param: rename szLdapMachineSuffix -> _ldap_machine_suffix
[kai/samba-autobuild/.git] / source3 / param / loadparm.c
index f31fd3c00fa7c7a00471792d669a262870ed0476..0f645b6b914a1dd0cad9812ac995d27d06e2ce70 100644 (file)
@@ -69,6 +69,7 @@
 #include "dbwrap/dbwrap.h"
 #include "dbwrap/dbwrap_rbt.h"
 #include "../lib/util/bitmap.h"
+#include "librpc/gen_ndr/nbt.h"
 
 #ifdef HAVE_SYS_SYSCTL_H
 #include <sys/sysctl.h>
@@ -184,6 +185,7 @@ static struct loadparm_service sDefault =
        .access_based_share_enum = false,
        .bAvailable = true,
        .read_only = true,
+       .spotlight = false,
        .guest_only = false,
        .administrative_share = false,
        .guest_ok = false,
@@ -206,6 +208,7 @@ static struct loadparm_service sDefault =
        .follow_symlinks = true,
        .sync_always = false,
        .strict_allocate = false,
+       .strict_rename = false,
        .strict_sync = false,
        .mangling_char = '~',
        .copymap = NULL,
@@ -221,6 +224,7 @@ static struct loadparm_service sDefault =
        .inherit_acls = false,
        .inherit_owner = false,
        .msdfs_root = false,
+       .msdfs_shuffle_referrals = false,
        .use_client_driver = false,
        .default_devmode = true,
        .force_printername = false,
@@ -235,8 +239,6 @@ static struct loadparm_service sDefault =
        .acl_map_full_control = true,
        .acl_group_control = false,
        .acl_allow_execute_always = false,
-       .change_notify = true,
-       .kernel_change_notify = true,
        .allocation_roundup_size = SMB_ROUNDUP_ALLOCATION_SIZE,
        .aio_read_size = 0,
        .aio_write_size = 0,
@@ -257,6 +259,7 @@ static struct db_context *ServiceHash;
 static bool bInGlobalSection = true;
 static bool bGlobalOnly = false;
 static struct file_lists *file_lists = NULL;
+static unsigned int *flags_list = NULL;
 
 static void set_allowed_client_auth(void);
 
@@ -301,128 +304,6 @@ static bool string_set(TALLOC_CTX *mem_ctx, char **dest,const char *src)
        return true;
 }
 
-bool lp_string_set(char **dest, const char *src) {
-       return string_set(Globals.ctx, dest, src);
-}
-
-/***************************************************************************
- Initialise the sDefault parameter structure for the printer values.
-***************************************************************************/
-
-void init_printer_values(TALLOC_CTX *ctx, struct loadparm_service *pService)
-{
-       /* choose defaults depending on the type of printing */
-       switch (pService->printing) {
-               case PRINT_BSD:
-               case PRINT_AIX:
-               case PRINT_LPRNT:
-               case PRINT_LPROS2:
-                       lpcfg_string_set(ctx, &pService->lpq_command, "lpq -P'%p'");
-                       lpcfg_string_set(ctx, &pService->lprm_command, "lprm -P'%p' %j");
-                       lpcfg_string_set(ctx, &pService->print_command, "lpr -r -P'%p' %s");
-                       break;
-
-               case PRINT_LPRNG:
-               case PRINT_PLP:
-                       lpcfg_string_set(ctx, &pService->lpq_command, "lpq -P'%p'");
-                       lpcfg_string_set(ctx, &pService->lprm_command, "lprm -P'%p' %j");
-                       lpcfg_string_set(ctx, &pService->print_command, "lpr -r -P'%p' %s");
-                       lpcfg_string_set(ctx, &pService->queuepause_command, "lpc stop '%p'");
-                       lpcfg_string_set(ctx, &pService->queueresume_command, "lpc start '%p'");
-                       lpcfg_string_set(ctx, &pService->lppause_command, "lpc hold '%p' %j");
-                       lpcfg_string_set(ctx, &pService->lpresume_command, "lpc release '%p' %j");
-                       break;
-
-               case PRINT_CUPS:
-               case PRINT_IPRINT:
-                       /* set the lpq command to contain the destination printer
-                          name only.  This is used by cups_queue_get() */
-                       lpcfg_string_set(ctx, &pService->lpq_command, "%p");
-                       lpcfg_string_set(ctx, &pService->lprm_command, "");
-                       lpcfg_string_set(ctx, &pService->print_command, "");
-                       lpcfg_string_set(ctx, &pService->lppause_command, "");
-                       lpcfg_string_set(ctx, &pService->lpresume_command, "");
-                       lpcfg_string_set(ctx, &pService->queuepause_command, "");
-                       lpcfg_string_set(ctx, &pService->queueresume_command, "");
-                       break;
-
-               case PRINT_SYSV:
-               case PRINT_HPUX:
-                       lpcfg_string_set(ctx, &pService->lpq_command, "lpstat -o%p");
-                       lpcfg_string_set(ctx, &pService->lprm_command, "cancel %p-%j");
-                       lpcfg_string_set(ctx, &pService->print_command, "lp -c -d%p %s; rm %s");
-                       lpcfg_string_set(ctx, &pService->queuepause_command, "disable %p");
-                       lpcfg_string_set(ctx, &pService->queueresume_command, "enable %p");
-#ifndef HPUX
-                       lpcfg_string_set(ctx, &pService->lppause_command, "lp -i %p-%j -H hold");
-                       lpcfg_string_set(ctx, &pService->lpresume_command, "lp -i %p-%j -H resume");
-#endif /* HPUX */
-                       break;
-
-               case PRINT_QNX:
-                       lpcfg_string_set(ctx, &pService->lpq_command, "lpq -P%p");
-                       lpcfg_string_set(ctx, &pService->lprm_command, "lprm -P%p %j");
-                       lpcfg_string_set(ctx, &pService->print_command, "lp -r -P%p %s");
-                       break;
-
-#if defined(DEVELOPER) || defined(ENABLE_SELFTEST)
-
-       case PRINT_TEST:
-       case PRINT_VLP: {
-               const char *tdbfile;
-               TALLOC_CTX *tmp_ctx = talloc_new(ctx);
-               char *tmp;
-
-               tdbfile = talloc_asprintf(
-                       tmp_ctx, "tdbfile=%s",
-                       lp_parm_const_string(-1, "vlp", "tdbfile",
-                                            "/tmp/vlp.tdb"));
-               if (tdbfile == NULL) {
-                       tdbfile="tdbfile=/tmp/vlp.tdb";
-               }
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s print %%p %%s",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->print_command,
-                          tmp ? tmp : "vlp print %p %s");
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s lpq %%p",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->lpq_command,
-                          tmp ? tmp : "vlp lpq %p");
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s lprm %%p %%j",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->lprm_command,
-                          tmp ? tmp : "vlp lprm %p %j");
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s lppause %%p %%j",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->lppause_command,
-                          tmp ? tmp : "vlp lppause %p %j");
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s lpresume %%p %%j",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->lpresume_command,
-                          tmp ? tmp : "vlp lpresume %p %j");
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s queuepause %%p",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->queuepause_command,
-                          tmp ? tmp : "vlp queuepause %p");
-
-               tmp = talloc_asprintf(tmp_ctx, "vlp %s queueresume %%p",
-                                     tdbfile);
-               lpcfg_string_set(ctx, &pService->queueresume_command,
-                          tmp ? tmp : "vlp queueresume %p");
-               TALLOC_FREE(tmp_ctx);
-
-               break;
-       }
-#endif /* DEVELOPER */
-
-       }
-}
 /**
  *  Function to return the default value for the maximum number of open
  *  file descriptors permitted.  This function tries to consult the
@@ -578,7 +459,7 @@ static struct lp_stored_option *stored_options;
   re-applied when we do a globals reset, so that cmdline set options
   are sticky across reloads of smb.conf
  */
-static bool store_lp_set_cmdline(const char *pszParmName, const char *pszParmValue)
+bool store_lp_set_cmdline(const char *pszParmName, const char *pszParmValue)
 {
        struct lp_stored_option *entry, *entry_next;
        for (entry = stored_options; entry != NULL; entry = entry_next) {
@@ -629,7 +510,7 @@ static bool apply_lp_set_cmdline(void)
  Initialise the global parameter structure.
 ***************************************************************************/
 
