-mailto(samba-bugs@samba.org)
+mailto(samba@samba.org)
manpage(smb.conf htmlcommand((5)))(5)(23 Oct 1998)(Samba)(SAMBA)
verb(
[aprinter]
path = /usr/spool/public
- read only = true
+ writeable = false
printable = true
guest ok = true
)
This section works like link(bf([homes]))(homes), but for printers.
-If a [printers] section occurs in the configuration file, users are
+If a bf([printers]) section occurs in the configuration file, users are
able to connect to any printer specified in the local host's printcap
file.
above. Otherwise, the requested section name is treated as a printer
name and the appropriate printcap file is scanned to see if the
requested section name is a valid printer share name. If a match is
-found, a new printer share is created by cloning the [printers]
+found, a new printer share is created by cloning the bf([printers])
section.
A few modifications are then made to the newly created share:
endit()
-Note that the [printers] service MUST be printable - if you specify
+Note that the bf([printers]) service MUST be printable - if you specify
otherwise, the server will refuse to load the configuration file.
Typically the path specified would be that of a world-writeable spool
-directory with the sticky bit set on it. A typical [printers] entry
+directory with the sticky bit set on it. A typical bf([printers]) entry
would look like this:
verb(
machine. Only some are recognized, and those may not be 100%
reliable. It currently recognizes Samba, WfWg, WinNT and
Win95. Anything else will be known as "UNKNOWN". If it gets it wrong
-then sending a level 3 log to email(samba-bugs@samba.org)
+then sending a level 3 log to email(samba@samba.org)
should allow it to be fixed.
label(percentI)
it() link(bf(debug uid))(debuguid)
-it() link(bf(debuglevel))(debuglevel)
+it() link(bf(debug level))(debuglevel)
it() link(bf(default))(default)
it() link(bf(domain admin users))(domainadminusers)
-it() link(bf(domain controller))(domaincontroller)
-
it() link(bf(domain groups))(domaingroups)
it() link(bf(domain guest group))(domainguestgroup)
it() link(bf(min passwd length))(minpasswdlength)
+it() link(bf(min password length))(minpasswordlength)
+
it() link(bf(min wins ttl))(minwinsttl)
it() link(bf(name resolve order))(nameresolveorder)
it() link(bf(socket options))(socketoptions)
+it() link(bf(source environment))(sourceenvironment)
+
it() link(bf(ssl))(ssl)
it() link(bf(ssl CA certDir))(sslCAcertDir)
it() link(bf(username map))(usernamemap)
-it() link(bf(utmp))(utmp)
-
it() link(bf(utmp directory))(utmpdirectory)
it() link(bf(valid chars))(validchars)
+it() link(bf(wins hook))(winshook)
+
it() link(bf(wins proxy))(winsproxy)
it() link(bf(wins server))(winsserver)
-it() link(bf(wins hook))(winshook)
-
it() link(bf(wins support))(winssupport)
it() link(bf(workgroup))(workgroup)
it() link(bf(only user))(onlyuser)
-it() link(bf(oplocks))(oplocks)
-
it() link(bf(oplock contention limit))(oplockcontentionlimit)
+it() link(bf(oplocks))(oplocks)
+
it() link(bf(path))(path)
it() link(bf(postexec))(postexec)
it() link(bf(root preexec))(rootpreexec)
-it() link(bf(security mask))(securitymask)
-
it() link(bf(root preexec close))(rootpreexecclose)
+it() link(bf(security mask))(securitymask)
+
it() link(bf(set directory))(setdirectory)
it() link(bf(share modes))(sharemodes)
it() link(bf(users))(users)
+it() link(bf(utmp))(utmp)
+
it() link(bf(valid users))(validusers)
it() link(bf(veto files))(vetofiles)
it() link(bf(writable))(writable)
+it() link(bf(write cache size))(writecachesize)
+
it() link(bf(write list))(writelist)
it() link(bf(write ok))(writeok)
Samba2.0 debug log messages are timestamped by default. If you are
running at a high link(bf("debug level"))(debuglevel) these timestamps
-can be distracting. This boolean parameter allows them to be turned
+can be distracting. This boolean parameter allows timestamping to be turned
off.
bf(Default:)
mailing list bf(Samba-ntdom) available by sending email to
email(listproc@samba.org)
-label(domain controller)
-dit(bf(domain controller (G)))
-
-This is a bf(DEPRECATED) parameter. It is currently not used within
-the Samba source and should be removed from all current smb.conf
-files. It is left behind for compatibility reasons.
-
label(domaingroups)
dit(bf(domain groups (G)))
This option takes the standard substitutions, allowing you to have
separate logon scripts for each user or machine.
