-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<HTML
><HEAD
><TITLE
><P
>There are three special sections, [global],
[homes] and [printers], which are
- described under <SPAN
-CLASS="emphasis"
-><I
+ described under <I
CLASS="EMPHASIS"
>special sections</I
-></SPAN
>. The
following notes apply to ordinary section descriptions.</P
><P
printable services (used by the client to access print services
on the host running the server).</P
><P
->Sections may be designated <SPAN
-CLASS="emphasis"
-><I
+>Sections may be designated <I
CLASS="EMPHASIS"
>guest</I
-></SPAN
> services,
in which case no password is required to access them. A specified
- UNIX <SPAN
-CLASS="emphasis"
-><I
+ UNIX <I
CLASS="EMPHASIS"
>guest account</I
-></SPAN
> is used to define access
privileges in this case.</P
><P
>/home/bar</TT
>.
The share is accessed via the share name "foo":</P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="SCREEN"
> <TT
CLASS="COMPUTEROUTPUT"
> [foo]
path = /home/bar
- writeable = true
+ read only = no
</TT
>
</PRE
+></TD
+></TR
+></TABLE
><P
>The following sample section defines a printable share.
The share is readonly, but printable. That is, the only write
access permitted is via calls to open, write to and close a
- spool file. The <SPAN
-CLASS="emphasis"
-><I
+ spool file. The <I
CLASS="EMPHASIS"
>guest ok</I
-></SPAN
> parameter means
access will be permitted as the default guest user (specified
elsewhere):</P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="SCREEN"
> <TT
CLASS="COMPUTEROUTPUT"
> [aprinter]
path = /usr/spool/public
- writeable = false
- printable = true
- guest ok = true
+ read only = yes
+ printable = yes
+ guest ok = yes
</TT
>
</PRE
+></TD
+></TR
+></TABLE
></DIV
><DIV
CLASS="REFSECT1"
></LI
></UL
><P
->If you decide to use a <SPAN
-CLASS="emphasis"
-><I
+>If you decide to use a <I
CLASS="EMPHASIS"
>path =</I
-></SPAN
> line
in your [homes] section then you may find it useful
to use the %S macro. For example :</P
a normal service section can specify, though some make more sense
than others. The following is a typical and suitable [homes]
section:</P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="SCREEN"
> <TT
CLASS="COMPUTEROUTPUT"
> [homes]
- writeable = yes
+ read only = no
</TT
>
</PRE
+></TD
+></TR
+></TABLE
><P
>An important point is that if guest access is specified
in the [homes] section, all home directories will be
- visible to all clients <SPAN
-CLASS="emphasis"
-><I
+ visible to all clients <I
CLASS="EMPHASIS"
>without a password</I
-></SPAN
>.
In the very unlikely event that this is actually desirable, it
- would be wise to also specify <SPAN
-CLASS="emphasis"
-><I
+ would be wise to also specify <I
CLASS="EMPHASIS"
>read only
access</I
-></SPAN
>.</P
><P
->Note that the <SPAN
-CLASS="emphasis"
-><I
+>Note that the <I
CLASS="EMPHASIS"
>browseable</I
-></SPAN
> flag for
auto home directories will be inherited from the global browseable
flag, not the [homes] browseable flag. This is useful as
- it means setting <SPAN
-CLASS="emphasis"
-><I
+ it means setting <I
CLASS="EMPHASIS"
>browseable = no</I
-></SPAN
> in
the [homes] section will hide the [homes] share but make
any auto home directories visible.</P
world-writeable spool directory with the sticky bit set on
it. A typical [printers] entry would look like
this:</P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="SCREEN"
><TT
printable = yes
</TT
></PRE
+></TD
+></TR
+></TABLE
><P
>All aliases given for a printer in the printcap file
are legitimate printer names as far as the server is concerned.
If your printing subsystem doesn't work like that, you will have
to set up a pseudo-printcap. This is a file consisting of one or
more lines like this:</P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="SCREEN"
> <TT
</TT
>
</PRE
+></TD
+></TR
+></TABLE
><P
>Each alias should be an acceptable printer name for
your printing subsystem. In the [global] section, specify
>parameters define the specific attributes of sections.</P
><P
>Some parameters are specific to the [global] section
- (e.g., <SPAN
-CLASS="emphasis"
-><I
+ (e.g., <I
CLASS="EMPHASIS"
>security</I
-></SPAN
>). Some parameters are usable
- in all sections (e.g., <SPAN
-CLASS="emphasis"
-><I
+ in all sections (e.g., <I
CLASS="EMPHASIS"
>create mode</I
-></SPAN
>). All others
are permissible only in normal sections. For the purposes of the
following descriptions the [homes] and [printers]
- sections will be considered normal. The letter <SPAN
-CLASS="emphasis"
-><I
+ sections will be considered normal. The letter <I
CLASS="EMPHASIS"
>G</I
-></SPAN
>
in parentheses indicates that a parameter is specific to the
- [global] section. The letter <SPAN
-CLASS="emphasis"
-><I
+ [global] section. The letter <I
CLASS="EMPHASIS"
>S</I
-></SPAN
>
indicates that a parameter can be specified in a service specific
- section. Note that all <SPAN
-CLASS="emphasis"
-><I
+ section. Note that all <I
CLASS="EMPHASIS"
>S</I
-></SPAN
> parameters can also be specified in
the [global] section - in which case they will define
the default behavior for all services.</P
><P
>the name of your NIS home directory server.
This is obtained from your NIS auto.map entry. If you have
- not compiled Samba with the <SPAN
-CLASS="emphasis"
-><I
+ not compiled Samba with the <I
CLASS="EMPHASIS"
>--with-automount</I
-></SPAN
>
option then this value will be the same as %L.</P
></DD
> controls if names that have characters that
aren't of the "default" case are mangled. For example,
if this is yes then a name like "Mail" would be mangled.
- Default <SPAN
-CLASS="emphasis"
-><I
+ Default <I
CLASS="EMPHASIS"
>no</I
-></SPAN
>.</P
></DD
><DT
><P
>controls whether filenames are case sensitive. If
they aren't then Samba must do a filename search and match on passed
- names. Default <SPAN
-CLASS="emphasis"
-><I
+ names. Default <I
CLASS="EMPHASIS"
>no</I
-></SPAN
>.</P
></DD
><DT
><DD
><P
>controls what the default case is for new
- filenames. Default <SPAN
-CLASS="emphasis"
-><I
+ filenames. Default <I
CLASS="EMPHASIS"
>lower</I
-></SPAN
>.</P
></DD
><DT
><P
>controls if new files are created with the
case that the client passes, or if they are forced to be the
- "default" case. Default <SPAN
-CLASS="emphasis"
-><I
+ "default" case. Default <I
CLASS="EMPHASIS"
>yes</I
-></SPAN
>.
</P
></DD
upper case, or if they are forced to be the "default"
case. This option can be use with "preserve case = yes"
to permit long filenames to retain their case, while short names
- are lowercased. Default <SPAN
-CLASS="emphasis"
-><I
+ are lowercased. Default <I
CLASS="EMPHASIS"
>yes</I
-></SPAN
>.</P
></DD
></DL
><LI
><P
><A
-HREF="index.html#ABORTSHUTDOWNSCRIPT"
+HREF="r1.html#ABORTSHUTDOWNSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADDGROUPSCRIPT"
+HREF="r1.html#ADDGROUPSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADDPRINTERCOMMAND"
+HREF="r1.html#ADDPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADDSHARECOMMAND"
+HREF="r1.html#ADDSHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADDUSERSCRIPT"
+HREF="r1.html#ADDUSERSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADDUSERTOGROUPSCRIPT"
+HREF="r1.html#ADDUSERTOGROUPSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADDMACHINESCRIPT"
+HREF="r1.html#ADDMACHINESCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETEGROUPSCRIPT"
+HREF="r1.html#DELETEGROUPSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ADSSERVER"
+HREF="r1.html#ADSSERVER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ALGORITHMICRIDBASE"
+HREF="r1.html#ALGORITHMICRIDBASE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ALLOWTRUSTEDDOMAINS"
+HREF="r1.html#ALLOWTRUSTEDDOMAINS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ANNOUNCEAS"
+HREF="r1.html#ANNOUNCEAS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ANNOUNCEVERSION"
+HREF="r1.html#ANNOUNCEVERSION"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#AUTHMETHODS"
+HREF="r1.html#AUTHMETHODS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#AUTOSERVICES"
+HREF="r1.html#AUTOSERVICES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#BINDINTERFACESONLY"
+HREF="r1.html#BINDINTERFACESONLY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#BROWSELIST"
+HREF="r1.html#BROWSELIST"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CHANGENOTIFYTIMEOUT"
+HREF="r1.html#CHANGENOTIFYTIMEOUT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CHANGESHARECOMMAND"
+HREF="r1.html#CHANGESHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CONFIGFILE"
+HREF="r1.html#CONFIGFILE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEADTIME"
+HREF="r1.html#DEADTIME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEBUGHIRESTIMESTAMP"
+HREF="r1.html#DEBUGHIRESTIMESTAMP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEBUGPID"
+HREF="r1.html#DEBUGPID"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEBUGTIMESTAMP"
+HREF="r1.html#DEBUGTIMESTAMP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEBUGUID"
+HREF="r1.html#DEBUGUID"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEBUGLEVEL"
+HREF="r1.html#DEBUGLEVEL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEFAULT"
+HREF="r1.html#DEFAULT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEFAULTSERVICE"
+HREF="r1.html#DEFAULTSERVICE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETEPRINTERCOMMAND"
+HREF="r1.html#DELETEPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETESHARECOMMAND"
+HREF="r1.html#DELETESHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETEUSERSCRIPT"
+HREF="r1.html#DELETEUSERSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETEUSERFROMGROUPSCRIPT"
+HREF="r1.html#DELETEUSERFROMGROUPSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DFREECOMMAND"
+HREF="r1.html#DFREECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DISABLENETBIOS"
+HREF="r1.html#DISABLENETBIOS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DISABLESPOOLSS"
+HREF="r1.html#DISABLESPOOLSS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DISPLAYCHARSET"
+HREF="r1.html#DISPLAYCHARSET"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DNSPROXY"
+HREF="r1.html#DNSPROXY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DOMAINADMINGROUP"
-><TT
-CLASS="PARAMETER"
-><I
->domain admin group</I
-></TT
-></A
-></P
-></LI
-><LI
-><P
-><A
-HREF="index.html#DOMAINGUESTGROUP"
-><TT
-CLASS="PARAMETER"
-><I
->domain guest group</I
-></TT
-></A
-></P
-></LI
-><LI
-><P
-><A
-HREF="index.html#DOMAINLOGONS"
+HREF="r1.html#DOMAINLOGONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DOMAINMASTER"
+HREF="r1.html#DOMAINMASTER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DOSCHARSET"
+HREF="r1.html#DOSCHARSET"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ENHANCEDBROWSING"
+HREF="r1.html#ENHANCEDBROWSING"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ENUMPORTSCOMMAND"
+HREF="r1.html#ENUMPORTSCOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#GETWDCACHE"
+HREF="r1.html#GETWDCACHE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HIDELOCALUSERS"
+HREF="r1.html#HIDELOCALUSERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HIDEUNREADABLE"
+HREF="r1.html#HIDEUNREADABLE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HIDEUNWRITEABLEFILES"
+HREF="r1.html#HIDEUNWRITEABLEFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HOMEDIRMAP"
+HREF="r1.html#HIDESPECIALFILES"
+><TT
+CLASS="PARAMETER"
+><I
+>hide special files</I
+></TT
+></A
+></P
+></LI
+><LI
+><P
+><A
+HREF="r1.html#HOMEDIRMAP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HOSTMSDFS"
+HREF="r1.html#HOSTMSDFS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HOSTNAMELOOKUPS"
+HREF="r1.html#HOSTNAMELOOKUPS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HOSTSEQUIV"
+HREF="r1.html#HOSTSEQUIV"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#INTERFACES"
+HREF="r1.html#INTERFACES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#KEEPALIVE"
+HREF="r1.html#KEEPALIVE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#KERNELOPLOCKS"
+HREF="r1.html#KERNELOPLOCKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LANMANAUTH"
+HREF="r1.html#LANMANAUTH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LARGEREADWRITE"
+HREF="r1.html#LARGEREADWRITE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LDAPADMINDN"
+HREF="r1.html#LDAPADMINDN"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LDAPFILTER"
+HREF="r1.html#LDAPFILTER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LDAPSSL"
+HREF="r1.html#LDAPSSL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LDAPSUFFIX"
+HREF="r1.html#LDAPSUFFIX"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LDAPUSERSUFFIX"
+HREF="r1.html#LDAPUSERSUFFIX"
><TT
CLASS="PARAMETER"
><I
->ldap suffix</I
+>ldap user suffix</I
></TT
></A
></P
><LI
><P
><A
-HREF="index.html#LDAPMACHINESUFFIX"
+HREF="r1.html#LDAPMACHINESUFFIX"
><TT
CLASS="PARAMETER"
><I
->ldap suffix</I
+>ldap machine suffix</I
+></TT
+></A
+></P
+></LI
+><LI
+><P
+><A
+HREF="r1.html#LDAPPASSWDSYNC"
+><TT
+CLASS="PARAMETER"
+><I
+>ldap passwd sync</I
></TT
></A
></P
><LI
><P
><A
-HREF="index.html#LMANNOUNCE"
+HREF="r1.html#LMANNOUNCE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LMINTERVAL"
+HREF="r1.html#LMINTERVAL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOADPRINTERS"
+HREF="r1.html#LOADPRINTERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOCALMASTER"
+HREF="r1.html#LOCALMASTER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOCKDIR"
+HREF="r1.html#LOCKDIR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOCKDIRECTORY"
+HREF="r1.html#LOCKDIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOCKSPINCOUNT"
+HREF="r1.html#LOCKSPINCOUNT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOCKSPINTIME"
+HREF="r1.html#LOCKSPINTIME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PIDDIRECTORY"
+HREF="r1.html#PIDDIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOGFILE"
+HREF="r1.html#LOGFILE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOGLEVEL"
+HREF="r1.html#LOGLEVEL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOGONDRIVE"
+HREF="r1.html#LOGONDRIVE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOGONHOME"
+HREF="r1.html#LOGONHOME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOGONPATH"
+HREF="r1.html#LOGONPATH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOGONSCRIPT"
+HREF="r1.html#LOGONSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LPQCACHETIME"
+HREF="r1.html#LPQCACHETIME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MACHINEPASSWORDTIMEOUT"
+HREF="r1.html#MACHINEPASSWORDTIMEOUT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MANGLEDSTACK"
+HREF="r1.html#MANGLEDSTACK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAPTOGUEST"
+HREF="r1.html#MAPTOGUEST"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXDISKSIZE"
+HREF="r1.html#MAXDISKSIZE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXLOGSIZE"
+HREF="r1.html#MAXLOGSIZE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXMUX"
+HREF="r1.html#MAXMUX"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXOPENFILES"
+HREF="r1.html#MAXOPENFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXPROTOCOL"
+HREF="r1.html#MAXPROTOCOL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXSMBDPROCESSES"
+HREF="r1.html#MAXSMBDPROCESSES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXTTL"
+HREF="r1.html#MAXTTL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXWINSTTL"
+HREF="r1.html#MAXWINSTTL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXXMIT"
+HREF="r1.html#MAXXMIT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MESSAGECOMMAND"
+HREF="r1.html#MESSAGECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MINPASSWDLENGTH"
+HREF="r1.html#MINPASSWDLENGTH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MINPASSWORDLENGTH"
+HREF="r1.html#MINPASSWORDLENGTH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MINPROTOCOL"
+HREF="r1.html#MINPROTOCOL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MINWINSTTL"
+HREF="r1.html#MINWINSTTL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NAMECACHETIMEOUT"
+HREF="r1.html#NAMECACHETIMEOUT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NAMERESOLVEORDER"
+HREF="r1.html#NAMERESOLVEORDER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NETBIOSALIASES"
+HREF="r1.html#NETBIOSALIASES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NETBIOSNAME"
+HREF="r1.html#NETBIOSNAME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NETBIOSSCOPE"
+HREF="r1.html#NETBIOSSCOPE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NISHOMEDIR"
+HREF="r1.html#NISHOMEDIR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NTLMAUTH"
+HREF="r1.html#NTLMAUTH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NONUNIXACCOUNTRANGE"
+HREF="r1.html#NONUNIXACCOUNTRANGE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NTPIPESUPPORT"
+HREF="r1.html#NTPIPESUPPORT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NTSTATUSSUPPORT"
+HREF="r1.html#NTSTATUSSUPPORT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NULLPASSWORDS"
+HREF="r1.html#NULLPASSWORDS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#OBEYPAMRESTRICTIONS"
+HREF="r1.html#OBEYPAMRESTRICTIONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#OPLOCKBREAKWAITTIME"
+HREF="r1.html#OPLOCKBREAKWAITTIME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#OSLEVEL"
+HREF="r1.html#OSLEVEL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#OS2DRIVERMAP"
+HREF="r1.html#OS2DRIVERMAP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PAMPASSWORDCHANGE"
+HREF="r1.html#PAMPASSWORDCHANGE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PANICACTION"
+HREF="r1.html#PANICACTION"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PARANOIDSERVERSECURITY"
+HREF="r1.html#PARANOIDSERVERSECURITY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PASSDBBACKEND"
+HREF="r1.html#PASSDBBACKEND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PASSWDCHAT"
+HREF="r1.html#PASSWDCHAT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PASSWDCHATDEBUG"
+HREF="r1.html#PASSWDCHATDEBUG"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PASSWORDLEVEL"
+HREF="r1.html#PASSWORDLEVEL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PASSWORDSERVER"
+HREF="r1.html#PASSWORDSERVER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PREFEREDMASTER"
+HREF="r1.html#PREFEREDMASTER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PREFERREDMASTER"