-static void init_globals(bool reinit_globals)
+static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
 {
        static bool done_init = false;
        char *s = NULL;
@@ -660,6 +541,11 @@ static void init_globals(bool reinit_globals)
 
        Globals.ctx = talloc_pooled_object(NULL, char, 272, 2048);
 
+       /* Initialize the flags list if necessary */
+       if (flags_list == NULL) {
+               get_flags();
+       }
+
        for (i = 0; parm_table[i].label; i++) {
                if ((parm_table[i].type == P_STRING ||
                     parm_table[i].type == P_USTRING))
@@ -672,9 +558,9 @@ static void init_globals(bool reinit_globals)
        string_set(Globals.ctx, &sDefault.fstype, FSTYPE_STRING);
        string_set(Globals.ctx, &sDefault.printjob_username, "%U");
 
-       init_printer_values(Globals.ctx, &sDefault);
+       init_printer_values(lp_ctx, Globals.ctx, &sDefault);
 
-       sDefault.ntvfs_handler = (const char **)str_list_make_v3(NULL, "unixuid default", NULL);
+       sDefault.ntvfs_handler = str_list_make_v3_const(NULL, "unixuid default", NULL);
 
        DEBUG(3, ("Initialising global parameters\n"));
 
@@ -732,7 +618,7 @@ static void init_globals(bool reinit_globals)
        string_set(Globals.ctx, &Globals.logon_home, "\\\\%N\\%U");
        string_set(Globals.ctx, &Globals.logon_path, "\\\\%N\\%U\\profile");
 
-       Globals.name_resolve_order = (const char **)str_list_make_v3(NULL, "lmhosts wins host bcast", NULL);
+       Globals.name_resolve_order = str_list_make_v3_const(NULL, "lmhosts wins host bcast", NULL);
        string_set(Globals.ctx, &Globals.password_server, "*");
 
        Globals.algorithmic_rid_base = BASE_RID;
@@ -756,9 +642,9 @@ static void init_globals(bool reinit_globals)
        Globals.large_readwrite = true;
        Globals.max_log_size = 5000;
        Globals.max_open_files = max_open_files();
-       Globals.server_max_protocol = PROTOCOL_SMB3_00;
+       Globals.server_max_protocol = PROTOCOL_SMB3_11;
        Globals.server_min_protocol = PROTOCOL_LANMAN1;
-       Globals.client_max_protocol = PROTOCOL_NT1;
+       Globals._client_max_protocol = PROTOCOL_DEFAULT;
        Globals.client_min_protocol = PROTOCOL_CORE;
        Globals._security = SEC_AUTO;
        Globals.encrypt_passwords = true;
@@ -803,6 +689,7 @@ static void init_globals(bool reinit_globals)
        Globals.passwd_chat_timeout = 2; /* 2 second default. */
        Globals.nt_pipe_support = true; /* Do NT pipes by default. */
        Globals.nt_status_support = true; /* Use NT status by default. */
+       Globals.smbd_profiling_level = 0;
        Globals.stat_cache = true;      /* use stat cache by default */
        Globals.max_stat_cache_size = 256; /* 256k by default */
        Globals.restrict_anonymous = 0;
@@ -833,12 +720,15 @@ static void init_globals(bool reinit_globals)
           a large number of sites (tridge) */
        Globals.hostname_lookups = false;
 
+       Globals.change_notify = true,
+       Globals.kernel_change_notify = true,
+
        string_set(Globals.ctx, &Globals.passdb_backend, "tdbsam");
        string_set(Globals.ctx, &Globals.ldap_suffix, "");
-       string_set(Globals.ctx, &Globals.szLdapMachineSuffix, "");
-       string_set(Globals.ctx, &Globals.szLdapUserSuffix, "");
-       string_set(Globals.ctx, &Globals.szLdapGroupSuffix, "");
-       string_set(Globals.ctx, &Globals.szLdapIdmapSuffix, "");
+       string_set(Globals.ctx, &Globals._ldap_machine_suffix, "");
+       string_set(Globals.ctx, &Globals._ldap_user_suffix, "");
+       string_set(Globals.ctx, &Globals._ldap_group_suffix, "");
+       string_set(Globals.ctx, &Globals._ldap_idmap_suffix, "");
 
        string_set(Globals.ctx, &Globals.ldap_admin_dn, "");
        Globals.ldap_ssl = LDAP_SSL_START_TLS;
@@ -855,6 +745,8 @@ static void init_globals(bool reinit_globals)
        Globals.ldap_debug_level = 0;
        Globals.ldap_debug_threshold = 10;
 
+       Globals.client_ldap_sasl_wrapping = ADS_AUTH_SASL_SIGN;
+
        /* This is what we tell the afs client. in reality we set the token 
         * to never expire, though, when this runs out the afs client will 
         * forget the token. Set to 0 to get NEVERDATE.*/
@@ -907,14 +799,15 @@ static void init_globals(bool reinit_globals)
 
        Globals.winbind_cache_time = 300;       /* 5 minutes */
        Globals.winbind_reconnect_delay = 30;   /* 30 seconds */
+       Globals.winbind_request_timeout = 60;   /* 60 seconds */
        Globals.winbind_max_clients = 200;
        Globals.winbind_enum_users = false;
        Globals.winbind_enum_groups = false;
        Globals.winbind_use_default_domain = false;
        Globals.winbind_trusted_domains_only = false;
        Globals.winbind_nested_groups = true;
-       Globals.winbind_expand_groups = 1;
-       Globals.winbind_nss_info = (const char **)str_list_make_v3(NULL, "template", NULL);
+       Globals.winbind_expand_groups = 0;
+       Globals.winbind_nss_info = str_list_make_v3_const(NULL, "template", NULL);
        Globals.winbind_refresh_tickets = false;
        Globals.winbind_offline_logon = false;
 
