2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
6 Largely re-written by Andrew Tridgell, September 1994
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
13 This program is free software; you can redistribute it and/or modify
14 it under the terms of the GNU General Public License as published by
15 the Free Software Foundation; either version 2 of the License, or
16 (at your option) any later version.
18 This program is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 GNU General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with this program; if not, write to the Free Software
25 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
31 * This module provides suitable callback functions for the params
32 * module. It builds the internal table of service details which is
33 * then used by the rest of the server.
37 * 1) add it to the global or service structure definition
38 * 2) add it to the parm_table
39 * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
40 * 4) If it's a global then initialise it in init_globals. If a local
41 * (ie. service) parameter then initialise it in the sDefault structure
45 * The configuration file is processed sequentially for speed. It is NOT
46 * accessed randomly as happens in 'real' Windows. For this reason, there
47 * is a fair bit of sequence-dependent code here - ie., code which assumes
48 * that certain things happen before others. In particular, the code which
49 * happens at the boundary between sections is delicately poised, so be
56 BOOL in_client = False; /* Not in the client by default */
59 extern pstring user_socket_options;
60 extern enum protocol_types Protocol;
61 extern userdom_struct current_user_info;
64 #define GLOBAL_NAME "global"
68 #define PRINTERS_NAME "printers"
72 #define HOMES_NAME "homes"
75 /* some helpful bits */
76 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
77 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
79 #define USERSHARE_VALID 1
80 #define USERSHARE_PENDING_DELETE 2
82 int keepalive = DEFAULT_KEEPALIVE;
83 BOOL use_getwd_cache = True;
85 extern int extra_time_offset;
87 static BOOL defaults_saved = False;
89 typedef struct _param_opt_struct param_opt_struct;
90 struct _param_opt_struct {
91 param_opt_struct *prev, *next;
98 * This structure describes global (ie., server-wide) parameters.
104 char *display_charset;
105 char *szPrintcapname;
106 char *szAddPortCommand;
107 char *szEnumPortsCommand;
108 char *szAddPrinterCommand;
109 char *szDeletePrinterCommand;
110 char *szOs2DriverMap;
114 char *szDefaultService;
118 char *szServerString;
119 char *szAutoServices;
120 char *szPasswdProgram;
124 char *szSMBPasswdFile;
126 char *szPassdbBackend;
127 char **szPreloadModules;
128 char *szPasswordServer;
129 char *szSocketOptions;
131 char *szAfsUsernameMap;
132 int iAfsTokenLifetime;
133 char *szLogNtTokenCommand;
139 char **szWINSservers;
141 char *szRemoteAnnounce;
142 char *szRemoteBrowseSync;
143 char *szSocketAddress;
144 char *szNISHomeMapName;
145 char *szAnnounceVersion; /* This is initialised in init_globals */
148 char **szNetbiosAliases;
149 char *szNetbiosScope;
150 char *szNameResolveOrder;
152 char *szAddUserScript;
153 char *szRenameUserScript;
154 char *szDelUserScript;
155 char *szAddGroupScript;
156 char *szDelGroupScript;
157 char *szAddUserToGroupScript;
158 char *szDelUserFromGroupScript;
159 char *szSetPrimaryGroupScript;
160 char *szAddMachineScript;
161 char *szShutdownScript;
162 char *szAbortShutdownScript;
163 char *szUsernameMapScript;
164 char *szCheckPasswordScript;
171 BOOL bPassdbExpandExplicit;
172 int AlgorithmicRidBase;
173 char *szTemplateHomedir;
174 char *szTemplateShell;
175 char *szWinbindSeparator;
176 BOOL bWinbindEnumUsers;
177 BOOL bWinbindEnumGroups;
178 BOOL bWinbindUseDefaultDomain;
179 BOOL bWinbindTrustedDomainsOnly;
180 BOOL bWinbindNestedGroups;
181 BOOL bWinbindRefreshTickets;
182 BOOL bWinbindOfflineLogon;
183 BOOL bWinbindNormalizeNames;
184 char **szIdmapDomains;
185 char **szIdmapBackend; /* deprecated */
186 char *szIdmapAllocBackend;
187 char *szAddShareCommand;
188 char *szChangeShareCommand;
189 char *szDeleteShareCommand;
191 char *szGuestaccount;
192 char *szManglingMethod;
193 char **szServicesList;
194 char *szUsersharePath;
195 char *szUsershareTemplateShare;
196 char **szUsersharePrefixAllowList;
197 char **szUsersharePrefixDenyList;
204 int open_files_db_hash_size;
212 BOOL paranoid_server_security;
215 int iMaxSmbdProcesses;
216 BOOL bDisableSpoolss;
219 int enhanced_browsing;
225 int announce_as; /* This is initialised in init_globals */
226 int machine_password_timeout;
228 int oplock_break_wait_time;
229 int winbind_cache_time;
230 int winbind_max_idle_children;
231 char **szWinbindNssInfo;
234 char *szLdapMachineSuffix;
235 char *szLdapUserSuffix;
236 char *szLdapIdmapSuffix;
237 char *szLdapGroupSuffix;
243 char *szIPrintServer;
244 int ldap_passwd_sync;
245 int ldap_replication_sleep;
246 int ldap_timeout; /* This is initialised in init_globals */
249 BOOL bMsAddPrinterWizard;
254 BOOL bPreferredMaster;
257 BOOL bEncryptPasswords;
262 BOOL bObeyPamRestrictions;
264 int PrintcapCacheTime;
265 BOOL bLargeReadwrite;
273 BOOL bBindInterfacesOnly;
274 BOOL bPamPasswordChange;
275 BOOL bUnixPasswdSync;
276 BOOL bPasswdChatDebug;
277 int iPasswdChatTimeout;
281 BOOL bNTStatusSupport;
283 int iMaxStatCacheSize;
285 BOOL bAllowTrustedDomains;
289 BOOL bClientLanManAuth;
290 BOOL bClientNTLMv2Auth;
291 BOOL bClientPlaintextAuth;
292 BOOL bClientUseSpnego;
293 BOOL bDebugPrefixTimestamp;
294 BOOL bDebugHiresTimestamp;
297 BOOL bEnableCoreFiles;
300 BOOL bHostnameLookups;
301 BOOL bUnixExtensions;
302 BOOL bDisableNetbios;
303 BOOL bUseKerberosKeytab;
304 BOOL bDeferSharingViolations;
305 BOOL bEnablePrivileges;
307 BOOL bUsershareOwnerOnly;
308 BOOL bUsershareAllowGuests;
309 BOOL bRegistryShares;
310 int restrict_anonymous;
311 int name_cache_timeout;
314 int iUsershareMaxShares;
315 int iIdmapExpireTime;
316 int iIdmapNegativeTime;
319 param_opt_struct *param_opt;
322 static global Globals;
325 * This structure describes a single service.
331 time_t usershare_last_mod;
335 char **szInvalidUsers;
343 char *szRootPostExec;
345 char *szPrintcommand;
348 char *szLppausecommand;
349 char *szLpresumecommand;
350 char *szQueuepausecommand;
351 char *szQueueresumecommand;
353 char *szPrintjobUsername;
362 char *szVetoOplockFiles;
368 char **printer_admin;
376 int iMaxReportedPrintJobs;
379 int iCreate_force_mode;
381 int iSecurity_force_mode;
384 int iDir_Security_mask;
385 int iDir_Security_force_mode;
389 int iOplockContentionLimit;
394 BOOL bRootpreexecClose;
397 BOOL bShortCasePreserve;
399 BOOL bHideSpecialFiles;
400 BOOL bHideUnReadable;
401 BOOL bHideUnWriteableFiles;
412 BOOL bStoreDosAttributes;
425 BOOL bStrictAllocate;
429 BOOL bDeleteReadonly;
431 BOOL bDeleteVetoFiles;
434 BOOL bDosFiletimeResolution;
435 BOOL bFakeDirCreateTimes;
441 BOOL bUseClientDriver;
442 BOOL bDefaultDevmode;
443 BOOL bForcePrintername;
445 BOOL bForceUnknownAclUser;
448 BOOL bMap_acl_inherit;
451 BOOL bAclCheckPermissions;
452 BOOL bAclMapFullControl;
453 BOOL bAclGroupControl;
455 BOOL bKernelChangeNotify;
456 int iallocation_roundup_size;
460 param_opt_struct *param_opt;
462 char dummy[3]; /* for alignment */
466 /* This is a default service used to prime a services structure */
467 static service sDefault = {
469 False, /* not autoloaded */
470 0, /* not a usershare */
471 (time_t)0, /* No last mod time */
472 NULL, /* szService */
474 NULL, /* szUsername */
475 NULL, /* szInvalidUsers */
476 NULL, /* szValidUsers */
477 NULL, /* szAdminUsers */
479 NULL, /* szInclude */
480 NULL, /* szPreExec */
481 NULL, /* szPostExec */
482 NULL, /* szRootPreExec */
483 NULL, /* szRootPostExec */
484 NULL, /* szCupsOptions */
485 NULL, /* szPrintcommand */
486 NULL, /* szLpqcommand */
487 NULL, /* szLprmcommand */
488 NULL, /* szLppausecommand */
489 NULL, /* szLpresumecommand */
490 NULL, /* szQueuepausecommand */
491 NULL, /* szQueueresumecommand */
492 NULL, /* szPrintername */
493 NULL, /* szPrintjobUsername */
494 NULL, /* szDontdescend */
495 NULL, /* szHostsallow */
496 NULL, /* szHostsdeny */
497 NULL, /* szMagicScript */
498 NULL, /* szMagicOutput */
499 NULL, /* szMangledMap */
500 NULL, /* szVetoFiles */
501 NULL, /* szHideFiles */
502 NULL, /* szVetoOplockFiles */
504 NULL, /* force user */
505 NULL, /* force group */
507 NULL, /* writelist */
508 NULL, /* printer admin */
511 NULL, /* vfs objects */
512 NULL, /* szMSDfsProxy */
514 0, /* iMinPrintSpace */
515 1000, /* iMaxPrintJobs */
516 0, /* iMaxReportedPrintJobs */
517 0, /* iWriteCacheSize */
518 0744, /* iCreate_mask */
519 0000, /* iCreate_force_mode */
520 0777, /* iSecurity_mask */
521 0, /* iSecurity_force_mode */
522 0755, /* iDir_mask */
523 0000, /* iDir_force_mode */
524 0777, /* iDir_Security_mask */
525 0, /* iDir_Security_force_mode */
526 0, /* iMaxConnections */
527 CASE_LOWER, /* iDefaultCase */
528 DEFAULT_PRINTING, /* iPrinting */
529 2, /* iOplockContentionLimit */
531 1024, /* iBlock_size */
532 0, /* iDfreeCacheTime */
533 False, /* bPreexecClose */
534 False, /* bRootpreexecClose */
535 Auto, /* case sensitive */
536 True, /* case preserve */
537 True, /* short case preserve */
538 True, /* bHideDotFiles */
539 False, /* bHideSpecialFiles */
540 False, /* bHideUnReadable */
541 False, /* bHideUnWriteableFiles */
542 True, /* bBrowseable */
543 True, /* bAvailable */
544 True, /* bRead_only */
545 True, /* bNo_set_dir */
546 False, /* bGuest_only */
547 False, /* bGuest_ok */
548 False, /* bPrint_ok */
549 False, /* bMap_system */
550 False, /* bMap_hidden */
551 True, /* bMap_archive */
552 False, /* bStoreDosAttributes */
553 False, /* bDmapiSupport */
555 Auto, /* iStrictLocking */
556 True, /* bPosixLocking */
557 True, /* bShareModes */
559 True, /* bLevel2OpLocks */
560 False, /* bOnlyUser */
561 True, /* bMangledNames */
562 True, /* bWidelinks */
563 True, /* bSymlinks */
564 False, /* bSyncAlways */
565 False, /* bStrictAllocate */
566 False, /* bStrictSync */
567 '~', /* magic char */
569 False, /* bDeleteReadonly */
570 False, /* bFakeOplocks */
571 False, /* bDeleteVetoFiles */
572 False, /* bDosFilemode */
573 True, /* bDosFiletimes */
574 False, /* bDosFiletimeResolution */
575 False, /* bFakeDirCreateTimes */
576 True, /* bBlockingLocks */
577 False, /* bInheritPerms */
578 False, /* bInheritACLS */
579 False, /* bInheritOwner */
580 False, /* bMSDfsRoot */
581 False, /* bUseClientDriver */
582 True, /* bDefaultDevmode */
583 False, /* bForcePrintername */
584 True, /* bNTAclSupport */
585 False, /* bForceUnknownAclUser */
586 False, /* bUseSendfile */
587 False, /* bProfileAcls */
588 False, /* bMap_acl_inherit */
589 False, /* bAfs_Share */
590 False, /* bEASupport */
591 True, /* bAclCheckPermissions */
592 True, /* bAclMapFullControl */
593 False, /* bAclGroupControl */
594 True, /* bChangeNotify */
595 True, /* bKernelChangeNotify */
596 SMB_ROUNDUP_ALLOCATION_SIZE, /* iallocation_roundup_size */
597 0, /* iAioReadSize */
598 0, /* iAioWriteSize */
599 MAP_READONLY_YES, /* iMap_readonly */
601 NULL, /* Parametric options */
606 /* local variables */
607 static service **ServicePtrs = NULL;
608 static int iNumServices = 0;
609 static int iServiceIndex = 0;
610 static TDB_CONTEXT *ServiceHash;
611 static int *invalid_services = NULL;
612 static int num_invalid_services = 0;
613 static BOOL bInGlobalSection = True;
614 static BOOL bGlobalOnly = False;
615 static int server_role;
616 static int default_server_announce;
618 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
620 /* prototypes for the special type handlers */
621 static BOOL handle_include( int snum, const char *pszParmValue, char **ptr);
622 static BOOL handle_copy( int snum, const char *pszParmValue, char **ptr);
623 static BOOL handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
624 static BOOL handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
625 static BOOL handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
626 static BOOL handle_debug_list( int snum, const char *pszParmValue, char **ptr );
627 static BOOL handle_workgroup( int snum, const char *pszParmValue, char **ptr );
628 static BOOL handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
629 static BOOL handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
630 static BOOL handle_charset( int snum, const char *pszParmValue, char **ptr );
631 static BOOL handle_printing( int snum, const char *pszParmValue, char **ptr);
633 static void set_server_role(void);
634 static void set_default_server_announce_type(void);
635 static void set_allowed_client_auth(void);
637 static const struct enum_list enum_protocol[] = {
638 {PROTOCOL_NT1, "NT1"},
639 {PROTOCOL_LANMAN2, "LANMAN2"},
640 {PROTOCOL_LANMAN1, "LANMAN1"},
641 {PROTOCOL_CORE, "CORE"},
642 {PROTOCOL_COREPLUS, "COREPLUS"},
643 {PROTOCOL_COREPLUS, "CORE+"},
647 static const struct enum_list enum_security[] = {
648 {SEC_SHARE, "SHARE"},
650 {SEC_SERVER, "SERVER"},
651 {SEC_DOMAIN, "DOMAIN"},
658 static const struct enum_list enum_printing[] = {
659 {PRINT_SYSV, "sysv"},
661 {PRINT_HPUX, "hpux"},
665 {PRINT_LPRNG, "lprng"},
666 {PRINT_CUPS, "cups"},
667 {PRINT_IPRINT, "iprint"},
669 {PRINT_LPROS2, "os2"},
671 {PRINT_TEST, "test"},
673 #endif /* DEVELOPER */
677 static const struct enum_list enum_ldap_ssl[] = {
678 {LDAP_SSL_OFF, "no"},
679 {LDAP_SSL_OFF, "No"},
680 {LDAP_SSL_OFF, "off"},
681 {LDAP_SSL_OFF, "Off"},
682 {LDAP_SSL_START_TLS, "start tls"},
683 {LDAP_SSL_START_TLS, "Start_tls"},
687 static const struct enum_list enum_ldap_passwd_sync[] = {
688 {LDAP_PASSWD_SYNC_OFF, "no"},
689 {LDAP_PASSWD_SYNC_OFF, "No"},
690 {LDAP_PASSWD_SYNC_OFF, "off"},
691 {LDAP_PASSWD_SYNC_OFF, "Off"},
692 {LDAP_PASSWD_SYNC_ON, "Yes"},
693 {LDAP_PASSWD_SYNC_ON, "yes"},
694 {LDAP_PASSWD_SYNC_ON, "on"},
695 {LDAP_PASSWD_SYNC_ON, "On"},
696 {LDAP_PASSWD_SYNC_ONLY, "Only"},
697 {LDAP_PASSWD_SYNC_ONLY, "only"},
701 /* Types of machine we can announce as. */
702 #define ANNOUNCE_AS_NT_SERVER 1
703 #define ANNOUNCE_AS_WIN95 2
704 #define ANNOUNCE_AS_WFW 3
705 #define ANNOUNCE_AS_NT_WORKSTATION 4
707 static const struct enum_list enum_announce_as[] = {
708 {ANNOUNCE_AS_NT_SERVER, "NT"},
709 {ANNOUNCE_AS_NT_SERVER, "NT Server"},
710 {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
711 {ANNOUNCE_AS_WIN95, "win95"},
712 {ANNOUNCE_AS_WFW, "WfW"},
716 static const struct enum_list enum_map_readonly[] = {
717 {MAP_READONLY_NO, "no"},
718 {MAP_READONLY_NO, "false"},
719 {MAP_READONLY_NO, "0"},
720 {MAP_READONLY_YES, "yes"},
721 {MAP_READONLY_YES, "true"},
722 {MAP_READONLY_YES, "1"},
723 {MAP_READONLY_PERMISSIONS, "permissions"},
724 {MAP_READONLY_PERMISSIONS, "perms"},
728 static const struct enum_list enum_case[] = {
729 {CASE_LOWER, "lower"},
730 {CASE_UPPER, "upper"},
734 static const struct enum_list enum_bool_auto[] = {
745 /* Client-side offline caching policy types */
746 #define CSC_POLICY_MANUAL 0
747 #define CSC_POLICY_DOCUMENTS 1
748 #define CSC_POLICY_PROGRAMS 2
749 #define CSC_POLICY_DISABLE 3
751 static const struct enum_list enum_csc_policy[] = {
752 {CSC_POLICY_MANUAL, "manual"},
753 {CSC_POLICY_DOCUMENTS, "documents"},
754 {CSC_POLICY_PROGRAMS, "programs"},
755 {CSC_POLICY_DISABLE, "disable"},
759 /* SMB signing types. */
760 static const struct enum_list enum_smb_signing_vals[] = {
772 {Required, "required"},
773 {Required, "mandatory"},
775 {Required, "forced"},
776 {Required, "enforced"},
780 /* ACL compatibility options. */
781 static const struct enum_list enum_acl_compat_vals[] = {
782 { ACL_COMPAT_AUTO, "auto" },
783 { ACL_COMPAT_WINNT, "winnt" },
784 { ACL_COMPAT_WIN2K, "win2k" },
789 Do you want session setups at user level security with a invalid
790 password to be rejected or allowed in as guest? WinNT rejects them
791 but it can be a pain as it means "net view" needs to use a password
793 You have 3 choices in the setting of map_to_guest:
795 "Never" means session setups with an invalid password
796 are rejected. This is the default.
798 "Bad User" means session setups with an invalid password
799 are rejected, unless the username does not exist, in which case it
800 is treated as a guest login
802 "Bad Password" means session setups with an invalid password
803 are treated as a guest login
805 Note that map_to_guest only has an effect in user or server
809 static const struct enum_list enum_map_to_guest[] = {
810 {NEVER_MAP_TO_GUEST, "Never"},
811 {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
812 {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
813 {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
817 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
819 * The FLAG_HIDE is explicit. Paramters set this way do NOT appear in any edit
820 * screen in SWAT. This is used to exclude parameters as well as to squash all
821 * parameters that have been duplicated by pseudonyms.
823 * NOTE: To display a parameter in BASIC view set FLAG_BASIC
824 * Any parameter that does NOT have FLAG_ADVANCED will not disply at all
825 * Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
828 * NOTE2: Handling of duplicated (synonym) paramters:
829 * Only the first occurance of a parameter should be enabled by FLAG_BASIC
830 * and/or FLAG_ADVANCED. All duplicates following the first mention should be
831 * set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
832 * name first, and all synonyms must follow it with the FLAG_HIDE attribute.
