2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
6 Largely re-written by Andrew Tridgell, September 1994
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
12 Copyright (C) Michael Adam 2008
14 This program is free software; you can redistribute it and/or modify
15 it under the terms of the GNU General Public License as published by
16 the Free Software Foundation; either version 3 of the License, or
17 (at your option) any later version.
19 This program is distributed in the hope that it will be useful,
20 but WITHOUT ANY WARRANTY; without even the implied warranty of
21 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
22 GNU General Public License for more details.
24 You should have received a copy of the GNU General Public License
25 along with this program. If not, see <http://www.gnu.org/licenses/>.
31 * This module provides suitable callback functions for the params
32 * module. It builds the internal table of service details which is
33 * then used by the rest of the server.
37 * 1) add it to the global or service structure definition
38 * 2) add it to the parm_table
39 * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
40 * 4) If it's a global then initialise it in init_globals. If a local
41 * (ie. service) parameter then initialise it in the sDefault structure
45 * The configuration file is processed sequentially for speed. It is NOT
46 * accessed randomly as happens in 'real' Windows. For this reason, there
47 * is a fair bit of sequence-dependent code here - ie., code which assumes
48 * that certain things happen before others. In particular, the code which
49 * happens at the boundary between sections is delicately poised, so be
57 #ifdef HAVE_SYS_SYSCTL_H
58 #include <sys/sysctl.h>
61 #ifdef HAVE_HTTPCONNECTENCRYPT
62 #include <cups/http.h>
67 extern userdom_struct current_user_info;
70 #define GLOBAL_NAME "global"
74 #define PRINTERS_NAME "printers"
78 #define HOMES_NAME "homes"
81 /* the special value for the include parameter
82 * to be interpreted not as a file name but to
83 * trigger loading of the global smb.conf options
85 #ifndef INCLUDE_REGISTRY_NAME
86 #define INCLUDE_REGISTRY_NAME "registry"
89 static bool in_client = False; /* Not in the client by default */
90 static struct smbconf_csn conf_last_csn;
92 #define CONFIG_BACKEND_FILE 0
93 #define CONFIG_BACKEND_REGISTRY 1
95 static int config_backend = CONFIG_BACKEND_FILE;
97 /* some helpful bits */
98 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
99 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
101 #define USERSHARE_VALID 1
102 #define USERSHARE_PENDING_DELETE 2
104 static bool defaults_saved = False;
106 struct param_opt_struct {
107 struct param_opt_struct *prev, *next;
114 * This structure describes global (ie., server-wide) parameters.
121 char *display_charset;
122 char *szPrintcapname;
123 char *szAddPortCommand;
124 char *szEnumPortsCommand;
125 char *szAddPrinterCommand;
126 char *szDeletePrinterCommand;
127 char *szOs2DriverMap;
133 char *szDefaultService;
137 char *szServerString;
138 char *szAutoServices;
139 char *szPasswdProgram;
143 char *szSMBPasswdFile;
145 char *szPassdbBackend;
146 char **szPreloadModules;
147 char *szPasswordServer;
148 char *szSocketOptions;
150 char *szAfsUsernameMap;
151 int iAfsTokenLifetime;
152 char *szLogNtTokenCommand;
158 char **szWINSservers;
160 char *szRemoteAnnounce;
161 char *szRemoteBrowseSync;
162 char *szSocketAddress;
163 char *szNISHomeMapName;
164 char *szAnnounceVersion; /* This is initialised in init_globals */
167 char **szNetbiosAliases;
168 char *szNetbiosScope;
169 char *szNameResolveOrder;
171 char *szAddUserScript;
172 char *szRenameUserScript;
173 char *szDelUserScript;
174 char *szAddGroupScript;
175 char *szDelGroupScript;
176 char *szAddUserToGroupScript;
177 char *szDelUserFromGroupScript;
178 char *szSetPrimaryGroupScript;
179 char *szAddMachineScript;
180 char *szShutdownScript;
181 char *szAbortShutdownScript;
182 char *szUsernameMapScript;
183 char *szCheckPasswordScript;
190 bool bPassdbExpandExplicit;
191 int AlgorithmicRidBase;
192 char *szTemplateHomedir;
193 char *szTemplateShell;
194 char *szWinbindSeparator;
195 bool bWinbindEnumUsers;
196 bool bWinbindEnumGroups;
197 bool bWinbindUseDefaultDomain;
198 bool bWinbindTrustedDomainsOnly;
199 bool bWinbindNestedGroups;
200 int winbind_expand_groups;
201 bool bWinbindRefreshTickets;
202 bool bWinbindOfflineLogon;
203 bool bWinbindNormalizeNames;
204 bool bWinbindRpcOnly;
205 bool bCreateKrb5Conf;
206 char *szIdmapBackend;
207 char *szIdmapAllocBackend;
208 char *szAddShareCommand;
209 char *szChangeShareCommand;
210 char *szDeleteShareCommand;
212 char *szGuestaccount;
213 char *szManglingMethod;
214 char **szServicesList;
215 char *szUsersharePath;
216 char *szUsershareTemplateShare;
217 char **szUsersharePrefixAllowList;
218 char **szUsersharePrefixDenyList;
225 int open_files_db_hash_size;
234 bool paranoid_server_security;
237 int iMaxSmbdProcesses;
238 bool bDisableSpoolss;
241 bool enhanced_browsing;
247 int announce_as; /* This is initialised in init_globals */
248 int machine_password_timeout;
250 int oplock_break_wait_time;
251 int winbind_cache_time;
252 int winbind_reconnect_delay;
253 int winbind_max_idle_children;
254 char **szWinbindNssInfo;
256 char *szLdapMachineSuffix;
257 char *szLdapUserSuffix;
258 char *szLdapIdmapSuffix;
259 char *szLdapGroupSuffix;
262 int ldap_follow_referral;
265 int ldap_debug_level;
266 int ldap_debug_threshold;
270 char *szIPrintServer;
272 char **szClusterAddresses;
275 int ldap_passwd_sync;
276 int ldap_replication_sleep;
277 int ldap_timeout; /* This is initialised in init_globals */
278 int ldap_connection_timeout;
281 bool bMsAddPrinterWizard;
286 int iPreferredMaster;
289 char **szInitLogonDelayedHosts;
291 bool bEncryptPasswords;
296 bool bObeyPamRestrictions;
298 int PrintcapCacheTime;
299 bool bLargeReadwrite;
306 bool bBindInterfacesOnly;
307 bool bPamPasswordChange;
308 bool bUnixPasswdSync;
309 bool bPasswdChatDebug;
310 int iPasswdChatTimeout;
314 bool bNTStatusSupport;
316 int iMaxStatCacheSize;
318 bool bAllowTrustedDomains;
322 bool bClientLanManAuth;
323 bool bClientNTLMv2Auth;
324 bool bClientPlaintextAuth;
325 bool bClientUseSpnego;
326 bool bDebugPrefixTimestamp;
327 bool bDebugHiresTimestamp;
331 bool bEnableCoreFiles;
334 bool bHostnameLookups;
335 bool bUnixExtensions;
336 bool bDisableNetbios;
337 char * szDedicatedKeytabFile;
339 bool bDeferSharingViolations;
340 bool bEnablePrivileges;
342 bool bUsershareOwnerOnly;
343 bool bUsershareAllowGuests;
344 bool bRegistryShares;
345 int restrict_anonymous;
346 int name_cache_timeout;
349 int client_ldap_sasl_wrapping;
350 int iUsershareMaxShares;
352 int iIdmapNegativeCacheTime;
356 struct param_opt_struct *param_opt;
357 int cups_connection_timeout;
358 char *szSMBPerfcountModule;
359 bool bMapUntrustedToDomain;
362 static struct global Globals;
365 * This structure describes a single service.
