source/param/loadparm.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Parameter loading functions
   4    Copyright (C) Karl Auer 1993-1998
   5
   6    Largely re-written by Andrew Tridgell, September 1994
   7
   8    Copyright (C) Simo Sorce 2001
   9    Copyright (C) Alexander Bokovoy 2002
  10    Copyright (C) Stefan (metze) Metzmacher 2002
  11    Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
  12
  13    This program is free software; you can redistribute it and/or modify
  14    it under the terms of the GNU General Public License as published by
  15    the Free Software Foundation; either version 2 of the License, or
  16    (at your option) any later version.
  17
  18    This program is distributed in the hope that it will be useful,
  19    but WITHOUT ANY WARRANTY; without even the implied warranty of
  20    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  21    GNU General Public License for more details.
  22
  23    You should have received a copy of the GNU General Public License
  24    along with this program; if not, write to the Free Software
  25    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  26 */
  27
  28 /*
  29  *  Load parameters.
  30  *
  31  *  This module provides suitable callback functions for the params
  32  *  module. It builds the internal table of service details which is
  33  *  then used by the rest of the server.
  34  *
  35  * To add a parameter:
  36  *
  37  * 1) add it to the global or service structure definition
  38  * 2) add it to the parm_table
  39  * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
  40  * 4) If it's a global then initialise it in init_globals. If a local
  41  *    (ie. service) parameter then initialise it in the sDefault structure
  42  *
  43  *
  44  * Notes:
  45  *   The configuration file is processed sequentially for speed. It is NOT
  46  *   accessed randomly as happens in 'real' Windows. For this reason, there
  47  *   is a fair bit of sequence-dependent code here - ie., code which assumes
  48  *   that certain things happen before others. In particular, the code which
  49  *   happens at the boundary between sections is delicately poised, so be
  50  *   careful!
  51  *
  52  */
  53
  54 #include "includes.h"
  55
  56 BOOL in_client = False;         /* Not in the client by default */
  57 BOOL bLoaded = False;
  58
  59 extern userdom_struct current_user_info;
  60 extern pstring user_socket_options;
  61 extern enum protocol_types Protocol;
  62
  63 #ifndef GLOBAL_NAME
  64 #define GLOBAL_NAME "global"
  65 #endif
  66
  67 #ifndef PRINTERS_NAME
  68 #define PRINTERS_NAME "printers"
  69 #endif
  70
  71 #ifndef HOMES_NAME
  72 #define HOMES_NAME "homes"
  73 #endif
  74
  75 /* some helpful bits */
  76 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
  77 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
  78
  79 #define USERSHARE_VALID 1
  80 #define USERSHARE_PENDING_DELETE 2
  81
  82 int keepalive = DEFAULT_KEEPALIVE;
  83 BOOL use_getwd_cache = True;
  84
  85 extern int extra_time_offset;
  86
  87 static BOOL defaults_saved = False;
  88
  89 typedef struct _param_opt_struct param_opt_struct;
  90 struct _param_opt_struct {
  91         param_opt_struct *prev, *next;
  92         char *key;
  93         char *value;
  94         char **list;
  95 };
  96
  97 /*
  98  * This structure describes global (ie., server-wide) parameters.
  99  */
 100 typedef struct {
 101         char *smb_ports;
 102         char *dos_charset;
 103         char *unix_charset;
 104         char *display_charset;
 105         char *szPrintcapname;
 106         char *szAddPortCommand;
 107         char *szEnumPortsCommand;
 108         char *szAddPrinterCommand;
 109         char *szDeletePrinterCommand;
 110         char *szOs2DriverMap;
 111         char *szLockDir;
 112         char *szPidDir;
 113         char *szRootdir;
 114         char *szDefaultService;
 115         char *szGetQuota;
 116         char *szSetQuota;
 117         char *szMsgCommand;
 118         char *szHostsEquiv;
 119         char *szServerString;
 120         char *szAutoServices;
 121         char *szPasswdProgram;
 122         char *szPasswdChat;
 123         char *szLogFile;
 124         char *szConfigFile;
 125         char *szSMBPasswdFile;
 126         char *szPrivateDir;
 127         char *szPassdbBackend;
 128         char **szPreloadModules;
 129         char *szPasswordServer;
 130         char *szSocketOptions;
 131         char *szRealm;
 132         char *szAfsUsernameMap;
 133         int iAfsTokenLifetime;
 134         char *szLogNtTokenCommand;
 135         char *szUsernameMap;
 136         char *szLogonScript;
 137         char *szLogonPath;
 138         char *szLogonDrive;
 139         char *szLogonHome;
 140         char **szWINSservers;
 141         char **szInterfaces;
 142         char *szRemoteAnnounce;
 143         char *szRemoteBrowseSync;
 144         char *szSocketAddress;
 145         char *szNISHomeMapName;
 146         char *szAnnounceVersion;        /* This is initialised in init_globals */
 147         char *szWorkgroup;
 148         char *szNetbiosName;
 149         char **szNetbiosAliases;
 150         char *szNetbiosScope;
 151         char *szNameResolveOrder;
 152         char *szPanicAction;
 153         char *szAddUserScript;
 154         char *szRenameUserScript;
 155         char *szDelUserScript;
 156         char *szAddGroupScript;
 157         char *szDelGroupScript;
 158         char *szAddUserToGroupScript;
 159         char *szDelUserFromGroupScript;
 160         char *szSetPrimaryGroupScript;
 161         char *szAddMachineScript;
 162         char *szShutdownScript;
 163         char *szAbortShutdownScript;
 164         char *szUsernameMapScript;
 165         char *szCheckPasswordScript;
 166         char *szWINSHook;
 167         char *szWINSPartners;
 168         char *szUtmpDir;
 169         char *szWtmpDir;
 170         BOOL bUtmp;
 171         char *szIdmapUID;
 172         char *szIdmapGID;
 173         BOOL bPassdbExpandExplicit;
 174         int AlgorithmicRidBase;
 175         char *szTemplateHomedir;
 176         char *szTemplateShell;
 177         char *szWinbindSeparator;
 178         BOOL bWinbindEnumUsers;
 179         BOOL bWinbindEnumGroups;
 180         BOOL bWinbindUseDefaultDomain;
 181         BOOL bWinbindTrustedDomainsOnly;
 182         BOOL bWinbindNestedGroups;
 183         BOOL bWinbindRefreshTickets;
 184         BOOL bWinbindOfflineLogon;
 185         char **szIdmapBackend;
 186         char *szAddShareCommand;
 187         char *szChangeShareCommand;
 188         char *szDeleteShareCommand;
 189         char **szEventLogs;
 190         char *szGuestaccount;
 191         char *szManglingMethod;
 192         char **szServicesList;
 193         char *szUsersharePath;
 194         char *szUsershareTemplateShare;
 195         char **szUsersharePrefixAllowList;
 196         char **szUsersharePrefixDenyList;
 197         int mangle_prefix;
 198         int max_log_size;
 199         char *szLogLevel;
 200         int max_xmit;
 201         int max_mux;
 202         int max_open_files;
 203         int open_files_db_hash_size;
 204         int pwordlevel;
 205         int unamelevel;
 206         int deadtime;
 207         int maxprotocol;
 208         int minprotocol;
 209         int security;
 210         char **AuthMethods;
 211         BOOL paranoid_server_security;
 212         int maxdisksize;
 213         int lpqcachetime;
 214         int iMaxSmbdProcesses;
 215         BOOL bDisableSpoolss;
 216         int syslog;
 217         int os_level;
 218         int enhanced_browsing;
 219         int max_ttl;
 220         int max_wins_ttl;
 221         int min_wins_ttl;
 222         int lm_announce;
 223         int lm_interval;
 224         int announce_as;        /* This is initialised in init_globals */
 225         int machine_password_timeout;
 226         int change_notify_timeout;
 227         int map_to_guest;
 228         int oplock_break_wait_time;
 229         int winbind_cache_time;
 230         int winbind_max_idle_children;
 231         char **szWinbindNssInfo;
 232         int iLockSpinCount;
 233         int iLockSpinTime;
 234         char *szLdapMachineSuffix;
 235         char *szLdapUserSuffix;
 236         char *szLdapIdmapSuffix;
 237         char *szLdapGroupSuffix;
 238 #ifdef WITH_LDAP_SAMCONFIG
 239         int ldap_port;
 240         char *szLdapServer;
 241 #endif
 242         int ldap_ssl;
 243         char *szLdapSuffix;
 244         char *szLdapAdminDn;
 245         char *szAclCompat;
 246         char *szCupsServer;
 247         char *szIPrintServer;
 248         int ldap_passwd_sync;
 249         int ldap_replication_sleep;
 250         int ldap_timeout; /* This is initialised in init_globals */
 251         int ldap_page_size;
 252         BOOL ldap_delete_dn;
 253         BOOL bMsAddPrinterWizard;
 254         BOOL bDNSproxy;
 255         BOOL bWINSsupport;
 256         BOOL bWINSproxy;
 257         BOOL bLocalMaster;
 258         BOOL bPreferredMaster;
 259         BOOL bDomainMaster;
 260         BOOL bDomainLogons;
 261         BOOL bEncryptPasswords;
 262         BOOL bUpdateEncrypt;
 263         int  clientSchannel;
 264         int  serverSchannel;
 265         BOOL bNullPasswords;
 266         BOOL bObeyPamRestrictions;
 267         BOOL bLoadPrinters;
 268         int PrintcapCacheTime;
 269         BOOL bLargeReadwrite;
 270         BOOL bReadRaw;
 271         BOOL bWriteRaw;
 272         BOOL bReadbmpx;
 273         BOOL bSyslogOnly;
 274         BOOL bBrowseList;
 275         BOOL bNISHomeMap;
 276         BOOL bTimeServer;
 277         BOOL bBindInterfacesOnly;
 278         BOOL bPamPasswordChange;
 279         BOOL bUnixPasswdSync;
 280         BOOL bPasswdChatDebug;
 281         int iPasswdChatTimeout;
 282         BOOL bTimestampLogs;
 283         BOOL bNTSmbSupport;
 284         BOOL bNTPipeSupport;
 285         BOOL bNTStatusSupport;
 286         BOOL bStatCache;
 287         int iMaxStatCacheSize;
 288         BOOL bKernelOplocks;
 289         BOOL bAllowTrustedDomains;
 290         BOOL bLanmanAuth;
 291         BOOL bNTLMAuth;
 292         BOOL bUseSpnego;
 293         BOOL bClientLanManAuth;
 294         BOOL bClientNTLMv2Auth;
 295         BOOL bClientPlaintextAuth;
 296         BOOL bClientUseSpnego;
 297         BOOL bDebugHiresTimestamp;
 298         BOOL bDebugPid;
 299         BOOL bDebugUid;
 300         BOOL bHostMSDfs;
 301         BOOL bUseMmap;
 302         BOOL bHostnameLookups;
 303         BOOL bUnixExtensions;
 304         BOOL bDisableNetbios;
 305         BOOL bKernelChangeNotify;
 306         BOOL bFamChangeNotify;
 307         BOOL bUseKerberosKeytab;
 308         BOOL bDeferSharingViolations;
 309         BOOL bEnablePrivileges;
 310         BOOL bASUSupport;
 311         BOOL bUsershareOwnerOnly;
 312         int restrict_anonymous;
 313         int name_cache_timeout;
 314         int client_signing;
 315         int server_signing;
 316         int iUsershareMaxShares;
 317
 318         BOOL bResetOnZeroVC;
 319         param_opt_struct *param_opt;
 320 } global;
 321
 322 static global Globals;
 323
 324 /*
 325  * This structure describes a single service.
 326  */
 327 typedef struct {
 328         BOOL valid;
 329         BOOL autoloaded;
 330         int usershare;
 331         time_t usershare_last_mod;
 332         char *szService;
 333         char *szPath;
 334         char *szUsername;
 335         char **szInvalidUsers;
 336         char **szValidUsers;
 337         char **szAdminUsers;
 338         char *szCopy;
 339         char *szInclude;
 340         char *szPreExec;
 341         char *szPostExec;
 342         char *szRootPreExec;
 343         char *szRootPostExec;
 344         char *szCupsOptions;
 345         char *szPrintcommand;
 346         char *szLpqcommand;
 347         char *szLprmcommand;
 348         char *szLppausecommand;
 349         char *szLpresumecommand;
 350         char *szQueuepausecommand;
 351         char *szQueueresumecommand;
 352         char *szPrintername;
 353         char *szDontdescend;
 354         char **szHostsallow;
 355         char **szHostsdeny;
 356         char *szMagicScript;
 357         char *szMagicOutput;
 358         char *szMangledMap;
 359         char *szVetoFiles;
 360         char *szHideFiles;
 361         char *szVetoOplockFiles;
 362         char *comment;
 363         char *force_user;
 364         char *force_group;
 365         char **readlist;
 366         char **writelist;
 367         char **printer_admin;
 368         char *volume;
 369         char *fstype;
 370         char **szVfsObjects;
 371         char *szMSDfsProxy;
 372         char *szAioWriteBehind;
 373         char *szDfree;
 374         int iMinPrintSpace;
 375         int iMaxPrintJobs;
 376         int iMaxReportedPrintJobs;
 377         int iWriteCacheSize;
 378         int iCreate_mask;
 379         int iCreate_force_mode;
 380         int iSecurity_mask;
 381         int iSecurity_force_mode;
 382         int iDir_mask;
 383         int iDir_force_mode;
 384         int iDir_Security_mask;
 385         int iDir_Security_force_mode;
 386         int iMaxConnections;
 387         int iDefaultCase;
 388         int iPrinting;
 389         int iOplockContentionLimit;
 390         int iCSCPolicy;
 391         int iBlock_size;
 392         int iDfreeCacheTime;
 393         BOOL bPreexecClose;
 394         BOOL bRootpreexecClose;
 395         int  iCaseSensitive;
 396         BOOL bCasePreserve;
 397         BOOL bShortCasePreserve;
 398         BOOL bHideDotFiles;
 399         BOOL bHideSpecialFiles;
 400         BOOL bHideUnReadable;
 401         BOOL bHideUnWriteableFiles;
 402         BOOL bBrowseable;
 403         BOOL bAvailable;
 404         BOOL bRead_only;
 405         BOOL bNo_set_dir;
 406         BOOL bGuest_only;
 407         BOOL bGuest_ok;
 408         BOOL bPrint_ok;
 409         BOOL bMap_system;
 410         BOOL bMap_hidden;
 411         BOOL bMap_archive;
 412         BOOL bStoreDosAttributes;
 413         BOOL bDmapiSupport;
 414         BOOL bLocking;
 415         int iStrictLocking;
 416         BOOL bPosixLocking;
 417         BOOL bShareModes;
 418         BOOL bOpLocks;
 419         BOOL bLevel2OpLocks;
 420         BOOL bOnlyUser;
 421         BOOL bMangledNames;
 422         BOOL bWidelinks;
 423         BOOL bSymlinks;
 424         BOOL bSyncAlways;
 425         BOOL bStrictAllocate;
 426         BOOL bStrictSync;
 427         char magic_char;
 428         BOOL *copymap;
 429         BOOL bDeleteReadonly;
 430         BOOL bFakeOplocks;
 431         BOOL bDeleteVetoFiles;
 432         BOOL bDosFilemode;
 433         BOOL bDosFiletimes;
 434         BOOL bDosFiletimeResolution;
 435         BOOL bFakeDirCreateTimes;
 436         BOOL bBlockingLocks;
 437         BOOL bInheritPerms;
 438         BOOL bInheritACLS;
 439         BOOL bInheritOwner;
 440         BOOL bMSDfsRoot;
 441         BOOL bUseClientDriver;
 442         BOOL bDefaultDevmode;
 443         BOOL bForcePrintername;
 444         BOOL bNTAclSupport;
 445         BOOL bForceUnknownAclUser;
 446         BOOL bUseSendfile;
 447         BOOL bProfileAcls;
 448         BOOL bMap_acl_inherit;
 449         BOOL bAfs_Share;
 450         BOOL bEASupport;
 451         BOOL bAclCheckPermissions;
 452         BOOL bAclMapFullControl;
 453         BOOL bAclGroupControl;
 454         int iallocation_roundup_size;
 455         int iAioReadSize;
 456         int iAioWriteSize;
 457         int iMap_readonly;
 458         param_opt_struct *param_opt;
 459
 460         char dummy[3];          /* for alignment */
 461 } service;
 462
 463
 464 /* This is a default service used to prime a services structure */
 465 static service sDefault = {
 466         True,                   /* valid */
 467         False,                  /* not autoloaded */
 468         0,                      /* not a usershare */
 469         (time_t)0,              /* No last mod time */
 470         NULL,                   /* szService */
 471         NULL,                   /* szPath */
 472         NULL,                   /* szUsername */
 473         NULL,                   /* szInvalidUsers */
 474         NULL,                   /* szValidUsers */
 475         NULL,                   /* szAdminUsers */
 476         NULL,                   /* szCopy */
 477         NULL,                   /* szInclude */
 478         NULL,                   /* szPreExec */
 479         NULL,                   /* szPostExec */
 480         NULL,                   /* szRootPreExec */
 481         NULL,                   /* szRootPostExec */
 482         NULL,                   /* szCupsOptions */
 483         NULL,                   /* szPrintcommand */
 484         NULL,                   /* szLpqcommand */
 485         NULL,                   /* szLprmcommand */
 486         NULL,                   /* szLppausecommand */
 487         NULL,                   /* szLpresumecommand */
 488         NULL,                   /* szQueuepausecommand */
 489         NULL,                   /* szQueueresumecommand */
 490         NULL,                   /* szPrintername */
 491         NULL,                   /* szDontdescend */
 492         NULL,                   /* szHostsallow */
 493         NULL,                   /* szHostsdeny */
 494         NULL,                   /* szMagicScript */
 495         NULL,                   /* szMagicOutput */
 496         NULL,                   /* szMangledMap */
 497         NULL,                   /* szVetoFiles */
 498         NULL,                   /* szHideFiles */
 499         NULL,                   /* szVetoOplockFiles */
 500         NULL,                   /* comment */
 501         NULL,                   /* force user */
 502         NULL,                   /* force group */
 503         NULL,                   /* readlist */
 504         NULL,                   /* writelist */
 505         NULL,                   /* printer admin */
 506         NULL,                   /* volume */
 507         NULL,                   /* fstype */
 508         NULL,                   /* vfs objects */
 509         NULL,                   /* szMSDfsProxy */
 510         NULL,                   /* szAioWriteBehind */
 511         NULL,                   /* szDfree */
 512         0,                      /* iMinPrintSpace */
 513         1000,                   /* iMaxPrintJobs */
 514         0,                      /* iMaxReportedPrintJobs */
 515         0,                      /* iWriteCacheSize */
 516         0744,                   /* iCreate_mask */
 517         0000,                   /* iCreate_force_mode */
 518         0777,                   /* iSecurity_mask */
 519         0,                      /* iSecurity_force_mode */
 520         0755,                   /* iDir_mask */
 521         0000,                   /* iDir_force_mode */
 522         0777,                   /* iDir_Security_mask */
 523         0,                      /* iDir_Security_force_mode */
 524         0,                      /* iMaxConnections */
 525         CASE_LOWER,             /* iDefaultCase */
 526         DEFAULT_PRINTING,       /* iPrinting */
 527         2,                      /* iOplockContentionLimit */
 528         0,                      /* iCSCPolicy */
 529         1024,                   /* iBlock_size */
 530         0,                      /* iDfreeCacheTime */
 531         False,                  /* bPreexecClose */
 532         False,                  /* bRootpreexecClose */
 533         Auto,                   /* case sensitive */
 534         True,                   /* case preserve */
 535         True,                   /* short case preserve */
 536         True,                   /* bHideDotFiles */
 537         False,                  /* bHideSpecialFiles */
 538         False,                  /* bHideUnReadable */
 539         False,                  /* bHideUnWriteableFiles */
 540         True,                   /* bBrowseable */
 541         True,                   /* bAvailable */
 542         True,                   /* bRead_only */
 543         True,                   /* bNo_set_dir */
 544         False,                  /* bGuest_only */
 545         False,                  /* bGuest_ok */
 546         False,                  /* bPrint_ok */
 547         False,                  /* bMap_system */
 548         False,                  /* bMap_hidden */
 549         True,                   /* bMap_archive */
 550         False,                  /* bStoreDosAttributes */
 551         False,                  /* bDmapiSupport */
 552         True,                   /* bLocking */
 553         Auto,                   /* iStrictLocking */
 554         True,                   /* bPosixLocking */
 555         True,                   /* bShareModes */
 556         True,                   /* bOpLocks */
 557         True,                   /* bLevel2OpLocks */
 558         False,                  /* bOnlyUser */
 559         True,                   /* bMangledNames */
 560         True,                   /* bWidelinks */
 561         True,                   /* bSymlinks */
 562         False,                  /* bSyncAlways */
 563         False,                  /* bStrictAllocate */
 564         False,                  /* bStrictSync */
 565         '~',                    /* magic char */
 566         NULL,                   /* copymap */
 567         False,                  /* bDeleteReadonly */
 568         False,                  /* bFakeOplocks */
 569         False,                  /* bDeleteVetoFiles */
 570         False,                  /* bDosFilemode */
 571         True,                   /* bDosFiletimes */
 572         False,                  /* bDosFiletimeResolution */
 573         False,                  /* bFakeDirCreateTimes */
 574         True,                   /* bBlockingLocks */
 575         False,                  /* bInheritPerms */
 576         False,                  /* bInheritACLS */
 577         False,                  /* bInheritOwner */
 578         True,                   /* bMSDfsRoot */
 579         False,                  /* bUseClientDriver */
 580         True,                   /* bDefaultDevmode */
 581         False,                  /* bForcePrintername */
 582         True,                   /* bNTAclSupport */
 583         False,                  /* bForceUnknownAclUser */
 584         False,                  /* bUseSendfile */
 585         False,                  /* bProfileAcls */
 586         False,                  /* bMap_acl_inherit */
 587         False,                  /* bAfs_Share */
 588         False,                  /* bEASupport */
 589         True,                   /* bAclCheckPermissions */
 590         True,                   /* bAclMapFullControl */
 591         False,                  /* bAclGroupControl */
 592         SMB_ROUNDUP_ALLOCATION_SIZE,            /* iallocation_roundup_size */
 593         0,                      /* iAioReadSize */
 594         0,                      /* iAioWriteSize */
 595         MAP_READONLY_YES,       /* iMap_readonly */
 596
 597         NULL,                   /* Parametric options */
 598
 599         ""                      /* dummy */
 600 };
 601
 602 /* local variables */
 603 static service **ServicePtrs = NULL;
 604 static int iNumServices = 0;
 605 static int iServiceIndex = 0;
 606 static TDB_CONTEXT *ServiceHash;
 607 static int *invalid_services = NULL;
 608 static int num_invalid_services = 0;
 609 static BOOL bInGlobalSection = True;
 610 static BOOL bGlobalOnly = False;
 611 static int server_role;
 612 static int default_server_announce;
 613
 614 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
 615
 616 /* prototypes for the special type handlers */
 617 static BOOL handle_include( int snum, const char *pszParmValue, char **ptr);
 618 static BOOL handle_copy( int snum, const char *pszParmValue, char **ptr);
 619 static BOOL handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
 620 static BOOL handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
 621 static BOOL handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
 622 static BOOL handle_debug_list( int snum, const char *pszParmValue, char **ptr );
 623 static BOOL handle_workgroup( int snum, const char *pszParmValue, char **ptr );
 624 static BOOL handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
 625 static BOOL handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
 626 static BOOL handle_charset( int snum, const char *pszParmValue, char **ptr );
 627 static BOOL handle_printing( int snum, const char *pszParmValue, char **ptr);
 628
 629 static void set_server_role(void);
 630 static void set_default_server_announce_type(void);
 631 static void set_allowed_client_auth(void);
 632
 633 static const struct enum_list enum_protocol[] = {
 634         {PROTOCOL_NT1, "NT1"},
 635         {PROTOCOL_LANMAN2, "LANMAN2"},
 636         {PROTOCOL_LANMAN1, "LANMAN1"},
 637         {PROTOCOL_CORE, "CORE"},
 638         {PROTOCOL_COREPLUS, "COREPLUS"},
 639         {PROTOCOL_COREPLUS, "CORE+"},
 640         {-1, NULL}
 641 };
 642
 643 static const struct enum_list enum_security[] = {
 644         {SEC_SHARE, "SHARE"},
 645         {SEC_USER, "USER"},
 646         {SEC_SERVER, "SERVER"},
 647         {SEC_DOMAIN, "DOMAIN"},
 648 #ifdef HAVE_ADS
 649         {SEC_ADS, "ADS"},
 650 #endif
 651         {-1, NULL}
 652 };
 653
 654 static const struct enum_list enum_printing[] = {
 655         {PRINT_SYSV, "sysv"},
 656         {PRINT_AIX, "aix"},
 657         {PRINT_HPUX, "hpux"},
 658         {PRINT_BSD, "bsd"},
 659         {PRINT_QNX, "qnx"},
 660         {PRINT_PLP, "plp"},
 661         {PRINT_LPRNG, "lprng"},
 662         {PRINT_CUPS, "cups"},
 663         {PRINT_IPRINT, "iprint"},
 664         {PRINT_LPRNT, "nt"},
 665         {PRINT_LPROS2, "os2"},
 666 #ifdef DEVELOPER
 667         {PRINT_TEST, "test"},
 668         {PRINT_VLP, "vlp"},
 669 #endif /* DEVELOPER */
 670         {-1, NULL}
 671 };
 672
 673 static const struct enum_list enum_ldap_ssl[] = {
 674 #ifdef WITH_LDAP_SAMCONFIG
 675         {LDAP_SSL_ON, "Yes"},
 676         {LDAP_SSL_ON, "yes"},
 677         {LDAP_SSL_ON, "on"},
 678         {LDAP_SSL_ON, "On"},
 679 #endif
 680         {LDAP_SSL_OFF, "no"},
 681         {LDAP_SSL_OFF, "No"},
 682         {LDAP_SSL_OFF, "off"},
 683         {LDAP_SSL_OFF, "Off"},
 684         {LDAP_SSL_START_TLS, "start tls"},
 685         {LDAP_SSL_START_TLS, "Start_tls"},
 686         {-1, NULL}
 687 };
 688
 689 static const struct enum_list enum_ldap_passwd_sync[] = {
 690         {LDAP_PASSWD_SYNC_OFF, "no"},
 691         {LDAP_PASSWD_SYNC_OFF, "No"},
 692         {LDAP_PASSWD_SYNC_OFF, "off"},
 693         {LDAP_PASSWD_SYNC_OFF, "Off"},
 694         {LDAP_PASSWD_SYNC_ON, "Yes"},
 695         {LDAP_PASSWD_SYNC_ON, "yes"},
 696         {LDAP_PASSWD_SYNC_ON, "on"},
 697         {LDAP_PASSWD_SYNC_ON, "On"},
 698         {LDAP_PASSWD_SYNC_ONLY, "Only"},
 699         {LDAP_PASSWD_SYNC_ONLY, "only"},
 700         {-1, NULL}
 701 };
 702
 703 /* Types of machine we can announce as. */
 704 #define ANNOUNCE_AS_NT_SERVER 1
 705 #define ANNOUNCE_AS_WIN95 2
 706 #define ANNOUNCE_AS_WFW 3
 707 #define ANNOUNCE_AS_NT_WORKSTATION 4
 708
 709 static const struct enum_list enum_announce_as[] = {
 710         {ANNOUNCE_AS_NT_SERVER, "NT"},
 711         {ANNOUNCE_AS_NT_SERVER, "NT Server"},
 712         {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
 713         {ANNOUNCE_AS_WIN95, "win95"},
 714         {ANNOUNCE_AS_WFW, "WfW"},
 715         {-1, NULL}
 716 };
 717
 718 static const struct enum_list enum_map_readonly[] = {
 719         {MAP_READONLY_NO, "no"},
 720         {MAP_READONLY_NO, "false"},
 721         {MAP_READONLY_NO, "0"},
 722         {MAP_READONLY_YES, "yes"},
 723         {MAP_READONLY_YES, "true"},
 724         {MAP_READONLY_YES, "1"},
 725         {MAP_READONLY_PERMISSIONS, "permissions"},
 726         {MAP_READONLY_PERMISSIONS, "perms"},
 727         {-1, NULL}
 728 };
 729
 730 static const struct enum_list enum_case[] = {
 731         {CASE_LOWER, "lower"},
 732         {CASE_UPPER, "upper"},
 733         {-1, NULL}
 734 };
 735
 736 static const struct enum_list enum_bool_auto[] = {
 737         {False, "No"},
 738         {False, "False"},
 739         {False, "0"},
 740         {True, "Yes"},
 741         {True, "True"},
 742         {True, "1"},
 743         {Auto, "Auto"},
 744         {-1, NULL}
 745 };
 746
 747 /* Client-side offline caching policy types */
 748 #define CSC_POLICY_MANUAL 0
 749 #define CSC_POLICY_DOCUMENTS 1
 750 #define CSC_POLICY_PROGRAMS 2
 751 #define CSC_POLICY_DISABLE 3
 752
 753 static const struct enum_list enum_csc_policy[] = {
 754         {CSC_POLICY_MANUAL, "manual"},
 755         {CSC_POLICY_DOCUMENTS, "documents"},
 756         {CSC_POLICY_PROGRAMS, "programs"},
 757         {CSC_POLICY_DISABLE, "disable"},
 758         {-1, NULL}
 759 };
 760
 761 /* SMB signing types. */
 762 static const struct enum_list enum_smb_signing_vals[] = {
 763         {False, "No"},
 764         {False, "False"},
 765         {False, "0"},
 766         {False, "Off"},
 767         {False, "disabled"},
 768         {True, "Yes"},
 769         {True, "True"},
 770         {True, "1"},
 771         {True, "On"},
 772         {True, "enabled"},
 773         {Auto, "auto"},
 774         {Required, "required"},
 775         {Required, "mandatory"},
 776         {Required, "force"},
 777         {Required, "forced"},
 778         {Required, "enforced"},
 779         {-1, NULL}
 780 };
 781
 782 /* ACL compatibility options. */
 783 static const struct enum_list enum_acl_compat_vals[] = {
 784     { ACL_COMPAT_AUTO, "auto" },
 785     { ACL_COMPAT_WINNT, "winnt" },
 786     { ACL_COMPAT_WIN2K, "win2k" },
 787     { -1, NULL}
 788 };
 789
 790 /*
 791    Do you want session setups at user level security with a invalid
 792    password to be rejected or allowed in as guest? WinNT rejects them
 793    but it can be a pain as it means "net view" needs to use a password
 794
 795    You have 3 choices in the setting of map_to_guest:
 796
 797    "Never" means session setups with an invalid password
 798    are rejected. This is the default.