835 static struct parm_struct parm_table[] = {
836 {N_("Base Options"), P_SEP, P_SEPARATOR},
838 {"dos charset", P_STRING, P_GLOBAL, &Globals.dos_charset, handle_charset, NULL, FLAG_ADVANCED},
839 {"unix charset", P_STRING, P_GLOBAL, &Globals.unix_charset, handle_charset, NULL, FLAG_ADVANCED},
840 {"display charset", P_STRING, P_GLOBAL, &Globals.display_charset, handle_charset, NULL, FLAG_ADVANCED},
841 {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
842 {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
843 {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_HIDE},
844 {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkgroup, handle_workgroup, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
846 {"realm", P_USTRING, P_GLOBAL, &Globals.szRealm, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
848 {"netbios name", P_USTRING, P_GLOBAL, &Globals.szNetbiosName, handle_netbios_name, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
849 {"netbios aliases", P_LIST, P_GLOBAL, &Globals.szNetbiosAliases, handle_netbios_aliases, NULL, FLAG_ADVANCED},
850 {"netbios scope", P_USTRING, P_GLOBAL, &Globals.szNetbiosScope, handle_netbios_scope, NULL, FLAG_ADVANCED},
851 {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED },
852 {"interfaces", P_LIST, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
853 {"bind interfaces only", P_BOOL, P_GLOBAL, &Globals.bBindInterfacesOnly, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
855 {N_("Security Options"), P_SEP, P_SEPARATOR},
857 {"security", P_ENUM, P_GLOBAL, &Globals.security, NULL, enum_security, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
858 {"auth methods", P_LIST, P_GLOBAL, &Globals.AuthMethods, NULL, NULL, FLAG_ADVANCED},
859 {"encrypt passwords", P_BOOL, P_GLOBAL, &Globals.bEncryptPasswords, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
860 {"update encrypted", P_BOOL, P_GLOBAL, &Globals.bUpdateEncrypt, NULL, NULL, FLAG_ADVANCED},
861 {"client schannel", P_ENUM, P_GLOBAL, &Globals.clientSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
862 {"server schannel", P_ENUM, P_GLOBAL, &Globals.serverSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
863 {"allow trusted domains", P_BOOL, P_GLOBAL, &Globals.bAllowTrustedDomains, NULL, NULL, FLAG_ADVANCED},
864 {"map to guest", P_ENUM, P_GLOBAL, &Globals.map_to_guest, NULL, enum_map_to_guest, FLAG_ADVANCED},
865 {"null passwords", P_BOOL, P_GLOBAL, &Globals.bNullPasswords, NULL, NULL, FLAG_ADVANCED},
866 {"obey pam restrictions", P_BOOL, P_GLOBAL, &Globals.bObeyPamRestrictions, NULL, NULL, FLAG_ADVANCED},
867 {"password server", P_STRING, P_GLOBAL, &Globals.szPasswordServer, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
868 {"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, FLAG_ADVANCED},
869 {"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, FLAG_ADVANCED},
870 {"passdb backend", P_STRING, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
871 {"algorithmic rid base", P_INTEGER, P_GLOBAL, &Globals.AlgorithmicRidBase, NULL, NULL, FLAG_ADVANCED},
872 {"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_ADVANCED},
873 {"root dir", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
874 {"root", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
875 {"guest account", P_STRING, P_GLOBAL, &Globals.szGuestaccount, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
876 {"enable privileges", P_BOOL, P_GLOBAL, &Globals.bEnablePrivileges, NULL, NULL, FLAG_ADVANCED},
878 {"pam password change", P_BOOL, P_GLOBAL, &Globals.bPamPasswordChange, NULL, NULL, FLAG_ADVANCED},
879 {"passwd program", P_STRING, P_GLOBAL, &Globals.szPasswdProgram, NULL, NULL, FLAG_ADVANCED},
880 {"passwd chat", P_STRING, P_GLOBAL, &Globals.szPasswdChat, NULL, NULL, FLAG_ADVANCED},
881 {"passwd chat debug", P_BOOL, P_GLOBAL, &Globals.bPasswdChatDebug, NULL, NULL, FLAG_ADVANCED},
882 {"passwd chat timeout", P_INTEGER, P_GLOBAL, &Globals.iPasswdChatTimeout, NULL, NULL, FLAG_ADVANCED},
883 {"check password script", P_STRING, P_GLOBAL, &Globals.szCheckPasswordScript, NULL, NULL, FLAG_ADVANCED},
884 {"username map", P_STRING, P_GLOBAL, &Globals.szUsernameMap, NULL, NULL, FLAG_ADVANCED},
885 {"password level", P_INTEGER, P_GLOBAL, &Globals.pwordlevel, NULL, NULL, FLAG_ADVANCED},
886 {"username level", P_INTEGER, P_GLOBAL, &Globals.unamelevel, NULL, NULL, FLAG_ADVANCED},
887 {"unix password sync", P_BOOL, P_GLOBAL, &Globals.bUnixPasswdSync, NULL, NULL, FLAG_ADVANCED},
888 {"restrict anonymous", P_INTEGER, P_GLOBAL, &Globals.restrict_anonymous, NULL, NULL, FLAG_ADVANCED},
889 {"lanman auth", P_BOOL, P_GLOBAL, &Globals.bLanmanAuth, NULL, NULL, FLAG_ADVANCED},
890 {"ntlm auth", P_BOOL, P_GLOBAL, &Globals.bNTLMAuth, NULL, NULL, FLAG_ADVANCED},
891 {"client NTLMv2 auth", P_BOOL, P_GLOBAL, &Globals.bClientNTLMv2Auth, NULL, NULL, FLAG_ADVANCED},
892 {"client lanman auth", P_BOOL, P_GLOBAL, &Globals.bClientLanManAuth, NULL, NULL, FLAG_ADVANCED},
893 {"client plaintext auth", P_BOOL, P_GLOBAL, &Globals.bClientPlaintextAuth, NULL, NULL, FLAG_ADVANCED},
895 {"username", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
896 {"user", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
897 {"users", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
899 {"invalid users", P_LIST, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
900 {"valid users", P_LIST, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
901 {"admin users", P_LIST, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
902 {"read list", P_LIST, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
903 {"write list", P_LIST, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
904 {"printer admin", P_LIST, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED },
905 {"force user", P_STRING, P_LOCAL, &sDefault.force_user, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
906 {"force group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
907 {"group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED},
909 {"read only", P_BOOL, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE},
910 {"write ok", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
911 {"writeable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
912 {"writable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
914 {"acl check permissions", P_BOOL, P_LOCAL, &sDefault.bAclCheckPermissions, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
915 {"acl group control", P_BOOL, P_LOCAL, &sDefault.bAclGroupControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE | FLAG_DEPRECATED },
916 {"acl map full control", P_BOOL, P_LOCAL, &sDefault.bAclMapFullControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
917 {"create mask", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
918 {"create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_HIDE},
919 {"force create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
920 {"security mask", P_OCTAL, P_LOCAL, &sDefault.iSecurity_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
921 {"force security mode", P_OCTAL, P_LOCAL, &sDefault.iSecurity_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
922 {"directory mask", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
923 {"directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
924 {"force directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
925 {"directory security mask", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
926 {"force directory security mode", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
927 {"force unknown acl user", P_BOOL, P_LOCAL, &sDefault.bForceUnknownAclUser, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
928 {"inherit permissions", P_BOOL, P_LOCAL, &sDefault.bInheritPerms, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
929 {"inherit acls", P_BOOL, P_LOCAL, &sDefault.bInheritACLS, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
930 {"inherit owner", P_BOOL, P_LOCAL, &sDefault.bInheritOwner, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
931 {"guest only", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
932 {"only guest", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_HIDE},
934 {"guest ok", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
935 {"public", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_HIDE},
937 {"only user", P_BOOL, P_LOCAL, &sDefault.bOnlyUser, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
938 {"hosts allow", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
939 {"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_HIDE},
940 {"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
941 {"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_HIDE},
942 {"preload modules", P_LIST, P_GLOBAL, &Globals.szPreloadModules, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
943 {"use kerberos keytab", P_BOOL, P_GLOBAL, &Globals.bUseKerberosKeytab, NULL, NULL, FLAG_ADVANCED},
945 {N_("Logging Options"), P_SEP, P_SEPARATOR},
947 {"log level", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_ADVANCED},
948 {"debuglevel", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_HIDE},
949 {"syslog", P_INTEGER, P_GLOBAL, &Globals.syslog, NULL, NULL, FLAG_ADVANCED},
950 {"syslog only", P_BOOL, P_GLOBAL, &Globals.bSyslogOnly, NULL, NULL, FLAG_ADVANCED},
951 {"log file", P_STRING, P_GLOBAL, &Globals.szLogFile, NULL, NULL, FLAG_ADVANCED},
953 {"max log size", P_INTEGER, P_GLOBAL, &Globals.max_log_size, NULL, NULL, FLAG_ADVANCED},
954 {"debug timestamp", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
955 {"timestamp logs", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
956 {"debug prefix timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugPrefixTimestamp, NULL, NULL, FLAG_ADVANCED},
957 {"debug hires timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugHiresTimestamp, NULL, NULL, FLAG_ADVANCED},
958 {"debug pid", P_BOOL, P_GLOBAL, &Globals.bDebugPid, NULL, NULL, FLAG_ADVANCED},
959 {"debug uid", P_BOOL, P_GLOBAL, &Globals.bDebugUid, NULL, NULL, FLAG_ADVANCED},
960 {"enable core files", P_BOOL, P_GLOBAL, &Globals.bEnableCoreFiles, NULL, NULL, FLAG_ADVANCED},
962 {N_("Protocol Options"), P_SEP, P_SEPARATOR},
964 {"allocation roundup size", P_INTEGER, P_LOCAL, &sDefault.iallocation_roundup_size, NULL, NULL, FLAG_ADVANCED},
965 {"aio read size", P_INTEGER, P_LOCAL, &sDefault.iAioReadSize, NULL, NULL, FLAG_ADVANCED},
966 {"aio write size", P_INTEGER, P_LOCAL, &sDefault.iAioWriteSize, NULL, NULL, FLAG_ADVANCED},
967 {"smb ports", P_STRING, P_GLOBAL, &Globals.smb_ports, NULL, NULL, FLAG_ADVANCED},
968 {"large readwrite", P_BOOL, P_GLOBAL, &Globals.bLargeReadwrite, NULL, NULL, FLAG_ADVANCED},
969 {"max protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
970 {"protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
971 {"min protocol", P_ENUM, P_GLOBAL, &Globals.minprotocol, NULL, enum_protocol, FLAG_ADVANCED},
972 {"read bmpx", P_BOOL, P_GLOBAL, &Globals.bReadbmpx, NULL, NULL, FLAG_ADVANCED},
973 {"read raw", P_BOOL, P_GLOBAL, &Globals.bReadRaw, NULL, NULL, FLAG_ADVANCED},
974 {"write raw", P_BOOL, P_GLOBAL, &Globals.bWriteRaw, NULL, NULL, FLAG_ADVANCED},
975 {"disable netbios", P_BOOL, P_GLOBAL, &Globals.bDisableNetbios, NULL, NULL, FLAG_ADVANCED},
976 {"reset on zero vc", P_BOOL, P_GLOBAL, &Globals.bResetOnZeroVC, NULL, NULL, FLAG_ADVANCED},
978 {"acl compatibility", P_ENUM, P_GLOBAL, &Globals.iAclCompat, NULL, enum_acl_compat_vals, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
979 {"defer sharing violations", P_BOOL, P_GLOBAL, &Globals.bDeferSharingViolations, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
980 {"ea support", P_BOOL, P_LOCAL, &sDefault.bEASupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
981 {"nt acl support", P_BOOL, P_LOCAL, &sDefault.bNTAclSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
982 {"nt pipe support", P_BOOL, P_GLOBAL, &Globals.bNTPipeSupport, NULL, NULL, FLAG_ADVANCED},
983 {"nt status support", P_BOOL, P_GLOBAL, &Globals.bNTStatusSupport, NULL, NULL, FLAG_ADVANCED},
984 {"profile acls", P_BOOL, P_LOCAL, &sDefault.bProfileAcls, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
986 {"announce version", P_STRING, P_GLOBAL, &Globals.szAnnounceVersion, NULL, NULL, FLAG_ADVANCED},
987 {"announce as", P_ENUM, P_GLOBAL, &Globals.announce_as, NULL, enum_announce_as, FLAG_ADVANCED},
988 {"map acl inherit", P_BOOL, P_LOCAL, &sDefault.bMap_acl_inherit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
989 {"afs share", P_BOOL, P_LOCAL, &sDefault.bAfs_Share, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
990 {"max mux", P_INTEGER, P_GLOBAL, &Globals.max_mux, NULL, NULL, FLAG_ADVANCED},
991 {"max xmit", P_INTEGER, P_GLOBAL, &Globals.max_xmit, NULL, NULL, FLAG_ADVANCED},
993 {"name resolve order", P_STRING, P_GLOBAL, &Globals.szNameResolveOrder, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
994 {"max ttl", P_INTEGER, P_GLOBAL, &Globals.max_ttl, NULL, NULL, FLAG_ADVANCED},
995 {"max wins ttl", P_INTEGER, P_GLOBAL, &Globals.max_wins_ttl, NULL, NULL, FLAG_ADVANCED},
996 {"min wins ttl", P_INTEGER, P_GLOBAL, &Globals.min_wins_ttl, NULL, NULL, FLAG_ADVANCED},
997 {"time server", P_BOOL, P_GLOBAL, &Globals.bTimeServer, NULL, NULL, FLAG_ADVANCED},
998 {"unix extensions", P_BOOL, P_GLOBAL, &Globals.bUnixExtensions, NULL, NULL, FLAG_ADVANCED},
999 {"use spnego", P_BOOL, P_GLOBAL, &Globals.bUseSpnego, NULL, NULL, FLAG_ADVANCED},
1000 {"client signing", P_ENUM, P_GLOBAL, &Globals.client_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1001 {"server signing", P_ENUM, P_GLOBAL, &Globals.server_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1002 {"client use spnego", P_BOOL, P_GLOBAL, &Globals.bClientUseSpnego, NULL, NULL, FLAG_ADVANCED},
1004 {"enable asu support", P_BOOL, P_GLOBAL, &Globals.bASUSupport, NULL, NULL, FLAG_ADVANCED},
1005 {"svcctl list", P_LIST, P_GLOBAL, &Globals.szServicesList, NULL, NULL, FLAG_ADVANCED},
1007 {N_("Tuning Options"), P_SEP, P_SEPARATOR},
1009 {"block size", P_INTEGER, P_LOCAL, &sDefault.iBlock_size, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1010 {"deadtime", P_INTEGER, P_GLOBAL, &Globals.deadtime, NULL, NULL, FLAG_ADVANCED},
1011 {"getwd cache", P_BOOL, P_GLOBAL, &use_getwd_cache, NULL, NULL, FLAG_ADVANCED},
1012 {"keepalive", P_INTEGER, P_GLOBAL, &keepalive, NULL, NULL, FLAG_ADVANCED},
1013 {"change notify", P_BOOL, P_LOCAL, &sDefault.bChangeNotify, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1014 {"kernel change notify", P_BOOL, P_LOCAL, &sDefault.bKernelChangeNotify, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1016 {"lpq cache time", P_INTEGER, P_GLOBAL, &Globals.lpqcachetime, NULL, NULL, FLAG_ADVANCED},
1017 {"max smbd processes", P_INTEGER, P_GLOBAL, &Globals.iMaxSmbdProcesses, NULL, NULL, FLAG_ADVANCED},
1018 {"max connections", P_INTEGER, P_LOCAL, &sDefault.iMaxConnections, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1019 {"paranoid server security", P_BOOL, P_GLOBAL, &Globals.paranoid_server_security, NULL, NULL, FLAG_ADVANCED},
1020 {"max disk size", P_INTEGER, P_GLOBAL, &Globals.maxdisksize, NULL, NULL, FLAG_ADVANCED},
1021 {"max open files", P_INTEGER, P_GLOBAL, &Globals.max_open_files, NULL, NULL, FLAG_ADVANCED},
1022 {"min print space", P_INTEGER, P_LOCAL, &sDefault.iMinPrintSpace, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1023 {"open files database hash size", P_INTEGER, P_GLOBAL, &Globals.open_files_db_hash_size, NULL, NULL, FLAG_ADVANCED},
1025 {"socket options", P_GSTRING, P_GLOBAL, user_socket_options, NULL, NULL, FLAG_ADVANCED},
1026 {"strict allocate", P_BOOL, P_LOCAL, &sDefault.bStrictAllocate, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1027 {"strict sync", P_BOOL, P_LOCAL, &sDefault.bStrictSync, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1028 {"sync always", P_BOOL, P_LOCAL, &sDefault.bSyncAlways, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1029 {"use mmap", P_BOOL, P_GLOBAL, &Globals.bUseMmap, NULL, NULL, FLAG_ADVANCED},
1030 {"use sendfile", P_BOOL, P_LOCAL, &sDefault.bUseSendfile, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1031 {"hostname lookups", P_BOOL, P_GLOBAL, &Globals.bHostnameLookups, NULL, NULL, FLAG_ADVANCED},
1032 {"write cache size", P_INTEGER, P_LOCAL, &sDefault.iWriteCacheSize, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
1034 {"name cache timeout", P_INTEGER, P_GLOBAL, &Globals.name_cache_timeout, NULL, NULL, FLAG_ADVANCED},
1036 {N_("Printing Options"), P_SEP, P_SEPARATOR},
1038 {"max reported print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxReportedPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1039 {"max print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1040 {"load printers", P_BOOL, P_GLOBAL, &Globals.bLoadPrinters, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1041 {"printcap cache time", P_INTEGER, P_GLOBAL, &Globals.PrintcapCacheTime, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1042 {"printcap name", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1043 {"printcap", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_HIDE},
1044 {"printable", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1045 {"print ok", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_HIDE},
1046 {"printing", P_ENUM, P_LOCAL, &sDefault.iPrinting, handle_printing, enum_printing, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1047 {"cups options", P_STRING, P_LOCAL, &sDefault.szCupsOptions, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1048 {"cups server", P_STRING, P_GLOBAL, &Globals.szCupsServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1049 {"iprint server", P_STRING, P_GLOBAL, &Globals.szIPrintServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1050 {"print command", P_STRING, P_LOCAL, &sDefault.szPrintcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1051 {"disable spoolss", P_BOOL, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1052 {"enable spoolss", P_BOOLREV, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_HIDE},
1053 {"lpq command", P_STRING, P_LOCAL, &sDefault.szLpqcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1054 {"lprm command", P_STRING, P_LOCAL, &sDefault.szLprmcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1055 {"lppause command", P_STRING, P_LOCAL, &sDefault.szLppausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1056 {"lpresume command", P_STRING, P_LOCAL, &sDefault.szLpresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1057 {"queuepause command", P_STRING, P_LOCAL, &sDefault.szQueuepausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1058 {"queueresume command", P_STRING, P_LOCAL, &sDefault.szQueueresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1060 {"addport command", P_STRING, P_GLOBAL, &Globals.szAddPortCommand, NULL, NULL, FLAG_ADVANCED},
1061 {"enumports command", P_STRING, P_GLOBAL, &Globals.szEnumPortsCommand, NULL, NULL, FLAG_ADVANCED},
1062 {"addprinter command", P_STRING, P_GLOBAL, &Globals.szAddPrinterCommand, NULL, NULL, FLAG_ADVANCED},
1063 {"deleteprinter command", P_STRING, P_GLOBAL, &Globals.szDeletePrinterCommand, NULL, NULL, FLAG_ADVANCED},
1064 {"show add printer wizard", P_BOOL, P_GLOBAL, &Globals.bMsAddPrinterWizard, NULL, NULL, FLAG_ADVANCED},
1065 {"os2 driver map", P_STRING, P_GLOBAL, &Globals.szOs2DriverMap, NULL, NULL, FLAG_ADVANCED},
1067 {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1068 {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_HIDE},
1069 {"use client driver", P_BOOL, P_LOCAL, &sDefault.bUseClientDriver, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1070 {"default devmode", P_BOOL, P_LOCAL, &sDefault.bDefaultDevmode, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1071 {"force printername", P_BOOL, P_LOCAL, &sDefault.bForcePrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1072 {"printjob username", P_STRING, P_LOCAL, &sDefault.szPrintjobUsername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1074 {N_("Filename Handling"), P_SEP, P_SEPARATOR},
1075 {"mangling method", P_STRING, P_GLOBAL, &Globals.szManglingMethod, NULL, NULL, FLAG_ADVANCED},
1076 {"mangle prefix", P_INTEGER, P_GLOBAL, &Globals.mangle_prefix, NULL, NULL, FLAG_ADVANCED},
1078 {"default case", P_ENUM, P_LOCAL, &sDefault.iDefaultCase, NULL, enum_case, FLAG_ADVANCED | FLAG_SHARE},
1079 {"case sensitive", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1080 {"casesignames", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE},
1081 {"preserve case", P_BOOL, P_LOCAL, &sDefault.bCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1082 {"short preserve case", P_BOOL, P_LOCAL, &sDefault.bShortCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1083 {"mangling char", P_CHAR, P_LOCAL, &sDefault.magic_char, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1084 {"hide dot files", P_BOOL, P_LOCAL, &sDefault.bHideDotFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1085 {"hide special files", P_BOOL, P_LOCAL, &sDefault.bHideSpecialFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1086 {"hide unreadable", P_BOOL, P_LOCAL, &sDefault.bHideUnReadable, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1087 {"hide unwriteable files", P_BOOL, P_LOCAL, &sDefault.bHideUnWriteableFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1088 {"delete veto files", P_BOOL, P_LOCAL, &sDefault.bDeleteVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1089 {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1090 {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1091 {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1092 {"map archive", P_BOOL, P_LOCAL, &sDefault.bMap_archive, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1093 {"map hidden", P_BOOL, P_LOCAL, &sDefault.bMap_hidden, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1094 {"map system", P_BOOL, P_LOCAL, &sDefault.bMap_system, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1095 {"map readonly", P_ENUM, P_LOCAL, &sDefault.iMap_readonly, NULL, enum_map_readonly, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1096 {"mangled names", P_BOOL, P_LOCAL, &sDefault.bMangledNames, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1097 {"mangled map", P_STRING, P_LOCAL, &sDefault.szMangledMap, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_DEPRECATED },
1098 {"max stat cache size", P_INTEGER, P_GLOBAL, &Globals.iMaxStatCacheSize, NULL, NULL, FLAG_ADVANCED},
1099 {"stat cache", P_BOOL, P_GLOBAL, &Globals.bStatCache, NULL, NULL, FLAG_ADVANCED},
1100 {"store dos attributes", P_BOOL, P_LOCAL, &sDefault.bStoreDosAttributes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1101 {"dmapi support", P_BOOL, P_LOCAL, &sDefault.bDmapiSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1104 {N_("Domain Options"), P_SEP, P_SEPARATOR},
1106 {"machine password timeout", P_INTEGER, P_GLOBAL, &Globals.machine_password_timeout, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1108 {N_("Logon Options"), P_SEP, P_SEPARATOR},
1110 {"add user script", P_STRING, P_GLOBAL, &Globals.szAddUserScript, NULL, NULL, FLAG_ADVANCED},
1111 {"rename user script", P_STRING, P_GLOBAL, &Globals.szRenameUserScript, NULL, NULL, FLAG_ADVANCED},
1112 {"delete user script", P_STRING, P_GLOBAL, &Globals.szDelUserScript, NULL, NULL, FLAG_ADVANCED},
1113 {"add group script", P_STRING, P_GLOBAL, &Globals.szAddGroupScript, NULL, NULL, FLAG_ADVANCED},
1114 {"delete group script", P_STRING, P_GLOBAL, &Globals.szDelGroupScript, NULL, NULL, FLAG_ADVANCED},
1115 {"add user to group script", P_STRING, P_GLOBAL, &Globals.szAddUserToGroupScript, NULL, NULL, FLAG_ADVANCED},
1116 {"delete user from group script", P_STRING, P_GLOBAL, &Globals.szDelUserFromGroupScript, NULL, NULL, FLAG_ADVANCED},
1117 {"set primary group script", P_STRING, P_GLOBAL, &Globals.szSetPrimaryGroupScript, NULL, NULL, FLAG_ADVANCED},
1118 {"add machine script", P_STRING, P_GLOBAL, &Globals.szAddMachineScript, NULL, NULL, FLAG_ADVANCED},
1119 {"shutdown script", P_STRING, P_GLOBAL, &Globals.szShutdownScript, NULL, NULL, FLAG_ADVANCED},
1120 {"abort shutdown script", P_STRING, P_GLOBAL, &Globals.szAbortShutdownScript, NULL, NULL, FLAG_ADVANCED},
1121 {"username map script", P_STRING, P_GLOBAL, &Globals.szUsernameMapScript, NULL, NULL, FLAG_ADVANCED},
1123 {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, FLAG_ADVANCED},
1124 {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, FLAG_ADVANCED},
1125 {"logon drive", P_STRING, P_GLOBAL, &Globals.szLogonDrive, NULL, NULL, FLAG_ADVANCED},
1126 {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, FLAG_ADVANCED},
1127 {"domain logons", P_BOOL, P_GLOBAL, &Globals.bDomainLogons, NULL, NULL, FLAG_ADVANCED},
1129 {N_("Browse Options"), P_SEP, P_SEPARATOR},
1131 {"os level", P_INTEGER, P_GLOBAL, &Globals.os_level, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1132 {"lm announce", P_ENUM, P_GLOBAL, &Globals.lm_announce, NULL, enum_bool_auto, FLAG_ADVANCED},
1133 {"lm interval", P_INTEGER, P_GLOBAL, &Globals.lm_interval, NULL, NULL, FLAG_ADVANCED},