371 struct timespec usershare_last_mod;
375 char **szInvalidUsers;
383 char *szRootPostExec;
385 char *szPrintcommand;
388 char *szLppausecommand;
389 char *szLpresumecommand;
390 char *szQueuepausecommand;
391 char *szQueueresumecommand;
393 char *szPrintjobUsername;
401 char *szVetoOplockFiles;
407 char **printer_admin;
412 char *szAioWriteBehind;
416 int iMaxReportedPrintJobs;
419 int iCreate_force_mode;
421 int iSecurity_force_mode;
424 int iDir_Security_mask;
425 int iDir_Security_force_mode;
429 int iOplockContentionLimit;
434 bool bRootpreexecClose;
437 bool bShortCasePreserve;
439 bool bHideSpecialFiles;
440 bool bHideUnReadable;
441 bool bHideUnWriteableFiles;
443 bool bAccessBasedShareEnum;
448 bool bAdministrative_share;
454 bool bStoreDosAttributes;
467 bool bStrictAllocate;
470 struct bitmap *copymap;
471 bool bDeleteReadonly;
473 bool bDeleteVetoFiles;
476 bool bDosFiletimeResolution;
477 bool bFakeDirCreateTimes;
483 bool bUseClientDriver;
484 bool bDefaultDevmode;
485 bool bForcePrintername;
487 bool bForceUnknownAclUser;
490 bool bMap_acl_inherit;
493 bool bAclCheckPermissions;
494 bool bAclMapFullControl;
495 bool bAclGroupControl;
497 bool bKernelChangeNotify;
498 int iallocation_roundup_size;
502 int iDirectoryNameCacheSize;
504 struct param_opt_struct *param_opt;
506 char dummy[3]; /* for alignment */
510 /* This is a default service used to prime a services structure */
511 static struct service sDefault = {
513 False, /* not autoloaded */
514 0, /* not a usershare */
515 {0, }, /* No last mod time */
516 NULL, /* szService */
518 NULL, /* szUsername */
519 NULL, /* szInvalidUsers */
520 NULL, /* szValidUsers */
521 NULL, /* szAdminUsers */
523 NULL, /* szInclude */
524 NULL, /* szPreExec */
525 NULL, /* szPostExec */
526 NULL, /* szRootPreExec */
527 NULL, /* szRootPostExec */
528 NULL, /* szCupsOptions */
529 NULL, /* szPrintcommand */
530 NULL, /* szLpqcommand */
531 NULL, /* szLprmcommand */
532 NULL, /* szLppausecommand */
533 NULL, /* szLpresumecommand */
534 NULL, /* szQueuepausecommand */
535 NULL, /* szQueueresumecommand */
536 NULL, /* szPrintername */
537 NULL, /* szPrintjobUsername */
538 NULL, /* szDontdescend */
539 NULL, /* szHostsallow */
540 NULL, /* szHostsdeny */
541 NULL, /* szMagicScript */
542 NULL, /* szMagicOutput */
543 NULL, /* szVetoFiles */
544 NULL, /* szHideFiles */
545 NULL, /* szVetoOplockFiles */
547 NULL, /* force user */
548 NULL, /* force group */
550 NULL, /* writelist */
551 NULL, /* printer admin */
554 NULL, /* vfs objects */
555 NULL, /* szMSDfsProxy */
556 NULL, /* szAioWriteBehind */
558 0, /* iMinPrintSpace */
559 1000, /* iMaxPrintJobs */
560 0, /* iMaxReportedPrintJobs */
561 0, /* iWriteCacheSize */
562 0744, /* iCreate_mask */
563 0000, /* iCreate_force_mode */
564 0777, /* iSecurity_mask */
565 0, /* iSecurity_force_mode */
566 0755, /* iDir_mask */
567 0000, /* iDir_force_mode */
568 0777, /* iDir_Security_mask */
569 0, /* iDir_Security_force_mode */
570 0, /* iMaxConnections */
571 CASE_LOWER, /* iDefaultCase */
572 DEFAULT_PRINTING, /* iPrinting */
573 2, /* iOplockContentionLimit */
575 1024, /* iBlock_size */
576 0, /* iDfreeCacheTime */
577 False, /* bPreexecClose */
578 False, /* bRootpreexecClose */
579 Auto, /* case sensitive */
580 True, /* case preserve */
581 True, /* short case preserve */
582 True, /* bHideDotFiles */
583 False, /* bHideSpecialFiles */
584 False, /* bHideUnReadable */
585 False, /* bHideUnWriteableFiles */
586 True, /* bBrowseable */
587 False, /* bAccessBasedShareEnum */
588 True, /* bAvailable */
589 True, /* bRead_only */
590 True, /* bNo_set_dir */
591 False, /* bGuest_only */
592 False, /* bAdministrative_share */
593 False, /* bGuest_ok */
594 False, /* bPrint_ok */
595 False, /* bMap_system */
596 False, /* bMap_hidden */
597 True, /* bMap_archive */
598 False, /* bStoreDosAttributes */
599 False, /* bDmapiSupport */
601 Auto, /* iStrictLocking */
602 True, /* bPosixLocking */
603 True, /* bShareModes */
605 True, /* bLevel2OpLocks */
606 False, /* bOnlyUser */
607 True, /* bMangledNames */
608 True, /* bWidelinks */
609 True, /* bSymlinks */
610 False, /* bSyncAlways */
611 False, /* bStrictAllocate */
612 False, /* bStrictSync */
613 '~', /* magic char */
615 False, /* bDeleteReadonly */
616 False, /* bFakeOplocks */
617 False, /* bDeleteVetoFiles */
618 False, /* bDosFilemode */
619 True, /* bDosFiletimes */
620 False, /* bDosFiletimeResolution */
621 False, /* bFakeDirCreateTimes */
622 True, /* bBlockingLocks */
623 False, /* bInheritPerms */
624 False, /* bInheritACLS */
625 False, /* bInheritOwner */
626 False, /* bMSDfsRoot */
627 False, /* bUseClientDriver */
628 True, /* bDefaultDevmode */
629 False, /* bForcePrintername */
630 True, /* bNTAclSupport */
631 False, /* bForceUnknownAclUser */
632 False, /* bUseSendfile */
633 False, /* bProfileAcls */
634 False, /* bMap_acl_inherit */
635 False, /* bAfs_Share */
636 False, /* bEASupport */
637 True, /* bAclCheckPermissions */
638 True, /* bAclMapFullControl */
639 False, /* bAclGroupControl */
640 True, /* bChangeNotify */
641 True, /* bKernelChangeNotify */
642 SMB_ROUNDUP_ALLOCATION_SIZE, /* iallocation_roundup_size */
643 0, /* iAioReadSize */
644 0, /* iAioWriteSize */
645 MAP_READONLY_YES, /* iMap_readonly */
646 #ifdef BROKEN_DIRECTORY_HANDLING
647 0, /* iDirectoryNameCacheSize */
649 100, /* iDirectoryNameCacheSize */
651 Auto, /* ismb_encrypt */
652 NULL, /* Parametric options */
657 /* local variables */
658 static struct service **ServicePtrs = NULL;
659 static int iNumServices = 0;
660 static int iServiceIndex = 0;
661 static struct db_context *ServiceHash;
662 static int *invalid_services = NULL;
663 static int num_invalid_services = 0;
664 static bool bInGlobalSection = True;
665 static bool bGlobalOnly = False;
666 static int server_role;
667 static int default_server_announce;
669 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
671 /* prototypes for the special type handlers */
