2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
6 Largely re-written by Andrew Tridgell, September 1994
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
12 Copyright (C) Michael Adam 2008
14 This program is free software; you can redistribute it and/or modify
15 it under the terms of the GNU General Public License as published by
16 the Free Software Foundation; either version 3 of the License, or
17 (at your option) any later version.
19 This program is distributed in the hope that it will be useful,
20 but WITHOUT ANY WARRANTY; without even the implied warranty of
21 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
22 GNU General Public License for more details.
24 You should have received a copy of the GNU General Public License
25 along with this program. If not, see <http://www.gnu.org/licenses/>.
31 * This module provides suitable callback functions for the params
32 * module. It builds the internal table of service details which is
33 * then used by the rest of the server.
37 * 1) add it to the global or service structure definition
38 * 2) add it to the parm_table
39 * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
40 * 4) If it's a global then initialise it in init_globals. If a local
41 * (ie. service) parameter then initialise it in the sDefault structure
45 * The configuration file is processed sequentially for speed. It is NOT
46 * accessed randomly as happens in 'real' Windows. For this reason, there
47 * is a fair bit of sequence-dependent code here - ie., code which assumes
48 * that certain things happen before others. In particular, the code which
49 * happens at the boundary between sections is delicately poised, so be
57 #ifdef HAVE_SYS_SYSCTL_H
58 #include <sys/sysctl.h>
61 #ifdef HAVE_HTTPCONNECTENCRYPT
62 #include <cups/http.h>
67 extern enum protocol_types Protocol;
68 extern userdom_struct current_user_info;
71 #define GLOBAL_NAME "global"
75 #define PRINTERS_NAME "printers"
79 #define HOMES_NAME "homes"
82 /* the special value for the include parameter
83 * to be interpreted not as a file name but to
84 * trigger loading of the global smb.conf options
86 #ifndef INCLUDE_REGISTRY_NAME
87 #define INCLUDE_REGISTRY_NAME "registry"
90 static bool in_client = False; /* Not in the client by default */
91 static struct smbconf_csn conf_last_csn;
93 #define CONFIG_BACKEND_FILE 0
94 #define CONFIG_BACKEND_REGISTRY 1
96 static int config_backend = CONFIG_BACKEND_FILE;
98 /* some helpful bits */
99 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
100 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
102 #define USERSHARE_VALID 1
103 #define USERSHARE_PENDING_DELETE 2
105 static bool defaults_saved = False;
107 struct param_opt_struct {
108 struct param_opt_struct *prev, *next;
115 * This structure describes global (ie., server-wide) parameters.
122 char *display_charset;
123 char *szPrintcapname;
124 char *szAddPortCommand;
125 char *szEnumPortsCommand;
126 char *szAddPrinterCommand;
127 char *szDeletePrinterCommand;
128 char *szOs2DriverMap;
134 char *szDefaultService;
138 char *szServerString;
139 char *szAutoServices;
140 char *szPasswdProgram;
144 char *szSMBPasswdFile;
146 char *szPassdbBackend;
147 char **szPreloadModules;
148 char *szPasswordServer;
149 char *szSocketOptions;
151 char *szAfsUsernameMap;
152 int iAfsTokenLifetime;
153 char *szLogNtTokenCommand;
159 char **szWINSservers;
161 char *szRemoteAnnounce;
162 char *szRemoteBrowseSync;
163 char *szSocketAddress;
164 char *szNISHomeMapName;
165 char *szAnnounceVersion; /* This is initialised in init_globals */
168 char **szNetbiosAliases;
169 char *szNetbiosScope;
170 char *szNameResolveOrder;
172 char *szAddUserScript;
173 char *szRenameUserScript;
174 char *szDelUserScript;
175 char *szAddGroupScript;
176 char *szDelGroupScript;
177 char *szAddUserToGroupScript;
178 char *szDelUserFromGroupScript;
179 char *szSetPrimaryGroupScript;
180 char *szAddMachineScript;
181 char *szShutdownScript;
182 char *szAbortShutdownScript;
183 char *szUsernameMapScript;
184 char *szCheckPasswordScript;
191 bool bPassdbExpandExplicit;
192 int AlgorithmicRidBase;
193 char *szTemplateHomedir;
194 char *szTemplateShell;
195 char *szWinbindSeparator;
196 bool bWinbindEnumUsers;
197 bool bWinbindEnumGroups;
198 bool bWinbindUseDefaultDomain;
199 bool bWinbindTrustedDomainsOnly;
200 bool bWinbindNestedGroups;
201 int winbind_expand_groups;
202 bool bWinbindRefreshTickets;
203 bool bWinbindOfflineLogon;
204 bool bWinbindNormalizeNames;
205 bool bWinbindRpcOnly;
206 bool bCreateKrb5Conf;
207 char *szIdmapBackend;
208 char *szIdmapAllocBackend;
209 char *szAddShareCommand;
210 char *szChangeShareCommand;
211 char *szDeleteShareCommand;
213 char *szGuestaccount;
214 char *szManglingMethod;
215 char **szServicesList;
216 char *szUsersharePath;
217 char *szUsershareTemplateShare;
218 char **szUsersharePrefixAllowList;
219 char **szUsersharePrefixDenyList;
226 int open_files_db_hash_size;
235 bool paranoid_server_security;
238 int iMaxSmbdProcesses;
239 bool bDisableSpoolss;
242 bool enhanced_browsing;
248 int announce_as; /* This is initialised in init_globals */
249 int machine_password_timeout;
251 int oplock_break_wait_time;
252 int winbind_cache_time;
253 int winbind_reconnect_delay;
254 int winbind_max_idle_children;
255 char **szWinbindNssInfo;
257 char *szLdapMachineSuffix;
258 char *szLdapUserSuffix;
259 char *szLdapIdmapSuffix;
260 char *szLdapGroupSuffix;
266 int ldap_debug_level;
267 int ldap_debug_threshold;
271 char *szIPrintServer;
273 char **szClusterAddresses;
275 int ldap_passwd_sync;
276 int ldap_replication_sleep;
277 int ldap_timeout; /* This is initialised in init_globals */
278 int ldap_connection_timeout;
281 bool bMsAddPrinterWizard;
286 int iPreferredMaster;
289 char **szInitLogonDelayedHosts;
291 bool bEncryptPasswords;
296 bool bObeyPamRestrictions;
298 int PrintcapCacheTime;
299 bool bLargeReadwrite;
306 bool bBindInterfacesOnly;
307 bool bPamPasswordChange;
308 bool bUnixPasswdSync;
309 bool bPasswdChatDebug;
310 int iPasswdChatTimeout;
314 bool bNTStatusSupport;
316 int iMaxStatCacheSize;
318 bool bAllowTrustedDomains;
322 bool bClientLanManAuth;
323 bool bClientNTLMv2Auth;
324 bool bClientPlaintextAuth;
325 bool bClientUseSpnego;
326 bool bDebugPrefixTimestamp;
327 bool bDebugHiresTimestamp;
331 bool bEnableCoreFiles;
334 bool bHostnameLookups;
335 bool bUnixExtensions;
336 bool bDisableNetbios;
337 char * szDedicatedKeytabFile;
339 bool bDeferSharingViolations;
340 bool bEnablePrivileges;
342 bool bUsershareOwnerOnly;
343 bool bUsershareAllowGuests;
344 bool bRegistryShares;
345 int restrict_anonymous;
346 int name_cache_timeout;
349 int client_ldap_sasl_wrapping;
350 int iUsershareMaxShares;
352 int iIdmapNegativeCacheTime;
356 struct param_opt_struct *param_opt;
357 int cups_connection_timeout;
358 char *szSMBPerfcountModule;
359 bool bMapUntrustedToDomain;
360 bool bFakeDirCreateTimes;
363 static struct global Globals;
366 * This structure describes a single service.