1134 {"preferred master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1135 {"prefered master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_HIDE},
1136 {"local master", P_BOOL, P_GLOBAL, &Globals.bLocalMaster, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1137 {"domain master", P_ENUM, P_GLOBAL, &Globals.bDomainMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1138 {"browse list", P_BOOL, P_GLOBAL, &Globals.bBrowseList, NULL, NULL, FLAG_ADVANCED},
1139 {"browseable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1140 {"browsable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_HIDE},
1141 {"enhanced browsing", P_BOOL, P_GLOBAL, &Globals.enhanced_browsing, NULL, NULL, FLAG_ADVANCED},
1143 {N_("WINS Options"), P_SEP, P_SEPARATOR},
1145 {"dns proxy", P_BOOL, P_GLOBAL, &Globals.bDNSproxy, NULL, NULL, FLAG_ADVANCED},
1146 {"wins proxy", P_BOOL, P_GLOBAL, &Globals.bWINSproxy, NULL, NULL, FLAG_ADVANCED},
1148 {"wins server", P_LIST, P_GLOBAL, &Globals.szWINSservers, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1149 {"wins support", P_BOOL, P_GLOBAL, &Globals.bWINSsupport, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1150 {"wins hook", P_STRING, P_GLOBAL, &Globals.szWINSHook, NULL, NULL, FLAG_ADVANCED},
1152 {N_("Locking Options"), P_SEP, P_SEPARATOR},
1154 {"blocking locks", P_BOOL, P_LOCAL, &sDefault.bBlockingLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1155 {"csc policy", P_ENUM, P_LOCAL, &sDefault.iCSCPolicy, NULL, enum_csc_policy, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1156 {"fake oplocks", P_BOOL, P_LOCAL, &sDefault.bFakeOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1157 {"kernel oplocks", P_BOOL, P_GLOBAL, &Globals.bKernelOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1158 {"locking", P_BOOL, P_LOCAL, &sDefault.bLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1159 {"lock spin count", P_INTEGER, P_GLOBAL, &Globals.iLockSpinCount, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1160 {"lock spin time", P_INTEGER, P_GLOBAL, &Globals.iLockSpinTime, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1162 {"oplocks", P_BOOL, P_LOCAL, &sDefault.bOpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1163 {"level2 oplocks", P_BOOL, P_LOCAL, &sDefault.bLevel2OpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1164 {"oplock break wait time", P_INTEGER, P_GLOBAL, &Globals.oplock_break_wait_time, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1165 {"oplock contention limit", P_INTEGER, P_LOCAL, &sDefault.iOplockContentionLimit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1166 {"posix locking", P_BOOL, P_LOCAL, &sDefault.bPosixLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1167 {"strict locking", P_ENUM, P_LOCAL, &sDefault.iStrictLocking, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1168 {"share modes", P_BOOL, P_LOCAL, &sDefault.bShareModes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1170 {N_("Ldap Options"), P_SEP, P_SEPARATOR},
1172 {"ldap admin dn", P_STRING, P_GLOBAL, &Globals.szLdapAdminDn, NULL, NULL, FLAG_ADVANCED},
1173 {"ldap delete dn", P_BOOL, P_GLOBAL, &Globals.ldap_delete_dn, NULL, NULL, FLAG_ADVANCED},
1174 {"ldap group suffix", P_STRING, P_GLOBAL, &Globals.szLdapGroupSuffix, NULL, NULL, FLAG_ADVANCED},
1175 {"ldap idmap suffix", P_STRING, P_GLOBAL, &Globals.szLdapIdmapSuffix, NULL, NULL, FLAG_ADVANCED},
1176 {"ldap machine suffix", P_STRING, P_GLOBAL, &Globals.szLdapMachineSuffix, NULL, NULL, FLAG_ADVANCED},
1177 {"ldap passwd sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_ADVANCED},
1178 {"ldap password sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_HIDE},
1179 {"ldap replication sleep", P_INTEGER, P_GLOBAL, &Globals.ldap_replication_sleep, NULL, NULL, FLAG_ADVANCED},
1180 {"ldap suffix", P_STRING, P_GLOBAL, &Globals.szLdapSuffix, NULL, NULL, FLAG_ADVANCED},
1181 {"ldap ssl", P_ENUM, P_GLOBAL, &Globals.ldap_ssl, NULL, enum_ldap_ssl, FLAG_ADVANCED},
1182 {"ldap timeout", P_INTEGER, P_GLOBAL, &Globals.ldap_timeout, NULL, NULL, FLAG_ADVANCED},
1183 {"ldap page size", P_INTEGER, P_GLOBAL, &Globals.ldap_page_size, NULL, NULL, FLAG_ADVANCED},
1184 {"ldap user suffix", P_STRING, P_GLOBAL, &Globals.szLdapUserSuffix, NULL, NULL, FLAG_ADVANCED},
1186 {N_("Miscellaneous Options"), P_SEP, P_SEPARATOR},
1187 {"add share command", P_STRING, P_GLOBAL, &Globals.szAddShareCommand, NULL, NULL, FLAG_ADVANCED},
1188 {"change share command", P_STRING, P_GLOBAL, &Globals.szChangeShareCommand, NULL, NULL, FLAG_ADVANCED},
1189 {"delete share command", P_STRING, P_GLOBAL, &Globals.szDeleteShareCommand, NULL, NULL, FLAG_ADVANCED},
1191 {N_("EventLog Options"), P_SEP, P_SEPARATOR},
1192 {"eventlog list", P_LIST, P_GLOBAL, &Globals.szEventLogs, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
1194 {"config file", P_STRING, P_GLOBAL, &Globals.szConfigFile, NULL, NULL, FLAG_HIDE},
1195 {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1196 {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1197 {"lock directory", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_ADVANCED},
1198 {"lock dir", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_HIDE},
1199 {"pid directory", P_STRING, P_GLOBAL, &Globals.szPidDir, NULL, NULL, FLAG_ADVANCED},
1201 {"utmp directory", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, FLAG_ADVANCED},
1202 {"wtmp directory", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, FLAG_ADVANCED},
1203 {"utmp", P_BOOL, P_GLOBAL, &Globals.bUtmp, NULL, NULL, FLAG_ADVANCED},
1206 {"default service", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1207 {"default", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1208 {"message command", P_STRING, P_GLOBAL, &Globals.szMsgCommand, NULL, NULL, FLAG_ADVANCED},
1209 {"dfree cache time", P_INTEGER, P_LOCAL, &sDefault.iDfreeCacheTime, NULL, NULL, FLAG_ADVANCED},
1210 {"dfree command", P_STRING, P_LOCAL, &sDefault.szDfree, NULL, NULL, FLAG_ADVANCED},
1211 {"get quota command", P_STRING, P_GLOBAL, &Globals.szGetQuota, NULL, NULL, FLAG_ADVANCED},
1212 {"set quota command", P_STRING, P_GLOBAL, &Globals.szSetQuota, NULL, NULL, FLAG_ADVANCED},
1213 {"remote announce", P_STRING, P_GLOBAL, &Globals.szRemoteAnnounce, NULL, NULL, FLAG_ADVANCED},
1214 {"remote browse sync", P_STRING, P_GLOBAL, &Globals.szRemoteBrowseSync, NULL, NULL, FLAG_ADVANCED},
1215 {"socket address", P_STRING, P_GLOBAL, &Globals.szSocketAddress, NULL, NULL, FLAG_ADVANCED},
1216 {"homedir map", P_STRING, P_GLOBAL, &Globals.szNISHomeMapName, NULL, NULL, FLAG_ADVANCED},
1217 {"afs username map", P_STRING, P_GLOBAL, &Globals.szAfsUsernameMap, NULL, NULL, FLAG_ADVANCED},
1218 {"afs token lifetime", P_INTEGER, P_GLOBAL, &Globals.iAfsTokenLifetime, NULL, NULL, FLAG_ADVANCED},
1219 {"log nt token command", P_STRING, P_GLOBAL, &Globals.szLogNtTokenCommand, NULL, NULL, FLAG_ADVANCED},
1220 {"time offset", P_INTEGER, P_GLOBAL, &extra_time_offset, NULL, NULL, FLAG_ADVANCED},
1221 {"NIS homedir", P_BOOL, P_GLOBAL, &Globals.bNISHomeMap, NULL, NULL, FLAG_ADVANCED},
1222 {"-valid", P_BOOL, P_LOCAL, &sDefault.valid, NULL, NULL, FLAG_HIDE},
1224 {"copy", P_STRING, P_LOCAL, &sDefault.szCopy, handle_copy, NULL, FLAG_HIDE},
1225 {"include", P_STRING, P_LOCAL, &sDefault.szInclude, handle_include, NULL, FLAG_HIDE},
1226 {"preexec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1227 {"exec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED},
1229 {"preexec close", P_BOOL, P_LOCAL, &sDefault.bPreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1230 {"postexec", P_STRING, P_LOCAL, &sDefault.szPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1231 {"root preexec", P_STRING, P_LOCAL, &sDefault.szRootPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1232 {"root preexec close", P_BOOL, P_LOCAL, &sDefault.bRootpreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1233 {"root postexec", P_STRING, P_LOCAL, &sDefault.szRootPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1234 {"available", P_BOOL, P_LOCAL, &sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1235 {"registry shares", P_BOOL, P_GLOBAL, &Globals.bRegistryShares, NULL, NULL, FLAG_ADVANCED},
1236 {"usershare allow guests", P_BOOL, P_GLOBAL, &Globals.bUsershareAllowGuests, NULL, NULL, FLAG_ADVANCED},
1237 {"usershare max shares", P_INTEGER, P_GLOBAL, &Globals.iUsershareMaxShares, NULL, NULL, FLAG_ADVANCED},
1238 {"usershare owner only", P_BOOL, P_GLOBAL, &Globals.bUsershareOwnerOnly, NULL, NULL, FLAG_ADVANCED},
1239 {"usershare path", P_STRING, P_GLOBAL, &Globals.szUsersharePath, NULL, NULL, FLAG_ADVANCED},
1240 {"usershare prefix allow list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixAllowList, NULL, NULL, FLAG_ADVANCED},
1241 {"usershare prefix deny list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixDenyList, NULL, NULL, FLAG_ADVANCED},
1242 {"usershare template share", P_STRING, P_GLOBAL, &Globals.szUsershareTemplateShare, NULL, NULL, FLAG_ADVANCED},
1243 {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1244 {"fstype", P_STRING, P_LOCAL, &sDefault.fstype, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1245 {"set directory", P_BOOLREV, P_LOCAL, &sDefault.bNo_set_dir, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1246 {"wide links", P_BOOL, P_LOCAL, &sDefault.bWidelinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1247 {"follow symlinks", P_BOOL, P_LOCAL, &sDefault.bSymlinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1248 {"dont descend", P_STRING, P_LOCAL, &sDefault.szDontdescend, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1249 {"magic script", P_STRING, P_LOCAL, &sDefault.szMagicScript, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1250 {"magic output", P_STRING, P_LOCAL, &sDefault.szMagicOutput, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1251 {"delete readonly", P_BOOL, P_LOCAL, &sDefault.bDeleteReadonly, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1252 {"dos filemode", P_BOOL, P_LOCAL, &sDefault.bDosFilemode, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1253 {"dos filetimes", P_BOOL, P_LOCAL, &sDefault.bDosFiletimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1254 {"dos filetime resolution", P_BOOL, P_LOCAL, &sDefault.bDosFiletimeResolution, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1256 {"fake directory create times", P_BOOL, P_LOCAL, &sDefault.bFakeDirCreateTimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1257 {"panic action", P_STRING, P_GLOBAL, &Globals.szPanicAction, NULL, NULL, FLAG_ADVANCED},
1259 {N_("VFS module options"), P_SEP, P_SEPARATOR},
1261 {"vfs objects", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1262 {"vfs object", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_HIDE},
1265 {"msdfs root", P_BOOL, P_LOCAL, &sDefault.bMSDfsRoot, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1266 {"msdfs proxy", P_STRING, P_LOCAL, &sDefault.szMSDfsProxy, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1267 {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, FLAG_ADVANCED},
1269 {N_("Winbind options"), P_SEP, P_SEPARATOR},
1271 {"passdb expand explicit", P_BOOL, P_GLOBAL, &Globals.bPassdbExpandExplicit, NULL, NULL, FLAG_ADVANCED},
1272 {"idmap domains", P_LIST, P_GLOBAL, &Globals.szIdmapDomains, NULL, NULL, FLAG_ADVANCED},
1273 {"idmap backend", P_LIST, P_GLOBAL, &Globals.szIdmapBackend, NULL, NULL, FLAG_ADVANCED | FLAG_DEPRECATED },
1274 {"idmap alloc backend", P_STRING, P_GLOBAL, &Globals.szIdmapAllocBackend, NULL, NULL, FLAG_ADVANCED},
1275 {"idmap expire time", P_INTEGER, P_GLOBAL, &Globals.iIdmapExpireTime, NULL, NULL, FLAG_ADVANCED},
1276 {"idmap negative time", P_INTEGER, P_GLOBAL, &Globals.iIdmapNegativeTime, NULL, NULL, FLAG_ADVANCED},
1277 {"idmap uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_ADVANCED | FLAG_DEPRECATED },
1278 {"winbind uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_HIDE | FLAG_DEPRECATED },
1279 {"idmap gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_ADVANCED | FLAG_DEPRECATED },
1280 {"winbind gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_HIDE | FLAG_DEPRECATED },
1281 {"template homedir", P_STRING, P_GLOBAL, &Globals.szTemplateHomedir, NULL, NULL, FLAG_ADVANCED},
1282 {"template shell", P_STRING, P_GLOBAL, &Globals.szTemplateShell, NULL, NULL, FLAG_ADVANCED},
1283 {"winbind separator", P_STRING, P_GLOBAL, &Globals.szWinbindSeparator, NULL, NULL, FLAG_ADVANCED},
1284 {"winbind cache time", P_INTEGER, P_GLOBAL, &Globals.winbind_cache_time, NULL, NULL, FLAG_ADVANCED},
1285 {"winbind enum users", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumUsers, NULL, NULL, FLAG_ADVANCED},
1286 {"winbind enum groups", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumGroups, NULL, NULL, FLAG_ADVANCED},
1287 {"winbind use default domain", P_BOOL, P_GLOBAL, &Globals.bWinbindUseDefaultDomain, NULL, NULL, FLAG_ADVANCED},
1288 {"winbind trusted domains only", P_BOOL, P_GLOBAL, &Globals.bWinbindTrustedDomainsOnly, NULL, NULL, FLAG_ADVANCED},
1289 {"winbind nested groups", P_BOOL, P_GLOBAL, &Globals.bWinbindNestedGroups, NULL, NULL, FLAG_ADVANCED},
1290 {"winbind nss info", P_LIST, P_GLOBAL, &Globals.szWinbindNssInfo, NULL, NULL, FLAG_ADVANCED},
1291 {"winbind refresh tickets", P_BOOL, P_GLOBAL, &Globals.bWinbindRefreshTickets, NULL, NULL, FLAG_ADVANCED},
1292 {"winbind offline logon", P_BOOL, P_GLOBAL, &Globals.bWinbindOfflineLogon, NULL, NULL, FLAG_ADVANCED},
1293 {"winbind normalize names", P_BOOL, P_GLOBAL, &Globals.bWinbindNormalizeNames, NULL, NULL, FLAG_ADVANCED},
1295 {NULL, P_BOOL, P_NONE, NULL, NULL, NULL, 0}
1298 /***************************************************************************
1299 Initialise the sDefault parameter structure for the printer values.
1300 ***************************************************************************/
1302 static void init_printer_values(service *pService)
1304 /* choose defaults depending on the type of printing */
1305 switch (pService->iPrinting) {
1310 string_set(&pService->szLpqcommand, "lpq -P'%p'");
1311 string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1312 string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1317 string_set(&pService->szLpqcommand, "lpq -P'%p'");
1318 string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1319 string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1320 string_set(&pService->szQueuepausecommand, "lpc stop '%p'");
1321 string_set(&pService->szQueueresumecommand, "lpc start '%p'");
1322 string_set(&pService->szLppausecommand, "lpc hold '%p' %j");
1323 string_set(&pService->szLpresumecommand, "lpc release '%p' %j");
1329 /* set the lpq command to contain the destination printer
1330 name only. This is used by cups_queue_get() */
1331 string_set(&pService->szLpqcommand, "%p");
1332 string_set(&pService->szLprmcommand, "");
1333 string_set(&pService->szPrintcommand, "");
1334 string_set(&pService->szLppausecommand, "");
1335 string_set(&pService->szLpresumecommand, "");
1336 string_set(&pService->szQueuepausecommand, "");
1337 string_set(&pService->szQueueresumecommand, "");
1339 string_set(&pService->szLpqcommand, "lpq -P'%p'");
1340 string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1341 string_set(&pService->szPrintcommand, "lpr -P'%p' %s; rm %s");
1342 string_set(&pService->szLppausecommand, "lp -i '%p-%j' -H hold");
1343 string_set(&pService->szLpresumecommand, "lp -i '%p-%j' -H resume");
1344 string_set(&pService->szQueuepausecommand, "disable '%p'");
1345 string_set(&pService->szQueueresumecommand, "enable '%p'");
1346 #endif /* HAVE_CUPS */
1351 string_set(&pService->szLpqcommand, "lpstat -o%p");
1352 string_set(&pService->szLprmcommand, "cancel %p-%j");
1353 string_set(&pService->szPrintcommand, "lp -c -d%p %s; rm %s");
1354 string_set(&pService->szQueuepausecommand, "disable %p");
1355 string_set(&pService->szQueueresumecommand, "enable %p");
1357 string_set(&pService->szLppausecommand, "lp -i %p-%j -H hold");
1358 string_set(&pService->szLpresumecommand, "lp -i %p-%j -H resume");
1363 string_set(&pService->szLpqcommand, "lpq -P%p");
1364 string_set(&pService->szLprmcommand, "lprm -P%p %j");
1365 string_set(&pService->szPrintcommand, "lp -r -P%p %s");
1371 string_set(&pService->szPrintcommand, "vlp print %p %s");
1372 string_set(&pService->szLpqcommand, "vlp lpq %p");
1373 string_set(&pService->szLprmcommand, "vlp lprm %p %j");
1374 string_set(&pService->szLppausecommand, "vlp lppause %p %j");
1375 string_set(&pService->szLpresumecommand, "vlp lpresum %p %j");
1376 string_set(&pService->szQueuepausecommand, "vlp queuepause %p");
1377 string_set(&pService->szQueueresumecommand, "vlp queueresume %p");
1379 #endif /* DEVELOPER */
1384 /***************************************************************************
1385 Initialise the global parameter structure.
1386 ***************************************************************************/
1388 static void init_globals(BOOL first_time_only)
1390 static BOOL done_init = False;
1393 /* If requested to initialize only once and we've already done it... */
1394 if (first_time_only && done_init) {
1395 /* ... then we have nothing more to do */
1402 /* The logfile can be set before this is invoked. Free it if so. */
1403 if (Globals.szLogFile != NULL) {
1404 string_free(&Globals.szLogFile);
1405 Globals.szLogFile = NULL;
1408 memset((void *)&Globals, '\0', sizeof(Globals));
1410 for (i = 0; parm_table[i].label; i++)
1411 if ((parm_table[i].type == P_STRING ||
1412 parm_table[i].type == P_USTRING) &&
1414 string_set((char **)parm_table[i].ptr, "");
1416 string_set(&sDefault.fstype, FSTYPE_STRING);
1417 string_set(&sDefault.szPrintjobUsername, "%U");
1419 init_printer_values(&sDefault);
1425 DEBUG(3, ("Initialising global parameters\n"));
1427 string_set(&Globals.szSMBPasswdFile, dyn_SMB_PASSWD_FILE);
1428 string_set(&Globals.szPrivateDir, dyn_PRIVATE_DIR);
1430 /* use the new 'hash2' method by default, with a prefix of 1 */
1431 string_set(&Globals.szManglingMethod, "hash2");
1432 Globals.mangle_prefix = 1;
1434 string_set(&Globals.szGuestaccount, GUEST_ACCOUNT);
1436 /* using UTF8 by default allows us to support all chars */
1437 string_set(&Globals.unix_charset, DEFAULT_UNIX_CHARSET);
1439 #if defined(HAVE_NL_LANGINFO) && defined(CODESET)
1440 /* If the system supports nl_langinfo(), try to grab the value
1441 from the user's locale */
1442 string_set(&Globals.display_charset, "LOCALE");
1444 string_set(&Globals.display_charset, DEFAULT_DISPLAY_CHARSET);
1447 /* Use codepage 850 as a default for the dos character set */
1448 string_set(&Globals.dos_charset, DEFAULT_DOS_CHARSET);
1451 * Allow the default PASSWD_CHAT to be overridden in local.h.
1453 string_set(&Globals.szPasswdChat, DEFAULT_PASSWD_CHAT);
1455 set_global_myname(myhostname());
1456 string_set(&Globals.szNetbiosName,global_myname());
1458 set_global_myworkgroup(WORKGROUP);
1459 string_set(&Globals.szWorkgroup, lp_workgroup());
1461 string_set(&Globals.szPasswdProgram, "");
1462 string_set(&Globals.szPidDir, dyn_PIDDIR);
1463 string_set(&Globals.szLockDir, dyn_LOCKDIR);
1464 string_set(&Globals.szSocketAddress, "0.0.0.0");
1465 pstrcpy(s, "Samba ");
1466 pstrcat(s, SAMBA_VERSION_STRING);
1467 string_set(&Globals.szServerString, s);
1468 slprintf(s, sizeof(s) - 1, "%d.%d", DEFAULT_MAJOR_VERSION,
1469 DEFAULT_MINOR_VERSION);
1470 string_set(&Globals.szAnnounceVersion, s);
1472 string_set(&Globals.szPanicAction, "/bin/sleep 999999999");
1475 pstrcpy(user_socket_options, DEFAULT_SOCKET_OPTIONS);
1477 string_set(&Globals.szLogonDrive, "");
1478 /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
1479 string_set(&Globals.szLogonHome, "\\\\%N\\%U");
1480 string_set(&Globals.szLogonPath, "\\\\%N\\%U\\profile");
1482 string_set(&Globals.szNameResolveOrder, "lmhosts wins host bcast");
1483 string_set(&Globals.szPasswordServer, "*");
1485 Globals.AlgorithmicRidBase = BASE_RID;
1487 Globals.bLoadPrinters = True;
1488 Globals.PrintcapCacheTime = 750; /* 12.5 minutes */
1490 /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
1491 /* Discovered by 2 days of pain by Don McCall @ HP :-). */
1492 Globals.max_xmit = 0x4104;
1493 Globals.max_mux = 50; /* This is *needed* for profile support. */
1494 Globals.lpqcachetime = 30; /* changed to handle large print servers better -- jerry */
1495 Globals.bDisableSpoolss = False;
1496 Globals.iMaxSmbdProcesses = 0;/* no limit specified */
1497 Globals.pwordlevel = 0;
1498 Globals.unamelevel = 0;
1499 Globals.deadtime = 0;
1500 Globals.bLargeReadwrite = True;
1501 Globals.max_log_size = 5000;
1502 Globals.max_open_files = MAX_OPEN_FILES;
1503 Globals.open_files_db_hash_size = SMB_OPEN_DATABASE_TDB_HASH_SIZE;
1504 Globals.maxprotocol = PROTOCOL_NT1;
1505 Globals.minprotocol = PROTOCOL_CORE;
1506 Globals.security = SEC_USER;
1507 Globals.paranoid_server_security = True;
1508 Globals.bEncryptPasswords = True;
1509 Globals.bUpdateEncrypt = False;
1510 Globals.clientSchannel = Auto;
1511 Globals.serverSchannel = Auto;
1512 Globals.bReadRaw = True;
1513 Globals.bWriteRaw = True;
1514 Globals.bReadbmpx = False;
1515 Globals.bNullPasswords = False;
1516 Globals.bObeyPamRestrictions = False;
1518 Globals.bSyslogOnly = False;
1519 Globals.bTimestampLogs = True;
1520 string_set(&Globals.szLogLevel, "0");
1521 Globals.bDebugPrefixTimestamp = False;
1522 Globals.bDebugHiresTimestamp = False;
1523 Globals.bDebugPid = False;
1524 Globals.bDebugUid = False;
1525 Globals.bEnableCoreFiles = True;
1526 Globals.max_ttl = 60 * 60 * 24 * 3; /* 3 days default. */
1527 Globals.max_wins_ttl = 60 * 60 * 24 * 6; /* 6 days default. */
1528 Globals.min_wins_ttl = 60 * 60 * 6; /* 6 hours default. */
1529 Globals.machine_password_timeout = 60 * 60 * 24 * 7; /* 7 days default. */
1530 Globals.lm_announce = 2; /* = Auto: send only if LM clients found */
1531 Globals.lm_interval = 60;
1532 Globals.announce_as = ANNOUNCE_AS_NT_SERVER;
1533 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
1534 Globals.bNISHomeMap = False;
1535 #ifdef WITH_NISPLUS_HOME
1536 string_set(&Globals.szNISHomeMapName, "auto_home.org_dir");
1538 string_set(&Globals.szNISHomeMapName, "auto.home");
1541 Globals.bTimeServer = False;
1542 Globals.bBindInterfacesOnly = False;
1543 Globals.bUnixPasswdSync = False;
1544 Globals.bPamPasswordChange = False;
1545 Globals.bPasswdChatDebug = False;
1546 Globals.iPasswdChatTimeout = 2; /* 2 second default. */
1547 Globals.bNTPipeSupport = True; /* Do NT pipes by default. */
1548 Globals.bNTStatusSupport = True; /* Use NT status by default. */
1549 Globals.bStatCache = True; /* use stat cache by default */
1550 Globals.iMaxStatCacheSize = 1024; /* one Meg by default. */
1551 Globals.restrict_anonymous = 0;
1552 Globals.bClientLanManAuth = True; /* Do use the LanMan hash if it is available */
1553 Globals.bClientPlaintextAuth = True; /* Do use a plaintext password if is requested by the server */
1554 Globals.bLanmanAuth = True; /* Do use the LanMan hash if it is available */
1555 Globals.bNTLMAuth = True; /* Do use NTLMv1 if it is available (otherwise NTLMv2) */
1556 Globals.bClientNTLMv2Auth = False; /* Client should not use NTLMv2, as we can't tell that the server supports it. */
1557 /* Note, that we will use NTLM2 session security (which is different), if it is available */
1559 Globals.map_to_guest = 0; /* By Default, "Never" */
1560 Globals.oplock_break_wait_time = 0; /* By Default, 0 msecs. */
1561 Globals.enhanced_browsing = True;
1562 Globals.iLockSpinCount = 0; /* Unused. */
1563 Globals.iLockSpinTime = WINDOWS_MINIMUM_LOCK_TIMEOUT_MS; /* msec. */
1564 #ifdef MMAP_BLACKLIST
1565 Globals.bUseMmap = False;
1567 Globals.bUseMmap = True;
1569 Globals.bUnixExtensions = True;
1570 Globals.bResetOnZeroVC = False;
1572 /* hostname lookups can be very expensive and are broken on
1573 a large number of sites (tridge) */
1574 Globals.bHostnameLookups = False;
1576 string_set(&Globals.szPassdbBackend, "smbpasswd");
1577 string_set(&Globals.szLdapSuffix, "");
1578 string_set(&Globals.szLdapMachineSuffix, "");
1579 string_set(&Globals.szLdapUserSuffix, "");
1580 string_set(&Globals.szLdapGroupSuffix, "");
1581 string_set(&Globals.szLdapIdmapSuffix, "");
1583 string_set(&Globals.szLdapAdminDn, "");
1584 Globals.ldap_ssl = LDAP_SSL_ON;
1585 Globals.ldap_passwd_sync = LDAP_PASSWD_SYNC_OFF;
1586 Globals.ldap_delete_dn = False;
1587 Globals.ldap_replication_sleep = 1000; /* wait 1 sec for replication */
1588 Globals.ldap_timeout = LDAP_CONNECT_DEFAULT_TIMEOUT;
1589 Globals.ldap_page_size = LDAP_PAGE_SIZE;
1591 /* This is what we tell the afs client. in reality we set the token
1592 * to never expire, though, when this runs out the afs client will
1593 * forget the token. Set to 0 to get NEVERDATE.*/
1594 Globals.iAfsTokenLifetime = 604800;
1596 /* these parameters are set to defaults that are more appropriate
1597 for the increasing samba install base:
1599 as a member of the workgroup, that will possibly become a
1600 _local_ master browser (lm = True). this is opposed to a forced
1601 local master browser startup (pm = True).