 799
 800    "Bad User" means session setups with an invalid password
 801    are rejected, unless the username does not exist, in which case it
 802    is treated as a guest login
 803
 804    "Bad Password" means session setups with an invalid password
 805    are treated as a guest login
 806
 807    Note that map_to_guest only has an effect in user or server
 808    level security.
 809 */
 810
 811 static const struct enum_list enum_map_to_guest[] = {
 812         {NEVER_MAP_TO_GUEST, "Never"},
 813         {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
 814         {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
 815         {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
 816         {-1, NULL}
 817 };
 818
 819 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
 820  *
 821  * The FLAG_HIDE is explicit. Paramters set this way do NOT appear in any edit
 822  * screen in SWAT. This is used to exclude parameters as well as to squash all
 823  * parameters that have been duplicated by pseudonyms.
 824  *
 825  * NOTE: To display a parameter in BASIC view set FLAG_BASIC
 826  *       Any parameter that does NOT have FLAG_ADVANCED will not disply at all
 827  *       Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
 828  *        respective views.
 829  *
 830  * NOTE2: Handling of duplicated (synonym) paramters:
 831  *      Only the first occurance of a parameter should be enabled by FLAG_BASIC
 832  *      and/or FLAG_ADVANCED. All duplicates following the first mention should be
 833  *      set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
 834  *      name first, and all synonyms must follow it with the FLAG_HIDE attribute.
 835  */
 836
 837 static struct parm_struct parm_table[] = {
 838         {N_("Base Options"), P_SEP, P_SEPARATOR},
 839
 840         {"dos charset", P_STRING, P_GLOBAL, &Globals.dos_charset, handle_charset, NULL, FLAG_ADVANCED},
 841         {"unix charset", P_STRING, P_GLOBAL, &Globals.unix_charset, handle_charset, NULL, FLAG_ADVANCED},
 842         {"display charset", P_STRING, P_GLOBAL, &Globals.display_charset, handle_charset, NULL, FLAG_ADVANCED},
 843         {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 844         {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 845         {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_HIDE},
 846         {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkgroup, handle_workgroup, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 847 #ifdef WITH_ADS
 848         {"realm", P_USTRING, P_GLOBAL, &Globals.szRealm, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 849 #endif
 850         {"netbios name", P_USTRING, P_GLOBAL, &Globals.szNetbiosName, handle_netbios_name, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 851         {"netbios aliases", P_LIST, P_GLOBAL, &Globals.szNetbiosAliases, handle_netbios_aliases,  NULL, FLAG_ADVANCED},
 852         {"netbios scope", P_USTRING, P_GLOBAL, &Globals.szNetbiosScope, handle_netbios_scope,  NULL, FLAG_ADVANCED},
 853         {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED },
 854         {"interfaces", P_LIST, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 855         {"bind interfaces only", P_BOOL, P_GLOBAL, &Globals.bBindInterfacesOnly, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 856
 857         {N_("Security Options"), P_SEP, P_SEPARATOR},
 858
 859         {"security", P_ENUM, P_GLOBAL, &Globals.security, NULL, enum_security, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 860         {"auth methods", P_LIST, P_GLOBAL, &Globals.AuthMethods, NULL, NULL, FLAG_ADVANCED},
 861         {"encrypt passwords", P_BOOL, P_GLOBAL, &Globals.bEncryptPasswords, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 862         {"update encrypted", P_BOOL, P_GLOBAL, &Globals.bUpdateEncrypt, NULL, NULL, FLAG_ADVANCED},
 863         {"client schannel", P_ENUM, P_GLOBAL, &Globals.clientSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 864         {"server schannel", P_ENUM, P_GLOBAL, &Globals.serverSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 865         {"allow trusted domains", P_BOOL, P_GLOBAL, &Globals.bAllowTrustedDomains, NULL, NULL, FLAG_ADVANCED},
 866         {"hosts equiv", P_STRING, P_GLOBAL, &Globals.szHostsEquiv, NULL, NULL, FLAG_ADVANCED},
 867         {"map to guest", P_ENUM, P_GLOBAL, &Globals.map_to_guest, NULL, enum_map_to_guest, FLAG_ADVANCED},
 868         {"null passwords", P_BOOL, P_GLOBAL, &Globals.bNullPasswords, NULL, NULL, FLAG_ADVANCED},
 869         {"obey pam restrictions", P_BOOL, P_GLOBAL, &Globals.bObeyPamRestrictions, NULL, NULL, FLAG_ADVANCED},
 870         {"password server", P_STRING, P_GLOBAL, &Globals.szPasswordServer, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 871         {"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, FLAG_ADVANCED},
 872         {"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, FLAG_ADVANCED},
 873         {"passdb backend", P_STRING, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 874         {"algorithmic rid base", P_INTEGER, P_GLOBAL, &Globals.AlgorithmicRidBase, NULL, NULL, FLAG_ADVANCED},
 875         {"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_ADVANCED},
 876         {"root dir", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 877         {"root", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 878         {"guest account", P_STRING, P_GLOBAL, &Globals.szGuestaccount, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
 879         {"enable privileges", P_BOOL, P_GLOBAL, &Globals.bEnablePrivileges, NULL, NULL, FLAG_ADVANCED},
 880
 881         {"pam password change", P_BOOL, P_GLOBAL, &Globals.bPamPasswordChange, NULL, NULL, FLAG_ADVANCED},
 882         {"passwd program", P_STRING, P_GLOBAL, &Globals.szPasswdProgram, NULL, NULL, FLAG_ADVANCED},
 883         {"passwd chat", P_STRING, P_GLOBAL, &Globals.szPasswdChat, NULL, NULL, FLAG_ADVANCED},
 884         {"passwd chat debug", P_BOOL, P_GLOBAL, &Globals.bPasswdChatDebug, NULL, NULL, FLAG_ADVANCED},
 885         {"passwd chat timeout", P_INTEGER, P_GLOBAL, &Globals.iPasswdChatTimeout, NULL, NULL, FLAG_ADVANCED},
 886         {"check password script", P_STRING, P_GLOBAL, &Globals.szCheckPasswordScript, NULL, NULL, FLAG_ADVANCED},
 887         {"username map", P_STRING, P_GLOBAL, &Globals.szUsernameMap, NULL, NULL, FLAG_ADVANCED},
 888         {"password level", P_INTEGER, P_GLOBAL, &Globals.pwordlevel, NULL, NULL, FLAG_ADVANCED},
 889         {"username level", P_INTEGER, P_GLOBAL, &Globals.unamelevel, NULL, NULL, FLAG_ADVANCED},
 890         {"unix password sync", P_BOOL, P_GLOBAL, &Globals.bUnixPasswdSync, NULL, NULL, FLAG_ADVANCED},
 891         {"restrict anonymous", P_INTEGER, P_GLOBAL, &Globals.restrict_anonymous, NULL, NULL, FLAG_ADVANCED},
 892         {"lanman auth", P_BOOL, P_GLOBAL, &Globals.bLanmanAuth, NULL, NULL, FLAG_ADVANCED},
 893         {"ntlm auth", P_BOOL, P_GLOBAL, &Globals.bNTLMAuth, NULL, NULL, FLAG_ADVANCED},
 894         {"client NTLMv2 auth", P_BOOL, P_GLOBAL, &Globals.bClientNTLMv2Auth, NULL, NULL, FLAG_ADVANCED},
 895         {"client lanman auth", P_BOOL, P_GLOBAL, &Globals.bClientLanManAuth, NULL, NULL, FLAG_ADVANCED},
 896         {"client plaintext auth", P_BOOL, P_GLOBAL, &Globals.bClientPlaintextAuth, NULL, NULL, FLAG_ADVANCED},
 897
 898         {"username", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 899         {"user", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 900         {"users", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 901
 902         {"invalid users", P_LIST, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 903         {"valid users", P_LIST, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 904         {"admin users", P_LIST, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 905         {"read list", P_LIST, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 906         {"write list", P_LIST, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 907         {"printer admin", P_LIST, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED },
 908         {"force user", P_STRING, P_LOCAL, &sDefault.force_user, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 909         {"force group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 910         {"group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED},
 911
 912         {"read only", P_BOOL, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE},
 913         {"write ok", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 914         {"writeable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 915         {"writable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 916
 917         {"acl check permissions", P_BOOL, P_LOCAL, &sDefault.bAclCheckPermissions, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 918         {"acl group control", P_BOOL, P_LOCAL, &sDefault.bAclGroupControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE | FLAG_DEPRECATED },
 919         {"acl map full control", P_BOOL, P_LOCAL, &sDefault.bAclMapFullControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 920         {"create mask", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 921         {"create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_HIDE},
 922         {"force create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 923         {"security mask", P_OCTAL, P_LOCAL, &sDefault.iSecurity_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 924         {"force security mode", P_OCTAL, P_LOCAL, &sDefault.iSecurity_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 925         {"directory mask", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 926         {"directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 927         {"force directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 928         {"directory security mask", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 929         {"force directory security mode", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 930         {"force unknown acl user", P_BOOL, P_LOCAL, &sDefault.bForceUnknownAclUser, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 931         {"inherit permissions", P_BOOL, P_LOCAL, &sDefault.bInheritPerms, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 932         {"inherit acls", P_BOOL, P_LOCAL, &sDefault.bInheritACLS, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 933         {"inherit owner", P_BOOL, P_LOCAL, &sDefault.bInheritOwner, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 934         {"guest only", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 935         {"only guest", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_HIDE},
 936
 937         {"guest ok", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 938         {"public", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_HIDE},
 939
 940         {"only user", P_BOOL, P_LOCAL, &sDefault.bOnlyUser, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
 941         {"hosts allow", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 942         {"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_HIDE},
 943         {"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 944         {"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_HIDE},
 945         {"preload modules", P_LIST, P_GLOBAL, &Globals.szPreloadModules, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 946         {"use kerberos keytab", P_BOOL, P_GLOBAL, &Globals.bUseKerberosKeytab, NULL, NULL, FLAG_ADVANCED},
 947
 948         {N_("Logging Options"), P_SEP, P_SEPARATOR},
 949
 950         {"log level", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_ADVANCED},
 951         {"debuglevel", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_HIDE},
 952         {"syslog", P_INTEGER, P_GLOBAL, &Globals.syslog, NULL, NULL, FLAG_ADVANCED},
 953         {"syslog only", P_BOOL, P_GLOBAL, &Globals.bSyslogOnly, NULL, NULL, FLAG_ADVANCED},
 954         {"log file", P_STRING, P_GLOBAL, &Globals.szLogFile, NULL, NULL, FLAG_ADVANCED},
 955
 956         {"max log size", P_INTEGER, P_GLOBAL, &Globals.max_log_size, NULL, NULL, FLAG_ADVANCED},
 957         {"debug timestamp", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 958         {"timestamp logs", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 959         {"debug hires timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugHiresTimestamp, NULL, NULL, FLAG_ADVANCED},
 960         {"debug pid", P_BOOL, P_GLOBAL, &Globals.bDebugPid, NULL, NULL, FLAG_ADVANCED},
 961         {"debug uid", P_BOOL, P_GLOBAL, &Globals.bDebugUid, NULL, NULL, FLAG_ADVANCED},
 962
 963         {N_("Protocol Options"), P_SEP, P_SEPARATOR},
 964
 965         {"allocation roundup size", P_INTEGER, P_LOCAL, &sDefault.iallocation_roundup_size, NULL, NULL, FLAG_ADVANCED},
 966         {"aio read size", P_INTEGER, P_LOCAL, &sDefault.iAioReadSize, NULL, NULL, FLAG_ADVANCED},
 967         {"aio write size", P_INTEGER, P_LOCAL, &sDefault.iAioWriteSize, NULL, NULL, FLAG_ADVANCED},
 968         {"aio write behind", P_STRING, P_LOCAL, &sDefault.szAioWriteBehind, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
 969         {"smb ports", P_STRING, P_GLOBAL, &Globals.smb_ports, NULL, NULL, FLAG_ADVANCED},
 970         {"large readwrite", P_BOOL, P_GLOBAL, &Globals.bLargeReadwrite, NULL, NULL, FLAG_ADVANCED},
 971         {"max protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 972         {"protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 973         {"min protocol", P_ENUM, P_GLOBAL, &Globals.minprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 974         {"read bmpx", P_BOOL, P_GLOBAL, &Globals.bReadbmpx, NULL, NULL, FLAG_ADVANCED},
 975         {"read raw", P_BOOL, P_GLOBAL, &Globals.bReadRaw, NULL, NULL, FLAG_ADVANCED},
 976         {"write raw", P_BOOL, P_GLOBAL, &Globals.bWriteRaw, NULL, NULL, FLAG_ADVANCED},
 977         {"disable netbios", P_BOOL, P_GLOBAL, &Globals.bDisableNetbios, NULL, NULL, FLAG_ADVANCED},
 978         {"reset on zero vc", P_BOOL, P_GLOBAL, &Globals.bResetOnZeroVC, NULL, NULL, FLAG_ADVANCED},
 979
 980         {"acl compatibility", P_STRING, P_GLOBAL, &Globals.szAclCompat, NULL,  enum_acl_compat_vals, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 981         {"defer sharing violations", P_BOOL, P_GLOBAL, &Globals.bDeferSharingViolations, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 982         {"ea support", P_BOOL, P_LOCAL, &sDefault.bEASupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 983         {"nt acl support", P_BOOL, P_LOCAL, &sDefault.bNTAclSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 984         {"nt pipe support", P_BOOL, P_GLOBAL, &Globals.bNTPipeSupport, NULL, NULL, FLAG_ADVANCED},
 985         {"nt status support", P_BOOL, P_GLOBAL, &Globals.bNTStatusSupport, NULL, NULL, FLAG_ADVANCED},
 986         {"profile acls", P_BOOL, P_LOCAL, &sDefault.bProfileAcls, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 987
 988         {"announce version", P_STRING, P_GLOBAL, &Globals.szAnnounceVersion, NULL, NULL, FLAG_ADVANCED},
 989         {"announce as", P_ENUM, P_GLOBAL, &Globals.announce_as, NULL, enum_announce_as,  FLAG_ADVANCED},
 990         {"map acl inherit", P_BOOL, P_LOCAL, &sDefault.bMap_acl_inherit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 991         {"afs share", P_BOOL, P_LOCAL, &sDefault.bAfs_Share, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 992         {"max mux", P_INTEGER, P_GLOBAL, &Globals.max_mux, NULL, NULL, FLAG_ADVANCED},
 993         {"max xmit", P_INTEGER, P_GLOBAL, &Globals.max_xmit, NULL, NULL, FLAG_ADVANCED},
 994
 995         {"name resolve order", P_STRING, P_GLOBAL, &Globals.szNameResolveOrder, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 996         {"max ttl", P_INTEGER, P_GLOBAL, &Globals.max_ttl, NULL, NULL, FLAG_ADVANCED},
 997         {"max wins ttl", P_INTEGER, P_GLOBAL, &Globals.max_wins_ttl, NULL, NULL, FLAG_ADVANCED},
 998         {"min wins ttl", P_INTEGER, P_GLOBAL, &Globals.min_wins_ttl, NULL, NULL, FLAG_ADVANCED},
 999         {"time server", P_BOOL, P_GLOBAL, &Globals.bTimeServer, NULL, NULL, FLAG_ADVANCED},
1000         {"unix extensions", P_BOOL, P_GLOBAL, &Globals.bUnixExtensions, NULL, NULL, FLAG_ADVANCED},
1001         {"use spnego", P_BOOL, P_GLOBAL, &Globals.bUseSpnego, NULL, NULL, FLAG_ADVANCED},
1002         {"client signing", P_ENUM, P_GLOBAL, &Globals.client_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1003         {"server signing", P_ENUM, P_GLOBAL, &Globals.server_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1004         {"client use spnego", P_BOOL, P_GLOBAL, &Globals.bClientUseSpnego, NULL, NULL, FLAG_ADVANCED},
1005
1006         {"enable asu support", P_BOOL, P_GLOBAL, &Globals.bASUSupport, NULL, NULL, FLAG_ADVANCED},
1007         {"svcctl list", P_LIST, P_GLOBAL, &Globals.szServicesList, NULL, NULL, FLAG_ADVANCED},
1008
1009         {N_("Tuning Options"), P_SEP, P_SEPARATOR},
1010
1011         {"block size", P_INTEGER, P_LOCAL, &sDefault.iBlock_size, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1012         {"change notify timeout", P_INTEGER, P_GLOBAL, &Globals.change_notify_timeout, NULL, NULL, FLAG_ADVANCED},
1013         {"deadtime", P_INTEGER, P_GLOBAL, &Globals.deadtime, NULL, NULL, FLAG_ADVANCED},
1014         {"getwd cache", P_BOOL, P_GLOBAL, &use_getwd_cache, NULL, NULL, FLAG_ADVANCED},
1015         {"keepalive", P_INTEGER, P_GLOBAL, &keepalive, NULL, NULL, FLAG_ADVANCED},
1016         {"kernel change notify", P_BOOL, P_GLOBAL, &Globals.bKernelChangeNotify, NULL, NULL, FLAG_ADVANCED},
1017         {"fam change notify", P_BOOL, P_GLOBAL, &Globals.bFamChangeNotify, NULL, NULL, FLAG_ADVANCED},
1018
1019         {"lpq cache time", P_INTEGER, P_GLOBAL, &Globals.lpqcachetime, NULL, NULL, FLAG_ADVANCED},
1020         {"max smbd processes", P_INTEGER, P_GLOBAL, &Globals.iMaxSmbdProcesses, NULL, NULL, FLAG_ADVANCED},
1021         {"max connections", P_INTEGER, P_LOCAL, &sDefault.iMaxConnections, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1022         {"paranoid server security", P_BOOL, P_GLOBAL, &Globals.paranoid_server_security, NULL, NULL, FLAG_ADVANCED},
1023         {"max disk size", P_INTEGER, P_GLOBAL, &Globals.maxdisksize, NULL, NULL, FLAG_ADVANCED},
1024         {"max open files", P_INTEGER, P_GLOBAL, &Globals.max_open_files, NULL, NULL, FLAG_ADVANCED},
1025         {"min print space", P_INTEGER, P_LOCAL, &sDefault.iMinPrintSpace, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1026         {"open files database hash size", P_INTEGER, P_GLOBAL, &Globals.open_files_db_hash_size, NULL, NULL, FLAG_ADVANCED},
1027
1028         {"socket options", P_GSTRING, P_GLOBAL, user_socket_options, NULL, NULL, FLAG_ADVANCED},
1029         {"strict allocate", P_BOOL, P_LOCAL, &sDefault.bStrictAllocate, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1030         {"strict sync", P_BOOL, P_LOCAL, &sDefault.bStrictSync, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1031         {"sync always", P_BOOL, P_LOCAL, &sDefault.bSyncAlways, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1032         {"use mmap", P_BOOL, P_GLOBAL, &Globals.bUseMmap, NULL, NULL, FLAG_ADVANCED},
1033         {"use sendfile", P_BOOL, P_LOCAL, &sDefault.bUseSendfile, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1034         {"hostname lookups", P_BOOL, P_GLOBAL, &Globals.bHostnameLookups, NULL, NULL, FLAG_ADVANCED},
1035         {"write cache size", P_INTEGER, P_LOCAL, &sDefault.iWriteCacheSize, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
1036
1037         {"name cache timeout", P_INTEGER, P_GLOBAL, &Globals.name_cache_timeout, NULL, NULL, FLAG_ADVANCED},
1038
1039         {N_("Printing Options"), P_SEP, P_SEPARATOR},
1040
1041         {"max reported print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxReportedPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1042         {"max print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1043         {"load printers", P_BOOL, P_GLOBAL, &Globals.bLoadPrinters, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1044         {"printcap cache time", P_INTEGER, P_GLOBAL, &Globals.PrintcapCacheTime, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1045         {"printcap name", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1046         {"printcap", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_HIDE},
1047         {"printable", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1048         {"print ok", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_HIDE},
1049         {"printing", P_ENUM, P_LOCAL, &sDefault.iPrinting, handle_printing, enum_printing, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1050         {"cups options", P_STRING, P_LOCAL, &sDefault.szCupsOptions, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1051         {"cups server", P_STRING, P_GLOBAL, &Globals.szCupsServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1052         {"iprint server", P_STRING, P_GLOBAL, &Globals.szIPrintServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1053         {"print command", P_STRING, P_LOCAL, &sDefault.szPrintcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1054         {"disable spoolss", P_BOOL, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1055         {"enable spoolss", P_BOOLREV, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_HIDE},
1056         {"lpq command", P_STRING, P_LOCAL, &sDefault.szLpqcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1057         {"lprm command", P_STRING, P_LOCAL, &sDefault.szLprmcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1058         {"lppause command", P_STRING, P_LOCAL, &sDefault.szLppausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1059         {"lpresume command", P_STRING, P_LOCAL, &sDefault.szLpresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1060         {"queuepause command", P_STRING, P_LOCAL, &sDefault.szQueuepausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1061         {"queueresume command", P_STRING, P_LOCAL, &sDefault.szQueueresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1062
1063         {"addport command", P_STRING, P_GLOBAL, &Globals.szAddPortCommand, NULL, NULL, FLAG_ADVANCED},
1064         {"enumports command", P_STRING, P_GLOBAL, &Globals.szEnumPortsCommand, NULL, NULL, FLAG_ADVANCED},
1065         {"addprinter command", P_STRING, P_GLOBAL, &Globals.szAddPrinterCommand, NULL, NULL, FLAG_ADVANCED},
1066         {"deleteprinter command", P_STRING, P_GLOBAL, &Globals.szDeletePrinterCommand, NULL, NULL, FLAG_ADVANCED},
1067         {"show add printer wizard", P_BOOL, P_GLOBAL, &Globals.bMsAddPrinterWizard, NULL, NULL, FLAG_ADVANCED},
1068         {"os2 driver map", P_STRING, P_GLOBAL, &Globals.szOs2DriverMap, NULL, NULL, FLAG_ADVANCED},
1069
1070         {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1071         {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_HIDE},
1072         {"use client driver", P_BOOL, P_LOCAL, &sDefault.bUseClientDriver, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1073         {"default devmode", P_BOOL, P_LOCAL, &sDefault.bDefaultDevmode, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1074         {"force printername", P_BOOL, P_LOCAL, &sDefault.bForcePrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1075
1076         {N_("Filename Handling"), P_SEP, P_SEPARATOR},
1077         {"mangling method", P_STRING, P_GLOBAL, &Globals.szManglingMethod, NULL, NULL, FLAG_ADVANCED},
1078         {"mangle prefix", P_INTEGER, P_GLOBAL, &Globals.mangle_prefix, NULL, NULL, FLAG_ADVANCED},
1079
1080         {"default case", P_ENUM, P_LOCAL, &sDefault.iDefaultCase, NULL, enum_case, FLAG_ADVANCED | FLAG_SHARE},
1081         {"case sensitive", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1082         {"casesignames", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE},
1083         {"preserve case", P_BOOL, P_LOCAL, &sDefault.bCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1084         {"short preserve case", P_BOOL, P_LOCAL, &sDefault.bShortCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1085         {"mangling char", P_CHAR, P_LOCAL, &sDefault.magic_char, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1086         {"hide dot files", P_BOOL, P_LOCAL, &sDefault.bHideDotFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1087         {"hide special files", P_BOOL, P_LOCAL, &sDefault.bHideSpecialFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1088         {"hide unreadable", P_BOOL, P_LOCAL, &sDefault.bHideUnReadable, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1089         {"hide unwriteable files", P_BOOL, P_LOCAL, &sDefault.bHideUnWriteableFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1090         {"delete veto files", P_BOOL, P_LOCAL, &sDefault.bDeleteVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1091         {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1092         {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1093         {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1094         {"map archive", P_BOOL, P_LOCAL, &sDefault.bMap_archive, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1095         {"map hidden", P_BOOL, P_LOCAL, &sDefault.bMap_hidden, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1096         {"map system", P_BOOL, P_LOCAL, &sDefault.bMap_system, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1097         {"map readonly", P_ENUM, P_LOCAL, &sDefault.iMap_readonly, NULL, enum_map_readonly, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1098         {"mangled names", P_BOOL, P_LOCAL, &sDefault.bMangledNames, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1099         {"mangled map", P_STRING, P_LOCAL, &sDefault.szMangledMap, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_DEPRECATED },
1100         {"max stat cache size", P_INTEGER, P_GLOBAL, &Globals.iMaxStatCacheSize, NULL, NULL, FLAG_ADVANCED},
1101         {"stat cache", P_BOOL, P_GLOBAL, &Globals.bStatCache, NULL, NULL, FLAG_ADVANCED},
1102         {"store dos attributes", P_BOOL, P_LOCAL, &sDefault.bStoreDosAttributes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1103         {"dmapi support", P_BOOL, P_LOCAL, &sDefault.bDmapiSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1104
1105
1106         {N_("Domain Options"), P_SEP, P_SEPARATOR},
1107
1108         {"machine password timeout", P_INTEGER, P_GLOBAL, &Globals.machine_password_timeout, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1109
1110         {N_("Logon Options"), P_SEP, P_SEPARATOR},
1111
1112         {"add user script", P_STRING, P_GLOBAL, &Globals.szAddUserScript, NULL, NULL, FLAG_ADVANCED},
1113         {"rename user script", P_STRING, P_GLOBAL, &Globals.szRenameUserScript, NULL, NULL, FLAG_ADVANCED},
1114         {"delete user script", P_STRING, P_GLOBAL, &Globals.szDelUserScript, NULL, NULL, FLAG_ADVANCED},
1115         {"add group script", P_STRING, P_GLOBAL, &Globals.szAddGroupScript, NULL, NULL, FLAG_ADVANCED},
1116         {"delete group script", P_STRING, P_GLOBAL, &Globals.szDelGroupScript, NULL, NULL, FLAG_ADVANCED},
1117         {"add user to group script", P_STRING, P_GLOBAL, &Globals.szAddUserToGroupScript, NULL, NULL, FLAG_ADVANCED},
1118         {"delete user from group script", P_STRING, P_GLOBAL, &Globals.szDelUserFromGroupScript, NULL, NULL, FLAG_ADVANCED},
1119         {"set primary group script", P_STRING, P_GLOBAL, &Globals.szSetPrimaryGroupScript, NULL, NULL, FLAG_ADVANCED},
1120         {"add machine script", P_STRING, P_GLOBAL, &Globals.szAddMachineScript, NULL, NULL, FLAG_ADVANCED},
1121         {"shutdown script", P_STRING, P_GLOBAL, &Globals.szShutdownScript, NULL, NULL, FLAG_ADVANCED},
1122         {"abort shutdown script", P_STRING, P_GLOBAL, &Globals.szAbortShutdownScript, NULL, NULL, FLAG_ADVANCED},
1123         {"username map script", P_STRING, P_GLOBAL, &Globals.szUsernameMapScript, NULL, NULL, FLAG_ADVANCED},
1124
1125         {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, FLAG_ADVANCED},
1126         {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, FLAG_ADVANCED},
1127         {"logon drive", P_STRING, P_GLOBAL, &Globals.szLogonDrive, NULL, NULL, FLAG_ADVANCED},
1128         {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, FLAG_ADVANCED},
1129         {"domain logons", P_BOOL, P_GLOBAL, &Globals.bDomainLogons, NULL, NULL, FLAG_ADVANCED},
1130
1131         {N_("Browse Options"), P_SEP, P_SEPARATOR},
1132
1133         {"os level", P_INTEGER, P_GLOBAL, &Globals.os_level, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1134         {"lm announce", P_ENUM, P_GLOBAL, &Globals.lm_announce, NULL, enum_bool_auto, FLAG_ADVANCED},
1135         {"lm interval", P_INTEGER, P_GLOBAL, &Globals.lm_interval, NULL, NULL, FLAG_ADVANCED},
1136         {"preferred master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1137         {"prefered master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_HIDE},
1138         {"local master", P_BOOL, P_GLOBAL, &Globals.bLocalMaster, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1139         {"domain master", P_ENUM, P_GLOBAL, &Globals.bDomainMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1140         {"browse list", P_BOOL, P_GLOBAL, &Globals.bBrowseList, NULL, NULL, FLAG_ADVANCED},