372 struct timespec usershare_last_mod;
376 char **szInvalidUsers;
384 char *szRootPostExec;
386 char *szPrintcommand;
389 char *szLppausecommand;
390 char *szLpresumecommand;
391 char *szQueuepausecommand;
392 char *szQueueresumecommand;
394 char *szPrintjobUsername;
402 char *szVetoOplockFiles;
408 char **printer_admin;
413 char *szAioWriteBehind;
417 int iMaxReportedPrintJobs;
420 int iCreate_force_mode;
422 int iSecurity_force_mode;
425 int iDir_Security_mask;
426 int iDir_Security_force_mode;
430 int iOplockContentionLimit;
435 bool bRootpreexecClose;
438 bool bShortCasePreserve;
440 bool bHideSpecialFiles;
441 bool bHideUnReadable;
442 bool bHideUnWriteableFiles;
444 bool bAccessBasedShareEnum;
449 bool bAdministrative_share;
455 bool bStoreCreateTime;
456 bool bStoreDosAttributes;
469 bool bStrictAllocate;
472 struct bitmap *copymap;
473 bool bDeleteReadonly;
475 bool bDeleteVetoFiles;
478 bool bDosFiletimeResolution;
484 bool bUseClientDriver;
485 bool bDefaultDevmode;
486 bool bForcePrintername;
488 bool bForceUnknownAclUser;
491 bool bMap_acl_inherit;
494 bool bAclCheckPermissions;
495 bool bAclMapFullControl;
496 bool bAclGroupControl;
498 bool bKernelChangeNotify;
499 int iallocation_roundup_size;
503 int iDirectoryNameCacheSize;
505 struct param_opt_struct *param_opt;
507 char dummy[3]; /* for alignment */
511 /* This is a default service used to prime a services structure */
512 static struct service sDefault = {
514 False, /* not autoloaded */
515 0, /* not a usershare */
516 {0, }, /* No last mod time */
517 NULL, /* szService */
519 NULL, /* szUsername */
520 NULL, /* szInvalidUsers */
521 NULL, /* szValidUsers */
522 NULL, /* szAdminUsers */
524 NULL, /* szInclude */
525 NULL, /* szPreExec */
526 NULL, /* szPostExec */
527 NULL, /* szRootPreExec */
528 NULL, /* szRootPostExec */
529 NULL, /* szCupsOptions */
530 NULL, /* szPrintcommand */
531 NULL, /* szLpqcommand */
532 NULL, /* szLprmcommand */
533 NULL, /* szLppausecommand */
534 NULL, /* szLpresumecommand */
535 NULL, /* szQueuepausecommand */
536 NULL, /* szQueueresumecommand */
537 NULL, /* szPrintername */
538 NULL, /* szPrintjobUsername */
539 NULL, /* szDontdescend */
540 NULL, /* szHostsallow */
541 NULL, /* szHostsdeny */
542 NULL, /* szMagicScript */
543 NULL, /* szMagicOutput */
544 NULL, /* szVetoFiles */
545 NULL, /* szHideFiles */
546 NULL, /* szVetoOplockFiles */
548 NULL, /* force user */
549 NULL, /* force group */
551 NULL, /* writelist */
552 NULL, /* printer admin */
555 NULL, /* vfs objects */
556 NULL, /* szMSDfsProxy */
557 NULL, /* szAioWriteBehind */
559 0, /* iMinPrintSpace */
560 1000, /* iMaxPrintJobs */
561 0, /* iMaxReportedPrintJobs */
562 0, /* iWriteCacheSize */
563 0744, /* iCreate_mask */
564 0000, /* iCreate_force_mode */
565 0777, /* iSecurity_mask */
566 0, /* iSecurity_force_mode */
567 0755, /* iDir_mask */
568 0000, /* iDir_force_mode */
569 0777, /* iDir_Security_mask */
570 0, /* iDir_Security_force_mode */
571 0, /* iMaxConnections */
572 CASE_LOWER, /* iDefaultCase */
573 DEFAULT_PRINTING, /* iPrinting */
574 2, /* iOplockContentionLimit */
576 1024, /* iBlock_size */
577 0, /* iDfreeCacheTime */
578 False, /* bPreexecClose */
579 False, /* bRootpreexecClose */
580 Auto, /* case sensitive */
581 True, /* case preserve */
582 True, /* short case preserve */
583 True, /* bHideDotFiles */
584 False, /* bHideSpecialFiles */
585 False, /* bHideUnReadable */
586 False, /* bHideUnWriteableFiles */
587 True, /* bBrowseable */
588 False, /* bAccessBasedShareEnum */
589 True, /* bAvailable */
590 True, /* bRead_only */
591 True, /* bNo_set_dir */
592 False, /* bGuest_only */
593 False, /* bAdministrative_share */
594 False, /* bGuest_ok */
595 False, /* bPrint_ok */
596 False, /* bMap_system */
597 False, /* bMap_hidden */
598 True, /* bMap_archive */
599 False, /* bStoreCreateTime */
600 False, /* bStoreDosAttributes */
601 False, /* bDmapiSupport */
603 Auto, /* iStrictLocking */
604 True, /* bPosixLocking */
605 True, /* bShareModes */
607 True, /* bLevel2OpLocks */
608 False, /* bOnlyUser */
609 True, /* bMangledNames */
610 True, /* bWidelinks */
611 True, /* bSymlinks */
612 False, /* bSyncAlways */
613 False, /* bStrictAllocate */
614 False, /* bStrictSync */
615 '~', /* magic char */
617 False, /* bDeleteReadonly */
618 False, /* bFakeOplocks */
619 False, /* bDeleteVetoFiles */
620 False, /* bDosFilemode */
621 True, /* bDosFiletimes */
622 False, /* bDosFiletimeResolution */
623 True, /* bBlockingLocks */
624 False, /* bInheritPerms */
625 False, /* bInheritACLS */
626 False, /* bInheritOwner */
627 False, /* bMSDfsRoot */
628 False, /* bUseClientDriver */
629 True, /* bDefaultDevmode */
630 False, /* bForcePrintername */
631 True, /* bNTAclSupport */
632 False, /* bForceUnknownAclUser */
633 False, /* bUseSendfile */
634 False, /* bProfileAcls */
635 False, /* bMap_acl_inherit */
636 False, /* bAfs_Share */
637 False, /* bEASupport */
638 True, /* bAclCheckPermissions */
639 True, /* bAclMapFullControl */
640 False, /* bAclGroupControl */
641 True, /* bChangeNotify */
642 True, /* bKernelChangeNotify */
643 SMB_ROUNDUP_ALLOCATION_SIZE, /* iallocation_roundup_size */
644 0, /* iAioReadSize */
645 0, /* iAioWriteSize */
646 MAP_READONLY_YES, /* iMap_readonly */
647 #ifdef BROKEN_DIRECTORY_HANDLING
648 0, /* iDirectoryNameCacheSize */
650 100, /* iDirectoryNameCacheSize */
652 Auto, /* ismb_encrypt */
653 NULL, /* Parametric options */
658 /* local variables */
659 static struct service **ServicePtrs = NULL;
660 static int iNumServices = 0;
661 static int iServiceIndex = 0;
662 static struct db_context *ServiceHash;
663 static int *invalid_services = NULL;
664 static int num_invalid_services = 0;
665 static bool bInGlobalSection = True;
666 static bool bGlobalOnly = False;
667 static int server_role;
668 static int default_server_announce;
670 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
672 /* prototypes for the special type handlers */