+HREF="r1.html#PREFERREDMASTER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRELOAD"
+HREF="r1.html#PRELOAD"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTCAP"
+HREF="r1.html#PRINTCAP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTCAPNAME"
+HREF="r1.html#PRINTCAPNAME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTERDRIVERFILE"
+HREF="r1.html#PRINTERDRIVERFILE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRIVATEDIR"
+HREF="r1.html#PRIVATEDIR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PROTOCOL"
+HREF="r1.html#PROTOCOL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#READBMPX"
+HREF="r1.html#READBMPX"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#READRAW"
+HREF="r1.html#READRAW"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#READSIZE"
+HREF="r1.html#READSIZE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#REALM"
+HREF="r1.html#REALM"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#REMOTEANNOUNCE"
+HREF="r1.html#REMOTEANNOUNCE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#REMOTEBROWSESYNC"
+HREF="r1.html#REMOTEBROWSESYNC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#RESTRICTANONYMOUS"
+HREF="r1.html#RESTRICTANONYMOUS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ROOT"
+HREF="r1.html#ROOT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ROOTDIR"
+HREF="r1.html#ROOTDIR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ROOTDIRECTORY"
+HREF="r1.html#ROOTDIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SERVERSTRING"
+HREF="r1.html#SERVERSTRING"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SHOWADDPRINTERWIZARD"
+HREF="r1.html#SHOWADDPRINTERWIZARD"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SHUTDOWNSCRIPT"
+HREF="r1.html#SHUTDOWNSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SMBPASSWDFILE"
+HREF="r1.html#SMBPASSWDFILE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SMBPORTS"
+HREF="r1.html#SMBPORTS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SOCKETADDRESS"
+HREF="r1.html#SOCKETADDRESS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SOCKETOPTIONS"
+HREF="r1.html#SOCKETOPTIONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SOURCEENVIRONMENT"
+HREF="r1.html#SOURCEENVIRONMENT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SPNEGO"
+HREF="r1.html#SPNEGO"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#STATCACHE"
+HREF="r1.html#STATCACHE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#STATCACHESIZE"
+HREF="r1.html#STATCACHESIZE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#STRIPDOT"
+HREF="r1.html#STRIPDOT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SYSLOG"
+HREF="r1.html#SYSLOG"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SYSLOGONLY"
+HREF="r1.html#SYSLOGONLY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#TEMPLATEHOMEDIR"
+HREF="r1.html#TEMPLATEHOMEDIR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#TEMPLATESHELL"
+HREF="r1.html#TEMPLATESHELL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#TIMEOFFSET"
+HREF="r1.html#TIMEOFFSET"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#TIMESERVER"
+HREF="r1.html#TIMESERVER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#TIMESTAMPLOGS"
+HREF="r1.html#TIMESTAMPLOGS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#TOTALPRINTJOBS"
+HREF="r1.html#TOTALPRINTJOBS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UNICODE"
+HREF="r1.html#UNICODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UNIXCHARSET"
+HREF="r1.html#UNIXCHARSET"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UNIXEXTENSIONS"
+HREF="r1.html#UNIXEXTENSIONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UNIXPASSWORDSYNC"
+HREF="r1.html#UNIXPASSWORDSYNC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UPDATEENCRYPTED"
+HREF="r1.html#UPDATEENCRYPTED"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USEMMAP"
+HREF="r1.html#USEMMAP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USERHOSTS"
+HREF="r1.html#USERHOSTS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USERNAMELEVEL"
+HREF="r1.html#USESENDFILE"
+><TT
+CLASS="PARAMETER"
+><I
+>use sendfile</I
+></TT
+></A
+></P
+></LI
+><LI
+><P
+><A
+HREF="r1.html#USERNAMELEVEL"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USERNAMEMAP"
+HREF="r1.html#USERNAMEMAP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UTMP"
+HREF="r1.html#UTMP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#UTMPDIRECTORY"
+HREF="r1.html#UTMPDIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WTMPDIRECTORY"
+HREF="r1.html#WTMPDIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDCACHETIME"
+HREF="r1.html#WINBINDCACHETIME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDENUMUSERS"
+HREF="r1.html#WINBINDENUMUSERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDENUMGROUPS"
+HREF="r1.html#WINBINDENUMGROUPS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDGID"
+HREF="r1.html#WINBINDGID"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDSEPARATOR"
+HREF="r1.html#WINBINDSEPARATOR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDUID"
+HREF="r1.html#WINBINDUID"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINBINDUSEDEFAULTDOMAIN"
+HREF="r1.html#WINBINDUSEDEFAULTDOMAIN"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINSHOOK"
+HREF="r1.html#WINSHOOK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINSPARTNERS"
+HREF="r1.html#WINSPARTNERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINSPROXY"
+HREF="r1.html#WINSPROXY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINSSERVER"
+HREF="r1.html#WINSSERVER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WINSSUPPORT"
+HREF="r1.html#WINSSUPPORT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WORKGROUP"
+HREF="r1.html#WORKGROUP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WRITERAW"
+HREF="r1.html#WRITERAW"
><TT
CLASS="PARAMETER"
><I
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN1003"
+NAME="AEN1007"
></A
><H2
>COMPLETE LIST OF SERVICE PARAMETERS</H2
><LI
><P
><A
-HREF="index.html#ADMINUSERS"
+HREF="r1.html#ADMINUSERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ALLOWHOSTS"
+HREF="r1.html#ALLOWHOSTS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#AVAILABLE"
+HREF="r1.html#AVAILABLE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#BLOCKINGLOCKS"
+HREF="r1.html#BLOCKINGLOCKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#BLOCKSIZE"
+HREF="r1.html#BLOCKSIZE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#BROWSABLE"
+HREF="r1.html#BROWSABLE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#BROWSEABLE"
+HREF="r1.html#BROWSEABLE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CASESENSITIVE"
+HREF="r1.html#CASESENSITIVE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CASESIGNAMES"
+HREF="r1.html#CASESIGNAMES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#COMMENT"
+HREF="r1.html#COMMENT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#COPY"
+HREF="r1.html#COPY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CREATEMODE"
+HREF="r1.html#CREATEMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#CSCPOLICY"
+HREF="r1.html#CSCPOLICY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEFAULTCASE"
+HREF="r1.html#DEFAULTCASE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DEFAULTDEVMODE"
+HREF="r1.html#DEFAULTDEVMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETEREADONLY"
+HREF="r1.html#DELETEREADONLY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DELETEVETOFILES"
+HREF="r1.html#DELETEVETOFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DENYHOSTS"
+HREF="r1.html#DENYHOSTS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DIRECTORY"
+HREF="r1.html#DIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DIRECTORYMASK"
+HREF="r1.html#DIRECTORYMASK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DIRECTORYMODE"
+HREF="r1.html#DIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DIRECTORYSECURITYMASK"
+HREF="r1.html#DIRECTORYSECURITYMASK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DONTDESCEND"
+HREF="r1.html#DONTDESCEND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DOSFILEMODE"
+HREF="r1.html#DOSFILEMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DOSFILETIMERESOLUTION"
+HREF="r1.html#DOSFILETIMERESOLUTION"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#DOSFILETIMES"
+HREF="r1.html#DOSFILETIMES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#EXEC"
+HREF="r1.html#EXEC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FAKEDIRECTORYCREATETIMES"
+HREF="r1.html#FAKEDIRECTORYCREATETIMES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FAKEOPLOCKS"
+HREF="r1.html#FAKEOPLOCKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FOLLOWSYMLINKS"
+HREF="r1.html#FOLLOWSYMLINKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FORCECREATEMODE"
+HREF="r1.html#FORCECREATEMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FORCEDIRECTORYMODE"
+HREF="r1.html#FORCEDIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FORCEDIRECTORYSECURITYMODE"
+HREF="r1.html#FORCEDIRECTORYSECURITYMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FORCEGROUP"
+HREF="r1.html#FORCEGROUP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FORCESECURITYMODE"
+HREF="r1.html#FORCESECURITYMODE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FORCEUSER"
+HREF="r1.html#FORCEUSER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#FSTYPE"
+HREF="r1.html#FSTYPE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#GROUP"
+HREF="r1.html#GROUP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#GUESTOK"
+HREF="r1.html#GUESTOK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#GUESTONLY"
+HREF="r1.html#GUESTONLY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HIDEDOTFILES"
+HREF="r1.html#HIDEDOTFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HIDEFILES"
+HREF="r1.html#HIDEFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HOSTSALLOW"
+HREF="r1.html#HOSTSALLOW"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#HOSTSDENY"
+HREF="r1.html#HOSTSDENY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#INCLUDE"
+HREF="r1.html#INCLUDE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#INHERITACLS"
+HREF="r1.html#INHERITACLS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#INHERITPERMISSIONS"
+HREF="r1.html#INHERITPERMISSIONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#INVALIDUSERS"
+HREF="r1.html#INVALIDUSERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LEVEL2OPLOCKS"
+HREF="r1.html#LEVEL2OPLOCKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LOCKING"
+HREF="r1.html#LOCKING"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LPPAUSECOMMAND"
+HREF="r1.html#LPPAUSECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LPQCOMMAND"
+HREF="r1.html#LPQCOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LPRESUMECOMMAND"
+HREF="r1.html#LPRESUMECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#LPRMCOMMAND"
+HREF="r1.html#LPRMCOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAGICOUTPUT"
+HREF="r1.html#MAGICOUTPUT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAGICSCRIPT"
+HREF="r1.html#MAGICSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MANGLECASE"
+HREF="r1.html#MANGLECASE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MANGLEDMAP"
+HREF="r1.html#MANGLEDMAP"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MANGLEDNAMES"
+HREF="r1.html#MANGLEDNAMES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MANGLINGCHAR"
+HREF="r1.html#MANGLINGCHAR"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MANGLINGMETHOD"
+HREF="r1.html#MANGLINGMETHOD"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAPARCHIVE"
+HREF="r1.html#MAPARCHIVE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAPHIDDEN"
+HREF="r1.html#MAPHIDDEN"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAPSYSTEM"
+HREF="r1.html#MAPSYSTEM"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXCONNECTIONS"
+HREF="r1.html#MAXCONNECTIONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MAXPRINTJOBS"
+HREF="r1.html#MAXPRINTJOBS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MINPRINTSPACE"
+HREF="r1.html#MINPRINTSPACE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#MSDFSROOT"
+HREF="r1.html#MSDFSROOT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#NTACLSUPPORT"
+HREF="r1.html#NTACLSUPPORT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ONLYGUEST"
+HREF="r1.html#ONLYGUEST"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ONLYUSER"
+HREF="r1.html#ONLYUSER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#OPLOCKCONTENTIONLIMIT"
+HREF="r1.html#OPLOCKCONTENTIONLIMIT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PATH"
+HREF="r1.html#PATH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#POSIXLOCKING"
+HREF="r1.html#POSIXLOCKING"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#POSTEXEC"
+HREF="r1.html#POSTEXEC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#POSTSCRIPT"
+HREF="r1.html#POSTSCRIPT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PREEXEC"
+HREF="r1.html#PREEXEC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PREEXECCLOSE"
+HREF="r1.html#PREEXECCLOSE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRESERVECASE"
+HREF="r1.html#PRESERVECASE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTCOMMAND"
+HREF="r1.html#PRINTCOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTOK"
+HREF="r1.html#PRINTOK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTABLE"
+HREF="r1.html#PRINTABLE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTER"
+HREF="r1.html#PRINTER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTERADMIN"
+HREF="r1.html#PRINTERADMIN"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTERDRIVER"
+HREF="r1.html#PRINTERDRIVER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTERDRIVERLOCATION"
+HREF="r1.html#PRINTERDRIVERLOCATION"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTERNAME"
+HREF="r1.html#PRINTERNAME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#PUBLIC"
+HREF="r1.html#PUBLIC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#QUEUEPAUSECOMMAND"
+HREF="r1.html#QUEUEPAUSECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#QUEUERESUMECOMMAND"
+HREF="r1.html#QUEUERESUMECOMMAND"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#READLIST"
+HREF="r1.html#READLIST"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#READONLY"
+HREF="r1.html#READONLY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ROOTPOSTEXEC"
+HREF="r1.html#ROOTPOSTEXEC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ROOTPREEXEC"
+HREF="r1.html#ROOTPREEXEC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#ROOTPREEXECCLOSE"
+HREF="r1.html#ROOTPREEXECCLOSE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SECURITYMASK"
+HREF="r1.html#SECURITYMASK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SETDIRECTORY"
+HREF="r1.html#SETDIRECTORY"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SHAREMODES"
+HREF="r1.html#SHAREMODES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SHORTPRESERVECASE"
+HREF="r1.html#SHORTPRESERVECASE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#STATUS"
-><TT
-CLASS="PARAMETER"
-><I
->status</I
-></TT
-></A
-></P
-></LI
-><LI
-><P
-><A
-HREF="index.html#STRICTALLOCATE"
+HREF="r1.html#STRICTALLOCATE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#STRICTLOCKING"
+HREF="r1.html#STRICTLOCKING"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#STRICTSYNC"
+HREF="r1.html#STRICTSYNC"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#SYNCALWAYS"
+HREF="r1.html#SYNCALWAYS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USECLIENTDRIVER"
+HREF="r1.html#USECLIENTDRIVER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USER"
+HREF="r1.html#USER"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USERNAME"
+HREF="r1.html#USERNAME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#USERS"
+HREF="r1.html#USERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VALIDUSERS"
+HREF="r1.html#VALIDUSERS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VETOFILES"
+HREF="r1.html#VETOFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VETOOPLOCKFILES"
+HREF="r1.html#VETOOPLOCKFILES"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VFSPATH"
+HREF="r1.html#VFSPATH"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VFSOBJECT"
+HREF="r1.html#VFSOBJECT"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VFSOPTIONS"
+HREF="r1.html#VFSOPTIONS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#VOLUME"
+HREF="r1.html#VOLUME"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WIDELINKS"
+HREF="r1.html#WIDELINKS"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WRITABLE"
+HREF="r1.html#WRITABLE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WRITECACHESIZE"
+HREF="r1.html#WRITECACHESIZE"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WRITELIST"
+HREF="r1.html#WRITELIST"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WRITEOK"
+HREF="r1.html#WRITEOK"
><TT
CLASS="PARAMETER"
><I
><LI
><P
><A
-HREF="index.html#WRITEABLE"
+HREF="r1.html#WRITEABLE"
><TT
CLASS="PARAMETER"
><I
>abort shutdown script (G)</DT
><DD
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>This parameter only exists in the HEAD cvs branch</I
-></SPAN
>
This a full path name to a script called by
<A
></A
> that
should stop a shutdown procedure issued by the <A
-HREF="index.html#SHUTDOWNSCRIPT"
+HREF="r1.html#SHUTDOWNSCRIPT"
><TT
CLASS="PARAMETER"
><I
><P
>This command will be run as user.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>None</I
-></SPAN
>.</P
><P
>Example: <B
> will return an ACCESS_DENIED error to the client.</P
><P
>See also <A
-HREF="index.html#DELETEPRINTERCOMMAND"
+HREF="r1.html#DELETEPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#SHOWADDPRINTERWIZARD"
+HREF="r1.html#SHOWADDPRINTERWIZARD"
><TT
CLASS="PARAMETER"
><I
></A
></P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
><P
>Example: <B
><P
> This parameter is only used for add file shares. To add printer shares,
see the <A
-HREF="index.html#ADDPRINTERCOMMAND"
+HREF="r1.html#ADDPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
</P
><P
> See also <A
-HREF="index.html#CHANGESHARECOMMAND"
+HREF="r1.html#CHANGESHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#DELETESHARECOMMAND"
+HREF="r1.html#DELETESHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
>.