@@ -932,7 +825,7 @@ static void init_globals(bool reinit_globals)
        Globals.server_signing = SMB_SIGNING_DEFAULT;
 
        Globals.defer_sharing_violations = true;
-       Globals.smb_ports = (const char **)str_list_make_v3(NULL, SMB_PORTS, NULL);
+       Globals.smb_ports = str_list_make_v3_const(NULL, SMB_PORTS, NULL);
 
        Globals.enable_privileges = true;
        Globals.host_msdfs        = true;
@@ -966,18 +859,20 @@ static void init_globals(bool reinit_globals)
        Globals.smb2_max_write = DEFAULT_SMB2_MAX_WRITE;
        Globals.smb2_max_trans = DEFAULT_SMB2_MAX_TRANSACT;
        Globals.ismb2_max_credits = DEFAULT_SMB2_MAX_CREDITS;
+       Globals.smb2_leases = false;
 
        string_set(Globals.ctx, &Globals.ncalrpc_dir, get_dyn_NCALRPCDIR());
 
-       Globals.server_services = (const char **)str_list_make_v3(NULL, "s3fs rpc nbt wrepl ldap cldap kdc drepl winbindd ntp_signd kcc dnsupdate dns", NULL);
+       Globals.server_services = str_list_make_v3_const(NULL, "s3fs rpc nbt wrepl ldap cldap kdc drepl winbindd ntp_signd kcc dnsupdate dns", NULL);
 
-       Globals.dcerpc_endpoint_servers = (const char **)str_list_make_v3(NULL, "epmapper wkssvc rpcecho samr netlogon lsarpc spoolss drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver", NULL);
+       Globals.dcerpc_endpoint_servers = str_list_make_v3_const(NULL, "epmapper wkssvc rpcecho samr netlogon lsarpc spoolss drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver", NULL);
 
        Globals.tls_enabled = true;
 
        string_set(Globals.ctx, &Globals._tls_keyfile, "tls/key.pem");
        string_set(Globals.ctx, &Globals._tls_certfile, "tls/cert.pem");
        string_set(Globals.ctx, &Globals._tls_cafile, "tls/ca.pem");
+       string_set(Globals.ctx, &Globals.tls_priority, "NORMAL:-VERS-SSL3.0");
 
        string_set(Globals.ctx, &Globals.share_backend, "classic");
 
@@ -993,32 +888,32 @@ static void init_globals(bool reinit_globals)
        if (s == NULL) {
                smb_panic("init_globals: ENOMEM");
        }
-       Globals.samba_kcc_command = (const char **)str_list_make_v3(NULL, s, NULL);
+       Globals.samba_kcc_command = str_list_make_v3_const(NULL, s, NULL);
        TALLOC_FREE(s);
 
        s = talloc_asprintf(talloc_tos(), "%s/samba_dnsupdate", get_dyn_SCRIPTSBINDIR());
        if (s == NULL) {
                smb_panic("init_globals: ENOMEM");
        }
-       Globals.dns_update_command = (const char **)str_list_make_v3(NULL, s, NULL);
+       Globals.dns_update_command = str_list_make_v3_const(NULL, s, NULL);
        TALLOC_FREE(s);
 
        s = talloc_asprintf(talloc_tos(), "%s/samba_spnupdate", get_dyn_SCRIPTSBINDIR());
        if (s == NULL) {
                smb_panic("init_globals: ENOMEM");
        }
-       Globals.spn_update_command = (const char **)str_list_make_v3(NULL, s, NULL);
+       Globals.spn_update_command = str_list_make_v3_const(NULL, s, NULL);
        TALLOC_FREE(s);
 
-       Globals.nsupdate_command = (const char **)str_list_make_v3(NULL, "/usr/bin/nsupdate -g", NULL);
+       Globals.nsupdate_command = str_list_make_v3_const(NULL, "/usr/bin/nsupdate -g", NULL);
 
-       Globals.rndc_command = (const char **)str_list_make_v3(NULL, "/usr/sbin/rndc", NULL);
+       Globals.rndc_command = str_list_make_v3_const(NULL, "/usr/sbin/rndc", NULL);
 
        Globals.cldap_port = 389;
 
-       Globals.dgram_port = 138;
+       Globals.dgram_port = NBT_DGRAM_SERVICE_PORT;
 
-       Globals.nbt_port = 137;
+       Globals.nbt_port = NBT_NAME_SERVICE_PORT;
 
        Globals.krb5_port = 88;
 
@@ -1030,6 +925,26 @@ static void init_globals(bool reinit_globals)
        apply_lp_set_cmdline();
 }
 
+/* Convenience routine to setup an lp_context with additional s3 variables */
+static struct loadparm_context *setup_lp_context(TALLOC_CTX *mem_ctx)
+{
+       struct loadparm_context *lp_ctx;
+
+       lp_ctx = loadparm_init_s3(mem_ctx,
+                                 loadparm_s3_helpers());
+       if (lp_ctx == NULL) {
+               DEBUG(0, ("loadparm_init_s3 failed\n"));
+               return NULL;
+       }
+
+       lp_ctx->sDefault = &sDefault;
+       lp_ctx->services = NULL; /* We do not want to access this directly */
+       lp_ctx->bInGlobalSection = bInGlobalSection;
+       lp_ctx->flags = flags_list;
+
+       return lp_ctx;
+}
+
 /*******************************************************************
  Convenience routine to grab string parameters into talloced memory
  and run standard_sub_basic on them. The buffers can be written to by
@@ -1161,7 +1076,6 @@ static int map_parameter_canonical(const char *pszParmName, bool *inverse);
 static const char *get_boolean(bool bool_value);
 static bool do_parameter(const char *pszParmName, const char *pszParmValue,
                         void *userdata);
-static bool lp_do_section(const char *pszSectionName, void *userdata);
 static bool hash_a_service(const char *name, int number);
 static void free_service_byindex(int iService);
 static void show_parameter(int parmIndex);
@@ -1256,7 +1170,7 @@ const char **lp_parm_string_list(int snum, const char *type, const char *option,
                data->list = str_list_make_v3(NULL, data->value, NULL);
        }
 
-       return (const char **)data->list;
+       return discard_const_p(const char *, data->list);
 }
 
 /* Return parametric option from a given service. Type is a part of option before ':' */
@@ -1484,7 +1398,7 @@ static bool hash_a_service(const char *name, int idx)
        canon_name = canonicalize_servicename(talloc_tos(), name );
 
        dbwrap_store_bystring(ServiceHash, canon_name,
-                             make_tdb_data((uint8 *)&idx, sizeof(idx)),
+                             make_tdb_data((uint8_t *)&idx, sizeof(idx)),
                              TDB_REPLACE);
 