673 static bool handle_include( int snum, const char *pszParmValue, char **ptr);
674 static bool handle_copy( int snum, const char *pszParmValue, char **ptr);
675 static bool handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
676 static bool handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
677 static bool handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
678 static bool handle_debug_list( int snum, const char *pszParmValue, char **ptr );
679 static bool handle_workgroup( int snum, const char *pszParmValue, char **ptr );
680 static bool handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
681 static bool handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
682 static bool handle_charset( int snum, const char *pszParmValue, char **ptr );
683 static bool handle_printing( int snum, const char *pszParmValue, char **ptr);
684 static bool handle_ldap_debug_level( int snum, const char *pszParmValue, char **ptr);
686 static void set_server_role(void);
687 static void set_default_server_announce_type(void);
688 static void set_allowed_client_auth(void);
690 static void *lp_local_ptr(struct service *service, void *ptr);
692 static void add_to_file_list(const char *fname, const char *subfname);
694 static const struct enum_list enum_protocol[] = {
695 {PROTOCOL_SMB2, "SMB2"},
696 {PROTOCOL_NT1, "NT1"},
697 {PROTOCOL_LANMAN2, "LANMAN2"},
698 {PROTOCOL_LANMAN1, "LANMAN1"},
699 {PROTOCOL_CORE, "CORE"},
700 {PROTOCOL_COREPLUS, "COREPLUS"},
701 {PROTOCOL_COREPLUS, "CORE+"},
705 static const struct enum_list enum_security[] = {
706 {SEC_SHARE, "SHARE"},
708 {SEC_SERVER, "SERVER"},
709 {SEC_DOMAIN, "DOMAIN"},
716 static const struct enum_list enum_printing[] = {
717 {PRINT_SYSV, "sysv"},
719 {PRINT_HPUX, "hpux"},
723 {PRINT_LPRNG, "lprng"},
724 {PRINT_CUPS, "cups"},
725 {PRINT_IPRINT, "iprint"},
727 {PRINT_LPROS2, "os2"},
729 {PRINT_TEST, "test"},
731 #endif /* DEVELOPER */
735 static const struct enum_list enum_ldap_sasl_wrapping[] = {
737 {ADS_AUTH_SASL_SIGN, "sign"},
738 {ADS_AUTH_SASL_SEAL, "seal"},
742 static const struct enum_list enum_ldap_ssl[] = {
743 {LDAP_SSL_OFF, "no"},
744 {LDAP_SSL_OFF, "off"},
745 {LDAP_SSL_START_TLS, "start tls"},
746 {LDAP_SSL_START_TLS, "start_tls"},
750 static const struct enum_list enum_ldap_passwd_sync[] = {
751 {LDAP_PASSWD_SYNC_OFF, "no"},
752 {LDAP_PASSWD_SYNC_OFF, "off"},
753 {LDAP_PASSWD_SYNC_ON, "yes"},
754 {LDAP_PASSWD_SYNC_ON, "on"},
755 {LDAP_PASSWD_SYNC_ONLY, "only"},
759 /* Types of machine we can announce as. */
760 #define ANNOUNCE_AS_NT_SERVER 1
761 #define ANNOUNCE_AS_WIN95 2
762 #define ANNOUNCE_AS_WFW 3
763 #define ANNOUNCE_AS_NT_WORKSTATION 4
765 static const struct enum_list enum_announce_as[] = {
766 {ANNOUNCE_AS_NT_SERVER, "NT"},
767 {ANNOUNCE_AS_NT_SERVER, "NT Server"},
768 {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
769 {ANNOUNCE_AS_WIN95, "win95"},
770 {ANNOUNCE_AS_WFW, "WfW"},
774 static const struct enum_list enum_map_readonly[] = {
775 {MAP_READONLY_NO, "no"},
776 {MAP_READONLY_NO, "false"},
777 {MAP_READONLY_NO, "0"},
778 {MAP_READONLY_YES, "yes"},
779 {MAP_READONLY_YES, "true"},
780 {MAP_READONLY_YES, "1"},
781 {MAP_READONLY_PERMISSIONS, "permissions"},
782 {MAP_READONLY_PERMISSIONS, "perms"},
786 static const struct enum_list enum_case[] = {
787 {CASE_LOWER, "lower"},
788 {CASE_UPPER, "upper"},
794 static const struct enum_list enum_bool_auto[] = {
805 /* Client-side offline caching policy types */
806 #define CSC_POLICY_MANUAL 0
807 #define CSC_POLICY_DOCUMENTS 1
808 #define CSC_POLICY_PROGRAMS 2
809 #define CSC_POLICY_DISABLE 3
811 static const struct enum_list enum_csc_policy[] = {
812 {CSC_POLICY_MANUAL, "manual"},
813 {CSC_POLICY_DOCUMENTS, "documents"},
814 {CSC_POLICY_PROGRAMS, "programs"},
815 {CSC_POLICY_DISABLE, "disable"},
819 /* SMB signing types. */
820 static const struct enum_list enum_smb_signing_vals[] = {
832 {Required, "required"},
833 {Required, "mandatory"},
835 {Required, "forced"},
836 {Required, "enforced"},
840 /* ACL compatibility options. */
841 static const struct enum_list enum_acl_compat_vals[] = {
842 { ACL_COMPAT_AUTO, "auto" },
843 { ACL_COMPAT_WINNT, "winnt" },
844 { ACL_COMPAT_WIN2K, "win2k" },
849 Do you want session setups at user level security with a invalid
850 password to be rejected or allowed in as guest? WinNT rejects them
851 but it can be a pain as it means "net view" needs to use a password
853 You have 3 choices in the setting of map_to_guest:
855 "Never" means session setups with an invalid password
856 are rejected. This is the default.
858 "Bad User" means session setups with an invalid password
859 are rejected, unless the username does not exist, in which case it
860 is treated as a guest login
862 "Bad Password" means session setups with an invalid password
863 are treated as a guest login
865 Note that map_to_guest only has an effect in user or server
869 static const struct enum_list enum_map_to_guest[] = {
870 {NEVER_MAP_TO_GUEST, "Never"},
871 {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
872 {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
873 {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
877 /* Config backend options */
879 static const struct enum_list enum_config_backend[] = {
880 {CONFIG_BACKEND_FILE, "file"},
881 {CONFIG_BACKEND_REGISTRY, "registry"},
885 /* ADS kerberos ticket verification options */
887 static const struct enum_list enum_kerberos_method[] = {
888 {KERBEROS_VERIFY_SECRETS, "default"},
889 {KERBEROS_VERIFY_SECRETS, "secrets only"},
890 {KERBEROS_VERIFY_SYSTEM_KEYTAB, "system keytab"},
891 {KERBEROS_VERIFY_DEDICATED_KEYTAB, "dedicated keytab"},
892 {KERBEROS_VERIFY_SECRETS_AND_KEYTAB, "secrets and keytab"},
896 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
898 * The FLAG_HIDE is explicit. Parameters set this way do NOT appear in any edit
899 * screen in SWAT. This is used to exclude parameters as well as to squash all
900 * parameters that have been duplicated by pseudonyms.