</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
><P
>Example: <B
><P
>Default: <B
CLASS="COMMAND"
->add machine script = <empty string>
+>add machine script = <empty string>
</B
></P
><P
><DD
><P
>This is the full pathname to a script that will
- be run <SPAN
-CLASS="emphasis"
-><I
+ be run <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
> by <A
HREF="smbd.8.html"
TARGET="_top"
TARGET="_top"
>smbd</A
> to create the required UNIX users
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>ON DEMAND</I
-></SPAN
> when a user accesses the Samba server.</P
><P
>In order to use this option, <A
TARGET="_top"
>smbd</A
>
- must <SPAN
-CLASS="emphasis"
-><I
+ must <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> be set to <TT
CLASS="PARAMETER"
><I
CLASS="COMMAND"
>smbd</B
> will
- call the specified script <SPAN
-CLASS="emphasis"
-><I
+ call the specified script <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
>, expanding
any <TT
CLASS="PARAMETER"
match existing Windows NT accounts.</P
><P
>See also <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PASSWORDSERVER"
+HREF="r1.html#PASSWORDSERVER"
> <TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#DELETEUSERSCRIPT"
+HREF="r1.html#DELETEUSERSCRIPT"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->add user script = <empty string>
+>add user script = <empty string>
</B
></P
><P
><DD
><P
>This is the full pathname to a script that will
- be run <SPAN
-CLASS="emphasis"
-><I
+ be run <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
> by <A
HREF="smbd.8.html"
TARGET="_top"
>smbd(8)</A
-> when a new group is requested. It will expand any <TT
+> when a new group is
+ requested. It will expand any
+ <TT
CLASS="PARAMETER"
><I
>%g</I
></TT
-> to the group name passed. This script is only useful for installations using the Windows NT domain administration tools.
+> to the group name passed.
+ This script is only useful for installations using the
+ Windows NT domain administration tools. The script is
+ free to create a group with an arbitrary name to
+ circumvent unix group name restrictions. In that case
+ the script must print the numeric gid of the created
+ group on stdout.
</P
></DD
><DT
this list will be able to do anything they like on the share,
irrespective of file permissions.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no admin users</I
-></SPAN
></P
><P
>Example: <B
TARGET="_top"
>smbd(8)</A
>
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
>. Any <TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#HOSTSALLOW"
+HREF="r1.html#HOSTSALLOW"
> <TT
CLASS="PARAMETER"
><I
><DD
><P
>This option only takes effect when the <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>This is a synonym for the <A
-HREF="index.html#PRELOAD"
+HREF="r1.html#PRELOAD"
> <TT
CLASS="PARAMETER"
><I
>smbd</B
> will use when authenticating
a user. This option defaults to sensible values based on <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->auth methods = <empty string></B
+>auth methods = <empty string></B
></P
><P
>Example: <B
><I
>available = no</I
></TT
->, then <SPAN
-CLASS="emphasis"
-><I
+>, then <I
CLASS="EMPHASIS"
>ALL</I
-></SPAN
>
attempts to connect to the service will fail. Such failures are
logged.</P
>nmbd</B
> to bind
to ports 137 and 138 on the interfaces listed in the <A
-HREF="index.html#INTERFACES"
+HREF="r1.html#INTERFACES"
>interfaces</A
> parameter. <B
CLASS="COMMAND"
>smbd(8)</A
>
to bind only to the interface list given in the <A
-HREF="index.html#INTERFACES"
+HREF="r1.html#INTERFACES"
> interfaces</A
> parameter. This restricts the networks that
<B
>bind interfaces only</I
></TT
> is set then
- unless the network address <SPAN
-CLASS="emphasis"
-><I
+ unless the network address <I
CLASS="EMPHASIS"
>127.0.0.1</I
-></SPAN
> is added
to the <TT
CLASS="PARAMETER"
CLASS="COMMAND"
>smbpasswd</B
>
- by default connects to the <SPAN
-CLASS="emphasis"
-><I
+ by default connects to the <I
CLASS="EMPHASIS"
>localhost - 127.0.0.1</I
-></SPAN
>
address as an SMB client to issue the password change request. If
<TT
>bind interfaces only</I
></TT
> is set then unless the
- network address <SPAN
-CLASS="emphasis"
-><I
+ network address <I
CLASS="EMPHASIS"
>127.0.0.1</I
-></SPAN
> is added to the
<TT
CLASS="PARAMETER"
CLASS="COMMAND"
>nmbd</B
> at the address
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>127.0.0.1</I
-></SPAN
> to determine if they are running.
- Not adding <SPAN
-CLASS="emphasis"
-><I
+ Not adding <I
CLASS="EMPHASIS"
>127.0.0.1</I
-></SPAN
> will cause <B
CLASS="COMMAND"
> smbd</B
><P
>If this parameter is set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
>, then
Samba 2.2 will behave as previous versions of Samba would and
will fail the lock request immediately if the lock range
><DD
><P
>See the <A
-HREF="index.html#BROWSEABLE"
+HREF="r1.html#BROWSEABLE"
><TT
CLASS="PARAMETER"
><I
> call. Normally
set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>. You should never need to change
this.</P
><P
><DD
><P
>See the discussion in the section <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
>NAME MANGLING</A
>.</P
><P
><DD
><P
>Synonym for <A
-HREF="index.html#CASESENSITIVE"
+HREF="r1.html#CASESENSITIVE"
>case
sensitive</A
>.</P
</P
><P
> See also <A
-HREF="index.html#ADDSHARECOMMAND"
+HREF="r1.html#ADDSHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#DELETESHARECOMMAND"
+HREF="r1.html#DELETESHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
>.
</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
><P
>Example: <B
><P
>If you want to set the string that is displayed next to the
machine name then see the <A
-HREF="index.html#SERVERSTRING"
+HREF="r1.html#SERVERSTRING"
><TT
CLASS="PARAMETER"
><I
></A
> parameter.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>No comment string</I
-></SPAN
></P
><P
>Example: <B
copied must occur earlier in the configuration file than the
service doing the copying.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no value</I
-></SPAN
></P
><P
>Example: <B
><P
>A synonym for this parameter is
<A
-HREF="index.html#CREATEMODE"
+HREF="r1.html#CREATEMODE"
><TT
CLASS="PARAMETER"
><I
calculated according to the mapping from DOS modes to UNIX
permissions, and the resulting UNIX mode is then bit-wise 'AND'ed
with this parameter. This parameter may be thought of as a bit-wise
- MASK for the UNIX modes of a file. Any bit <SPAN
-CLASS="emphasis"
-><I
+ MASK for the UNIX modes of a file. Any bit <I
CLASS="EMPHASIS"
>not</I
-></SPAN
>
set here will be removed from the modes set on a file when it is
created.</P
><P
>Following this Samba will bit-wise 'OR' the UNIX mode created
from this parameter with the value of the <A
-HREF="index.html#FORCECREATEMODE"
+HREF="r1.html#FORCECREATEMODE"
><TT
CLASS="PARAMETER"
><I
><P
>This parameter does not affect directory modes. See the
parameter <A
-HREF="index.html#DIRECTORYMODE"
+HREF="r1.html#DIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
> for details.</P
><P
>See also the <A
-HREF="index.html#FORCECREATEMODE"
+HREF="r1.html#FORCECREATEMODE"
><TT
CLASS="PARAMETER"
><I
></A
> parameter for forcing particular mode
bits to be set on created files. See also the <A
-HREF="index.html#DIRECTORYMODE"
+HREF="r1.html#DIRECTORYMODE"
> <TT
CLASS="PARAMETER"
><I
></A
> parameter for masking
mode bits on created directories. See also the <A
-HREF="index.html#INHERITPERMISSIONS"
+HREF="r1.html#INHERITPERMISSIONS"
> <TT
CLASS="PARAMETER"
><I
>Note that this parameter does not apply to permissions
set by Windows NT/2000 ACL editors. If the administrator wishes to enforce
a mask on access control lists also, they need to set the <A
-HREF="index.html#SECURITYMASK"
+HREF="r1.html#SECURITYMASK"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>This is a synonym for <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
><TT
CLASS="PARAMETER"
><I
>csc policy (S)</DT
><DD
><P
->This stands for <SPAN
-CLASS="emphasis"
-><I
+>This stands for <I
CLASS="EMPHASIS"
>client-side caching
policy</I
-></SPAN
>, and specifies how clients capable of offline
caching will cache the files in the share. The valid values
are: manual, documents, programs, disable.</P
message header when turned on.</P
><P
>Note that the parameter <A
-HREF="index.html#DEBUGTIMESTAMP"
+HREF="r1.html#DEBUGTIMESTAMP"
><TT
CLASS="PARAMETER"
><I
to the timestamp message headers in the logfile when turned on.</P
><P
>Note that the parameter <A
-HREF="index.html#DEBUGTIMESTAMP"
+HREF="r1.html#DEBUGTIMESTAMP"
><TT
CLASS="PARAMETER"
><I
><P
>Samba 2.2 debug log messages are timestamped
by default. If you are running at a high <A
-HREF="index.html#DEBUGLEVEL"
+HREF="r1.html#DEBUGLEVEL"
> <TT
CLASS="PARAMETER"
><I
in the log file if turned on.</P
><P
>Note that the parameter <A
-HREF="index.html#DEBUGTIMESTAMP"
+HREF="r1.html#DEBUGTIMESTAMP"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#LOGLEVEL"
+HREF="r1.html#LOGLEVEL"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>A synonym for <A
-HREF="index.html#DEFAULTSERVICE"
+HREF="r1.html#DEFAULTSERVICE"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>See the section on <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
> NAME MANGLING</A
>. Also note the <A
-HREF="index.html#SHORTPRESERVECASE"
+HREF="r1.html#SHORTPRESERVECASE"
> <TT
CLASS="PARAMETER"
><I
><DD
><P
>This parameter is only applicable to <A
-HREF="index.html#PRINTOK"
+HREF="r1.html#PRINTOK"
>printable</A
> services. When smbd is serving
Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
><P
>This parameter specifies the name of a service
which will be connected to if the service actually requested cannot
- be found. Note that the square brackets are <SPAN
-CLASS="emphasis"
-><I
+ be found. Note that the square brackets are <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
>
given in the parameter value (see example below).</P
><P
service results in an error.</P
><P
>Typically the default service would be a <A
-HREF="index.html#GUESTOK"
+HREF="r1.html#GUESTOK"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#READONLY"
+HREF="r1.html#READONLY"
> <TT
CLASS="PARAMETER"
><I
><P
>Example:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>[global]
[pub]
path = /%S
</PRE
+></TD
+></TR
+></TABLE
></P
></DD
><DT
><DD
><P
>This is the full pathname to a script that will
- be run <SPAN
-CLASS="emphasis"
-><I
+ be run <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
> by <A
HREF="smbd.8.html"
TARGET="_top"
> will return an ACCESS_DENIED error to the client.</P
><P
>See also <A
-HREF="index.html#ADDPRINTERCOMMAND"
+HREF="r1.html#ADDPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#SHOWADDPRINTERWIZARD"
+HREF="r1.html#SHOWADDPRINTERWIZARD"
><TT
CLASS="PARAMETER"
><I
></A
></P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
><P
>Example: <B
><P
> This parameter is only used to remove file shares. To delete printer shares,
see the <A
-HREF="index.html#DELETEPRINTERCOMMAND"
+HREF="r1.html#DELETEPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
</P
><P
> See also <A
-HREF="index.html#ADDSHARECOMMAND"
+HREF="r1.html#ADDSHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#CHANGESHARECOMMAND"
+HREF="r1.html#CHANGESHARECOMMAND"
><TT
CLASS="PARAMETER"
><I
>.
</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
><P
>Example: <B
><P
>Default: <B
CLASS="COMMAND"
->delete user script = <empty string>
+>delete user script = <empty string>
</B
></P
><P
TARGET="_top"
>smbd(8)</A
>
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
>. Any <TT
CLASS="PARAMETER"
><I
>This option is used when Samba is attempting to
delete a directory that contains one or more vetoed directories
(see the <A
-HREF="index.html#VETOFILES"
+HREF="r1.html#VETOFILES"
><TT
CLASS="PARAMETER"
><I
>
option). If this option is set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
> (the default) then if a vetoed
directory contains any non-vetoed files or directories then the
directory delete will fail. This is usually what you want.</P
><P
>If this option is set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, then Samba
will attempt to recursively delete any files and directories within
the vetoed directory. This can be useful for integration with file
is deleted (so long as the user has permissions to do so).</P
><P
>See also the <A
-HREF="index.html#VETOFILES"
+HREF="r1.html#VETOFILES"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#HOSTSDENY"
+HREF="r1.html#HOSTSDENY"
><TT
CLASS="PARAMETER"
><I
third return value can give the block size in bytes. The default
blocksize is 1024 bytes.</P
><P
->Note: Your script should <SPAN
-CLASS="emphasis"
-><I
+>Note: Your script should <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> be setuid or
setgid and should be owned by (and writeable only by) root!</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>By default internal routines for
determining the disk capacity and remaining space will be used.
</I
-></SPAN
></P
><P
>Example: <B
><P
>Where the script dfree (which must be made executable) could be:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>
#!/bin/sh
df $1 | tail -1 | awk '{print $2" "$4}'
</PRE
+></TD
+></TR
+></TABLE
></P
><P
>or perhaps (on Sys V based systems):</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>
#!/bin/sh
/usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}'
</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Note that you may have to replace the command names
><DD
><P
>Synonym for <A
-HREF="index.html#PATH"
+HREF="r1.html#PATH"
><TT
CLASS="PARAMETER"
><I
calculated according to the mapping from DOS modes to UNIX permissions,
and the resulting UNIX mode is then bit-wise 'AND'ed with this
parameter. This parameter may be thought of as a bit-wise MASK for
- the UNIX modes of a directory. Any bit <SPAN
-CLASS="emphasis"
-><I
+ the UNIX modes of a directory. Any bit <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> set
here will be removed from the modes set on a directory when it is
created.</P
><P
>Following this Samba will bit-wise 'OR' the UNIX mode
created from this parameter with the value of the <A
-HREF="index.html#FORCEDIRECTORYMODE"
+HREF="r1.html#FORCEDIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
>Note that this parameter does not apply to permissions
set by Windows NT/2000 ACL editors. If the administrator wishes to enforce
a mask on access control lists also, they need to set the <A
-HREF="index.html#DIRECTORYSECURITYMASK"
+HREF="r1.html#DIRECTORYSECURITYMASK"
><TT
CLASS="PARAMETER"
><I
>.</P
><P
>See the <A
-HREF="index.html#FORCEDIRECTORYMODE"
+HREF="r1.html#FORCEDIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
bits to always be set on created directories.</P
><P
>See also the <A
-HREF="index.html#CREATEMODE"
+HREF="r1.html#CREATEMODE"
><TT
CLASS="PARAMETER"
><I
></A
> parameter for masking mode bits on created files,
and the <A
-HREF="index.html#DIRECTORYSECURITYMASK"
+HREF="r1.html#DIRECTORYSECURITYMASK"
><TT
CLASS="PARAMETER"
><I
> parameter.</P
><P
>Also refer to the <A
-HREF="index.html#INHERITPERMISSIONS"
+HREF="r1.html#INHERITPERMISSIONS"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#DIRECTORYMASK"
+HREF="r1.html#DIRECTORYMASK"
><TT
CLASS="PARAMETER"
><I
meaning a user is allowed to modify all the user/group/world
permissions on a directory.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that users who can access the
Samba server through other means can easily bypass this restriction,
so it is primarily useful for standalone "appliance" systems.
>.</P
><P
>See also the <A
-HREF="index.html#FORCEDIRECTORYSECURITYMODE"
+HREF="r1.html#FORCEDIRECTORYSECURITYMODE"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#SECURITYMASK"
+HREF="r1.html#SECURITYMASK"
><TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#FORCESECURITYMODE"
+HREF="r1.html#FORCESECURITYMODE"
><TT
CLASS="PARAMETER"
><I
Wizard or by using the NT printer properties dialog window. It will
also disable the capability of Windows NT/2000 clients to download
print drivers from the Samba host upon demand.
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>Be very careful about enabling this parameter.</I
-></SPAN
>
</P
><P
>See also <A
-HREF="index.html#USECLIENTDRIVER"
+HREF="r1.html#USECLIENTDRIVER"
>use client driver</A
>
</P
action.</P
><P
>See also the parameter <A
-HREF="index.html#WINSSUPPORT"
+HREF="r1.html#WINSSUPPORT"
><TT
CLASS="PARAMETER"
><I
></DD
><DT
><A
-NAME="DOMAINADMINGROUP"
-></A
->domain admin group (G)</DT
-><DD
-><P
->This parameter is intended as a temporary solution
- to enable users to be a member of the "Domain Admins" group when
- a Samba host is acting as a PDC. A complete solution will be provided
- by a system for mapping Windows NT/2000 groups onto UNIX groups.
- Please note that this parameter has a somewhat confusing name. It
- accepts a list of usernames and of group names in standard
- <TT
-CLASS="FILENAME"
->smb.conf</TT
-> notation.