        TALLOC_FREE(canon_name);
@@ -1656,22 +1570,6 @@ bool lp_parameter_is_global(const char *pszParmName)
        return false;
 }
 
-/**************************************************************************
- Check whether the given name is the canonical name of a parameter.
- Returns false if it is not a valid parameter Name.
- For parametric options, true is returned.
-**************************************************************************/
-
-bool lp_parameter_is_canonical(const char *parm_name)
-{
-       if (!lp_parameter_is_valid(parm_name)) {
-               return false;
-       }
-
-       return (lpcfg_map_parameter(parm_name) ==
-               map_parameter_canonical(parm_name, NULL));
-}
-
 /**************************************************************************
  Determine the canonical name for a parameter.
  Indicate when it is an inverse (boolean) synonym instead of a
@@ -1757,7 +1655,7 @@ static int map_parameter_canonical(const char *pszParmName, bool *inverse)
        bool loc_inverse = false;
 
        parm_num = lpcfg_map_parameter(pszParmName);
-       if ((parm_num < 0) || !(parm_table[parm_num].flags & FLAG_HIDE)) {
+       if ((parm_num < 0) || !(parm_table[parm_num].flags & FLAG_SYNONYM)) {
                /* invalid, parametric or no canidate for synonyms ... */
                goto done;
        }
@@ -1787,8 +1685,8 @@ static bool is_synonym_of(int parm1, int parm2, bool *inverse)
 {
        if ((parm_table[parm1].offset == parm_table[parm2].offset) &&
            (parm_table[parm1].p_class == parm_table[parm2].p_class) &&
-           (parm_table[parm1].flags & FLAG_HIDE) &&
-           !(parm_table[parm2].flags & FLAG_HIDE))
+           (parm_table[parm1].flags & FLAG_SYNONYM) &&
+           !(parm_table[parm2].flags & FLAG_SYNONYM))
        {
                if (inverse != NULL) {
                        if ((parm_table[parm1].type == P_BOOLREV) &&
@@ -1818,13 +1716,9 @@ static void show_parameter(int parmIndex)
        bool inverse;
        const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
                "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING",
-               "P_ENUM", "P_SEP"};
-       unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
-               FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
-               FLAG_HIDE};
-       const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
-               "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
-               "FLAG_DEPRECATED", "FLAG_HIDE", NULL};
+               "P_ENUM", "P_BYTES", "P_CMDLIST" };
+       unsigned flags[] = { FLAG_DEPRECATED, FLAG_SYNONYM };
+       const char *flag_names[] = { "FLAG_DEPRECATED", "FLAG_SYNONYM", NULL};
 
        printf("%s=%s", parm_table[parmIndex].label,
               type[parm_table[parmIndex].type]);
@@ -2001,52 +1895,6 @@ struct loadparm_service *lp_default_loadparm_service()
        return &sDefault;
 }
 
-/***************************************************************************
-Check a service for consistency. Return false if the service is in any way
-incomplete or faulty, else true.
-***************************************************************************/
-
-bool service_ok(int iService)
-{
-       bool bRetval;
-
-       bRetval = true;
-       if (ServicePtrs[iService]->szService[0] == '\0') {
-               DEBUG(0, ("The following message indicates an internal error:\n"));
-               DEBUG(0, ("No service name in service entry.\n"));
-               bRetval = false;
-       }
-
-       /* The [printers] entry MUST be printable. I'm all for flexibility, but */
-       /* I can't see why you'd want a non-printable printer service...        */
-       if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
-               if (!ServicePtrs[iService]->printable) {
-                       DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
-                              ServicePtrs[iService]->szService));
-                       ServicePtrs[iService]->printable = true;
-               }
-               /* [printers] service must also be non-browsable. */
-               if (ServicePtrs[iService]->browseable)
-                       ServicePtrs[iService]->browseable = false;
-       }
-
-       if (ServicePtrs[iService]->path[0] == '\0' &&
-           strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0 &&
-           ServicePtrs[iService]->msdfs_proxy[0] == '\0'
-           ) {
-               DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
-                       ServicePtrs[iService]->szService));
-               ServicePtrs[iService]->bAvailable = false;
-       }
-
-       /* If a service is flagged unavailable, log the fact at level 1. */
-       if (!ServicePtrs[iService]->bAvailable)
-               DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
-                         ServicePtrs[iService]->szService));
-
-       return (bRetval);
-}
-
 static struct smbconf_ctx *lp_smbconf_ctx(void)
 {
        sbcErr err;
@@ -2096,7 +1944,7 @@ static bool process_smbconf_service(struct smbconf_service *service)
                }
        }
        if (iServiceIndex >= 0) {
-               return service_ok(iServiceIndex);
+               return lpcfg_service_ok(ServicePtrs[iServiceIndex]);
        }
        return true;
 }
@@ -2290,8 +2138,6 @@ bool lp_file_list_changed(void)
        DEBUG(6, ("lp_file_list_changed()\n"));
 
        while (f) {
-               time_t mod_time;
-
                if (strequal(f->name, INCLUDE_REGISTRY_NAME)) {
                        struct smbconf_ctx *conf_ctx = lp_smbconf_ctx();
 
@@ -2305,7 +2151,9 @@ bool lp_file_list_changed(void)
                                return true;
                        }
                } else {
+                       time_t mod_time;
                        char *n2 = NULL;
+
                        n2 = talloc_sub_basic(talloc_tos(),
                                              get_current_username(),
                                              current_user_info.domain,
@@ -2362,7 +2210,8 @@ static void init_iconv(void)
 ***************************************************************************/
 static bool bAllowIncludeRegistry = true;
 
-bool lp_include(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
+bool lp_include(struct loadparm_context *lp_ctx, struct loadparm_service *service,
+               const char *pszParmValue, char **ptr)
 {
        char *fname;
 
@@ -2376,7 +2225,7 @@ bool lp_include(struct loadparm_context *unused, int snum, const char *pszParmVa
                if (!bAllowIncludeRegistry) {
                        return true;
                }
-               if (bInGlobalSection) {
+               if (lp_ctx->bInGlobalSection) {
                        bool ret;
                        include_depth++;
                        ret = process_registry_globals();
@@ -2395,16 +2244,16 @@ bool lp_include(struct loadparm_context *unused, int snum, const char *pszParmVa
 
        add_to_file_list(NULL, &file_lists, pszParmValue, fname);
 