672 static bool handle_include( int snum, const char *pszParmValue, char **ptr);
673 static bool handle_copy( int snum, const char *pszParmValue, char **ptr);
674 static bool handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
675 static bool handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
676 static bool handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
677 static bool handle_debug_list( int snum, const char *pszParmValue, char **ptr );
678 static bool handle_workgroup( int snum, const char *pszParmValue, char **ptr );
679 static bool handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
680 static bool handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
681 static bool handle_charset( int snum, const char *pszParmValue, char **ptr );
682 static bool handle_printing( int snum, const char *pszParmValue, char **ptr);
683 static bool handle_ldap_debug_level( int snum, const char *pszParmValue, char **ptr);
685 static void set_server_role(void);
686 static void set_default_server_announce_type(void);
687 static void set_allowed_client_auth(void);
689 static void *lp_local_ptr(struct service *service, void *ptr);
691 static void add_to_file_list(const char *fname, const char *subfname);
693 static const struct enum_list enum_protocol[] = {
694 {PROTOCOL_SMB2, "SMB2"},
695 {PROTOCOL_NT1, "NT1"},
696 {PROTOCOL_LANMAN2, "LANMAN2"},
697 {PROTOCOL_LANMAN1, "LANMAN1"},
698 {PROTOCOL_CORE, "CORE"},
699 {PROTOCOL_COREPLUS, "COREPLUS"},
700 {PROTOCOL_COREPLUS, "CORE+"},
704 static const struct enum_list enum_security[] = {
705 {SEC_SHARE, "SHARE"},
707 {SEC_SERVER, "SERVER"},
708 {SEC_DOMAIN, "DOMAIN"},
715 static const struct enum_list enum_printing[] = {
716 {PRINT_SYSV, "sysv"},
718 {PRINT_HPUX, "hpux"},
722 {PRINT_LPRNG, "lprng"},
723 {PRINT_CUPS, "cups"},
724 {PRINT_IPRINT, "iprint"},
726 {PRINT_LPROS2, "os2"},
728 {PRINT_TEST, "test"},
730 #endif /* DEVELOPER */
734 static const struct enum_list enum_ldap_sasl_wrapping[] = {
736 {ADS_AUTH_SASL_SIGN, "sign"},
737 {ADS_AUTH_SASL_SEAL, "seal"},
741 static const struct enum_list enum_ldap_ssl[] = {
742 {LDAP_SSL_OFF, "no"},
743 {LDAP_SSL_OFF, "off"},
744 {LDAP_SSL_START_TLS, "start tls"},
745 {LDAP_SSL_START_TLS, "start_tls"},
749 static const struct enum_list enum_ldap_passwd_sync[] = {
750 {LDAP_PASSWD_SYNC_OFF, "no"},
751 {LDAP_PASSWD_SYNC_OFF, "off"},
752 {LDAP_PASSWD_SYNC_ON, "yes"},
753 {LDAP_PASSWD_SYNC_ON, "on"},
754 {LDAP_PASSWD_SYNC_ONLY, "only"},
758 /* Types of machine we can announce as. */
759 #define ANNOUNCE_AS_NT_SERVER 1
760 #define ANNOUNCE_AS_WIN95 2
761 #define ANNOUNCE_AS_WFW 3
762 #define ANNOUNCE_AS_NT_WORKSTATION 4
764 static const struct enum_list enum_announce_as[] = {
765 {ANNOUNCE_AS_NT_SERVER, "NT"},
766 {ANNOUNCE_AS_NT_SERVER, "NT Server"},
767 {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
768 {ANNOUNCE_AS_WIN95, "win95"},
769 {ANNOUNCE_AS_WFW, "WfW"},
773 static const struct enum_list enum_map_readonly[] = {
774 {MAP_READONLY_NO, "no"},
775 {MAP_READONLY_NO, "false"},
776 {MAP_READONLY_NO, "0"},
777 {MAP_READONLY_YES, "yes"},
778 {MAP_READONLY_YES, "true"},
779 {MAP_READONLY_YES, "1"},
780 {MAP_READONLY_PERMISSIONS, "permissions"},
781 {MAP_READONLY_PERMISSIONS, "perms"},
785 static const struct enum_list enum_case[] = {
786 {CASE_LOWER, "lower"},
787 {CASE_UPPER, "upper"},
793 static const struct enum_list enum_bool_auto[] = {
804 /* Client-side offline caching policy types */
805 #define CSC_POLICY_MANUAL 0
806 #define CSC_POLICY_DOCUMENTS 1
807 #define CSC_POLICY_PROGRAMS 2
808 #define CSC_POLICY_DISABLE 3
810 static const struct enum_list enum_csc_policy[] = {
811 {CSC_POLICY_MANUAL, "manual"},
812 {CSC_POLICY_DOCUMENTS, "documents"},
813 {CSC_POLICY_PROGRAMS, "programs"},
814 {CSC_POLICY_DISABLE, "disable"},
818 /* SMB signing types. */
819 static const struct enum_list enum_smb_signing_vals[] = {
831 {Required, "required"},
832 {Required, "mandatory"},
834 {Required, "forced"},
835 {Required, "enforced"},
839 /* ACL compatibility options. */
840 static const struct enum_list enum_acl_compat_vals[] = {
841 { ACL_COMPAT_AUTO, "auto" },
842 { ACL_COMPAT_WINNT, "winnt" },
843 { ACL_COMPAT_WIN2K, "win2k" },
848 Do you want session setups at user level security with a invalid
849 password to be rejected or allowed in as guest? WinNT rejects them
850 but it can be a pain as it means "net view" needs to use a password
852 You have 3 choices in the setting of map_to_guest:
854 "Never" means session setups with an invalid password
855 are rejected. This is the default.
857 "Bad User" means session setups with an invalid password
858 are rejected, unless the username does not exist, in which case it
859 is treated as a guest login
861 "Bad Password" means session setups with an invalid password
862 are treated as a guest login
864 Note that map_to_guest only has an effect in user or server
868 static const struct enum_list enum_map_to_guest[] = {
869 {NEVER_MAP_TO_GUEST, "Never"},
870 {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
871 {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
872 {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
876 /* Config backend options */
878 static const struct enum_list enum_config_backend[] = {
879 {CONFIG_BACKEND_FILE, "file"},
880 {CONFIG_BACKEND_REGISTRY, "registry"},
884 /* ADS kerberos ticket verification options */
886 static const struct enum_list enum_kerberos_method[] = {
887 {KERBEROS_VERIFY_SECRETS, "default"},
888 {KERBEROS_VERIFY_SECRETS, "secrets only"},
889 {KERBEROS_VERIFY_SYSTEM_KEYTAB, "system keytab"},
890 {KERBEROS_VERIFY_DEDICATED_KEYTAB, "dedicated keytab"},
891 {KERBEROS_VERIFY_SECRETS_AND_KEYTAB, "secrets and keytab"},
895 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
897 * The FLAG_HIDE is explicit. Parameters set this way do NOT appear in any edit
898 * screen in SWAT. This is used to exclude parameters as well as to squash all
899 * parameters that have been duplicated by pseudonyms.