- </P
-><P
->See also <A
-HREF="index.html#DOMAINGUESTGROUP"
-><TT
-CLASS="PARAMETER"
-><I
->domain
- guest group</I
-></TT
-></A
->, <A
-HREF="index.html#DOMAINLOGONS"
-><TT
-CLASS="PARAMETER"
-><I
->domain
- logons</I
-></TT
-></A
->
- </P
-><P
->Default: <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->no domain administrators</I
-></SPAN
-></P
-><P
->Example: <B
-CLASS="COMMAND"
->domain admin group = root @wheel</B
-></P
-></DD
-><DT
-><A
-NAME="DOMAINGUESTGROUP"
-></A
->domain guest group (G)</DT
-><DD
-><P
->This parameter is intended as a temporary solution
- to enable users to be a member of the "Domain Guests" group when
- a Samba host is acting as a PDC. A complete solution will be provided
- by a system for mapping Windows NT/2000 groups onto UNIX groups.
- Please note that this parameter has a somewhat confusing name. It
- accepts a list of usernames and of group names in standard
- <TT
-CLASS="FILENAME"
->smb.conf</TT
-> notation.
- </P
-><P
->See also <A
-HREF="index.html#DOMAINADMINGROUP"
-><TT
-CLASS="PARAMETER"
-><I
->domain
- admin group</I
-></TT
-></A
->, <A
-HREF="index.html#DOMAINLOGONS"
-><TT
-CLASS="PARAMETER"
-><I
->domain
- logons</I
-></TT
-></A
->
- </P
-><P
->Default: <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->no domain guests</I
-></SPAN
-></P
-><P
->Example: <B
-CLASS="COMMAND"
->domain guest group = nobody @guest</B
-></P
-></DD
-><DT
-><A
NAME="DOMAINLOGONS"
></A
>domain logons (G)</DT
><P
>If set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, the Samba server will serve
Windows 95/98 Domain logons for the <A
-HREF="index.html#WORKGROUP"
+HREF="r1.html#WORKGROUP"
> <TT
CLASS="PARAMETER"
><I
> to
claim a special domain specific NetBIOS name that identifies
it as a domain master browser for its given <A
-HREF="index.html#WORKGROUP"
+HREF="r1.html#WORKGROUP"
> <TT
CLASS="PARAMETER"
><I
strangely and may fail.</P
><P
>If <A
-HREF="index.html#DOMAINLOGONS"
+HREF="r1.html#DOMAINLOGONS"
><B
CLASS="COMMAND"
>domain logons = yes</B
>.
Experimentation is the best policy :-) </P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none (i.e., all directories are OK
to descend)</I
-></SPAN
></P
><P
>Example: <B
> is acting
on behalf of is not the file owner. Setting this option to <TT
CLASS="CONSTANT"
-> true</TT
+> yes</TT
> allows DOS semantics and <A
HREF="smbd.8.html"
TARGET="_top"
></A
> program for information on how to set up
and maintain this file), or set the <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
>security = [server|domain|ads]</A
> parameter which
causes <B
to standard output. This listing will then be used in response
to the level 1 and 2 EnumPorts() RPC.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no enumports command</I
-></SPAN
></P
><P
>Example: <B
><DD
><P
>This is a synonym for <A
-HREF="index.html#PREEXEC"
+HREF="r1.html#PREEXEC"
> <TT
CLASS="PARAMETER"
><I
the file.</P
><P
>It is generally much better to use the real <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>This parameter specifies a set of UNIX mode bit
- permissions that will <SPAN
-CLASS="emphasis"
-><I
+ permissions that will <I
CLASS="EMPHASIS"
>always</I
-></SPAN
> be set on a
file created by Samba. This is done by bitwise 'OR'ing these bits onto
the mode bits of a file that is being created or having its
parameter is applied.</P
><P
>See also the parameter <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
><TT
CLASS="PARAMETER"
><I
> for details on masking mode bits on files.</P
><P
>See also the <A
-HREF="index.html#INHERITPERMISSIONS"
+HREF="r1.html#INHERITPERMISSIONS"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>This parameter specifies a set of UNIX mode bit
- permissions that will <SPAN
-CLASS="emphasis"
-><I
+ permissions that will <I
CLASS="EMPHASIS"
>always</I
-></SPAN
> be set on a directory
created by Samba. This is done by bitwise 'OR'ing these bits onto the
mode bits of a directory that is being created. The default for this
applied.</P
><P
>See also the parameter <A
-HREF="index.html#DIRECTORYMASK"
+HREF="r1.html#DIRECTORYMASK"
><TT
CLASS="PARAMETER"
><I
on created directories.</P
><P
>See also the <A
-HREF="index.html#INHERITPERMISSIONS"
+HREF="r1.html#INHERITPERMISSIONS"
><TT
CLASS="PARAMETER"
><I
allows a user to modify all the user/group/world permissions on a
directory without restrictions.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that users who can access the
Samba server through other means can easily bypass this restriction,
so it is primarily useful for standalone "appliance" systems.
it set as 0000.</P
><P
>See also the <A
-HREF="index.html#DIRECTORYSECURITYMASK"
+HREF="r1.html#DIRECTORYSECURITYMASK"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#SECURITYMASK"
+HREF="r1.html#SECURITYMASK"
> <TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#FORCESECURITYMODE"
+HREF="r1.html#FORCESECURITYMODE"
><TT
CLASS="PARAMETER"
><I
other users will retain their ordinary primary group.</P
><P
>If the <A
-HREF="index.html#FORCEUSER"
+HREF="r1.html#FORCEUSER"
><TT
CLASS="PARAMETER"
><I
>.</P
><P
>See also <A
-HREF="index.html#FORCEUSER"
+HREF="r1.html#FORCEUSER"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no forced group</I
-></SPAN
></P
><P
>Example: <B
and allows a user to modify all the user/group/world permissions on a file,
with no restrictions.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that users who can access
the Samba server through other means can easily bypass this restriction,
so it is primarily useful for standalone "appliance" systems.
this set to 0000.</P
><P
>See also the <A
-HREF="index.html#FORCEDIRECTORYSECURITYMODE"
+HREF="r1.html#FORCEDIRECTORYSECURITYMODE"
><TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#DIRECTORYSECURITYMASK"
+HREF="r1.html#DIRECTORYSECURITYMASK"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#SECURITYMASK"
+HREF="r1.html#SECURITYMASK"
><TT
CLASS="PARAMETER"
><I
as the primary group of the connecting user (this was a bug).</P
><P
>See also <A
-HREF="index.html#FORCEGROUP"
+HREF="r1.html#FORCEGROUP"
><TT
CLASS="PARAMETER"
><I
></A
></P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no forced user</I
-></SPAN
></P
><P
>Example: <B
caching algorithm will be used to reduce the time taken for getwd()
calls. This can have a significant impact on performance, especially
when the <A
-HREF="index.html#WIDELINKS"
+HREF="r1.html#WIDELINKS"
><TT
CLASS="PARAMETER"
><I
</A
>parameter is set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
>.</P
><P
>Default: <B
><DD
><P
>Synonym for <A
-HREF="index.html#FORCEGROUP"
+HREF="r1.html#FORCEGROUP"
><TT
CLASS="PARAMETER"
><I
><P
>This is a username which will be used for access
to services which are specified as <A
-HREF="index.html#GUESTOK"
+HREF="r1.html#GUESTOK"
><TT
CLASS="PARAMETER"
><I
> lp(1)</B
>.</P
><P
->This paramater does not accept % marcos, becouse
+>This paramater does not accept % macros, because
many parts of the system require this value to be
- constant for correct operation</P
+ constant for correct operation.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>specified at compile time, usually
"nobody"</I
-></SPAN
></P
><P
>Example: <B
> for
a service, then no password is required to connect to the service.
Privileges will be those of the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
>.</P
><P
>See the section below on <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
> for
a service, then only guest connections to the service are permitted.
This parameter will have no effect if <A
-HREF="index.html#GUESTOK"
+HREF="r1.html#GUESTOK"
> <TT
CLASS="PARAMETER"
><I
> is not set for the service.</P
><P
>See the section below on <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
as they are scanned.</P
><P
>See also <A
-HREF="index.html#HIDEDOTFILES"
+HREF="r1.html#HIDEDOTFILES"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#VETOFILES"
+HREF="r1.html#VETOFILES"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#CASESENSITIVE"
+HREF="r1.html#CASESENSITIVE"
> <TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no file are hidden</I
-></SPAN
></P
><P
>Example: <B
></DD
><DT
><A
+NAME="HIDESPECIALFILES"
+></A
+>hide special files (G)</DT
+><DD
+><P
+>This parameter prevents clients from seeing
+ special files such as sockets, devices and fifo's in directory
+ listings.
+ </P
+><P
+>Default: <B
+CLASS="COMMAND"
+>hide special files = no</B
+></P
+></DD
+><DT
+><A
NAME="HOMEDIRMAP"
></A
>homedir map (G)</DT
><DD
><P
>If<A
-HREF="index.html#NISHOMEDIR"
+HREF="r1.html#NISHOMEDIR"
><TT
CLASS="PARAMETER"
><I
></A
> is <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, and <A
HREF="smbd.8.html"
TARGET="_top"
that copes with different map formats and also Amd (another
automounter) maps.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE :</I
-></SPAN
>A working NIS client is required on
the system for this option to work.</P
><P
>See also <A
-HREF="index.html#NISHOMEDIR"
+HREF="r1.html#NISHOMEDIR"
><TT
CLASS="PARAMETER"
><I
>
</A
>, <A
-HREF="index.html#DOMAINLOGONS"
+HREF="r1.html#DOMAINLOGONS"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->homedir map = <empty string></B
+>homedir map = <empty string></B
></P
><P
>Example: <B
to browse Dfs trees hosted on the server.</P
><P
>See also the <A
-HREF="index.html#MSDFSROOT"
+HREF="r1.html#MSDFSROOT"
><TT
CLASS="PARAMETER"
><I
><P
>Note that the localhost address 127.0.0.1 will always
be allowed access unless specifically denied by a <A
-HREF="index.html#HOSTSDENY"
+HREF="r1.html#HOSTSDENY"
><TT
CLASS="PARAMETER"
><I
><P
>You can also specify hosts by network/netmask pairs and
by netgroup names if your system supports netgroups. The
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>EXCEPT</I
-></SPAN
> keyword can also be used to limit a
wildcard list. The following examples may provide some help:</P
><P
> for a way of testing your host access to see if it does
what you expect.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none (i.e., all hosts permitted access)
</I
-></SPAN
></P
><P
>Example: <B
>hosts allow</I
></TT
>
- - hosts listed here are <SPAN
-CLASS="emphasis"
-><I
+ - hosts listed here are <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> permitted access to
services unless the specific services have their own lists to override
this one. Where the lists conflict, the <TT
>
list takes precedence.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none (i.e., no hosts specifically excluded)
</I
-></SPAN
></P
><P
>Example: <B
</P
><P
>This is not be confused with <A
-HREF="index.html#HOSTSALLOW"
+HREF="r1.html#HOSTSALLOW"
> <TT
CLASS="PARAMETER"
><I
> may be useful for NT clients which will
not supply passwords to Samba.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE :</I
-></SPAN
> The use of <TT
CLASS="PARAMETER"
><I
></TT
> option be only used if you really
know what you are doing, or perhaps on a home network where you trust
- your spouse and kids. And only if you <SPAN
-CLASS="emphasis"
-><I
+ your spouse and kids. And only if you <I
CLASS="EMPHASIS"
>really</I
-></SPAN
> trust
them :-).</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no host equivalences</I
-></SPAN
></P
><P
>Example: <B
>.
</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no file included</I
-></SPAN
></P
><P
>Example: <B
><P
>The permissions on new files and directories
are normally governed by <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#DIRECTORYMASK"
+HREF="r1.html#DIRECTORYMASK"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#FORCECREATEMODE"
+HREF="r1.html#FORCECREATEMODE"
><TT
CLASS="PARAMETER"
><I
>
</A
> and <A
-HREF="index.html#FORCEDIRECTORYMODE"
+HREF="r1.html#FORCEDIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
>New files inherit their read/write bits from the parent
directory. Their execute bits continue to be determined by
<A
-HREF="index.html#MAPARCHIVE"
+HREF="r1.html#MAPARCHIVE"
><TT
CLASS="PARAMETER"
><I
>
</A
>, <A
-HREF="index.html#MAPHIDDEN"
+HREF="r1.html#MAPHIDDEN"
><TT
CLASS="PARAMETER"
><I
>
</A
> and <A
-HREF="index.html#MAPSYSTEM"
+HREF="r1.html#MAPSYSTEM"
><TT
CLASS="PARAMETER"
><I
</A
> as usual.</P
><P
->Note that the setuid bit is <SPAN
-CLASS="emphasis"
-><I
+>Note that the setuid bit is <I
CLASS="EMPHASIS"
>never</I
-></SPAN
> set via
inheritance (the code explicitly prohibits this).</P
><P
share to be used flexibly by each user.</P
><P
>See also <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#DIRECTORYMASK"
+HREF="r1.html#DIRECTORYMASK"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#FORCECREATEMODE"
+HREF="r1.html#FORCECREATEMODE"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#FORCEDIRECTORYMODE"
+HREF="r1.html#FORCEDIRECTORYMODE"
><TT
CLASS="PARAMETER"
><I
The netmasks of the latter two interfaces would be set to 255.255.255.0.</P
><P
>See also <A
-HREF="index.html#BINDINTERFACESONLY"
+HREF="r1.html#BINDINTERFACESONLY"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>all active interfaces except 127.0.0.1
that are broadcast capable</I
-></SPAN
></P
></DD
><DT
><DD
><P
>This is a list of users that should not be allowed
- to login to this service. This is really a <SPAN
-CLASS="emphasis"
-><I
+ to login to this service. This is really a <I
CLASS="EMPHASIS"
>paranoid</I
-></SPAN
>
check to absolutely ensure an improper setting does not breach
your security.</P
so the value <TT
CLASS="PARAMETER"
><I
->+&group</I
+>+&group</I
></TT
> means check the
UNIX group database, followed by the NIS netgroup database, and
This is useful in the [homes] section.</P
><P
>See also <A
-HREF="index.html#VALIDUSERS"
+HREF="r1.html#VALIDUSERS"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no invalid users</I
-></SPAN
></P
><P
>Example: <B
><P
>Keepalives should, in general, not be needed if the socket
being used has the SO_KEEPALIVE attribute set on it (see <A
-HREF="index.html#SOCKETOPTIONS"
+HREF="r1.html#SOCKETOPTIONS"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>For UNIXes that support kernel based <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
>
</A
> has oplocked. This allows complete data consistency between
- SMB/CIFS, NFS and local file access (and is a <SPAN
-CLASS="emphasis"
-><I
+ SMB/CIFS, NFS and local file access (and is a <I
CLASS="EMPHASIS"
>very</I
-></SPAN
>
cool feature :-).</P
><P
You should never need to touch this parameter.</P
><P
>See also the <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
>
</A
> and <A
-HREF="index.html#LEVEL2OPLOCKS"
+HREF="r1.html#LEVEL2OPLOCKS"
><TT
CLASS="PARAMETER"
><I
page for more information on how to accmplish this.
</P
><P
->Default : <SPAN
-CLASS="emphasis"
-><I
+>Default : <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
></DD
><DT
><P
>Default : <B
CLASS="COMMAND"
->ldap filter = (&(uid=%u)(objectclass=sambaAccount))</B
+>ldap filter = (&(uid=%u)(objectclass=sambaAccount))</B
></P
></DD
><DT
><P
>This option is used to define whether or not Samba should
use SSL when connecting to the ldap server
- This is <SPAN
-CLASS="emphasis"
-><I
+ This is <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> related to
Samba's previous SSL support which was enabled by specifying the
<B
>ldap ssl</I
></TT
> can be set to one of three values:
- (a) <TT
-CLASS="CONSTANT"
->on</TT
-> - Always use SSL when contacting the
- <TT
+ </P
+><P
+></P
+><UL
+><LI
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>On</I
+></TT
+> = Always use SSL when contacting the
+ <TT
CLASS="PARAMETER"
><I
>ldap server</I
></TT
->, (b) <TT
-CLASS="CONSTANT"
->off</TT
-> -
- Never use SSL when querying the directory, or (c) <TT
-CLASS="CONSTANT"
->start_tls</TT
->
- - Use the LDAPv3 StartTLS extended operation
- (RFC2830) for communicating with the directory server.
- </P
+>.</P
+></LI
+><LI
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>Off</I
+></TT
+> = Never use SSL when querying the directory.</P
+></LI
+><LI
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>Start_tls</I
+></TT
+> = Use the LDAPv3 StartTLS extended operation
+ (RFC2830) for communicating with the directory server.</P
+></LI
+></UL
><P
>Default : <B
CLASS="COMMAND"
>ldap suffix (G)</DT
><DD
><P
->Default : <SPAN
-CLASS="emphasis"
-><I
+>Default : <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
></DD
><DT
>It specifies where users are added to the tree.