-       if (snum < 0) {
+       if (service == NULL) {
                string_set(Globals.ctx, ptr, fname);
        } else {
-               string_set(ServicePtrs[snum], ptr, fname);
+               string_set(service, ptr, fname);
        }
 
        if (file_exist(fname)) {
                bool ret;
                include_depth++;
-               ret = pm_process(fname, lp_do_section, do_parameter, NULL);
+               ret = pm_process(fname, lp_do_section, do_parameter, lp_ctx);
                include_depth--;
                TALLOC_FREE(fname);
                return ret;
@@ -2512,32 +2361,32 @@ static const char *append_ldap_suffix(TALLOC_CTX *ctx, const char *str )
 
 const char *lp_ldap_machine_suffix(TALLOC_CTX *ctx)
 {
-       if (Globals.szLdapMachineSuffix[0])
-               return append_ldap_suffix(ctx, Globals.szLdapMachineSuffix);
+       if (Globals._ldap_machine_suffix[0])
+               return append_ldap_suffix(ctx, Globals._ldap_machine_suffix);
 
        return lp_string(ctx, Globals.ldap_suffix);
 }
 
 const char *lp_ldap_user_suffix(TALLOC_CTX *ctx)
 {
-       if (Globals.szLdapUserSuffix[0])
-               return append_ldap_suffix(ctx, Globals.szLdapUserSuffix);
+       if (Globals._ldap_user_suffix[0])
+               return append_ldap_suffix(ctx, Globals._ldap_user_suffix);
 
        return lp_string(ctx, Globals.ldap_suffix);
 }
 
 const char *lp_ldap_group_suffix(TALLOC_CTX *ctx)
 {
-       if (Globals.szLdapGroupSuffix[0])
-               return append_ldap_suffix(ctx, Globals.szLdapGroupSuffix);
+       if (Globals._ldap_group_suffix[0])
+               return append_ldap_suffix(ctx, Globals._ldap_group_suffix);
 
        return lp_string(ctx, Globals.ldap_suffix);
 }
 
 const char *lp_ldap_idmap_suffix(TALLOC_CTX *ctx)
 {
-       if (Globals.szLdapIdmapSuffix[0])
-               return append_ldap_suffix(ctx, Globals.szLdapIdmapSuffix);
+       if (Globals._ldap_idmap_suffix[0])
+               return append_ldap_suffix(ctx, Globals._ldap_idmap_suffix);
 
        return lp_string(ctx, Globals.ldap_suffix);
 }
@@ -2565,96 +2414,26 @@ void *lp_parm_ptr(struct loadparm_service *service, struct parm_struct *parm)
 
 bool lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
 {
-       int parmnum, i;
-       void *parm_ptr = NULL;  /* where we are going to store the result */
-       struct parmlist_entry **opt_list;
-       TALLOC_CTX *mem_ctx;
        TALLOC_CTX *frame = talloc_stackframe();
+       struct loadparm_context *lp_ctx;
+       bool ok;
 
-       parmnum = lpcfg_map_parameter(pszParmName);
-
-       if (parmnum < 0) {
-               if (strchr(pszParmName, ':') == NULL) {
-                       DEBUG(0, ("Ignoring unknown parameter \"%s\"\n",
-                                 pszParmName));
-                       TALLOC_FREE(frame);
-                       return true;
-               }
-
-               /*
-                * We've got a parametric option
-                */
-
-               if (snum < 0) {
-                       opt_list = &Globals.param_opt;
-                       set_param_opt(NULL, opt_list, pszParmName, pszParmValue, 0);
-               } else {
-                       opt_list = &ServicePtrs[snum]->param_opt;
-                       set_param_opt(ServicePtrs[snum], opt_list, pszParmName, pszParmValue, 0);
-               }
-
-               TALLOC_FREE(frame);
-               return true;
-       }
-
-       /* if it's already been set by the command line, then we don't
-          override here */
-       if (parm_table[parmnum].flags & FLAG_CMDLINE) {
+       lp_ctx = setup_lp_context(frame);
+       if (lp_ctx == NULL) {
                TALLOC_FREE(frame);
-               return true;
-       }
-
-       if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
-               DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
-                         pszParmName));
+               return false;
        }
 
-       /* we might point at a service, the default service or a global */
        if (snum < 0) {
-               parm_ptr = lp_parm_ptr(NULL, &parm_table[parmnum]);
+               ok = lpcfg_do_global_parameter(lp_ctx, pszParmName, pszParmValue);
        } else {
-               if (parm_table[parmnum].p_class == P_GLOBAL) {
-                       DEBUG(0,
-                             ("Global parameter %s found in service section!\n",
-                              pszParmName));
-                       TALLOC_FREE(frame);
-                       return true;
-               }
-               parm_ptr = lp_parm_ptr(ServicePtrs[snum], &parm_table[parmnum]);
-       }
-
-       if (snum >= 0) {
-               if (!ServicePtrs[snum]->copymap)
-                       init_copymap(ServicePtrs[snum]);
-
-               /* this handles the aliases - set the copymap for other entries with
-                  the same data pointer */
-               for (i = 0; parm_table[i].label; i++) {
-                       if ((parm_table[i].offset == parm_table[parmnum].offset)
-                           && (parm_table[i].p_class == parm_table[parmnum].p_class)) {
-                               bitmap_clear(ServicePtrs[snum]->copymap, i);
-                       }
-               }
-               mem_ctx = ServicePtrs[snum];
-       } else {
-               mem_ctx = Globals.ctx;
-       }
-
-       /* if it is a special case then go ahead */
-       if (parm_table[parmnum].special) {
-               bool ok;
-               struct loadparm_context *lp_ctx = loadparm_init_s3(frame,
-                                                                  loadparm_s3_helpers());
-               lp_ctx->sDefault = &sDefault;
-               lp_ctx->services = ServicePtrs;
-               ok = parm_table[parmnum].special(lp_ctx, snum, pszParmValue,
-                                                 (char **)parm_ptr);
-               TALLOC_FREE(frame);
-               return ok;
+               ok = lpcfg_do_service_parameter(lp_ctx, ServicePtrs[snum],
+                                               pszParmName, pszParmValue);
        }
 
        TALLOC_FREE(frame);
-       return set_variable_helper(mem_ctx, parmnum, parm_ptr, pszParmName, pszParmValue);
+
+       return ok;
 }
 
 /***************************************************************************
@@ -2667,11 +2446,11 @@ static bool lp_set_cmdline_helper(const char *pszParmName, const char *pszParmVa
        int parmnum, i;
        parmnum = lpcfg_map_parameter(pszParmName);
        if (parmnum >= 0) {
-               parm_table[parmnum].flags &= ~FLAG_CMDLINE;
+               flags_list[parmnum] &= ~FLAG_CMDLINE;
                if (!lp_do_parameter(-1, pszParmName, pszParmValue)) {
                        return false;
                }
-               parm_table[parmnum].flags |= FLAG_CMDLINE;
+               flags_list[parmnum] |= FLAG_CMDLINE;
 