1141         {"browseable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1142         {"browsable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_HIDE},
1143         {"enhanced browsing", P_BOOL, P_GLOBAL, &Globals.enhanced_browsing, NULL, NULL, FLAG_ADVANCED},
1144
1145         {N_("WINS Options"), P_SEP, P_SEPARATOR},
1146
1147         {"dns proxy", P_BOOL, P_GLOBAL, &Globals.bDNSproxy, NULL, NULL, FLAG_ADVANCED},
1148         {"wins proxy", P_BOOL, P_GLOBAL, &Globals.bWINSproxy, NULL, NULL, FLAG_ADVANCED},
1149
1150         {"wins server", P_LIST, P_GLOBAL, &Globals.szWINSservers, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1151         {"wins support", P_BOOL, P_GLOBAL, &Globals.bWINSsupport, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1152         {"wins hook", P_STRING, P_GLOBAL, &Globals.szWINSHook, NULL, NULL, FLAG_ADVANCED},
1153         {"wins partners", P_STRING, P_GLOBAL, &Globals.szWINSPartners, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1154
1155         {N_("Locking Options"), P_SEP, P_SEPARATOR},
1156
1157         {"blocking locks", P_BOOL, P_LOCAL, &sDefault.bBlockingLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1158         {"csc policy", P_ENUM, P_LOCAL, &sDefault.iCSCPolicy, NULL, enum_csc_policy, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1159         {"fake oplocks", P_BOOL, P_LOCAL, &sDefault.bFakeOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1160         {"kernel oplocks", P_BOOL, P_GLOBAL, &Globals.bKernelOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1161         {"locking", P_BOOL, P_LOCAL, &sDefault.bLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1162         {"lock spin count", P_INTEGER, P_GLOBAL, &Globals.iLockSpinCount, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1163         {"lock spin time", P_INTEGER, P_GLOBAL, &Globals.iLockSpinTime, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1164
1165         {"oplocks", P_BOOL, P_LOCAL, &sDefault.bOpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1166         {"level2 oplocks", P_BOOL, P_LOCAL, &sDefault.bLevel2OpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1167         {"oplock break wait time", P_INTEGER, P_GLOBAL, &Globals.oplock_break_wait_time, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1168         {"oplock contention limit", P_INTEGER, P_LOCAL, &sDefault.iOplockContentionLimit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1169         {"posix locking", P_BOOL, P_LOCAL, &sDefault.bPosixLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1170         {"strict locking", P_ENUM, P_LOCAL, &sDefault.iStrictLocking, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1171         {"share modes", P_BOOL, P_LOCAL,  &sDefault.bShareModes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1172
1173         {N_("Ldap Options"), P_SEP, P_SEPARATOR},
1174
1175 #ifdef WITH_LDAP_SAMCONFIG
1176         {"ldap server", P_STRING, P_GLOBAL, &Globals.szLdapServer, NULL, NULL, FLAG_ADVANCED},
1177         {"ldap port", P_INTEGER, P_GLOBAL, &Globals.ldap_port, NULL, NULL, FLAG_ADVANCED},
1178 #endif
1179         {"ldap admin dn", P_STRING, P_GLOBAL, &Globals.szLdapAdminDn, NULL, NULL, FLAG_ADVANCED},
1180         {"ldap delete dn", P_BOOL, P_GLOBAL, &Globals.ldap_delete_dn, NULL, NULL, FLAG_ADVANCED},
1181         {"ldap group suffix", P_STRING, P_GLOBAL, &Globals.szLdapGroupSuffix, NULL, NULL, FLAG_ADVANCED},
1182         {"ldap idmap suffix", P_STRING, P_GLOBAL, &Globals.szLdapIdmapSuffix, NULL, NULL, FLAG_ADVANCED},
1183         {"ldap machine suffix", P_STRING, P_GLOBAL, &Globals.szLdapMachineSuffix, NULL, NULL, FLAG_ADVANCED},
1184         {"ldap passwd sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_ADVANCED},
1185         {"ldap password sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_HIDE},
1186         {"ldap replication sleep", P_INTEGER, P_GLOBAL, &Globals.ldap_replication_sleep, NULL, NULL, FLAG_ADVANCED},
1187         {"ldap suffix", P_STRING, P_GLOBAL, &Globals.szLdapSuffix, NULL, NULL, FLAG_ADVANCED},
1188         {"ldap ssl", P_ENUM, P_GLOBAL, &Globals.ldap_ssl, NULL, enum_ldap_ssl, FLAG_ADVANCED},
1189         {"ldap timeout", P_INTEGER, P_GLOBAL, &Globals.ldap_timeout, NULL, NULL, FLAG_ADVANCED},
1190         {"ldap page size", P_INTEGER, P_GLOBAL, &Globals.ldap_page_size, NULL, NULL, FLAG_ADVANCED},
1191         {"ldap user suffix", P_STRING, P_GLOBAL, &Globals.szLdapUserSuffix, NULL, NULL, FLAG_ADVANCED},
1192
1193         {N_("Miscellaneous Options"), P_SEP, P_SEPARATOR},
1194         {"add share command", P_STRING, P_GLOBAL, &Globals.szAddShareCommand, NULL, NULL, FLAG_ADVANCED},
1195         {"change share command", P_STRING, P_GLOBAL, &Globals.szChangeShareCommand, NULL, NULL, FLAG_ADVANCED},
1196         {"delete share command", P_STRING, P_GLOBAL, &Globals.szDeleteShareCommand, NULL, NULL, FLAG_ADVANCED},
1197
1198         {N_("EventLog Options"), P_SEP, P_SEPARATOR},
1199         {"eventlog list",  P_LIST, P_GLOBAL, &Globals.szEventLogs, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
1200
1201         {"config file", P_STRING, P_GLOBAL, &Globals.szConfigFile, NULL, NULL, FLAG_HIDE},
1202         {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1203         {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1204         {"lock directory", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_ADVANCED},
1205         {"lock dir", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_HIDE},
1206         {"pid directory", P_STRING, P_GLOBAL, &Globals.szPidDir, NULL, NULL, FLAG_ADVANCED},
1207 #ifdef WITH_UTMP
1208         {"utmp directory", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, FLAG_ADVANCED},
1209         {"wtmp directory", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, FLAG_ADVANCED},
1210         {"utmp", P_BOOL, P_GLOBAL, &Globals.bUtmp, NULL, NULL, FLAG_ADVANCED},
1211 #endif
1212
1213         {"default service", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1214         {"default", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1215         {"message command", P_STRING, P_GLOBAL, &Globals.szMsgCommand, NULL, NULL, FLAG_ADVANCED},
1216         {"dfree cache time", P_INTEGER, P_LOCAL, &sDefault.iDfreeCacheTime, NULL, NULL, FLAG_ADVANCED},
1217         {"dfree command", P_STRING, P_LOCAL, &sDefault.szDfree, NULL, NULL, FLAG_ADVANCED},
1218         {"get quota command", P_STRING, P_GLOBAL, &Globals.szGetQuota, NULL, NULL, FLAG_ADVANCED},
1219         {"set quota command", P_STRING, P_GLOBAL, &Globals.szSetQuota, NULL, NULL, FLAG_ADVANCED},
1220         {"remote announce", P_STRING, P_GLOBAL, &Globals.szRemoteAnnounce, NULL, NULL, FLAG_ADVANCED},
1221         {"remote browse sync", P_STRING, P_GLOBAL, &Globals.szRemoteBrowseSync, NULL, NULL, FLAG_ADVANCED},
1222         {"socket address", P_STRING, P_GLOBAL, &Globals.szSocketAddress, NULL, NULL, FLAG_ADVANCED},
1223         {"homedir map", P_STRING, P_GLOBAL, &Globals.szNISHomeMapName, NULL, NULL, FLAG_ADVANCED},
1224         {"afs username map", P_STRING, P_GLOBAL, &Globals.szAfsUsernameMap, NULL, NULL, FLAG_ADVANCED},
1225         {"afs token lifetime", P_INTEGER, P_GLOBAL, &Globals.iAfsTokenLifetime, NULL, NULL, FLAG_ADVANCED},
1226         {"log nt token command", P_STRING, P_GLOBAL, &Globals.szLogNtTokenCommand, NULL, NULL, FLAG_ADVANCED},
1227         {"time offset", P_INTEGER, P_GLOBAL, &extra_time_offset, NULL, NULL, FLAG_ADVANCED},
1228         {"NIS homedir", P_BOOL, P_GLOBAL, &Globals.bNISHomeMap, NULL, NULL, FLAG_ADVANCED},
1229         {"-valid", P_BOOL, P_LOCAL, &sDefault.valid, NULL, NULL, FLAG_HIDE},
1230
1231         {"copy", P_STRING, P_LOCAL, &sDefault.szCopy, handle_copy, NULL, FLAG_HIDE},
1232         {"include", P_STRING, P_LOCAL, &sDefault.szInclude, handle_include, NULL, FLAG_HIDE},
1233         {"preexec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1234         {"exec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED},
1235
1236         {"preexec close", P_BOOL, P_LOCAL, &sDefault.bPreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1237         {"postexec", P_STRING, P_LOCAL, &sDefault.szPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1238         {"root preexec", P_STRING, P_LOCAL, &sDefault.szRootPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1239         {"root preexec close", P_BOOL, P_LOCAL, &sDefault.bRootpreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1240         {"root postexec", P_STRING, P_LOCAL, &sDefault.szRootPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1241         {"available", P_BOOL, P_LOCAL, &sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1242         {"usershare max shares", P_INTEGER, P_GLOBAL, &Globals.iUsershareMaxShares, NULL, NULL, FLAG_ADVANCED},
1243         {"usershare owner only", P_BOOL, P_GLOBAL, &Globals.bUsershareOwnerOnly, NULL, NULL, FLAG_ADVANCED},
1244         {"usershare path", P_STRING, P_GLOBAL, &Globals.szUsersharePath, NULL, NULL, FLAG_ADVANCED},
1245         {"usershare prefix allow list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixAllowList, NULL, NULL, FLAG_ADVANCED},
1246         {"usershare prefix deny list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixDenyList, NULL, NULL, FLAG_ADVANCED},
1247         {"usershare template share", P_STRING, P_GLOBAL, &Globals.szUsershareTemplateShare, NULL, NULL, FLAG_ADVANCED},
1248         {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1249         {"fstype", P_STRING, P_LOCAL, &sDefault.fstype, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1250         {"set directory", P_BOOLREV, P_LOCAL, &sDefault.bNo_set_dir, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1251         {"wide links", P_BOOL, P_LOCAL, &sDefault.bWidelinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1252         {"follow symlinks", P_BOOL, P_LOCAL, &sDefault.bSymlinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1253         {"dont descend", P_STRING, P_LOCAL, &sDefault.szDontdescend, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1254         {"magic script", P_STRING, P_LOCAL, &sDefault.szMagicScript, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1255         {"magic output", P_STRING, P_LOCAL, &sDefault.szMagicOutput, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1256         {"delete readonly", P_BOOL, P_LOCAL, &sDefault.bDeleteReadonly, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1257         {"dos filemode", P_BOOL, P_LOCAL, &sDefault.bDosFilemode, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1258         {"dos filetimes", P_BOOL, P_LOCAL, &sDefault.bDosFiletimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1259         {"dos filetime resolution", P_BOOL, P_LOCAL, &sDefault.bDosFiletimeResolution, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1260
1261         {"fake directory create times", P_BOOL, P_LOCAL, &sDefault.bFakeDirCreateTimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1262         {"panic action", P_STRING, P_GLOBAL, &Globals.szPanicAction, NULL, NULL, FLAG_ADVANCED},
1263
1264         {N_("VFS module options"), P_SEP, P_SEPARATOR},
1265
1266         {"vfs objects", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1267         {"vfs object", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_HIDE},
1268
1269
1270         {"msdfs root", P_BOOL, P_LOCAL, &sDefault.bMSDfsRoot, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1271         {"msdfs proxy", P_STRING, P_LOCAL, &sDefault.szMSDfsProxy, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1272         {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, FLAG_ADVANCED},
1273
1274         {N_("Winbind options"), P_SEP, P_SEPARATOR},
1275
1276         {"passdb expand explicit", P_BOOL, P_GLOBAL, &Globals.bPassdbExpandExplicit, NULL, NULL, FLAG_ADVANCED},
1277         {"idmap backend", P_LIST, P_GLOBAL, &Globals.szIdmapBackend, NULL, NULL, FLAG_ADVANCED},
1278         {"idmap uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_ADVANCED},
1279         {"winbind uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_HIDE},
1280         {"idmap gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_ADVANCED},
1281         {"winbind gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_HIDE},
1282         {"template homedir", P_STRING, P_GLOBAL, &Globals.szTemplateHomedir, NULL, NULL, FLAG_ADVANCED},
1283         {"template shell", P_STRING, P_GLOBAL, &Globals.szTemplateShell, NULL, NULL, FLAG_ADVANCED},
1284         {"winbind separator", P_STRING, P_GLOBAL, &Globals.szWinbindSeparator, NULL, NULL, FLAG_ADVANCED},
1285         {"winbind cache time", P_INTEGER, P_GLOBAL, &Globals.winbind_cache_time, NULL, NULL, FLAG_ADVANCED},
1286         {"winbind enum users", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumUsers, NULL, NULL, FLAG_ADVANCED},
1287         {"winbind enum groups", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumGroups, NULL, NULL, FLAG_ADVANCED},
1288         {"winbind use default domain", P_BOOL, P_GLOBAL, &Globals.bWinbindUseDefaultDomain, NULL, NULL, FLAG_ADVANCED},
1289         {"winbind trusted domains only", P_BOOL, P_GLOBAL, &Globals.bWinbindTrustedDomainsOnly, NULL, NULL, FLAG_ADVANCED},
1290         {"winbind nested groups", P_BOOL, P_GLOBAL, &Globals.bWinbindNestedGroups, NULL, NULL, FLAG_ADVANCED},
1291         {"winbind nss info", P_LIST, P_GLOBAL, &Globals.szWinbindNssInfo, NULL, NULL, FLAG_ADVANCED},
1292         {"winbind refresh tickets", P_BOOL, P_GLOBAL, &Globals.bWinbindRefreshTickets, NULL, NULL, FLAG_ADVANCED},
1293         {"winbind offline logon", P_BOOL, P_GLOBAL, &Globals.bWinbindOfflineLogon, NULL, NULL, FLAG_ADVANCED},
1294
1295         {NULL,  P_BOOL,  P_NONE,  NULL,  NULL,  NULL,  0}
1296 };
1297
1298 /***************************************************************************
1299  Initialise the sDefault parameter structure for the printer values.
1300 ***************************************************************************/
1301
1302 static void init_printer_values(service *pService)
1303 {
1304         /* choose defaults depending on the type of printing */
1305         switch (pService->iPrinting) {
1306                 case PRINT_BSD:
1307                 case PRINT_AIX:
1308                 case PRINT_LPRNT:
1309                 case PRINT_LPROS2:
1310                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1311                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1312                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1313                         break;
1314
1315                 case PRINT_LPRNG:
1316                 case PRINT_PLP:
1317                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1318                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1319                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1320                         string_set(&pService->szQueuepausecommand, "lpc stop '%p'");
1321                         string_set(&pService->szQueueresumecommand, "lpc start '%p'");
1322                         string_set(&pService->szLppausecommand, "lpc hold '%p' %j");
1323                         string_set(&pService->szLpresumecommand, "lpc release '%p' %j");
1324                         break;
1325
1326                 case PRINT_CUPS:
1327                 case PRINT_IPRINT:
1328 #ifdef HAVE_CUPS
1329                         /* set the lpq command to contain the destination printer
1330                            name only.  This is used by cups_queue_get() */
1331                         string_set(&pService->szLpqcommand, "%p");
1332                         string_set(&pService->szLprmcommand, "");
1333                         string_set(&pService->szPrintcommand, "");
1334                         string_set(&pService->szLppausecommand, "");
1335                         string_set(&pService->szLpresumecommand, "");
1336                         string_set(&pService->szQueuepausecommand, "");
1337                         string_set(&pService->szQueueresumecommand, "");
1338 #else
1339                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1340                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1341                         string_set(&pService->szPrintcommand, "lpr -P'%p' %s; rm %s");
1342                         string_set(&pService->szLppausecommand, "lp -i '%p-%j' -H hold");
1343                         string_set(&pService->szLpresumecommand, "lp -i '%p-%j' -H resume");
1344                         string_set(&pService->szQueuepausecommand, "disable '%p'");
1345                         string_set(&pService->szQueueresumecommand, "enable '%p'");
1346 #endif /* HAVE_CUPS */
1347                         break;
1348
1349                 case PRINT_SYSV:
1350                 case PRINT_HPUX:
1351                         string_set(&pService->szLpqcommand, "lpstat -o%p");
1352                         string_set(&pService->szLprmcommand, "cancel %p-%j");
1353                         string_set(&pService->szPrintcommand, "lp -c -d%p %s; rm %s");
1354                         string_set(&pService->szQueuepausecommand, "disable %p");
1355                         string_set(&pService->szQueueresumecommand, "enable %p");
1356 #ifndef HPUX
1357                         string_set(&pService->szLppausecommand, "lp -i %p-%j -H hold");
1358                         string_set(&pService->szLpresumecommand, "lp -i %p-%j -H resume");
1359 #endif /* HPUX */
1360                         break;
1361
1362                 case PRINT_QNX:
1363                         string_set(&pService->szLpqcommand, "lpq -P%p");
1364                         string_set(&pService->szLprmcommand, "lprm -P%p %j");
1365                         string_set(&pService->szPrintcommand, "lp -r -P%p %s");
1366                         break;
1367
1368 #ifdef DEVELOPER
1369         case PRINT_TEST:
1370         case PRINT_VLP:
1371                 string_set(&pService->szPrintcommand, "vlp print %p %s");
1372                 string_set(&pService->szLpqcommand, "vlp lpq %p");
1373                 string_set(&pService->szLprmcommand, "vlp lprm %p %j");
1374                 string_set(&pService->szLppausecommand, "vlp lppause %p %j");
1375                 string_set(&pService->szLpresumecommand, "vlp lpresum %p %j");
1376                 string_set(&pService->szQueuepausecommand, "vlp queuepause %p");
1377                 string_set(&pService->szQueueresumecommand, "vlp queueresume %p");
1378                 break;
1379 #endif /* DEVELOPER */
1380
1381         }
1382 }
1383
1384 /***************************************************************************
1385  Initialise the global parameter structure.
1386 ***************************************************************************/
1387
1388 static void init_globals(BOOL first_time_only)
1389 {
1390         static BOOL done_init = False;
1391         pstring s;
1392
1393         /* If requested to initialize only once and we've already done it... */
1394         if (first_time_only && done_init) {
1395                 /* ... then we have nothing more to do */
1396                 return;
1397         }
1398
1399         if (!done_init) {
1400                 int i;
1401
1402                 /* The logfile can be set before this is invoked. Free it if so. */
1403                 if (Globals.szLogFile != NULL) {
1404                         string_free(&Globals.szLogFile);
1405                         Globals.szLogFile = NULL;
1406                 }
1407
1408                 memset((void *)&Globals, '\0', sizeof(Globals));
1409
1410                 for (i = 0; parm_table[i].label; i++)
1411                         if ((parm_table[i].type == P_STRING ||
1412                              parm_table[i].type == P_USTRING) &&
1413                             parm_table[i].ptr)
1414                                 string_set((char **)parm_table[i].ptr, "");
1415
1416                 string_set(&sDefault.fstype, FSTYPE_STRING);
1417
1418                 init_printer_values(&sDefault);
1419
1420                 done_init = True;
1421         }
1422
1423
1424         DEBUG(3, ("Initialising global parameters\n"));
1425
1426         string_set(&Globals.szSMBPasswdFile, dyn_SMB_PASSWD_FILE);
1427         string_set(&Globals.szPrivateDir, dyn_PRIVATE_DIR);
1428
1429         /* use the new 'hash2' method by default, with a prefix of 1 */
1430         string_set(&Globals.szManglingMethod, "hash2");
1431         Globals.mangle_prefix = 1;
1432
1433         string_set(&Globals.szGuestaccount, GUEST_ACCOUNT);
1434
1435         /* using UTF8 by default allows us to support all chars */
1436         string_set(&Globals.unix_charset, DEFAULT_UNIX_CHARSET);
1437
1438 #if defined(HAVE_NL_LANGINFO) && defined(CODESET)
1439         /* If the system supports nl_langinfo(), try to grab the value
1440            from the user's locale */
1441         string_set(&Globals.display_charset, "LOCALE");
1442 #else
1443         string_set(&Globals.display_charset, DEFAULT_DISPLAY_CHARSET);
1444 #endif
1445
1446         /* Use codepage 850 as a default for the dos character set */
1447         string_set(&Globals.dos_charset, DEFAULT_DOS_CHARSET);
1448
1449         /*
1450          * Allow the default PASSWD_CHAT to be overridden in local.h.
1451          */
1452         string_set(&Globals.szPasswdChat, DEFAULT_PASSWD_CHAT);
1453
1454         set_global_myname(myhostname());
1455         string_set(&Globals.szNetbiosName,global_myname());
1456
1457         set_global_myworkgroup(WORKGROUP);
1458         string_set(&Globals.szWorkgroup, lp_workgroup());
1459
1460         string_set(&Globals.szPasswdProgram, "");
1461         string_set(&Globals.szPidDir, dyn_PIDDIR);
1462         string_set(&Globals.szLockDir, dyn_LOCKDIR);
1463         string_set(&Globals.szSocketAddress, "0.0.0.0");
1464         pstrcpy(s, "Samba ");
1465         pstrcat(s, SAMBA_VERSION_STRING);
1466         string_set(&Globals.szServerString, s);
1467         slprintf(s, sizeof(s) - 1, "%d.%d", DEFAULT_MAJOR_VERSION,
1468                  DEFAULT_MINOR_VERSION);
1469         string_set(&Globals.szAnnounceVersion, s);
1470 #ifdef DEVELOPER
1471         string_set(&Globals.szPanicAction, "/bin/sleep 999999999");
1472 #endif
1473
1474         pstrcpy(user_socket_options, DEFAULT_SOCKET_OPTIONS);
1475
1476         string_set(&Globals.szLogonDrive, "");
1477         /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
1478         string_set(&Globals.szLogonHome, "\\\\%N\\%U");
1479         string_set(&Globals.szLogonPath, "\\\\%N\\%U\\profile");
1480
1481         string_set(&Globals.szNameResolveOrder, "lmhosts wins host bcast");
1482         string_set(&Globals.szPasswordServer, "*");
1483
1484         Globals.AlgorithmicRidBase = BASE_RID;
1485
1486         Globals.bLoadPrinters = True;
1487         Globals.PrintcapCacheTime = 750;        /* 12.5 minutes */
1488
1489         /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
1490         /* Discovered by 2 days of pain by Don McCall @ HP :-). */
1491         Globals.max_xmit = 0x4104;
1492         Globals.max_mux = 50;   /* This is *needed* for profile support. */
1493         Globals.lpqcachetime = 30;      /* changed to handle large print servers better -- jerry */
1494         Globals.bDisableSpoolss = False;
1495         Globals.iMaxSmbdProcesses = 0;/* no limit specified */
1496         Globals.pwordlevel = 0;
1497         Globals.unamelevel = 0;
1498         Globals.deadtime = 0;
1499         Globals.bLargeReadwrite = True;
1500         Globals.max_log_size = 5000;
1501         Globals.max_open_files = MAX_OPEN_FILES;
1502         Globals.open_files_db_hash_size = SMB_OPEN_DATABASE_TDB_HASH_SIZE;
1503         Globals.maxprotocol = PROTOCOL_NT1;
1504         Globals.minprotocol = PROTOCOL_CORE;
1505         Globals.security = SEC_USER;
1506         Globals.paranoid_server_security = True;
1507         Globals.bEncryptPasswords = True;
1508         Globals.bUpdateEncrypt = False;
1509         Globals.clientSchannel = Auto;
1510         Globals.serverSchannel = Auto;
1511         Globals.bReadRaw = True;
1512         Globals.bWriteRaw = True;
1513         Globals.bReadbmpx = False;
1514         Globals.bNullPasswords = False;
1515         Globals.bObeyPamRestrictions = False;
1516         Globals.syslog = 1;
1517         Globals.bSyslogOnly = False;
1518         Globals.bTimestampLogs = True;
1519         string_set(&Globals.szLogLevel, "0");
1520         Globals.bDebugHiresTimestamp = False;
1521         Globals.bDebugPid = False;
1522         Globals.bDebugUid = False;
1523         Globals.max_ttl = 60 * 60 * 24 * 3;     /* 3 days default. */
1524         Globals.max_wins_ttl = 60 * 60 * 24 * 6;        /* 6 days default. */
1525         Globals.min_wins_ttl = 60 * 60 * 6;     /* 6 hours default. */
1526         Globals.machine_password_timeout = 60 * 60 * 24 * 7;    /* 7 days default. */
1527         Globals.change_notify_timeout = 60;     /* 1 minute default. */
1528         Globals.bKernelChangeNotify = True;     /* On if we have it. */
1529         Globals.bFamChangeNotify = True;        /* On if we have it. */
1530         Globals.lm_announce = 2;        /* = Auto: send only if LM clients found */
1531         Globals.lm_interval = 60;
1532         Globals.announce_as = ANNOUNCE_AS_NT_SERVER;
1533 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
1534         Globals.bNISHomeMap = False;
1535 #ifdef WITH_NISPLUS_HOME
1536         string_set(&Globals.szNISHomeMapName, "auto_home.org_dir");
1537 #else
1538         string_set(&Globals.szNISHomeMapName, "auto.home");
1539 #endif
1540 #endif
1541         Globals.bTimeServer = False;
1542         Globals.bBindInterfacesOnly = False;
1543         Globals.bUnixPasswdSync = False;
1544         Globals.bPamPasswordChange = False;
1545         Globals.bPasswdChatDebug = False;
1546         Globals.iPasswdChatTimeout = 2; /* 2 second default. */
1547         Globals.bNTPipeSupport = True;  /* Do NT pipes by default. */
1548         Globals.bNTStatusSupport = True; /* Use NT status by default. */
1549         Globals.bStatCache = True;      /* use stat cache by default */
1550         Globals.iMaxStatCacheSize = 0;  /* unlimited size in kb by default. */
1551         Globals.restrict_anonymous = 0;
1552         Globals.bClientLanManAuth = True;       /* Do use the LanMan hash if it is available */
1553         Globals.bClientPlaintextAuth = True;    /* Do use a plaintext password if is requested by the server */
1554         Globals.bLanmanAuth = True;     /* Do use the LanMan hash if it is available */
1555         Globals.bNTLMAuth = True;       /* Do use NTLMv1 if it is available (otherwise NTLMv2) */
1556         Globals.bClientNTLMv2Auth = False; /* Client should not use NTLMv2, as we can't tell that the server supports it. */
1557         /* Note, that we will use NTLM2 session security (which is different), if it is available */
1558
1559         Globals.map_to_guest = 0;       /* By Default, "Never" */
1560         Globals.oplock_break_wait_time = 0;     /* By Default, 0 msecs. */
1561         Globals.enhanced_browsing = True;
1562         Globals.iLockSpinCount = 3; /* Try 3 times. */
1563         Globals.iLockSpinTime = 10; /* usec. */
1564 #ifdef MMAP_BLACKLIST
1565         Globals.bUseMmap = False;
1566 #else
1567         Globals.bUseMmap = True;
1568 #endif
1569         Globals.bUnixExtensions = True;
1570         Globals.bResetOnZeroVC = False;
1571
1572         /* hostname lookups can be very expensive and are broken on
1573            a large number of sites (tridge) */
1574         Globals.bHostnameLookups = False;
1575
1576 #ifdef WITH_LDAP_SAMCONFIG
1577         string_set(&Globals.szLdapServer, "localhost");
1578         Globals.ldap_port = 636;
1579         string_set(&Globals.szPassdbBackend, "ldapsam_compat");
1580 #else
1581         string_set(&Globals.szPassdbBackend, "smbpasswd");
1582 #endif /* WITH_LDAP_SAMCONFIG */
1583         string_set(&Globals.szLdapSuffix, "");
1584         string_set(&Globals.szLdapMachineSuffix, "");
1585         string_set(&Globals.szLdapUserSuffix, "");
1586         string_set(&Globals.szLdapGroupSuffix, "");
1587         string_set(&Globals.szLdapIdmapSuffix, "");
1588
1589         string_set(&Globals.szLdapAdminDn, "");
1590         Globals.ldap_ssl = LDAP_SSL_ON;
1591         Globals.ldap_passwd_sync = LDAP_PASSWD_SYNC_OFF;
1592         Globals.ldap_delete_dn = False;
1593         Globals.ldap_replication_sleep = 1000; /* wait 1 sec for replication */
1594         Globals.ldap_timeout = LDAP_CONNECT_DEFAULT_TIMEOUT;
1595         Globals.ldap_page_size = LDAP_PAGE_SIZE;
1596
1597         /* This is what we tell the afs client. in reality we set the token
1598          * to never expire, though, when this runs out the afs client will
1599          * forget the token. Set to 0 to get NEVERDATE.*/
1600         Globals.iAfsTokenLifetime = 604800;
1601
1602 /* these parameters are set to defaults that are more appropriate
1603    for the increasing samba install base:
1604
1605    as a member of the workgroup, that will possibly become a
1606    _local_ master browser (lm = True).  this is opposed to a forced
1607    local master browser startup (pm = True).