902 * NOTE: To display a parameter in BASIC view set FLAG_BASIC
903 * Any parameter that does NOT have FLAG_ADVANCED will not disply at all
904 * Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
907 * NOTE2: Handling of duplicated (synonym) parameters:
908 * Only the first occurance of a parameter should be enabled by FLAG_BASIC
909 * and/or FLAG_ADVANCED. All duplicates following the first mention should be
910 * set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
911 * name first, and all synonyms must follow it with the FLAG_HIDE attribute.
914 static struct parm_struct parm_table[] = {
915 {N_("Base Options"), P_SEP, P_SEPARATOR},
918 .label = "dos charset",
921 .ptr = &Globals.dos_charset,
922 .special = handle_charset,
924 .flags = FLAG_ADVANCED
927 .label = "unix charset",
930 .ptr = &Globals.unix_charset,
931 .special = handle_charset,
933 .flags = FLAG_ADVANCED
936 .label = "display charset",
939 .ptr = &Globals.display_charset,
940 .special = handle_charset,
942 .flags = FLAG_ADVANCED
948 .ptr = &sDefault.comment,
951 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT
957 .ptr = &sDefault.szPath,
960 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
963 .label = "directory",
966 .ptr = &sDefault.szPath,
972 .label = "workgroup",
975 .ptr = &Globals.szWorkgroup,
976 .special = handle_workgroup,
978 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
985 .ptr = &Globals.szRealm,
988 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
992 .label = "netbios name",
995 .ptr = &Globals.szNetbiosName,
996 .special = handle_netbios_name,
998 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1001 .label = "netbios aliases",
1003 .p_class = P_GLOBAL,
1004 .ptr = &Globals.szNetbiosAliases,
1005 .special = handle_netbios_aliases,
1007 .flags = FLAG_ADVANCED,
1010 .label = "netbios scope",
1012 .p_class = P_GLOBAL,
1013 .ptr = &Globals.szNetbiosScope,
1014 .special = handle_netbios_scope,
1016 .flags = FLAG_ADVANCED,
1019 .label = "server string",
1021 .p_class = P_GLOBAL,
1022 .ptr = &Globals.szServerString,
1025 .flags = FLAG_BASIC | FLAG_ADVANCED,
1028 .label = "interfaces",
1030 .p_class = P_GLOBAL,
1031 .ptr = &Globals.szInterfaces,
1034 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1037 .label = "bind interfaces only",
1039 .p_class = P_GLOBAL,
1040 .ptr = &Globals.bBindInterfacesOnly,
1043 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1046 .label = "config backend",
1048 .p_class = P_GLOBAL,
1049 .ptr = &Globals.ConfigBackend,
1051 .enum_list = enum_config_backend,
1052 .flags = FLAG_HIDE|FLAG_ADVANCED|FLAG_META,
1055 {N_("Security Options"), P_SEP, P_SEPARATOR},
1058 .label = "security",
1060 .p_class = P_GLOBAL,
1061 .ptr = &Globals.security,
1063 .enum_list = enum_security,
1064 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1067 .label = "auth methods",
1069 .p_class = P_GLOBAL,
1070 .ptr = &Globals.AuthMethods,
1073 .flags = FLAG_ADVANCED,
1076 .label = "encrypt passwords",
1078 .p_class = P_GLOBAL,
1079 .ptr = &Globals.bEncryptPasswords,
1082 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1085 .label = "update encrypted",
1087 .p_class = P_GLOBAL,
1088 .ptr = &Globals.bUpdateEncrypt,
1091 .flags = FLAG_ADVANCED,
1094 .label = "client schannel",
1096 .p_class = P_GLOBAL,
1097 .ptr = &Globals.clientSchannel,
1099 .enum_list = enum_bool_auto,
1100 .flags = FLAG_BASIC | FLAG_ADVANCED,
1103 .label = "server schannel",
1105 .p_class = P_GLOBAL,
1106 .ptr = &Globals.serverSchannel,
1108 .enum_list = enum_bool_auto,
1109 .flags = FLAG_BASIC | FLAG_ADVANCED,
1112 .label = "allow trusted domains",
1114 .p_class = P_GLOBAL,
1115 .ptr = &Globals.bAllowTrustedDomains,
1118 .flags = FLAG_ADVANCED,
1121 .label = "map to guest",
1123 .p_class = P_GLOBAL,
1124 .ptr = &Globals.map_to_guest,
1126 .enum_list = enum_map_to_guest,
1127 .flags = FLAG_ADVANCED,
1130 .label = "null passwords",
1132 .p_class = P_GLOBAL,
1133 .ptr = &Globals.bNullPasswords,
1136 .flags = FLAG_ADVANCED,
1139 .label = "obey pam restrictions",
1141 .p_class = P_GLOBAL,
1142 .ptr = &Globals.bObeyPamRestrictions,
1145 .flags = FLAG_ADVANCED,
1148 .label = "password server",
1150 .p_class = P_GLOBAL,
1151 .ptr = &Globals.szPasswordServer,
1154 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1157 .label = "smb passwd file",
1159 .p_class = P_GLOBAL,
1160 .ptr = &Globals.szSMBPasswdFile,
1163 .flags = FLAG_ADVANCED,
1166 .label = "private dir",
1168 .p_class = P_GLOBAL,
1169 .ptr = &Globals.szPrivateDir,
1172 .flags = FLAG_ADVANCED,
1175 .label = "passdb backend",
1177 .p_class = P_GLOBAL,
1178 .ptr = &Globals.szPassdbBackend,
1181 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1184 .label = "algorithmic rid base",
1186 .p_class = P_GLOBAL,
1187 .ptr = &Globals.AlgorithmicRidBase,
1190 .flags = FLAG_ADVANCED,
1193 .label = "root directory",
1195 .p_class = P_GLOBAL,
1196 .ptr = &Globals.szRootdir,
1199 .flags = FLAG_ADVANCED,
1202 .label = "root dir",
1204 .p_class = P_GLOBAL,
1205 .ptr = &Globals.szRootdir,
1213 .p_class = P_GLOBAL,
1214 .ptr = &Globals.szRootdir,
1220 .label = "guest account",
1222 .p_class = P_GLOBAL,
1223 .ptr = &Globals.szGuestaccount,
1226 .flags = FLAG_BASIC | FLAG_ADVANCED,
1229 .label = "enable privileges",
1231 .p_class = P_GLOBAL,
1232 .ptr = &Globals.bEnablePrivileges,
1235 .flags = FLAG_ADVANCED,
1239 .label = "pam password change",
1241 .p_class = P_GLOBAL,
1242 .ptr = &Globals.bPamPasswordChange,
1245 .flags = FLAG_ADVANCED,
1248 .label = "passwd program",
1250 .p_class = P_GLOBAL,
1251 .ptr = &Globals.szPasswdProgram,
1254 .flags = FLAG_ADVANCED,
1257 .label = "passwd chat",
1259 .p_class = P_GLOBAL,
1260 .ptr = &Globals.szPasswdChat,
1263 .flags = FLAG_ADVANCED,
1266 .label = "passwd chat debug",
1268 .p_class = P_GLOBAL,