1603 doesn't provide WINS server service by default (wsupp = False),
1604 and doesn't provide domain master browser services by default, either.
1608 Globals.bMsAddPrinterWizard = True;
1609 Globals.bPreferredMaster = Auto; /* depending on bDomainMaster */
1610 Globals.os_level = 20;
1611 Globals.bLocalMaster = True;
1612 Globals.bDomainMaster = Auto; /* depending on bDomainLogons */
1613 Globals.bDomainLogons = False;
1614 Globals.bBrowseList = True;
1615 Globals.bWINSsupport = False;
1616 Globals.bWINSproxy = False;
1618 Globals.bDNSproxy = True;
1620 /* this just means to use them if they exist */
1621 Globals.bKernelOplocks = True;
1623 Globals.bAllowTrustedDomains = True;
1625 string_set(&Globals.szTemplateShell, "/bin/false");
1626 string_set(&Globals.szTemplateHomedir, "/home/%D/%U");
1627 string_set(&Globals.szWinbindSeparator, "\\");
1629 string_set(&Globals.szCupsServer, "");
1630 string_set(&Globals.szIPrintServer, "");
1632 Globals.winbind_cache_time = 300; /* 5 minutes */
1633 Globals.bWinbindEnumUsers = False;
1634 Globals.bWinbindEnumGroups = False;
1635 Globals.bWinbindUseDefaultDomain = False;
1636 Globals.bWinbindTrustedDomainsOnly = False;
1637 Globals.bWinbindNestedGroups = True;
1638 Globals.bWinbindRefreshTickets = False;
1639 Globals.bWinbindOfflineLogon = False;
1641 Globals.iIdmapExpireTime = 900; /* 15 minutes by default */
1642 Globals.iIdmapNegativeTime = 120; /* 2 minutes by default */
1644 Globals.bPassdbExpandExplicit = False;
1646 Globals.name_cache_timeout = 660; /* In seconds */
1648 Globals.bUseSpnego = True;
1649 Globals.bClientUseSpnego = True;
1651 Globals.client_signing = Auto;
1652 Globals.server_signing = False;
1654 Globals.bDeferSharingViolations = True;
1655 string_set(&Globals.smb_ports, SMB_PORTS);
1657 Globals.bEnablePrivileges = True;
1658 Globals.bHostMSDfs = True;
1659 Globals.bASUSupport = False;
1661 /* User defined shares. */
1662 pstrcpy(s, dyn_LOCKDIR);
1663 pstrcat(s, "/usershares");
1664 string_set(&Globals.szUsersharePath, s);
1665 string_set(&Globals.szUsershareTemplateShare, "");
1666 Globals.iUsershareMaxShares = 0;
1667 /* By default disallow sharing of directories not owned by the sharer. */
1668 Globals.bUsershareOwnerOnly = True;
1669 /* By default disallow guest access to usershares. */
1670 Globals.bUsershareAllowGuests = False;
1672 /* By default no shares out of the registry */
1673 Globals.bRegistryShares = False;
1676 static TALLOC_CTX *lp_talloc;
1678 /******************************************************************* a
1679 Free up temporary memory - called from the main loop.
1680 ********************************************************************/
1682 void lp_TALLOC_FREE(void)
1686 TALLOC_FREE(lp_talloc);
1690 TALLOC_CTX *tmp_talloc_ctx(void)
1692 if (lp_talloc == NULL) {
1693 lp_talloc = talloc_init("tmp_talloc_ctx");
1696 if (lp_talloc == NULL) {
1697 smb_panic("Could not create temporary talloc context\n");
1703 /*******************************************************************
1704 Convenience routine to grab string parameters into temporary memory
1705 and run standard_sub_basic on them. The buffers can be written to by
1706 callers without affecting the source string.
1707 ********************************************************************/
1709 static char *lp_string(const char *s)
1713 /* The follow debug is useful for tracking down memory problems
1714 especially if you have an inner loop that is calling a lp_*()
1715 function that returns a string. Perhaps this debug should be
1716 present all the time? */
1719 DEBUG(10, ("lp_string(%s)\n", s));
1723 lp_talloc = talloc_init("lp_talloc");
1725 tmpstr = alloc_sub_basic(get_current_username(),
1726 current_user_info.domain, s);
1727 if (trim_char(tmpstr, '\"', '\"')) {
1728 if (strchr(tmpstr,'\"') != NULL) {
1730 tmpstr = alloc_sub_basic(get_current_username(),
1731 current_user_info.domain, s);
1734 ret = talloc_strdup(lp_talloc, tmpstr);
1741 In this section all the functions that are used to access the
1742 parameters from the rest of the program are defined
1745 #define FN_GLOBAL_STRING(fn_name,ptr) \
1746 char *fn_name(void) {return(lp_string(*(char **)(ptr) ? *(char **)(ptr) : ""));}
1747 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1748 const char *fn_name(void) {return(*(const char **)(ptr) ? *(const char **)(ptr) : "");}
1749 #define FN_GLOBAL_LIST(fn_name,ptr) \
1750 const char **fn_name(void) {return(*(const char ***)(ptr));}
1751 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1752 BOOL fn_name(void) {return(*(BOOL *)(ptr));}
1753 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1754 char fn_name(void) {return(*(char *)(ptr));}
1755 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1756 int fn_name(void) {return(*(int *)(ptr));}
1758 #define FN_LOCAL_STRING(fn_name,val) \
1759 char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1760 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1761 const char *fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1762 #define FN_LOCAL_LIST(fn_name,val) \
1763 const char **fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1764 #define FN_LOCAL_BOOL(fn_name,val) \
1765 BOOL fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1766 #define FN_LOCAL_INTEGER(fn_name,val) \
1767 int fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1769 #define FN_LOCAL_PARM_BOOL(fn_name,val) \
1770 BOOL fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1771 #define FN_LOCAL_PARM_INTEGER(fn_name,val) \
1772 int fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1773 #define FN_LOCAL_PARM_STRING(fn_name,val) \
1774 char *fn_name(const struct share_params *p) {return(lp_string((LP_SNUM_OK(p->service) && ServicePtrs[(p->service)]->val) ? ServicePtrs[(p->service)]->val : sDefault.val));}
1775 #define FN_LOCAL_CHAR(fn_name,val) \
1776 char fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1778 FN_GLOBAL_STRING(lp_smb_ports, &Globals.smb_ports)
1779 FN_GLOBAL_STRING(lp_dos_charset, &Globals.dos_charset)
1780 FN_GLOBAL_STRING(lp_unix_charset, &Globals.unix_charset)
1781 FN_GLOBAL_STRING(lp_display_charset, &Globals.display_charset)
1782 FN_GLOBAL_STRING(lp_logfile, &Globals.szLogFile)
1783 FN_GLOBAL_STRING(lp_configfile, &Globals.szConfigFile)
1784 FN_GLOBAL_STRING(lp_smb_passwd_file, &Globals.szSMBPasswdFile)
1785 FN_GLOBAL_STRING(lp_private_dir, &Globals.szPrivateDir)
1786 FN_GLOBAL_STRING(lp_serverstring, &Globals.szServerString)
1787 FN_GLOBAL_INTEGER(lp_printcap_cache_time, &Globals.PrintcapCacheTime)
1788 FN_GLOBAL_STRING(lp_addport_cmd, &Globals.szAddPortCommand)
1789 FN_GLOBAL_STRING(lp_enumports_cmd, &Globals.szEnumPortsCommand)
1790 FN_GLOBAL_STRING(lp_addprinter_cmd, &Globals.szAddPrinterCommand)
1791 FN_GLOBAL_STRING(lp_deleteprinter_cmd, &Globals.szDeletePrinterCommand)
1792 FN_GLOBAL_STRING(lp_os2_driver_map, &Globals.szOs2DriverMap)
1793 FN_GLOBAL_STRING(lp_lockdir, &Globals.szLockDir)
1794 FN_GLOBAL_STRING(lp_piddir, &Globals.szPidDir)
1795 FN_GLOBAL_STRING(lp_mangling_method, &Globals.szManglingMethod)
1796 FN_GLOBAL_INTEGER(lp_mangle_prefix, &Globals.mangle_prefix)
1797 FN_GLOBAL_STRING(lp_utmpdir, &Globals.szUtmpDir)
1798 FN_GLOBAL_STRING(lp_wtmpdir, &Globals.szWtmpDir)
1799 FN_GLOBAL_BOOL(lp_utmp, &Globals.bUtmp)
1800 FN_GLOBAL_STRING(lp_rootdir, &Globals.szRootdir)
1801 FN_GLOBAL_STRING(lp_defaultservice, &Globals.szDefaultService)
1802 FN_GLOBAL_STRING(lp_msg_command, &Globals.szMsgCommand)
1803 FN_GLOBAL_STRING(lp_get_quota_command, &Globals.szGetQuota)
1804 FN_GLOBAL_STRING(lp_set_quota_command, &Globals.szSetQuota)
1805 FN_GLOBAL_STRING(lp_auto_services, &Globals.szAutoServices)
1806 FN_GLOBAL_STRING(lp_passwd_program, &Globals.szPasswdProgram)
1807 FN_GLOBAL_STRING(lp_passwd_chat, &Globals.szPasswdChat)
1808 FN_GLOBAL_STRING(lp_passwordserver, &Globals.szPasswordServer)
1809 FN_GLOBAL_STRING(lp_name_resolve_order, &Globals.szNameResolveOrder)
1810 FN_GLOBAL_STRING(lp_realm, &Globals.szRealm)
1811 FN_GLOBAL_CONST_STRING(lp_afs_username_map, &Globals.szAfsUsernameMap)
1812 FN_GLOBAL_INTEGER(lp_afs_token_lifetime, &Globals.iAfsTokenLifetime)
1813 FN_GLOBAL_STRING(lp_log_nt_token_command, &Globals.szLogNtTokenCommand)
1814 FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
1815 FN_GLOBAL_CONST_STRING(lp_logon_script, &Globals.szLogonScript)
1816 FN_GLOBAL_CONST_STRING(lp_logon_path, &Globals.szLogonPath)
1817 FN_GLOBAL_CONST_STRING(lp_logon_drive, &Globals.szLogonDrive)
1818 FN_GLOBAL_CONST_STRING(lp_logon_home, &Globals.szLogonHome)
1819 FN_GLOBAL_STRING(lp_remote_announce, &Globals.szRemoteAnnounce)
1820 FN_GLOBAL_STRING(lp_remote_browse_sync, &Globals.szRemoteBrowseSync)
1821 FN_GLOBAL_LIST(lp_wins_server_list, &Globals.szWINSservers)
1822 FN_GLOBAL_LIST(lp_interfaces, &Globals.szInterfaces)
1823 FN_GLOBAL_STRING(lp_socket_address, &Globals.szSocketAddress)
1824 FN_GLOBAL_STRING(lp_nis_home_map_name, &Globals.szNISHomeMapName)
1825 static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
1826 FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
1827 /* FN_GLOBAL_STRING(lp_passdb_backend, &Globals.szPassdbBackend)
1828 * lp_passdb_backend() should be replace by the this macro again after
1831 const char *lp_passdb_backend(void)
1833 char *delim, *quote;
1835 delim = strchr( Globals.szPassdbBackend, ' ');
1836 /* no space at all */
1837 if (delim == NULL) {
1841 quote = strchr(Globals.szPassdbBackend, '"');
1842 /* no quote char or non in the first part */
1843 if (quote == NULL || quote > delim) {
1848 quote = strchr(quote+1, '"');
1849 if (quote == NULL) {
1850 DEBUG(0, ("WARNING: Your 'passdb backend' configuration is invalid due to a missing second \" char.\n"));
1852 } else if (*(quote+1) == '\0') {
1853 /* space, fitting quote char, and one backend only */
1856 /* terminate string after the fitting quote char */
1861 DEBUG(0, ("WARNING: Your 'passdb backend' configuration includes multiple backends. This\n"
1862 "is deprecated since Samba 3.0.23. Please check WHATSNEW.txt or the section 'Passdb\n"
1863 "Changes' from the ChangeNotes as part of the Samba HOWTO collection. Only the first\n"
1864 "backend (%s) is used. The rest is ignored.\n", Globals.szPassdbBackend));
1867 return Globals.szPassdbBackend;
1869 FN_GLOBAL_LIST(lp_preload_modules, &Globals.szPreloadModules)
1870 FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
1871 FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
1872 FN_GLOBAL_STRING(lp_renameuser_script, &Globals.szRenameUserScript)
1873 FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
1875 FN_GLOBAL_CONST_STRING(lp_guestaccount, &Globals.szGuestaccount)
1876 FN_GLOBAL_STRING(lp_addgroup_script, &Globals.szAddGroupScript)
1877 FN_GLOBAL_STRING(lp_delgroup_script, &Globals.szDelGroupScript)
1878 FN_GLOBAL_STRING(lp_addusertogroup_script, &Globals.szAddUserToGroupScript)
1879 FN_GLOBAL_STRING(lp_deluserfromgroup_script, &Globals.szDelUserFromGroupScript)
1880 FN_GLOBAL_STRING(lp_setprimarygroup_script, &Globals.szSetPrimaryGroupScript)
1882 FN_GLOBAL_STRING(lp_addmachine_script, &Globals.szAddMachineScript)
1884 FN_GLOBAL_STRING(lp_shutdown_script, &Globals.szShutdownScript)
1885 FN_GLOBAL_STRING(lp_abort_shutdown_script, &Globals.szAbortShutdownScript)
1886 FN_GLOBAL_STRING(lp_username_map_script, &Globals.szUsernameMapScript)
1888 FN_GLOBAL_STRING(lp_check_password_script, &Globals.szCheckPasswordScript)
1890 FN_GLOBAL_STRING(lp_wins_hook, &Globals.szWINSHook)
1891 FN_GLOBAL_CONST_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
1892 FN_GLOBAL_CONST_STRING(lp_template_shell, &Globals.szTemplateShell)
1893 FN_GLOBAL_CONST_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
1894 FN_GLOBAL_INTEGER(lp_acl_compatibility, &Globals.iAclCompat)
1895 FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
1896 FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
1897 FN_GLOBAL_BOOL(lp_winbind_use_default_domain, &Globals.bWinbindUseDefaultDomain)
1898 FN_GLOBAL_BOOL(lp_winbind_trusted_domains_only, &Globals.bWinbindTrustedDomainsOnly)
1899 FN_GLOBAL_BOOL(lp_winbind_nested_groups, &Globals.bWinbindNestedGroups)
1900 FN_GLOBAL_BOOL(lp_winbind_refresh_tickets, &Globals.bWinbindRefreshTickets)
1901 FN_GLOBAL_BOOL(lp_winbind_offline_logon, &Globals.bWinbindOfflineLogon)
1902 FN_GLOBAL_BOOL(lp_winbind_normalize_names, &Globals.bWinbindNormalizeNames)
1904 FN_GLOBAL_LIST(lp_idmap_domains, &Globals.szIdmapDomains)
1905 FN_GLOBAL_LIST(lp_idmap_backend, &Globals.szIdmapBackend) /* deprecated */
1906 FN_GLOBAL_STRING(lp_idmap_alloc_backend, &Globals.szIdmapAllocBackend)
1907 FN_GLOBAL_INTEGER(lp_idmap_expire_time, &Globals.iIdmapExpireTime)
1908 FN_GLOBAL_INTEGER(lp_idmap_negative_time, &Globals.iIdmapNegativeTime)
1909 FN_GLOBAL_BOOL(lp_passdb_expand_explicit, &Globals.bPassdbExpandExplicit)
1911 FN_GLOBAL_STRING(lp_ldap_suffix, &Globals.szLdapSuffix)
1912 FN_GLOBAL_STRING(lp_ldap_admin_dn, &Globals.szLdapAdminDn)
1913 FN_GLOBAL_INTEGER(lp_ldap_ssl, &Globals.ldap_ssl)
1914 FN_GLOBAL_INTEGER(lp_ldap_passwd_sync, &Globals.ldap_passwd_sync)
1915 FN_GLOBAL_BOOL(lp_ldap_delete_dn, &Globals.ldap_delete_dn)
1916 FN_GLOBAL_INTEGER(lp_ldap_replication_sleep, &Globals.ldap_replication_sleep)
1917 FN_GLOBAL_INTEGER(lp_ldap_timeout, &Globals.ldap_timeout)
1918 FN_GLOBAL_INTEGER(lp_ldap_page_size, &Globals.ldap_page_size)
1919 FN_GLOBAL_STRING(lp_add_share_cmd, &Globals.szAddShareCommand)
1920 FN_GLOBAL_STRING(lp_change_share_cmd, &Globals.szChangeShareCommand)
1921 FN_GLOBAL_STRING(lp_delete_share_cmd, &Globals.szDeleteShareCommand)
1922 FN_GLOBAL_STRING(lp_usershare_path, &Globals.szUsersharePath)
1923 FN_GLOBAL_LIST(lp_usershare_prefix_allow_list, &Globals.szUsersharePrefixAllowList)
1924 FN_GLOBAL_LIST(lp_usershare_prefix_deny_list, &Globals.szUsersharePrefixDenyList)
1926 FN_GLOBAL_LIST(lp_eventlog_list, &Globals.szEventLogs)
1928 FN_GLOBAL_BOOL(lp_registry_shares, &Globals.bRegistryShares)
1929 FN_GLOBAL_BOOL(lp_usershare_allow_guests, &Globals.bUsershareAllowGuests)
1930 FN_GLOBAL_BOOL(lp_usershare_owner_only, &Globals.bUsershareOwnerOnly)
1931 FN_GLOBAL_BOOL(lp_disable_netbios, &Globals.bDisableNetbios)
1932 FN_GLOBAL_BOOL(lp_reset_on_zero_vc, &Globals.bResetOnZeroVC)
1933 FN_GLOBAL_BOOL(lp_ms_add_printer_wizard, &Globals.bMsAddPrinterWizard)
1934 FN_GLOBAL_BOOL(lp_dns_proxy, &Globals.bDNSproxy)
1935 FN_GLOBAL_BOOL(lp_wins_support, &Globals.bWINSsupport)
1936 FN_GLOBAL_BOOL(lp_we_are_a_wins_server, &Globals.bWINSsupport)
1937 FN_GLOBAL_BOOL(lp_wins_proxy, &Globals.bWINSproxy)
1938 FN_GLOBAL_BOOL(lp_local_master, &Globals.bLocalMaster)
1939 FN_GLOBAL_BOOL(lp_domain_logons, &Globals.bDomainLogons)
1940 FN_GLOBAL_BOOL(lp_load_printers, &Globals.bLoadPrinters)
1941 FN_GLOBAL_BOOL(lp_readbmpx, &Globals.bReadbmpx)
1942 FN_GLOBAL_BOOL(lp_readraw, &Globals.bReadRaw)
1943 FN_GLOBAL_BOOL(lp_large_readwrite, &Globals.bLargeReadwrite)
1944 FN_GLOBAL_BOOL(lp_writeraw, &Globals.bWriteRaw)
1945 FN_GLOBAL_BOOL(lp_null_passwords, &Globals.bNullPasswords)
1946 FN_GLOBAL_BOOL(lp_obey_pam_restrictions, &Globals.bObeyPamRestrictions)
1947 FN_GLOBAL_BOOL(lp_encrypted_passwords, &Globals.bEncryptPasswords)
1948 FN_GLOBAL_BOOL(lp_update_encrypted, &Globals.bUpdateEncrypt)
1949 FN_GLOBAL_INTEGER(lp_client_schannel, &Globals.clientSchannel)
1950 FN_GLOBAL_INTEGER(lp_server_schannel, &Globals.serverSchannel)
1951 FN_GLOBAL_BOOL(lp_syslog_only, &Globals.bSyslogOnly)
1952 FN_GLOBAL_BOOL(lp_timestamp_logs, &Globals.bTimestampLogs)
1953 FN_GLOBAL_BOOL(lp_debug_prefix_timestamp, &Globals.bDebugPrefixTimestamp)
1954 FN_GLOBAL_BOOL(lp_debug_hires_timestamp, &Globals.bDebugHiresTimestamp)
1955 FN_GLOBAL_BOOL(lp_debug_pid, &Globals.bDebugPid)
1956 FN_GLOBAL_BOOL(lp_debug_uid, &Globals.bDebugUid)
1957 FN_GLOBAL_BOOL(lp_enable_core_files, &Globals.bEnableCoreFiles)
1958 FN_GLOBAL_BOOL(lp_browse_list, &Globals.bBrowseList)
1959 FN_GLOBAL_BOOL(lp_nis_home_map, &Globals.bNISHomeMap)
1960 static FN_GLOBAL_BOOL(lp_time_server, &Globals.bTimeServer)
1961 FN_GLOBAL_BOOL(lp_bind_interfaces_only, &Globals.bBindInterfacesOnly)
1962 FN_GLOBAL_BOOL(lp_pam_password_change, &Globals.bPamPasswordChange)
1963 FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync)
1964 FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug)
1965 FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout)
1966 FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport)
1967 FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport)
1968 FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache)
1969 FN_GLOBAL_INTEGER(lp_max_stat_cache_size, &Globals.iMaxStatCacheSize)
1970 FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains)
1971 FN_GLOBAL_INTEGER(lp_restrict_anonymous, &Globals.restrict_anonymous)
1972 FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth)
1973 FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth)
1974 FN_GLOBAL_BOOL(lp_client_plaintext_auth, &Globals.bClientPlaintextAuth)
1975 FN_GLOBAL_BOOL(lp_client_lanman_auth, &Globals.bClientLanManAuth)
1976 FN_GLOBAL_BOOL(lp_client_ntlmv2_auth, &Globals.bClientNTLMv2Auth)
1977 FN_GLOBAL_BOOL(lp_host_msdfs, &Globals.bHostMSDfs)
1978 FN_GLOBAL_BOOL(lp_kernel_oplocks, &Globals.bKernelOplocks)
1979 FN_GLOBAL_BOOL(lp_enhanced_browsing, &Globals.enhanced_browsing)
1980 FN_GLOBAL_BOOL(lp_use_mmap, &Globals.bUseMmap)
1981 FN_GLOBAL_BOOL(lp_unix_extensions, &Globals.bUnixExtensions)
1982 FN_GLOBAL_BOOL(lp_use_spnego, &Globals.bUseSpnego)
1983 FN_GLOBAL_BOOL(lp_client_use_spnego, &Globals.bClientUseSpnego)
1984 FN_GLOBAL_BOOL(lp_hostname_lookups, &Globals.bHostnameLookups)
1985 FN_LOCAL_PARM_BOOL(lp_change_notify, bChangeNotify)
1986 FN_LOCAL_PARM_BOOL(lp_kernel_change_notify, bKernelChangeNotify)
1987 FN_GLOBAL_BOOL(lp_use_kerberos_keytab, &Globals.bUseKerberosKeytab)
1988 FN_GLOBAL_BOOL(lp_defer_sharing_violations, &Globals.bDeferSharingViolations)
1989 FN_GLOBAL_BOOL(lp_enable_privileges, &Globals.bEnablePrivileges)
1990 FN_GLOBAL_BOOL(lp_enable_asu_support, &Globals.bASUSupport)
1991 FN_GLOBAL_INTEGER(lp_os_level, &Globals.os_level)
1992 FN_GLOBAL_INTEGER(lp_max_ttl, &Globals.max_ttl)
1993 FN_GLOBAL_INTEGER(lp_max_wins_ttl, &Globals.max_wins_ttl)
1994 FN_GLOBAL_INTEGER(lp_min_wins_ttl, &Globals.min_wins_ttl)
1995 FN_GLOBAL_INTEGER(lp_max_log_size, &Globals.max_log_size)
1996 FN_GLOBAL_INTEGER(lp_max_open_files, &Globals.max_open_files)
1997 FN_GLOBAL_INTEGER(lp_open_files_db_hash_size, &Globals.open_files_db_hash_size)
1998 FN_GLOBAL_INTEGER(lp_maxxmit, &Globals.max_xmit)
1999 FN_GLOBAL_INTEGER(lp_maxmux, &Globals.max_mux)
2000 FN_GLOBAL_INTEGER(lp_passwordlevel, &Globals.pwordlevel)
2001 FN_GLOBAL_INTEGER(lp_usernamelevel, &Globals.unamelevel)
2002 FN_GLOBAL_INTEGER(lp_deadtime, &Globals.deadtime)
2003 FN_GLOBAL_INTEGER(lp_maxprotocol, &Globals.maxprotocol)
2004 FN_GLOBAL_INTEGER(lp_minprotocol, &Globals.minprotocol)
2005 FN_GLOBAL_INTEGER(lp_security, &Globals.security)
2006 FN_GLOBAL_LIST(lp_auth_methods, &Globals.AuthMethods)
2007 FN_GLOBAL_BOOL(lp_paranoid_server_security, &Globals.paranoid_server_security)
2008 FN_GLOBAL_INTEGER(lp_maxdisksize, &Globals.maxdisksize)