1608
1609    doesn't provide WINS server service by default (wsupp = False),
1610    and doesn't provide domain master browser services by default, either.
1611
1612 */
1613
1614         Globals.bMsAddPrinterWizard = True;
1615         Globals.bPreferredMaster = Auto;        /* depending on bDomainMaster */
1616         Globals.os_level = 20;
1617         Globals.bLocalMaster = True;
1618         Globals.bDomainMaster = Auto;   /* depending on bDomainLogons */
1619         Globals.bDomainLogons = False;
1620         Globals.bBrowseList = True;
1621         Globals.bWINSsupport = False;
1622         Globals.bWINSproxy = False;
1623
1624         Globals.bDNSproxy = True;
1625
1626         /* this just means to use them if they exist */
1627         Globals.bKernelOplocks = True;
1628
1629         Globals.bAllowTrustedDomains = True;
1630
1631         string_set(&Globals.szTemplateShell, "/bin/false");
1632         string_set(&Globals.szTemplateHomedir, "/home/%D/%U");
1633         string_set(&Globals.szWinbindSeparator, "\\");
1634         string_set(&Globals.szAclCompat, "");
1635         string_set(&Globals.szCupsServer, "");
1636         string_set(&Globals.szIPrintServer, "");
1637
1638         Globals.winbind_cache_time = 300;       /* 5 minutes */
1639         Globals.bWinbindEnumUsers = False;
1640         Globals.bWinbindEnumGroups = False;
1641         Globals.bWinbindUseDefaultDomain = False;
1642         Globals.bWinbindTrustedDomainsOnly = False;
1643         Globals.bWinbindNestedGroups = True;
1644         Globals.szWinbindNssInfo = str_list_make("template", NULL);
1645         Globals.bWinbindRefreshTickets = False;
1646         Globals.bWinbindOfflineLogon = False;
1647
1648         Globals.bPassdbExpandExplicit = True;
1649
1650         Globals.name_cache_timeout = 660; /* In seconds */
1651
1652         Globals.bUseSpnego = True;
1653         Globals.bClientUseSpnego = True;
1654
1655         Globals.client_signing = Auto;
1656         Globals.server_signing = False;
1657
1658         Globals.bDeferSharingViolations = True;
1659         string_set(&Globals.smb_ports, SMB_PORTS);
1660
1661         Globals.bEnablePrivileges = True;
1662         Globals.bHostMSDfs        = True;
1663         Globals.bASUSupport       = False;
1664
1665         /* User defined shares. */
1666         pstrcpy(s, dyn_LOCKDIR);
1667         pstrcat(s, "/usershares");
1668         string_set(&Globals.szUsersharePath, s);
1669         string_set(&Globals.szUsershareTemplateShare, "");
1670         Globals.iUsershareMaxShares = 0;
1671         /* By default disallow sharing of directories not owned by the sharer. */
1672         Globals.bUsershareOwnerOnly = True;
1673 }
1674
1675 static TALLOC_CTX *lp_talloc;
1676
1677 /******************************************************************* a
1678  Free up temporary memory - called from the main loop.
1679 ********************************************************************/
1680
1681 void lp_TALLOC_FREE(void)
1682 {
1683         if (!lp_talloc)
1684                 return;
1685         TALLOC_FREE(lp_talloc);
1686         lp_talloc = NULL;
1687 }
1688
1689 TALLOC_CTX *tmp_talloc_ctx(void)
1690 {
1691         if (lp_talloc == NULL) {
1692                 lp_talloc = talloc_init(NULL);
1693         }
1694
1695         if (lp_talloc == NULL) {
1696                 smb_panic("Could not create temporary talloc context\n");
1697         }
1698
1699         return lp_talloc;
1700 }
1701
1702 /*******************************************************************
1703  Convenience routine to grab string parameters into temporary memory
1704  and run standard_sub_basic on them. The buffers can be written to by
1705  callers without affecting the source string.
1706 ********************************************************************/
1707
1708 static char *lp_string(const char *s)
1709 {
1710         char *ret, *tmpstr;
1711
1712         /* The follow debug is useful for tracking down memory problems
1713            especially if you have an inner loop that is calling a lp_*()
1714            function that returns a string.  Perhaps this debug should be
1715            present all the time? */
1716
1717 #if 0
1718         DEBUG(10, ("lp_string(%s)\n", s));
1719 #endif
1720
1721         if (!lp_talloc)
1722                 lp_talloc = talloc_init("lp_talloc");
1723
1724         tmpstr = alloc_sub_basic(get_current_username(), s);
1725         if (trim_char(tmpstr, '\"', '\"')) {
1726                 if (strchr(tmpstr,'\"') != NULL) {
1727                         SAFE_FREE(tmpstr);
1728                         tmpstr = alloc_sub_basic(get_current_username(),s);
1729                 }
1730         }
1731         ret = talloc_strdup(lp_talloc, tmpstr);
1732         SAFE_FREE(tmpstr);
1733
1734         return (ret);
1735 }
1736
1737 /*
1738    In this section all the functions that are used to access the
1739    parameters from the rest of the program are defined
1740 */
1741
1742 #define FN_GLOBAL_STRING(fn_name,ptr) \
1743  char *fn_name(void) {return(lp_string(*(char **)(ptr) ? *(char **)(ptr) : ""));}
1744 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1745  const char *fn_name(void) {return(*(const char **)(ptr) ? *(const char **)(ptr) : "");}
1746 #define FN_GLOBAL_LIST(fn_name,ptr) \
1747  const char **fn_name(void) {return(*(const char ***)(ptr));}
1748 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1749  BOOL fn_name(void) {return(*(BOOL *)(ptr));}
1750 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1751  char fn_name(void) {return(*(char *)(ptr));}
1752 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1753  int fn_name(void) {return(*(int *)(ptr));}
1754
1755 #define FN_LOCAL_STRING(fn_name,val) \
1756  char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1757 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1758  const char *fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1759 #define FN_LOCAL_LIST(fn_name,val) \
1760  const char **fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1761 #define FN_LOCAL_BOOL(fn_name,val) \
1762  BOOL fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1763 #define FN_LOCAL_CHAR(fn_name,val) \
1764  char fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1765 #define FN_LOCAL_INTEGER(fn_name,val) \
1766  int fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1767
1768 FN_GLOBAL_STRING(lp_smb_ports, &Globals.smb_ports)
1769 FN_GLOBAL_STRING(lp_dos_charset, &Globals.dos_charset)
1770 FN_GLOBAL_STRING(lp_unix_charset, &Globals.unix_charset)
1771 FN_GLOBAL_STRING(lp_display_charset, &Globals.display_charset)
1772 FN_GLOBAL_STRING(lp_logfile, &Globals.szLogFile)
1773 FN_GLOBAL_STRING(lp_configfile, &Globals.szConfigFile)
1774 FN_GLOBAL_STRING(lp_smb_passwd_file, &Globals.szSMBPasswdFile)
1775 FN_GLOBAL_STRING(lp_private_dir, &Globals.szPrivateDir)
1776 FN_GLOBAL_STRING(lp_serverstring, &Globals.szServerString)
1777 FN_GLOBAL_INTEGER(lp_printcap_cache_time, &Globals.PrintcapCacheTime)
1778 FN_GLOBAL_STRING(lp_addport_cmd, &Globals.szAddPortCommand)
1779 FN_GLOBAL_STRING(lp_enumports_cmd, &Globals.szEnumPortsCommand)
1780 FN_GLOBAL_STRING(lp_addprinter_cmd, &Globals.szAddPrinterCommand)
1781 FN_GLOBAL_STRING(lp_deleteprinter_cmd, &Globals.szDeletePrinterCommand)
1782 FN_GLOBAL_STRING(lp_os2_driver_map, &Globals.szOs2DriverMap)
1783 FN_GLOBAL_STRING(lp_lockdir, &Globals.szLockDir)
1784 FN_GLOBAL_STRING(lp_piddir, &Globals.szPidDir)
1785 FN_GLOBAL_STRING(lp_mangling_method, &Globals.szManglingMethod)
1786 FN_GLOBAL_INTEGER(lp_mangle_prefix, &Globals.mangle_prefix)
1787 FN_GLOBAL_STRING(lp_utmpdir, &Globals.szUtmpDir)
1788 FN_GLOBAL_STRING(lp_wtmpdir, &Globals.szWtmpDir)
1789 FN_GLOBAL_BOOL(lp_utmp, &Globals.bUtmp)
1790 FN_GLOBAL_STRING(lp_rootdir, &Globals.szRootdir)
1791 FN_GLOBAL_STRING(lp_defaultservice, &Globals.szDefaultService)
1792 FN_GLOBAL_STRING(lp_msg_command, &Globals.szMsgCommand)
1793 FN_GLOBAL_STRING(lp_get_quota_command, &Globals.szGetQuota)
1794 FN_GLOBAL_STRING(lp_set_quota_command, &Globals.szSetQuota)
1795 FN_GLOBAL_STRING(lp_hosts_equiv, &Globals.szHostsEquiv)
1796 FN_GLOBAL_STRING(lp_auto_services, &Globals.szAutoServices)
1797 FN_GLOBAL_STRING(lp_passwd_program, &Globals.szPasswdProgram)
1798 FN_GLOBAL_STRING(lp_passwd_chat, &Globals.szPasswdChat)
1799 FN_GLOBAL_STRING(lp_passwordserver, &Globals.szPasswordServer)
1800 FN_GLOBAL_STRING(lp_name_resolve_order, &Globals.szNameResolveOrder)
1801 FN_GLOBAL_STRING(lp_realm, &Globals.szRealm)
1802 FN_GLOBAL_CONST_STRING(lp_afs_username_map, &Globals.szAfsUsernameMap)
1803 FN_GLOBAL_INTEGER(lp_afs_token_lifetime, &Globals.iAfsTokenLifetime)
1804 FN_GLOBAL_STRING(lp_log_nt_token_command, &Globals.szLogNtTokenCommand)
1805 FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
1806 FN_GLOBAL_CONST_STRING(lp_logon_script, &Globals.szLogonScript)
1807 FN_GLOBAL_CONST_STRING(lp_logon_path, &Globals.szLogonPath)
1808 FN_GLOBAL_CONST_STRING(lp_logon_drive, &Globals.szLogonDrive)
1809 FN_GLOBAL_CONST_STRING(lp_logon_home, &Globals.szLogonHome)
1810 FN_GLOBAL_STRING(lp_remote_announce, &Globals.szRemoteAnnounce)
1811 FN_GLOBAL_STRING(lp_remote_browse_sync, &Globals.szRemoteBrowseSync)
1812 FN_GLOBAL_LIST(lp_wins_server_list, &Globals.szWINSservers)
1813 FN_GLOBAL_LIST(lp_interfaces, &Globals.szInterfaces)
1814 FN_GLOBAL_STRING(lp_socket_address, &Globals.szSocketAddress)
1815 FN_GLOBAL_STRING(lp_nis_home_map_name, &Globals.szNISHomeMapName)
1816 static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
1817 FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
1818 FN_GLOBAL_STRING(lp_passdb_backend, &Globals.szPassdbBackend)
1819 FN_GLOBAL_LIST(lp_preload_modules, &Globals.szPreloadModules)
1820 FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
1821 FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
1822 FN_GLOBAL_STRING(lp_renameuser_script, &Globals.szRenameUserScript)
1823 FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
1824
1825 FN_GLOBAL_CONST_STRING(lp_guestaccount, &Globals.szGuestaccount)
1826 FN_GLOBAL_STRING(lp_addgroup_script, &Globals.szAddGroupScript)
1827 FN_GLOBAL_STRING(lp_delgroup_script, &Globals.szDelGroupScript)
1828 FN_GLOBAL_STRING(lp_addusertogroup_script, &Globals.szAddUserToGroupScript)
1829 FN_GLOBAL_STRING(lp_deluserfromgroup_script, &Globals.szDelUserFromGroupScript)
1830 FN_GLOBAL_STRING(lp_setprimarygroup_script, &Globals.szSetPrimaryGroupScript)
1831
1832 FN_GLOBAL_STRING(lp_addmachine_script, &Globals.szAddMachineScript)
1833
1834 FN_GLOBAL_STRING(lp_shutdown_script, &Globals.szShutdownScript)
1835 FN_GLOBAL_STRING(lp_abort_shutdown_script, &Globals.szAbortShutdownScript)
1836 FN_GLOBAL_STRING(lp_username_map_script, &Globals.szUsernameMapScript)
1837
1838 FN_GLOBAL_STRING(lp_check_password_script, &Globals.szCheckPasswordScript)
1839
1840 FN_GLOBAL_STRING(lp_wins_hook, &Globals.szWINSHook)
1841 FN_GLOBAL_STRING(lp_wins_partners, &Globals.szWINSPartners)
1842 FN_GLOBAL_CONST_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
1843 FN_GLOBAL_CONST_STRING(lp_template_shell, &Globals.szTemplateShell)
1844 FN_GLOBAL_CONST_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
1845 FN_GLOBAL_INTEGER(lp_acl_compatibility, &Globals.szAclCompat)
1846 FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
1847 FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
1848 FN_GLOBAL_BOOL(lp_winbind_use_default_domain, &Globals.bWinbindUseDefaultDomain)
1849 FN_GLOBAL_BOOL(lp_winbind_trusted_domains_only, &Globals.bWinbindTrustedDomainsOnly)
1850 FN_GLOBAL_BOOL(lp_winbind_nested_groups, &Globals.bWinbindNestedGroups)
1851 FN_GLOBAL_BOOL(lp_winbind_refresh_tickets, &Globals.bWinbindRefreshTickets)
1852 FN_GLOBAL_BOOL(lp_winbind_offline_logon, &Globals.bWinbindOfflineLogon)
1853
1854 FN_GLOBAL_LIST(lp_idmap_backend, &Globals.szIdmapBackend)
1855 FN_GLOBAL_BOOL(lp_passdb_expand_explicit, &Globals.bPassdbExpandExplicit)
1856
1857 #ifdef WITH_LDAP_SAMCONFIG
1858 FN_GLOBAL_STRING(lp_ldap_server, &Globals.szLdapServer)
1859 FN_GLOBAL_INTEGER(lp_ldap_port, &Globals.ldap_port)
1860 #endif
1861 FN_GLOBAL_STRING(lp_ldap_suffix, &Globals.szLdapSuffix)
1862 FN_GLOBAL_STRING(lp_ldap_admin_dn, &Globals.szLdapAdminDn)
1863 FN_GLOBAL_INTEGER(lp_ldap_ssl, &Globals.ldap_ssl)
1864 FN_GLOBAL_INTEGER(lp_ldap_passwd_sync, &Globals.ldap_passwd_sync)
1865 FN_GLOBAL_BOOL(lp_ldap_delete_dn, &Globals.ldap_delete_dn)
1866 FN_GLOBAL_INTEGER(lp_ldap_replication_sleep, &Globals.ldap_replication_sleep)
1867 FN_GLOBAL_INTEGER(lp_ldap_timeout, &Globals.ldap_timeout)
1868 FN_GLOBAL_INTEGER(lp_ldap_page_size, &Globals.ldap_page_size)
1869 FN_GLOBAL_STRING(lp_add_share_cmd, &Globals.szAddShareCommand)
1870 FN_GLOBAL_STRING(lp_change_share_cmd, &Globals.szChangeShareCommand)
1871 FN_GLOBAL_STRING(lp_delete_share_cmd, &Globals.szDeleteShareCommand)
1872 FN_GLOBAL_STRING(lp_usershare_path, &Globals.szUsersharePath)
1873 FN_GLOBAL_LIST(lp_usershare_prefix_allow_list, &Globals.szUsersharePrefixAllowList)
1874 FN_GLOBAL_LIST(lp_usershare_prefix_deny_list, &Globals.szUsersharePrefixDenyList)
1875
1876 FN_GLOBAL_LIST(lp_eventlog_list, &Globals.szEventLogs)
1877
1878 FN_GLOBAL_BOOL(lp_usershare_owner_only, &Globals.bUsershareOwnerOnly)
1879 FN_GLOBAL_BOOL(lp_disable_netbios, &Globals.bDisableNetbios)
1880 FN_GLOBAL_BOOL(lp_reset_on_zero_vc, &Globals.bResetOnZeroVC)
1881 FN_GLOBAL_BOOL(lp_ms_add_printer_wizard, &Globals.bMsAddPrinterWizard)
1882 FN_GLOBAL_BOOL(lp_dns_proxy, &Globals.bDNSproxy)
1883 FN_GLOBAL_BOOL(lp_wins_support, &Globals.bWINSsupport)
1884 FN_GLOBAL_BOOL(lp_we_are_a_wins_server, &Globals.bWINSsupport)
1885 FN_GLOBAL_BOOL(lp_wins_proxy, &Globals.bWINSproxy)
1886 FN_GLOBAL_BOOL(lp_local_master, &Globals.bLocalMaster)
1887 FN_GLOBAL_BOOL(lp_domain_logons, &Globals.bDomainLogons)
1888 FN_GLOBAL_BOOL(lp_load_printers, &Globals.bLoadPrinters)
1889 FN_GLOBAL_BOOL(lp_readbmpx, &Globals.bReadbmpx)
1890 FN_GLOBAL_BOOL(lp_readraw, &Globals.bReadRaw)
1891 FN_GLOBAL_BOOL(lp_large_readwrite, &Globals.bLargeReadwrite)
1892 FN_GLOBAL_BOOL(lp_writeraw, &Globals.bWriteRaw)
1893 FN_GLOBAL_BOOL(lp_null_passwords, &Globals.bNullPasswords)
1894 FN_GLOBAL_BOOL(lp_obey_pam_restrictions, &Globals.bObeyPamRestrictions)
1895 FN_GLOBAL_BOOL(lp_encrypted_passwords, &Globals.bEncryptPasswords)
1896 FN_GLOBAL_BOOL(lp_update_encrypted, &Globals.bUpdateEncrypt)
1897 FN_GLOBAL_INTEGER(lp_client_schannel, &Globals.clientSchannel)
1898 FN_GLOBAL_INTEGER(lp_server_schannel, &Globals.serverSchannel)
1899 FN_GLOBAL_BOOL(lp_syslog_only, &Globals.bSyslogOnly)
1900 FN_GLOBAL_BOOL(lp_timestamp_logs, &Globals.bTimestampLogs)
1901 FN_GLOBAL_BOOL(lp_debug_hires_timestamp, &Globals.bDebugHiresTimestamp)
1902 FN_GLOBAL_BOOL(lp_debug_pid, &Globals.bDebugPid)
1903 FN_GLOBAL_BOOL(lp_debug_uid, &Globals.bDebugUid)
1904 FN_GLOBAL_BOOL(lp_browse_list, &Globals.bBrowseList)
1905 FN_GLOBAL_BOOL(lp_nis_home_map, &Globals.bNISHomeMap)
1906 static FN_GLOBAL_BOOL(lp_time_server, &Globals.bTimeServer)
1907 FN_GLOBAL_BOOL(lp_bind_interfaces_only, &Globals.bBindInterfacesOnly)
1908 FN_GLOBAL_BOOL(lp_pam_password_change, &Globals.bPamPasswordChange)
1909 FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync)
1910 FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug)
1911 FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout)
1912 FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport)
1913 FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport)
1914 FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache)
1915 FN_GLOBAL_INTEGER(lp_max_stat_cache_size, &Globals.iMaxStatCacheSize)
1916 FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains)
1917 FN_GLOBAL_INTEGER(lp_restrict_anonymous, &Globals.restrict_anonymous)
1918 FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth)
1919 FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth)
1920 FN_GLOBAL_BOOL(lp_client_plaintext_auth, &Globals.bClientPlaintextAuth)
1921 FN_GLOBAL_BOOL(lp_client_lanman_auth, &Globals.bClientLanManAuth)
1922 FN_GLOBAL_BOOL(lp_client_ntlmv2_auth, &Globals.bClientNTLMv2Auth)
1923 FN_GLOBAL_BOOL(lp_host_msdfs, &Globals.bHostMSDfs)
1924 FN_GLOBAL_BOOL(lp_kernel_oplocks, &Globals.bKernelOplocks)
1925 FN_GLOBAL_BOOL(lp_enhanced_browsing, &Globals.enhanced_browsing)
1926 FN_GLOBAL_BOOL(lp_use_mmap, &Globals.bUseMmap)
1927 FN_GLOBAL_BOOL(lp_unix_extensions, &Globals.bUnixExtensions)
1928 FN_GLOBAL_BOOL(lp_use_spnego, &Globals.bUseSpnego)
1929 FN_GLOBAL_BOOL(lp_client_use_spnego, &Globals.bClientUseSpnego)
1930 FN_GLOBAL_BOOL(lp_hostname_lookups, &Globals.bHostnameLookups)
1931 FN_GLOBAL_BOOL(lp_kernel_change_notify, &Globals.bKernelChangeNotify)
1932 FN_GLOBAL_BOOL(lp_fam_change_notify, &Globals.bFamChangeNotify)
1933 FN_GLOBAL_BOOL(lp_use_kerberos_keytab, &Globals.bUseKerberosKeytab)
1934 FN_GLOBAL_BOOL(lp_defer_sharing_violations, &Globals.bDeferSharingViolations)
1935 FN_GLOBAL_BOOL(lp_enable_privileges, &Globals.bEnablePrivileges)
1936 FN_GLOBAL_BOOL(lp_enable_asu_support, &Globals.bASUSupport)
1937 FN_GLOBAL_INTEGER(lp_os_level, &Globals.os_level)
1938 FN_GLOBAL_INTEGER(lp_max_ttl, &Globals.max_ttl)
1939 FN_GLOBAL_INTEGER(lp_max_wins_ttl, &Globals.max_wins_ttl)
1940 FN_GLOBAL_INTEGER(lp_min_wins_ttl, &Globals.min_wins_ttl)
1941 FN_GLOBAL_INTEGER(lp_max_log_size, &Globals.max_log_size)
1942 FN_GLOBAL_INTEGER(lp_max_open_files, &Globals.max_open_files)
1943 FN_GLOBAL_INTEGER(lp_open_files_db_hash_size, &Globals.open_files_db_hash_size)
1944 FN_GLOBAL_INTEGER(lp_maxxmit, &Globals.max_xmit)
1945 FN_GLOBAL_INTEGER(lp_maxmux, &Globals.max_mux)
1946 FN_GLOBAL_INTEGER(lp_passwordlevel, &Globals.pwordlevel)
1947 FN_GLOBAL_INTEGER(lp_usernamelevel, &Globals.unamelevel)
1948 FN_GLOBAL_INTEGER(lp_deadtime, &Globals.deadtime)
1949 FN_GLOBAL_INTEGER(lp_maxprotocol, &Globals.maxprotocol)
1950 FN_GLOBAL_INTEGER(lp_minprotocol, &Globals.minprotocol)
1951 FN_GLOBAL_INTEGER(lp_security, &Globals.security)
1952 FN_GLOBAL_LIST(lp_auth_methods, &Globals.AuthMethods)
1953 FN_GLOBAL_BOOL(lp_paranoid_server_security, &Globals.paranoid_server_security)
1954 FN_GLOBAL_INTEGER(lp_maxdisksize, &Globals.maxdisksize)
1955 FN_GLOBAL_INTEGER(lp_lpqcachetime, &Globals.lpqcachetime)
1956 FN_GLOBAL_INTEGER(lp_max_smbd_processes, &Globals.iMaxSmbdProcesses)
1957 FN_GLOBAL_INTEGER(_lp_disable_spoolss, &Globals.bDisableSpoolss)
1958 FN_GLOBAL_INTEGER(lp_syslog, &Globals.syslog)
1959 static FN_GLOBAL_INTEGER(lp_announce_as, &Globals.announce_as)
1960 FN_GLOBAL_INTEGER(lp_lm_announce, &Globals.lm_announce)
1961 FN_GLOBAL_INTEGER(lp_lm_interval, &Globals.lm_interval)
1962 FN_GLOBAL_INTEGER(lp_machine_password_timeout, &Globals.machine_password_timeout)
1963 FN_GLOBAL_INTEGER(lp_change_notify_timeout, &Globals.change_notify_timeout)
1964 FN_GLOBAL_INTEGER(lp_map_to_guest, &Globals.map_to_guest)
1965 FN_GLOBAL_INTEGER(lp_oplock_break_wait_time, &Globals.oplock_break_wait_time)
1966 FN_GLOBAL_INTEGER(lp_lock_spin_count, &Globals.iLockSpinCount)
1967 FN_GLOBAL_INTEGER(lp_lock_sleep_time, &Globals.iLockSpinTime)
1968 FN_GLOBAL_INTEGER(lp_usershare_max_shares, &Globals.iUsershareMaxShares)
1969
1970 FN_LOCAL_STRING(lp_preexec, szPreExec)
1971 FN_LOCAL_STRING(lp_postexec, szPostExec)
1972 FN_LOCAL_STRING(lp_rootpreexec, szRootPreExec)
1973 FN_LOCAL_STRING(lp_rootpostexec, szRootPostExec)
1974 FN_LOCAL_STRING(lp_servicename, szService)
1975 FN_LOCAL_CONST_STRING(lp_const_servicename, szService)
1976 FN_LOCAL_STRING(lp_pathname, szPath)
1977 FN_LOCAL_STRING(lp_dontdescend, szDontdescend)
1978 FN_LOCAL_STRING(lp_username, szUsername)
1979 FN_LOCAL_LIST(lp_invalid_users, szInvalidUsers)
1980 FN_LOCAL_LIST(lp_valid_users, szValidUsers)
1981 FN_LOCAL_LIST(lp_admin_users, szAdminUsers)
1982 FN_GLOBAL_LIST(lp_svcctl_list, &Globals.szServicesList)
1983 FN_LOCAL_STRING(lp_cups_options, szCupsOptions)
1984 FN_GLOBAL_STRING(lp_cups_server, &Globals.szCupsServer)
1985 FN_GLOBAL_STRING(lp_iprint_server, &Globals.szIPrintServer)
1986 FN_LOCAL_STRING(lp_printcommand, szPrintcommand)
1987 FN_LOCAL_STRING(lp_lpqcommand, szLpqcommand)
1988 FN_LOCAL_STRING(lp_lprmcommand, szLprmcommand)
1989 FN_LOCAL_STRING(lp_lppausecommand, szLppausecommand)
1990 FN_LOCAL_STRING(lp_lpresumecommand, szLpresumecommand)
1991 FN_LOCAL_STRING(lp_queuepausecommand, szQueuepausecommand)
1992 FN_LOCAL_STRING(lp_queueresumecommand, szQueueresumecommand)
1993 static FN_LOCAL_STRING(_lp_printername, szPrintername)
1994 FN_LOCAL_LIST(lp_hostsallow, szHostsallow)
1995 FN_LOCAL_LIST(lp_hostsdeny, szHostsdeny)
1996 FN_LOCAL_STRING(lp_magicscript, szMagicScript)
1997 FN_LOCAL_STRING(lp_magicoutput, szMagicOutput)
1998 FN_LOCAL_STRING(lp_comment, comment)
1999 FN_LOCAL_STRING(lp_force_user, force_user)
2000 FN_LOCAL_STRING(lp_force_group, force_group)
2001 FN_LOCAL_LIST(lp_readlist, readlist)
2002 FN_LOCAL_LIST(lp_writelist, writelist)
2003 FN_LOCAL_LIST(lp_printer_admin, printer_admin)
2004 FN_LOCAL_STRING(lp_fstype, fstype)
2005 FN_LOCAL_LIST(lp_vfs_objects, szVfsObjects)
2006 FN_LOCAL_STRING(lp_msdfs_proxy, szMSDfsProxy)
2007 static FN_LOCAL_STRING(lp_volume, volume)
2008 FN_LOCAL_STRING(lp_mangled_map, szMangledMap)
2009 FN_LOCAL_STRING(lp_veto_files, szVetoFiles)
2010 FN_LOCAL_STRING(lp_hide_files, szHideFiles)
2011 FN_LOCAL_STRING(lp_veto_oplocks, szVetoOplockFiles)
2012 FN_LOCAL_BOOL(lp_msdfs_root, bMSDfsRoot)
2013 FN_LOCAL_STRING(lp_aio_write_behind, szAioWriteBehind)
2014 FN_LOCAL_STRING(lp_dfree_command, szDfree)
2015 FN_LOCAL_BOOL(lp_autoloaded, autoloaded)
2016 FN_LOCAL_BOOL(lp_preexec_close, bPreexecClose)
2017 FN_LOCAL_BOOL(lp_rootpreexec_close, bRootpreexecClose)
2018 FN_LOCAL_INTEGER(lp_casesensitive, iCaseSensitive)
2019 FN_LOCAL_BOOL(lp_preservecase, bCasePreserve)
2020 FN_LOCAL_BOOL(lp_shortpreservecase, bShortCasePreserve)
2021 FN_LOCAL_BOOL(lp_hide_dot_files, bHideDotFiles)
2022 FN_LOCAL_BOOL(lp_hide_special_files, bHideSpecialFiles)
2023 FN_LOCAL_BOOL(lp_hideunreadable, bHideUnReadable)
2024 FN_LOCAL_BOOL(lp_hideunwriteable_files, bHideUnWriteableFiles)
2025 FN_LOCAL_BOOL(lp_browseable, bBrowseable)
2026 FN_LOCAL_BOOL(lp_readonly, bRead_only)
2027 FN_LOCAL_BOOL(lp_no_set_dir, bNo_set_dir)
2028 FN_LOCAL_BOOL(lp_guest_ok, bGuest_ok)
2029 FN_LOCAL_BOOL(lp_guest_only, bGuest_only)
2030 FN_LOCAL_BOOL(lp_print_ok, bPrint_ok)
2031 FN_LOCAL_BOOL(lp_map_hidden, bMap_hidden)
2032 FN_LOCAL_BOOL(lp_map_archive, bMap_archive)
2033 FN_LOCAL_BOOL(lp_store_dos_attributes, bStoreDosAttributes)
2034 FN_LOCAL_BOOL(lp_dmapi_support, bDmapiSupport)
2035 FN_LOCAL_BOOL(lp_locking, bLocking)
2036 FN_LOCAL_INTEGER(lp_strict_locking, iStrictLocking)
2037 FN_LOCAL_BOOL(lp_posix_locking, bPosixLocking)
2038 FN_LOCAL_BOOL(lp_share_modes, bShareModes)
2039 FN_LOCAL_BOOL(lp_oplocks, bOpLocks)
2040 FN_LOCAL_BOOL(lp_level2_oplocks, bLevel2OpLocks)
2041 FN_LOCAL_BOOL(lp_onlyuser, bOnlyUser)
2042 FN_LOCAL_BOOL(lp_manglednames, bMangledNames)
2043 FN_LOCAL_BOOL(lp_widelinks, bWidelinks)
2044 FN_LOCAL_BOOL(lp_symlinks, bSymlinks)
2045 FN_LOCAL_BOOL(lp_syncalways, bSyncAlways)
2046 FN_LOCAL_BOOL(lp_strict_allocate, bStrictAllocate)
2047 FN_LOCAL_BOOL(lp_strict_sync, bStrictSync)
2048 FN_LOCAL_BOOL(lp_map_system, bMap_system)
2049 FN_LOCAL_BOOL(lp_delete_readonly, bDeleteReadonly)
2050 FN_LOCAL_BOOL(lp_fake_oplocks, bFakeOplocks)
2051 FN_LOCAL_BOOL(lp_recursive_veto_delete, bDeleteVetoFiles)
2052 FN_LOCAL_BOOL(lp_dos_filemode, bDosFilemode)
2053 FN_LOCAL_BOOL(lp_dos_filetimes, bDosFiletimes)
2054 FN_LOCAL_BOOL(lp_dos_filetime_resolution, bDosFiletimeResolution)
2055 FN_LOCAL_BOOL(lp_fake_dir_create_times, bFakeDirCreateTimes)
2056 FN_LOCAL_BOOL(lp_blocking_locks, bBlockingLocks)
2057 FN_LOCAL_BOOL(lp_inherit_perms, bInheritPerms)
2058 FN_LOCAL_BOOL(lp_inherit_acls, bInheritACLS)
2059 FN_LOCAL_BOOL(lp_inherit_owner, bInheritOwner)
2060 FN_LOCAL_BOOL(lp_use_client_driver, bUseClientDriver)
2061 FN_LOCAL_BOOL(lp_default_devmode, bDefaultDevmode)
2062 FN_LOCAL_BOOL(lp_force_printername, bForcePrintername)
2063 FN_LOCAL_BOOL(lp_nt_acl_support, bNTAclSupport)
2064 FN_LOCAL_BOOL(lp_force_unknown_acl_user, bForceUnknownAclUser)
2065 FN_LOCAL_BOOL(lp_ea_support, bEASupport)
2066 FN_LOCAL_BOOL(_lp_use_sendfile, bUseSendfile)
2067 FN_LOCAL_BOOL(lp_profile_acls, bProfileAcls)
2068 FN_LOCAL_BOOL(lp_map_acl_inherit, bMap_acl_inherit)
2069 FN_LOCAL_BOOL(lp_afs_share, bAfs_Share)
2070 FN_LOCAL_BOOL(lp_acl_check_permissions, bAclCheckPermissions)
2071 FN_LOCAL_BOOL(lp_acl_group_control, bAclGroupControl)
2072 FN_LOCAL_BOOL(lp_acl_map_full_control, bAclMapFullControl)
2073 FN_LOCAL_INTEGER(lp_create_mask, iCreate_mask)
2074 FN_LOCAL_INTEGER(lp_force_create_mode, iCreate_force_mode)
2075 FN_LOCAL_INTEGER(lp_security_mask, iSecurity_mask)
2076 FN_LOCAL_INTEGER(lp_force_security_mode, iSecurity_force_mode)
2077 FN_LOCAL_INTEGER(lp_dir_mask, iDir_mask)
2078 FN_LOCAL_INTEGER(lp_force_dir_mode, iDir_force_mode)
2079 FN_LOCAL_INTEGER(lp_dir_security_mask, iDir_Security_mask)
2080 FN_LOCAL_INTEGER(lp_force_dir_security_mode, iDir_Security_force_mode)
2081 FN_LOCAL_INTEGER(lp_max_connections, iMaxConnections)
2082 FN_LOCAL_INTEGER(lp_defaultcase, iDefaultCase)
2083 FN_LOCAL_INTEGER(lp_minprintspace, iMinPrintSpace)
2084 FN_LOCAL_INTEGER(lp_printing, iPrinting)
2085 FN_LOCAL_INTEGER(lp_max_reported_jobs, iMaxReportedPrintJobs)
2086 FN_LOCAL_INTEGER(lp_oplock_contention_limit, iOplockContentionLimit)
2087 FN_LOCAL_INTEGER(lp_csc_policy, iCSCPolicy)
2088 FN_LOCAL_INTEGER(lp_write_cache_size, iWriteCacheSize)
2089 FN_LOCAL_INTEGER(lp_block_size, iBlock_size)
2090 FN_LOCAL_INTEGER(lp_dfree_cache_time, iDfreeCacheTime)
2091 FN_LOCAL_INTEGER(lp_allocation_roundup_size, iallocation_roundup_size)
2092 FN_LOCAL_INTEGER(lp_aio_read_size, iAioReadSize)
2093 FN_LOCAL_INTEGER(lp_aio_write_size, iAioWriteSize)
2094 FN_LOCAL_INTEGER(lp_map_readonly, iMap_readonly)
2095 FN_LOCAL_CHAR(lp_magicchar, magic_char)
2096 FN_GLOBAL_INTEGER(lp_winbind_cache_time, &Globals.winbind_cache_time)
2097 FN_GLOBAL_LIST(lp_winbind_nss_info, &Globals.szWinbindNssInfo)
2098 FN_GLOBAL_INTEGER(lp_algorithmic_rid_base, &Globals.AlgorithmicRidBase)
2099 FN_GLOBAL_INTEGER(lp_name_cache_timeout, &Globals.name_cache_timeout)
2100 FN_GLOBAL_INTEGER(lp_client_signing, &Globals.client_signing)
2101 FN_GLOBAL_INTEGER(lp_server_signing, &Globals.server_signing)
2102
2103 /* local prototypes */
2104
2105 static int map_parameter(const char *pszParmName);
2106 static BOOL set_boolean(BOOL *pb, const char *pszParmValue);
2107 static int getservicebyname(const char *pszServiceName,
2108                             service * pserviceDest);
2109 static void copy_service(service * pserviceDest,
2110                          service * pserviceSource, BOOL *pcopymapDest);
2111 static BOOL service_ok(int iService);
2112 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue);
2113 static BOOL do_section(const char *pszSectionName);