901 * NOTE: To display a parameter in BASIC view set FLAG_BASIC
902 * Any parameter that does NOT have FLAG_ADVANCED will not disply at all
903 * Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
906 * NOTE2: Handling of duplicated (synonym) parameters:
907 * Only the first occurance of a parameter should be enabled by FLAG_BASIC
908 * and/or FLAG_ADVANCED. All duplicates following the first mention should be
909 * set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
910 * name first, and all synonyms must follow it with the FLAG_HIDE attribute.
913 static struct parm_struct parm_table[] = {
914 {N_("Base Options"), P_SEP, P_SEPARATOR},
917 .label = "dos charset",
920 .ptr = &Globals.dos_charset,
921 .special = handle_charset,
923 .flags = FLAG_ADVANCED
926 .label = "unix charset",
929 .ptr = &Globals.unix_charset,
930 .special = handle_charset,
932 .flags = FLAG_ADVANCED
935 .label = "display charset",
938 .ptr = &Globals.display_charset,
939 .special = handle_charset,
941 .flags = FLAG_ADVANCED
947 .ptr = &sDefault.comment,
950 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT
956 .ptr = &sDefault.szPath,
959 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
962 .label = "directory",
965 .ptr = &sDefault.szPath,
971 .label = "workgroup",
974 .ptr = &Globals.szWorkgroup,
975 .special = handle_workgroup,
977 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
984 .ptr = &Globals.szRealm,
987 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
991 .label = "netbios name",
994 .ptr = &Globals.szNetbiosName,
995 .special = handle_netbios_name,
997 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1000 .label = "netbios aliases",
1002 .p_class = P_GLOBAL,
1003 .ptr = &Globals.szNetbiosAliases,
1004 .special = handle_netbios_aliases,
1006 .flags = FLAG_ADVANCED,
1009 .label = "netbios scope",
1011 .p_class = P_GLOBAL,
1012 .ptr = &Globals.szNetbiosScope,
1013 .special = handle_netbios_scope,
1015 .flags = FLAG_ADVANCED,
1018 .label = "server string",
1020 .p_class = P_GLOBAL,
1021 .ptr = &Globals.szServerString,
1024 .flags = FLAG_BASIC | FLAG_ADVANCED,
1027 .label = "interfaces",
1029 .p_class = P_GLOBAL,
1030 .ptr = &Globals.szInterfaces,
1033 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1036 .label = "bind interfaces only",
1038 .p_class = P_GLOBAL,
1039 .ptr = &Globals.bBindInterfacesOnly,
1042 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1045 .label = "config backend",
1047 .p_class = P_GLOBAL,
1048 .ptr = &Globals.ConfigBackend,
1050 .enum_list = enum_config_backend,
1051 .flags = FLAG_HIDE|FLAG_ADVANCED|FLAG_META,
1054 {N_("Security Options"), P_SEP, P_SEPARATOR},
1057 .label = "security",
1059 .p_class = P_GLOBAL,
1060 .ptr = &Globals.security,
1062 .enum_list = enum_security,
1063 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1066 .label = "auth methods",
1068 .p_class = P_GLOBAL,
1069 .ptr = &Globals.AuthMethods,
1072 .flags = FLAG_ADVANCED,
1075 .label = "encrypt passwords",
1077 .p_class = P_GLOBAL,
1078 .ptr = &Globals.bEncryptPasswords,
1081 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1084 .label = "update encrypted",
1086 .p_class = P_GLOBAL,
1087 .ptr = &Globals.bUpdateEncrypt,
1090 .flags = FLAG_ADVANCED,
1093 .label = "client schannel",
1095 .p_class = P_GLOBAL,
1096 .ptr = &Globals.clientSchannel,
1098 .enum_list = enum_bool_auto,
1099 .flags = FLAG_BASIC | FLAG_ADVANCED,
1102 .label = "server schannel",
1104 .p_class = P_GLOBAL,
1105 .ptr = &Globals.serverSchannel,
1107 .enum_list = enum_bool_auto,
1108 .flags = FLAG_BASIC | FLAG_ADVANCED,
1111 .label = "allow trusted domains",
1113 .p_class = P_GLOBAL,
1114 .ptr = &Globals.bAllowTrustedDomains,
1117 .flags = FLAG_ADVANCED,
1120 .label = "map to guest",
1122 .p_class = P_GLOBAL,
1123 .ptr = &Globals.map_to_guest,
1125 .enum_list = enum_map_to_guest,
1126 .flags = FLAG_ADVANCED,
1129 .label = "null passwords",
1131 .p_class = P_GLOBAL,
1132 .ptr = &Globals.bNullPasswords,
1135 .flags = FLAG_ADVANCED,
1138 .label = "obey pam restrictions",
1140 .p_class = P_GLOBAL,
1141 .ptr = &Globals.bObeyPamRestrictions,
1144 .flags = FLAG_ADVANCED,
1147 .label = "password server",
1149 .p_class = P_GLOBAL,
1150 .ptr = &Globals.szPasswordServer,
1153 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1156 .label = "smb passwd file",
1158 .p_class = P_GLOBAL,
1159 .ptr = &Globals.szSMBPasswdFile,
1162 .flags = FLAG_ADVANCED,
1165 .label = "private dir",
1167 .p_class = P_GLOBAL,
1168 .ptr = &Globals.szPrivateDir,
1171 .flags = FLAG_ADVANCED,
1174 .label = "passdb backend",
1176 .p_class = P_GLOBAL,
1177 .ptr = &Globals.szPassdbBackend,
1180 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1183 .label = "algorithmic rid base",
1185 .p_class = P_GLOBAL,
1186 .ptr = &Globals.AlgorithmicRidBase,
1189 .flags = FLAG_ADVANCED,
1192 .label = "root directory",
1194 .p_class = P_GLOBAL,
1195 .ptr = &Globals.szRootdir,
1198 .flags = FLAG_ADVANCED,
1201 .label = "root dir",
1203 .p_class = P_GLOBAL,
1204 .ptr = &Globals.szRootdir,
1212 .p_class = P_GLOBAL,
1213 .ptr = &Globals.szRootdir,
1219 .label = "guest account",
1221 .p_class = P_GLOBAL,
1222 .ptr = &Globals.szGuestaccount,
1225 .flags = FLAG_BASIC | FLAG_ADVANCED,
1228 .label = "enable privileges",
1230 .p_class = P_GLOBAL,
1231 .ptr = &Globals.bEnablePrivileges,
1234 .flags = FLAG_ADVANCED,
1238 .label = "pam password change",
1240 .p_class = P_GLOBAL,
1241 .ptr = &Globals.bPamPasswordChange,
1244 .flags = FLAG_ADVANCED,
1247 .label = "passwd program",
1249 .p_class = P_GLOBAL,
1250 .ptr = &Globals.szPasswdProgram,
1253 .flags = FLAG_ADVANCED,
1256 .label = "passwd chat",
1258 .p_class = P_GLOBAL,
1259 .ptr = &Globals.szPasswdChat,
1262 .flags = FLAG_ADVANCED,
1265 .label = "passwd chat debug",
1267 .p_class = P_GLOBAL,