1269 .ptr = &Globals.bPasswdChatDebug,
1272 .flags = FLAG_ADVANCED,
1275 .label = "passwd chat timeout",
1277 .p_class = P_GLOBAL,
1278 .ptr = &Globals.iPasswdChatTimeout,
1281 .flags = FLAG_ADVANCED,
1284 .label = "check password script",
1286 .p_class = P_GLOBAL,
1287 .ptr = &Globals.szCheckPasswordScript,
1290 .flags = FLAG_ADVANCED,
1293 .label = "username map",
1295 .p_class = P_GLOBAL,
1296 .ptr = &Globals.szUsernameMap,
1299 .flags = FLAG_ADVANCED,
1302 .label = "password level",
1304 .p_class = P_GLOBAL,
1305 .ptr = &Globals.pwordlevel,
1308 .flags = FLAG_ADVANCED,
1311 .label = "username level",
1313 .p_class = P_GLOBAL,
1314 .ptr = &Globals.unamelevel,
1317 .flags = FLAG_ADVANCED,
1320 .label = "unix password sync",
1322 .p_class = P_GLOBAL,
1323 .ptr = &Globals.bUnixPasswdSync,
1326 .flags = FLAG_ADVANCED,
1329 .label = "restrict anonymous",
1331 .p_class = P_GLOBAL,
1332 .ptr = &Globals.restrict_anonymous,
1335 .flags = FLAG_ADVANCED,
1338 .label = "lanman auth",
1340 .p_class = P_GLOBAL,
1341 .ptr = &Globals.bLanmanAuth,
1344 .flags = FLAG_ADVANCED,
1347 .label = "ntlm auth",
1349 .p_class = P_GLOBAL,
1350 .ptr = &Globals.bNTLMAuth,
1353 .flags = FLAG_ADVANCED,
1356 .label = "client NTLMv2 auth",
1358 .p_class = P_GLOBAL,
1359 .ptr = &Globals.bClientNTLMv2Auth,
1362 .flags = FLAG_ADVANCED,
1365 .label = "client lanman auth",
1367 .p_class = P_GLOBAL,
1368 .ptr = &Globals.bClientLanManAuth,
1371 .flags = FLAG_ADVANCED,
1374 .label = "client plaintext auth",
1376 .p_class = P_GLOBAL,
1377 .ptr = &Globals.bClientPlaintextAuth,
1380 .flags = FLAG_ADVANCED,
1383 .label = "username",
1386 .ptr = &sDefault.szUsername,
1389 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1395 .ptr = &sDefault.szUsername,
1404 .ptr = &sDefault.szUsername,
1410 .label = "invalid users",
1413 .ptr = &sDefault.szInvalidUsers,
1416 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1419 .label = "valid users",
1422 .ptr = &sDefault.szValidUsers,
1425 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1428 .label = "admin users",
1431 .ptr = &sDefault.szAdminUsers,
1434 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1437 .label = "read list",
1440 .ptr = &sDefault.readlist,
1443 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1446 .label = "write list",
1449 .ptr = &sDefault.writelist,
1452 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1455 .label = "printer admin",
1458 .ptr = &sDefault.printer_admin,
1461 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED,
1464 .label = "force user",
1467 .ptr = &sDefault.force_user,
1470 .flags = FLAG_ADVANCED | FLAG_SHARE,
1473 .label = "force group",
1476 .ptr = &sDefault.force_group,
1479 .flags = FLAG_ADVANCED | FLAG_SHARE,
1485 .ptr = &sDefault.force_group,
1488 .flags = FLAG_ADVANCED,
1491 .label = "read only",
1494 .ptr = &sDefault.bRead_only,
1497 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE,
1500 .label = "write ok",
1503 .ptr = &sDefault.bRead_only,
1509 .label = "writeable",
1512 .ptr = &sDefault.bRead_only,
1518 .label = "writable",
1521 .ptr = &sDefault.bRead_only,
1527 .label = "acl check permissions",
1530 .ptr = &sDefault.bAclCheckPermissions,
1533 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1536 .label = "acl group control",
1539 .ptr = &sDefault.bAclGroupControl,
1542 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1545 .label = "acl map full control",
1548 .ptr = &sDefault.bAclMapFullControl,
1551 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1554 .label = "create mask",
1557 .ptr = &sDefault.iCreate_mask,
1560 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1563 .label = "create mode",
1566 .ptr = &sDefault.iCreate_mask,
1572 .label = "force create mode",
1575 .ptr = &sDefault.iCreate_force_mode,
1578 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1581 .label = "security mask",
1584 .ptr = &sDefault.iSecurity_mask,
1587 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1590 .label = "force security mode",
1593 .ptr = &sDefault.iSecurity_force_mode,
1596 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1599 .label = "directory mask",
1602 .ptr = &sDefault.iDir_mask,
1605 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1608 .label = "directory mode",
1611 .ptr = &sDefault.iDir_mask,
1614 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1617 .label = "force directory mode",
1620 .ptr = &sDefault.iDir_force_mode,
1623 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1626 .label = "directory security mask",
1629 .ptr = &sDefault.iDir_Security_mask,
1632 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1635 .label = "force directory security mode",
1638 .ptr = &sDefault.iDir_Security_force_mode,
1641 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1644 .label = "force unknown acl user",
1647 .ptr = &sDefault.bForceUnknownAclUser,
1650 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1653 .label = "inherit permissions",
1656 .ptr = &sDefault.bInheritPerms,
1659 .flags = FLAG_ADVANCED | FLAG_SHARE,
1662 .label = "inherit acls",
1665 .ptr = &sDefault.bInheritACLS,
1668 .flags = FLAG_ADVANCED | FLAG_SHARE,
1671 .label = "inherit owner",
1674 .ptr = &sDefault.bInheritOwner,
1677 .flags = FLAG_ADVANCED | FLAG_SHARE,
1680 .label = "guest only",
1683 .ptr = &sDefault.bGuest_only,
1686 .flags = FLAG_ADVANCED | FLAG_SHARE,
1689 .label = "only guest",
1692 .ptr = &sDefault.bGuest_only,
1698 .label = "administrative share",
1701 .ptr = &sDefault.bAdministrative_share,
1704 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1708 .label = "guest ok",
1711 .ptr = &sDefault.bGuest_ok,
1714 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1720 .ptr = &sDefault.bGuest_ok,
1726 .label = "only user",
1729 .ptr = &sDefault.bOnlyUser,