2114 static void init_copymap(service * pservice);
2115 static BOOL hash_a_service(const char *name, int number);
2116 static void free_service_byindex(int iService);
2117 static char * canonicalize_servicename(const char *name);
2118
2119 /* This is a helper function for parametrical options support. */
2120 /* It returns a pointer to parametrical option value if it exists or NULL otherwise */
2121 /* Actual parametrical functions are quite simple */
2122 static param_opt_struct *get_parametrics(int snum, const char *type, const char *option)
2123 {
2124         BOOL global_section = False;
2125         char* param_key;
2126         param_opt_struct *data;
2127
2128         if (snum >= iNumServices) return NULL;
2129
2130         if (snum < 0) {
2131                 data = Globals.param_opt;
2132                 global_section = True;
2133         } else {
2134                 data = ServicePtrs[snum]->param_opt;
2135         }
2136
2137         asprintf(&param_key, "%s:%s", type, option);
2138         if (!param_key) {
2139                 DEBUG(0,("asprintf failed!\n"));
2140                 return NULL;
2141         }
2142
2143         while (data) {
2144                 if (strcmp(data->key, param_key) == 0) {
2145                         string_free(&param_key);
2146                         return data;
2147                 }
2148                 data = data->next;
2149         }
2150
2151         if (!global_section) {
2152                 /* Try to fetch the same option but from globals */
2153                 /* but only if we are not already working with Globals */
2154                 data = Globals.param_opt;
2155                 while (data) {
2156                         if (strcmp(data->key, param_key) == 0) {
2157                                 string_free(&param_key);
2158                                 return data;
2159                         }
2160                         data = data->next;
2161                 }
2162         }
2163
2164         string_free(&param_key);
2165
2166         return NULL;
2167 }
2168
2169
2170 #define MISSING_PARAMETER(name) \
2171     DEBUG(0, ("%s(): value is NULL or empty!\n", #name))
2172
2173 /*******************************************************************
2174 convenience routine to return int parameters.
2175 ********************************************************************/
2176 static int lp_int(const char *s)
2177 {
2178
2179         if (!s || !*s) {
2180                 MISSING_PARAMETER(lp_int);
2181                 return (-1);
2182         }
2183
2184         return atoi(s);
2185 }
2186
2187 /*******************************************************************
2188 convenience routine to return unsigned long parameters.
2189 ********************************************************************/
2190 static unsigned long lp_ulong(const char *s)
2191 {
2192
2193         if (!s || !*s) {
2194                 MISSING_PARAMETER(lp_ulong);
2195                 return (0);
2196         }
2197
2198         return strtoul(s, NULL, 10);
2199 }
2200
2201 /*******************************************************************
2202 convenience routine to return boolean parameters.
2203 ********************************************************************/
2204 static BOOL lp_bool(const char *s)
2205 {
2206         BOOL ret = False;
2207
2208         if (!s || !*s) {
2209                 MISSING_PARAMETER(lp_bool);
2210                 return False;
2211         }
2212
2213         if (!set_boolean(&ret,s)) {
2214                 DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
2215                 return False;
2216         }
2217
2218         return ret;
2219 }
2220
2221 /*******************************************************************
2222 convenience routine to return enum parameters.
2223 ********************************************************************/
2224 static int lp_enum(const char *s,const struct enum_list *_enum)
2225 {
2226         int i;
2227
2228         if (!s || !*s || !_enum) {
2229                 MISSING_PARAMETER(lp_enum);
2230                 return (-1);
2231         }
2232
2233         for (i=0; _enum[i].name; i++) {
2234                 if (strequal(_enum[i].name,s))
2235                         return _enum[i].value;
2236         }
2237
2238         DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
2239         return (-1);
2240 }
2241
2242 #undef MISSING_PARAMETER
2243
2244 /* DO NOT USE lp_parm_string ANYMORE!!!!
2245  * use lp_parm_const_string or lp_parm_talloc_string
2246  *
2247  * lp_parm_string is only used to let old modules find this symbol
2248  */
2249 #undef lp_parm_string
2250  char *lp_parm_string(const char *servicename, const char *type, const char *option)
2251 {
2252         return lp_parm_talloc_string(lp_servicenumber(servicename), type, option, NULL);
2253 }
2254
2255 /* Return parametric option from a given service. Type is a part of option before ':' */
2256 /* Parametric option has following syntax: 'Type: option = value' */
2257 /* the returned value is talloced in lp_talloc */
2258 char *lp_parm_talloc_string(int snum, const char *type, const char *option, const char *def)
2259 {
2260         param_opt_struct *data = get_parametrics(snum, type, option);
2261
2262         if (data == NULL||data->value==NULL) {
2263                 if (def) {
2264                         return lp_string(def);
2265                 } else {
2266                         return NULL;
2267                 }
2268         }
2269
2270         return lp_string(data->value);
2271 }
2272
2273 /* Return parametric option from a given service. Type is a part of option before ':' */
2274 /* Parametric option has following syntax: 'Type: option = value' */
2275 const char *lp_parm_const_string(int snum, const char *type, const char *option, const char *def)
2276 {
2277         param_opt_struct *data = get_parametrics(snum, type, option);
2278
2279         if (data == NULL||data->value==NULL)
2280                 return def;
2281
2282         return data->value;
2283 }
2284
2285 /* Return parametric option from a given service. Type is a part of option before ':' */
2286 /* Parametric option has following syntax: 'Type: option = value' */
2287
2288 const char **lp_parm_string_list(int snum, const char *type, const char *option, const char **def)
2289 {
2290         param_opt_struct *data = get_parametrics(snum, type, option);
2291
2292         if (data == NULL||data->value==NULL)
2293                 return (const char **)def;
2294
2295         if (data->list==NULL) {
2296                 data->list = str_list_make(data->value, NULL);
2297         }
2298
2299         return (const char **)data->list;
2300 }
2301
2302 /* Return parametric option from a given service. Type is a part of option before ':' */
2303 /* Parametric option has following syntax: 'Type: option = value' */
2304
2305 int lp_parm_int(int snum, const char *type, const char *option, int def)
2306 {
2307         param_opt_struct *data = get_parametrics(snum, type, option);
2308
2309         if (data && data->value && *data->value)
2310                 return lp_int(data->value);
2311
2312         return def;
2313 }
2314
2315 /* Return parametric option from a given service. Type is a part of option before ':' */
2316 /* Parametric option has following syntax: 'Type: option = value' */
2317
2318 unsigned long lp_parm_ulong(int snum, const char *type, const char *option, unsigned long def)
2319 {
2320         param_opt_struct *data = get_parametrics(snum, type, option);
2321
2322         if (data && data->value && *data->value)
2323                 return lp_ulong(data->value);
2324
2325         return def;
2326 }
2327
2328 /* Return parametric option from a given service. Type is a part of option before ':' */
2329 /* Parametric option has following syntax: 'Type: option = value' */
2330
2331 BOOL lp_parm_bool(int snum, const char *type, const char *option, BOOL def)
2332 {
2333         param_opt_struct *data = get_parametrics(snum, type, option);
2334
2335         if (data && data->value && *data->value)
2336                 return lp_bool(data->value);
2337
2338         return def;
2339 }
2340
2341 /* Return parametric option from a given service. Type is a part of option before ':' */
2342 /* Parametric option has following syntax: 'Type: option = value' */
2343
2344 int lp_parm_enum(int snum, const char *type, const char *option,
2345                  const struct enum_list *_enum, int def)
2346 {
2347         param_opt_struct *data = get_parametrics(snum, type, option);
2348
2349         if (data && data->value && *data->value && _enum)
2350                 return lp_enum(data->value, _enum);
2351
2352         return def;
2353 }
2354
2355
2356 /***************************************************************************
2357  Initialise a service to the defaults.
2358 ***************************************************************************/
2359
2360 static void init_service(service * pservice)
2361 {
2362         memset((char *)pservice, '\0', sizeof(service));
2363         copy_service(pservice, &sDefault, NULL);
2364 }
2365
2366 /***************************************************************************
2367  Free the dynamically allocated parts of a service struct.
2368 ***************************************************************************/
2369
2370 static void free_service(service *pservice)
2371 {
2372         int i;
2373         param_opt_struct *data, *pdata;
2374         if (!pservice)
2375                 return;
2376
2377         if (pservice->szService)
2378                 DEBUG(5, ("free_service: Freeing service %s\n",
2379                        pservice->szService));
2380
2381         string_free(&pservice->szService);
2382         SAFE_FREE(pservice->copymap);
2383
2384         for (i = 0; parm_table[i].label; i++) {
2385                 if ((parm_table[i].type == P_STRING ||
2386                      parm_table[i].type == P_USTRING) &&
2387                     parm_table[i].p_class == P_LOCAL)
2388                         string_free((char **)
2389                                     (((char *)pservice) +
2390                                      PTR_DIFF(parm_table[i].ptr, &sDefault)));
2391                 else if (parm_table[i].type == P_LIST &&
2392                          parm_table[i].p_class == P_LOCAL)
2393                              str_list_free((char ***)
2394                                             (((char *)pservice) +
2395                                              PTR_DIFF(parm_table[i].ptr, &sDefault)));
2396         }
2397
2398         data = pservice->param_opt;
2399         if (data)
2400                 DEBUG(5,("Freeing parametrics:\n"));
2401         while (data) {
2402                 DEBUG(5,("[%s = %s]\n", data->key, data->value));
2403                 string_free(&data->key);
2404                 string_free(&data->value);
2405                 str_list_free(&data->list);
2406                 pdata = data->next;
2407                 SAFE_FREE(data);
2408                 data = pdata;
2409         }
2410
2411         ZERO_STRUCTP(pservice);
2412 }
2413
2414
2415 /***************************************************************************
2416  remove a service indexed in the ServicePtrs array from the ServiceHash
2417  and free the dynamically allocated parts
2418 ***************************************************************************/
2419
2420 static void free_service_byindex(int idx)
2421 {
2422         if ( !LP_SNUM_OK(idx) )
2423                 return;
2424
2425         ServicePtrs[idx]->valid = False;
2426         invalid_services[num_invalid_services++] = idx;
2427
2428         /* we have to cleanup the hash record */
2429
2430         if (ServicePtrs[idx]->szService) {
2431                 char *canon_name = canonicalize_servicename( ServicePtrs[idx]->szService );
2432
2433                 tdb_delete_bystring(ServiceHash, canon_name );
2434         }
2435
2436         free_service(ServicePtrs[idx]);
2437 }
2438
2439 /***************************************************************************
2440  Add a new service to the services array initialising it with the given
2441  service.
2442 ***************************************************************************/
2443
2444 static int add_a_service(const service *pservice, const char *name)
2445 {
2446         int i;
2447         service tservice;
2448         int num_to_alloc = iNumServices + 1;
2449         param_opt_struct *data, *pdata;
2450
2451         tservice = *pservice;
2452
2453         /* it might already exist */
2454         if (name) {
2455                 i = getservicebyname(name, NULL);
2456                 if (i >= 0) {
2457                         /* Clean all parametric options for service */
2458                         /* They will be added during parsing again */
2459                         data = ServicePtrs[i]->param_opt;
2460                         while (data) {
2461                                 string_free(&data->key);
2462                                 string_free(&data->value);
2463                                 str_list_free(&data->list);
2464                                 pdata = data->next;
2465                                 SAFE_FREE(data);
2466                                 data = pdata;
2467                         }
2468                         ServicePtrs[i]->param_opt = NULL;
2469                         return (i);
2470                 }
2471         }
2472
2473         /* find an invalid one */
2474         i = iNumServices;
2475         if (num_invalid_services > 0) {
2476                 i = invalid_services[--num_invalid_services];
2477         }
2478
2479         /* if not, then create one */
2480         if (i == iNumServices) {
2481                 service **tsp;
2482                 int *tinvalid;
2483
2484                 tsp = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(ServicePtrs, service *, num_to_alloc);
2485                 if (tsp == NULL) {
2486                         DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
2487                         return (-1);
2488                 }
2489                 ServicePtrs = tsp;
2490                 ServicePtrs[iNumServices] = SMB_MALLOC_P(service);
2491                 if (!ServicePtrs[iNumServices]) {
2492                         DEBUG(0,("add_a_service: out of memory!\n"));
2493                         return (-1);
2494                 }
2495                 iNumServices++;
2496
2497                 /* enlarge invalid_services here for now... */
2498                 tinvalid = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(invalid_services, int,
2499                                              num_to_alloc);
2500                 if (tinvalid == NULL) {
2501                         DEBUG(0,("add_a_service: failed to enlarge "
2502                                  "invalid_services!\n"));
2503                         return (-1);
2504                 }
2505                 invalid_services = tinvalid;
2506         } else {
2507                 free_service_byindex(i);
2508         }
2509
2510         ServicePtrs[i]->valid = True;
2511
2512         init_service(ServicePtrs[i]);
2513         copy_service(ServicePtrs[i], &tservice, NULL);
2514         if (name)
2515                 string_set(&ServicePtrs[i]->szService, name);
2516
2517         DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
2518                 i, ServicePtrs[i]->szService));
2519
2520         if (!hash_a_service(ServicePtrs[i]->szService, i)) {
2521                 return (-1);
2522         }
2523
2524         return (i);
2525 }
2526
2527 /***************************************************************************
2528   Convert a string to uppercase and remove whitespaces.
2529 ***************************************************************************/
2530
2531 static char *canonicalize_servicename(const char *src)
2532 {
2533         static fstring canon; /* is fstring large enough? */
2534
2535         if ( !src ) {
2536                 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
2537                 return NULL;
2538         }
2539
2540         fstrcpy( canon, src );
2541         strlower_m( canon );
2542
2543         return canon;
2544 }
2545
2546 /***************************************************************************
2547   Add a name/index pair for the services array to the hash table.
2548 ***************************************************************************/
2549
2550 static BOOL hash_a_service(const char *name, int idx)
2551 {
2552         char *canon_name;
2553
2554         if ( !ServiceHash ) {
2555                 DEBUG(10,("hash_a_service: creating tdb servicehash\n"));
2556                 ServiceHash = tdb_open("servicehash", 1031, TDB_INTERNAL,
2557                                         (O_RDWR|O_CREAT), 0600);
2558                 if ( !ServiceHash ) {
2559                         DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
2560                         return False;
2561                 }
2562         }
2563
2564         DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
2565                 idx, name));
2566
2567         if ( !(canon_name = canonicalize_servicename( name )) )
2568                 return False;
2569
2570         tdb_store_int32(ServiceHash, canon_name, idx);
2571
2572         return True;
2573 }
2574
2575 /***************************************************************************
2576  Add a new home service, with the specified home directory, defaults coming
2577  from service ifrom.
2578 ***************************************************************************/
2579
2580 BOOL lp_add_home(const char *pszHomename, int iDefaultService,
2581                  const char *user, const char *pszHomedir)
2582 {
2583         int i;
2584         pstring newHomedir;
2585
2586         i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
2587
2588         if (i < 0)
2589                 return (False);
2590
2591         if (!(*(ServicePtrs[iDefaultService]->szPath))
2592             || strequal(ServicePtrs[iDefaultService]->szPath, lp_pathname(GLOBAL_SECTION_SNUM))) {
2593                 pstrcpy(newHomedir, pszHomedir);
2594                 string_set(&ServicePtrs[i]->szPath, newHomedir);
2595         }
2596
2597         if (!(*(ServicePtrs[i]->comment))) {
2598                 pstring comment;
2599                 slprintf(comment, sizeof(comment) - 1,
2600                          "Home directory of %s", user);
2601                 string_set(&ServicePtrs[i]->comment, comment);
2602         }
2603
2604         /* set the browseable flag from the global default */
2605
2606         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2607
2608         ServicePtrs[i]->autoloaded = True;
2609
2610         DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename,
2611                user, ServicePtrs[i]->szPath ));
2612
2613         return (True);
2614 }
2615
2616 /***************************************************************************
2617  Add a new service, based on an old one.
2618 ***************************************************************************/
2619
2620 int lp_add_service(const char *pszService, int iDefaultService)
2621 {
2622         return (add_a_service(ServicePtrs[iDefaultService], pszService));
2623 }
2624
2625 /***************************************************************************
2626  Add the IPC service.
2627 ***************************************************************************/
2628
2629 static BOOL lp_add_ipc(const char *ipc_name, BOOL guest_ok)
2630 {
2631         pstring comment;
2632         int i = add_a_service(&sDefault, ipc_name);
2633
2634         if (i < 0)
2635                 return (False);
2636
2637         slprintf(comment, sizeof(comment) - 1,
2638                  "IPC Service (%s)", Globals.szServerString);
2639
2640         string_set(&ServicePtrs[i]->szPath, tmpdir());
2641         string_set(&ServicePtrs[i]->szUsername, "");
2642         string_set(&ServicePtrs[i]->comment, comment);
2643         string_set(&ServicePtrs[i]->fstype, "IPC");
2644         ServicePtrs[i]->iMaxConnections = 0;
2645         ServicePtrs[i]->bAvailable = True;
2646         ServicePtrs[i]->bRead_only = True;
2647         ServicePtrs[i]->bGuest_only = False;
2648         ServicePtrs[i]->bGuest_ok = guest_ok;
2649         ServicePtrs[i]->bPrint_ok = False;
2650         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2651
2652         DEBUG(3, ("adding IPC service\n"));
2653
2654         return (True);
2655 }
2656
2657 /***************************************************************************
2658  Add a new printer service, with defaults coming from service iFrom.
2659 ***************************************************************************/
2660
2661 BOOL lp_add_printer(const char *pszPrintername, int iDefaultService)
2662 {
2663         const char *comment = "From Printcap";
2664         int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
2665
2666         if (i < 0)
2667                 return (False);
2668
2669         /* note that we do NOT default the availability flag to True - */
2670         /* we take it from the default service passed. This allows all */
2671         /* dynamic printers to be disabled by disabling the [printers] */
2672         /* entry (if/when the 'available' keyword is implemented!).    */
2673
2674         /* the printer name is set to the service name. */
2675         string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
2676         string_set(&ServicePtrs[i]->comment, comment);
2677
2678         /* set the browseable flag from the gloabl default */
2679         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2680
2681         /* Printers cannot be read_only. */
2682         ServicePtrs[i]->bRead_only = False;
2683         /* No share modes on printer services. */
2684         ServicePtrs[i]->bShareModes = False;
2685         /* No oplocks on printer services. */
2686         ServicePtrs[i]->bOpLocks = False;
2687         /* Printer services must be printable. */
2688         ServicePtrs[i]->bPrint_ok = True;
2689
2690         DEBUG(3, ("adding printer service %s\n", pszPrintername));
2691
2692         return (True);
2693 }
2694
2695 /***************************************************************************
2696  Map a parameter's string representation to something we can use.
2697  Returns False if the parameter string is not recognised, else TRUE.
2698 ***************************************************************************/
2699
2700 static int map_parameter(const char *pszParmName)
2701 {
2702         int iIndex;
2703
2704         if (*pszParmName == '-')
2705                 return (-1);
2706
2707         for (iIndex = 0; parm_table[iIndex].label; iIndex++)
2708                 if (strwicmp(parm_table[iIndex].label, pszParmName) == 0)
2709                         return (iIndex);
2710
2711         /* Warn only if it isn't parametric option */
2712         if (strchr(pszParmName, ':') == NULL)
2713                 DEBUG(0, ("Unknown parameter encountered: \"%s\"\n", pszParmName));
2714         /* We do return 'fail' for parametric options as well because they are
2715            stored in different storage
2716          */
2717         return (-1);
2718 }
2719
2720 /***************************************************************************
2721  Show all parameter's name, type, [values,] and flags.
2722 ***************************************************************************/
2723
2724 void show_parameter_list(void)
2725 {
2726         int classIndex, parmIndex, enumIndex, flagIndex;
2727         BOOL hadFlag;
2728         const char *section_names[] = { "local", "global", NULL};
2729         const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
2730                 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING", "P_GSTRING",
2731                 "P_UGSTRING", "P_ENUM", "P_SEP"};
2732         unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
2733                 FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
2734                 FLAG_HIDE, FLAG_DOS_STRING};
2735         const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
2736                 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
2737                 "FLAG_DEPRECATED", "FLAG_HIDE", "FLAG_DOS_STRING", NULL};
2738
2739         for ( classIndex=0; section_names[classIndex]; classIndex++) {
2740                 printf("[%s]\n", section_names[classIndex]);
2741                 for (parmIndex = 0; parm_table[parmIndex].label; parmIndex++) {
2742                         if (parm_table[parmIndex].p_class == classIndex) {
2743                                 printf("%s=%s",
2744                                         parm_table[parmIndex].label,
2745                                         type[parm_table[parmIndex].type]);
2746                                 switch (parm_table[parmIndex].type) {
2747                                 case P_ENUM:
2748                                         printf(",");
2749                                         for (enumIndex=0; parm_table[parmIndex].enum_list[enumIndex].name; enumIndex++)
2750                                                 printf("%s%s",
2751                                                         enumIndex ? "|" : "",
2752                                                         parm_table[parmIndex].enum_list[enumIndex].name);
2753                                         break;
2754                                 default:
2755                                         break;
2756                                 }
2757                                 printf(",");
2758                                 hadFlag = False;
2759                                 for ( flagIndex=0; flag_names[flagIndex]; flagIndex++ ) {
2760                                         if (parm_table[parmIndex].flags & flags[flagIndex]) {
2761                                                 printf("%s%s",
2762                                                         hadFlag ? "|" : "",
2763                                                         flag_names[flagIndex]);
2764                                                 hadFlag = True;
2765                                         }
2766                                 }
2767                                 printf("\n");
2768                         }
2769                 }
2770         }
2771 }
2772
2773 /***************************************************************************
2774  Set a boolean variable from the text value stored in the passed string.
2775  Returns True in success, False if the passed string does not correctly
2776  represent a boolean.