2009 FN_GLOBAL_INTEGER(lp_lpqcachetime, &Globals.lpqcachetime)
2010 FN_GLOBAL_INTEGER(lp_max_smbd_processes, &Globals.iMaxSmbdProcesses)
2011 FN_GLOBAL_INTEGER(_lp_disable_spoolss, &Globals.bDisableSpoolss)
2012 FN_GLOBAL_INTEGER(lp_syslog, &Globals.syslog)
2013 static FN_GLOBAL_INTEGER(lp_announce_as, &Globals.announce_as)
2014 FN_GLOBAL_INTEGER(lp_lm_announce, &Globals.lm_announce)
2015 FN_GLOBAL_INTEGER(lp_lm_interval, &Globals.lm_interval)
2016 FN_GLOBAL_INTEGER(lp_machine_password_timeout, &Globals.machine_password_timeout)
2017 FN_GLOBAL_INTEGER(lp_map_to_guest, &Globals.map_to_guest)
2018 FN_GLOBAL_INTEGER(lp_oplock_break_wait_time, &Globals.oplock_break_wait_time)
2019 FN_GLOBAL_INTEGER(lp_lock_spin_count, &Globals.iLockSpinCount)
2020 FN_GLOBAL_INTEGER(lp_lock_spin_time, &Globals.iLockSpinTime)
2021 FN_GLOBAL_INTEGER(lp_usershare_max_shares, &Globals.iUsershareMaxShares)
2023 FN_LOCAL_STRING(lp_preexec, szPreExec)
2024 FN_LOCAL_STRING(lp_postexec, szPostExec)
2025 FN_LOCAL_STRING(lp_rootpreexec, szRootPreExec)
2026 FN_LOCAL_STRING(lp_rootpostexec, szRootPostExec)
2027 FN_LOCAL_STRING(lp_servicename, szService)
2028 FN_LOCAL_CONST_STRING(lp_const_servicename, szService)
2029 FN_LOCAL_STRING(lp_pathname, szPath)
2030 FN_LOCAL_STRING(lp_dontdescend, szDontdescend)
2031 FN_LOCAL_STRING(lp_username, szUsername)
2032 FN_LOCAL_LIST(lp_invalid_users, szInvalidUsers)
2033 FN_LOCAL_LIST(lp_valid_users, szValidUsers)
2034 FN_LOCAL_LIST(lp_admin_users, szAdminUsers)
2035 FN_GLOBAL_LIST(lp_svcctl_list, &Globals.szServicesList)
2036 FN_LOCAL_STRING(lp_cups_options, szCupsOptions)
2037 FN_GLOBAL_STRING(lp_cups_server, &Globals.szCupsServer)
2038 FN_GLOBAL_STRING(lp_iprint_server, &Globals.szIPrintServer)
2039 FN_LOCAL_STRING(lp_printcommand, szPrintcommand)
2040 FN_LOCAL_STRING(lp_lpqcommand, szLpqcommand)
2041 FN_LOCAL_STRING(lp_lprmcommand, szLprmcommand)
2042 FN_LOCAL_STRING(lp_lppausecommand, szLppausecommand)
2043 FN_LOCAL_STRING(lp_lpresumecommand, szLpresumecommand)
2044 FN_LOCAL_STRING(lp_queuepausecommand, szQueuepausecommand)
2045 FN_LOCAL_STRING(lp_queueresumecommand, szQueueresumecommand)
2046 static FN_LOCAL_STRING(_lp_printername, szPrintername)
2047 FN_LOCAL_CONST_STRING(lp_printjob_username, szPrintjobUsername)
2048 FN_LOCAL_LIST(lp_hostsallow, szHostsallow)
2049 FN_LOCAL_LIST(lp_hostsdeny, szHostsdeny)
2050 FN_LOCAL_STRING(lp_magicscript, szMagicScript)
2051 FN_LOCAL_STRING(lp_magicoutput, szMagicOutput)
2052 FN_LOCAL_STRING(lp_comment, comment)
2053 FN_LOCAL_STRING(lp_force_user, force_user)
2054 FN_LOCAL_STRING(lp_force_group, force_group)
2055 FN_LOCAL_LIST(lp_readlist, readlist)
2056 FN_LOCAL_LIST(lp_writelist, writelist)
2057 FN_LOCAL_LIST(lp_printer_admin, printer_admin)
2058 FN_LOCAL_STRING(lp_fstype, fstype)
2059 FN_LOCAL_LIST(lp_vfs_objects, szVfsObjects)
2060 FN_LOCAL_STRING(lp_msdfs_proxy, szMSDfsProxy)
2061 static FN_LOCAL_STRING(lp_volume, volume)
2062 FN_LOCAL_PARM_STRING(lp_mangled_map, szMangledMap)
2063 FN_LOCAL_STRING(lp_veto_files, szVetoFiles)
2064 FN_LOCAL_STRING(lp_hide_files, szHideFiles)
2065 FN_LOCAL_STRING(lp_veto_oplocks, szVetoOplockFiles)
2066 FN_LOCAL_BOOL(lp_msdfs_root, bMSDfsRoot)
2067 FN_LOCAL_STRING(lp_dfree_command, szDfree)
2068 FN_LOCAL_BOOL(lp_autoloaded, autoloaded)
2069 FN_LOCAL_BOOL(lp_preexec_close, bPreexecClose)
2070 FN_LOCAL_BOOL(lp_rootpreexec_close, bRootpreexecClose)
2071 FN_LOCAL_INTEGER(lp_casesensitive, iCaseSensitive)
2072 FN_LOCAL_BOOL(lp_preservecase, bCasePreserve)
2073 FN_LOCAL_BOOL(lp_shortpreservecase, bShortCasePreserve)
2074 FN_LOCAL_BOOL(lp_hide_dot_files, bHideDotFiles)
2075 FN_LOCAL_BOOL(lp_hide_special_files, bHideSpecialFiles)
2076 FN_LOCAL_BOOL(lp_hideunreadable, bHideUnReadable)
2077 FN_LOCAL_BOOL(lp_hideunwriteable_files, bHideUnWriteableFiles)
2078 FN_LOCAL_BOOL(lp_browseable, bBrowseable)
2079 FN_LOCAL_BOOL(lp_readonly, bRead_only)
2080 FN_LOCAL_BOOL(lp_no_set_dir, bNo_set_dir)
2081 FN_LOCAL_BOOL(lp_guest_ok, bGuest_ok)
2082 FN_LOCAL_BOOL(lp_guest_only, bGuest_only)
2083 FN_LOCAL_BOOL(lp_print_ok, bPrint_ok)
2084 FN_LOCAL_BOOL(lp_map_hidden, bMap_hidden)
2085 FN_LOCAL_BOOL(lp_map_archive, bMap_archive)
2086 FN_LOCAL_BOOL(lp_store_dos_attributes, bStoreDosAttributes)
2087 FN_LOCAL_BOOL(lp_dmapi_support, bDmapiSupport)
2088 FN_LOCAL_PARM_BOOL(lp_locking, bLocking)
2089 FN_LOCAL_PARM_INTEGER(lp_strict_locking, iStrictLocking)
2090 FN_LOCAL_PARM_BOOL(lp_posix_locking, bPosixLocking)
2091 FN_LOCAL_BOOL(lp_share_modes, bShareModes)
2092 FN_LOCAL_BOOL(lp_oplocks, bOpLocks)
2093 FN_LOCAL_BOOL(lp_level2_oplocks, bLevel2OpLocks)
2094 FN_LOCAL_BOOL(lp_onlyuser, bOnlyUser)
2095 FN_LOCAL_PARM_BOOL(lp_manglednames, bMangledNames)
2096 FN_LOCAL_BOOL(lp_widelinks, bWidelinks)
2097 FN_LOCAL_BOOL(lp_symlinks, bSymlinks)
2098 FN_LOCAL_BOOL(lp_syncalways, bSyncAlways)
2099 FN_LOCAL_BOOL(lp_strict_allocate, bStrictAllocate)
2100 FN_LOCAL_BOOL(lp_strict_sync, bStrictSync)
2101 FN_LOCAL_BOOL(lp_map_system, bMap_system)
2102 FN_LOCAL_BOOL(lp_delete_readonly, bDeleteReadonly)
2103 FN_LOCAL_BOOL(lp_fake_oplocks, bFakeOplocks)
2104 FN_LOCAL_BOOL(lp_recursive_veto_delete, bDeleteVetoFiles)
2105 FN_LOCAL_BOOL(lp_dos_filemode, bDosFilemode)
2106 FN_LOCAL_BOOL(lp_dos_filetimes, bDosFiletimes)
2107 FN_LOCAL_BOOL(lp_dos_filetime_resolution, bDosFiletimeResolution)
2108 FN_LOCAL_BOOL(lp_fake_dir_create_times, bFakeDirCreateTimes)
2109 FN_LOCAL_BOOL(lp_blocking_locks, bBlockingLocks)
2110 FN_LOCAL_BOOL(lp_inherit_perms, bInheritPerms)
2111 FN_LOCAL_BOOL(lp_inherit_acls, bInheritACLS)
2112 FN_LOCAL_BOOL(lp_inherit_owner, bInheritOwner)
2113 FN_LOCAL_BOOL(lp_use_client_driver, bUseClientDriver)
2114 FN_LOCAL_BOOL(lp_default_devmode, bDefaultDevmode)
2115 FN_LOCAL_BOOL(lp_force_printername, bForcePrintername)
2116 FN_LOCAL_BOOL(lp_nt_acl_support, bNTAclSupport)
2117 FN_LOCAL_BOOL(lp_force_unknown_acl_user, bForceUnknownAclUser)
2118 FN_LOCAL_BOOL(lp_ea_support, bEASupport)
2119 FN_LOCAL_BOOL(_lp_use_sendfile, bUseSendfile)
2120 FN_LOCAL_BOOL(lp_profile_acls, bProfileAcls)
2121 FN_LOCAL_BOOL(lp_map_acl_inherit, bMap_acl_inherit)
2122 FN_LOCAL_BOOL(lp_afs_share, bAfs_Share)
2123 FN_LOCAL_BOOL(lp_acl_check_permissions, bAclCheckPermissions)
2124 FN_LOCAL_BOOL(lp_acl_group_control, bAclGroupControl)
2125 FN_LOCAL_BOOL(lp_acl_map_full_control, bAclMapFullControl)
2126 FN_LOCAL_INTEGER(lp_create_mask, iCreate_mask)
2127 FN_LOCAL_INTEGER(lp_force_create_mode, iCreate_force_mode)
2128 FN_LOCAL_INTEGER(lp_security_mask, iSecurity_mask)
2129 FN_LOCAL_INTEGER(lp_force_security_mode, iSecurity_force_mode)
2130 FN_LOCAL_INTEGER(lp_dir_mask, iDir_mask)
2131 FN_LOCAL_INTEGER(lp_force_dir_mode, iDir_force_mode)
2132 FN_LOCAL_INTEGER(lp_dir_security_mask, iDir_Security_mask)
2133 FN_LOCAL_INTEGER(lp_force_dir_security_mode, iDir_Security_force_mode)
2134 FN_LOCAL_INTEGER(lp_max_connections, iMaxConnections)
2135 FN_LOCAL_INTEGER(lp_defaultcase, iDefaultCase)
2136 FN_LOCAL_INTEGER(lp_minprintspace, iMinPrintSpace)
2137 FN_LOCAL_INTEGER(lp_printing, iPrinting)
2138 FN_LOCAL_INTEGER(lp_max_reported_jobs, iMaxReportedPrintJobs)
2139 FN_LOCAL_INTEGER(lp_oplock_contention_limit, iOplockContentionLimit)
2140 FN_LOCAL_INTEGER(lp_csc_policy, iCSCPolicy)
2141 FN_LOCAL_INTEGER(lp_write_cache_size, iWriteCacheSize)
2142 FN_LOCAL_INTEGER(lp_block_size, iBlock_size)
2143 FN_LOCAL_INTEGER(lp_dfree_cache_time, iDfreeCacheTime)
2144 FN_LOCAL_INTEGER(lp_allocation_roundup_size, iallocation_roundup_size)
2145 FN_LOCAL_INTEGER(lp_aio_read_size, iAioReadSize)
2146 FN_LOCAL_INTEGER(lp_aio_write_size, iAioWriteSize)
2147 FN_LOCAL_INTEGER(lp_map_readonly, iMap_readonly)
2148 FN_LOCAL_CHAR(lp_magicchar, magic_char)
2149 FN_GLOBAL_INTEGER(lp_winbind_cache_time, &Globals.winbind_cache_time)
2150 FN_GLOBAL_LIST(lp_winbind_nss_info, &Globals.szWinbindNssInfo)
2151 FN_GLOBAL_INTEGER(lp_algorithmic_rid_base, &Globals.AlgorithmicRidBase)
2152 FN_GLOBAL_INTEGER(lp_name_cache_timeout, &Globals.name_cache_timeout)
2153 FN_GLOBAL_INTEGER(lp_client_signing, &Globals.client_signing)
2154 FN_GLOBAL_INTEGER(lp_server_signing, &Globals.server_signing)
2156 /* local prototypes */
2158 static int map_parameter(const char *pszParmName);
2159 static BOOL set_boolean(BOOL *pb, const char *pszParmValue);
2160 static int getservicebyname(const char *pszServiceName,
2161 service * pserviceDest);
2162 static void copy_service(service * pserviceDest,
2163 service * pserviceSource, BOOL *pcopymapDest);
2164 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue);
2165 static BOOL do_section(const char *pszSectionName);
2166 static void init_copymap(service * pservice);
2167 static BOOL hash_a_service(const char *name, int number);
2168 static void free_service_byindex(int iService);
2169 static char * canonicalize_servicename(const char *name);
2171 /* This is a helper function for parametrical options support. */
2172 /* It returns a pointer to parametrical option value if it exists or NULL otherwise */
2173 /* Actual parametrical functions are quite simple */
2174 static param_opt_struct *get_parametrics(int snum, const char *type, const char *option)
2176 BOOL global_section = False;
2178 param_opt_struct *data;
2180 if (snum >= iNumServices) return NULL;
2183 data = Globals.param_opt;
2184 global_section = True;
2186 data = ServicePtrs[snum]->param_opt;
2189 asprintf(¶m_key, "%s:%s", type, option);
2191 DEBUG(0,("asprintf failed!\n"));
2196 if (strcmp(data->key, param_key) == 0) {
2197 string_free(¶m_key);
2203 if (!global_section) {
2204 /* Try to fetch the same option but from globals */
2205 /* but only if we are not already working with Globals */
2206 data = Globals.param_opt;
2208 if (strcmp(data->key, param_key) == 0) {
2209 string_free(¶m_key);
2216 string_free(¶m_key);
2222 #define MISSING_PARAMETER(name) \
2223 DEBUG(0, ("%s(): value is NULL or empty!\n", #name))
2225 /*******************************************************************
2226 convenience routine to return int parameters.
2227 ********************************************************************/
2228 static int lp_int(const char *s)
2232 MISSING_PARAMETER(lp_int);
2239 /*******************************************************************
2240 convenience routine to return unsigned long parameters.
2241 ********************************************************************/
2242 static unsigned long lp_ulong(const char *s)
2246 MISSING_PARAMETER(lp_ulong);
2250 return strtoul(s, NULL, 10);
2253 /*******************************************************************
2254 convenience routine to return boolean parameters.
2255 ********************************************************************/
2256 static BOOL lp_bool(const char *s)
2261 MISSING_PARAMETER(lp_bool);
2265 if (!set_boolean(&ret,s)) {
2266 DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
2273 /*******************************************************************
2274 convenience routine to return enum parameters.
2275 ********************************************************************/
2276 static int lp_enum(const char *s,const struct enum_list *_enum)
2280 if (!s || !*s || !_enum) {
2281 MISSING_PARAMETER(lp_enum);
2285 for (i=0; _enum[i].name; i++) {
2286 if (strequal(_enum[i].name,s))
2287 return _enum[i].value;
2290 DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
2294 #undef MISSING_PARAMETER
2296 /* DO NOT USE lp_parm_string ANYMORE!!!!
2297 * use lp_parm_const_string or lp_parm_talloc_string
2299 * lp_parm_string is only used to let old modules find this symbol
2301 #undef lp_parm_string
2302 char *lp_parm_string(const char *servicename, const char *type, const char *option);
2303 char *lp_parm_string(const char *servicename, const char *type, const char *option)
2305 return lp_parm_talloc_string(lp_servicenumber(servicename), type, option, NULL);
2308 /* Return parametric option from a given service. Type is a part of option before ':' */
2309 /* Parametric option has following syntax: 'Type: option = value' */
2310 /* the returned value is talloced in lp_talloc */
2311 char *lp_parm_talloc_string(int snum, const char *type, const char *option, const char *def)
2313 param_opt_struct *data = get_parametrics(snum, type, option);
2315 if (data == NULL||data->value==NULL) {
2317 return lp_string(def);
2323 return lp_string(data->value);
2326 /* Return parametric option from a given service. Type is a part of option before ':' */
2327 /* Parametric option has following syntax: 'Type: option = value' */
2328 const char *lp_parm_const_string(int snum, const char *type, const char *option, const char *def)
2330 param_opt_struct *data = get_parametrics(snum, type, option);
2332 if (data == NULL||data->value==NULL)
2338 /* Return parametric option from a given service. Type is a part of option before ':' */
2339 /* Parametric option has following syntax: 'Type: option = value' */
2341 const char **lp_parm_string_list(int snum, const char *type, const char *option, const char **def)
2343 param_opt_struct *data = get_parametrics(snum, type, option);
2345 if (data == NULL||data->value==NULL)
2346 return (const char **)def;
2348 if (data->list==NULL) {
2349 data->list = str_list_make(data->value, NULL);
2352 return (const char **)data->list;
2355 /* Return parametric option from a given service. Type is a part of option before ':' */
2356 /* Parametric option has following syntax: 'Type: option = value' */
2358 int lp_parm_int(int snum, const char *type, const char *option, int def)
2360 param_opt_struct *data = get_parametrics(snum, type, option);
2362 if (data && data->value && *data->value)
2363 return lp_int(data->value);
2368 /* Return parametric option from a given service. Type is a part of option before ':' */
2369 /* Parametric option has following syntax: 'Type: option = value' */
2371 unsigned long lp_parm_ulong(int snum, const char *type, const char *option, unsigned long def)
2373 param_opt_struct *data = get_parametrics(snum, type, option);
2375 if (data && data->value && *data->value)
2376 return lp_ulong(data->value);
2381 /* Return parametric option from a given service. Type is a part of option before ':' */
2382 /* Parametric option has following syntax: 'Type: option = value' */
2384 BOOL lp_parm_bool(int snum, const char *type, const char *option, BOOL def)
2386 param_opt_struct *data = get_parametrics(snum, type, option);
2388 if (data && data->value && *data->value)
2389 return lp_bool(data->value);
2394 /* Return parametric option from a given service. Type is a part of option before ':' */
2395 /* Parametric option has following syntax: 'Type: option = value' */
2397 int lp_parm_enum(int snum, const char *type, const char *option,
2398 const struct enum_list *_enum, int def)
2400 param_opt_struct *data = get_parametrics(snum, type, option);
2402 if (data && data->value && *data->value && _enum)
2403 return lp_enum(data->value, _enum);
2409 /***************************************************************************
2410 Initialise a service to the defaults.
2411 ***************************************************************************/
2413 static void init_service(service * pservice)
2415 memset((char *)pservice, '\0', sizeof(service));
2416 copy_service(pservice, &sDefault, NULL);
2419 /***************************************************************************
2420 Free the dynamically allocated parts of a service struct.
2421 ***************************************************************************/
2423 static void free_service(service *pservice)
2426 param_opt_struct *data, *pdata;
2430 if (pservice->szService)
2431 DEBUG(5, ("free_service: Freeing service %s\n",
2432 pservice->szService));
2434 string_free(&pservice->szService);
2435 SAFE_FREE(pservice->copymap);
2437 for (i = 0; parm_table[i].label; i++) {
2438 if ((parm_table[i].type == P_STRING ||
2439 parm_table[i].type == P_USTRING) &&
2440 parm_table[i].p_class == P_LOCAL)
2441 string_free((char **)
2442 (((char *)pservice) +
2443 PTR_DIFF(parm_table[i].ptr, &sDefault)));
2444 else if (parm_table[i].type == P_LIST &&
2445 parm_table[i].p_class == P_LOCAL)
2446 str_list_free((char ***)
2447 (((char *)pservice) +
2448 PTR_DIFF(parm_table[i].ptr, &sDefault)));
2451 data = pservice->param_opt;
2453 DEBUG(5,("Freeing parametrics:\n"));
2455 DEBUG(5,("[%s = %s]\n", data->key, data->value));
2456 string_free(&data->key);
2457 string_free(&data->value);
2458 str_list_free(&data->list);
2464 ZERO_STRUCTP(pservice);
2468 /***************************************************************************
2469 remove a service indexed in the ServicePtrs array from the ServiceHash
2470 and free the dynamically allocated parts
2471 ***************************************************************************/
2473 static void free_service_byindex(int idx)
2475 if ( !LP_SNUM_OK(idx) )
2478 ServicePtrs[idx]->valid = False;
2479 invalid_services[num_invalid_services++] = idx;
2481 /* we have to cleanup the hash record */
2483 if (ServicePtrs[idx]->szService) {
2484 char *canon_name = canonicalize_servicename( ServicePtrs[idx]->szService );
2486 tdb_delete_bystring(ServiceHash, canon_name );
2489 free_service(ServicePtrs[idx]);
2492 /***************************************************************************
2493 Add a new service to the services array initialising it with the given
2495 ***************************************************************************/
2497 static int add_a_service(const service *pservice, const char *name)
2501 int num_to_alloc = iNumServices + 1;
2502 param_opt_struct *data, *pdata;
2504 tservice = *pservice;
2506 /* it might already exist */
2508 i = getservicebyname(name, NULL);
2510 /* Clean all parametric options for service */
2511 /* They will be added during parsing again */
2512 data = ServicePtrs[i]->param_opt;
2514 string_free(&data->key);
2515 string_free(&data->value);
2516 str_list_free(&data->list);
2521 ServicePtrs[i]->param_opt = NULL;
2526 /* find an invalid one */
2528 if (num_invalid_services > 0) {
2529 i = invalid_services[--num_invalid_services];
2532 /* if not, then create one */
2533 if (i == iNumServices) {
2537 tsp = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(ServicePtrs, service *, num_to_alloc);
2539 DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
2543 ServicePtrs[iNumServices] = SMB_MALLOC_P(service);
2544 if (!ServicePtrs[iNumServices]) {
2545 DEBUG(0,("add_a_service: out of memory!\n"));
2550 /* enlarge invalid_services here for now... */
2551 tinvalid = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(invalid_services, int,
2553 if (tinvalid == NULL) {
2554 DEBUG(0,("add_a_service: failed to enlarge "
2555 "invalid_services!\n"));
2558 invalid_services = tinvalid;
2560 free_service_byindex(i);
2563 ServicePtrs[i]->valid = True;
2565 init_service(ServicePtrs[i]);
2566 copy_service(ServicePtrs[i], &tservice, NULL);
2568 string_set(&ServicePtrs[i]->szService, name);
2570 DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
2571 i, ServicePtrs[i]->szService));
2573 if (!hash_a_service(ServicePtrs[i]->szService, i)) {
2580 /***************************************************************************