1268 .ptr = &Globals.bPasswdChatDebug,
1271 .flags = FLAG_ADVANCED,
1274 .label = "passwd chat timeout",
1276 .p_class = P_GLOBAL,
1277 .ptr = &Globals.iPasswdChatTimeout,
1280 .flags = FLAG_ADVANCED,
1283 .label = "check password script",
1285 .p_class = P_GLOBAL,
1286 .ptr = &Globals.szCheckPasswordScript,
1289 .flags = FLAG_ADVANCED,
1292 .label = "username map",
1294 .p_class = P_GLOBAL,
1295 .ptr = &Globals.szUsernameMap,
1298 .flags = FLAG_ADVANCED,
1301 .label = "password level",
1303 .p_class = P_GLOBAL,
1304 .ptr = &Globals.pwordlevel,
1307 .flags = FLAG_ADVANCED,
1310 .label = "username level",
1312 .p_class = P_GLOBAL,
1313 .ptr = &Globals.unamelevel,
1316 .flags = FLAG_ADVANCED,
1319 .label = "unix password sync",
1321 .p_class = P_GLOBAL,
1322 .ptr = &Globals.bUnixPasswdSync,
1325 .flags = FLAG_ADVANCED,
1328 .label = "restrict anonymous",
1330 .p_class = P_GLOBAL,
1331 .ptr = &Globals.restrict_anonymous,
1334 .flags = FLAG_ADVANCED,
1337 .label = "lanman auth",
1339 .p_class = P_GLOBAL,
1340 .ptr = &Globals.bLanmanAuth,
1343 .flags = FLAG_ADVANCED,
1346 .label = "ntlm auth",
1348 .p_class = P_GLOBAL,
1349 .ptr = &Globals.bNTLMAuth,
1352 .flags = FLAG_ADVANCED,
1355 .label = "client NTLMv2 auth",
1357 .p_class = P_GLOBAL,
1358 .ptr = &Globals.bClientNTLMv2Auth,
1361 .flags = FLAG_ADVANCED,
1364 .label = "client lanman auth",
1366 .p_class = P_GLOBAL,
1367 .ptr = &Globals.bClientLanManAuth,
1370 .flags = FLAG_ADVANCED,
1373 .label = "client plaintext auth",
1375 .p_class = P_GLOBAL,
1376 .ptr = &Globals.bClientPlaintextAuth,
1379 .flags = FLAG_ADVANCED,
1382 .label = "username",
1385 .ptr = &sDefault.szUsername,
1388 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1394 .ptr = &sDefault.szUsername,
1403 .ptr = &sDefault.szUsername,
1409 .label = "invalid users",
1412 .ptr = &sDefault.szInvalidUsers,
1415 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1418 .label = "valid users",
1421 .ptr = &sDefault.szValidUsers,
1424 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1427 .label = "admin users",
1430 .ptr = &sDefault.szAdminUsers,
1433 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1436 .label = "read list",
1439 .ptr = &sDefault.readlist,
1442 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1445 .label = "write list",
1448 .ptr = &sDefault.writelist,
1451 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1454 .label = "printer admin",
1457 .ptr = &sDefault.printer_admin,
1460 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED,
1463 .label = "force user",
1466 .ptr = &sDefault.force_user,
1469 .flags = FLAG_ADVANCED | FLAG_SHARE,
1472 .label = "force group",
1475 .ptr = &sDefault.force_group,
1478 .flags = FLAG_ADVANCED | FLAG_SHARE,
1484 .ptr = &sDefault.force_group,
1487 .flags = FLAG_ADVANCED,
1490 .label = "read only",
1493 .ptr = &sDefault.bRead_only,
1496 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE,
1499 .label = "write ok",
1502 .ptr = &sDefault.bRead_only,
1508 .label = "writeable",
1511 .ptr = &sDefault.bRead_only,
1517 .label = "writable",
1520 .ptr = &sDefault.bRead_only,
1526 .label = "acl check permissions",
1529 .ptr = &sDefault.bAclCheckPermissions,
1532 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1535 .label = "acl group control",
1538 .ptr = &sDefault.bAclGroupControl,
1541 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1544 .label = "acl map full control",
1547 .ptr = &sDefault.bAclMapFullControl,
1550 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1553 .label = "create mask",
1556 .ptr = &sDefault.iCreate_mask,
1559 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1562 .label = "create mode",
1565 .ptr = &sDefault.iCreate_mask,
1571 .label = "force create mode",
1574 .ptr = &sDefault.iCreate_force_mode,
1577 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1580 .label = "security mask",
1583 .ptr = &sDefault.iSecurity_mask,
1586 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1589 .label = "force security mode",
1592 .ptr = &sDefault.iSecurity_force_mode,
1595 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1598 .label = "directory mask",
1601 .ptr = &sDefault.iDir_mask,
1604 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1607 .label = "directory mode",
1610 .ptr = &sDefault.iDir_mask,
1613 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1616 .label = "force directory mode",
1619 .ptr = &sDefault.iDir_force_mode,
1622 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1625 .label = "directory security mask",
1628 .ptr = &sDefault.iDir_Security_mask,
1631 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1634 .label = "force directory security mode",
1637 .ptr = &sDefault.iDir_Security_force_mode,
1640 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1643 .label = "force unknown acl user",
1646 .ptr = &sDefault.bForceUnknownAclUser,
1649 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1652 .label = "inherit permissions",
1655 .ptr = &sDefault.bInheritPerms,
1658 .flags = FLAG_ADVANCED | FLAG_SHARE,
1661 .label = "inherit acls",
1664 .ptr = &sDefault.bInheritACLS,
1667 .flags = FLAG_ADVANCED | FLAG_SHARE,
1670 .label = "inherit owner",
1673 .ptr = &sDefault.bInheritOwner,
1676 .flags = FLAG_ADVANCED | FLAG_SHARE,
1679 .label = "guest only",
1682 .ptr = &sDefault.bGuest_only,
1685 .flags = FLAG_ADVANCED | FLAG_SHARE,
1688 .label = "only guest",
1691 .ptr = &sDefault.bGuest_only,
1697 .label = "administrative share",
1700 .ptr = &sDefault.bAdministrative_share,
1703 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1707 .label = "guest ok",
1710 .ptr = &sDefault.bGuest_ok,
1713 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1719 .ptr = &sDefault.bGuest_ok,
1725 .label = "only user",
1728 .ptr = &sDefault.bOnlyUser,