2777 ***************************************************************************/
2778
2779 static BOOL set_boolean(BOOL *pb, const char *pszParmValue)
2780 {
2781         BOOL bRetval;
2782
2783         bRetval = True;
2784         if (strwicmp(pszParmValue, "yes") == 0 ||
2785             strwicmp(pszParmValue, "true") == 0 ||
2786             strwicmp(pszParmValue, "1") == 0)
2787                 *pb = True;
2788         else if (strwicmp(pszParmValue, "no") == 0 ||
2789                     strwicmp(pszParmValue, "False") == 0 ||
2790                     strwicmp(pszParmValue, "0") == 0)
2791                 *pb = False;
2792         else {
2793                 DEBUG(0,
2794                       ("ERROR: Badly formed boolean in configuration file: \"%s\".\n",
2795                        pszParmValue));
2796                 bRetval = False;
2797         }
2798         return (bRetval);
2799 }
2800
2801 /***************************************************************************
2802 Find a service by name. Otherwise works like get_service.
2803 ***************************************************************************/
2804
2805 static int getservicebyname(const char *pszServiceName, service * pserviceDest)
2806 {
2807         int iService = -1;
2808         char *canon_name;
2809
2810         if (ServiceHash != NULL) {
2811                 if ( !(canon_name = canonicalize_servicename( pszServiceName )) )
2812                         return -1;
2813
2814                 iService = tdb_fetch_int32(ServiceHash, canon_name );
2815
2816                 if (LP_SNUM_OK(iService)) {
2817                         if (pserviceDest != NULL) {
2818                                 copy_service(pserviceDest, ServicePtrs[iService], NULL);
2819                         }
2820                 } else {
2821                         iService = -1;
2822                 }
2823         }
2824
2825         return (iService);
2826 }
2827
2828 /***************************************************************************
2829  Copy a service structure to another.
2830  If pcopymapDest is NULL then copy all fields
2831 ***************************************************************************/
2832
2833 static void copy_service(service * pserviceDest, service * pserviceSource, BOOL *pcopymapDest)
2834 {
2835         int i;
2836         BOOL bcopyall = (pcopymapDest == NULL);
2837         param_opt_struct *data, *pdata, *paramo;
2838         BOOL not_added;
2839
2840         for (i = 0; parm_table[i].label; i++)
2841                 if (parm_table[i].ptr && parm_table[i].p_class == P_LOCAL &&
2842                     (bcopyall || pcopymapDest[i])) {
2843                         void *def_ptr = parm_table[i].ptr;
2844                         void *src_ptr =
2845                                 ((char *)pserviceSource) + PTR_DIFF(def_ptr,
2846                                                                     &sDefault);
2847                         void *dest_ptr =
2848                                 ((char *)pserviceDest) + PTR_DIFF(def_ptr,
2849                                                                   &sDefault);
2850
2851                         switch (parm_table[i].type) {
2852                                 case P_BOOL:
2853                                 case P_BOOLREV:
2854                                         *(BOOL *)dest_ptr = *(BOOL *)src_ptr;
2855                                         break;
2856
2857                                 case P_INTEGER:
2858                                 case P_ENUM:
2859                                 case P_OCTAL:
2860                                         *(int *)dest_ptr = *(int *)src_ptr;
2861                                         break;
2862
2863                                 case P_CHAR:
2864                                         *(char *)dest_ptr = *(char *)src_ptr;
2865                                         break;
2866
2867                                 case P_STRING:
2868                                         string_set((char **)dest_ptr,
2869                                                    *(char **)src_ptr);
2870                                         break;
2871
2872                                 case P_USTRING:
2873                                         string_set((char **)dest_ptr,
2874                                                    *(char **)src_ptr);
2875                                         strupper_m(*(char **)dest_ptr);
2876                                         break;
2877                                 case P_LIST:
2878                                         str_list_free((char ***)dest_ptr);
2879                                         str_list_copy((char ***)dest_ptr, *(const char ***)src_ptr);
2880                                         break;
2881                                 default:
2882                                         break;
2883                         }
2884                 }
2885
2886         if (bcopyall) {
2887                 init_copymap(pserviceDest);
2888                 if (pserviceSource->copymap)
2889                         memcpy((void *)pserviceDest->copymap,
2890                                (void *)pserviceSource->copymap,
2891                                sizeof(BOOL) * NUMPARAMETERS);
2892         }
2893
2894         data = pserviceSource->param_opt;
2895         while (data) {
2896                 not_added = True;
2897                 pdata = pserviceDest->param_opt;
2898                 /* Traverse destination */
2899                 while (pdata) {
2900                         /* If we already have same option, override it */
2901                         if (strcmp(pdata->key, data->key) == 0) {
2902                                 string_free(&pdata->value);
2903                                 str_list_free(&data->list);
2904                                 pdata->value = SMB_STRDUP(data->value);
2905                                 not_added = False;
2906                                 break;
2907                         }
2908                         pdata = pdata->next;
2909                 }
2910                 if (not_added) {
2911                     paramo = SMB_XMALLOC_P(param_opt_struct);
2912                     paramo->key = SMB_STRDUP(data->key);
2913                     paramo->value = SMB_STRDUP(data->value);
2914                     paramo->list = NULL;
2915                     DLIST_ADD(pserviceDest->param_opt, paramo);
2916                 }
2917                 data = data->next;
2918         }
2919 }
2920
2921 /***************************************************************************
2922 Check a service for consistency. Return False if the service is in any way
2923 incomplete or faulty, else True.
2924 ***************************************************************************/
2925
2926 static BOOL service_ok(int iService)
2927 {
2928         BOOL bRetval;
2929
2930         bRetval = True;
2931         if (ServicePtrs[iService]->szService[0] == '\0') {
2932                 DEBUG(0, ("The following message indicates an internal error:\n"));
2933                 DEBUG(0, ("No service name in service entry.\n"));
2934                 bRetval = False;
2935         }
2936
2937         /* The [printers] entry MUST be printable. I'm all for flexibility, but */
2938         /* I can't see why you'd want a non-printable printer service...        */
2939         if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
2940                 if (!ServicePtrs[iService]->bPrint_ok) {
2941                         DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
2942                                ServicePtrs[iService]->szService));
2943                         ServicePtrs[iService]->bPrint_ok = True;
2944                 }
2945                 /* [printers] service must also be non-browsable. */
2946                 if (ServicePtrs[iService]->bBrowseable)
2947                         ServicePtrs[iService]->bBrowseable = False;
2948         }
2949
2950         if (ServicePtrs[iService]->szPath[0] == '\0' &&
2951             strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0 &&
2952             ServicePtrs[iService]->szMSDfsProxy[0] == '\0'
2953             ) {
2954                 DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
2955                         ServicePtrs[iService]->szService));
2956                 ServicePtrs[iService]->bAvailable = False;
2957         }
2958
2959         /* If a service is flagged unavailable, log the fact at level 0. */
2960         if (!ServicePtrs[iService]->bAvailable)
2961                 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
2962                           ServicePtrs[iService]->szService));
2963
2964         return (bRetval);
2965 }
2966
2967 static struct file_lists {
2968         struct file_lists *next;
2969         char *name;
2970         char *subfname;
2971         time_t modtime;
2972 } *file_lists = NULL;
2973
2974 /*******************************************************************
2975  Keep a linked list of all config files so we know when one has changed
2976  it's date and needs to be reloaded.
2977 ********************************************************************/
2978
2979 static void add_to_file_list(const char *fname, const char *subfname)
2980 {
2981         struct file_lists *f = file_lists;
2982
2983         while (f) {
2984                 if (f->name && !strcmp(f->name, fname))
2985                         break;
2986                 f = f->next;
2987         }
2988
2989         if (!f) {
2990                 f = SMB_MALLOC_P(struct file_lists);
2991                 if (!f)
2992                         return;
2993                 f->next = file_lists;
2994                 f->name = SMB_STRDUP(fname);
2995                 if (!f->name) {
2996                         SAFE_FREE(f);
2997                         return;
2998                 }
2999                 f->subfname = SMB_STRDUP(subfname);
3000                 if (!f->subfname) {
3001                         SAFE_FREE(f);
3002                         return;
3003                 }
3004                 file_lists = f;
3005                 f->modtime = file_modtime(subfname);
3006         } else {
3007                 time_t t = file_modtime(subfname);
3008                 if (t)
3009                         f->modtime = t;
3010         }
3011 }
3012
3013 /*******************************************************************
3014  Check if a config file has changed date.
3015 ********************************************************************/
3016
3017 BOOL lp_file_list_changed(void)
3018 {
3019         struct file_lists *f = file_lists;
3020
3021         DEBUG(6, ("lp_file_list_changed()\n"));
3022
3023         while (f) {
3024                 pstring n2;
3025                 time_t mod_time;
3026
3027                 pstrcpy(n2, f->name);
3028                 standard_sub_basic( get_current_username(), n2, sizeof(n2) );
3029
3030                 DEBUGADD(6, ("file %s -> %s  last mod_time: %s\n",
3031                              f->name, n2, ctime(&f->modtime)));
3032
3033                 mod_time = file_modtime(n2);
3034
3035                 if (mod_time && ((f->modtime != mod_time) || (f->subfname == NULL) || (strcmp(n2, f->subfname) != 0))) {
3036                         DEBUGADD(6,
3037                                  ("file %s modified: %s\n", n2,
3038                                   ctime(&mod_time)));
3039                         f->modtime = mod_time;
3040                         SAFE_FREE(f->subfname);
3041                         f->subfname = SMB_STRDUP(n2);
3042                         return (True);
3043                 }
3044                 f = f->next;
3045         }
3046         return (False);
3047 }
3048
3049 /***************************************************************************
3050  Run standard_sub_basic on netbios name... needed because global_myname
3051  is not accessed through any lp_ macro.
3052  Note: We must *NOT* use string_set() here as ptr points to global_myname.
3053 ***************************************************************************/
3054
3055 static BOOL handle_netbios_name(int snum, const char *pszParmValue, char **ptr)
3056 {
3057         BOOL ret;
3058         pstring netbios_name;
3059
3060         pstrcpy(netbios_name, pszParmValue);
3061
3062         standard_sub_basic(get_current_username(), netbios_name,sizeof(netbios_name));
3063
3064         ret = set_global_myname(netbios_name);
3065         string_set(&Globals.szNetbiosName,global_myname());
3066
3067         DEBUG(4, ("handle_netbios_name: set global_myname to: %s\n",
3068                global_myname()));
3069
3070         return ret;
3071 }
3072
3073 static BOOL handle_charset(int snum, const char *pszParmValue, char **ptr)
3074 {
3075         if (strcmp(*ptr, pszParmValue) != 0) {
3076                 string_set(ptr, pszParmValue);
3077                 init_iconv();
3078         }
3079         return True;
3080 }
3081
3082
3083
3084 static BOOL handle_workgroup(int snum, const char *pszParmValue, char **ptr)
3085 {
3086         BOOL ret;
3087
3088         ret = set_global_myworkgroup(pszParmValue);
3089         string_set(&Globals.szWorkgroup,lp_workgroup());
3090
3091         return ret;
3092 }
3093
3094 static BOOL handle_netbios_scope(int snum, const char *pszParmValue, char **ptr)
3095 {
3096         BOOL ret;
3097
3098         ret = set_global_scope(pszParmValue);
3099         string_set(&Globals.szNetbiosScope,global_scope());
3100
3101         return ret;
3102 }
3103
3104 static BOOL handle_netbios_aliases(int snum, const char *pszParmValue, char **ptr)
3105 {
3106         str_list_free(&Globals.szNetbiosAliases);
3107         Globals.szNetbiosAliases = str_list_make(pszParmValue, NULL);
3108         return set_netbios_aliases((const char **)Globals.szNetbiosAliases);
3109 }
3110
3111 /***************************************************************************
3112  Handle the include operation.
3113 ***************************************************************************/
3114
3115 static BOOL handle_include(int snum, const char *pszParmValue, char **ptr)
3116 {
3117         pstring fname;
3118         pstrcpy(fname, pszParmValue);
3119
3120         standard_sub_basic(get_current_username(), fname,sizeof(fname));
3121
3122         add_to_file_list(pszParmValue, fname);
3123
3124         string_set(ptr, fname);
3125
3126         if (file_exist(fname, NULL))
3127                 return (pm_process(fname, do_section, do_parameter));
3128
3129         DEBUG(2, ("Can't find include file %s\n", fname));
3130
3131         return (False);
3132 }
3133
3134 /***************************************************************************
3135  Handle the interpretation of the copy parameter.
3136 ***************************************************************************/
3137
3138 static BOOL handle_copy(int snum, const char *pszParmValue, char **ptr)
3139 {
3140         BOOL bRetval;
3141         int iTemp;
3142         service serviceTemp;
3143
3144         string_set(ptr, pszParmValue);
3145
3146         init_service(&serviceTemp);
3147
3148         bRetval = False;
3149
3150         DEBUG(3, ("Copying service from service %s\n", pszParmValue));
3151
3152         if ((iTemp = getservicebyname(pszParmValue, &serviceTemp)) >= 0) {
3153                 if (iTemp == iServiceIndex) {
3154                         DEBUG(0, ("Can't copy service %s - unable to copy self!\n", pszParmValue));
3155                 } else {
3156                         copy_service(ServicePtrs[iServiceIndex],
3157                                      &serviceTemp,
3158                                      ServicePtrs[iServiceIndex]->copymap);
3159                         bRetval = True;
3160                 }
3161         } else {
3162                 DEBUG(0, ("Unable to copy service - source not found: %s\n", pszParmValue));
3163                 bRetval = False;
3164         }
3165
3166         free_service(&serviceTemp);
3167         return (bRetval);
3168 }
3169
3170 /***************************************************************************
3171  Handle idmap/non unix account uid and gid allocation parameters.  The format of these
3172  parameters is:
3173
3174  [global]
3175
3176         idmap uid = 1000-1999
3177         idmap gid = 700-899
3178
3179  We only do simple parsing checks here.  The strings are parsed into useful
3180  structures in the idmap daemon code.
3181
3182 ***************************************************************************/
3183
3184 /* Some lp_ routines to return idmap [ug]id information */
3185
3186 static uid_t idmap_uid_low, idmap_uid_high;
3187 static gid_t idmap_gid_low, idmap_gid_high;
3188
3189 BOOL lp_idmap_uid(uid_t *low, uid_t *high)
3190 {
3191         if (idmap_uid_low == 0 || idmap_uid_high == 0)
3192                 return False;
3193
3194         if (low)
3195                 *low = idmap_uid_low;
3196
3197         if (high)
3198                 *high = idmap_uid_high;
3199
3200         return True;
3201 }
3202
3203 BOOL lp_idmap_gid(gid_t *low, gid_t *high)
3204 {
3205         if (idmap_gid_low == 0 || idmap_gid_high == 0)
3206                 return False;
3207
3208         if (low)
3209                 *low = idmap_gid_low;
3210
3211         if (high)
3212                 *high = idmap_gid_high;
3213
3214         return True;
3215 }
3216
3217 /* Do some simple checks on "idmap [ug]id" parameter values */
3218
3219 static BOOL handle_idmap_uid(int snum, const char *pszParmValue, char **ptr)
3220 {
3221         uint32 low, high;
3222
3223         if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3224                 return False;
3225
3226         /* Parse OK */
3227
3228         string_set(ptr, pszParmValue);
3229
3230         idmap_uid_low = low;
3231         idmap_uid_high = high;
3232
3233         return True;
3234 }
3235
3236 static BOOL handle_idmap_gid(int snum, const char *pszParmValue, char **ptr)
3237 {
3238         uint32 low, high;
3239
3240         if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3241                 return False;
3242
3243         /* Parse OK */
3244
3245         string_set(ptr, pszParmValue);
3246
3247         idmap_gid_low = low;
3248         idmap_gid_high = high;
3249
3250         return True;
3251 }
3252
3253 /***************************************************************************
3254  Handle the DEBUG level list.
3255 ***************************************************************************/
3256
3257 static BOOL handle_debug_list( int snum, const char *pszParmValueIn, char **ptr )
3258 {
3259         pstring pszParmValue;
3260
3261         pstrcpy(pszParmValue, pszParmValueIn);
3262         string_set(ptr, pszParmValueIn);
3263         return debug_parse_levels( pszParmValue );
3264 }
3265
3266 /***************************************************************************
3267  Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
3268 ***************************************************************************/
3269
3270 static char* append_ldap_suffix( const char *str )
3271 {
3272         char *suffix_string;
3273
3274
3275         if (!lp_talloc)
3276                 lp_talloc = talloc_init("lp_talloc");
3277
3278         suffix_string = talloc_asprintf( lp_talloc, "%s,%s", str, Globals.szLdapSuffix );
3279         if ( !suffix_string ) {
3280                 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
3281                 return NULL;
3282         }
3283
3284         return suffix_string;
3285 }
3286
3287 char *lp_ldap_machine_suffix(void)
3288 {
3289         if (Globals.szLdapMachineSuffix[0])
3290                 return append_ldap_suffix(Globals.szLdapMachineSuffix);
3291
3292         return lp_string(Globals.szLdapSuffix);
3293 }
3294
3295 char *lp_ldap_user_suffix(void)
3296 {
3297         if (Globals.szLdapUserSuffix[0])
3298                 return append_ldap_suffix(Globals.szLdapUserSuffix);
3299
3300         return lp_string(Globals.szLdapSuffix);
3301 }
3302
3303 char *lp_ldap_group_suffix(void)
3304 {
3305         if (Globals.szLdapGroupSuffix[0])
3306                 return append_ldap_suffix(Globals.szLdapGroupSuffix);
3307
3308         return lp_string(Globals.szLdapSuffix);
3309 }
3310
3311 char *lp_ldap_idmap_suffix(void)
3312 {
3313         if (Globals.szLdapIdmapSuffix[0])
3314                 return append_ldap_suffix(Globals.szLdapIdmapSuffix);
3315
3316         return lp_string(Globals.szLdapSuffix);
3317 }
3318
3319 /****************************************************************************
3320  set the value for a P_ENUM
3321  ***************************************************************************/
3322
3323 static void lp_set_enum_parm( struct parm_struct *parm, const char *pszParmValue,
3324                               int *ptr )
3325 {
3326         int i;
3327
3328         for (i = 0; parm->enum_list[i].name; i++) {
3329                 if ( strequal(pszParmValue, parm->enum_list[i].name)) {
3330                         *ptr = parm->enum_list[i].value;
3331                         break;
3332                 }
3333         }
3334 }
3335
3336 /***************************************************************************
3337 ***************************************************************************/
3338
3339 static BOOL handle_printing(int snum, const char *pszParmValue, char **ptr)
3340 {
3341         static int parm_num = -1;
3342         service *s;
3343
3344         if ( parm_num == -1 )
3345                 parm_num = map_parameter( "printing" );
3346
3347         lp_set_enum_parm( &parm_table[parm_num], pszParmValue, (int*)ptr );
3348
3349         if ( snum < 0 )
3350                 s = &sDefault;
3351         else
3352                 s = ServicePtrs[snum];
3353
3354         init_printer_values( s );
3355
3356         return True;
3357 }
3358
3359
3360 /***************************************************************************
3361  Initialise a copymap.
3362 ***************************************************************************/
3363
3364 static void init_copymap(service * pservice)
3365 {
3366         int i;
3367         SAFE_FREE(pservice->copymap);
3368         pservice->copymap = SMB_MALLOC_ARRAY(BOOL,NUMPARAMETERS);
3369         if (!pservice->copymap)
3370                 DEBUG(0,
3371                       ("Couldn't allocate copymap!! (size %d)\n",
3372                        (int)NUMPARAMETERS));
3373         else
3374                 for (i = 0; i < NUMPARAMETERS; i++)
3375                         pservice->copymap[i] = True;
3376 }
3377
3378 /***************************************************************************
3379  Return the local pointer to a parameter given the service number and the
3380  pointer into the default structure.
3381 ***************************************************************************/
3382
3383 void *lp_local_ptr(int snum, void *ptr)
3384 {
3385         return (void *)(((char *)ServicePtrs[snum]) + PTR_DIFF(ptr, &sDefault));
3386 }
3387
3388 /***************************************************************************
3389  Process a parameter for a particular service number. If snum < 0
3390  then assume we are in the globals.
3391 ***************************************************************************/
3392
3393 BOOL lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
3394 {
3395         int parmnum, i, slen;
3396         void *parm_ptr = NULL;  /* where we are going to store the result */
3397         void *def_ptr = NULL;
3398         pstring param_key;
3399         char *sep;
3400         param_opt_struct *paramo, *data;
3401         BOOL not_added;
3402
3403         parmnum = map_parameter(pszParmName);
3404
3405         if (parmnum < 0) {
3406                 if ((sep=strchr(pszParmName, ':')) != NULL) {
3407                         *sep = '\0';
3408                         ZERO_STRUCT(param_key);
3409                         pstr_sprintf(param_key, "%s:", pszParmName);
3410                         slen = strlen(param_key);
3411                         pstrcat(param_key, sep+1);
3412                         trim_char(param_key+slen, ' ', ' ');
3413                         not_added = True;
3414                         data = (snum < 0) ? Globals.param_opt :
3415                                 ServicePtrs[snum]->param_opt;
3416                         /* Traverse destination */
3417                         while (data) {
3418                                 /* If we already have same option, override it */
3419                                 if (strcmp(data->key, param_key) == 0) {
3420                                         string_free(&data->value);
3421                                         str_list_free(&data->list);
3422                                         data->value = SMB_STRDUP(pszParmValue);
3423                                         not_added = False;
3424                                         break;
3425                                 }
3426                                 data = data->next;
3427                         }
3428                         if (not_added) {
3429                                 paramo = SMB_XMALLOC_P(param_opt_struct);
3430                                 paramo->key = SMB_STRDUP(param_key);
3431                                 paramo->value = SMB_STRDUP(pszParmValue);
3432                                 paramo->list = NULL;
3433                                 if (snum < 0) {
3434                                         DLIST_ADD(Globals.param_opt, paramo);
3435                                 } else {
3436                                         DLIST_ADD(ServicePtrs[snum]->param_opt, paramo);
3437                                 }
3438                         }
3439
3440                         *sep = ':';
3441                         return (True);
3442                 }
3443                 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName));
3444                 return (True);
3445         }
3446
3447         if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
3448                 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
3449                           pszParmName));
3450         }
3451
3452         def_ptr = parm_table[parmnum].ptr;
3453
3454         /* we might point at a service, the default service or a global */
3455         if (snum < 0) {
3456                 parm_ptr = def_ptr;
3457         } else {
3458                 if (parm_table[parmnum].p_class == P_GLOBAL) {
3459                         DEBUG(0,
3460                               ("Global parameter %s found in service section!\n",
3461                                pszParmName));
3462                         return (True);
3463                 }
3464                 parm_ptr =
3465                         ((char *)ServicePtrs[snum]) + PTR_DIFF(def_ptr,
3466                                                             &sDefault);
3467         }
3468
3469         if (snum >= 0) {
3470                 if (!ServicePtrs[snum]->copymap)
3471                         init_copymap(ServicePtrs[snum]);
3472
3473                 /* this handles the aliases - set the copymap for other entries with
3474                    the same data pointer */
3475                 for (i = 0; parm_table[i].label; i++)
3476                         if (parm_table[i].ptr == parm_table[parmnum].ptr)
3477                                 ServicePtrs[snum]->copymap[i] = False;
3478         }
3479
3480         /* if it is a special case then go ahead */
3481         if (parm_table[parmnum].special) {
3482                 parm_table[parmnum].special(snum, pszParmValue, (char **)parm_ptr);
3483                 return (True);
3484         }
3485
3486         /* now switch on the type of variable it is */
3487         switch (parm_table[parmnum].type)
3488         {
3489                 case P_BOOL:
3490                         *(BOOL *)parm_ptr = lp_bool(pszParmValue);
3491                         break;
3492
3493                 case P_BOOLREV:
3494                         *(BOOL *)parm_ptr = !lp_bool(pszParmValue);
3495                         break;
3496
3497                 case P_INTEGER:
3498                         *(int *)parm_ptr = lp_int(pszParmValue);
3499                         break;
3500
3501                 case P_CHAR:
3502                         *(char *)parm_ptr = *pszParmValue;
3503                         break;
3504
3505                 case P_OCTAL:
3506                         i = sscanf(pszParmValue, "%o", (int *)parm_ptr);
3507                         if ( i != 1 ) {
3508                             DEBUG ( 0, ("Invalid octal number %s\n", pszParmName ));
3509                         }
3510                         break;
3511
3512                 case P_LIST:
3513                         str_list_free((char ***)parm_ptr);
3514                         *(char ***)parm_ptr = str_list_make(pszParmValue, NULL);
3515                         break;
3516
3517                 case P_STRING:
3518                         string_set((char **)parm_ptr, pszParmValue);
3519                         break;
3520
3521                 case P_USTRING:
3522                         string_set((char **)parm_ptr, pszParmValue);
3523                         strupper_m(*(char **)parm_ptr);
3524                         break;
3525
3526                 case P_GSTRING:
3527                         pstrcpy((char *)parm_ptr, pszParmValue);
3528                         break;
3529
3530                 case P_UGSTRING:
3531                         pstrcpy((char *)parm_ptr, pszParmValue);
3532                         strupper_m((char *)parm_ptr);
3533                         break;
3534
3535                 case P_ENUM:
3536                         lp_set_enum_parm( &parm_table[parmnum], pszParmValue, (int*)parm_ptr );
3537                         break;
3538                 case P_SEP:
3539                         break;
3540         }
3541
3542         return (True);
3543 }
3544
3545 /***************************************************************************
3546  Process a parameter.
3547 ***************************************************************************/
3548
3549 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue)
3550 {
3551         if (!bInGlobalSection && bGlobalOnly)
3552                 return (True);
3553
3554         DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
3555
3556         return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
3557                                 pszParmName, pszParmValue));
3558 }
3559
3560 /***************************************************************************
3561  Print a parameter of the specified type.
3562 ***************************************************************************/
3563
3564 static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
3565 {
3566         int i;
3567         switch (p->type)
3568         {
3569                 case P_ENUM:
3570                         for (i = 0; p->enum_list[i].name; i++) {
3571                                 if (*(int *)ptr == p->enum_list[i].value) {
3572                                         fprintf(f, "%s",
3573                                                 p->enum_list[i].name);
3574                                         break;
3575                                 }
3576                         }
3577                         break;
3578
3579                 case P_BOOL:
3580                         fprintf(f, "%s", BOOLSTR(*(BOOL *)ptr));
3581                         break;
3582
3583                 case P_BOOLREV:
3584                         fprintf(f, "%s", BOOLSTR(!*(BOOL *)ptr));
3585                         break;
3586
3587                 case P_INTEGER:
3588                         fprintf(f, "%d", *(int *)ptr);
3589                         break;
3590
3591                 case P_CHAR:
3592                         fprintf(f, "%c", *(char *)ptr);
3593                         break;
3594
3595                 case P_OCTAL:
3596                         fprintf(f, "%s", octal_string(*(int *)ptr));
3597                         break;
3598
3599                 case P_LIST:
3600                         if ((char ***)ptr && *(char ***)ptr) {
3601                                 char **list = *(char ***)ptr;
3602
3603                                 for (; *list; list++) {
3604                                         /* surround strings with whitespace in double quotes */
3605                                         if ( strchr_m( *list, ' ' ) )
3606                                                 fprintf(f, "\"%s\"%s", *list, ((*(list+1))?", ":""));
3607                                         else
3608                                                 fprintf(f, "%s%s", *list, ((*(list+1))?", ":""));
3609                                 }
3610                         }
3611                         break;
3612
3613                 case P_GSTRING:
3614                 case P_UGSTRING:
3615                         if ((char *)ptr) {
3616                                 fprintf(f, "%s", (char *)ptr);
3617                         }
3618                         break;
3619
3620                 case P_STRING:
3621                 case P_USTRING:
3622                         if (*(char **)ptr) {
3623                                 fprintf(f, "%s", *(char **)ptr);
3624                         }
3625                         break;
3626                 case P_SEP:
3627                         break;
3628         }
3629 }
3630
3631 /***************************************************************************
3632  Check if two parameters are equal.
3633 ***************************************************************************/
3634
3635 static BOOL equal_parameter(parm_type type, void *ptr1, void *ptr2)
3636 {
3637         switch (type) {
3638                 case P_BOOL:
3639                 case P_BOOLREV:
3640                         return (*((BOOL *)ptr1) == *((BOOL *)ptr2));
3641
3642                 case P_INTEGER:
3643                 case P_ENUM:
3644                 case P_OCTAL:
3645                         return (*((int *)ptr1) == *((int *)ptr2));
3646
3647                 case P_CHAR:
3648                         return (*((char *)ptr1) == *((char *)ptr2));
3649
3650                 case P_LIST:
3651                         return str_list_compare(*(char ***)ptr1, *(char ***)ptr2);
3652
3653                 case P_GSTRING:
3654                 case P_UGSTRING:
3655                 {
3656                         char *p1 = (char *)ptr1, *p2 = (char *)ptr2;
3657                         if (p1 && !*p1)
3658                                 p1 = NULL;
3659                         if (p2 && !*p2)
3660                                 p2 = NULL;
3661                         return (p1 == p2 || strequal(p1, p2));
3662                 }
3663                 case P_STRING:
3664                 case P_USTRING:
3665                 {
3666                         char *p1 = *(char **)ptr1, *p2 = *(char **)ptr2;
3667                         if (p1 && !*p1)
3668                                 p1 = NULL;
3669                         if (p2 && !*p2)
3670                                 p2 = NULL;
3671                         return (p1 == p2 || strequal(p1, p2));
3672                 }
3673                 case P_SEP:
3674                         break;
3675         }
3676         return (False);
3677 }
3678
3679 /***************************************************************************