+This parameter can be used with Win9X workstations to ensure that
+roaming profiles are stored in a subdirectory of the user's home
+directory. This is done in the following way:
+
+tt(" logon home = \\%L\%U\profile")
+
+This tells Samba to return the above string, with substitutions made
+when a client requests the info, generally in a NetUserGetInfo request.
+Win9X clients truncate the info to \\server\share when a user does tt("net use /home"),
+but use the whole string when dealing with profiles.
+
+Note that in prior versions of Samba, the tt("logon path") was returned rather than
+tt("logon home"). This broke tt("net use /home") but allowed profiles outside the
+home directory. The current implementation is correct, and can be used for profiles
+if you use the above trick.
+
Note that this option is only useful if Samba is set up as a
link(bf(logon server))(domainlogons).
dit(bf(logon path (G)))
This parameter specifies the home directory where roaming profiles
-(USER.DAT / USER.MAN files for Windows 95/98) are stored.
+(NTuser.dat etc files for Windows NT) are stored. Contrary to previous
+versions of these manual pages, it has nothing to do with Win 9X roaming
+profiles. To find out how to handle roaming profiles for Win 9X system, see
+the tt("logon home") parameter.
This option takes the standard substitutions, allowing you to have
separate logon scripts for each user or machine. It also specifies
-the directory from which the tt("desktop"), tt("start menu"),
-tt("network neighborhood") and tt("programs") folders, and their
-contents, are loaded and displayed on your Windows 95/98 client.
+the directory from which the tt("application data"), (tt("desktop"), tt("start menu"),
+tt("network neighborhood"), tt("programs") and other folders, and their
+contents, are loaded and displayed on your Windows NT client.
The share and the path must be readable by the user for the
-preferences and directories to be loaded onto the Windows 95/98
+preferences and directories to be loaded onto the Windows NT
client. The share must be writeable when the logs in for the first
-time, in order that the Windows 95/98 client can create the user.dat
+time, in order that the Windows NT client can create the NTuser.dat
and other directories.
Thereafter, the directories and any of the contents can, if required, be
-made read-only. It is not advisable that the USER.DAT file be made
-read-only - rename it to USER.MAN to achieve the desired effect (a
-em(MAN)datory profile).
+made read-only. It is not advisable that the NTuser.dat file be made
+read-only - rename it to NTuser.man to achieve the desired effect (a
+em(MAN)datory profile).
Windows clients can sometimes maintain a connection to the [homes]
share, even though there is no user logged in. Therefore, it is vital
label(maxpacket)
dit(bf(max packet (G)))
-Synonym for label(bf("packet size"))(packetsize).
+Synonym for link(bf("packet size"))(packetsize).
label(maxttl)
dit(bf(max ttl (G)))
label(minpasswdlength)
dit(bf(min passwd length (G)))
+Synonym for link(bf("min password length"))(minpasswordlength).
+
+label(minpasswordlength)
+dit(bf(min password length (G)))
+
This option sets the minimum length in characters of a plaintext password
than smbd will accept when performing UNIX password changing.
debug"))(passwdchatdebug).
bf(Default:)
-tt( min passwd length = 5)
+tt( min password length = 5)
label(minwinsttl)
label(packetsize)
dit(bf(packet size (G)))
-This is a deprecated parameter that how no effect on the current
+This is a deprecated parameter that has no effect on the current
Samba code. It is left in the parameter list to prevent breaking
old bf(smb.conf) files.
the link(bf("passwd program"))(passwdprogram) and should be turned off
after this has been done. This parameter is off by default.
-See also link(bf("passwd chat"))(passwdchat"), link(bf("passwd
+See also link(bf("passwd chat"))(passwdchat), link(bf("passwd
program"))(passwdprogram).
bf(Example:)
Note that a printable service will ALWAYS allow writing to the service
path (user privileges permitting) via the spooling of print data. The
-link(bf("read only"))(readonly) parameter controls only non-printing
+link(bf("writeable"))(writeable) parameter controls only non-printing
access to the resource.
bf(Default:)
dit(bf(printing (S)))
This parameters controls how printer status information is interpreted
-on your system, and also affects the default values for the
+on your system. It also affects the default values for the
link(bf("print command"))(printcommand), link(bf("lpq
command"))(lpqcommand) link(bf("lppause command"))(lppausecommand),
link(bf("lpresume command"))(lpresumecommand), and link(bf("lprm
-command"))(lprmcommand).
+command"))(lprmcommand) if specified in the link(bf([global]))(global)
+section.
Currently eight printing styles are supported. They are
bf("printing=BSD"), bf("printing=AIX"), bf("printing=LPRNG"),
bf("printing=SOFTQ").
To see what the defaults are for the other print commands when using
-these three options use the url(bf("testparm"))(testparm.1.html) program.
+the various options use the url(bf("testparm"))(testparm.1.html) program.