                /* we have to also set FLAG_CMDLINE on aliases.  Aliases must
                 * be grouped in the table, so we don't have to search the
@@ -2680,11 +2459,11 @@ static bool lp_set_cmdline_helper(const char *pszParmName, const char *pszParmVa
                     i>=0 && parm_table[i].offset == parm_table[parmnum].offset
                             && parm_table[i].p_class == parm_table[parmnum].p_class;
                     i--) {
-                       parm_table[i].flags |= FLAG_CMDLINE;
+                       flags_list[i] |= FLAG_CMDLINE;
                }
                for (i=parmnum+1;i<num_parameters() && parm_table[i].offset == parm_table[parmnum].offset
                             && parm_table[i].p_class == parm_table[parmnum].p_class;i++) {
-                       parm_table[i].flags |= FLAG_CMDLINE;
+                       flags_list[i] |= FLAG_CMDLINE;
                }
 
                return true;
@@ -2704,12 +2483,16 @@ bool lp_set_cmdline(const char *pszParmName, const char *pszParmValue)
 {
        bool ret;
        TALLOC_CTX *frame = talloc_stackframe();
+       struct loadparm_context *lp_ctx;
 
-       ret = lp_set_cmdline_helper(pszParmName, pszParmValue);
-       if (ret) {
-               store_lp_set_cmdline(pszParmName, pszParmValue);
+       lp_ctx = setup_lp_context(frame);
+       if (lp_ctx == NULL) {
+               TALLOC_FREE(frame);
+               return false;
        }
 
+       ret = lpcfg_set_cmdline(lp_ctx, pszParmName, pszParmValue);
+
        TALLOC_FREE(frame);
        return ret;
 }
@@ -2726,8 +2509,12 @@ static bool do_parameter(const char *pszParmName, const char *pszParmValue,
 
        DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
 
-       return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
-                               pszParmName, pszParmValue));
+       if (bInGlobalSection) {
+               return lpcfg_do_global_parameter(userdata, pszParmName, pszParmValue);
+       } else {
+               return lpcfg_do_service_parameter(userdata, ServicePtrs[iServiceIndex],
+                                                 pszParmName, pszParmValue);
+       }
 }
 
 /***************************************************************************
@@ -2773,8 +2560,9 @@ static void init_locals(void)
  Returns true on success, false on failure.
 ***************************************************************************/
 
-static bool lp_do_section(const char *pszSectionName, void *userdata)
+bool lp_do_section(const char *pszSectionName, void *userdata)
 {
+       struct loadparm_context *lp_ctx = (struct loadparm_context *)userdata;
        bool bRetval;
        bool isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
                         (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
@@ -2786,6 +2574,9 @@ static bool lp_do_section(const char *pszSectionName, void *userdata)
 
        /* if we've just struck a global section, note the fact. */
        bInGlobalSection = isglobal;
+       if (lp_ctx != NULL) {
+               lp_ctx->bInGlobalSection = isglobal;
+       }
 
        /* check for multiple global sections */
        if (bInGlobalSection) {
@@ -2800,7 +2591,7 @@ static bool lp_do_section(const char *pszSectionName, void *userdata)
        bRetval = true;
 
        if (iServiceIndex >= 0)
-               bRetval = service_ok(iServiceIndex);
+               bRetval = lpcfg_service_ok(ServicePtrs[iServiceIndex]);
 
        /* if all is still well, move to the next record in the services array */
        if (bRetval) {
@@ -2821,88 +2612,6 @@ static bool lp_do_section(const char *pszSectionName, void *userdata)
        return bRetval;
 }
 
-
-/***************************************************************************
- Determine if a partcular base parameter is currentl set to the default value.
-***************************************************************************/
-
-static bool is_default(int i)
-{
-       switch (parm_table[i].type) {
-               case P_LIST:
-               case P_CMDLIST:
-                       return str_list_equal((const char * const *)parm_table[i].def.lvalue,
-                                             *(const char ***)lp_parm_ptr(NULL, 
-                                                                          &parm_table[i]));
-               case P_STRING:
-               case P_USTRING:
-                       return strequal(parm_table[i].def.svalue,
-                                       *(char **)lp_parm_ptr(NULL, 
-                                                             &parm_table[i]));
-               case P_BOOL:
-               case P_BOOLREV:
-                       return parm_table[i].def.bvalue ==
-                               *(bool *)lp_parm_ptr(NULL, 
-                                                    &parm_table[i]);
-               case P_CHAR:
-                       return parm_table[i].def.cvalue ==
-                               *(char *)lp_parm_ptr(NULL, 
-                                                    &parm_table[i]);
-               case P_INTEGER:
-               case P_OCTAL:
-               case P_ENUM:
-               case P_BYTES:
-                       return parm_table[i].def.ivalue ==
-                               *(int *)lp_parm_ptr(NULL, 
-                                                   &parm_table[i]);
-               case P_SEP:
-                       break;
-       }
-       return false;
-}
-
-/***************************************************************************
-Display the contents of the global structure.
-***************************************************************************/
-
-static void dump_globals(FILE *f, bool show_defaults)
-{
-       int i;
-       struct parmlist_entry *data;
-
-       fprintf(f, "[global]\n");
-
-       for (i = 0; parm_table[i].label; i++)
-               if (parm_table[i].p_class == P_GLOBAL &&
-                   !(parm_table[i].flags & FLAG_META) &&
-                   (i == 0 || (parm_table[i].offset != parm_table[i - 1].offset))) {
-                       if (show_defaults && is_default(i))
-                               continue;
-                       fprintf(f, "\t%s = ", parm_table[i].label);
-                       lpcfg_print_parameter(&parm_table[i], lp_parm_ptr(NULL,
-                                                                         &parm_table[i]),
-                                       f);
-                       fprintf(f, "\n");
-       }
-       if (Globals.param_opt != NULL) {
-               data = Globals.param_opt;
-               while(data) {
-                       fprintf(f, "\t%s = %s\n", data->key, data->value);
-                       data = data->next;
-               }
-        }
-
-}
-
-/***************************************************************************
- Display the contents of a single services record.
-***************************************************************************/
-
-static void dump_a_service(struct loadparm_service *pService, FILE * f, bool show_defaults)
-{
-       return lpcfg_dump_a_service(pService, &sDefault, f, NULL, show_defaults);
-}
-
 /***************************************************************************
  Display the contents of a parameter of a single services record.
 ***************************************************************************/
@@ -2910,10 +2619,9 @@ static void dump_a_service(struct loadparm_service *pService, FILE * f, bool sho
 bool dump_a_parameter(int snum, char *parm_name, FILE * f, bool isGlobal)
 {
        bool result = false;
-
        struct loadparm_context *lp_ctx;
 
-       lp_ctx = loadparm_init_s3(talloc_tos(), loadparm_s3_helpers());
+       lp_ctx = setup_lp_context(talloc_tos());
        if (lp_ctx == NULL) {
                return false;
        }
@@ -2927,22 +2635,6 @@ bool dump_a_parameter(int snum, char *parm_name, FILE * f, bool isGlobal)
        return result;
 }
 