3680  Initialize any local varients in the sDefault table.
3681 ***************************************************************************/
3682
3683 void init_locals(void)
3684 {
3685         /* None as yet. */
3686 }
3687
3688 /***************************************************************************
3689  Process a new section (service). At this stage all sections are services.
3690  Later we'll have special sections that permit server parameters to be set.
3691  Returns True on success, False on failure.
3692 ***************************************************************************/
3693
3694 static BOOL do_section(const char *pszSectionName)
3695 {
3696         BOOL bRetval;
3697         BOOL isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
3698                          (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
3699         bRetval = False;
3700
3701         /* if we were in a global section then do the local inits */
3702         if (bInGlobalSection && !isglobal)
3703                 init_locals();
3704
3705         /* if we've just struck a global section, note the fact. */
3706         bInGlobalSection = isglobal;
3707
3708         /* check for multiple global sections */
3709         if (bInGlobalSection) {
3710                 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName));
3711                 return (True);
3712         }
3713
3714         if (!bInGlobalSection && bGlobalOnly)
3715                 return (True);
3716
3717         /* if we have a current service, tidy it up before moving on */
3718         bRetval = True;
3719
3720         if (iServiceIndex >= 0)
3721                 bRetval = service_ok(iServiceIndex);
3722
3723         /* if all is still well, move to the next record in the services array */
3724         if (bRetval) {
3725                 /* We put this here to avoid an odd message order if messages are */
3726                 /* issued by the post-processing of a previous section. */
3727                 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName));
3728
3729                 if ((iServiceIndex = add_a_service(&sDefault, pszSectionName))
3730                     < 0) {
3731                         DEBUG(0, ("Failed to add a new service\n"));
3732                         return (False);
3733                 }
3734         }
3735
3736         return (bRetval);
3737 }
3738
3739
3740 /***************************************************************************
3741  Determine if a partcular base parameter is currentl set to the default value.
3742 ***************************************************************************/
3743
3744 static BOOL is_default(int i)
3745 {
3746         if (!defaults_saved)
3747                 return False;
3748         switch (parm_table[i].type) {
3749                 case P_LIST:
3750                         return str_list_compare (parm_table[i].def.lvalue,
3751                                                 *(char ***)parm_table[i].ptr);
3752                 case P_STRING:
3753                 case P_USTRING:
3754                         return strequal(parm_table[i].def.svalue,
3755                                         *(char **)parm_table[i].ptr);
3756                 case P_GSTRING:
3757                 case P_UGSTRING:
3758                         return strequal(parm_table[i].def.svalue,
3759                                         (char *)parm_table[i].ptr);
3760                 case P_BOOL:
3761                 case P_BOOLREV:
3762                         return parm_table[i].def.bvalue ==
3763                                 *(BOOL *)parm_table[i].ptr;
3764                 case P_CHAR:
3765                         return parm_table[i].def.cvalue ==
3766                                 *(char *)parm_table[i].ptr;
3767                 case P_INTEGER:
3768                 case P_OCTAL:
3769                 case P_ENUM:
3770                         return parm_table[i].def.ivalue ==
3771                                 *(int *)parm_table[i].ptr;
3772                 case P_SEP:
3773                         break;
3774         }
3775         return False;
3776 }
3777
3778 /***************************************************************************
3779 Display the contents of the global structure.
3780 ***************************************************************************/
3781
3782 static void dump_globals(FILE *f)
3783 {
3784         int i;
3785         param_opt_struct *data;
3786
3787         fprintf(f, "[global]\n");
3788
3789         for (i = 0; parm_table[i].label; i++)
3790                 if (parm_table[i].p_class == P_GLOBAL &&
3791                     parm_table[i].ptr &&
3792                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr))) {
3793                         if (defaults_saved && is_default(i))
3794                                 continue;
3795                         fprintf(f, "\t%s = ", parm_table[i].label);
3796                         print_parameter(&parm_table[i], parm_table[i].ptr, f);
3797                         fprintf(f, "\n");
3798         }
3799         if (Globals.param_opt != NULL) {
3800                 data = Globals.param_opt;
3801                 while(data) {
3802                         fprintf(f, "\t%s = %s\n", data->key, data->value);
3803                         data = data->next;
3804                 }
3805         }
3806
3807 }
3808
3809 /***************************************************************************
3810  Return True if a local parameter is currently set to the global default.
3811 ***************************************************************************/
3812
3813 BOOL lp_is_default(int snum, struct parm_struct *parm)
3814 {
3815         int pdiff = PTR_DIFF(parm->ptr, &sDefault);
3816
3817         return equal_parameter(parm->type,
3818                                ((char *)ServicePtrs[snum]) + pdiff,
3819                                ((char *)&sDefault) + pdiff);
3820 }
3821
3822 /***************************************************************************
3823  Display the contents of a single services record.
3824 ***************************************************************************/
3825
3826 static void dump_a_service(service * pService, FILE * f)
3827 {
3828         int i;
3829         param_opt_struct *data;
3830
3831         if (pService != &sDefault)
3832                 fprintf(f, "[%s]\n", pService->szService);
3833
3834         for (i = 0; parm_table[i].label; i++) {
3835
3836                 if (parm_table[i].p_class == P_LOCAL &&
3837                     parm_table[i].ptr &&
3838                     (*parm_table[i].label != '-') &&
3839                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3840                 {
3841
3842                         int pdiff = PTR_DIFF(parm_table[i].ptr, &sDefault);
3843
3844                         if (pService == &sDefault) {
3845                                 if (defaults_saved && is_default(i))
3846                                         continue;
3847                         } else {
3848                                 if (equal_parameter(parm_table[i].type,
3849                                                     ((char *)pService) +
3850                                                     pdiff,
3851                                                     ((char *)&sDefault) +
3852                                                     pdiff))
3853                                         continue;
3854                         }
3855
3856                         fprintf(f, "\t%s = ", parm_table[i].label);
3857                         print_parameter(&parm_table[i],
3858                                         ((char *)pService) + pdiff, f);
3859                         fprintf(f, "\n");
3860                 }
3861         }
3862
3863                 if (pService->param_opt != NULL) {
3864                         data = pService->param_opt;
3865                         while(data) {
3866                                 fprintf(f, "\t%s = %s\n", data->key, data->value);
3867                                 data = data->next;
3868                         }
3869                 }
3870 }
3871
3872 /***************************************************************************
3873  Display the contents of a parameter of a single services record.
3874 ***************************************************************************/
3875
3876 BOOL dump_a_parameter(int snum, char *parm_name, FILE * f, BOOL isGlobal)
3877 {
3878         service * pService = ServicePtrs[snum];
3879         int i;
3880         BOOL result = False;
3881         parm_class p_class;
3882         unsigned flag = 0;
3883         fstring local_parm_name;
3884         char *parm_opt;
3885         const char *parm_opt_value;
3886
3887         /* check for parametrical option */
3888         fstrcpy( local_parm_name, parm_name);
3889         parm_opt = strchr( local_parm_name, ':');
3890
3891         if (parm_opt) {
3892                 *parm_opt = '\0';
3893                 parm_opt++;
3894                 if (strlen(parm_opt)) {
3895                         parm_opt_value = lp_parm_const_string( snum,
3896                                 local_parm_name, parm_opt, NULL);
3897                         if (parm_opt_value) {
3898                                 printf( "%s\n", parm_opt_value);
3899                                 result = True;
3900                         }
3901                 }
3902                 return result;
3903         }
3904
3905         /* check for a key and print the value */
3906         if (isGlobal) {
3907                 p_class = P_GLOBAL;
3908                 flag = FLAG_GLOBAL;
3909         } else
3910                 p_class = P_LOCAL;
3911
3912         for (i = 0; parm_table[i].label; i++) {
3913                 if (strwicmp(parm_table[i].label, parm_name) == 0 &&
3914                     (parm_table[i].p_class == p_class || parm_table[i].flags & flag) &&
3915                     parm_table[i].ptr &&
3916                     (*parm_table[i].label != '-') &&
3917                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3918                 {
3919                         void *ptr;
3920
3921                         if (isGlobal)
3922                                 ptr = parm_table[i].ptr;
3923                         else
3924                                 ptr = ((char *)pService) +
3925                                         PTR_DIFF(parm_table[i].ptr, &sDefault);
3926
3927                         print_parameter(&parm_table[i],
3928                                         ptr, f);
3929                         fprintf(f, "\n");
3930                         result = True;
3931                         break;
3932                 }
3933         }
3934
3935         return result;
3936 }
3937
3938 /***************************************************************************
3939  Return info about the next service  in a service. snum==GLOBAL_SECTION_SNUM gives the globals.
3940  Return NULL when out of parameters.
3941 ***************************************************************************/
3942
3943 struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
3944 {
3945         if (snum < 0) {
3946                 /* do the globals */
3947                 for (; parm_table[*i].label; (*i)++) {
3948                         if (parm_table[*i].p_class == P_SEPARATOR)
3949                                 return &parm_table[(*i)++];
3950
3951                         if (!parm_table[*i].ptr
3952                             || (*parm_table[*i].label == '-'))
3953                                 continue;
3954
3955                         if ((*i) > 0
3956                             && (parm_table[*i].ptr ==
3957                                 parm_table[(*i) - 1].ptr))
3958                                 continue;
3959
3960                         return &parm_table[(*i)++];
3961                 }
3962         } else {
3963                 service *pService = ServicePtrs[snum];
3964
3965                 for (; parm_table[*i].label; (*i)++) {
3966                         if (parm_table[*i].p_class == P_SEPARATOR)
3967                                 return &parm_table[(*i)++];
3968
3969                         if (parm_table[*i].p_class == P_LOCAL &&
3970                             parm_table[*i].ptr &&
3971                             (*parm_table[*i].label != '-') &&
3972                             ((*i) == 0 ||
3973                              (parm_table[*i].ptr !=
3974                               parm_table[(*i) - 1].ptr)))
3975                         {
3976                                 int pdiff =
3977                                         PTR_DIFF(parm_table[*i].ptr,
3978                                                  &sDefault);
3979
3980                                 if (allparameters ||
3981                                     !equal_parameter(parm_table[*i].type,
3982                                                      ((char *)pService) +
3983                                                      pdiff,
3984                                                      ((char *)&sDefault) +
3985                                                      pdiff))
3986                                 {
3987                                         return &parm_table[(*i)++];
3988                                 }
3989                         }
3990                 }
3991         }
3992
3993         return NULL;
3994 }
3995
3996
3997 #if 0
3998 /***************************************************************************
3999  Display the contents of a single copy structure.
4000 ***************************************************************************/
4001 static void dump_copy_map(BOOL *pcopymap)
4002 {
4003         int i;
4004         if (!pcopymap)
4005                 return;
4006
4007         printf("\n\tNon-Copied parameters:\n");
4008
4009         for (i = 0; parm_table[i].label; i++)
4010                 if (parm_table[i].p_class == P_LOCAL &&
4011                     parm_table[i].ptr && !pcopymap[i] &&
4012                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
4013                 {
4014                         printf("\t\t%s\n", parm_table[i].label);
4015                 }
4016 }
4017 #endif
4018
4019 /***************************************************************************
4020  Return TRUE if the passed service number is within range.
4021 ***************************************************************************/
4022
4023 BOOL lp_snum_ok(int iService)
4024 {
4025         return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
4026 }
4027
4028 /***************************************************************************
4029  Auto-load some home services.
4030 ***************************************************************************/
4031
4032 static void lp_add_auto_services(char *str)
4033 {
4034         char *s;
4035         char *p;
4036         int homes;
4037
4038         if (!str)
4039                 return;
4040
4041         s = SMB_STRDUP(str);
4042         if (!s)
4043                 return;
4044
4045         homes = lp_servicenumber(HOMES_NAME);
4046
4047         for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP)) {
4048                 char *home = get_user_home_dir(p);
4049
4050                 if (lp_servicenumber(p) >= 0)
4051                         continue;
4052
4053                 if (home && homes >= 0)
4054                         lp_add_home(p, homes, p, home);
4055         }
4056         SAFE_FREE(s);
4057 }
4058
4059 /***************************************************************************
4060  Auto-load one printer.
4061 ***************************************************************************/
4062
4063 void lp_add_one_printer(char *name, char *comment)
4064 {
4065         int printers = lp_servicenumber(PRINTERS_NAME);
4066         int i;
4067
4068         if (lp_servicenumber(name) < 0) {
4069                 lp_add_printer(name, printers);
4070                 if ((i = lp_servicenumber(name)) >= 0) {
4071                         string_set(&ServicePtrs[i]->comment, comment);
4072                         ServicePtrs[i]->autoloaded = True;
4073                 }
4074         }
4075 }
4076
4077 /***************************************************************************
4078  Have we loaded a services file yet?
4079 ***************************************************************************/
4080
4081 BOOL lp_loaded(void)
4082 {
4083         return (bLoaded);
4084 }
4085
4086 /***************************************************************************
4087  Unload unused services.
4088 ***************************************************************************/
4089
4090 void lp_killunused(BOOL (*snumused) (int))
4091 {
4092         int i;
4093         for (i = 0; i < iNumServices; i++) {
4094                 if (!VALID(i))
4095                         continue;
4096
4097                 /* don't kill autoloaded or usershare services */
4098                 if ( ServicePtrs[i]->autoloaded ||
4099                                 ServicePtrs[i]->usershare == USERSHARE_VALID) {
4100                         continue;
4101                 }
4102
4103                 if (!snumused || !snumused(i)) {
4104                         free_service_byindex(i);
4105                 }
4106         }
4107 }
4108
4109 /***************************************************************************
4110  Unload a service.
4111 ***************************************************************************/
4112
4113 void lp_killservice(int iServiceIn)
4114 {
4115         if (VALID(iServiceIn)) {
4116                 free_service_byindex(iServiceIn);
4117         }
4118 }
4119
4120 /***************************************************************************
4121  Save the curent values of all global and sDefault parameters into the
4122  defaults union. This allows swat and testparm to show only the
4123  changed (ie. non-default) parameters.
4124 ***************************************************************************/
4125
4126 static void lp_save_defaults(void)
4127 {
4128         int i;
4129         for (i = 0; parm_table[i].label; i++) {
4130                 if (i > 0 && parm_table[i].ptr == parm_table[i - 1].ptr)
4131                         continue;
4132                 switch (parm_table[i].type) {
4133                         case P_LIST:
4134                                 str_list_copy(&(parm_table[i].def.lvalue),
4135                                             *(const char ***)parm_table[i].ptr);
4136                                 break;
4137                         case P_STRING:
4138                         case P_USTRING:
4139                                 if (parm_table[i].ptr) {
4140                                         parm_table[i].def.svalue = SMB_STRDUP(*(char **)parm_table[i].ptr);
4141                                 } else {
4142                                         parm_table[i].def.svalue = NULL;
4143                                 }
4144                                 break;
4145                         case P_GSTRING:
4146                         case P_UGSTRING:
4147                                 if (parm_table[i].ptr) {
4148                                         parm_table[i].def.svalue = SMB_STRDUP((char *)parm_table[i].ptr);
4149                                 } else {
4150                                         parm_table[i].def.svalue = NULL;
4151                                 }
4152                                 break;
4153                         case P_BOOL:
4154                         case P_BOOLREV:
4155                                 parm_table[i].def.bvalue =
4156                                         *(BOOL *)parm_table[i].ptr;
4157                                 break;
4158                         case P_CHAR:
4159                                 parm_table[i].def.cvalue =
4160                                         *(char *)parm_table[i].ptr;
4161                                 break;
4162                         case P_INTEGER:
4163                         case P_OCTAL:
4164                         case P_ENUM:
4165                                 parm_table[i].def.ivalue =
4166                                         *(int *)parm_table[i].ptr;
4167                                 break;
4168                         case P_SEP:
4169                                 break;
4170                 }
4171         }
4172         defaults_saved = True;
4173 }
4174
4175 /*******************************************************************
4176  Set the server type we will announce as via nmbd.
4177 ********************************************************************/
4178
4179 static const struct srv_role_tab {
4180         uint32 role;
4181         const char *role_str;
4182 } srv_role_tab [] = {
4183         { ROLE_STANDALONE, "ROLE_STANDALONE" },
4184         { ROLE_DOMAIN_MEMBER, "ROLE_DOMAIN_MEMBER" },
4185         { ROLE_DOMAIN_BDC, "ROLE_DOMAIN_BDC" },
4186         { ROLE_DOMAIN_PDC, "ROLE_DOMAIN_PDC" },
4187         { 0, NULL }
4188 };
4189
4190 const char* server_role_str(uint32 role)
4191 {
4192         int i = 0;
4193         for (i=0; srv_role_tab[i].role_str; i++) {
4194                 if (role == srv_role_tab[i].role) {
4195                         return srv_role_tab[i].role_str;
4196                 }
4197         }
4198         return NULL;
4199 }
4200
4201 static void set_server_role(void)
4202 {
4203         server_role = ROLE_STANDALONE;
4204
4205         switch (lp_security()) {
4206                 case SEC_SHARE:
4207                         if (lp_domain_logons())
4208                                 DEBUG(0, ("Server's Role (logon server) conflicts with share-level security\n"));
4209                         break;
4210                 case SEC_SERVER:
4211                         if (lp_domain_logons())
4212                                 DEBUG(0, ("Server's Role (logon server) conflicts with server-level security\n"));
4213                         server_role = ROLE_DOMAIN_MEMBER;
4214                         break;
4215                 case SEC_DOMAIN:
4216                         if (lp_domain_logons()) {
4217                                 DEBUG(1, ("Server's Role (logon server) NOT ADVISED with domain-level security\n"));
4218                                 server_role = ROLE_DOMAIN_BDC;
4219                                 break;
4220                         }
4221                         server_role = ROLE_DOMAIN_MEMBER;
4222                         break;
4223                 case SEC_ADS:
4224                         if (lp_domain_logons()) {
4225                                 server_role = ROLE_DOMAIN_PDC;
4226                                 break;
4227                         }
4228                         server_role = ROLE_DOMAIN_MEMBER;
4229                         break;
4230                 case SEC_USER:
4231                         if (lp_domain_logons()) {
4232
4233                                 if (Globals.bDomainMaster) /* auto or yes */
4234                                         server_role = ROLE_DOMAIN_PDC;
4235                                 else
4236                                         server_role = ROLE_DOMAIN_BDC;
4237                         }
4238                         break;
4239                 default:
4240                         DEBUG(0, ("Server's Role undefined due to unknown security mode\n"));
4241                         break;
4242         }
4243
4244         DEBUG(10, ("set_server_role: role = %s\n", server_role_str(server_role)));
4245 }
4246
4247 /***********************************************************
4248  If we should send plaintext/LANMAN passwords in the clinet
4249 ************************************************************/
4250
4251 static void set_allowed_client_auth(void)
4252 {
4253         if (Globals.bClientNTLMv2Auth) {
4254                 Globals.bClientLanManAuth = False;
4255         }
4256         if (!Globals.bClientLanManAuth) {
4257                 Globals.bClientPlaintextAuth = False;
4258         }
4259 }
4260
4261 /***************************************************************************
4262  JRA.
4263  The following code allows smbd to read a user defined share file.
4264  Yes, this is my intent. Yes, I'm comfortable with that...
4265
4266  THE FOLLOWING IS SECURITY CRITICAL CODE.
4267
4268  It washes your clothes, it cleans your house, it guards you while you sleep...
4269  Do not f%^k with it....
4270 ***************************************************************************/
4271
4272 #define MAX_USERSHARE_FILE_SIZE (10*1024)
4273
4274 /***************************************************************************
4275  Check allowed stat state of a usershare file.
4276  Ensure we print out who is dicking with us so the admin can
4277  get their sorry ass fired.
4278 ***************************************************************************/
4279
4280 static BOOL check_usershare_stat(const char *fname, SMB_STRUCT_STAT *psbuf)
4281 {
4282         if (!S_ISREG(psbuf->st_mode)) {
4283                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4284                         "not a regular file\n",
4285                         fname, (unsigned int)psbuf->st_uid ));
4286                 return False;
4287         }
4288
4289         /* Ensure this doesn't have the other write bit set. */
4290         if (psbuf->st_mode & S_IWOTH) {
4291                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
4292                         "public write. Refusing to allow as a usershare file.\n",
4293                         fname, (unsigned int)psbuf->st_uid ));
4294                 return False;
4295         }
4296
4297         /* Should be 10k or less. */
4298         if (psbuf->st_size > MAX_USERSHARE_FILE_SIZE) {
4299                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4300                         "too large (%u) to be a user share file.\n",
4301                         fname, (unsigned int)psbuf->st_uid,
4302                         (unsigned int)psbuf->st_size ));
4303                 return False;
4304         }
4305
4306         return True;
4307 }
4308
4309 /***************************************************************************
4310  Parse the contents of a usershare file.
4311 ***************************************************************************/
4312
4313 enum usershare_err parse_usershare_file(TALLOC_CTX *ctx,
4314                         SMB_STRUCT_STAT *psbuf,
4315                         const char *servicename,
4316                         int snum,
4317                         char **lines,
4318                         int numlines,
4319                         pstring sharepath,
4320                         pstring comment,
4321                         SEC_DESC **ppsd)
4322 {
4323         const char **prefixallowlist = lp_usershare_prefix_allow_list();
4324         const char **prefixdenylist = lp_usershare_prefix_deny_list();
4325         SMB_STRUCT_DIR *dp;
4326         SMB_STRUCT_STAT sbuf;
4327
4328         if (numlines < 4) {
4329                 return USERSHARE_MALFORMED_FILE;
4330         }
4331
4332         if (!strequal(lines[0], "#VERSION 1")) {
4333                 return USERSHARE_BAD_VERSION;
4334         }
4335
4336         if (!strnequal(lines[1], "path=", 5)) {
4337                 return USERSHARE_MALFORMED_PATH;
4338         }
4339
4340         pstrcpy(sharepath, &lines[1][5]);
4341         trim_string(sharepath, " ", " ");
4342
4343         if (!strnequal(lines[2], "comment=", 8)) {
4344                 return USERSHARE_MALFORMED_COMMENT_DEF;
4345         }
4346
4347         pstrcpy(comment, &lines[2][8]);
4348         trim_string(comment, " ", " ");
4349         trim_char(comment, '"', '"');
4350
4351         if (!strnequal(lines[3], "usershare_acl=", 14)) {
4352                 return USERSHARE_MALFORMED_ACL_DEF;
4353         }
4354
4355         if (!parse_usershare_acl(ctx, &lines[3][14], ppsd)) {
4356                 return USERSHARE_ACL_ERR;
4357         }
4358
4359         if (snum != -1 && strequal(sharepath, ServicePtrs[snum]->szPath)) {
4360                 /* Path didn't change, no checks needed. */
4361                 return USERSHARE_OK;
4362         }
4363
4364         /* The path *must* be absolute. */
4365         if (sharepath[0] != '/') {
4366                 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
4367                         servicename, sharepath));
4368                 return USERSHARE_PATH_NOT_ABSOLUTE;
4369         }
4370
4371         /* If there is a usershare prefix deny list ensure one of these paths
4372            doesn't match the start of the user given path. */
4373         if (prefixdenylist) {
4374                 int i;
4375                 for ( i=0; prefixdenylist[i]; i++ ) {
4376                         DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
4377                                 servicename, i, prefixdenylist[i], sharepath ));
4378                         if (memcmp( sharepath, prefixdenylist[i], strlen(prefixdenylist[i])) == 0) {
4379                                 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
4380                                         "usershare prefix deny list entries.\n",
4381                                         servicename, sharepath));
4382                                 return USERSHARE_PATH_IS_DENIED;
4383                         }
4384                 }
4385         }
4386
4387         /* If there is a usershare prefix allow list ensure one of these paths
4388            does match the start of the user given path. */
4389
4390         if (prefixallowlist) {
4391                 int i;
4392                 for ( i=0; prefixallowlist[i]; i++ ) {
4393                         DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
4394                                 servicename, i, prefixallowlist[i], sharepath ));
4395                         if (memcmp( sharepath, prefixallowlist[i], strlen(prefixallowlist[i])) == 0) {
4396                                 break;
4397                         }
4398                 }
4399                 if (prefixallowlist[i] == NULL) {
4400                         DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
4401                                 "usershare prefix allow list entries.\n",
4402                                 servicename, sharepath));
4403                         return USERSHARE_PATH_NOT_ALLOWED;
4404                 }
4405         }
4406
4407         /* Ensure this is pointing to a directory. */
4408         dp = sys_opendir(sharepath);
4409
4410         if (!dp) {
4411                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4412                         servicename, sharepath));
4413                 return USERSHARE_PATH_NOT_DIRECTORY;
4414         }
4415
4416         /* Ensure the owner of the usershare file has permission to share
4417            this directory. */
4418
4419         if (sys_stat(sharepath, &sbuf) == -1) {
4420                 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
4421                         servicename, sharepath, strerror(errno) ));
4422                 sys_closedir(dp);
4423                 return USERSHARE_POSIX_ERR;
4424         }
4425
4426         sys_closedir(dp);
4427
4428         if (!S_ISDIR(sbuf.st_mode)) {
4429                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4430                         servicename, sharepath ));
4431                 return USERSHARE_PATH_NOT_DIRECTORY;
4432         }
4433
4434         /* Check if sharing is restricted to owner-only. */
4435         /* psbuf is the stat of the usershare definition file,
4436            sbuf is the stat of the target directory to be shared. */
4437
4438         if (lp_usershare_owner_only()) {
4439                 /* root can share anything. */
4440                 if ((psbuf->st_uid != 0) && (sbuf.st_uid != psbuf->st_uid)) {
4441                         return USERSHARE_PATH_NOT_ALLOWED;
4442                 }
4443         }
4444
4445         return USERSHARE_OK;
4446 }
4447
4448 /***************************************************************************
4449  Deal with a usershare file.
4450  Returns:
4451         >= 0 - snum
4452         -1 - Bad name, invalid contents.
4453            - service name already existed and not a usershare, problem
4454             with permissions to share directory etc.