</P
><P
->Default : <SPAN
-CLASS="emphasis"
-><I
+>Default : <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
></DD
><DT
added to the ldap tree.
</P
><P
->Default : <SPAN
-CLASS="emphasis"
-><I
+>Default : <I
CLASS="EMPHASIS"
>none</I
-></SPAN
+></P
+></DD
+><DT
+><A
+NAME="LDAPPASSWDSYNC"
+></A
+>ldap passwd sync (G)</DT
+><DD
+><P
+>This option is used to define whether
+ or not Samba should sync the LDAP password with the NT
+ and LM hashes for normal accounts (NOT for
+ workstation, server or domain trusts) on a password
+ change via SAMBA.
+ </P
+><P
+> The <TT
+CLASS="PARAMETER"
+><I
+>ldap passwd sync</I
+></TT
+> can be set to one of three values:
+ </P
+><P
+></P
+><UL
+><LI
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>Yes</I
+></TT
+> = Try to update the LDAP, NT and LM passwords and update the pwdLastSet time.</P
+></LI
+><LI
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>No</I
+></TT
+> = Update NT and LM passwords and update the pwdLastSet time.</P
+></LI
+><LI
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>Only</I
+></TT
+> = Only update the LDAP password and let the LDAP server do the rest.</P
+></LI
+></UL
+><P
+>Default : <B
+CLASS="COMMAND"
+>ldap passwd sync = no</B
></P
></DD
><DT
>For more discussions on level2 oplocks see the CIFS spec.</P
><P
>Currently, if <A
-HREF="index.html#KERNELOPLOCKS"
+HREF="r1.html#KERNELOPLOCKS"
><TT
CLASS="PARAMETER"
><I
>yes</TT
>).
Note also, the <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
</A
> parameter must be set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> on this share in order for
this parameter to have any effect.</P
><P
>See also the <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
>
</A
> and <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
the Samba server in their browse list. This parameter can have three
values, <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
>, or
<TT
CLASS="CONSTANT"
>.
If set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
> Samba will never produce these
broadcasts. If set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> Samba will produce
Lanman announce broadcasts at a frequency set by the parameter
<TT
>.</P
><P
>See also <A
-HREF="index.html#LMINTERVAL"
+HREF="r1.html#LMINTERVAL"
><TT
CLASS="PARAMETER"
><I
><P
>If Samba is set to produce Lanman announce
broadcasts needed by OS/2 clients (see the <A
-HREF="index.html#LMANNOUNCE"
+HREF="r1.html#LMANNOUNCE"
> <TT
CLASS="PARAMETER"
><I
parameter.</P
><P
>See also <A
-HREF="index.html#LMANNOUNCE"
+HREF="r1.html#LMANNOUNCE"
><TT
CLASS="PARAMETER"
><I
>A boolean variable that controls whether all
printers in the printcap will be loaded for browsing by default.
See the <A
-HREF="index.html#AEN79"
+HREF="r1.html#AEN79"
>printers</A
> section for
more details.</P
> to try and become a local master browser
on a subnet. If set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
> then <B
CLASS="COMMAND"
> nmbd</B
on a subnet and will also lose in all browsing elections. By
default this value is set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>. Setting this value to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> doesn't
- mean that Samba will <SPAN
-CLASS="emphasis"
-><I
+ mean that Samba will <I
CLASS="EMPHASIS"
>become</I
-></SPAN
> the local master
browser on a subnet, just that <B
CLASS="COMMAND"
>nmbd</B
-> will <SPAN
-CLASS="emphasis"
-><I
+> will <I
CLASS="EMPHASIS"
> participate</I
-></SPAN
> in elections for local master browser.</P
><P
>Setting this value to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
> will cause <B
CLASS="COMMAND"
>nmbd</B
>
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>never</I
-></SPAN
> to become a local master browser.</P
><P
>Default: <B
><DD
><P
>Synonym for <A
-HREF="index.html#LOCKDIRECTORY"
+HREF="r1.html#LOCKDIRECTORY"
><TT
CLASS="PARAMETER"
><I
>This option specifies the directory where lock
files will be placed. The lock files are used to implement the
<A
-HREF="index.html#MAXCONNECTIONS"
+HREF="r1.html#MAXCONNECTIONS"
><TT
CLASS="PARAMETER"
><I
>The time in microseconds that smbd should
pause before attempting to gain a failed lock. See
<A
-HREF="index.html#LOCKSPINCOUNT"
+HREF="r1.html#LOCKSPINCOUNT"
><TT
CLASS="PARAMETER"
><I
>, real locking will be performed
by the server.</P
><P
->This option <SPAN
-CLASS="emphasis"
-><I
+>This option <I
CLASS="EMPHASIS"
>may</I
-></SPAN
> be useful for read-only
- filesystems which <SPAN
-CLASS="emphasis"
-><I
+ filesystems which <I
CLASS="EMPHASIS"
>may</I
-></SPAN
> not need locking (such as
CDROM drives), although setting this parameter of <TT
CLASS="CONSTANT"
><P
>This parameter specifies the local path to
which the home directory will be connected (see <A
-HREF="index.html#LOGONHOME"
+HREF="r1.html#LOGONHOME"
><TT
CLASS="PARAMETER"
><I
but use the whole string when dealing with profiles.</P
><P
>Note that in prior versions of Samba, the <A
-HREF="index.html#LOGONPATH"
+HREF="r1.html#LOGONPATH"
> <TT
CLASS="PARAMETER"
><I
stored. Contrary to previous versions of these manual pages, it has
nothing to do with Win 9X roaming profiles. To find out how to
handle roaming profiles for Win 9X system, see the <A
-HREF="index.html#LOGONHOME"
+HREF="r1.html#LOGONHOME"
> <TT
CLASS="PARAMETER"
><I
>Thereafter, the directories and any of the contents can,
if required, be made read-only. It is not advisable that the
NTuser.dat file be made read-only - rename it to NTuser.man to
- achieve the desired effect (a <SPAN
-CLASS="emphasis"
-><I
+ achieve the desired effect (a <I
CLASS="EMPHASIS"
>MAN</I
-></SPAN
>datory
profile). </P
><P
><P
>The script must be a relative path to the [netlogon]
service. If the [netlogon] service specifies a <A
-HREF="index.html#PATH"
+HREF="r1.html#PATH"
> <TT
CLASS="PARAMETER"
><I
>This option is only useful if Samba is set up as a logon
server.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no logon script defined</I
-></SPAN
></P
><P
>Example: <B
in the lppause command as the PATH may not be available to the server.</P
><P
>See also the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
>A value of 0 will disable caching completely.</P
><P
>See also the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
print queue listing.</P
><P
>See also the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
></A
> parameter.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>depends on the setting of <TT
CLASS="PARAMETER"
> printing</I
></TT
></I
-></SPAN
></P
><P
>Example: <B
>This command should be a program or script which takes
a printer name and job number to resume the print job. See
also the <A
-HREF="index.html#LPPAUSECOMMAND"
+HREF="r1.html#LPPAUSECOMMAND"
><TT
CLASS="PARAMETER"
><I
be available to the server.</P
><P
>See also the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
available to the server.</P
><P
>See also the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
></A
> parameter.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>depends on the setting of <TT
CLASS="PARAMETER"
</I
></TT
></I
-></SPAN
></P
><P
>Example 1: <B
><P
>If a Samba server is a member of a Windows
NT Domain (see the <A
-HREF="index.html#SECURITYEQUALSDOMAIN"
+HREF="r1.html#SECURITYEQUALSDOMAIN"
>security = domain</A
>)
parameter) then periodically a running <A
</B
></A
>, and the <A
-HREF="index.html#SECURITYEQUALSDOMAIN"
+HREF="r1.html#SECURITYEQUALSDOMAIN"
> security = domain</A
>) parameter.</P
><P
>This parameter specifies the name of a file
which will contain output created by a magic script (see the
<A
-HREF="index.html#MAGICSCRIPT"
+HREF="r1.html#MAGICSCRIPT"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->magic output = <magic script name>.out
+>magic output = <magic script name>.out
</B
></P
><P
><P
>If the script generates output, output will be sent to
the file specified by the <A
-HREF="index.html#MAGICOUTPUT"
+HREF="r1.html#MAGICOUTPUT"
><TT
CLASS="PARAMETER"
><I
>Note that some shells are unable to interpret scripts
containing CR/LF instead of CR as
the end-of-line marker. Magic scripts must be executable
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>as is</I
-></SPAN
> on the host, which for some hosts and
some shells will require filtering at the DOS end.</P
><P
->Magic scripts are <SPAN
-CLASS="emphasis"
-><I
+>Magic scripts are <I
CLASS="EMPHASIS"
>EXPERIMENTAL</I
-></SPAN
> and
- should <SPAN
-CLASS="emphasis"
-><I
+ should <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> be relied upon.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>None. Magic scripts disabled.</I
-></SPAN
></P
><P
>Example: <B
><DD
><P
>See the section on <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
> NAME MANGLING</A
></P
><P
> off the ends of filenames on some CDROMs (only visible
under some UNIXes). To do this use a map of (*;1 *;).</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no mangled map</I
-></SPAN
></P
><P
>Example: <B
or whether non-DOS names should simply be ignored.</P
><P
>See the section on <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
> NAME MANGLING</A
> for details on how to control the mangling process.</P
><P
><P
>Note that the character to use may be specified using
the <A
-HREF="index.html#MANGLINGCHAR"
+HREF="r1.html#MANGLINGCHAR"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>This controls what character is used as
- the <SPAN
-CLASS="emphasis"
-><I
+ the <I
CLASS="EMPHASIS"
>magic</I
-></SPAN
> character in <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
>name mangling</A
>. The default is a '~'
but this may interfere with some software. Use this option to set
>
parameter to be set such that owner execute bit is not masked out
(i.e. it must include 100). See the parameter <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
> <TT
CLASS="PARAMETER"
><I
>
to be set such that the world execute bit is not masked out (i.e.
it must include 001). See the parameter <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
> <TT
CLASS="PARAMETER"
><I
>
to be set such that the group execute bit is not masked out (i.e.
it must include 010). See the parameter <A
-HREF="index.html#CREATEMASK"
+HREF="r1.html#CREATEMASK"
> <TT
CLASS="PARAMETER"
><I
><DD
><P
>This parameter is only useful in <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
> security</A
> modes other than <TT
CLASS="PARAMETER"
logins with an invalid password are rejected, unless the username
does not exist, in which case it is treated as a guest login and
mapped into the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
> - Means user logins
with an invalid password are treated as a guest login and mapped
into the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
>guest account</A
>. Note that
this can cause problems as it means that any user incorrectly typing
will not know the reason they cannot access files they think
they should - there will have been no message given to them
that they got their password wrong. Helpdesk services will
- <SPAN
-CLASS="emphasis"
-><I
+ <I
CLASS="EMPHASIS"
>hate</I
-></SPAN
> you if you set the <TT
CLASS="PARAMETER"
><I
></TT
> modes other than
share. This is because in these modes the name of the resource being
- requested is <SPAN
-CLASS="emphasis"
-><I
+ requested is <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> sent to the server until after
the server has successfully authenticated the client so the server
cannot make authentication decisions at the correct time (connection
><P
>Record lock files are used to implement this feature. The
lock files will be stored in the directory specified by the <A
-HREF="index.html#LOCKDIRECTORY"
+HREF="r1.html#LOCKDIRECTORY"
><TT
CLASS="PARAMETER"
><I
></A
> will remote "Out of Space" to the client.
See all <A
-HREF="index.html#TOTALPRINTJOBS"
+HREF="r1.html#TOTALPRINTJOBS"
><TT
CLASS="PARAMETER"
><I
><TT
CLASS="CONSTANT"
>LANMAN1</TT
->: First <SPAN
-CLASS="emphasis"
-><I
+>: First <I
CLASS="EMPHASIS"
> modern</I
-></SPAN
> version of the protocol. Long filename
support.</P
></LI
the appropriate protocol.</P
><P
>See also <A
-HREF="index.html#MINPROTOCOL"
+HREF="r1.html#MINPROTOCOL"
><TT
CLASS="PARAMETER"
><I
>nmbd(8)
</A
> when acting as a WINS server (<A
-HREF="index.html#WINSSUPPORT"
+HREF="r1.html#WINSSUPPORT"
> <TT
CLASS="PARAMETER"
><I
parameter. The default is 6 days (518400 seconds).</P
><P
>See also the <A
-HREF="index.html#MINWINSTTL"
+HREF="r1.html#MINWINSTTL"
><TT
CLASS="PARAMETER"
><I
CLASS="COMMAND"
>xedit</B
>, then
- removes it afterwards. <SPAN
-CLASS="emphasis"
-><I
+ removes it afterwards. <I
CLASS="EMPHASIS"
>NOTE THAT IT IS VERY IMPORTANT
THAT THIS COMMAND RETURN IMMEDIATELY</I
-></SPAN
>. That's why I
have the '&' on the end. If it doesn't return immediately then
your PCs may freeze when sending messages (they should recover
><B
CLASS="COMMAND"
>message command = /bin/mail -s 'message from %f on
- %m' root < %s; rm %s</B
+ %m' root < %s; rm %s</B
></P
><P
>If you don't have a message command then the message
>message command = rm %s</B
></P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no message command</I
-></SPAN
></P
><P
>Example: <B
><DD
><P
>Synonym for <A
-HREF="index.html#MINPASSWORDLENGTH"
+HREF="r1.html#MINPASSWORDLENGTH"
> <TT
CLASS="PARAMETER"
><I
UNIX password changing.</P
><P
>See also <A
-HREF="index.html#UNIXPASSWORDSYNC"
+HREF="r1.html#UNIXPASSWORDSYNC"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#PASSWDCHATDEBUG"
+HREF="r1.html#PASSWDCHATDEBUG"
><TT
CLASS="PARAMETER"
><I
means a user can always spool a print job.</P
><P
>See also the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
>The value of the parameter (a string) is the
lowest SMB protocol dialect than Samba will support. Please refer
to the <A
-HREF="index.html#MAXPROTOCOL"
+HREF="r1.html#MAXPROTOCOL"
><TT
CLASS="PARAMETER"
><I
><P
>If you are viewing this parameter as a security measure, you should
also refer to the <A
-HREF="index.html#LANMANAUTH"
+HREF="r1.html#LANMANAUTH"
><TT
CLASS="PARAMETER"
><I
>nmbd(8)</A
>
when acting as a WINS server (<A
-HREF="index.html#WINSSUPPORT"
+HREF="r1.html#WINSSUPPORT"
><TT
CLASS="PARAMETER"
><I
>.</P
><P
>See also <A
-HREF="index.html#HOSTMSDFS"
+HREF="r1.html#HOSTMSDFS"
><TT
CLASS="PARAMETER"
><I
>wins</TT
> : Query a name with
the IP address listed in the <A
-HREF="index.html#WINSSERVER"
+HREF="r1.html#WINSSERVER"
><TT
CLASS="PARAMETER"
><I
>bcast</TT
> : Do a broadcast on
each of the known local interfaces listed in the <A
-HREF="index.html#INTERFACES"
+HREF="r1.html#INTERFACES"
><TT
CLASS="PARAMETER"
><I
with these capabilities.</P
><P
>See also <A
-HREF="index.html#NETBIOSNAME"
+HREF="r1.html#NETBIOSNAME"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>empty string (no additional names)</I
-></SPAN
></P
><P
>Example: <B
advertised under.</P
><P
>See also <A
-HREF="index.html#NETBIOSALIASES"
+HREF="r1.html#NETBIOSALIASES"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>machine DNS name</I
-></SPAN
></P
><P
>Example: <B
it will be mounted on the Samba client directly from the directory
server. When Samba is returning the home share to the client, it
will consult the NIS map specified in <A
-HREF="index.html#HOMEDIRMAP"
+HREF="r1.html#HOMEDIRMAP"
> <TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->non unix account range = <empty string>
+>non unix account range = <empty string>
</B
></P
><P
default behavior is to use PAM for clear text authentication only
and to ignore any account or session management. Note that Samba
always ignores PAM for authentication in the case of <A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
><TT
CLASS="PARAMETER"
><I
></TT
> list and is only really
useful in <A
-HREF="index.html#SECURITYEQUALSSHARE"
+HREF="r1.html#SECURITYEQUALSSHARE"
>shave level</A
>
security.</P
name of the user.</P
><P
>See also the <A
-HREF="index.html#USER"
+HREF="r1.html#USER"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>A synonym for <A
-HREF="index.html#GUESTONLY"
+HREF="r1.html#GUESTONLY"
><TT
CLASS="PARAMETER"
><I
is the amount of time Samba will wait before sending an oplock break
request to such (broken) clients.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ
AND UNDERSTOOD THE SAMBA OPLOCK CODE</I
-></SPAN
>.</P
><P
>Default: <B
>oplock contention limit (S)</DT
><DD
><P
->This is a <SPAN
-CLASS="emphasis"
-><I
+>This is a <I
CLASS="EMPHASIS"
>very</I
-></SPAN
> advanced
<A
HREF="smbd.8.html"
> to behave in a similar
way to Windows NT.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ
AND UNDERSTOOD THE SAMBA OPLOCK CODE</I
-></SPAN
>.</P
><P
>Default: <B
><P
>Oplocks may be selectively turned off on certain files with a
share. See the <A
-HREF="index.html#VETOOPLOCKFILES"
+HREF="r1.html#VETOOPLOCKFILES"
><TT
CLASS="PARAMETER"
><I
> parameter for details.</P
><P
>See also the <A
-HREF="index.html#KERNELOPLOCKS"
+HREF="r1.html#KERNELOPLOCKS"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#LEVEL2OPLOCKS"
+HREF="r1.html#LEVEL2OPLOCKS"
><TT
CLASS="PARAMETER"
><I
></TT
> in the local broadcast area.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
-></SPAN
>By default, Samba will win
a local master browsing election over all Microsoft operating
systems except a Windows NT 4.0/2000 Domain Controller. This
path to a file containing a mapping of Windows NT printer driver
names to OS/2 printer driver names. The format is:</P
><P
-><nt driver name> = <os2 driver
- name>.<device name></P
+><nt driver name> = <os2 driver
+ name>.<device name></P
><P
>For example, a valid entry using the HP LaserJet 5
printer driver would appear as <B
><P
>Default: <B
CLASS="COMMAND"
->os2 driver map = <empty string>
+>os2 driver map = <empty string>
</B
></P
></DD
flag for Samba. If enabled, then PAM will be used for password
changes when requested by an SMB client instead of the program listed in
<A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
><TT
CLASS="PARAMETER"
><I
>.