-/***************************************************************************
- Return info about the requested parameter (given as a string).
- Return NULL when the string is not a valid parameter name.
-***************************************************************************/
-
-struct parm_struct *lp_get_parameter(const char *param_name)
-{
-       int num = lpcfg_map_parameter(param_name);
-
-       if (num < 0) {
-               return NULL;
-       }
-
-       return &parm_table[num];
-}
-
 #if 0
 /***************************************************************************
  Display the contents of a single copy structure.
@@ -3093,7 +2785,12 @@ void lp_killservice(int iServiceIn)
 static void lp_save_defaults(void)
 {
        int i;
+       struct parmlist_entry * parm;
        for (i = 0; parm_table[i].label; i++) {
+               if (!(flags_list[i] & FLAG_CMDLINE)) {
+                       flags_list[i] |= FLAG_DEFAULT;
+               }
+
                if (i > 0 && parm_table[i].offset == parm_table[i - 1].offset
                    && parm_table[i].p_class == parm_table[i - 1].p_class)
                        continue;
@@ -3126,10 +2823,21 @@ static void lp_save_defaults(void)
                                parm_table[i].def.ivalue =
                                        *(int *)lp_parm_ptr(NULL, &parm_table[i]);
                                break;
-                       case P_SEP:
-                               break;
                }
        }
+
+       for (parm=Globals.param_opt; parm; parm=parm->next) {
+               if (!(parm->priority & FLAG_CMDLINE)) {
+                       parm->priority |= FLAG_DEFAULT;
+               }
+       }
+
+       for (parm=sDefault.param_opt; parm; parm=parm->next) {
+               if (!(parm->priority & FLAG_CMDLINE)) {
+                       parm->priority |= FLAG_DEFAULT;
+               }
+       }
+
        defaults_saved = true;
 }
 
@@ -3900,6 +3608,22 @@ static bool lp_is_in_client(void)
     return in_client;
 }
 
+static void lp_enforce_ad_dc_settings(void)
+{
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "passdb backend", "samba_dsdb");
+       lp_do_parameter(GLOBAL_SECTION_SNUM,
+                       "winbindd:use external pipes", "true");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:default", "external");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:svcctl", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:srvsvc", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:eventlog", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:ntsvcs", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:winreg", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:spoolss", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_daemon:spoolssd", "embedded");
+       lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:tcpip", "no");
+}
+
 /***************************************************************************
  Load the services array from the services file. Return true on success,
  false on failure.
@@ -3909,13 +3633,14 @@ static bool lp_load_ex(const char *pszFname,
                       bool global_only,
                       bool save_defaults,
                       bool add_ipc,
-                      bool initialize_globals,
+                      bool reinit_globals,
                       bool allow_include_registry,
                       bool load_all_shares)
 {
        char *n2 = NULL;
        bool bRetval;
        TALLOC_CTX *frame = talloc_stackframe();
+       struct loadparm_context *lp_ctx;
 
        bRetval = false;
 
@@ -3925,7 +3650,9 @@ static bool lp_load_ex(const char *pszFname,
        bGlobalOnly = global_only;
        bAllowIncludeRegistry = allow_include_registry;
 
-       init_globals(initialize_globals);
+       lp_ctx = setup_lp_context(talloc_tos());
+
+       init_globals(lp_ctx, reinit_globals);
 
        free_file_list();
 
@@ -3934,7 +3661,7 @@ static bool lp_load_ex(const char *pszFname,
                lp_save_defaults();
        }
 
-       if (!initialize_globals) {
+       if (!reinit_globals) {
                free_param_opts(&Globals.param_opt);
                apply_lp_set_cmdline();
        }
@@ -3954,14 +3681,14 @@ static bool lp_load_ex(const char *pszFname,
 
                add_to_file_list(NULL, &file_lists, pszFname, n2);
 
-               bRetval = pm_process(n2, lp_do_section, do_parameter, NULL);
+               bRetval = pm_process(n2, lp_do_section, do_parameter, lp_ctx);
                TALLOC_FREE(n2);
 
                /* finish up the last section */
                DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
                if (bRetval) {
                        if (iServiceIndex >= 0) {
-                               bRetval = service_ok(iServiceIndex);
+                               bRetval = lpcfg_service_ok(ServicePtrs[iServiceIndex]);
                        }
                }
 
@@ -3974,14 +3701,18 @@ static bool lp_load_ex(const char *pszFname,
                         * for config_backend. Otherwise, init_globals would
                         *  send us into an endless loop here.
                         */
+
                        config_backend = CONFIG_BACKEND_REGISTRY;
                        /* start over */
                        DEBUG(1, ("lp_load_ex: changing to config backend "
                                  "registry\n"));
-                       init_globals(true);
+                       init_globals(lp_ctx, true);
+
+                       TALLOC_FREE(lp_ctx);
+
                        lp_kill_all_services();
                        ok = lp_load_ex(pszFname, global_only, save_defaults,
-                                       add_ipc, initialize_globals,
+                                       add_ipc, reinit_globals,
                                        allow_include_registry,
                                        load_all_shares);
                        TALLOC_FREE(frame);
@@ -4040,23 +3771,11 @@ static bool lp_load_ex(const char *pszFname,
        /*
         * We run this check once the whole smb.conf is parsed, to
         * force some settings for the standard way a AD DC is
-        * operated.  We may changed these as our code evolves, which
+        * operated.  We may change these as our code evolves, which
         * is why we force these settings.
         */
        if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC) {
-               lp_do_parameter(-1, "passdb backend", "samba_dsdb");
-
-               lp_do_parameter(-1, "winbindd:use external pipes", "true");
-
-               lp_do_parameter(-1, "rpc_server:default", "external");
-               lp_do_parameter(-1, "rpc_server:svcctl", "embedded");
-               lp_do_parameter(-1, "rpc_server:srvsvc", "embedded");
-               lp_do_parameter(-1, "rpc_server:eventlog", "embedded");
-               lp_do_parameter(-1, "rpc_server:ntsvcs", "embedded");
-               lp_do_parameter(-1, "rpc_server:winreg", "embedded");
-               lp_do_parameter(-1, "rpc_server:spoolss", "embedded");
-               lp_do_parameter(-1, "rpc_daemon:spoolssd", "embedded");
-               lp_do_parameter(-1, "rpc_server:tcpip", "no");
+               lp_enforce_ad_dc_settings();
        }
 
        bAllowIncludeRegistry = true;
@@ -4065,17 +3784,17 @@ static bool lp_load_ex(const char *pszFname,
        return (bRetval);
 }
 