2581 Convert a string to uppercase and remove whitespaces.
2582 ***************************************************************************/
2584 static char *canonicalize_servicename(const char *src)
2586 static fstring canon; /* is fstring large enough? */
2589 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
2593 fstrcpy( canon, src );
2594 strlower_m( canon );
2599 /***************************************************************************
2600 Add a name/index pair for the services array to the hash table.
2601 ***************************************************************************/
2603 static BOOL hash_a_service(const char *name, int idx)
2607 if ( !ServiceHash ) {
2608 DEBUG(10,("hash_a_service: creating tdb servicehash\n"));
2609 ServiceHash = tdb_open("servicehash", 1031, TDB_INTERNAL,
2610 (O_RDWR|O_CREAT), 0600);
2611 if ( !ServiceHash ) {
2612 DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
2617 DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
2620 if ( !(canon_name = canonicalize_servicename( name )) )
2623 tdb_store_int32(ServiceHash, canon_name, idx);
2628 /***************************************************************************
2629 Add a new home service, with the specified home directory, defaults coming
2631 ***************************************************************************/
2633 BOOL lp_add_home(const char *pszHomename, int iDefaultService,
2634 const char *user, const char *pszHomedir)
2639 i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
2644 if (!(*(ServicePtrs[iDefaultService]->szPath))
2645 || strequal(ServicePtrs[iDefaultService]->szPath, lp_pathname(GLOBAL_SECTION_SNUM))) {
2646 pstrcpy(newHomedir, pszHomedir);
2647 string_set(&ServicePtrs[i]->szPath, newHomedir);
2650 if (!(*(ServicePtrs[i]->comment))) {
2652 slprintf(comment, sizeof(comment) - 1,
2653 "Home directory of %s", user);
2654 string_set(&ServicePtrs[i]->comment, comment);
2657 /* set the browseable flag from the global default */
2659 ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2661 ServicePtrs[i]->autoloaded = True;
2663 DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename,
2664 user, ServicePtrs[i]->szPath ));
2669 /***************************************************************************
2670 Add a new service, based on an old one.
2671 ***************************************************************************/
2673 int lp_add_service(const char *pszService, int iDefaultService)
2675 if (iDefaultService < 0) {
2676 return add_a_service(&sDefault, pszService);
2679 return (add_a_service(ServicePtrs[iDefaultService], pszService));
2682 /***************************************************************************
2683 Add the IPC service.
2684 ***************************************************************************/
2686 static BOOL lp_add_ipc(const char *ipc_name, BOOL guest_ok)
2689 int i = add_a_service(&sDefault, ipc_name);
2694 slprintf(comment, sizeof(comment) - 1,
2695 "IPC Service (%s)", Globals.szServerString);
2697 string_set(&ServicePtrs[i]->szPath, tmpdir());
2698 string_set(&ServicePtrs[i]->szUsername, "");
2699 string_set(&ServicePtrs[i]->comment, comment);
2700 string_set(&ServicePtrs[i]->fstype, "IPC");
2701 ServicePtrs[i]->iMaxConnections = 0;
2702 ServicePtrs[i]->bAvailable = True;
2703 ServicePtrs[i]->bRead_only = True;
2704 ServicePtrs[i]->bGuest_only = False;
2705 ServicePtrs[i]->bGuest_ok = guest_ok;
2706 ServicePtrs[i]->bPrint_ok = False;
2707 ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2709 DEBUG(3, ("adding IPC service\n"));
2714 /***************************************************************************
2715 Add a new printer service, with defaults coming from service iFrom.
2716 ***************************************************************************/
2718 BOOL lp_add_printer(const char *pszPrintername, int iDefaultService)
2720 const char *comment = "From Printcap";
2721 int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
2726 /* note that we do NOT default the availability flag to True - */
2727 /* we take it from the default service passed. This allows all */
2728 /* dynamic printers to be disabled by disabling the [printers] */
2729 /* entry (if/when the 'available' keyword is implemented!). */
2731 /* the printer name is set to the service name. */
2732 string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
2733 string_set(&ServicePtrs[i]->comment, comment);
2735 /* set the browseable flag from the gloabl default */
2736 ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2738 /* Printers cannot be read_only. */
2739 ServicePtrs[i]->bRead_only = False;
2740 /* No share modes on printer services. */
2741 ServicePtrs[i]->bShareModes = False;
2742 /* No oplocks on printer services. */
2743 ServicePtrs[i]->bOpLocks = False;
2744 /* Printer services must be printable. */
2745 ServicePtrs[i]->bPrint_ok = True;
2747 DEBUG(3, ("adding printer service %s\n", pszPrintername));
2752 /***************************************************************************
2753 Map a parameter's string representation to something we can use.
2754 Returns False if the parameter string is not recognised, else TRUE.
2755 ***************************************************************************/
2757 static int map_parameter(const char *pszParmName)
2761 if (*pszParmName == '-')
2764 for (iIndex = 0; parm_table[iIndex].label; iIndex++)
2765 if (strwicmp(parm_table[iIndex].label, pszParmName) == 0)
2768 /* Warn only if it isn't parametric option */
2769 if (strchr(pszParmName, ':') == NULL)
2770 DEBUG(0, ("Unknown parameter encountered: \"%s\"\n", pszParmName));
2771 /* We do return 'fail' for parametric options as well because they are
2772 stored in different storage
2777 /***************************************************************************
2778 Show all parameter's name, type, [values,] and flags.
2779 ***************************************************************************/
2781 void show_parameter_list(void)
2783 int classIndex, parmIndex, enumIndex, flagIndex;
2785 const char *section_names[] = { "local", "global", NULL};
2786 const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
2787 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING", "P_GSTRING",
2788 "P_UGSTRING", "P_ENUM", "P_SEP"};
2789 unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
2790 FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
2791 FLAG_HIDE, FLAG_DOS_STRING};
2792 const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
2793 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
2794 "FLAG_DEPRECATED", "FLAG_HIDE", "FLAG_DOS_STRING", NULL};
2796 for ( classIndex=0; section_names[classIndex]; classIndex++) {
2797 printf("[%s]\n", section_names[classIndex]);
2798 for (parmIndex = 0; parm_table[parmIndex].label; parmIndex++) {
2799 if (parm_table[parmIndex].p_class == classIndex) {
2801 parm_table[parmIndex].label,
2802 type[parm_table[parmIndex].type]);
2803 switch (parm_table[parmIndex].type) {
2806 for (enumIndex=0; parm_table[parmIndex].enum_list[enumIndex].name; enumIndex++)
2808 enumIndex ? "|" : "",
2809 parm_table[parmIndex].enum_list[enumIndex].name);
2816 for ( flagIndex=0; flag_names[flagIndex]; flagIndex++ ) {
2817 if (parm_table[parmIndex].flags & flags[flagIndex]) {
2820 flag_names[flagIndex]);
2830 /***************************************************************************
2831 Set a boolean variable from the text value stored in the passed string.
2832 Returns True in success, False if the passed string does not correctly
2833 represent a boolean.
2834 ***************************************************************************/
2836 static BOOL set_boolean(BOOL *pb, const char *pszParmValue)
2841 if (strwicmp(pszParmValue, "yes") == 0 ||
2842 strwicmp(pszParmValue, "true") == 0 ||
2843 strwicmp(pszParmValue, "1") == 0)
2845 else if (strwicmp(pszParmValue, "no") == 0 ||
2846 strwicmp(pszParmValue, "False") == 0 ||
2847 strwicmp(pszParmValue, "0") == 0)
2851 ("ERROR: Badly formed boolean in configuration file: \"%s\".\n",
2858 /***************************************************************************
2859 Find a service by name. Otherwise works like get_service.
2860 ***************************************************************************/
2862 static int getservicebyname(const char *pszServiceName, service * pserviceDest)
2867 if (ServiceHash != NULL) {
2868 if ( !(canon_name = canonicalize_servicename( pszServiceName )) )
2871 iService = tdb_fetch_int32(ServiceHash, canon_name );
2873 if (LP_SNUM_OK(iService)) {
2874 if (pserviceDest != NULL) {
2875 copy_service(pserviceDest, ServicePtrs[iService], NULL);
2885 /***************************************************************************
2886 Copy a service structure to another.
2887 If pcopymapDest is NULL then copy all fields
2888 ***************************************************************************/
2890 static void copy_service(service * pserviceDest, service * pserviceSource, BOOL *pcopymapDest)
2893 BOOL bcopyall = (pcopymapDest == NULL);
2894 param_opt_struct *data, *pdata, *paramo;
2897 for (i = 0; parm_table[i].label; i++)
2898 if (parm_table[i].ptr && parm_table[i].p_class == P_LOCAL &&
2899 (bcopyall || pcopymapDest[i])) {
2900 void *def_ptr = parm_table[i].ptr;
2902 ((char *)pserviceSource) + PTR_DIFF(def_ptr,
2905 ((char *)pserviceDest) + PTR_DIFF(def_ptr,
2908 switch (parm_table[i].type) {
2911 *(BOOL *)dest_ptr = *(BOOL *)src_ptr;
2917 *(int *)dest_ptr = *(int *)src_ptr;
2921 *(char *)dest_ptr = *(char *)src_ptr;
2925 string_set((char **)dest_ptr,
2930 string_set((char **)dest_ptr,
2932 strupper_m(*(char **)dest_ptr);
2935 str_list_free((char ***)dest_ptr);
2936 str_list_copy((char ***)dest_ptr, *(const char ***)src_ptr);
2944 init_copymap(pserviceDest);
2945 if (pserviceSource->copymap)
2946 memcpy((void *)pserviceDest->copymap,
2947 (void *)pserviceSource->copymap,
2948 sizeof(BOOL) * NUMPARAMETERS);
2951 data = pserviceSource->param_opt;
2954 pdata = pserviceDest->param_opt;
2955 /* Traverse destination */
2957 /* If we already have same option, override it */
2958 if (strcmp(pdata->key, data->key) == 0) {
2959 string_free(&pdata->value);
2960 str_list_free(&data->list);
2961 pdata->value = SMB_STRDUP(data->value);
2965 pdata = pdata->next;
2968 paramo = SMB_XMALLOC_P(param_opt_struct);
2969 paramo->key = SMB_STRDUP(data->key);
2970 paramo->value = SMB_STRDUP(data->value);
2971 paramo->list = NULL;
2972 DLIST_ADD(pserviceDest->param_opt, paramo);
2978 /***************************************************************************
2979 Check a service for consistency. Return False if the service is in any way
2980 incomplete or faulty, else True.
2981 ***************************************************************************/
2983 BOOL service_ok(int iService)
2988 if (ServicePtrs[iService]->szService[0] == '\0') {
2989 DEBUG(0, ("The following message indicates an internal error:\n"));
2990 DEBUG(0, ("No service name in service entry.\n"));
2994 /* The [printers] entry MUST be printable. I'm all for flexibility, but */
2995 /* I can't see why you'd want a non-printable printer service... */
2996 if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
2997 if (!ServicePtrs[iService]->bPrint_ok) {
2998 DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
2999 ServicePtrs[iService]->szService));
3000 ServicePtrs[iService]->bPrint_ok = True;
3002 /* [printers] service must also be non-browsable. */
3003 if (ServicePtrs[iService]->bBrowseable)
3004 ServicePtrs[iService]->bBrowseable = False;
3007 if (ServicePtrs[iService]->szPath[0] == '\0' &&
3008 strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0 &&
3009 ServicePtrs[iService]->szMSDfsProxy[0] == '\0'
3011 DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
3012 ServicePtrs[iService]->szService));
3013 ServicePtrs[iService]->bAvailable = False;
3016 /* If a service is flagged unavailable, log the fact at level 1. */
3017 if (!ServicePtrs[iService]->bAvailable)
3018 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
3019 ServicePtrs[iService]->szService));
3024 static struct file_lists {
3025 struct file_lists *next;
3029 } *file_lists = NULL;
3031 /*******************************************************************
3032 Keep a linked list of all config files so we know when one has changed
3033 it's date and needs to be reloaded.
3034 ********************************************************************/
3036 static void add_to_file_list(const char *fname, const char *subfname)
3038 struct file_lists *f = file_lists;
3041 if (f->name && !strcmp(f->name, fname))
3047 f = SMB_MALLOC_P(struct file_lists);
3050 f->next = file_lists;
3051 f->name = SMB_STRDUP(fname);
3056 f->subfname = SMB_STRDUP(subfname);
3062 f->modtime = file_modtime(subfname);
3064 time_t t = file_modtime(subfname);
3070 /*******************************************************************
3071 Check if a config file has changed date.
3072 ********************************************************************/
3074 BOOL lp_file_list_changed(void)
3076 struct file_lists *f = file_lists;
3078 DEBUG(6, ("lp_file_list_changed()\n"));
3084 pstrcpy(n2, f->name);
3085 standard_sub_basic( get_current_username(),
3086 current_user_info.domain,
3089 DEBUGADD(6, ("file %s -> %s last mod_time: %s\n",
3090 f->name, n2, ctime(&f->modtime)));
3092 mod_time = file_modtime(n2);
3094 if (mod_time && ((f->modtime != mod_time) || (f->subfname == NULL) || (strcmp(n2, f->subfname) != 0))) {
3096 ("file %s modified: %s\n", n2,
3098 f->modtime = mod_time;
3099 SAFE_FREE(f->subfname);
3100 f->subfname = SMB_STRDUP(n2);
3108 /***************************************************************************
3109 Run standard_sub_basic on netbios name... needed because global_myname
3110 is not accessed through any lp_ macro.
3111 Note: We must *NOT* use string_set() here as ptr points to global_myname.
3112 ***************************************************************************/
3114 static BOOL handle_netbios_name(int snum, const char *pszParmValue, char **ptr)
3117 pstring netbios_name;
3119 pstrcpy(netbios_name, pszParmValue);
3121 standard_sub_basic(get_current_username(), current_user_info.domain,
3122 netbios_name, sizeof(netbios_name));
3124 ret = set_global_myname(netbios_name);
3125 string_set(&Globals.szNetbiosName,global_myname());
3127 DEBUG(4, ("handle_netbios_name: set global_myname to: %s\n",
3133 static BOOL handle_charset(int snum, const char *pszParmValue, char **ptr)
3135 if (strcmp(*ptr, pszParmValue) != 0) {
3136 string_set(ptr, pszParmValue);
3144 static BOOL handle_workgroup(int snum, const char *pszParmValue, char **ptr)
3148 ret = set_global_myworkgroup(pszParmValue);
3149 string_set(&Globals.szWorkgroup,lp_workgroup());
3154 static BOOL handle_netbios_scope(int snum, const char *pszParmValue, char **ptr)
3158 ret = set_global_scope(pszParmValue);
3159 string_set(&Globals.szNetbiosScope,global_scope());
3164 static BOOL handle_netbios_aliases(int snum, const char *pszParmValue, char **ptr)
3166 str_list_free(&Globals.szNetbiosAliases);
3167 Globals.szNetbiosAliases = str_list_make(pszParmValue, NULL);
3168 return set_netbios_aliases((const char **)Globals.szNetbiosAliases);
3171 /***************************************************************************
3172 Handle the include operation.
3173 ***************************************************************************/
3175 static BOOL handle_include(int snum, const char *pszParmValue, char **ptr)
3178 pstrcpy(fname, pszParmValue);
3180 standard_sub_basic(get_current_username(), current_user_info.domain,
3181 fname,sizeof(fname));
3183 add_to_file_list(pszParmValue, fname);
3185 string_set(ptr, fname);
3187 if (file_exist(fname, NULL))
3188 return (pm_process(fname, do_section, do_parameter));
3190 DEBUG(2, ("Can't find include file %s\n", fname));
3195 /***************************************************************************
3196 Handle the interpretation of the copy parameter.
3197 ***************************************************************************/
3199 static BOOL handle_copy(int snum, const char *pszParmValue, char **ptr)
3203 service serviceTemp;
3205 string_set(ptr, pszParmValue);
3207 init_service(&serviceTemp);
3211 DEBUG(3, ("Copying service from service %s\n", pszParmValue));
3213 if ((iTemp = getservicebyname(pszParmValue, &serviceTemp)) >= 0) {
3214 if (iTemp == iServiceIndex) {
3215 DEBUG(0, ("Can't copy service %s - unable to copy self!\n", pszParmValue));
3217 copy_service(ServicePtrs[iServiceIndex],
3219 ServicePtrs[iServiceIndex]->copymap);
3223 DEBUG(0, ("Unable to copy service - source not found: %s\n", pszParmValue));
3227 free_service(&serviceTemp);
3231 /***************************************************************************
3232 Handle idmap/non unix account uid and gid allocation parameters. The format of these
3237 idmap uid = 1000-1999
3240 We only do simple parsing checks here. The strings are parsed into useful
3241 structures in the idmap daemon code.
3243 ***************************************************************************/
3245 /* Some lp_ routines to return idmap [ug]id information */
3247 static uid_t idmap_uid_low, idmap_uid_high;
3248 static gid_t idmap_gid_low, idmap_gid_high;
3250 BOOL lp_idmap_uid(uid_t *low, uid_t *high)
3252 if (idmap_uid_low == 0 || idmap_uid_high == 0)
3256 *low = idmap_uid_low;
3259 *high = idmap_uid_high;
3264 BOOL lp_idmap_gid(gid_t *low, gid_t *high)
3266 if (idmap_gid_low == 0 || idmap_gid_high == 0)
3270 *low = idmap_gid_low;
3273 *high = idmap_gid_high;
3278 /* Do some simple checks on "idmap [ug]id" parameter values */
3280 static BOOL handle_idmap_uid(int snum, const char *pszParmValue, char **ptr)
3284 if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3289 string_set(ptr, pszParmValue);
3291 idmap_uid_low = low;
3292 idmap_uid_high = high;
3297 static BOOL handle_idmap_gid(int snum, const char *pszParmValue, char **ptr)
3301 if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3306 string_set(ptr, pszParmValue);
3308 idmap_gid_low = low;
3309 idmap_gid_high = high;
3314 /***************************************************************************
3315 Handle the DEBUG level list.
3316 ***************************************************************************/
3318 static BOOL handle_debug_list( int snum, const char *pszParmValueIn, char **ptr )
3320 pstring pszParmValue;
3322 pstrcpy(pszParmValue, pszParmValueIn);
3323 string_set(ptr, pszParmValueIn);
3324 return debug_parse_levels( pszParmValue );
3327 /***************************************************************************
3328 Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
3329 ***************************************************************************/
3331 static const char *append_ldap_suffix( const char *str )
3333 const char *suffix_string;
3337 lp_talloc = talloc_init("lp_talloc");
3339 suffix_string = talloc_asprintf( lp_talloc, "%s,%s", str, Globals.szLdapSuffix );
3340 if ( !suffix_string ) {
3341 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
3345 return suffix_string;
3348 const char *lp_ldap_machine_suffix(void)
3350 if (Globals.szLdapMachineSuffix[0])
3351 return append_ldap_suffix(Globals.szLdapMachineSuffix);
3353 return lp_string(Globals.szLdapSuffix);
3356 const char *lp_ldap_user_suffix(void)
3358 if (Globals.szLdapUserSuffix[0])
3359 return append_ldap_suffix(Globals.szLdapUserSuffix);
3361 return lp_string(Globals.szLdapSuffix);
3364 const char *lp_ldap_group_suffix(void)
3366 if (Globals.szLdapGroupSuffix[0])
3367 return append_ldap_suffix(Globals.szLdapGroupSuffix);
3369 return lp_string(Globals.szLdapSuffix);
3372 const char *lp_ldap_idmap_suffix(void)
3374 if (Globals.szLdapIdmapSuffix[0])
3375 return append_ldap_suffix(Globals.szLdapIdmapSuffix);
3377 return lp_string(Globals.szLdapSuffix);
3380 /****************************************************************************
3381 set the value for a P_ENUM
3382 ***************************************************************************/
3384 static void lp_set_enum_parm( struct parm_struct *parm, const char *pszParmValue,
3389 for (i = 0; parm->enum_list[i].name; i++) {
3390 if ( strequal(pszParmValue, parm->enum_list[i].name)) {
3391 *ptr = parm->enum_list[i].value;
3397 /***************************************************************************
3398 ***************************************************************************/
3400 static BOOL handle_printing(int snum, const char *pszParmValue, char **ptr)
3402 static int parm_num = -1;
3405 if ( parm_num == -1 )
3406 parm_num = map_parameter( "printing" );
3408 lp_set_enum_parm( &parm_table[parm_num], pszParmValue, (int*)ptr );
3413 s = ServicePtrs[snum];
3415 init_printer_values( s );
3421 /***************************************************************************
3422 Initialise a copymap.
3423 ***************************************************************************/
3425 static void init_copymap(service * pservice)
3428 SAFE_FREE(pservice->copymap);
3429 pservice->copymap = SMB_MALLOC_ARRAY(BOOL,NUMPARAMETERS);
3430 if (!pservice->copymap)
3432 ("Couldn't allocate copymap!! (size %d)\n",
3433 (int)NUMPARAMETERS));
3435 for (i = 0; i < NUMPARAMETERS; i++)
3436 pservice->copymap[i] = True;
3439 /***************************************************************************
3440 Return the local pointer to a parameter given the service number and the
3441 pointer into the default structure.
3442 ***************************************************************************/
3444 void *lp_local_ptr(int snum, void *ptr)
3446 return (void *)(((char *)ServicePtrs[snum]) + PTR_DIFF(ptr, &sDefault));
3449 /***************************************************************************
3450 Process a parameter for a particular service number. If snum < 0
3451 then assume we are in the globals.