1731 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED,
1734 .label = "hosts allow",
1737 .ptr = &sDefault.szHostsallow,
1740 .flags = FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1743 .label = "allow hosts",
1746 .ptr = &sDefault.szHostsallow,
1752 .label = "hosts deny",
1755 .ptr = &sDefault.szHostsdeny,
1758 .flags = FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1761 .label = "deny hosts",
1764 .ptr = &sDefault.szHostsdeny,
1770 .label = "preload modules",
1772 .p_class = P_GLOBAL,
1773 .ptr = &Globals.szPreloadModules,
1776 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1779 .label = "dedicated keytab file",
1781 .p_class = P_GLOBAL,
1782 .ptr = &Globals.szDedicatedKeytabFile,
1785 .flags = FLAG_ADVANCED,
1788 .label = "kerberos method",
1790 .p_class = P_GLOBAL,
1791 .ptr = &Globals.iKerberosMethod,
1793 .enum_list = enum_kerberos_method,
1794 .flags = FLAG_ADVANCED,
1797 .label = "map untrusted to domain",
1799 .p_class = P_GLOBAL,
1800 .ptr = &Globals.bMapUntrustedToDomain,
1803 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1807 {N_("Logging Options"), P_SEP, P_SEPARATOR},
1810 .label = "log level",
1812 .p_class = P_GLOBAL,
1813 .ptr = &Globals.szLogLevel,
1814 .special = handle_debug_list,
1816 .flags = FLAG_ADVANCED,
1819 .label = "debuglevel",
1821 .p_class = P_GLOBAL,
1822 .ptr = &Globals.szLogLevel,
1823 .special = handle_debug_list,
1830 .p_class = P_GLOBAL,
1831 .ptr = &Globals.syslog,
1834 .flags = FLAG_ADVANCED,
1837 .label = "syslog only",
1839 .p_class = P_GLOBAL,
1840 .ptr = &Globals.bSyslogOnly,
1843 .flags = FLAG_ADVANCED,
1846 .label = "log file",
1848 .p_class = P_GLOBAL,
1849 .ptr = &Globals.szLogFile,
1852 .flags = FLAG_ADVANCED,
1855 .label = "max log size",
1857 .p_class = P_GLOBAL,
1858 .ptr = &Globals.max_log_size,
1861 .flags = FLAG_ADVANCED,
1864 .label = "debug timestamp",
1866 .p_class = P_GLOBAL,
1867 .ptr = &Globals.bTimestampLogs,
1870 .flags = FLAG_ADVANCED,
1873 .label = "timestamp logs",
1875 .p_class = P_GLOBAL,
1876 .ptr = &Globals.bTimestampLogs,
1879 .flags = FLAG_ADVANCED,
1882 .label = "debug prefix timestamp",
1884 .p_class = P_GLOBAL,
1885 .ptr = &Globals.bDebugPrefixTimestamp,
1888 .flags = FLAG_ADVANCED,
1891 .label = "debug hires timestamp",
1893 .p_class = P_GLOBAL,
1894 .ptr = &Globals.bDebugHiresTimestamp,
1897 .flags = FLAG_ADVANCED,
1900 .label = "debug pid",
1902 .p_class = P_GLOBAL,
1903 .ptr = &Globals.bDebugPid,
1906 .flags = FLAG_ADVANCED,
1909 .label = "debug uid",
1911 .p_class = P_GLOBAL,
1912 .ptr = &Globals.bDebugUid,
1915 .flags = FLAG_ADVANCED,
1918 .label = "debug class",
1920 .p_class = P_GLOBAL,
1921 .ptr = &Globals.bDebugClass,
1924 .flags = FLAG_ADVANCED,
1927 .label = "enable core files",
1929 .p_class = P_GLOBAL,
1930 .ptr = &Globals.bEnableCoreFiles,
1933 .flags = FLAG_ADVANCED,
1936 {N_("Protocol Options"), P_SEP, P_SEPARATOR},
1939 .label = "allocation roundup size",
1942 .ptr = &sDefault.iallocation_roundup_size,
1945 .flags = FLAG_ADVANCED,
1948 .label = "aio read size",
1951 .ptr = &sDefault.iAioReadSize,
1954 .flags = FLAG_ADVANCED,
1957 .label = "aio write size",
1960 .ptr = &sDefault.iAioWriteSize,
1963 .flags = FLAG_ADVANCED,
1966 .label = "aio write behind",
1969 .ptr = &sDefault.szAioWriteBehind,
1972 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
1975 .label = "smb ports",
1977 .p_class = P_GLOBAL,
1978 .ptr = &Globals.smb_ports,
1981 .flags = FLAG_ADVANCED,
1984 .label = "large readwrite",
1986 .p_class = P_GLOBAL,
1987 .ptr = &Globals.bLargeReadwrite,
1990 .flags = FLAG_ADVANCED,
1993 .label = "max protocol",
1995 .p_class = P_GLOBAL,
1996 .ptr = &Globals.maxprotocol,
1998 .enum_list = enum_protocol,
1999 .flags = FLAG_ADVANCED,
2002 .label = "protocol",
2004 .p_class = P_GLOBAL,
2005 .ptr = &Globals.maxprotocol,
2007 .enum_list = enum_protocol,
2008 .flags = FLAG_ADVANCED,
2011 .label = "min protocol",
2013 .p_class = P_GLOBAL,
2014 .ptr = &Globals.minprotocol,
2016 .enum_list = enum_protocol,
2017 .flags = FLAG_ADVANCED,
2020 .label = "min receivefile size",
2022 .p_class = P_GLOBAL,
2023 .ptr = &Globals.iminreceivefile,
2026 .flags = FLAG_ADVANCED,
2029 .label = "read raw",
2031 .p_class = P_GLOBAL,
2032 .ptr = &Globals.bReadRaw,
2035 .flags = FLAG_ADVANCED,
2038 .label = "write raw",
2040 .p_class = P_GLOBAL,
2041 .ptr = &Globals.bWriteRaw,
2044 .flags = FLAG_ADVANCED,
2047 .label = "disable netbios",
2049 .p_class = P_GLOBAL,
2050 .ptr = &Globals.bDisableNetbios,
2053 .flags = FLAG_ADVANCED,
2056 .label = "reset on zero vc",
2058 .p_class = P_GLOBAL,
2059 .ptr = &Globals.bResetOnZeroVC,
2062 .flags = FLAG_ADVANCED,
2065 .label = "acl compatibility",
2067 .p_class = P_GLOBAL,
2068 .ptr = &Globals.iAclCompat,
2070 .enum_list = enum_acl_compat_vals,
2071 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2074 .label = "defer sharing violations",
2076 .p_class = P_GLOBAL,
2077 .ptr = &Globals.bDeferSharingViolations,
2080 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2083 .label = "ea support",
2086 .ptr = &sDefault.bEASupport,
2089 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2092 .label = "nt acl support",
2095 .ptr = &sDefault.bNTAclSupport,
2098 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2101 .label = "nt pipe support",
2103 .p_class = P_GLOBAL,
2104 .ptr = &Globals.bNTPipeSupport,
2107 .flags = FLAG_ADVANCED,
2110 .label = "nt status support",
2112 .p_class = P_GLOBAL,
2113 .ptr = &Globals.bNTStatusSupport,
2116 .flags = FLAG_ADVANCED,
2119 .label = "profile acls",
2122 .ptr = &sDefault.bProfileAcls,
2125 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
2128 .label = "announce version",
2130 .p_class = P_GLOBAL,
2131 .ptr = &Globals.szAnnounceVersion,
2134 .flags = FLAG_ADVANCED,
2137 .label = "announce as",
2139 .p_class = P_GLOBAL,