4455 ***************************************************************************/
4456
4457 static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template)
4458 {
4459         SMB_STRUCT_STAT sbuf;
4460         SMB_STRUCT_STAT lsbuf;
4461         pstring fname;
4462         pstring sharepath;
4463         pstring comment;
4464         fstring service_name;
4465         char **lines = NULL;
4466         int numlines = 0;
4467         int fd = -1;
4468         int iService = -1;
4469         TALLOC_CTX *ctx = NULL;
4470         SEC_DESC *psd = NULL;
4471
4472         /* Ensure share name doesn't contain invalid characters. */
4473         if (!validate_net_name(file_name, INVALID_SHARENAME_CHARS, strlen(file_name))) {
4474                 DEBUG(0,("process_usershare_file: share name %s contains "
4475                         "invalid characters (any of %s)\n",
4476                         file_name, INVALID_SHARENAME_CHARS ));
4477                 return -1;
4478         }
4479
4480         fstrcpy(service_name, file_name);
4481
4482         pstrcpy(fname, dir_name);
4483         pstrcat(fname, "/");
4484         pstrcat(fname, file_name);
4485
4486         /* Minimize the race condition by doing an lstat before we
4487            open and fstat. Ensure this isn't a symlink link. */
4488
4489         if (sys_lstat(fname, &lsbuf) != 0) {
4490                 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
4491                         fname, strerror(errno) ));
4492                 return -1;
4493         }
4494
4495         /* This must be a regular file, not a symlink, directory or
4496            other strange filetype. */
4497         if (!check_usershare_stat(fname, &lsbuf)) {
4498                 return -1;
4499         }
4500
4501         /* See if there is already a servicenum for this name. */
4502         /* tdb_fetch_int32 returns -1 if not found. */
4503         iService = (int)tdb_fetch_int32(ServiceHash, canonicalize_servicename(service_name) );
4504
4505         if (iService != -1 && ServicePtrs[iService]->usershare_last_mod == lsbuf.st_mtime) {
4506                 /* Nothing changed - Mark valid and return. */
4507                 DEBUG(10,("process_usershare_file: service %s not changed.\n",
4508                         service_name ));
4509                 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4510                 return iService;
4511         }
4512
4513         /* Try and open the file read only - no symlinks allowed. */
4514 #ifdef O_NOFOLLOW
4515         fd = sys_open(fname, O_RDONLY|O_NOFOLLOW, 0);
4516 #else
4517         fd = sys_open(fname, O_RDONLY, 0);
4518 #endif
4519
4520         if (fd == -1) {
4521                 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
4522                         fname, strerror(errno) ));
4523                 return -1;
4524         }
4525
4526         /* Now fstat to be *SURE* it's a regular file. */
4527         if (sys_fstat(fd, &sbuf) != 0) {
4528                 close(fd);
4529                 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
4530                         fname, strerror(errno) ));
4531                 return -1;
4532         }
4533
4534         /* Is it the same dev/inode as was lstated ? */
4535         if (lsbuf.st_dev != sbuf.st_dev || lsbuf.st_ino != sbuf.st_ino) {
4536                 close(fd);
4537                 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
4538                         "Symlink spoofing going on ?\n", fname ));
4539                 return -1;
4540         }
4541
4542         /* This must be a regular file, not a symlink, directory or
4543            other strange filetype. */
4544         if (!check_usershare_stat(fname, &sbuf)) {
4545                 return -1;
4546         }
4547
4548         lines = fd_lines_load(fd, &numlines, MAX_USERSHARE_FILE_SIZE);
4549
4550         close(fd);
4551         if (lines == NULL) {
4552                 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
4553                         fname, (unsigned int)sbuf.st_uid ));
4554                 return -1;
4555         }
4556
4557         /* Should we allow printers to be shared... ? */
4558         ctx = talloc_init("usershare_sd_xctx");
4559         if (!ctx) {
4560                 SAFE_FREE(lines);
4561                 return 1;
4562         }
4563
4564         if (parse_usershare_file(ctx, &sbuf, service_name, iService, lines, numlines, sharepath, comment, &psd) != USERSHARE_OK) {
4565                 talloc_destroy(ctx);
4566                 SAFE_FREE(lines);
4567                 return -1;
4568         }
4569
4570         SAFE_FREE(lines);
4571
4572         /* Everything ok - add the service possibly using a template. */
4573         if (iService < 0) {
4574                 const service *sp = &sDefault;
4575                 if (snum_template != -1) {
4576                         sp = ServicePtrs[snum_template];
4577                 }
4578
4579                 if ((iService = add_a_service(sp, service_name)) < 0) {
4580                         DEBUG(0, ("process_usershare_file: Failed to add "
4581                                 "new service %s\n", service_name));
4582                         talloc_destroy(ctx);
4583                         return -1;
4584                 }
4585
4586                 /* Read only is controlled by usershare ACL below. */
4587                 ServicePtrs[iService]->bRead_only = False;
4588         }
4589
4590         /* Write the ACL of the new/modified share. */
4591         if (!set_share_security(ctx, service_name, psd)) {
4592                  DEBUG(0, ("process_usershare_file: Failed to set share "
4593                         "security for user share %s\n",
4594                         service_name ));
4595                 lp_remove_service(iService);
4596                 talloc_destroy(ctx);
4597                 return -1;
4598         }
4599
4600         talloc_destroy(ctx);
4601
4602         /* If from a template it may be marked invalid. */
4603         ServicePtrs[iService]->valid = True;
4604
4605         /* Set the service as a valid usershare. */
4606         ServicePtrs[iService]->usershare = USERSHARE_VALID;
4607
4608         /* And note when it was loaded. */
4609         ServicePtrs[iService]->usershare_last_mod = sbuf.st_mtime;
4610         string_set(&ServicePtrs[iService]->szPath, sharepath);
4611         string_set(&ServicePtrs[iService]->comment, comment);
4612
4613         return iService;
4614 }
4615
4616 /***************************************************************************
4617  Checks if a usershare entry has been modified since last load.
4618 ***************************************************************************/
4619
4620 static BOOL usershare_exists(int iService, time_t *last_mod)
4621 {
4622         SMB_STRUCT_STAT lsbuf;
4623         const char *usersharepath = Globals.szUsersharePath;
4624         pstring fname;
4625
4626         pstrcpy(fname, usersharepath);
4627         pstrcat(fname, "/");
4628         pstrcat(fname, ServicePtrs[iService]->szService);
4629
4630         if (sys_lstat(fname, &lsbuf) != 0) {
4631                 return False;
4632         }
4633
4634         if (!S_ISREG(lsbuf.st_mode)) {
4635                 return False;
4636         }
4637
4638         *last_mod = lsbuf.st_mtime;
4639         return True;
4640 }
4641
4642 /***************************************************************************
4643  Load a usershare service by name. Returns a valid servicenumber or -1.
4644 ***************************************************************************/
4645
4646 int load_usershare_service(const char *servicename)
4647 {
4648         SMB_STRUCT_STAT sbuf;
4649         const char *usersharepath = Globals.szUsersharePath;
4650         int max_user_shares = Globals.iUsershareMaxShares;
4651         int snum_template = -1;
4652
4653         if (*usersharepath == 0 ||  max_user_shares == 0) {
4654                 return -1;
4655         }
4656
4657         if (sys_stat(usersharepath, &sbuf) != 0) {
4658                 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
4659                         usersharepath, strerror(errno) ));
4660                 return -1;
4661         }
4662
4663         if (!S_ISDIR(sbuf.st_mode)) {
4664                 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
4665                         usersharepath ));
4666                 return -1;
4667         }
4668
4669         /*
4670          * This directory must be owned by root, and have the 't' bit set.
4671          * It also must not be writable by "other".
4672          */
4673
4674 #ifdef S_ISVTX
4675         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4676 #else
4677         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4678 #endif
4679                 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
4680                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
4681                         usersharepath ));
4682                 return -1;
4683         }
4684
4685         /* Ensure the template share exists if it's set. */
4686         if (Globals.szUsershareTemplateShare[0]) {
4687                 /* We can't use lp_servicenumber here as we are recommending that
4688                    template shares have -valid=False set. */
4689                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4690                         if (ServicePtrs[snum_template]->szService &&
4691                                         strequal(ServicePtrs[snum_template]->szService,
4692                                                 Globals.szUsershareTemplateShare)) {
4693                                 break;
4694                         }
4695                 }
4696
4697                 if (snum_template == -1) {
4698                         DEBUG(0,("load_usershare_service: usershare template share %s "
4699                                 "does not exist.\n",
4700                                 Globals.szUsershareTemplateShare ));
4701                         return -1;
4702                 }
4703         }
4704
4705         return process_usershare_file(usersharepath, servicename, snum_template);
4706 }
4707
4708 /***************************************************************************
4709  Load all user defined shares from the user share directory.
4710  We only do this if we're enumerating the share list.
4711  This is the function that can delete usershares that have
4712  been removed.
4713 ***************************************************************************/
4714
4715 int load_usershare_shares(void)
4716 {
4717         SMB_STRUCT_DIR *dp;
4718         SMB_STRUCT_STAT sbuf;
4719         SMB_STRUCT_DIRENT *de;
4720         int num_usershares = 0;
4721         int max_user_shares = Globals.iUsershareMaxShares;
4722         unsigned int num_dir_entries, num_bad_dir_entries, num_tmp_dir_entries;
4723         unsigned int allowed_bad_entries = ((2*max_user_shares)/10);
4724         unsigned int allowed_tmp_entries = ((2*max_user_shares)/10);
4725         int iService;
4726         int snum_template = -1;
4727         const char *usersharepath = Globals.szUsersharePath;
4728         int ret = lp_numservices();
4729
4730         if (max_user_shares == 0 || *usersharepath == '\0') {
4731                 return lp_numservices();
4732         }
4733
4734         if (sys_stat(usersharepath, &sbuf) != 0) {
4735                 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
4736                         usersharepath, strerror(errno) ));
4737                 return ret;
4738         }
4739
4740         /*
4741          * This directory must be owned by root, and have the 't' bit set.
4742          * It also must not be writable by "other".
4743          */
4744
4745 #ifdef S_ISVTX
4746         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4747 #else
4748         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4749 #endif
4750                 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
4751                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
4752                         usersharepath ));
4753                 return ret;
4754         }
4755
4756         /* Ensure the template share exists if it's set. */
4757         if (Globals.szUsershareTemplateShare[0]) {
4758                 /* We can't use lp_servicenumber here as we are recommending that
4759                    template shares have -valid=False set. */
4760                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4761                         if (ServicePtrs[snum_template]->szService &&
4762                                         strequal(ServicePtrs[snum_template]->szService,
4763                                                 Globals.szUsershareTemplateShare)) {
4764                                 break;
4765                         }
4766                 }
4767
4768                 if (snum_template == -1) {
4769                         DEBUG(0,("load_usershare_shares: usershare template share %s "
4770                                 "does not exist.\n",
4771                                 Globals.szUsershareTemplateShare ));
4772                         return ret;
4773                 }
4774         }
4775
4776         /* Mark all existing usershares as pending delete. */
4777         for (iService = iNumServices - 1; iService >= 0; iService--) {
4778                 if (VALID(iService) && ServicePtrs[iService]->usershare) {
4779                         ServicePtrs[iService]->usershare = USERSHARE_PENDING_DELETE;
4780                 }
4781         }
4782
4783         dp = sys_opendir(usersharepath);
4784         if (!dp) {
4785                 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
4786                         usersharepath, strerror(errno) ));
4787                 return ret;
4788         }
4789
4790         for (num_dir_entries = 0, num_bad_dir_entries = 0, num_tmp_dir_entries = 0;
4791                         (de = sys_readdir(dp));
4792                         num_dir_entries++ ) {
4793                 int r;
4794                 const char *n = de->d_name;
4795
4796                 /* Ignore . and .. */
4797                 if (*n == '.') {
4798                         if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
4799                                 continue;
4800                         }
4801                 }
4802
4803                 if (n[0] == ':') {
4804                         /* Temporary file used when creating a share. */
4805                         num_tmp_dir_entries++;
4806                 }
4807
4808                 /* Allow 20% tmp entries. */
4809                 if (num_tmp_dir_entries > allowed_tmp_entries) {
4810                         DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
4811                                 "in directory %s\n",
4812                                 num_tmp_dir_entries, usersharepath));
4813                         break;
4814                 }
4815
4816                 r = process_usershare_file(usersharepath, n, snum_template);
4817                 if (r == 0) {
4818                         /* Update the services count. */
4819                         num_usershares++;
4820                         if (num_usershares >= max_user_shares) {
4821                                 DEBUG(0,("load_usershare_shares: max user shares reached "
4822                                         "on file %s in directory %s\n",
4823                                         n, usersharepath ));
4824                                 break;
4825                         }
4826                 } else if (r == -1) {
4827                         num_bad_dir_entries++;
4828                 }
4829
4830                 /* Allow 20% bad entries. */
4831                 if (num_bad_dir_entries > allowed_bad_entries) {
4832                         DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
4833                                 "in directory %s\n",
4834                                 num_bad_dir_entries, usersharepath));
4835                         break;
4836                 }
4837
4838                 /* Allow 20% bad entries. */
4839                 if (num_dir_entries > max_user_shares + allowed_bad_entries) {
4840                         DEBUG(0,("load_usershare_shares: too many total entries (%u) "
4841                         "in directory %s\n",
4842                         num_dir_entries, usersharepath));
4843                         break;
4844                 }
4845         }
4846
4847         sys_closedir(dp);
4848
4849         /* Sweep through and delete any non-refreshed usershares that are
4850            not currently in use. */
4851         for (iService = iNumServices - 1; iService >= 0; iService--) {
4852                 if (VALID(iService) && (ServicePtrs[iService]->usershare == USERSHARE_PENDING_DELETE)) {
4853                         if (conn_snum_used(iService)) {
4854                                 continue;
4855                         }
4856                         /* Remove from the share ACL db. */
4857                         DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
4858                                 lp_servicename(iService) ));
4859                         delete_share_security(iService);
4860                         free_service_byindex(iService);
4861                 }
4862         }
4863
4864         return lp_numservices();
4865 }
4866
4867 /********************************************************
4868  Destroy global resources allocated in this file
4869 ********************************************************/
4870
4871 void gfree_loadparm(void)
4872 {
4873         struct file_lists *f;
4874         struct file_lists *next;
4875         int i;
4876
4877         lp_TALLOC_FREE();
4878
4879         /* Free the file lists */
4880
4881         f = file_lists;
4882         while( f ) {
4883                 next = f->next;
4884                 SAFE_FREE( f->name );
4885                 SAFE_FREE( f->subfname );
4886                 SAFE_FREE( f );
4887                 f = next;
4888         }
4889
4890         /* Free resources allocated to services */
4891
4892         for ( i = 0; i < iNumServices; i++ ) {
4893                 if ( VALID(i) ) {
4894                         free_service_byindex(i);
4895                 }
4896         }
4897
4898         SAFE_FREE( ServicePtrs );
4899         iNumServices = 0;
4900
4901         /* Now release all resources allocated to global
4902            parameters and the default service */
4903
4904         for (i = 0; parm_table[i].label; i++)
4905         {
4906                 if ( parm_table[i].type == P_STRING
4907                         || parm_table[i].type == P_USTRING )
4908                 {
4909                         string_free( (char**)parm_table[i].ptr );
4910                 }
4911                 else if (parm_table[i].type == P_LIST) {
4912                         str_list_free( (char***)parm_table[i].ptr );
4913                 }
4914         }
4915 }
4916
4917 /***************************************************************************
4918  Load the services array from the services file. Return True on success,
4919  False on failure.
4920 ***************************************************************************/
4921
4922 BOOL lp_load(const char *pszFname,
4923              BOOL global_only,
4924              BOOL save_defaults,
4925              BOOL add_ipc,
4926              BOOL initialize_globals)
4927 {
4928         pstring n2;
4929         BOOL bRetval;
4930         param_opt_struct *data, *pdata;
4931
4932         pstrcpy(n2, pszFname);
4933
4934         standard_sub_basic( get_current_username(), n2,sizeof(n2) );
4935
4936         add_to_file_list(pszFname, n2);
4937
4938         bRetval = False;
4939
4940         DEBUG(3, ("lp_load: refreshing parameters\n"));
4941
4942         bInGlobalSection = True;
4943         bGlobalOnly = global_only;
4944
4945         init_globals(! initialize_globals);
4946         debug_init();
4947
4948         if (save_defaults) {
4949                 init_locals();
4950                 lp_save_defaults();
4951         }
4952
4953         if (Globals.param_opt != NULL) {
4954                 data = Globals.param_opt;
4955                 while (data) {
4956                         string_free(&data->key);
4957                         string_free(&data->value);
4958                         str_list_free(&data->list);
4959                         pdata = data->next;
4960                         SAFE_FREE(data);
4961                         data = pdata;
4962                 }
4963                 Globals.param_opt = NULL;
4964         }
4965
4966         /* We get sections first, so have to start 'behind' to make up */
4967         iServiceIndex = -1;
4968         bRetval = pm_process(n2, do_section, do_parameter);
4969
4970         /* finish up the last section */
4971         DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
4972         if (bRetval)
4973                 if (iServiceIndex >= 0)
4974                         bRetval = service_ok(iServiceIndex);
4975
4976         lp_add_auto_services(lp_auto_services());
4977
4978         if (add_ipc) {
4979                 /* When 'restrict anonymous = 2' guest connections to ipc$
4980                    are denied */
4981                 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
4982                 if ( lp_enable_asu_support() )
4983                         lp_add_ipc("ADMIN$", False);
4984         }
4985
4986         set_server_role();
4987         set_default_server_announce_type();
4988         set_allowed_client_auth();
4989
4990         bLoaded = True;
4991
4992         /* Now we check bWINSsupport and set szWINSserver to 127.0.0.1 */
4993         /* if bWINSsupport is true and we are in the client            */
4994         if (in_client && Globals.bWINSsupport) {
4995                 lp_do_parameter(GLOBAL_SECTION_SNUM, "wins server", "127.0.0.1");
4996         }
4997
4998         init_iconv();
4999
5000         return (bRetval);
5001 }
5002
5003 /***************************************************************************
5004  Reset the max number of services.
5005 ***************************************************************************/
5006
5007 void lp_resetnumservices(void)
5008 {
5009         iNumServices = 0;
5010 }
5011
5012 /***************************************************************************
5013  Return the max number of services.
5014 ***************************************************************************/
5015
5016 int lp_numservices(void)
5017 {
5018         return (iNumServices);
5019 }
5020
5021 /***************************************************************************
5022 Display the contents of the services array in human-readable form.
5023 ***************************************************************************/
5024
5025 void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint)
5026 {
5027         int iService;
5028
5029         if (show_defaults)
5030                 defaults_saved = False;
5031
5032         dump_globals(f);
5033
5034         dump_a_service(&sDefault, f);
5035
5036         for (iService = 0; iService < maxtoprint; iService++) {
5037                 fprintf(f,"\n");
5038                 lp_dump_one(f, show_defaults, iService);
5039         }
5040 }
5041
5042 /***************************************************************************
5043 Display the contents of one service in human-readable form.
5044 ***************************************************************************/
5045
5046 void lp_dump_one(FILE * f, BOOL show_defaults, int snum)
5047 {
5048         if (VALID(snum)) {
5049                 if (ServicePtrs[snum]->szService[0] == '\0')
5050                         return;
5051                 dump_a_service(ServicePtrs[snum], f);
5052         }
5053 }
5054
5055 /***************************************************************************
5056 Return the number of the service with the given name, or -1 if it doesn't
5057 exist. Note that this is a DIFFERENT ANIMAL from the internal function
5058 getservicebyname()! This works ONLY if all services have been loaded, and
5059 does not copy the found service.
5060 ***************************************************************************/
5061
5062 int lp_servicenumber(const char *pszServiceName)
5063 {
5064         int iService;
5065         fstring serviceName;
5066
5067         if (!pszServiceName) {
5068                 return GLOBAL_SECTION_SNUM;
5069         }
5070
5071         for (iService = iNumServices - 1; iService >= 0; iService--) {
5072                 if (VALID(iService) && ServicePtrs[iService]->szService) {
5073                         /*
5074                          * The substitution here is used to support %U is
5075                          * service names
5076                          */
5077                         fstrcpy(serviceName, ServicePtrs[iService]->szService);
5078                         standard_sub_basic(get_current_username(), serviceName,sizeof(serviceName));
5079                         if (strequal(serviceName, pszServiceName)) {
5080                                 break;
5081                         }
5082                 }
5083         }
5084
5085         if (iService >= 0 && ServicePtrs[iService]->usershare == USERSHARE_VALID) {
5086                 time_t last_mod;
5087
5088                 if (!usershare_exists(iService, &last_mod)) {
5089                         /* Remove the share security tdb entry for it. */
5090                         delete_share_security(iService);
5091                         /* Remove it from the array. */
5092                         free_service_byindex(iService);
5093                         /* Doesn't exist anymore. */
5094                         return GLOBAL_SECTION_SNUM;
5095                 }
5096
5097                 /* Has it been modified ? If so delete and reload. */
5098                 if (ServicePtrs[iService]->usershare_last_mod < last_mod) {
5099                         /* Remove it from the array. */
5100                         free_service_byindex(iService);
5101                         /* and now reload it. */
5102                         iService = load_usershare_service(pszServiceName);
5103                 }
5104         }
5105
5106         if (iService < 0) {
5107                 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
5108                 return GLOBAL_SECTION_SNUM;
5109         }
5110
5111         return (iService);
5112 }
5113
5114 /*******************************************************************
5115  A useful volume label function.
5116 ********************************************************************/
5117
5118 char *volume_label(int snum)
5119 {
5120         char *ret = lp_volume(snum);
5121         if (!*ret)
5122                 return lp_servicename(snum);
5123         return (ret);
5124 }
5125
5126
5127 /*******************************************************************
5128  Set the server type we will announce as via nmbd.
5129 ********************************************************************/
5130
5131 static void set_default_server_announce_type(void)
5132 {
5133         default_server_announce = 0;
5134         default_server_announce |= SV_TYPE_WORKSTATION;
5135         default_server_announce |= SV_TYPE_SERVER;
5136         default_server_announce |= SV_TYPE_SERVER_UNIX;
5137
5138         /* note that the flag should be set only if we have a
5139            printer service but nmbd doesn't actually load the
5140            services so we can't tell   --jerry */
5141
5142         default_server_announce |= SV_TYPE_PRINTQ_SERVER;
5143
5144         switch (lp_announce_as()) {
5145                 case ANNOUNCE_AS_NT_SERVER:
5146                         default_server_announce |= SV_TYPE_SERVER_NT;
5147                         /* fall through... */
5148                 case ANNOUNCE_AS_NT_WORKSTATION:
5149                         default_server_announce |= SV_TYPE_NT;
5150                         break;
5151                 case ANNOUNCE_AS_WIN95:
5152                         default_server_announce |= SV_TYPE_WIN95_PLUS;
5153                         break;
5154                 case ANNOUNCE_AS_WFW:
5155                         default_server_announce |= SV_TYPE_WFW;
5156                         break;
5157                 default:
5158                         break;
5159         }
5160
5161         switch (lp_server_role()) {
5162                 case ROLE_DOMAIN_MEMBER:
5163                         default_server_announce |= SV_TYPE_DOMAIN_MEMBER;
5164                         break;
5165                 case ROLE_DOMAIN_PDC:
5166                         default_server_announce |= SV_TYPE_DOMAIN_CTRL;
5167                         break;
5168                 case ROLE_DOMAIN_BDC:
5169                         default_server_announce |= SV_TYPE_DOMAIN_BAKCTRL;
5170                         break;
5171                 case ROLE_STANDALONE:
5172                 default:
5173                         break;
5174         }
5175         if (lp_time_server())
5176                 default_server_announce |= SV_TYPE_TIME_SOURCE;
5177
5178         if (lp_host_msdfs())
5179                 default_server_announce |= SV_TYPE_DFS_SERVER;
5180 }
5181
5182 /***********************************************************
5183  returns role of Samba server
5184 ************************************************************/
5185
5186 int lp_server_role(void)
5187 {
5188         return server_role;
5189 }
5190
5191 /***********************************************************
5192  If we are PDC then prefer us as DMB
5193 ************************************************************/
5194
5195 BOOL lp_domain_master(void)
5196 {
5197         if (Globals.bDomainMaster == Auto)
5198                 return (lp_server_role() == ROLE_DOMAIN_PDC);
5199
5200         return Globals.bDomainMaster;
5201 }
5202
5203 /***********************************************************
5204  If we are DMB then prefer us as LMB
5205 ************************************************************/
5206
5207 BOOL lp_preferred_master(void)
5208 {
5209         if (Globals.bPreferredMaster == Auto)
5210                 return (lp_local_master() && lp_domain_master());
5211
5212         return Globals.bPreferredMaster;
5213 }
5214
5215 /*******************************************************************
5216  Remove a service.
5217 ********************************************************************/
5218
5219 void lp_remove_service(int snum)
5220 {
5221         ServicePtrs[snum]->valid = False;
5222         invalid_services[num_invalid_services++] = snum;
5223 }
5224
5225 /*******************************************************************
5226  Copy a service.
5227 ********************************************************************/
5228
5229 void lp_copy_service(int snum, const char *new_name)
5230 {
5231         do_section(new_name);
5232         if (snum >= 0) {
5233                 snum = lp_servicenumber(new_name);
5234                 if (snum >= 0)
5235                         lp_do_parameter(snum, "copy", lp_servicename(snum));
5236         }
5237 }
5238
5239
5240 /*******************************************************************
5241  Get the default server type we will announce as via nmbd.
5242 ********************************************************************/
5243
5244 int lp_default_server_announce(void)
5245 {
5246         return default_server_announce;
5247 }
5248
5249 /*******************************************************************
5250  Split the announce version into major and minor numbers.
5251 ********************************************************************/
5252
5253 int lp_major_announce_version(void)
5254 {
5255         static BOOL got_major = False;
5256         static int major_version = DEFAULT_MAJOR_VERSION;
5257         char *vers;
5258         char *p;
5259
5260         if (got_major)
5261                 return major_version;
5262
5263         got_major = True;
5264         if ((vers = lp_announce_version()) == NULL)
5265                 return major_version;
5266
5267         if ((p = strchr_m(vers, '.')) == 0)
5268                 return major_version;
5269
5270         *p = '\0';
5271         major_version = atoi(vers);
5272         return major_version;
5273 }
5274
5275 int lp_minor_announce_version(void)
5276 {
5277         static BOOL got_minor = False;
5278         static int minor_version = DEFAULT_MINOR_VERSION;
5279         char *vers;
5280         char *p;
5281
5282         if (got_minor)
5283                 return minor_version;
5284
5285         got_minor = True;
5286         if ((vers = lp_announce_version()) == NULL)
5287                 return minor_version;
5288
5289         if ((p = strchr_m(vers, '.')) == 0)
5290                 return minor_version;
5291
5292         p++;
5293         minor_version = atoi(p);
5294         return minor_version;
5295 }
5296
5297 /***********************************************************
5298  Set the global name resolution order (used in smbclient).
5299 ************************************************************/
5300
5301 void lp_set_name_resolve_order(const char *new_order)
5302 {
5303         string_set(&Globals.szNameResolveOrder, new_order);
5304 }
5305
5306 const char *lp_printername(int snum)
5307 {
5308         const char *ret = _lp_printername(snum);
5309         if (ret == NULL || (ret != NULL && *ret == '\0'))
5310                 ret = lp_const_servicename(snum);
5311
5312         return ret;
5313 }
5314
5315
5316 /***********************************************************
5317  Allow daemons such as winbindd to fix their logfile name.
5318 ************************************************************/
5319
5320 void lp_set_logfile(const char *name)
5321 {
5322         string_set(&Globals.szLogFile, name);
5323         pstrcpy(debugf, name);
5324 }
5325
5326 /*******************************************************************
5327  Return the max print jobs per queue.
5328 ********************************************************************/
5329
5330 int lp_maxprintjobs(int snum)
5331 {
5332         int maxjobs = LP_SNUM_OK(snum) ? ServicePtrs[snum]->iMaxPrintJobs : sDefault.iMaxPrintJobs;
5333         if (maxjobs <= 0 || maxjobs >= PRINT_MAX_JOBID)
5334                 maxjobs = PRINT_MAX_JOBID - 1;
5335
5336         return maxjobs;
5337 }
5338
5339 const char *lp_printcapname(void)
5340 {
5341         if ((Globals.szPrintcapname != NULL) &&
5342             (Globals.szPrintcapname[0] != '\0'))
5343                 return Globals.szPrintcapname;
5344
5345         if (sDefault.iPrinting == PRINT_CUPS) {
5346 #ifdef HAVE_CUPS
5347                 return "cups";
5348 #else
5349                 return "lpstat";
5350 #endif
5351         }
5352
5353         if (sDefault.iPrinting == PRINT_BSD)
5354                 return "/etc/printcap";
5355
5356         return PRINTCAP_NAME;
5357 }
5358
5359 /*******************************************************************
5360  Ensure we don't use sendfile if server smb signing is active.
5361 ********************************************************************/
5362
5363 static uint32 spoolss_state;
5364
5365 BOOL lp_disable_spoolss( void )
5366 {
5367         if ( spoolss_state == SVCCTL_STATE_UNKNOWN )
5368                 spoolss_state = _lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5369
5370         return spoolss_state == SVCCTL_STOPPED ? True : False;
5371 }
5372
5373 void lp_set_spoolss_state( uint32 state )
5374 {
5375         SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
5376
5377         spoolss_state = state;
5378 }
5379
5380 uint32 lp_get_spoolss_state( void )
5381 {
5382         return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5383 }
5384
5385 /*******************************************************************
5386  Ensure we don't use sendfile if server smb signing is active.
5387 ********************************************************************/
5388
5389 BOOL lp_use_sendfile(int snum)
5390 {
5391         /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
5392         if (Protocol < PROTOCOL_NT1) {
5393                 return False;
5394         }
5395         return (_lp_use_sendfile(snum) && (get_remote_arch() != RA_WIN95) && !srv_is_signing_active());
5396 }
5397
5398 /*******************************************************************
5399  Turn off sendfile if we find the underlying OS doesn't support it.
5400 ********************************************************************/
5401
5402 void set_use_sendfile(int snum, BOOL val)
5403 {
5404         if (LP_SNUM_OK(snum))
5405                 ServicePtrs[snum]->bUseSendfile = val;
5406         else
5407                 sDefault.bUseSendfile = val;
5408 }
5409
5410 /*******************************************************************
5411  Turn off storing DOS attributes if this share doesn't support it.
5412 ********************************************************************/
5413
5414 void set_store_dos_attributes(int snum, BOOL val)
5415 {
5416         if (!LP_SNUM_OK(snum))
5417                 return;
5418         ServicePtrs[(snum)]->bStoreDosAttributes = val;
5419 }
5420
5421 void lp_set_mangling_method(const char *new_method)
5422 {
5423         string_set(&Globals.szManglingMethod, new_method);
5424 }
5425
5426 /*******************************************************************
5427  Global state for POSIX pathname processing.
5428 ********************************************************************/
5429
5430 static BOOL posix_pathnames;
5431
5432 BOOL lp_posix_pathnames(void)
5433 {
5434         return posix_pathnames;
5435 }
5436
5437 /*******************************************************************
5438  Change everything needed to ensure POSIX pathname processing (currently
5439  not much).
5440 ********************************************************************/
5441
5442 void lp_set_posix_pathnames(void)
5443 {
5444         posix_pathnames = True;
5445 }
5446
5447 /*******************************************************************
5448  Global state for POSIX lock processing - CIFS unix extensions.
5449 ********************************************************************/
5450
5451 static enum brl_flavour posix_cifsx_locktype; /* By default 0 == WINDOWS_LOCK */
5452
5453 enum brl_flavour lp_posix_cifsu_locktype(void)
5454 {
5455         return posix_cifsx_locktype;
5456 }
5457
5458 /*******************************************************************
5459 ********************************************************************/
5460
5461 void lp_set_posix_cifsx_locktype(enum brl_flavour val)
5462 {
5463         posix_cifsx_locktype = val;
5464 }