3452 ***************************************************************************/
3454 BOOL lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
3456 int parmnum, i, slen;
3457 void *parm_ptr = NULL; /* where we are going to store the result */
3458 void *def_ptr = NULL;
3461 param_opt_struct *paramo, *data;
3464 parmnum = map_parameter(pszParmName);
3467 if ((sep=strchr(pszParmName, ':')) != NULL) {
3469 ZERO_STRUCT(param_key);
3470 pstr_sprintf(param_key, "%s:", pszParmName);
3471 slen = strlen(param_key);
3472 pstrcat(param_key, sep+1);
3473 trim_char(param_key+slen, ' ', ' ');
3475 data = (snum < 0) ? Globals.param_opt :
3476 ServicePtrs[snum]->param_opt;
3477 /* Traverse destination */
3479 /* If we already have same option, override it */
3480 if (strcmp(data->key, param_key) == 0) {
3481 string_free(&data->value);
3482 str_list_free(&data->list);
3483 data->value = SMB_STRDUP(pszParmValue);
3490 paramo = SMB_XMALLOC_P(param_opt_struct);
3491 paramo->key = SMB_STRDUP(param_key);
3492 paramo->value = SMB_STRDUP(pszParmValue);
3493 paramo->list = NULL;
3495 DLIST_ADD(Globals.param_opt, paramo);
3497 DLIST_ADD(ServicePtrs[snum]->param_opt, paramo);
3504 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName));
3508 if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
3509 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
3513 def_ptr = parm_table[parmnum].ptr;
3515 /* we might point at a service, the default service or a global */
3519 if (parm_table[parmnum].p_class == P_GLOBAL) {
3521 ("Global parameter %s found in service section!\n",
3526 ((char *)ServicePtrs[snum]) + PTR_DIFF(def_ptr,
3531 if (!ServicePtrs[snum]->copymap)
3532 init_copymap(ServicePtrs[snum]);
3534 /* this handles the aliases - set the copymap for other entries with
3535 the same data pointer */
3536 for (i = 0; parm_table[i].label; i++)
3537 if (parm_table[i].ptr == parm_table[parmnum].ptr)
3538 ServicePtrs[snum]->copymap[i] = False;
3541 /* if it is a special case then go ahead */
3542 if (parm_table[parmnum].special) {
3543 parm_table[parmnum].special(snum, pszParmValue, (char **)parm_ptr);
3547 /* now switch on the type of variable it is */
3548 switch (parm_table[parmnum].type)
3551 *(BOOL *)parm_ptr = lp_bool(pszParmValue);
3555 *(BOOL *)parm_ptr = !lp_bool(pszParmValue);
3559 *(int *)parm_ptr = lp_int(pszParmValue);
3563 *(char *)parm_ptr = *pszParmValue;
3567 i = sscanf(pszParmValue, "%o", (int *)parm_ptr);
3569 DEBUG ( 0, ("Invalid octal number %s\n", pszParmName ));
3574 str_list_free((char ***)parm_ptr);
3575 *(char ***)parm_ptr = str_list_make(pszParmValue, NULL);
3579 string_set((char **)parm_ptr, pszParmValue);
3583 string_set((char **)parm_ptr, pszParmValue);
3584 strupper_m(*(char **)parm_ptr);
3588 pstrcpy((char *)parm_ptr, pszParmValue);
3592 pstrcpy((char *)parm_ptr, pszParmValue);
3593 strupper_m((char *)parm_ptr);
3597 lp_set_enum_parm( &parm_table[parmnum], pszParmValue, (int*)parm_ptr );
3606 /***************************************************************************
3607 Process a parameter.
3608 ***************************************************************************/
3610 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue)
3612 if (!bInGlobalSection && bGlobalOnly)
3615 DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
3617 return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
3618 pszParmName, pszParmValue));
3621 /***************************************************************************
3622 Print a parameter of the specified type.
3623 ***************************************************************************/
3625 static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
3631 for (i = 0; p->enum_list[i].name; i++) {
3632 if (*(int *)ptr == p->enum_list[i].value) {
3634 p->enum_list[i].name);
3641 fprintf(f, "%s", BOOLSTR(*(BOOL *)ptr));
3645 fprintf(f, "%s", BOOLSTR(!*(BOOL *)ptr));
3649 fprintf(f, "%d", *(int *)ptr);
3653 fprintf(f, "%c", *(char *)ptr);
3657 fprintf(f, "%s", octal_string(*(int *)ptr));
3661 if ((char ***)ptr && *(char ***)ptr) {
3662 char **list = *(char ***)ptr;
3664 for (; *list; list++) {
3665 /* surround strings with whitespace in double quotes */
3666 if ( strchr_m( *list, ' ' ) )
3667 fprintf(f, "\"%s\"%s", *list, ((*(list+1))?", ":""));
3669 fprintf(f, "%s%s", *list, ((*(list+1))?", ":""));
3677 fprintf(f, "%s", (char *)ptr);
3683 if (*(char **)ptr) {
3684 fprintf(f, "%s", *(char **)ptr);
3692 /***************************************************************************
3693 Check if two parameters are equal.
3694 ***************************************************************************/
3696 static BOOL equal_parameter(parm_type type, void *ptr1, void *ptr2)
3701 return (*((BOOL *)ptr1) == *((BOOL *)ptr2));
3706 return (*((int *)ptr1) == *((int *)ptr2));
3709 return (*((char *)ptr1) == *((char *)ptr2));
3712 return str_list_compare(*(char ***)ptr1, *(char ***)ptr2);
3717 char *p1 = (char *)ptr1, *p2 = (char *)ptr2;
3722 return (p1 == p2 || strequal(p1, p2));
3727 char *p1 = *(char **)ptr1, *p2 = *(char **)ptr2;
3732 return (p1 == p2 || strequal(p1, p2));
3740 /***************************************************************************
3741 Initialize any local varients in the sDefault table.
3742 ***************************************************************************/
3744 void init_locals(void)
3749 /***************************************************************************
3750 Process a new section (service). At this stage all sections are services.
3751 Later we'll have special sections that permit server parameters to be set.
3752 Returns True on success, False on failure.
3753 ***************************************************************************/
3755 static BOOL do_section(const char *pszSectionName)
3758 BOOL isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
3759 (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
3762 /* if we were in a global section then do the local inits */
3763 if (bInGlobalSection && !isglobal)
3766 /* if we've just struck a global section, note the fact. */
3767 bInGlobalSection = isglobal;
3769 /* check for multiple global sections */
3770 if (bInGlobalSection) {
3771 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName));
3775 if (!bInGlobalSection && bGlobalOnly)
3778 /* if we have a current service, tidy it up before moving on */
3781 if (iServiceIndex >= 0)
3782 bRetval = service_ok(iServiceIndex);
3784 /* if all is still well, move to the next record in the services array */
3786 /* We put this here to avoid an odd message order if messages are */
3787 /* issued by the post-processing of a previous section. */
3788 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName));
3790 if ((iServiceIndex = add_a_service(&sDefault, pszSectionName))
3792 DEBUG(0, ("Failed to add a new service\n"));
3801 /***************************************************************************
3802 Determine if a partcular base parameter is currentl set to the default value.
3803 ***************************************************************************/
3805 static BOOL is_default(int i)
3807 if (!defaults_saved)
3809 switch (parm_table[i].type) {
3811 return str_list_compare (parm_table[i].def.lvalue,
3812 *(char ***)parm_table[i].ptr);
3815 return strequal(parm_table[i].def.svalue,
3816 *(char **)parm_table[i].ptr);
3819 return strequal(parm_table[i].def.svalue,
3820 (char *)parm_table[i].ptr);
3823 return parm_table[i].def.bvalue ==
3824 *(BOOL *)parm_table[i].ptr;
3826 return parm_table[i].def.cvalue ==
3827 *(char *)parm_table[i].ptr;
3831 return parm_table[i].def.ivalue ==
3832 *(int *)parm_table[i].ptr;
3839 /***************************************************************************
3840 Display the contents of the global structure.
3841 ***************************************************************************/
3843 static void dump_globals(FILE *f)
3846 param_opt_struct *data;
3848 fprintf(f, "[global]\n");
3850 for (i = 0; parm_table[i].label; i++)
3851 if (parm_table[i].p_class == P_GLOBAL &&
3852 parm_table[i].ptr &&
3853 (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr))) {
3854 if (defaults_saved && is_default(i))
3856 fprintf(f, "\t%s = ", parm_table[i].label);
3857 print_parameter(&parm_table[i], parm_table[i].ptr, f);
3860 if (Globals.param_opt != NULL) {
3861 data = Globals.param_opt;
3863 fprintf(f, "\t%s = %s\n", data->key, data->value);
3870 /***************************************************************************
3871 Return True if a local parameter is currently set to the global default.
3872 ***************************************************************************/
3874 BOOL lp_is_default(int snum, struct parm_struct *parm)
3876 int pdiff = PTR_DIFF(parm->ptr, &sDefault);
3878 return equal_parameter(parm->type,
3879 ((char *)ServicePtrs[snum]) + pdiff,
3880 ((char *)&sDefault) + pdiff);
3883 /***************************************************************************
3884 Display the contents of a single services record.
3885 ***************************************************************************/
3887 static void dump_a_service(service * pService, FILE * f)
3890 param_opt_struct *data;
3892 if (pService != &sDefault)
3893 fprintf(f, "[%s]\n", pService->szService);
3895 for (i = 0; parm_table[i].label; i++) {
3897 if (parm_table[i].p_class == P_LOCAL &&
3898 parm_table[i].ptr &&
3899 (*parm_table[i].label != '-') &&
3900 (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3903 int pdiff = PTR_DIFF(parm_table[i].ptr, &sDefault);
3905 if (pService == &sDefault) {
3906 if (defaults_saved && is_default(i))
3909 if (equal_parameter(parm_table[i].type,
3910 ((char *)pService) +
3912 ((char *)&sDefault) +
3917 fprintf(f, "\t%s = ", parm_table[i].label);
3918 print_parameter(&parm_table[i],
3919 ((char *)pService) + pdiff, f);
3924 if (pService->param_opt != NULL) {
3925 data = pService->param_opt;
3927 fprintf(f, "\t%s = %s\n", data->key, data->value);
3933 /***************************************************************************
3934 Display the contents of a parameter of a single services record.
3935 ***************************************************************************/
3937 BOOL dump_a_parameter(int snum, char *parm_name, FILE * f, BOOL isGlobal)
3940 BOOL result = False;
3943 fstring local_parm_name;
3945 const char *parm_opt_value;
3947 /* check for parametrical option */
3948 fstrcpy( local_parm_name, parm_name);
3949 parm_opt = strchr( local_parm_name, ':');
3954 if (strlen(parm_opt)) {
3955 parm_opt_value = lp_parm_const_string( snum,
3956 local_parm_name, parm_opt, NULL);
3957 if (parm_opt_value) {
3958 printf( "%s\n", parm_opt_value);
3965 /* check for a key and print the value */
3972 for (i = 0; parm_table[i].label; i++) {
3973 if (strwicmp(parm_table[i].label, parm_name) == 0 &&
3974 (parm_table[i].p_class == p_class || parm_table[i].flags & flag) &&
3975 parm_table[i].ptr &&
3976 (*parm_table[i].label != '-') &&
3977 (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3982 ptr = parm_table[i].ptr;
3984 service * pService = ServicePtrs[snum];
3985 ptr = ((char *)pService) +
3986 PTR_DIFF(parm_table[i].ptr, &sDefault);
3989 print_parameter(&parm_table[i],
4000 /***************************************************************************
4001 Return info about the next service in a service. snum==GLOBAL_SECTION_SNUM gives the globals.
4002 Return NULL when out of parameters.
4003 ***************************************************************************/
4005 struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
4008 /* do the globals */
4009 for (; parm_table[*i].label; (*i)++) {
4010 if (parm_table[*i].p_class == P_SEPARATOR)
4011 return &parm_table[(*i)++];
4013 if (!parm_table[*i].ptr
4014 || (*parm_table[*i].label == '-'))
4018 && (parm_table[*i].ptr ==
4019 parm_table[(*i) - 1].ptr))
4022 return &parm_table[(*i)++];
4025 service *pService = ServicePtrs[snum];
4027 for (; parm_table[*i].label; (*i)++) {
4028 if (parm_table[*i].p_class == P_SEPARATOR)
4029 return &parm_table[(*i)++];
4031 if (parm_table[*i].p_class == P_LOCAL &&
4032 parm_table[*i].ptr &&
4033 (*parm_table[*i].label != '-') &&
4035 (parm_table[*i].ptr !=
4036 parm_table[(*i) - 1].ptr)))
4039 PTR_DIFF(parm_table[*i].ptr,
4042 if (allparameters ||
4043 !equal_parameter(parm_table[*i].type,
4044 ((char *)pService) +
4046 ((char *)&sDefault) +
4049 return &parm_table[(*i)++];
4060 /***************************************************************************
4061 Display the contents of a single copy structure.
4062 ***************************************************************************/
4063 static void dump_copy_map(BOOL *pcopymap)
4069 printf("\n\tNon-Copied parameters:\n");
4071 for (i = 0; parm_table[i].label; i++)
4072 if (parm_table[i].p_class == P_LOCAL &&
4073 parm_table[i].ptr && !pcopymap[i] &&
4074 (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
4076 printf("\t\t%s\n", parm_table[i].label);
4081 /***************************************************************************
4082 Return TRUE if the passed service number is within range.
4083 ***************************************************************************/
4085 BOOL lp_snum_ok(int iService)
4087 return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
4090 /***************************************************************************
4091 Auto-load some home services.
4092 ***************************************************************************/
4094 static void lp_add_auto_services(char *str)
4103 s = SMB_STRDUP(str);
4107 homes = lp_servicenumber(HOMES_NAME);
4109 for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP)) {
4110 char *home = get_user_home_dir(p);
4112 if (lp_servicenumber(p) >= 0)
4115 if (home && homes >= 0)
4116 lp_add_home(p, homes, p, home);
4121 /***************************************************************************
4122 Auto-load one printer.
4123 ***************************************************************************/
4125 void lp_add_one_printer(char *name, char *comment)
4127 int printers = lp_servicenumber(PRINTERS_NAME);
4130 if (lp_servicenumber(name) < 0) {
4131 lp_add_printer(name, printers);
4132 if ((i = lp_servicenumber(name)) >= 0) {
4133 string_set(&ServicePtrs[i]->comment, comment);
4134 ServicePtrs[i]->autoloaded = True;
4139 /***************************************************************************
4140 Have we loaded a services file yet?
4141 ***************************************************************************/
4143 BOOL lp_loaded(void)
4148 /***************************************************************************
4149 Unload unused services.
4150 ***************************************************************************/
4152 void lp_killunused(BOOL (*snumused) (int))
4155 for (i = 0; i < iNumServices; i++) {
4159 /* don't kill autoloaded or usershare services */
4160 if ( ServicePtrs[i]->autoloaded ||
4161 ServicePtrs[i]->usershare == USERSHARE_VALID) {
4165 if (!snumused || !snumused(i)) {
4166 free_service_byindex(i);
4171 /***************************************************************************
4173 ***************************************************************************/
4175 void lp_killservice(int iServiceIn)
4177 if (VALID(iServiceIn)) {
4178 free_service_byindex(iServiceIn);
4182 /***************************************************************************
4183 Save the curent values of all global and sDefault parameters into the
4184 defaults union. This allows swat and testparm to show only the
4185 changed (ie. non-default) parameters.
4186 ***************************************************************************/
4188 static void lp_save_defaults(void)
4191 for (i = 0; parm_table[i].label; i++) {
4192 if (i > 0 && parm_table[i].ptr == parm_table[i - 1].ptr)
4194 switch (parm_table[i].type) {
4196 str_list_copy(&(parm_table[i].def.lvalue),
4197 *(const char ***)parm_table[i].ptr);
4201 if (parm_table[i].ptr) {
4202 parm_table[i].def.svalue = SMB_STRDUP(*(char **)parm_table[i].ptr);
4204 parm_table[i].def.svalue = NULL;
4209 if (parm_table[i].ptr) {
4210 parm_table[i].def.svalue = SMB_STRDUP((char *)parm_table[i].ptr);
4212 parm_table[i].def.svalue = NULL;
4217 parm_table[i].def.bvalue =
4218 *(BOOL *)parm_table[i].ptr;
4221 parm_table[i].def.cvalue =
4222 *(char *)parm_table[i].ptr;
4227 parm_table[i].def.ivalue =
4228 *(int *)parm_table[i].ptr;
4234 defaults_saved = True;
4237 /*******************************************************************
4238 Set the server type we will announce as via nmbd.
4239 ********************************************************************/
4241 static const struct srv_role_tab {
4243 const char *role_str;
4244 } srv_role_tab [] = {
4245 { ROLE_STANDALONE, "ROLE_STANDALONE" },
4246 { ROLE_DOMAIN_MEMBER, "ROLE_DOMAIN_MEMBER" },
4247 { ROLE_DOMAIN_BDC, "ROLE_DOMAIN_BDC" },
4248 { ROLE_DOMAIN_PDC, "ROLE_DOMAIN_PDC" },
4252 const char* server_role_str(uint32 role)
4255 for (i=0; srv_role_tab[i].role_str; i++) {
4256 if (role == srv_role_tab[i].role) {
4257 return srv_role_tab[i].role_str;
4263 static void set_server_role(void)
4265 server_role = ROLE_STANDALONE;
4267 switch (lp_security()) {
4269 if (lp_domain_logons())
4270 DEBUG(0, ("Server's Role (logon server) conflicts with share-level security\n"));
4273 if (lp_domain_logons())
4274 DEBUG(0, ("Server's Role (logon server) conflicts with server-level security\n"));
4275 /* this used to be considered ROLE_DOMAIN_MEMBER but that's just wrong */
4276 server_role = ROLE_STANDALONE;
4279 if (lp_domain_logons()) {
4280 DEBUG(1, ("Server's Role (logon server) NOT ADVISED with domain-level security\n"));
4281 server_role = ROLE_DOMAIN_BDC;
4284 server_role = ROLE_DOMAIN_MEMBER;
4287 if (lp_domain_logons()) {
4288 server_role = ROLE_DOMAIN_PDC;
4291 server_role = ROLE_DOMAIN_MEMBER;
4294 if (lp_domain_logons()) {
4296 if (Globals.bDomainMaster) /* auto or yes */
4297 server_role = ROLE_DOMAIN_PDC;
4299 server_role = ROLE_DOMAIN_BDC;
4303 DEBUG(0, ("Server's Role undefined due to unknown security mode\n"));
4307 DEBUG(10, ("set_server_role: role = %s\n", server_role_str(server_role)));
4310 /***********************************************************
4311 If we should send plaintext/LANMAN passwords in the clinet
4312 ************************************************************/
4314 static void set_allowed_client_auth(void)
4316 if (Globals.bClientNTLMv2Auth) {
4317 Globals.bClientLanManAuth = False;
4319 if (!Globals.bClientLanManAuth) {
4320 Globals.bClientPlaintextAuth = False;
4324 /***************************************************************************
4326 The following code allows smbd to read a user defined share file.
4327 Yes, this is my intent. Yes, I'm comfortable with that...
4329 THE FOLLOWING IS SECURITY CRITICAL CODE.
4331 It washes your clothes, it cleans your house, it guards you while you sleep...
4332 Do not f%^k with it....
4333 ***************************************************************************/
4335 #define MAX_USERSHARE_FILE_SIZE (10*1024)
4337 /***************************************************************************
4338 Check allowed stat state of a usershare file.
4339 Ensure we print out who is dicking with us so the admin can
4340 get their sorry ass fired.
4341 ***************************************************************************/
4343 static BOOL check_usershare_stat(const char *fname, SMB_STRUCT_STAT *psbuf)
4345 if (!S_ISREG(psbuf->st_mode)) {
4346 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4347 "not a regular file\n",
4348 fname, (unsigned int)psbuf->st_uid ));
4352 /* Ensure this doesn't have the other write bit set. */
4353 if (psbuf->st_mode & S_IWOTH) {
4354 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
4355 "public write. Refusing to allow as a usershare file.\n",
4356 fname, (unsigned int)psbuf->st_uid ));
4360 /* Should be 10k or less. */
4361 if (psbuf->st_size > MAX_USERSHARE_FILE_SIZE) {
4362 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4363 "too large (%u) to be a user share file.\n",
4364 fname, (unsigned int)psbuf->st_uid,
4365 (unsigned int)psbuf->st_size ));
4372 /***************************************************************************
4373 Parse the contents of a usershare file.
4374 ***************************************************************************/
4376 enum usershare_err parse_usershare_file(TALLOC_CTX *ctx,
4377 SMB_STRUCT_STAT *psbuf,
4378 const char *servicename,
4387 const char **prefixallowlist = lp_usershare_prefix_allow_list();
4388 const char **prefixdenylist = lp_usershare_prefix_deny_list();
4391 SMB_STRUCT_STAT sbuf;
4393 *pallow_guest = False;
4396 return USERSHARE_MALFORMED_FILE;
4399 if (strcmp(lines[0], "#VERSION 1") == 0) {
4401 } else if (strcmp(lines[0], "#VERSION 2") == 0) {
4404 return USERSHARE_MALFORMED_FILE;
4407 return USERSHARE_BAD_VERSION;
4410 if (strncmp(lines[1], "path=", 5) != 0) {
4411 return USERSHARE_MALFORMED_PATH;
4414 pstrcpy(sharepath, &lines[1][5]);
4415 trim_string(sharepath, " ", " ");
4417 if (strncmp(lines[2], "comment=", 8) != 0) {
4418 return USERSHARE_MALFORMED_COMMENT_DEF;
4421 pstrcpy(comment, &lines[2][8]);
4422 trim_string(comment, " ", " ");
4423 trim_char(comment, '"', '"');
4425 if (strncmp(lines[3], "usershare_acl=", 14) != 0) {
4426 return USERSHARE_MALFORMED_ACL_DEF;
4429 if (!parse_usershare_acl(ctx, &lines[3][14], ppsd)) {
4430 return USERSHARE_ACL_ERR;
4434 if (strncmp(lines[4], "guest_ok=", 9) != 0) {
4435 return USERSHARE_MALFORMED_ACL_DEF;
4437 if (lines[4][9] == 'y') {
4438 *pallow_guest = True;
4442 if (snum != -1 && (strcmp(sharepath, ServicePtrs[snum]->szPath) == 0)) {
4443 /* Path didn't change, no checks needed. */
4444 return USERSHARE_OK;
4447 /* The path *must* be absolute. */
4448 if (sharepath[0] != '/') {
4449 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
4450 servicename, sharepath));
4451 return USERSHARE_PATH_NOT_ABSOLUTE;
4454 /* If there is a usershare prefix deny list ensure one of these paths
4455 doesn't match the start of the user given path. */
4456 if (prefixdenylist) {
4458 for ( i=0; prefixdenylist[i]; i++ ) {
4459 DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
4460 servicename, i, prefixdenylist[i], sharepath ));
4461 if (memcmp( sharepath, prefixdenylist[i], strlen(prefixdenylist[i])) == 0) {
4462 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
4463 "usershare prefix deny list entries.\n",
4464 servicename, sharepath));
4465 return USERSHARE_PATH_IS_DENIED;
4470 /* If there is a usershare prefix allow list ensure one of these paths
4471 does match the start of the user given path. */
4473 if (prefixallowlist) {
4475 for ( i=0; prefixallowlist[i]; i++ ) {
4476 DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
4477 servicename, i, prefixallowlist[i], sharepath ));
4478 if (memcmp( sharepath, prefixallowlist[i], strlen(prefixallowlist[i])) == 0) {
4482 if (prefixallowlist[i] == NULL) {
4483 DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
4484 "usershare prefix allow list entries.\n",
4485 servicename, sharepath));
4486 return USERSHARE_PATH_NOT_ALLOWED;
4490 /* Ensure this is pointing to a directory. */
4491 dp = sys_opendir(sharepath);
4494 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4495 servicename, sharepath));
4496 return USERSHARE_PATH_NOT_DIRECTORY;
4499 /* Ensure the owner of the usershare file has permission to share
4502 if (sys_stat(sharepath, &sbuf) == -1) {
4503 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
4504 servicename, sharepath, strerror(errno) ));
4506 return USERSHARE_POSIX_ERR;
4511 if (!S_ISDIR(sbuf.st_mode)) {
4512 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4513 servicename, sharepath ));
4514 return USERSHARE_PATH_NOT_DIRECTORY;
4517 /* Check if sharing is restricted to owner-only. */
4518 /* psbuf is the stat of the usershare definition file,
4519 sbuf is the stat of the target directory to be shared. */
4521 if (lp_usershare_owner_only()) {
4522 /* root can share anything. */
4523 if ((psbuf->st_uid != 0) && (sbuf.st_uid != psbuf->st_uid)) {
4524 return USERSHARE_PATH_NOT_ALLOWED;
4528 return USERSHARE_OK;
4531 /***************************************************************************
4532 Deal with a usershare file.
4535 -1 - Bad name, invalid contents.
4536 - service name already existed and not a usershare, problem
4537 with permissions to share directory etc.