This option can be set on a per printer basis
This is a list of users that are given read-only access to a
service. If the connecting user is in this list then they will not be
-given write access, no matter what the link(bf("read only"))(readonly)
+given write access, no matter what the link(bf("writeable"))(writeable)
option is set to. The list can include group names using the syntax
described in the link(bf("invalid users"))(invalidusers) parameter.
dit(bf(read only (S)))
Note that this is an inverted synonym for
-link(bf("writeable"))(writeable) and link(bf("write ok"))(writeok).
-
-See also link(bf("writeable"))(writeable) and link(bf("write
-ok"))(writeok).
+link(bf("writeable"))(writeable).
label(readprediction)
dit(bf(read prediction (G)))
option" when you supply an option. This means you either incorrectly
typed it or you need to add an include file to includes.h for your OS.
If the latter is the case please send the patch to
-email(samba-bugs@samba.org).
+email(samba@samba.org).
Any of the supported socket options may be combined in any way you
like, as long as your OS allows it.
bf(Example:)
tt( socket options = IPTOS_LOWDELAY)
+label(sourceenvironment)
+dit(bf(source environment (G)))
+
+This parameter causes Samba to set environment variables as per the
+content of the file named.
+
+The file bf(must) be owned by root and not world writable in order
+to be read (this is a security check).
+
+If the value of this parameter starts with a "|" character then Samba will
+treat that value as a pipe command to open and will set the environment
+variables from the oput of the pipe. This command must not be world writable
+and must reside in a directory that is not world writable.
+
+The contents of the file or the output of the pipe should be formatted
+as the output of the standard Unix env(1) command. This is of the form :
+
+Example environment entry:
+tt( SAMBA_NETBIOS_NAME=myhostname )
+
+ bf(Default:)
+tt(No default value)
+
+ bf(Examples:)
+
+tt( source environment = |/etc/smb.conf.sh)
+
+tt( source environment = /usr/local/smb_env_vars)
+
label(ssl)
dit(bf(ssl (G)))
label(timestamplogs)
dit(bf(timestamp logs (G)))
-Samba2.0 will a timestamps to all log entries by default. This
-can be distracting if you are attempting to debug a problem. This
-parameter allows the timestamping to be turned off.
-
- bf(Default:)
-tt( timestamp logs = True)
-
- bf(Example:)
-tt( timestamp logs = False)
+Synonym for url(bf("debug timestamp"))(debugtimestamp).
label(unixpasswordsync)
dit(bf(unix password sync (G)))
tt( username map = /usr/local/samba/lib/users.map)
label(utmp)
-dit(bf(utmp (G)))
+dit(bf(utmp (S)))
This boolean parameter is only available if Samba has been configured and compiled
with the option tt(--with-utmp). If set to True then Samba will attempt
This is a list of users that are given read-write access to a
service. If the connecting user is in this list then they will be
-given write access, no matter what the link(bf("read only"))(readonly)
+given write access, no matter what the link(bf("writeable"))(writeable)
option is set to. The list can include group names using the @group
syntax.
bf(Example:)
tt( write list = admin, root, @staff)
+label(writecachesize)
+dit(bf(write cache size (S)))
+
+This integer parameter (new with Samba 2.0.7) if set to non-zero causes Samba to create an in-memory
+cache for each oplocked file (it does bf(not) do this for non-oplocked files). All
+writes that the client does not request to be flushed directly to disk will be
+stored in this cache if possible. The cache is flushed onto disk when a write
+comes in whose offset would not fit into the cache or when the file is closed
+by the client. Reads for the file are also served from this cache if the data
+is stored within it.
+
+This cache allows Samba to batch client writes into a more efficient write
+size for RAID disks (ie. writes may be tuned to be the RAID stripe size) and
+can improve performance on systems where the disk subsystem is a bottleneck
+but there is free memory for userspace programs.
+
+The integer parameter specifies the size of this cache (per oplocked file)
+in bytes.
+
+ bf(Default:)
+tt( write cache size = 0)
+
+ bf(Example:)
+tt( write cache size = 262144)
+for a 256k cache size per file.
+
label(writeok)
dit(bf(write ok (S)))
manpageauthor()
The original Samba software and related utilities were created by
-Andrew Tridgell email(samba-bugs@samba.org). Samba is now developed
+Andrew Tridgell email(samba@samba.org). Samba is now developed
by the Samba Team as an Open Source project similar to the way the
Linux kernel is developed.
Source software, available at
url(bf(ftp://ftp.icce.rug.nl/pub/unix/))(ftp://ftp.icce.rug.nl/pub/unix/))
and updated for the Samba2.0 release by Jeremy Allison.
-email(samba-bugs@samba.org).
+email(samba@samba.org).
See url(bf(samba (7)))(samba.7.html) to find out how to get a full
list of contributors and details on how to submit bug reports,
git.samba.org / kai / samba.git / commitdiff