-bool lp_load(const char *pszFname,
-            bool global_only,
-            bool save_defaults,
-            bool add_ipc,
-            bool initialize_globals)
+static bool lp_load(const char *pszFname,
+                   bool global_only,
+                   bool save_defaults,
+                   bool add_ipc,
+                   bool reinit_globals)
 {
        return lp_load_ex(pszFname,
                          global_only,
                          save_defaults,
                          add_ipc,
-                         initialize_globals,
+                         reinit_globals,
                          true,   /* allow_include_registry */
                          false); /* load_all_shares*/
 }
@@ -4084,9 +3803,9 @@ bool lp_load_initial_only(const char *pszFname)
 {
        return lp_load_ex(pszFname,
                          true,   /* global only */
-                         false,  /* save_defaults */
+                         true,   /* save_defaults */
                          false,  /* add_ipc */
-                         true,   /* initialize_globals */
+                         true,   /* reinit_globals */
                          false,  /* allow_include_registry */
                          false); /* load_all_shares*/
 }
@@ -4096,13 +3815,25 @@ bool lp_load_initial_only(const char *pszFname)
  */
 bool lp_load_global(const char *file_name)
 {
-       return lp_load_ex(file_name,
-                         true,   /* global_only */
-                         false,  /* save_defaults */
-                         false,  /* add_ipc */
-                         true,   /* initialize_globals */
-                         true,   /* allow_include_registry */
-                         false); /* load_all_shares*/
+       return lp_load(file_name,
+                      true,   /* global_only */
+                      false,  /* save_defaults */
+                      false,  /* add_ipc */
+                      true);  /* reinit_globals */
+}
+
+/**
+ * The typical lp_load wrapper with shares, loads global and
+ * shares, including IPC, but does not force immediate
+ * loading of all shares from registry.
+ */
+bool lp_load_with_shares(const char *file_name)
+{
+       return lp_load(file_name,
+                      false,  /* global_only */
+                      false,  /* save_defaults */
+                      true,   /* add_ipc */
+                      true);  /* reinit_globals */
 }
 
 /**
@@ -4122,15 +3853,28 @@ bool lp_load_client(const char *file_name)
  */
 bool lp_load_global_no_reinit(const char *file_name)
 {
-       return lp_load_ex(file_name,
-                         true,   /* global_only */
-                         false,  /* save_defaults */
-                         false,  /* add_ipc */
-                         false,  /* initialize_globals */
-                         true,   /* allow_include_registry */
-                         false); /* load_all_shares*/
+       return lp_load(file_name,
+                      true,   /* global_only */
+                      false,  /* save_defaults */
+                      false,  /* add_ipc */
+                      false); /* reinit_globals */
 }
 
+/**
+ * lp_load wrapper, loading globals and shares,
+ * intended for subsequent calls, i.e. not reinitializing
+ * the globals to default values.
+ */
+bool lp_load_no_reinit(const char *file_name)
+{
+       return lp_load(file_name,
+                      false,  /* global_only */
+                      false,  /* save_defaults */
+                      false,  /* add_ipc */
+                      false); /* reinit_globals */
+}
+
+
 /**
  * lp_load wrapper, especially for clients, no reinitialization
  */
@@ -4141,17 +3885,13 @@ bool lp_load_client_no_reinit(const char *file_name)
        return lp_load_global_no_reinit(file_name);
 }
 
-bool lp_load_with_registry_shares(const char *pszFname,
-                                 bool global_only,
-                                 bool save_defaults,
-                                 bool add_ipc,
-                                 bool initialize_globals)
+bool lp_load_with_registry_shares(const char *pszFname)
 {
        return lp_load_ex(pszFname,
-                         global_only,
-                         save_defaults,
-                         add_ipc,
-                         initialize_globals,
+                         false, /* global_only */
+                         true,  /* save_defaults */
+                         false, /* add_ipc */
+                         false, /* reinit_globals */
                          true,  /* allow_include_registry */
                          true); /* load_all_shares*/
 }
@@ -4172,13 +3912,19 @@ Display the contents of the services array in human-readable form.
 void lp_dump(FILE *f, bool show_defaults, int maxtoprint)
 {
        int iService;
+       struct loadparm_context *lp_ctx;
 
        if (show_defaults)
                defaults_saved = false;
 
-       dump_globals(f, defaults_saved);
+       lp_ctx = setup_lp_context(talloc_tos());
+       if (lp_ctx == NULL) {
+               return;
+       }
+
+       lpcfg_dump_globals(lp_ctx, f, !defaults_saved);
 
-       dump_a_service(&sDefault, f, show_defaults);
+       lpcfg_dump_a_service(&sDefault, &sDefault, f, flags_list, show_defaults);
 
        for (iService = 0; iService < maxtoprint; iService++) {
                fprintf(f,"\n");
@@ -4195,7 +3941,8 @@ void lp_dump_one(FILE * f, bool show_defaults, int snum)
        if (VALID(snum)) {
                if (ServicePtrs[snum]->szService[0] == '\0')
                        return;
-               dump_a_service(ServicePtrs[snum], f, show_defaults);
+               lpcfg_dump_a_service(ServicePtrs[snum], &sDefault, f,
+                                    flags_list, show_defaults);
        }
 }
 
@@ -4218,7 +3965,7 @@ int lp_servicenumber(const char *pszServiceName)
        for (iService = iNumServices - 1; iService >= 0; iService--) {
                if (VALID(iService) && ServicePtrs[iService]->szService) {
                        /*
-                        * The substitution here is used to support %U is
+                        * The substitution here is used to support %U in
                         * service names
                         */
                        fstrcpy(serviceName, ServicePtrs[iService]->szService);
@@ -4419,7 +4166,7 @@ const char *lp_printcapname(void)
        return PRINTCAP_NAME;
 }
 
-static uint32 spoolss_state;
+static uint32_t spoolss_state;
 
 bool lp_disable_spoolss( void )
 {
@@ -4429,14 +4176,14 @@ bool lp_disable_spoolss( void )
        return spoolss_state == SVCCTL_STOPPED ? true : false;
 }
 
-void lp_set_spoolss_state( uint32 state )
+void lp_set_spoolss_state( uint32_t state )
 {
        SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
 
        spoolss_state = state;
 }
 
-uint32 lp_get_spoolss_state( void )
+uint32_t lp_get_spoolss_state( void )
 {
        return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
 }
@@ -4599,7 +4346,34 @@ int lp_security(void)
                                lp__security());
 }
 
+int lp_client_max_protocol(void)
+{
+       int client_max_protocol = lp__client_max_protocol();
+       if (client_max_protocol == PROTOCOL_DEFAULT) {
+               return PROTOCOL_NT1;
+       }
+       return client_max_protocol;
+}
+
+int lp_winbindd_max_protocol(void)
+{
+       int client_max_protocol = lp__client_max_protocol();
+       if (client_max_protocol == PROTOCOL_DEFAULT) {
+               return PROTOCOL_LATEST;
+       }
+       return client_max_protocol;
+}
+
 struct loadparm_global * get_globals(void)
 {
        return &Globals;
 }
+
+unsigned int * get_flags(void)
+{
+       if (flags_list == NULL) {
+               flags_list = talloc_zero_array(NULL, unsigned int, num_parameters());
+       }
+
+       return flags_list;
+}