It should be possible to enable this without changing your
<A
-HREF="index.html#PASSWDCHAT"
+HREF="r1.html#PASSWDCHAT"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->panic action = <empty string></B
+>panic action = <empty string></B
></P
><P
>Example: <B
Takes a path to the smbpasswd file as an optional argument.</P
><P
>See also <A
-HREF="index.html#NONUNIXACCOUNTRANGE"
+HREF="r1.html#NONUNIXACCOUNTRANGE"
> <TT
CLASS="PARAMETER"
><I
> - The TDB based password storage
backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb
in the <A
-HREF="index.html#PRIVATEDIR"
+HREF="r1.html#PRIVATEDIR"
> <TT
CLASS="PARAMETER"
><I
> - The TDB based password storage
backend, with non unix account support. Takes a path to the TDB as an optional argument (defaults to passdb.tdb
in the <A
-HREF="index.html#PRIVATEDIR"
+HREF="r1.html#PRIVATEDIR"
> <TT
CLASS="PARAMETER"
><I
> directory.</P
><P
>See also <A
-HREF="index.html#NONUNIXACCOUNTRANGE"
+HREF="r1.html#NONUNIXACCOUNTRANGE"
> <TT
CLASS="PARAMETER"
><I
>)</P
><P
>See also <A
-HREF="index.html#NONUNIXACCOUNTRANGE"
+HREF="r1.html#NONUNIXACCOUNTRANGE"
> <TT
CLASS="PARAMETER"
><I
>passwd chat (G)</DT
><DD
><P
->This string controls the <SPAN
-CLASS="emphasis"
-><I
+>This string controls the <I
CLASS="EMPHASIS"
>"chat"</I
-></SPAN
>
conversation that takes places between <A
HREF="smbd.8.html"
> smbd(8)</A
> uses to determine what to send to the
<A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
><TT
CLASS="PARAMETER"
><I
etc).</P
><P
>Note that this parameter only is only used if the <A
-HREF="index.html#UNIXPASSWORDSYNC"
+HREF="r1.html#UNIXPASSWORDSYNC"
><TT
CLASS="PARAMETER"
><I
CLASS="CONSTANT"
>yes</TT
>. This
- sequence is then called <SPAN
-CLASS="emphasis"
-><I
+ sequence is then called <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
> when the SMB password
in the smbpasswd file is being changed, without access to the old
password cleartext. This means that root must be able to reset the user's password
without knowing the text of the previous password. In the presence of NIS/YP,
this means that the <A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
>passwd program</A
> must be
executed on the NIS master.
if the expect string is a full stop then no string is expected.</P
><P
>If the <A
-HREF="index.html#PAMPASSWORDCHANGE"
+HREF="r1.html#PAMPASSWORDCHANGE"
><TT
CLASS="PARAMETER"
><I
password change</I
></TT
></A
-> parameter is set to true, the chat pairs
+> parameter is set to <TT
+CLASS="CONSTANT"
+>yes</TT
+>, the chat pairs
may be matched in any order, and success is determined by the PAM result,
not any particular output. The \n macro is ignored for PAM conversions.
</P
><P
>See also <A
-HREF="index.html#UNIXPASSWORDSYNC"
+HREF="r1.html#UNIXPASSWORDSYNC"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> ,<A
-HREF="index.html#PASSWDCHATDEBUG"
+HREF="r1.html#PASSWDCHATDEBUG"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#PAMPASSWORDCHANGE"
+HREF="r1.html#PAMPASSWORDCHANGE"
> <TT
CLASS="PARAMETER"
><I
><DD
><P
>This boolean specifies if the passwd chat script
- parameter is run in <SPAN
-CLASS="emphasis"
-><I
+ parameter is run in <I
CLASS="EMPHASIS"
>debug</I
-></SPAN
> mode. In this mode the
strings passed to and received from the passwd chat are printed
in the <A
>smbd(8)</A
> log with a
<A
-HREF="index.html#DEBUGLEVEL"
+HREF="r1.html#DEBUGLEVEL"
><TT
CLASS="PARAMETER"
><I
> and should
be turned off after this has been done. This option has no effect if the
<A
-HREF="index.html#PAMPASSWORDCHANGE"
+HREF="r1.html#PAMPASSWORDCHANGE"
><TT
CLASS="PARAMETER"
><I
paramter is set. This parameter is off by default.</P
><P
>See also <A
-HREF="index.html#PASSWDCHAT"
+HREF="r1.html#PASSWDCHAT"
><TT
CLASS="PARAMETER"
><I
>
</A
>, <A
-HREF="index.html#PAMPASSWORDCHANGE"
+HREF="r1.html#PAMPASSWORDCHANGE"
><TT
CLASS="PARAMETER"
><I
>
</A
>, <A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
><TT
CLASS="PARAMETER"
><I
will be replaced with the user name. The user name is checked for
existence before calling the password changing program.</P
><P
->Also note that many passwd programs insist in <SPAN
-CLASS="emphasis"
-><I
+>Also note that many passwd programs insist in <I
CLASS="EMPHASIS"
>reasonable
</I
-></SPAN
> passwords, such as a minimum length, or the inclusion
of mixed case chars and digits. This can pose a problem as some clients
(such as Windows for Workgroups) uppercase the password before sending
it.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that if the <TT
CLASS="PARAMETER"
><I
></TT
> parameter is set to <TT
CLASS="CONSTANT"
->true
+>yes
</TT
-> then this program is called <SPAN
-CLASS="emphasis"
-><I
+> then this program is called <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
>
before the SMB password in the <A
HREF="smbpasswd.5.html"
>unix password sync</I
></TT
> parameter
- is set this parameter <SPAN
-CLASS="emphasis"
-><I
+ is set this parameter <I
CLASS="EMPHASIS"
>MUST USE ABSOLUTE PATHS</I
-></SPAN
>
- for <SPAN
-CLASS="emphasis"
-><I
+ for <I
CLASS="EMPHASIS"
>ALL</I
-></SPAN
> programs called, and must be examined
for security implications. Note that by default <TT
CLASS="PARAMETER"
></TT
> is set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
>.</P
><P
>See also <A
-HREF="index.html#UNIXPASSWORDSYNC"
+HREF="r1.html#UNIXPASSWORDSYNC"
><TT
CLASS="PARAMETER"
><I
><P
>The name of the password server is looked up using the
parameter <A
-HREF="index.html#NAMERESOLVEORDER"
+HREF="r1.html#NAMERESOLVEORDER"
><TT
CLASS="PARAMETER"
><I
the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in
user level security mode.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE:</I
-></SPAN
> Using a password server
means your UNIX box (running Samba) is only as secure as your
- password server. <SPAN
-CLASS="emphasis"
-><I
+ password server. <I
CLASS="EMPHASIS"
>DO NOT CHOOSE A PASSWORD SERVER THAT
YOU DON'T COMPLETELY TRUST</I
-></SPAN
>.</P
><P
>Never point a Samba server at itself for password
Primary or Backup Domain controllers to authenticate against by
doing a query for the name <TT
CLASS="CONSTANT"
->WORKGROUP<1C></TT
+>WORKGROUP<1C></TT
>
and then contacting each server returned in the list of IP
addresses from the name resolution source. </P
></UL
><P
>See also the <A
-HREF="index.html#SECURITY"
+HREF="r1.html#SECURITY"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->password server = <empty string></B
+>password server = <empty string></B
>
</P
><P
up pseudo home directories for users.</P
><P
>Note that this path will be based on <A
-HREF="index.html#ROOTDIR"
+HREF="r1.html#ROOTDIR"
> <TT
CLASS="PARAMETER"
><I
></A
> if one was specified.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none</I
-></SPAN
></P
><P
>Example: <B
></P
><P
>See also <A
-HREF="index.html#PREEXEC"
+HREF="r1.html#PREEXEC"
><TT
CLASS="PARAMETER"
><I
</A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none (no command executed)</I
-></SPAN
>
</P
><P
>Example: <B
CLASS="COMMAND"
>postexec = echo \"%u disconnected from %S
- from %m (%I)\" >> /tmp/log</B
+ from %m (%I)\" >> /tmp/log</B
></P
></DD
><DT
>Of course, this could get annoying after a while :-)</P
><P
>See also <A
-HREF="index.html#PREEXECCLOSE"
+HREF="r1.html#PREEXECCLOSE"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#POSTEXEC"
+HREF="r1.html#POSTEXEC"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none (no command executed)</I
-></SPAN
></P
><P
>Example: <B
CLASS="COMMAND"
>preexec = echo \"%u connected to %S from %m
- (%I)\" >> /tmp/log</B
+ (%I)\" >> /tmp/log</B
></P
></DD
><DT
><P
>This boolean option controls whether a non-zero
return code from <A
-HREF="index.html#PREEXEC"
+HREF="r1.html#PREEXEC"
><TT
CLASS="PARAMETER"
><I
><P
>If this is set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, on startup, <B
CLASS="COMMAND"
>nmbd</B
used in conjunction with <B
CLASS="COMMAND"
><A
-HREF="index.html#DOMAINMASTER"
+HREF="r1.html#DOMAINMASTER"
><TT
CLASS="PARAMETER"
><I
capabilities.</P
><P
>See also <A
-HREF="index.html#OSLEVEL"
+HREF="r1.html#OSLEVEL"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#PREFERREDMASTER"
+HREF="r1.html#PREFERREDMASTER"
><TT
CLASS="PARAMETER"
><I
><A
NAME="PRELOAD"
></A
->preload</DT
+>preload (G)</DT
><DD
><P
>This is a list of services that you want to be
><P
>Note that if you just want all printers in your
printcap file loaded then the <A
-HREF="index.html#LOADPRINTERS"
+HREF="r1.html#LOADPRINTERS"
> <TT
CLASS="PARAMETER"
><I
></A
> option is easier.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no preloaded services</I
-></SPAN
></P
><P
>Example: <B
> This controls if new filenames are created
with the case that the client passes, or if they are forced to
be the <A
-HREF="index.html#DEFAULTCASE"
+HREF="r1.html#DEFAULTCASE"
><TT
CLASS="PARAMETER"
><I
></P
><P
>See the section on <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
>NAME
MANGLING</A
> for a fuller discussion.</P
>%z - the size of the spooled
print job (in bytes)</P
><P
->The print command <SPAN
-CLASS="emphasis"
-><I
+>The print command <I
CLASS="EMPHASIS"
>MUST</I
-></SPAN
> contain at least
one occurrence of <TT
CLASS="PARAMETER"
>nobody</TT
> account. If this happens then create
an alternative guest account that can print and set the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
><P
><B
CLASS="COMMAND"
->print command = echo Printing %s >>
+>print command = echo Printing %s >>
/tmp/print.log; lpr -P %p %s; rm %s</B
></P
><P
>You may have to vary this command considerably depending
on how you normally print files on your system. The default for
the parameter varies depending on the setting of the <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
> <TT
CLASS="PARAMETER"
><I
><P
>For printing = CUPS : If SAMBA is compiled against
libcups, then <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
>printcap = cups</A
>
uses the CUPS API to
><DD
><P
>Synonym for <A
-HREF="index.html#PRINTABLE"
+HREF="r1.html#PRINTABLE"
> <TT
CLASS="PARAMETER"
><I
>Note that a printable service will ALWAYS allow writing
to the service path (user privileges permitting) via the spooling
of print data. The <A
-HREF="index.html#WRITEABLE"
+HREF="r1.html#READONLY"
><TT
CLASS="PARAMETER"
><I
->writeable
+>read only
</I
></TT
></A
><DD
><P
>Synonym for <A
-HREF="index.html#PRINTCAPNAME"
+HREF="r1.html#PRINTCAPNAME"
><TT
CLASS="PARAMETER"
><I
CLASS="FILENAME"
> /etc/printcap</TT
>). See the discussion of the <A
-HREF="index.html#AEN79"
+HREF="r1.html#AEN79"
>[printers]</A
> section above for reasons
why you might want to do this.</P
</B
>. This should be supplemented by an addtional setting
<A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
>printing = cups</A
> in the [global]
section. <B
><P
>A minimal printcap file would look something like this:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> print1|My Printer 1
print4|My Printer 4
print5|My Printer 5
</PRE
+></TD
+></TR
+></TABLE
></P
><P
>where the '|' separates aliases of a printer. The fact
that the second alias has a space in it gives a hint to Samba
that it's a comment.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE</I
-></SPAN
>: Under AIX the default printcap
name is <TT
CLASS="FILENAME"
><P
>Default: <B
CLASS="COMMAND"
->printer admin = <empty string></B
+>printer admin = <empty string></B
>
</P
><P
>printer driver (S)</DT
><DD
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
-></SPAN
>This is a deprecated
parameter and will be removed in the next major release
following version 2.2. Please see the instructions in
sensitive) that describes the appropriate printer driver for your
system. If you don't know the exact string to use then you should
first try with no <A
-HREF="index.html#PRINTERDRIVER"
+HREF="r1.html#PRINTERDRIVER"
><TT
CLASS="PARAMETER"
><I
shown in a scroll box after you have chosen the printer manufacturer.</P
><P
>See also <A
-HREF="index.html#PRINTERDRIVERFILE"
+HREF="r1.html#PRINTERDRIVERFILE"
><TT
CLASS="PARAMETER"
><I
>printer driver file (G)</DT
><DD
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
-></SPAN
>This is a deprecated
parameter and will be removed in the next major release
following version 2.2. Please see the instructions in
>.</P
><P
>See also <A
-HREF="index.html#PRINTERDRIVERLOCATION"
+HREF="r1.html#PRINTERDRIVERLOCATION"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>None (set in compile).</I
-></SPAN
></P
><P
>Example: <B
>printer driver location (S)</DT
><DD
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
-></SPAN
>This is a deprecated
parameter and will be removed in the next major release
following version 2.2. Please see the instructions in
>.</P
><P
>See also <A
-HREF="index.html#PRINTERDRIVERFILE"
+HREF="r1.html#PRINTERDRIVERFILE"
><TT
CLASS="PARAMETER"
><I
name given will be used for any printable service that does
not have its own printer name specified.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>none (but may be <TT
CLASS="CONSTANT"
>lp</TT
>
on many systems)</I
-></SPAN
></P
><P
>Example: <B
><DD
><P
>Synonym for <A
-HREF="index.html#PRINTERNAME"
+HREF="r1.html#PRINTERNAME"
><TT
CLASS="PARAMETER"
><I
>This option can be set on a per printer basis</P
><P
>See also the discussion in the <A
-HREF="index.html#AEN79"
+HREF="r1.html#AEN79"
> [printers]</A
> section.</P
></DD
><DD
><P
>Synonym for <A
-HREF="index.html#MAXPROTOCOL"
+HREF="r1.html#MAXPROTOCOL"
> <TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#GUESTOK"
+HREF="r1.html#GUESTOK"
><TT
CLASS="PARAMETER"
><I
path in the command as the PATH may not be available to the
server.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>depends on the setting of <TT
CLASS="PARAMETER"
</I
></TT
></I
-></SPAN
></P
><P
>Example: <B
executed on the server host in order to resume the printer queue. It
is the command to undo the behavior that is caused by the
previous parameter (<A
-HREF="index.html#QUEUEPAUSECOMMAND"
+HREF="r1.html#QUEUEPAUSECOMMAND"
><TT
CLASS="PARAMETER"
><I
path in the command as the PATH may not be available to the
server.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>depends on the setting of <A
-HREF="index.html#PRINTING"
+HREF="r1.html#PRINTING"
><TT
CLASS="PARAMETER"
><I
></TT
></A
></I
-></SPAN
>
</P
><P
>This is a list of users that are given read-only
access to a service. If the connecting user is in this list then
they will not be given write access, no matter what the <A
-HREF="index.html#WRITEABLE"
+HREF="r1.html#READONLY"
><TT
CLASS="PARAMETER"
><I
->writeable</I
+>read only</I
></TT
></A
>
option is set to. The list can include group names using the
syntax described in the <A
-HREF="index.html#INVALIDUSERS"
+HREF="r1.html#INVALIDUSERS"
><TT
CLASS="PARAMETER"
><I
> parameter.</P
><P
>See also the <A
-HREF="index.html#WRITELIST"
+HREF="r1.html#WRITELIST"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> parameter and the <A
-HREF="index.html#INVALIDUSERS"
+HREF="r1.html#INVALIDUSERS"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->read list = <empty string></B
+>read list = <empty string></B
></P
><P
>Example: <B
>read only (S)</DT
><DD
><P
->
Note that this is an inverted synonym for <A
-HREF="index.html#WRITEABLE"
-><TT
+>
An inverted synonym is <A
+HREF="r1.html#WRITEABLE"
+> <TT
CLASS="PARAMETER"
><I
>writeable</I
></TT
></A
>.</P
+><P
+>If this parameter is <TT
+CLASS="CONSTANT"
+>yes</TT
+>, then users
+ of a service may not create or modify files in the service's
+ directory.</P
+><P
+>Note that a printable service (<B
+CLASS="COMMAND"
+>printable = yes</B
+>)
+ will <I
+CLASS="EMPHASIS"
+>ALWAYS</I
+> allow writing to the directory
+ (user privileges permitting), but only via spooling operations.</P
+><P
+>Default: <B
+CLASS="COMMAND"
+>read only = yes</B
+></P
></DD
><DT
><A
><P
>In general this parameter should be viewed as a system tuning
tool and left severely alone. See also <A
-HREF="index.html#WRITERAW"
+HREF="r1.html#WRITERAW"
> <TT
CLASS="PARAMETER"
><I
to the two given IP addresses using the given workgroup names.