1732 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED,
1735 .label = "hosts allow",
1738 .ptr = &sDefault.szHostsallow,
1741 .flags = FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1744 .label = "allow hosts",
1747 .ptr = &sDefault.szHostsallow,
1753 .label = "hosts deny",
1756 .ptr = &sDefault.szHostsdeny,
1759 .flags = FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1762 .label = "deny hosts",
1765 .ptr = &sDefault.szHostsdeny,
1771 .label = "preload modules",
1773 .p_class = P_GLOBAL,
1774 .ptr = &Globals.szPreloadModules,
1777 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1780 .label = "dedicated keytab file",
1782 .p_class = P_GLOBAL,
1783 .ptr = &Globals.szDedicatedKeytabFile,
1786 .flags = FLAG_ADVANCED,
1789 .label = "kerberos method",
1791 .p_class = P_GLOBAL,
1792 .ptr = &Globals.iKerberosMethod,
1794 .enum_list = enum_kerberos_method,
1795 .flags = FLAG_ADVANCED,
1798 .label = "map untrusted to domain",
1800 .p_class = P_GLOBAL,
1801 .ptr = &Globals.bMapUntrustedToDomain,
1804 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1808 {N_("Logging Options"), P_SEP, P_SEPARATOR},
1811 .label = "log level",
1813 .p_class = P_GLOBAL,
1814 .ptr = &Globals.szLogLevel,
1815 .special = handle_debug_list,
1817 .flags = FLAG_ADVANCED,
1820 .label = "debuglevel",
1822 .p_class = P_GLOBAL,
1823 .ptr = &Globals.szLogLevel,
1824 .special = handle_debug_list,
1831 .p_class = P_GLOBAL,
1832 .ptr = &Globals.syslog,
1835 .flags = FLAG_ADVANCED,
1838 .label = "syslog only",
1840 .p_class = P_GLOBAL,
1841 .ptr = &Globals.bSyslogOnly,
1844 .flags = FLAG_ADVANCED,
1847 .label = "log file",
1849 .p_class = P_GLOBAL,
1850 .ptr = &Globals.szLogFile,
1853 .flags = FLAG_ADVANCED,
1856 .label = "max log size",
1858 .p_class = P_GLOBAL,
1859 .ptr = &Globals.max_log_size,
1862 .flags = FLAG_ADVANCED,
1865 .label = "debug timestamp",
1867 .p_class = P_GLOBAL,
1868 .ptr = &Globals.bTimestampLogs,
1871 .flags = FLAG_ADVANCED,
1874 .label = "timestamp logs",
1876 .p_class = P_GLOBAL,
1877 .ptr = &Globals.bTimestampLogs,
1880 .flags = FLAG_ADVANCED,
1883 .label = "debug prefix timestamp",
1885 .p_class = P_GLOBAL,
1886 .ptr = &Globals.bDebugPrefixTimestamp,
1889 .flags = FLAG_ADVANCED,
1892 .label = "debug hires timestamp",
1894 .p_class = P_GLOBAL,
1895 .ptr = &Globals.bDebugHiresTimestamp,
1898 .flags = FLAG_ADVANCED,
1901 .label = "debug pid",
1903 .p_class = P_GLOBAL,
1904 .ptr = &Globals.bDebugPid,
1907 .flags = FLAG_ADVANCED,
1910 .label = "debug uid",
1912 .p_class = P_GLOBAL,
1913 .ptr = &Globals.bDebugUid,
1916 .flags = FLAG_ADVANCED,
1919 .label = "debug class",
1921 .p_class = P_GLOBAL,
1922 .ptr = &Globals.bDebugClass,
1925 .flags = FLAG_ADVANCED,
1928 .label = "enable core files",
1930 .p_class = P_GLOBAL,
1931 .ptr = &Globals.bEnableCoreFiles,
1934 .flags = FLAG_ADVANCED,
1937 {N_("Protocol Options"), P_SEP, P_SEPARATOR},
1940 .label = "allocation roundup size",
1943 .ptr = &sDefault.iallocation_roundup_size,
1946 .flags = FLAG_ADVANCED,
1949 .label = "aio read size",
1952 .ptr = &sDefault.iAioReadSize,
1955 .flags = FLAG_ADVANCED,
1958 .label = "aio write size",
1961 .ptr = &sDefault.iAioWriteSize,
1964 .flags = FLAG_ADVANCED,
1967 .label = "aio write behind",
1970 .ptr = &sDefault.szAioWriteBehind,
1973 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
1976 .label = "smb ports",
1978 .p_class = P_GLOBAL,
1979 .ptr = &Globals.smb_ports,
1982 .flags = FLAG_ADVANCED,
1985 .label = "large readwrite",
1987 .p_class = P_GLOBAL,
1988 .ptr = &Globals.bLargeReadwrite,
1991 .flags = FLAG_ADVANCED,
1994 .label = "max protocol",
1996 .p_class = P_GLOBAL,
1997 .ptr = &Globals.maxprotocol,
1999 .enum_list = enum_protocol,
2000 .flags = FLAG_ADVANCED,
2003 .label = "protocol",
2005 .p_class = P_GLOBAL,
2006 .ptr = &Globals.maxprotocol,
2008 .enum_list = enum_protocol,
2009 .flags = FLAG_ADVANCED,
2012 .label = "min protocol",
2014 .p_class = P_GLOBAL,
2015 .ptr = &Globals.minprotocol,
2017 .enum_list = enum_protocol,
2018 .flags = FLAG_ADVANCED,
2021 .label = "min receivefile size",
2023 .p_class = P_GLOBAL,
2024 .ptr = &Globals.iminreceivefile,
2027 .flags = FLAG_ADVANCED,
2030 .label = "read raw",
2032 .p_class = P_GLOBAL,
2033 .ptr = &Globals.bReadRaw,
2036 .flags = FLAG_ADVANCED,
2039 .label = "write raw",
2041 .p_class = P_GLOBAL,
2042 .ptr = &Globals.bWriteRaw,
2045 .flags = FLAG_ADVANCED,
2048 .label = "disable netbios",
2050 .p_class = P_GLOBAL,
2051 .ptr = &Globals.bDisableNetbios,
2054 .flags = FLAG_ADVANCED,
2057 .label = "reset on zero vc",
2059 .p_class = P_GLOBAL,
2060 .ptr = &Globals.bResetOnZeroVC,
2063 .flags = FLAG_ADVANCED,
2066 .label = "acl compatibility",
2068 .p_class = P_GLOBAL,
2069 .ptr = &Globals.iAclCompat,
2071 .enum_list = enum_acl_compat_vals,
2072 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2075 .label = "defer sharing violations",
2077 .p_class = P_GLOBAL,
2078 .ptr = &Globals.bDeferSharingViolations,
2081 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2084 .label = "ea support",
2087 .ptr = &sDefault.bEASupport,
2090 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2093 .label = "nt acl support",
2096 .ptr = &sDefault.bNTAclSupport,
2099 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2102 .label = "nt pipe support",
2104 .p_class = P_GLOBAL,
2105 .ptr = &Globals.bNTPipeSupport,
2108 .flags = FLAG_ADVANCED,
2111 .label = "nt status support",
2113 .p_class = P_GLOBAL,
2114 .ptr = &Globals.bNTStatusSupport,
2117 .flags = FLAG_ADVANCED,
2120 .label = "profile acls",
2123 .ptr = &sDefault.bProfileAcls,
2126 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
2129 .label = "announce version",
2131 .p_class = P_GLOBAL,
2132 .ptr = &Globals.szAnnounceVersion,
2135 .flags = FLAG_ADVANCED,
2138 .label = "announce as",