2140 .ptr = &Globals.announce_as,
2142 .enum_list = enum_announce_as,
2143 .flags = FLAG_ADVANCED,
2146 .label = "map acl inherit",
2149 .ptr = &sDefault.bMap_acl_inherit,
2152 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2155 .label = "afs share",
2158 .ptr = &sDefault.bAfs_Share,
2161 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2166 .p_class = P_GLOBAL,
2167 .ptr = &Globals.max_mux,
2170 .flags = FLAG_ADVANCED,
2173 .label = "max xmit",
2175 .p_class = P_GLOBAL,
2176 .ptr = &Globals.max_xmit,
2179 .flags = FLAG_ADVANCED,
2182 .label = "name resolve order",
2184 .p_class = P_GLOBAL,
2185 .ptr = &Globals.szNameResolveOrder,
2188 .flags = FLAG_ADVANCED | FLAG_WIZARD,
2193 .p_class = P_GLOBAL,
2194 .ptr = &Globals.max_ttl,
2197 .flags = FLAG_ADVANCED,
2200 .label = "max wins ttl",
2202 .p_class = P_GLOBAL,
2203 .ptr = &Globals.max_wins_ttl,
2206 .flags = FLAG_ADVANCED,
2209 .label = "min wins ttl",
2211 .p_class = P_GLOBAL,
2212 .ptr = &Globals.min_wins_ttl,
2215 .flags = FLAG_ADVANCED,
2218 .label = "time server",
2220 .p_class = P_GLOBAL,
2221 .ptr = &Globals.bTimeServer,
2224 .flags = FLAG_ADVANCED,
2227 .label = "unix extensions",
2229 .p_class = P_GLOBAL,
2230 .ptr = &Globals.bUnixExtensions,
2233 .flags = FLAG_ADVANCED,
2236 .label = "use spnego",
2238 .p_class = P_GLOBAL,
2239 .ptr = &Globals.bUseSpnego,
2242 .flags = FLAG_ADVANCED,
2245 .label = "client signing",
2247 .p_class = P_GLOBAL,
2248 .ptr = &Globals.client_signing,
2250 .enum_list = enum_smb_signing_vals,
2251 .flags = FLAG_ADVANCED,
2254 .label = "server signing",
2256 .p_class = P_GLOBAL,
2257 .ptr = &Globals.server_signing,
2259 .enum_list = enum_smb_signing_vals,
2260 .flags = FLAG_ADVANCED,
2263 .label = "smb encrypt",
2266 .ptr = &sDefault.ismb_encrypt,
2268 .enum_list = enum_smb_signing_vals,
2269 .flags = FLAG_ADVANCED,
2272 .label = "client use spnego",
2274 .p_class = P_GLOBAL,
2275 .ptr = &Globals.bClientUseSpnego,
2278 .flags = FLAG_ADVANCED,
2281 .label = "client ldap sasl wrapping",
2283 .p_class = P_GLOBAL,
2284 .ptr = &Globals.client_ldap_sasl_wrapping,
2286 .enum_list = enum_ldap_sasl_wrapping,
2287 .flags = FLAG_ADVANCED,
2290 .label = "enable asu support",
2292 .p_class = P_GLOBAL,
2293 .ptr = &Globals.bASUSupport,
2296 .flags = FLAG_ADVANCED,
2299 .label = "svcctl list",
2301 .p_class = P_GLOBAL,
2302 .ptr = &Globals.szServicesList,
2305 .flags = FLAG_ADVANCED,
2308 {N_("Tuning Options"), P_SEP, P_SEPARATOR},
2311 .label = "block size",
2314 .ptr = &sDefault.iBlock_size,
2317 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2320 .label = "deadtime",
2322 .p_class = P_GLOBAL,
2323 .ptr = &Globals.deadtime,
2326 .flags = FLAG_ADVANCED,
2329 .label = "getwd cache",
2331 .p_class = P_GLOBAL,
2332 .ptr = &Globals.getwd_cache,
2335 .flags = FLAG_ADVANCED,
2338 .label = "keepalive",
2340 .p_class = P_GLOBAL,
2341 .ptr = &Globals.iKeepalive,
2344 .flags = FLAG_ADVANCED,
2347 .label = "change notify",
2350 .ptr = &sDefault.bChangeNotify,
2353 .flags = FLAG_ADVANCED | FLAG_SHARE,
2356 .label = "directory name cache size",
2359 .ptr = &sDefault.iDirectoryNameCacheSize,
2362 .flags = FLAG_ADVANCED | FLAG_SHARE,
2365 .label = "kernel change notify",
2368 .ptr = &sDefault.bKernelChangeNotify,
2371 .flags = FLAG_ADVANCED | FLAG_SHARE,
2374 .label = "lpq cache time",
2376 .p_class = P_GLOBAL,
2377 .ptr = &Globals.lpqcachetime,
2380 .flags = FLAG_ADVANCED,
2383 .label = "max smbd processes",
2385 .p_class = P_GLOBAL,
2386 .ptr = &Globals.iMaxSmbdProcesses,
2389 .flags = FLAG_ADVANCED,
2392 .label = "max connections",
2395 .ptr = &sDefault.iMaxConnections,
2398 .flags = FLAG_ADVANCED | FLAG_SHARE,
2401 .label = "paranoid server security",
2403 .p_class = P_GLOBAL,
2404 .ptr = &Globals.paranoid_server_security,
2407 .flags = FLAG_ADVANCED,
2410 .label = "max disk size",
2412 .p_class = P_GLOBAL,
2413 .ptr = &Globals.maxdisksize,
2416 .flags = FLAG_ADVANCED,
2419 .label = "max open files",
2421 .p_class = P_GLOBAL,
2422 .ptr = &Globals.max_open_files,
2425 .flags = FLAG_ADVANCED,
2428 .label = "min print space",
2431 .ptr = &sDefault.iMinPrintSpace,
2434 .flags = FLAG_ADVANCED | FLAG_PRINT,
2437 .label = "socket options",
2439 .p_class = P_GLOBAL,
2440 .ptr = &Globals.szSocketOptions,
2443 .flags = FLAG_ADVANCED,
2446 .label = "strict allocate",
2449 .ptr = &sDefault.bStrictAllocate,
2452 .flags = FLAG_ADVANCED | FLAG_SHARE,
2455 .label = "strict sync",
2458 .ptr = &sDefault.bStrictSync,
2461 .flags = FLAG_ADVANCED | FLAG_SHARE,
2464 .label = "sync always",
2467 .ptr = &sDefault.bSyncAlways,
2470 .flags = FLAG_ADVANCED | FLAG_SHARE,
2473 .label = "use mmap",
2475 .p_class = P_GLOBAL,
2476 .ptr = &Globals.bUseMmap,
2479 .flags = FLAG_ADVANCED,
2482 .label = "use sendfile",
2485 .ptr = &sDefault.bUseSendfile,
2488 .flags = FLAG_ADVANCED | FLAG_SHARE,
2491 .label = "hostname lookups",
2493 .p_class = P_GLOBAL,
2494 .ptr = &Globals.bHostnameLookups,
2497 .flags = FLAG_ADVANCED,
2500 .label = "write cache size",
2503 .ptr = &sDefault.iWriteCacheSize,
2506 .flags = FLAG_ADVANCED | FLAG_SHARE,
2509 .label = "name cache timeout",
2511 .p_class = P_GLOBAL,
2512 .ptr = &Globals.name_cache_timeout,
2515 .flags = FLAG_ADVANCED,
2518 .label = "ctdbd socket",
2520 .p_class = P_GLOBAL,
2521 .ptr = &Globals.ctdbdSocket,
2524 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2527 .label = "cluster addresses",
2529 .p_class = P_GLOBAL,
2530 .ptr = &Globals.szClusterAddresses,
2533 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2536 .label = "clustering",
2538 .p_class = P_GLOBAL,
2539 .ptr = &Globals.clustering,
2542 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2545 .label = "ctdb timeout",
2547 .p_class = P_GLOBAL,
2548 .ptr = &Globals.ctdb_timeout,