If you leave out the workgroup name then the one given in
the <A
-HREF="index.html#WORKGROUP"
+HREF="r1.html#WORKGROUP"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->remote announce = <empty string>
+>remote announce = <empty string>
</B
></P
></DD
><P
>Default: <B
CLASS="COMMAND"
->remote browse sync = <empty string>
+>remote browse sync = <empty string>
</B
></P
></DD
><P
>This is a boolean parameter. If it is <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, then
anonymous access to the server will be restricted, namely in the
case where the server is expecting the client to send a username,
but it doesn't. Setting it to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> will force these anonymous
connections to be denied, and the client will be required to always
supply a username and password when connecting. Use of this parameter
><P
>When restrict anonymous is <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, all anonymous connections
are denied no matter what they are for. This can effect the ability
of a machine to access the Samba Primary Domain Controller to revalidate
><DD
><P
>Synonym for <A
-HREF="index.html#ROOTDIRECTORY"
+HREF="r1.html#ROOTDIRECTORY"
> <TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#ROOTDIRECTORY"
+HREF="r1.html#ROOTDIRECTORY"
> <TT
CLASS="PARAMETER"
><I
It may also check for, and deny access to, soft links to other
parts of the filesystem, or attempts to use ".." in file names
to access other directories (depending on the setting of the <A
-HREF="index.html#WIDELINKS"
+HREF="r1.html#WIDELINKS"
><TT
CLASS="PARAMETER"
><I
>root directory</I
></TT
>
- option, <SPAN
-CLASS="emphasis"
-><I
+ option, <I
CLASS="EMPHASIS"
>including</I
-></SPAN
> some files needed for
complete operation of the server. To maintain full operability
of the server you will need to mirror some system files
(such as CDROMs) after a connection is closed.</P
><P
>See also <A
-HREF="index.html#POSTEXEC"
+HREF="r1.html#POSTEXEC"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->root postexec = <empty string>
+>root postexec = <empty string>
</B
></P
></DD
connection is opened.</P
><P
>See also <A
-HREF="index.html#PREEXEC"
+HREF="r1.html#PREEXEC"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#PREEXECCLOSE"
+HREF="r1.html#PREEXECCLOSE"
> <TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->root preexec = <empty string>
+>root preexec = <empty string>
</B
></P
></DD
> parameter except that the command is run as root.</P
><P
>See also <A
-HREF="index.html#PREEXEC"
+HREF="r1.html#PREEXEC"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#PREEXECCLOSE"
+HREF="r1.html#PREEXECCLOSE"
> <TT
CLASS="PARAMETER"
><I
>security = user</B
>, see
the <A
-HREF="index.html#MAPTOGUEST"
+HREF="r1.html#MAPTOGUEST"
><TT
CLASS="PARAMETER"
><I
>It is possible to use <B
CLASS="COMMAND"
>smbd</B
-> in a <SPAN
-CLASS="emphasis"
-><I
+> in a <I
CLASS="EMPHASIS"
> hybrid mode</I
-></SPAN
> where it is offers both user and share
level security under different <A
-HREF="index.html#NETBIOSALIASES"
+HREF="r1.html#NETBIOSALIASES"
> <TT
CLASS="PARAMETER"
><I
><A
NAME="SECURITYEQUALSSHARE"
></A
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = SHARE
</I
-></SPAN
></P
><P
>When clients connect to a share level security server they
>Note that <B
CLASS="COMMAND"
>smbd</B
-> <SPAN
-CLASS="emphasis"
-><I
+> <I
CLASS="EMPHASIS"
>ALWAYS</I
-></SPAN
>
uses a valid UNIX user to act on behalf of the client, even in
<B
><LI
><P
>If the <A
-HREF="index.html#GUESTONLY"
+HREF="r1.html#GUESTONLY"
><TT
CLASS="PARAMETER"
><I
></A
> parameter is set, then all the other
stages are missed and only the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
> <TT
CLASS="PARAMETER"
><I
><P
>Is a username is sent with the share connection
request, then this username (after mapping - see <A
-HREF="index.html#USERNAMEMAP"
+HREF="r1.html#USERNAMEMAP"
><TT
CLASS="PARAMETER"
><I
></LI
><LI
><P
->If the client did a previous <SPAN
-CLASS="emphasis"
-><I
+>If the client did a previous <I
CLASS="EMPHASIS"
>logon
</I
-></SPAN
> request (the SessionSetup SMB call) then the
username sent in this SMB will be added as a potential username.
</P
><LI
><P
>Any users on the <A
-HREF="index.html#USER"
+HREF="r1.html#USER"
><TT
CLASS="PARAMETER"
><I
>, then this
guest user will be used, otherwise access is denied.</P
><P
->Note that it can be <SPAN
-CLASS="emphasis"
-><I
+>Note that it can be <I
CLASS="EMPHASIS"
>very</I
-></SPAN
> confusing
in share-level security as to which UNIX username will eventually
be used in granting access.</P
><P
>See also the section <A
-HREF="index.html#AEN236"
+HREF="r1.html#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
><A
NAME="SECURITYEQUALSUSER"
></A
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = USER
</I
-></SPAN
></P
><P
>This is the default security setting in Samba 2.2.
With user-level security a client must first "log-on" with a
valid username and password (which can be mapped using the <A
-HREF="index.html#USERNAMEMAP"
+HREF="r1.html#USERNAMEMAP"
><TT
CLASS="PARAMETER"
><I
></A
>
parameter). Encrypted passwords (see the <A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
> <TT
CLASS="PARAMETER"
><I
></A
> parameter) can also
be used in this security mode. Parameters such as <A
-HREF="index.html#USER"
+HREF="r1.html#USER"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#GUESTONLY"
+HREF="r1.html#GUESTONLY"
> <TT
CLASS="PARAMETER"
><I
may change the UNIX user to use on this connection, but only after
the user has been successfully authenticated.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that the name of the resource being
- requested is <SPAN
-CLASS="emphasis"
-><I
+ requested is <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> sent to the server until after
the server has successfully authenticated the client. This is why
guest shares don't work in user level security without allowing
the server to automatically map unknown users into the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
></A
>.
See the <A
-HREF="index.html#MAPTOGUEST"
+HREF="r1.html#MAPTOGUEST"
><TT
CLASS="PARAMETER"
><I
> parameter for details on doing this.</P
><P
>See also the section <A
-HREF="index.html#AEN236"
+HREF="r1.html#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
><A
NAME="SECURITYEQUALSSERVER"
></A
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = SERVER
</I
-></SPAN
></P
><P
>In this mode Samba will try to validate the username/password
> for details on how to set this
up.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that from the client's point of
view <B
CLASS="COMMAND"
with the authentication, it does not in any way affect what the
client sees.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that the name of the resource being
- requested is <SPAN
-CLASS="emphasis"
-><I
+ requested is <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> sent to the server until after
the server has successfully authenticated the client. This is why
guest shares don't work in user level security without allowing
the server to automatically map unknown users into the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
></A
>.
See the <A
-HREF="index.html#MAPTOGUEST"
+HREF="r1.html#MAPTOGUEST"
><TT
CLASS="PARAMETER"
><I
> parameter for details on doing this.</P
><P
>See also the section <A
-HREF="index.html#AEN236"
+HREF="r1.html#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
>See also the <A
-HREF="index.html#PASSWORDSERVER"
+HREF="r1.html#PASSWORDSERVER"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> parameter and the <A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
><TT
CLASS="PARAMETER"
><I
><A
NAME="SECURITYEQUALSDOMAIN"
></A
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = DOMAIN
</I
-></SPAN
></P
><P
>This mode will only work correctly if <A
>smbpasswd(8)</A
> has been used to add this
machine into a Windows NT Domain. It expects the <A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
><TT
CLASS="PARAMETER"
><I
</A
> parameter to be set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>. In this
mode Samba will try to validate the username/password by passing
it to a Windows NT Primary or Backup Domain Controller, in exactly
the same way that a Windows NT Server would do.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that a valid UNIX user must still
exist as well as the account on the Domain Controller to allow
Samba to have a valid UNIX account to map file access to.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that from the client's point
of view <B
CLASS="COMMAND"
>. It only affects how the server deals with the authentication,
it does not in any way affect what the client sees.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that the name of the resource being
- requested is <SPAN
-CLASS="emphasis"
-><I
+ requested is <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> sent to the server until after
the server has successfully authenticated the client. This is why
guest shares don't work in user level security without allowing
the server to automatically map unknown users into the <A
-HREF="index.html#GUESTACCOUNT"
+HREF="r1.html#GUESTACCOUNT"
><TT
CLASS="PARAMETER"
><I
></A
>.
See the <A
-HREF="index.html#MAPTOGUEST"
+HREF="r1.html#MAPTOGUEST"
><TT
CLASS="PARAMETER"
><I
</A
> parameter for details on doing this.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>BUG:</I
-></SPAN
> There is currently a bug in the
implementation of <B
CLASS="COMMAND"
Domain Controller. This issue will be addressed in a future release.</P
><P
>See also the section <A
-HREF="index.html#AEN236"
+HREF="r1.html#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
>See also the <A
-HREF="index.html#PASSWORDSERVER"
+HREF="r1.html#PASSWORDSERVER"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> parameter and the <A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
><TT
CLASS="PARAMETER"
><I
a user to modify all the user/group/world permissions on a file.
</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
> that users who can access the
Samba server through other means can easily bypass this
restriction, so it is primarily useful for standalone
>.</P
><P
>See also the <A
-HREF="index.html#FORCEDIRECTORYSECURITYMODE"
+HREF="r1.html#FORCEDIRECTORYSECURITYMODE"
> <TT
CLASS="PARAMETER"
><I
></A
>,
<A
-HREF="index.html#DIRECTORYSECURITYMASK"
+HREF="r1.html#DIRECTORYSECURITYMASK"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#FORCESECURITYMODE"
+HREF="r1.html#FORCESECURITYMODE"
> <TT
CLASS="PARAMETER"
><I
>This option gives full share compatibility and enabled
by default.</P
><P
->You should <SPAN
-CLASS="emphasis"
-><I
+>You should <I
CLASS="EMPHASIS"
>NEVER</I
-></SPAN
> turn this parameter
off as many Windows applications will break if you do so.</P
><P
which conform to 8.3 syntax, that is all in upper case and of
suitable length, are created upper case, or if they are forced
to be the <A
-HREF="index.html#DEFAULTCASE"
+HREF="r1.html#DEFAULTCASE"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>. This option can be use with <A
-HREF="index.html#PRESERVECASE"
+HREF="r1.html#PRESERVECASE"
><B
CLASS="COMMAND"
>preserve case = yes</B
names are lowered. </P
><P
>See the section on <A
-HREF="index.html#AEN203"
+HREF="r1.html#AEN203"
> NAME MANGLING</A
>.</P
><P
></TT
>
parameter will always cause the OpenPrinterEx() on the server
- to fail. Thus the APW icon will never be displayed. <SPAN
-CLASS="emphasis"
-><I
+ to fail. Thus the APW icon will never be displayed. <I
CLASS="EMPHASIS"
> Note :</I
-></SPAN
>This does not prevent the same user from having
administrative privilege on an individual printer.</P
><P
>See also <A
-HREF="index.html#ADDPRINTERCOMMAND"
+HREF="r1.html#ADDPRINTERCOMMAND"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#DELETEPRINTERCOMMAND"
+HREF="r1.html#DELETEPRINTERCOMMAND"
> <TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PRINTERADMIN"
+HREF="r1.html#PRINTERADMIN"
><TT
CLASS="PARAMETER"
><I
>shutdown script (G)</DT
><DD
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>This parameter only exists in the HEAD cvs branch</I
-></SPAN
>
This a full path name to a script called by
<A
>%r</I
></TT
> will be substituted with the
- switch <SPAN
-CLASS="emphasis"
-><I
+ switch <I
CLASS="EMPHASIS"
>-r</I
-></SPAN
>. It means reboot after shutdown
for NT.
</P
>%f</I
></TT
> will be substituted with the
- switch <SPAN
-CLASS="emphasis"
-><I
+ switch <I
CLASS="EMPHASIS"
>-f</I
-></SPAN
>. It means force the shutdown
even if applications do not respond for NT.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>None</I
-></SPAN
>.</P
><P
>Example: <B
></P
><P
>Shutdown script example:
- <PRE
+ <TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
+><PRE
CLASS="PROGRAMLISTING"
> #!/bin/bash
/sbin/shutdown $3 $4 +$time $1 &
</PRE
+></TD
+></TR
+></TABLE
>
Shutdown does not return so we need to launch it in background.
</P
><P
>See also <A
-HREF="index.html#ABORTSHUTDOWNSCRIPT"
+HREF="r1.html#ABORTSHUTDOWNSCRIPT"
><TT
CLASS="PARAMETER"
><I
></LI
></UL
><P
->Those marked with a <SPAN
-CLASS="emphasis"
-><I
+>Those marked with a <I
CLASS="EMPHASIS"
>'*'</I
-></SPAN
> take an integer
argument. The others can optionally take a 1 or 0 argument to enable
or disable the option, by default they will be enabled if you
>SAMBA_NETBIOS_NAME = myhostname</B
></P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>No default value</I
-></SPAN
></P
><P
>Examples: <B
><P
> This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. As of samba 3.0alpha it must be set to "no" for these clients to join a samba domain controller. It can be set to "yes" to allow samba to participate in an AD domain controlled by a Windows2000 domain controller.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>use spnego = yes</I
-></SPAN
></P
></DD
><DT
></DD
><DT
><A
-NAME="STATUS"
-></A
->status (G)</DT
-><DD
-><P
->This enables or disables logging of connections
- to a status file that <A
-HREF="smbstatus.1.html"
-TARGET="_top"
->smbstatus(1)</A
->
- can read.</P
-><P
->With this disabled <B
-CLASS="COMMAND"
->smbstatus</B
-> won't be able
- to tell you what connections are active. You should never need to
- change this parameter.</P
-><P
->Default: <B
-CLASS="COMMAND"
->status = yes</B
-></P
-></DD
-><DT
-><A
NAME="STRICTALLOCATE"
></A
>strict allocate (S)</DT
explorer shell file copies.</P
><P
>See also the <A
-HREF="index.html#SYNCALWAYS"
+HREF="r1.html#SYNCALWAYS"
><TT
CLASS="PARAMETER"
><I
whether writes will always be written to stable storage before
the write call returns. If this is <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
> then the server will be
guided by the client's request in each write call (clients can
set a bit indicating that a particular write should be synchronous).