2140 .p_class = P_GLOBAL,
2141 .ptr = &Globals.announce_as,
2143 .enum_list = enum_announce_as,
2144 .flags = FLAG_ADVANCED,
2147 .label = "map acl inherit",
2150 .ptr = &sDefault.bMap_acl_inherit,
2153 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2156 .label = "afs share",
2159 .ptr = &sDefault.bAfs_Share,
2162 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2167 .p_class = P_GLOBAL,
2168 .ptr = &Globals.max_mux,
2171 .flags = FLAG_ADVANCED,
2174 .label = "max xmit",
2176 .p_class = P_GLOBAL,
2177 .ptr = &Globals.max_xmit,
2180 .flags = FLAG_ADVANCED,
2183 .label = "name resolve order",
2185 .p_class = P_GLOBAL,
2186 .ptr = &Globals.szNameResolveOrder,
2189 .flags = FLAG_ADVANCED | FLAG_WIZARD,
2194 .p_class = P_GLOBAL,
2195 .ptr = &Globals.max_ttl,
2198 .flags = FLAG_ADVANCED,
2201 .label = "max wins ttl",
2203 .p_class = P_GLOBAL,
2204 .ptr = &Globals.max_wins_ttl,
2207 .flags = FLAG_ADVANCED,
2210 .label = "min wins ttl",
2212 .p_class = P_GLOBAL,
2213 .ptr = &Globals.min_wins_ttl,
2216 .flags = FLAG_ADVANCED,
2219 .label = "time server",
2221 .p_class = P_GLOBAL,
2222 .ptr = &Globals.bTimeServer,
2225 .flags = FLAG_ADVANCED,
2228 .label = "unix extensions",
2230 .p_class = P_GLOBAL,
2231 .ptr = &Globals.bUnixExtensions,
2234 .flags = FLAG_ADVANCED,
2237 .label = "use spnego",
2239 .p_class = P_GLOBAL,
2240 .ptr = &Globals.bUseSpnego,
2243 .flags = FLAG_ADVANCED,
2246 .label = "client signing",
2248 .p_class = P_GLOBAL,
2249 .ptr = &Globals.client_signing,
2251 .enum_list = enum_smb_signing_vals,
2252 .flags = FLAG_ADVANCED,
2255 .label = "server signing",
2257 .p_class = P_GLOBAL,
2258 .ptr = &Globals.server_signing,
2260 .enum_list = enum_smb_signing_vals,
2261 .flags = FLAG_ADVANCED,
2264 .label = "smb encrypt",
2267 .ptr = &sDefault.ismb_encrypt,
2269 .enum_list = enum_smb_signing_vals,
2270 .flags = FLAG_ADVANCED,
2273 .label = "client use spnego",
2275 .p_class = P_GLOBAL,
2276 .ptr = &Globals.bClientUseSpnego,
2279 .flags = FLAG_ADVANCED,
2282 .label = "client ldap sasl wrapping",
2284 .p_class = P_GLOBAL,
2285 .ptr = &Globals.client_ldap_sasl_wrapping,
2287 .enum_list = enum_ldap_sasl_wrapping,
2288 .flags = FLAG_ADVANCED,
2291 .label = "enable asu support",
2293 .p_class = P_GLOBAL,
2294 .ptr = &Globals.bASUSupport,
2297 .flags = FLAG_ADVANCED,
2300 .label = "svcctl list",
2302 .p_class = P_GLOBAL,
2303 .ptr = &Globals.szServicesList,
2306 .flags = FLAG_ADVANCED,
2309 {N_("Tuning Options"), P_SEP, P_SEPARATOR},
2312 .label = "block size",
2315 .ptr = &sDefault.iBlock_size,
2318 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2321 .label = "deadtime",
2323 .p_class = P_GLOBAL,
2324 .ptr = &Globals.deadtime,
2327 .flags = FLAG_ADVANCED,
2330 .label = "getwd cache",
2332 .p_class = P_GLOBAL,
2333 .ptr = &Globals.getwd_cache,
2336 .flags = FLAG_ADVANCED,
2339 .label = "keepalive",
2341 .p_class = P_GLOBAL,
2342 .ptr = &Globals.iKeepalive,
2345 .flags = FLAG_ADVANCED,
2348 .label = "change notify",
2351 .ptr = &sDefault.bChangeNotify,
2354 .flags = FLAG_ADVANCED | FLAG_SHARE,
2357 .label = "directory name cache size",
2360 .ptr = &sDefault.iDirectoryNameCacheSize,
2363 .flags = FLAG_ADVANCED | FLAG_SHARE,
2366 .label = "kernel change notify",
2369 .ptr = &sDefault.bKernelChangeNotify,
2372 .flags = FLAG_ADVANCED | FLAG_SHARE,
2375 .label = "lpq cache time",
2377 .p_class = P_GLOBAL,
2378 .ptr = &Globals.lpqcachetime,
2381 .flags = FLAG_ADVANCED,
2384 .label = "max smbd processes",
2386 .p_class = P_GLOBAL,
2387 .ptr = &Globals.iMaxSmbdProcesses,
2390 .flags = FLAG_ADVANCED,
2393 .label = "max connections",
2396 .ptr = &sDefault.iMaxConnections,
2399 .flags = FLAG_ADVANCED | FLAG_SHARE,
2402 .label = "paranoid server security",
2404 .p_class = P_GLOBAL,
2405 .ptr = &Globals.paranoid_server_security,
2408 .flags = FLAG_ADVANCED,
2411 .label = "max disk size",
2413 .p_class = P_GLOBAL,
2414 .ptr = &Globals.maxdisksize,
2417 .flags = FLAG_ADVANCED,
2420 .label = "max open files",
2422 .p_class = P_GLOBAL,
2423 .ptr = &Globals.max_open_files,
2426 .flags = FLAG_ADVANCED,
2429 .label = "min print space",
2432 .ptr = &sDefault.iMinPrintSpace,
2435 .flags = FLAG_ADVANCED | FLAG_PRINT,
2438 .label = "socket options",
2440 .p_class = P_GLOBAL,
2441 .ptr = &Globals.szSocketOptions,
2444 .flags = FLAG_ADVANCED,
2447 .label = "strict allocate",
2450 .ptr = &sDefault.bStrictAllocate,
2453 .flags = FLAG_ADVANCED | FLAG_SHARE,
2456 .label = "strict sync",
2459 .ptr = &sDefault.bStrictSync,
2462 .flags = FLAG_ADVANCED | FLAG_SHARE,
2465 .label = "sync always",
2468 .ptr = &sDefault.bSyncAlways,
2471 .flags = FLAG_ADVANCED | FLAG_SHARE,
2474 .label = "use mmap",
2476 .p_class = P_GLOBAL,
2477 .ptr = &Globals.bUseMmap,
2480 .flags = FLAG_ADVANCED,
2483 .label = "use sendfile",
2486 .ptr = &sDefault.bUseSendfile,
2489 .flags = FLAG_ADVANCED | FLAG_SHARE,
2492 .label = "hostname lookups",
2494 .p_class = P_GLOBAL,
2495 .ptr = &Globals.bHostnameLookups,
2498 .flags = FLAG_ADVANCED,
2501 .label = "write cache size",
2504 .ptr = &sDefault.iWriteCacheSize,
2507 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED,
2510 .label = "name cache timeout",
2512 .p_class = P_GLOBAL,
2513 .ptr = &Globals.name_cache_timeout,
2516 .flags = FLAG_ADVANCED,
2519 .label = "ctdbd socket",
2521 .p_class = P_GLOBAL,
2522 .ptr = &Globals.ctdbdSocket,
2525 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2528 .label = "cluster addresses",
2530 .p_class = P_GLOBAL,
2531 .ptr = &Globals.szClusterAddresses,
2534 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2537 .label = "clustering",
2539 .p_class = P_GLOBAL,
2540 .ptr = &Globals.clustering,
2543 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2546 {N_("Printing Options"), P_SEP, P_SEPARATOR},
2549 .label = "max reported print jobs",
