       
+       *dest = list;
+       return True;    
 }
 
-int lp_dir_security_mask(int snum)
+/* return true if all the elemnts of the list matches exactly */
+BOOL lp_list_compare(char **list1, char **list2)
 {
-       int val = _lp_dir_security_mask(snum);
-       if (val == -1)
-               return lp_dir_mask(snum);
-       return val;
+       int num;
+       
+       if (!list1 || !list2) return (list1 == list2); 
+       
+       for (num = 0; list1[num]; num++) {
+               if (!list2[num]) return False;
+               if (!strcsequal(list1[num], list2[num])) return False;
+       }
+       if (list2[num]) return False; /* if list2 has more elements than list1 fail */
+       
+       return True;
 }
 
-int lp_force_dir_security_mode(int snum)
+void lp_list_free(char ***list)
 {
-       int val = _lp_force_dir_security_mode(snum);
-       if (val == -1)
-               return lp_force_dir_mode(snum);
-       return val;
+       char **tlist;
+       
+       if (!list || !*list) return;
+       tlist = *list;
+       for(; *tlist; tlist++) SAFE_FREE(*tlist);
+       SAFE_FREE(*list);
 }
 
-char *lp_printername(int snum)
+BOOL lp_list_substitute(char **list, const char *pattern, const char *insert)
 {
-       char *ret = _lp_printername(snum);
-       if (ret == NULL || (ret != NULL && *ret == '\0'))
-               ret = lp_servicename(snum);
+       char *p, *s, *t;
+       ssize_t ls, lp, li, ld, i, d;
 
-       return ret;
+       if (!list) return False;
+       if (!pattern) return False;
+       if (!insert) return False;
+
+       lp = (ssize_t)strlen(pattern);
+       li = (ssize_t)strlen(insert);
+       ld = li -lp;
+                       
+       while (*list)
+       {
+               s = *list;
+               ls = (ssize_t)strlen(s);
+
+               while ((p = strstr(s, pattern)))
+               {
+                       t = *list;
+                       d = p -t;
+                       if (ld)
+                       {
+                               t = (char *) malloc(ls +ld +1);
+                               if (!t) {
+                                       DEBUG(0,("lp_list_substitute: Unable to allocate memory"));
+                                       return False;
+                               }
+                               memcpy(t, *list, d);
+                               memcpy(t +d +li, p +lp, ls -d -lp +1);
+                               SAFE_FREE(*list);
+                               *list = t;
+                               ls += ld;
+                               s = t +d +li;
+                       }
+                       
+                       for (i = 0; i < li; i++) {
+                               switch (insert[i]) {
+                                       case '`':
+                                       case '"':
+                                       case '\'':
+                                       case ';':
+                                       case '$':
+                                       case '%':
+                                       case '\r':
+                                       case '\n':
+                                               t[d +i] = '_';
+                                               break;
+                                       default:
+                                               t[d +i] = insert[i];
+                               }
+                       }       
+               }
+               
+               list++;
+       }
+       
+       return True;
+}
+
+/****************************************************************
+ Compatibility fn. for 2.2.2 code.....
+*****************************************************************/
+
+void get_private_directory(pstring privdir)
+{
+       pstrcpy (privdir, lp_private_dir());
+}
+
+
+/****************************************************************
+ Is netbios alias or name
+*****************************************************************/
+
+BOOL is_netbios_alias_or_name(const char *name)
+{
+       char **netbios_aliases = lp_netbios_aliases();
+       
+       if (StrCaseCmp(name, global_myname) == 0) {
+               return True;
+       }
+
+       for (netbios_aliases = lp_netbios_aliases();
+            netbios_aliases && *netbios_aliases;
+            netbios_aliases++) {
+               if (StrCaseCmp(name, *netbios_aliases) == 0) {
+                       return True;
+               }
+       }
+       
+       return False;
+}
+
+/***********************************************************
+ Allow daemons such as winbindd to fix their logfile name.
+************************************************************/
+
+void lp_set_logfile(const char *name)
+{
+       extern pstring debugf;
+       string_set(&Globals.szLogFile, name);
+       pstrcpy(debugf, name);
+}
+
+/*******************************************************************
+ Return the NetBIOS called name.
+********************************************************************/
+
+const char *get_called_name(void)
+{
+       extern fstring local_machine;
+        return (*local_machine) ? local_machine : global_myname;
 }