If this is <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> then every write will be followed by a <B
CLASS="COMMAND"
>fsync()
any affect.</P
><P
>See also the <A
-HREF="index.html#STRICTSYNC"
+HREF="r1.html#STRICTSYNC"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#DEBUGTIMESTAMP"
+HREF="r1.html#DEBUGTIMESTAMP"
><TT
CLASS="PARAMETER"
><I
can be used to prevent a server from exceeding its capacity and is
designed as a printing throttle. See also
<A
-HREF="index.html#MAXPRINTJOBS"
+HREF="r1.html#MAXPRINTJOBS"
><TT
CLASS="PARAMETER"
><I
when the encrypted SMB password in the smbpasswd file is changed.
If this is set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> the program specified in the <TT
CLASS="PARAMETER"
><I
>passwd
program</I
></TT
->parameter is called <SPAN
-CLASS="emphasis"
-><I
+>parameter is called <I
CLASS="EMPHASIS"
>AS ROOT</I
-></SPAN
> -
to allow the new UNIX password to be set without access to the
old UNIX password (as the SMB password change code has no
access to the old password cleartext, only the new).</P
><P
>See also <A
-HREF="index.html#PASSWDPROGRAM"
+HREF="r1.html#PASSWDPROGRAM"
><TT
CLASS="PARAMETER"
><I
></TT
></A
>, <A
-HREF="index.html#PASSWDCHAT"
+HREF="r1.html#PASSWDCHAT"
><TT
CLASS="PARAMETER"
><I
>.</P
><P
>In order for this parameter to work correctly the <A
-HREF="index.html#ENCRYPTPASSWORDS"
+HREF="r1.html#ENCRYPTPASSWORDS"
><TT
CLASS="PARAMETER"
><I
>If this parameter is enabled for a printer, then any attempt
to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped
to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx()
- call to succeed. <SPAN
-CLASS="emphasis"
-><I
+ call to succeed. <I
CLASS="EMPHASIS"
>This parameter MUST not be able enabled
on a print share which has valid print driver installed on the Samba
server.</I
-></SPAN
></P
><P
>See also <A
-HREF="index.html#DISABLESPOOLSS"
+HREF="r1.html#DISABLESPOOLSS"
>disable spoolss</A
>
</P
mmap/read-write system memory cache. Currently only HPUX does not have such a
coherent cache, and so this parameter is set to <TT
CLASS="CONSTANT"
->false</TT
+>no</TT
> by
default on HPUX. On all other systems this parameter should be left alone. This
parameter is provided to help the Samba developers track down problems with
><P
>If this global parameter is <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>, it specifies
that the UNIX user's <TT
CLASS="FILENAME"
will be read to find the names of hosts and users who will be allowed
access without specifying a password.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE:</I
-></SPAN
> The use of <TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#USERNAME"
+HREF="r1.html#USERNAME"
><TT
CLASS="PARAMETER"
><I
><DD
><P
>Synonym for <A
-HREF="index.html#USERNAME"
+HREF="r1.html#USERNAME"
><TT
CLASS="PARAMETER"
><I
><P
>To restrict a service to a particular set of users you
can use the <A
-HREF="index.html#VALIDUSERS"
+HREF="r1.html#VALIDUSERS"
><TT
CLASS="PARAMETER"
><I
search.</P
><P
>See the section <A
-HREF="index.html#AEN236"
+HREF="r1.html#AEN236"
>NOTE ABOUT
USERNAME/PASSWORD VALIDATION</A
> for more information on how
>Default: <B
CLASS="COMMAND"
>The guest account if a guest service,
- else <empty string>.</B
+ else <empty string>.</B
></P
><P
>Examples:<B
>If any line begins with a '#' or a ';' then it is
ignored</P
><P
->If any line begins with an '!' then the processing
- will stop after that line if a mapping was done by the line.
- Otherwise mapping continues with every line being processed.
- Using '!' is most useful when you have a wildcard mapping line
+>If any line begins with an '!' then the processing
+ will stop after that line if a mapping was done by the line.
+ Otherwise mapping continues with every line being processed.
+ Using '!' is most useful when you have a wildcard mapping line
later in the file.</P
><P
>For example to map from the name <TT
CLASS="CONSTANT"
>admin</TT
->
+>
or <TT
CLASS="CONSTANT"
>administrator</TT
>Or to map anyone in the UNIX group <TT
CLASS="CONSTANT"
>system</TT
->
+>
to the UNIX name <TT
CLASS="CONSTANT"
>sys</TT
>sys = @system</B
></P
><P
->You can have as many mappings as you like in a username
+>You can have as many mappings as you like in a username
map file.</P
><P
->If your system supports the NIS NETGROUP option then
+>If your system supports the NIS NETGROUP option then
the netgroup database is checked before the <TT
CLASS="FILENAME"
>/etc/group
>tridge = "Andrew Tridgell"</B
></P
><P
->would map the windows username "Andrew Tridgell" to the
+>would map the windows username "Andrew Tridgell" to the
unix username "tridge".</P
><P
->The following example would map mary and fred to the
- unix user sys, and map the rest to guest. Note the use of the
- '!' to tell Samba to stop processing if it gets a match on
+>The following example would map mary and fred to the
+ unix user sys, and map the rest to guest. Note the use of the
+ '!' to tell Samba to stop processing if it gets a match on
that line.</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> !sys = mary fred
guest = *
</PRE
+></TD
+></TR
+></TABLE
></P
><P
->Note that the remapping is applied to all occurrences
+>Note that the remapping is applied to all occurrences
of usernames. Thus if you connect to \\server\fred and <TT
CLASS="CONSTANT"
> fred</TT
> is remapped to <TT
CLASS="CONSTANT"
>mary</TT
-> then you
- will actually be connecting to \\server\mary and will need to
+> then you
+ will actually be connecting to \\server\mary and will need to
supply a password suitable for <TT
CLASS="CONSTANT"
>mary</TT
-> not
+> not
<TT
CLASS="CONSTANT"
>fred</TT
->. The only exception to this is the
+>. The only exception to this is the
username passed to the <A
-HREF="index.html#PASSWORDSERVER"
+HREF="r1.html#PASSWORDSERVER"
><TT
CLASS="PARAMETER"
><I
> password server</I
></TT
></A
-> (if you have one). The password
- server will receive whatever username the client supplies without
+> (if you have one). The password
+ server will receive whatever username the client supplies without
modification.</P
><P
->Also note that no reverse mapping is done. The main effect
- this has is with printing. Users who have been mapped may have
- trouble deleting print jobs as PrintManager under WfWg will think
+>Also note that no reverse mapping is done. The main effect
+ this has is with printing. Users who have been mapped may have
+ trouble deleting print jobs as PrintManager under WfWg will think
they don't own the print job.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no username map</I
-></SPAN
></P
><P
>Example: <B
></DD
><DT
><A
+NAME="USESENDFILE"
+></A
+>use sendfile (S)</DT
+><DD
+><P
+>If this parameter is <TT
+CLASS="CONSTANT"
+>yes</TT
+>, and Samba
+ was built with the --with-sendfile-support option, and the underlying operating
+ system supports sendfile system call, then some SMB read calls (mainly ReadAndX
+ and ReadRaw) will use the more efficient sendfile system call for files that
+ are exclusively oplocked. This may make more efficient use of the system CPU's
+ and cause Samba to be faster. This is off by default as it's effects are unknown
+ as yet.
+ </P
+><P
+>Default: <B
+CLASS="COMMAND"
+>use sendfile = no</B
+></P
+></DD
+><DT
+><A
NAME="UTMP"
></A
>utmp (G)</DT
><DD
><P
->This boolean parameter is only available if
+>This boolean parameter is only available if
Samba has been configured and compiled with the option <B
CLASS="COMMAND"
> --with-utmp</B
>. If set to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> then Samba will attempt
to add utmp or utmpx records (depending on the UNIX system) whenever a
connection is made to a Samba server. Sites may use this to record the
performance on large installations. </P
><P
>See also the <A
-HREF="index.html#UTMPDIRECTORY"
+HREF="r1.html#UTMPDIRECTORY"
><TT
CLASS="PARAMETER"
><I
>. It specifies a directory pathname that is
used to store the utmp or utmpx files (depending on the UNIX system) that
record user connections to a Samba server. See also the <A
-HREF="index.html#UTMP"
+HREF="r1.html#UTMP"
> <TT
CLASS="PARAMETER"
><I
>/var/run/utmp</TT
> on Linux).</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no utmp directory</I
-></SPAN
></P
><P
>Example: <B
has logged out.
See also the <A
-HREF="index.html#UTMP"
+HREF="r1.html#UTMP"
> <TT
CLASS="PARAMETER"
><I
>/var/run/wtmp</TT
> on Linux).</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>no wtmp directory</I
-></SPAN
></P
><P
>Example: <B
>. This is useful in the [homes] section.</P
><P
>See also <A
-HREF="index.html#INVALIDUSERS"
+HREF="r1.html#INVALIDUSERS"
><TT
CLASS="PARAMETER"
><I
></A
></P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>No valid users list (anyone can login)
</I
-></SPAN
></P
><P
>Example: <B
or directories as in DOS wildcards.</P
><P
>Each entry must be a unix path, not a DOS path and
- must <SPAN
-CLASS="emphasis"
-><I
+ must <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> include the unix directory
separator '/'.</P
><P
is important to be aware of is Samba's behaviour when
trying to delete a directory. If a directory that is
to be deleted contains nothing but veto files this
- deletion will <SPAN
-CLASS="emphasis"
-><I
+ deletion will <I
CLASS="EMPHASIS"
>fail</I
-></SPAN
> unless you also set
the <TT
CLASS="PARAMETER"
for a match as they are scanned.</P
><P
>See also <A
-HREF="index.html#HIDEFILES"
+HREF="r1.html#HIDEFILES"
><TT
CLASS="PARAMETER"
><I
></TT
></A
> and <A
-HREF="index.html#CASESENSITIVE"
+HREF="r1.html#CASESENSITIVE"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>No files or directories are vetoed.
</I
-></SPAN
></P
><P
->Examples:<PRE
+>Examples:<TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
+><PRE
CLASS="PROGRAMLISTING"
>; Veto any files containing the word Security,
; any ending in .tmp, and any directory containing the
; Veto the Apple specific files that a NetAtalk server
; creates.
veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/</PRE
+></TD
+></TR
+></TABLE
></P
></DD
><DT
><DD
><P
>This parameter is only valid when the <A
-HREF="index.html#OPLOCKS"
+HREF="r1.html#OPLOCKS"
><TT
CLASS="PARAMETER"
><I
to selectively turn off the granting of oplocks on selected files that
match a wildcarded list, similar to the wildcarded list used in the
<A
-HREF="index.html#VETOFILES"
+HREF="r1.html#VETOFILES"
><TT
CLASS="PARAMETER"
><I
>
parameter.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>No files are vetoed for oplock
grants</I
-></SPAN
></P
><P
>You might want to do this on files that you know will
with a VFS object. The Samba VFS layer is new to Samba 2.2 and
must be enabled at compile time with --with-vfs.</P
><P
->Default : <SPAN
-CLASS="emphasis"
-><I
+>Default : <I
CLASS="EMPHASIS"
>no value</I
-></SPAN
></P
></DD
><DT
to the vfs layer at initialization time. The Samba VFS layer
is new to Samba 2.2 and must be enabled at compile time
with --with-vfs. See also <A
-HREF="index.html#VFSOBJECT"
+HREF="r1.html#VFSOBJECT"
><TT
CLASS="PARAMETER"
><I
></A
>.</P
><P
->Default : <SPAN
-CLASS="emphasis"
-><I
+>Default : <I
CLASS="EMPHASIS"
>no value</I
-></SPAN
></P
></DD
><DT
returned for a share. Useful for CDROMs with installation programs
that insist on a particular volume label.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>the name of the share</I
-></SPAN
></P
></DD
><DT
>winbind enum users</I
></TT
> parameter is
- false, calls to the <B
+ <TT
+CLASS="CONSTANT"
+>no</TT
+>, calls to the <B
CLASS="COMMAND"
>getpwent</B
> system call
will not return any data. </P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Warning:</I
-></SPAN
> Turning off user
enumeration may cause some programs to behave oddly. For
example, the finger program relies on having access to the
>winbind enum groups</I
></TT
> parameter is
- false, calls to the <B
+ <TT
+CLASS="CONSTANT"
+>no</TT
+>, calls to the <B
CLASS="COMMAND"
>getgrent()</B
> system
call will not return any data. </P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Warning:</I
-></SPAN
> Turning off group
enumeration may cause some programs to behave oddly.
</P
><P
>Default: <B
CLASS="COMMAND"
->winbind gid = <empty string>
+>winbind gid = <empty string>
</B
></P
><P
><P
>Default: <B
CLASS="COMMAND"
->winbind uid = <empty string>
+>winbind uid = <empty string>
</B
></P
><P
>winbind use default domain, <A
NAME="WINBINDUSEDEFAULTDOMAIN"
></A
->winbind use default domain</DT
+>winbind use default domain (G)</DT
><DD
><P
>This parameter specifies whether the <A
><P
>Default: <B
CLASS="COMMAND"
->winbind use default domain = <falseg>
+>winbind use default domain = <no>
</B
></P
><P
>Example: <B
CLASS="COMMAND"
->winbind use default domain = true</B
+>winbind use default domain = yes</B
></P
></DD
><DT
>You should point this at your WINS server if you have a
multi-subnetted network.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE</I
-></SPAN
>. You need to set up Samba to point
to a WINS server if you have multiple subnets and wish cross-subnet
browsing to work correctly.</P
>
in the docs/ directory of your Samba source distribution.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>not enabled</I
-></SPAN
></P
><P
>Example: <B
> process in Samba will act as a WINS server. You should
not set this to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
> unless you have a multi-subnetted network and
you wish a particular <B
CLASS="COMMAND"
>nmbd</B
> to be your WINS server.
- Note that you should <SPAN
-CLASS="emphasis"
-><I
+ Note that you should <I
CLASS="EMPHASIS"
>NEVER</I
-></SPAN
> set this to <TT
CLASS="CONSTANT"
->true</TT
+>yes</TT
>
on more than one machine in your network.</P
><P
>This controls what workgroup your server will
appear to be in when queried by clients. Note that this parameter
also controls the Domain name used with the <A
-HREF="index.html#SECURITYEQUALSDOMAIN"
+HREF="r1.html#SECURITYEQUALSDOMAIN"
><B
CLASS="COMMAND"
>security = domain</B
>
setting.</P
><P
->Default: <SPAN
-CLASS="emphasis"
-><I
+>Default: <I
CLASS="EMPHASIS"
>set at compile time to WORKGROUP</I
-></SPAN
></P
><P
>Example: <B
><DD
><P
>Synonym for <A
-HREF="index.html#WRITEABLE"
+HREF="r1.html#WRITEABLE"
><TT
CLASS="PARAMETER"
><I
><P
>If this integer parameter is set to non-zero value,
Samba will create an in-memory cache for each oplocked file
- (it does <SPAN
-CLASS="emphasis"
-><I
+ (it does <I
CLASS="EMPHASIS"
>not</I
-></SPAN
> do this for
non-oplocked files). All writes that the client does not request
to be flushed directly to disk will be stored in this cache if possible.
>This is a list of users that are given read-write
access to a service. If the connecting user is in this list then
they will be given write access, no matter what the <A
-HREF="index.html#WRITEABLE"
+HREF="r1.html#READONLY"
><TT
CLASS="PARAMETER"
><I
->writeable</I
+>read only</I
></TT
></A
>
write list then they will be given write access.</P
><P
>See also the <A
-HREF="index.html#READLIST"
+HREF="r1.html#READLIST"
><TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->write list = <empty string>
+>write list = <empty string>
</B
></P
><P
>write ok (S)</DT
><DD
><P
-HREF="index.html#WRITEABLE"
+>
Inverted synonym for <A
+HREF="r1.html#READONLY"
><TT
CLASS="PARAMETER"
><I
-> writeable</I
+> read only</I
></TT
></A
>.</P
>writeable (S)</DT
><DD
><P
->
An inverted synonym is <A
-HREF="index.html#READONLY"
-> <TT
+>
Inverted synonym for <A
+HREF="r1.html#READONLY"
+><TT
CLASS="PARAMETER"
><I
->read only</I
+> read only</I
></TT
></A
>.</P
-><P
->If this parameter is <TT
-CLASS="CONSTANT"
->no</TT
->, then users
- of a service may not create or modify files in the service's
- directory.</P
-><P
->Note that a printable service (<B
-CLASS="COMMAND"
->printable = yes</B
->)
- will <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->ALWAYS</I
-></SPAN
-> allow writing to the directory
- (user privileges permitting), but only via spooling operations.</P
-><P
->Default: <B
-CLASS="COMMAND"
->writeable = no</B
-></P
></DD
></DL
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6109"
+NAME="AEN6113"
></A
><H2
>WARNINGS</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6115"
+NAME="AEN6119"
></A
><H2
>VERSION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6118"
+NAME="AEN6122"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6138"
+NAME="AEN6142"
></A
><H2
>AUTHOR</H2
git.samba.org / ira / wip.git / commitdiff