2551 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2554 {N_("Printing Options"), P_SEP, P_SEPARATOR},
2557 .label = "max reported print jobs",
2560 .ptr = &sDefault.iMaxReportedPrintJobs,
2563 .flags = FLAG_ADVANCED | FLAG_PRINT,
2566 .label = "max print jobs",
2569 .ptr = &sDefault.iMaxPrintJobs,
2572 .flags = FLAG_ADVANCED | FLAG_PRINT,
2575 .label = "load printers",
2577 .p_class = P_GLOBAL,
2578 .ptr = &Globals.bLoadPrinters,
2581 .flags = FLAG_ADVANCED | FLAG_PRINT,
2584 .label = "printcap cache time",
2586 .p_class = P_GLOBAL,
2587 .ptr = &Globals.PrintcapCacheTime,
2590 .flags = FLAG_ADVANCED | FLAG_PRINT,
2593 .label = "printcap name",
2595 .p_class = P_GLOBAL,
2596 .ptr = &Globals.szPrintcapname,
2599 .flags = FLAG_ADVANCED | FLAG_PRINT,
2602 .label = "printcap",
2604 .p_class = P_GLOBAL,
2605 .ptr = &Globals.szPrintcapname,
2611 .label = "printable",
2614 .ptr = &sDefault.bPrint_ok,
2617 .flags = FLAG_ADVANCED | FLAG_PRINT,
2620 .label = "print ok",
2623 .ptr = &sDefault.bPrint_ok,
2629 .label = "printing",
2632 .ptr = &sDefault.iPrinting,
2633 .special = handle_printing,
2634 .enum_list = enum_printing,
2635 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2638 .label = "cups options",
2641 .ptr = &sDefault.szCupsOptions,
2644 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2647 .label = "cups server",
2649 .p_class = P_GLOBAL,
2650 .ptr = &Globals.szCupsServer,
2653 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2656 .label = "cups encrypt",
2658 .p_class = P_GLOBAL,
2659 .ptr = &Globals.CupsEncrypt,
2661 .enum_list = enum_bool_auto,
2662 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2666 .label = "cups connection timeout",
2668 .p_class = P_GLOBAL,
2669 .ptr = &Globals.cups_connection_timeout,
2672 .flags = FLAG_ADVANCED,
2675 .label = "iprint server",
2677 .p_class = P_GLOBAL,
2678 .ptr = &Globals.szIPrintServer,
2681 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2684 .label = "print command",
2687 .ptr = &sDefault.szPrintcommand,
2690 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2693 .label = "disable spoolss",
2695 .p_class = P_GLOBAL,
2696 .ptr = &Globals.bDisableSpoolss,
2699 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2702 .label = "enable spoolss",
2704 .p_class = P_GLOBAL,
2705 .ptr = &Globals.bDisableSpoolss,
2711 .label = "lpq command",
2714 .ptr = &sDefault.szLpqcommand,
2717 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2720 .label = "lprm command",
2723 .ptr = &sDefault.szLprmcommand,
2726 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2729 .label = "lppause command",
2732 .ptr = &sDefault.szLppausecommand,
2735 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2738 .label = "lpresume command",
2741 .ptr = &sDefault.szLpresumecommand,
2744 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2747 .label = "queuepause command",
2750 .ptr = &sDefault.szQueuepausecommand,
2753 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2756 .label = "queueresume command",
2759 .ptr = &sDefault.szQueueresumecommand,
2762 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2765 .label = "addport command",
2767 .p_class = P_GLOBAL,
2768 .ptr = &Globals.szAddPortCommand,
2771 .flags = FLAG_ADVANCED,
2774 .label = "enumports command",
2776 .p_class = P_GLOBAL,
2777 .ptr = &Globals.szEnumPortsCommand,
2780 .flags = FLAG_ADVANCED,
2783 .label = "addprinter command",
2785 .p_class = P_GLOBAL,
2786 .ptr = &Globals.szAddPrinterCommand,
2789 .flags = FLAG_ADVANCED,
2792 .label = "deleteprinter command",
2794 .p_class = P_GLOBAL,
2795 .ptr = &Globals.szDeletePrinterCommand,
2798 .flags = FLAG_ADVANCED,
2801 .label = "show add printer wizard",
2803 .p_class = P_GLOBAL,
2804 .ptr = &Globals.bMsAddPrinterWizard,
2807 .flags = FLAG_ADVANCED,
2810 .label = "os2 driver map",
2812 .p_class = P_GLOBAL,
2813 .ptr = &Globals.szOs2DriverMap,
2816 .flags = FLAG_ADVANCED,
2820 .label = "printer name",
2823 .ptr = &sDefault.szPrintername,
2826 .flags = FLAG_ADVANCED | FLAG_PRINT,
2832 .ptr = &sDefault.szPrintername,
2838 .label = "use client driver",
2841 .ptr = &sDefault.bUseClientDriver,
2844 .flags = FLAG_ADVANCED | FLAG_PRINT,
2847 .label = "default devmode",
2850 .ptr = &sDefault.bDefaultDevmode,
2853 .flags = FLAG_ADVANCED | FLAG_PRINT,
2856 .label = "force printername",
2859 .ptr = &sDefault.bForcePrintername,
2862 .flags = FLAG_ADVANCED | FLAG_PRINT,
2865 .label = "printjob username",
2868 .ptr = &sDefault.szPrintjobUsername,
2871 .flags = FLAG_ADVANCED | FLAG_PRINT,
2874 {N_("Filename Handling"), P_SEP, P_SEPARATOR},
2877 .label = "mangling method",
2879 .p_class = P_GLOBAL,
2880 .ptr = &Globals.szManglingMethod,
2883 .flags = FLAG_ADVANCED,
2886 .label = "mangle prefix",
2888 .p_class = P_GLOBAL,
2889 .ptr = &Globals.mangle_prefix,
2892 .flags = FLAG_ADVANCED,
2896 .label = "default case",
2899 .ptr = &sDefault.iDefaultCase,
2901 .enum_list = enum_case,
2902 .flags = FLAG_ADVANCED | FLAG_SHARE,
2905 .label = "case sensitive",
2908 .ptr = &sDefault.iCaseSensitive,
2910 .enum_list = enum_bool_auto,
2911 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2914 .label = "casesignames",
2917 .ptr = &sDefault.iCaseSensitive,
2919 .enum_list = enum_bool_auto,
2920 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE,
2923 .label = "preserve case",
2926 .ptr = &sDefault.bCasePreserve,
2929 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2932 .label = "short preserve case",
2935 .ptr = &sDefault.bShortCasePreserve,
2938 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2941 .label = "mangling char",
2944 .ptr = &sDefault.magic_char,
2947 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2950 .label = "hide dot files",
2953 .ptr = &sDefault.bHideDotFiles,
2956 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2959 .label = "hide special files",