4538 ***************************************************************************/
4540 static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template)
4542 SMB_STRUCT_STAT sbuf;
4543 SMB_STRUCT_STAT lsbuf;
4547 fstring service_name;
4548 char **lines = NULL;
4552 TALLOC_CTX *ctx = NULL;
4553 SEC_DESC *psd = NULL;
4554 BOOL guest_ok = False;
4556 /* Ensure share name doesn't contain invalid characters. */
4557 if (!validate_net_name(file_name, INVALID_SHARENAME_CHARS, strlen(file_name))) {
4558 DEBUG(0,("process_usershare_file: share name %s contains "
4559 "invalid characters (any of %s)\n",
4560 file_name, INVALID_SHARENAME_CHARS ));
4564 fstrcpy(service_name, file_name);
4566 pstrcpy(fname, dir_name);
4567 pstrcat(fname, "/");
4568 pstrcat(fname, file_name);
4570 /* Minimize the race condition by doing an lstat before we
4571 open and fstat. Ensure this isn't a symlink link. */
4573 if (sys_lstat(fname, &lsbuf) != 0) {
4574 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
4575 fname, strerror(errno) ));
4579 /* This must be a regular file, not a symlink, directory or
4580 other strange filetype. */
4581 if (!check_usershare_stat(fname, &lsbuf)) {
4585 /* See if there is already a servicenum for this name. */
4586 /* tdb_fetch_int32 returns -1 if not found. */
4587 iService = (int)tdb_fetch_int32(ServiceHash, canonicalize_servicename(service_name) );
4589 if (iService != -1 && ServicePtrs[iService]->usershare_last_mod == lsbuf.st_mtime) {
4590 /* Nothing changed - Mark valid and return. */
4591 DEBUG(10,("process_usershare_file: service %s not changed.\n",
4593 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4597 /* Try and open the file read only - no symlinks allowed. */
4599 fd = sys_open(fname, O_RDONLY|O_NOFOLLOW, 0);
4601 fd = sys_open(fname, O_RDONLY, 0);
4605 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
4606 fname, strerror(errno) ));
4610 /* Now fstat to be *SURE* it's a regular file. */
4611 if (sys_fstat(fd, &sbuf) != 0) {
4613 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
4614 fname, strerror(errno) ));
4618 /* Is it the same dev/inode as was lstated ? */
4619 if (lsbuf.st_dev != sbuf.st_dev || lsbuf.st_ino != sbuf.st_ino) {
4621 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
4622 "Symlink spoofing going on ?\n", fname ));
4626 /* This must be a regular file, not a symlink, directory or
4627 other strange filetype. */
4628 if (!check_usershare_stat(fname, &sbuf)) {
4632 lines = fd_lines_load(fd, &numlines, MAX_USERSHARE_FILE_SIZE);
4635 if (lines == NULL) {
4636 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
4637 fname, (unsigned int)sbuf.st_uid ));
4641 /* Should we allow printers to be shared... ? */
4642 ctx = talloc_init("usershare_sd_xctx");
4644 file_lines_free(lines);
4648 if (parse_usershare_file(ctx, &sbuf, service_name,
4649 iService, lines, numlines, sharepath,
4650 comment, &psd, &guest_ok) != USERSHARE_OK) {
4651 talloc_destroy(ctx);
4652 file_lines_free(lines);
4656 file_lines_free(lines);
4658 /* Everything ok - add the service possibly using a template. */
4660 const service *sp = &sDefault;
4661 if (snum_template != -1) {
4662 sp = ServicePtrs[snum_template];
4665 if ((iService = add_a_service(sp, service_name)) < 0) {
4666 DEBUG(0, ("process_usershare_file: Failed to add "
4667 "new service %s\n", service_name));
4668 talloc_destroy(ctx);
4672 /* Read only is controlled by usershare ACL below. */
4673 ServicePtrs[iService]->bRead_only = False;
4676 /* Write the ACL of the new/modified share. */
4677 if (!set_share_security(service_name, psd)) {
4678 DEBUG(0, ("process_usershare_file: Failed to set share "
4679 "security for user share %s\n",
4681 lp_remove_service(iService);
4682 talloc_destroy(ctx);
4686 talloc_destroy(ctx);
4688 /* If from a template it may be marked invalid. */
4689 ServicePtrs[iService]->valid = True;
4691 /* Set the service as a valid usershare. */
4692 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4694 /* Set guest access. */
4695 if (lp_usershare_allow_guests()) {
4696 ServicePtrs[iService]->bGuest_ok = guest_ok;
4699 /* And note when it was loaded. */
4700 ServicePtrs[iService]->usershare_last_mod = sbuf.st_mtime;
4701 string_set(&ServicePtrs[iService]->szPath, sharepath);
4702 string_set(&ServicePtrs[iService]->comment, comment);
4707 /***************************************************************************
4708 Checks if a usershare entry has been modified since last load.
4709 ***************************************************************************/
4711 static BOOL usershare_exists(int iService, time_t *last_mod)
4713 SMB_STRUCT_STAT lsbuf;
4714 const char *usersharepath = Globals.szUsersharePath;
4717 pstrcpy(fname, usersharepath);
4718 pstrcat(fname, "/");
4719 pstrcat(fname, ServicePtrs[iService]->szService);
4721 if (sys_lstat(fname, &lsbuf) != 0) {
4725 if (!S_ISREG(lsbuf.st_mode)) {
4729 *last_mod = lsbuf.st_mtime;
4733 /***************************************************************************
4734 Load a usershare service by name. Returns a valid servicenumber or -1.
4735 ***************************************************************************/
4737 int load_usershare_service(const char *servicename)
4739 SMB_STRUCT_STAT sbuf;
4740 const char *usersharepath = Globals.szUsersharePath;
4741 int max_user_shares = Globals.iUsershareMaxShares;
4742 int snum_template = -1;
4744 if (*usersharepath == 0 || max_user_shares == 0) {
4748 if (sys_stat(usersharepath, &sbuf) != 0) {
4749 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
4750 usersharepath, strerror(errno) ));
4754 if (!S_ISDIR(sbuf.st_mode)) {
4755 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
4761 * This directory must be owned by root, and have the 't' bit set.
4762 * It also must not be writable by "other".
4766 if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4768 if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4770 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
4771 "or does not have the sticky bit 't' set or is writable by anyone.\n",
4776 /* Ensure the template share exists if it's set. */
4777 if (Globals.szUsershareTemplateShare[0]) {
4778 /* We can't use lp_servicenumber here as we are recommending that
4779 template shares have -valid=False set. */
4780 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4781 if (ServicePtrs[snum_template]->szService &&
4782 strequal(ServicePtrs[snum_template]->szService,
4783 Globals.szUsershareTemplateShare)) {
4788 if (snum_template == -1) {
4789 DEBUG(0,("load_usershare_service: usershare template share %s "
4790 "does not exist.\n",
4791 Globals.szUsershareTemplateShare ));
4796 return process_usershare_file(usersharepath, servicename, snum_template);
4799 /***************************************************************************
4800 Load all user defined shares from the user share directory.
4801 We only do this if we're enumerating the share list.
4802 This is the function that can delete usershares that have
4804 ***************************************************************************/
4806 int load_usershare_shares(void)
4809 SMB_STRUCT_STAT sbuf;
4810 SMB_STRUCT_DIRENT *de;
4811 int num_usershares = 0;
4812 int max_user_shares = Globals.iUsershareMaxShares;
4813 unsigned int num_dir_entries, num_bad_dir_entries, num_tmp_dir_entries;
4814 unsigned int allowed_bad_entries = ((2*max_user_shares)/10);
4815 unsigned int allowed_tmp_entries = ((2*max_user_shares)/10);
4817 int snum_template = -1;
4818 const char *usersharepath = Globals.szUsersharePath;
4819 int ret = lp_numservices();
4821 if (max_user_shares == 0 || *usersharepath == '\0') {
4822 return lp_numservices();
4825 if (sys_stat(usersharepath, &sbuf) != 0) {
4826 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
4827 usersharepath, strerror(errno) ));
4832 * This directory must be owned by root, and have the 't' bit set.
4833 * It also must not be writable by "other".
4837 if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4839 if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4841 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
4842 "or does not have the sticky bit 't' set or is writable by anyone.\n",
4847 /* Ensure the template share exists if it's set. */
4848 if (Globals.szUsershareTemplateShare[0]) {
4849 /* We can't use lp_servicenumber here as we are recommending that
4850 template shares have -valid=False set. */
4851 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4852 if (ServicePtrs[snum_template]->szService &&
4853 strequal(ServicePtrs[snum_template]->szService,
4854 Globals.szUsershareTemplateShare)) {
4859 if (snum_template == -1) {
4860 DEBUG(0,("load_usershare_shares: usershare template share %s "
4861 "does not exist.\n",
4862 Globals.szUsershareTemplateShare ));
4867 /* Mark all existing usershares as pending delete. */
4868 for (iService = iNumServices - 1; iService >= 0; iService--) {
4869 if (VALID(iService) && ServicePtrs[iService]->usershare) {
4870 ServicePtrs[iService]->usershare = USERSHARE_PENDING_DELETE;
4874 dp = sys_opendir(usersharepath);
4876 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
4877 usersharepath, strerror(errno) ));
4881 for (num_dir_entries = 0, num_bad_dir_entries = 0, num_tmp_dir_entries = 0;
4882 (de = sys_readdir(dp));
4883 num_dir_entries++ ) {
4885 const char *n = de->d_name;
4887 /* Ignore . and .. */
4889 if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
4895 /* Temporary file used when creating a share. */
4896 num_tmp_dir_entries++;
4899 /* Allow 20% tmp entries. */
4900 if (num_tmp_dir_entries > allowed_tmp_entries) {
4901 DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
4902 "in directory %s\n",
4903 num_tmp_dir_entries, usersharepath));
4907 r = process_usershare_file(usersharepath, n, snum_template);
4909 /* Update the services count. */
4911 if (num_usershares >= max_user_shares) {
4912 DEBUG(0,("load_usershare_shares: max user shares reached "
4913 "on file %s in directory %s\n",
4914 n, usersharepath ));
4917 } else if (r == -1) {
4918 num_bad_dir_entries++;
4921 /* Allow 20% bad entries. */
4922 if (num_bad_dir_entries > allowed_bad_entries) {
4923 DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
4924 "in directory %s\n",
4925 num_bad_dir_entries, usersharepath));
4929 /* Allow 20% bad entries. */
4930 if (num_dir_entries > max_user_shares + allowed_bad_entries) {
4931 DEBUG(0,("load_usershare_shares: too many total entries (%u) "
4932 "in directory %s\n",
4933 num_dir_entries, usersharepath));
4940 /* Sweep through and delete any non-refreshed usershares that are
4941 not currently in use. */
4942 for (iService = iNumServices - 1; iService >= 0; iService--) {
4943 if (VALID(iService) && (ServicePtrs[iService]->usershare == USERSHARE_PENDING_DELETE)) {
4944 if (conn_snum_used(iService)) {
4947 /* Remove from the share ACL db. */
4948 DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
4949 lp_servicename(iService) ));
4950 delete_share_security(snum2params_static(iService));
4951 free_service_byindex(iService);
4955 return lp_numservices();
4958 /********************************************************
4959 Destroy global resources allocated in this file
4960 ********************************************************/
4962 void gfree_loadparm(void)
4964 struct file_lists *f;
4965 struct file_lists *next;
4970 /* Free the file lists */
4975 SAFE_FREE( f->name );
4976 SAFE_FREE( f->subfname );
4981 /* Free resources allocated to services */
4983 for ( i = 0; i < iNumServices; i++ ) {
4985 free_service_byindex(i);
4989 SAFE_FREE( ServicePtrs );
4992 /* Now release all resources allocated to global
4993 parameters and the default service */
4995 for (i = 0; parm_table[i].label; i++)
4997 if ( parm_table[i].type == P_STRING
4998 || parm_table[i].type == P_USTRING )
5000 string_free( (char**)parm_table[i].ptr );
5002 else if (parm_table[i].type == P_LIST) {
5003 str_list_free( (char***)parm_table[i].ptr );
5008 /***************************************************************************
5009 Load the services array from the services file. Return True on success,
5011 ***************************************************************************/
5013 BOOL lp_load(const char *pszFname,
5017 BOOL initialize_globals)
5021 param_opt_struct *data, *pdata;
5023 pstrcpy(n2, pszFname);
5025 standard_sub_basic( get_current_username(), current_user_info.domain,
5028 add_to_file_list(pszFname, n2);
5032 DEBUG(3, ("lp_load: refreshing parameters\n"));
5034 bInGlobalSection = True;
5035 bGlobalOnly = global_only;
5037 init_globals(! initialize_globals);
5040 if (save_defaults) {
5045 if (Globals.param_opt != NULL) {
5046 data = Globals.param_opt;
5048 string_free(&data->key);
5049 string_free(&data->value);
5050 str_list_free(&data->list);
5055 Globals.param_opt = NULL;
5058 /* We get sections first, so have to start 'behind' to make up */
5060 bRetval = pm_process(n2, do_section, do_parameter);
5062 /* finish up the last section */
5063 DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
5065 if (iServiceIndex >= 0)
5066 bRetval = service_ok(iServiceIndex);
5068 lp_add_auto_services(lp_auto_services());
5071 /* When 'restrict anonymous = 2' guest connections to ipc$
5073 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
5074 if ( lp_enable_asu_support() )
5075 lp_add_ipc("ADMIN$", False);
5079 set_default_server_announce_type();
5080 set_allowed_client_auth();
5084 /* Now we check bWINSsupport and set szWINSserver to 127.0.0.1 */
5085 /* if bWINSsupport is true and we are in the client */
5086 if (in_client && Globals.bWINSsupport) {
5087 lp_do_parameter(GLOBAL_SECTION_SNUM, "wins server", "127.0.0.1");
5095 /***************************************************************************
5096 Reset the max number of services.
5097 ***************************************************************************/
5099 void lp_resetnumservices(void)
5104 /***************************************************************************
5105 Return the max number of services.
5106 ***************************************************************************/
5108 int lp_numservices(void)
5110 return (iNumServices);
5113 /***************************************************************************
5114 Display the contents of the services array in human-readable form.
5115 ***************************************************************************/
5117 void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint)
5122 defaults_saved = False;
5126 dump_a_service(&sDefault, f);
5128 for (iService = 0; iService < maxtoprint; iService++) {
5130 lp_dump_one(f, show_defaults, iService);
5134 /***************************************************************************
5135 Display the contents of one service in human-readable form.
5136 ***************************************************************************/
5138 void lp_dump_one(FILE * f, BOOL show_defaults, int snum)
5141 if (ServicePtrs[snum]->szService[0] == '\0')
5143 dump_a_service(ServicePtrs[snum], f);
5147 /***************************************************************************
5148 Return the number of the service with the given name, or -1 if it doesn't
5149 exist. Note that this is a DIFFERENT ANIMAL from the internal function
5150 getservicebyname()! This works ONLY if all services have been loaded, and
5151 does not copy the found service.
5152 ***************************************************************************/
5154 int lp_servicenumber(const char *pszServiceName)
5157 fstring serviceName;
5159 if (!pszServiceName) {
5160 return GLOBAL_SECTION_SNUM;
5163 for (iService = iNumServices - 1; iService >= 0; iService--) {
5164 if (VALID(iService) && ServicePtrs[iService]->szService) {
5166 * The substitution here is used to support %U is
5169 fstrcpy(serviceName, ServicePtrs[iService]->szService);
5170 standard_sub_basic(get_current_username(),
5171 current_user_info.domain,
5172 serviceName,sizeof(serviceName));
5173 if (strequal(serviceName, pszServiceName)) {
5179 if (iService >= 0 && ServicePtrs[iService]->usershare == USERSHARE_VALID) {
5182 if (!usershare_exists(iService, &last_mod)) {
5183 /* Remove the share security tdb entry for it. */
5184 delete_share_security(snum2params_static(iService));
5185 /* Remove it from the array. */
5186 free_service_byindex(iService);
5187 /* Doesn't exist anymore. */
5188 return GLOBAL_SECTION_SNUM;
5191 /* Has it been modified ? If so delete and reload. */
5192 if (ServicePtrs[iService]->usershare_last_mod < last_mod) {
5193 /* Remove it from the array. */
5194 free_service_byindex(iService);
5195 /* and now reload it. */
5196 iService = load_usershare_service(pszServiceName);
5201 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
5202 return GLOBAL_SECTION_SNUM;
5208 BOOL share_defined(const char *service_name)
5210 return (lp_servicenumber(service_name) != -1);
5213 struct share_params *get_share_params(TALLOC_CTX *mem_ctx,
5214 const char *sharename)
5216 struct share_params *result;
5220 if (!(sname = SMB_STRDUP(sharename))) {
5224 snum = find_service(sname);
5231 if (!(result = TALLOC_P(mem_ctx, struct share_params))) {
5232 DEBUG(0, ("talloc failed\n"));
5236 result->service = snum;
5240 struct share_iterator *share_list_all(TALLOC_CTX *mem_ctx)
5242 struct share_iterator *result;
5244 if (!(result = TALLOC_P(mem_ctx, struct share_iterator))) {
5245 DEBUG(0, ("talloc failed\n"));
5249 result->next_id = 0;
5253 struct share_params *next_share(struct share_iterator *list)
5255 struct share_params *result;
5257 while (!lp_snum_ok(list->next_id) &&
5258 (list->next_id < lp_numservices())) {
5262 if (list->next_id >= lp_numservices()) {
5266 if (!(result = TALLOC_P(list, struct share_params))) {
5267 DEBUG(0, ("talloc failed\n"));
5271 result->service = list->next_id;
5276 struct share_params *next_printer(struct share_iterator *list)
5278 struct share_params *result;
5280 while ((result = next_share(list)) != NULL) {
5281 if (lp_print_ok(result->service)) {
5289 * This is a hack for a transition period until we transformed all code from
5290 * service numbers to struct share_params.
5293 struct share_params *snum2params_static(int snum)
5295 static struct share_params result;
5296 result.service = snum;
5300 /*******************************************************************
5301 A useful volume label function.
5302 ********************************************************************/
5304 char *volume_label(int snum)
5306 char *ret = lp_volume(snum);
5308 return lp_servicename(snum);
5313 /*******************************************************************
5314 Set the server type we will announce as via nmbd.
5315 ********************************************************************/
5317 static void set_default_server_announce_type(void)
5319 default_server_announce = 0;
5320 default_server_announce |= SV_TYPE_WORKSTATION;
5321 default_server_announce |= SV_TYPE_SERVER;
5322 default_server_announce |= SV_TYPE_SERVER_UNIX;
5324 /* note that the flag should be set only if we have a
5325 printer service but nmbd doesn't actually load the
5326 services so we can't tell --jerry */
5328 default_server_announce |= SV_TYPE_PRINTQ_SERVER;
5330 switch (lp_announce_as()) {
5331 case ANNOUNCE_AS_NT_SERVER:
5332 default_server_announce |= SV_TYPE_SERVER_NT;
5333 /* fall through... */
5334 case ANNOUNCE_AS_NT_WORKSTATION:
5335 default_server_announce |= SV_TYPE_NT;
5337 case ANNOUNCE_AS_WIN95:
5338 default_server_announce |= SV_TYPE_WIN95_PLUS;
5340 case ANNOUNCE_AS_WFW:
5341 default_server_announce |= SV_TYPE_WFW;
5347 switch (lp_server_role()) {
5348 case ROLE_DOMAIN_MEMBER:
5349 default_server_announce |= SV_TYPE_DOMAIN_MEMBER;
5351 case ROLE_DOMAIN_PDC:
5352 default_server_announce |= SV_TYPE_DOMAIN_CTRL;
5354 case ROLE_DOMAIN_BDC:
5355 default_server_announce |= SV_TYPE_DOMAIN_BAKCTRL;
5357 case ROLE_STANDALONE:
5361 if (lp_time_server())
5362 default_server_announce |= SV_TYPE_TIME_SOURCE;
5364 if (lp_host_msdfs())
5365 default_server_announce |= SV_TYPE_DFS_SERVER;
5368 /***********************************************************
5369 returns role of Samba server
5370 ************************************************************/
5372 int lp_server_role(void)
5377 /***********************************************************
5378 If we are PDC then prefer us as DMB
5379 ************************************************************/
5381 BOOL lp_domain_master(void)
5383 if (Globals.bDomainMaster == Auto)
5384 return (lp_server_role() == ROLE_DOMAIN_PDC);
5386 return Globals.bDomainMaster;
5389 /***********************************************************
5390 If we are DMB then prefer us as LMB
5391 ************************************************************/
5393 BOOL lp_preferred_master(void)
5395 if (Globals.bPreferredMaster == Auto)
5396 return (lp_local_master() && lp_domain_master());
5398 return Globals.bPreferredMaster;
5401 /*******************************************************************
5403 ********************************************************************/
5405 void lp_remove_service(int snum)
5407 ServicePtrs[snum]->valid = False;
5408 invalid_services[num_invalid_services++] = snum;
5411 /*******************************************************************
5413 ********************************************************************/
5415 void lp_copy_service(int snum, const char *new_name)
5417 do_section(new_name);
5419 snum = lp_servicenumber(new_name);
5421 lp_do_parameter(snum, "copy", lp_servicename(snum));
5426 /*******************************************************************
5427 Get the default server type we will announce as via nmbd.
5428 ********************************************************************/
5430 int lp_default_server_announce(void)
5432 return default_server_announce;
5435 /*******************************************************************
5436 Split the announce version into major and minor numbers.
5437 ********************************************************************/
5439 int lp_major_announce_version(void)
5441 static BOOL got_major = False;
5442 static int major_version = DEFAULT_MAJOR_VERSION;
5447 return major_version;
5450 if ((vers = lp_announce_version()) == NULL)
5451 return major_version;
5453 if ((p = strchr_m(vers, '.')) == 0)
5454 return major_version;
5457 major_version = atoi(vers);
5458 return major_version;
5461 int lp_minor_announce_version(void)
5463 static BOOL got_minor = False;
5464 static int minor_version = DEFAULT_MINOR_VERSION;
5469 return minor_version;
5472 if ((vers = lp_announce_version()) == NULL)
5473 return minor_version;
5475 if ((p = strchr_m(vers, '.')) == 0)
5476 return minor_version;
5479 minor_version = atoi(p);
5480 return minor_version;
5483 /***********************************************************
5484 Set the global name resolution order (used in smbclient).
5485 ************************************************************/
5487 void lp_set_name_resolve_order(const char *new_order)
5489 string_set(&Globals.szNameResolveOrder, new_order);
5492 const char *lp_printername(int snum)
5494 const char *ret = _lp_printername(snum);
5495 if (ret == NULL || (ret != NULL && *ret == '\0'))
5496 ret = lp_const_servicename(snum);
5502 /***********************************************************
5503 Allow daemons such as winbindd to fix their logfile name.
5504 ************************************************************/
5506 void lp_set_logfile(const char *name)
5508 string_set(&Globals.szLogFile, name);
5509 pstrcpy(debugf, name);
5512 /*******************************************************************
5513 Return the max print jobs per queue.
5514 ********************************************************************/
5516 int lp_maxprintjobs(int snum)
5518 int maxjobs = LP_SNUM_OK(snum) ? ServicePtrs[snum]->iMaxPrintJobs : sDefault.iMaxPrintJobs;
5519 if (maxjobs <= 0 || maxjobs >= PRINT_MAX_JOBID)
5520 maxjobs = PRINT_MAX_JOBID - 1;
5525 const char *lp_printcapname(void)
5527 if ((Globals.szPrintcapname != NULL) &&
5528 (Globals.szPrintcapname[0] != '\0'))
5529 return Globals.szPrintcapname;
5531 if (sDefault.iPrinting == PRINT_CUPS) {
5539 if (sDefault.iPrinting == PRINT_BSD)
5540 return "/etc/printcap";
5542 return PRINTCAP_NAME;
5545 /*******************************************************************
5546 Ensure we don't use sendfile if server smb signing is active.
5547 ********************************************************************/
5549 static uint32 spoolss_state;
5551 BOOL lp_disable_spoolss( void )
5553 if ( spoolss_state == SVCCTL_STATE_UNKNOWN )
5554 spoolss_state = _lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5556 return spoolss_state == SVCCTL_STOPPED ? True : False;
5559 void lp_set_spoolss_state( uint32 state )
5561 SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
5563 spoolss_state = state;
5566 uint32 lp_get_spoolss_state( void )
5568 return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5571 /*******************************************************************
5572 Ensure we don't use sendfile if server smb signing is active.
5573 ********************************************************************/
5575 BOOL lp_use_sendfile(int snum)
5577 /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
5578 if (Protocol < PROTOCOL_NT1) {
5581 return (_lp_use_sendfile(snum) && (get_remote_arch() != RA_WIN95) && !srv_is_signing_active());
5584 /*******************************************************************
5585 Turn off sendfile if we find the underlying OS doesn't support it.
5586 ********************************************************************/
5588 void set_use_sendfile(int snum, BOOL val)
5590 if (LP_SNUM_OK(snum))
5591 ServicePtrs[snum]->bUseSendfile = val;
5593 sDefault.bUseSendfile = val;
5596 /*******************************************************************
5597 Turn off storing DOS attributes if this share doesn't support it.
5598 ********************************************************************/
5600 void set_store_dos_attributes(int snum, BOOL val)
5602 if (!LP_SNUM_OK(snum))
5604 ServicePtrs[(snum)]->bStoreDosAttributes = val;
5607 void lp_set_mangling_method(const char *new_method)
5609 string_set(&Globals.szManglingMethod, new_method);
5612 /*******************************************************************
5613 Global state for POSIX pathname processing.
5614 ********************************************************************/
5616 static BOOL posix_pathnames;
5618 BOOL lp_posix_pathnames(void)
5620 return posix_pathnames;
5623 /*******************************************************************
5624 Change everything needed to ensure POSIX pathname processing (currently
5626 ********************************************************************/
5628 void lp_set_posix_pathnames(void)
5630 posix_pathnames = True;
5633 /*******************************************************************
5634 Global state for POSIX lock processing - CIFS unix extensions.
5635 ********************************************************************/
5637 BOOL posix_default_lock_was_set;
5638 static enum brl_flavour posix_cifsx_locktype; /* By default 0 == WINDOWS_LOCK */
5640 enum brl_flavour lp_posix_cifsu_locktype(files_struct *fsp)
5642 if (posix_default_lock_was_set) {
5643 return posix_cifsx_locktype;
5645 return fsp->posix_open ? POSIX_LOCK : WINDOWS_LOCK;
5649 /*******************************************************************
5650 ********************************************************************/
5652 void lp_set_posix_default_cifsx_readwrite_locktype(enum brl_flavour val)
5654 posix_default_lock_was_set = True;
5655 posix_cifsx_locktype = val;