2552 .ptr = &sDefault.iMaxReportedPrintJobs,
2555 .flags = FLAG_ADVANCED | FLAG_PRINT,
2558 .label = "max print jobs",
2561 .ptr = &sDefault.iMaxPrintJobs,
2564 .flags = FLAG_ADVANCED | FLAG_PRINT,
2567 .label = "load printers",
2569 .p_class = P_GLOBAL,
2570 .ptr = &Globals.bLoadPrinters,
2573 .flags = FLAG_ADVANCED | FLAG_PRINT,
2576 .label = "printcap cache time",
2578 .p_class = P_GLOBAL,
2579 .ptr = &Globals.PrintcapCacheTime,
2582 .flags = FLAG_ADVANCED | FLAG_PRINT,
2585 .label = "printcap name",
2587 .p_class = P_GLOBAL,
2588 .ptr = &Globals.szPrintcapname,
2591 .flags = FLAG_ADVANCED | FLAG_PRINT,
2594 .label = "printcap",
2596 .p_class = P_GLOBAL,
2597 .ptr = &Globals.szPrintcapname,
2603 .label = "printable",
2606 .ptr = &sDefault.bPrint_ok,
2609 .flags = FLAG_ADVANCED | FLAG_PRINT,
2612 .label = "print ok",
2615 .ptr = &sDefault.bPrint_ok,
2621 .label = "printing",
2624 .ptr = &sDefault.iPrinting,
2625 .special = handle_printing,
2626 .enum_list = enum_printing,
2627 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2630 .label = "cups options",
2633 .ptr = &sDefault.szCupsOptions,
2636 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2639 .label = "cups server",
2641 .p_class = P_GLOBAL,
2642 .ptr = &Globals.szCupsServer,
2645 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2648 .label = "cups encrypt",
2650 .p_class = P_GLOBAL,
2651 .ptr = &Globals.CupsEncrypt,
2653 .enum_list = enum_bool_auto,
2654 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2658 .label = "cups connection timeout",
2660 .p_class = P_GLOBAL,
2661 .ptr = &Globals.cups_connection_timeout,
2664 .flags = FLAG_ADVANCED,
2667 .label = "iprint server",
2669 .p_class = P_GLOBAL,
2670 .ptr = &Globals.szIPrintServer,
2673 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2676 .label = "print command",
2679 .ptr = &sDefault.szPrintcommand,
2682 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2685 .label = "disable spoolss",
2687 .p_class = P_GLOBAL,
2688 .ptr = &Globals.bDisableSpoolss,
2691 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2694 .label = "enable spoolss",
2696 .p_class = P_GLOBAL,
2697 .ptr = &Globals.bDisableSpoolss,
2703 .label = "lpq command",
2706 .ptr = &sDefault.szLpqcommand,
2709 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2712 .label = "lprm command",
2715 .ptr = &sDefault.szLprmcommand,
2718 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2721 .label = "lppause command",
2724 .ptr = &sDefault.szLppausecommand,
2727 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2730 .label = "lpresume command",
2733 .ptr = &sDefault.szLpresumecommand,
2736 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2739 .label = "queuepause command",
2742 .ptr = &sDefault.szQueuepausecommand,
2745 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2748 .label = "queueresume command",
2751 .ptr = &sDefault.szQueueresumecommand,
2754 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2757 .label = "addport command",
2759 .p_class = P_GLOBAL,
2760 .ptr = &Globals.szAddPortCommand,
2763 .flags = FLAG_ADVANCED,
2766 .label = "enumports command",
2768 .p_class = P_GLOBAL,
2769 .ptr = &Globals.szEnumPortsCommand,
2772 .flags = FLAG_ADVANCED,
2775 .label = "addprinter command",
2777 .p_class = P_GLOBAL,
2778 .ptr = &Globals.szAddPrinterCommand,
2781 .flags = FLAG_ADVANCED,
2784 .label = "deleteprinter command",
2786 .p_class = P_GLOBAL,
2787 .ptr = &Globals.szDeletePrinterCommand,
2790 .flags = FLAG_ADVANCED,
2793 .label = "show add printer wizard",
2795 .p_class = P_GLOBAL,
2796 .ptr = &Globals.bMsAddPrinterWizard,
2799 .flags = FLAG_ADVANCED,
2802 .label = "os2 driver map",
2804 .p_class = P_GLOBAL,
2805 .ptr = &Globals.szOs2DriverMap,
2808 .flags = FLAG_ADVANCED,
2812 .label = "printer name",
2815 .ptr = &sDefault.szPrintername,
2818 .flags = FLAG_ADVANCED | FLAG_PRINT,
2824 .ptr = &sDefault.szPrintername,
2830 .label = "use client driver",
2833 .ptr = &sDefault.bUseClientDriver,
2836 .flags = FLAG_ADVANCED | FLAG_PRINT,
2839 .label = "default devmode",
2842 .ptr = &sDefault.bDefaultDevmode,
2845 .flags = FLAG_ADVANCED | FLAG_PRINT,
2848 .label = "force printername",
2851 .ptr = &sDefault.bForcePrintername,
2854 .flags = FLAG_ADVANCED | FLAG_PRINT,
2857 .label = "printjob username",
2860 .ptr = &sDefault.szPrintjobUsername,
2863 .flags = FLAG_ADVANCED | FLAG_PRINT,
2866 {N_("Filename Handling"), P_SEP, P_SEPARATOR},
2869 .label = "mangling method",
2871 .p_class = P_GLOBAL,
2872 .ptr = &Globals.szManglingMethod,
2875 .flags = FLAG_ADVANCED,
2878 .label = "mangle prefix",
2880 .p_class = P_GLOBAL,
2881 .ptr = &Globals.mangle_prefix,
2884 .flags = FLAG_ADVANCED,
2888 .label = "default case",
2891 .ptr = &sDefault.iDefaultCase,
2893 .enum_list = enum_case,
2894 .flags = FLAG_ADVANCED | FLAG_SHARE,
2897 .label = "case sensitive",
2900 .ptr = &sDefault.iCaseSensitive,
2902 .enum_list = enum_bool_auto,
2903 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2906 .label = "casesignames",
2909 .ptr = &sDefault.iCaseSensitive,
2911 .enum_list = enum_bool_auto,
2912 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE,
2915 .label = "preserve case",
2918 .ptr = &sDefault.bCasePreserve,
2921 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2924 .label = "short preserve case",
2927 .ptr = &sDefault.bShortCasePreserve,
2930 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2933 .label = "mangling char",
2936 .ptr = &sDefault.magic_char,
2939 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2942 .label = "hide dot files",
2945 .ptr = &sDefault.bHideDotFiles,
2948 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2951 .label = "hide special files",
2954 .ptr = &sDefault.bHideSpecialFiles,
2957 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,