2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
6 Largely re-written by Andrew Tridgell, September 1994
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
12 Copyright (C) Michael Adam 2008
14 This program is free software; you can redistribute it and/or modify
15 it under the terms of the GNU General Public License as published by
16 the Free Software Foundation; either version 3 of the License, or
17 (at your option) any later version.
19 This program is distributed in the hope that it will be useful,
20 but WITHOUT ANY WARRANTY; without even the implied warranty of
21 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
22 GNU General Public License for more details.
24 You should have received a copy of the GNU General Public License
25 along with this program. If not, see <http://www.gnu.org/licenses/>.
31 * This module provides suitable callback functions for the params
32 * module. It builds the internal table of service details which is
33 * then used by the rest of the server.
37 * 1) add it to the global or service structure definition
38 * 2) add it to the parm_table
39 * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
40 * 4) If it's a global then initialise it in init_globals. If a local
41 * (ie. service) parameter then initialise it in the sDefault structure
45 * The configuration file is processed sequentially for speed. It is NOT
46 * accessed randomly as happens in 'real' Windows. For this reason, there
47 * is a fair bit of sequence-dependent code here - ie., code which assumes
48 * that certain things happen before others. In particular, the code which
49 * happens at the boundary between sections is delicately poised, so be
58 extern enum protocol_types Protocol;
59 extern userdom_struct current_user_info;
62 #define GLOBAL_NAME "global"
66 #define PRINTERS_NAME "printers"
70 #define HOMES_NAME "homes"
73 /* the special value for the include parameter
74 * to be interpreted not as a file name but to
75 * trigger loading of the global smb.conf options
77 #ifndef INCLUDE_REGISTRY_NAME
78 #define INCLUDE_REGISTRY_NAME "registry"
81 static bool in_client = False; /* Not in the client by default */
82 static struct smbconf_csn conf_last_csn;
84 #define CONFIG_BACKEND_FILE 0
85 #define CONFIG_BACKEND_REGISTRY 1
87 static int config_backend = CONFIG_BACKEND_FILE;
89 /* some helpful bits */
90 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
91 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
93 #define USERSHARE_VALID 1
94 #define USERSHARE_PENDING_DELETE 2
96 extern int extra_time_offset;
98 static bool defaults_saved = False;
100 typedef struct _param_opt_struct param_opt_struct;
101 struct _param_opt_struct {
102 param_opt_struct *prev, *next;
109 * This structure describes global (ie., server-wide) parameters.
116 char *display_charset;
117 char *szPrintcapname;
118 char *szAddPortCommand;
119 char *szEnumPortsCommand;
120 char *szAddPrinterCommand;
121 char *szDeletePrinterCommand;
122 char *szOs2DriverMap;
126 char *szDefaultService;
130 char *szServerString;
131 char *szAutoServices;
132 char *szPasswdProgram;
136 char *szSMBPasswdFile;
138 char *szPassdbBackend;
139 char **szPreloadModules;
140 char *szPasswordServer;
141 char *szSocketOptions;
143 char *szAfsUsernameMap;
144 int iAfsTokenLifetime;
145 char *szLogNtTokenCommand;
151 char **szWINSservers;
153 char *szRemoteAnnounce;
154 char *szRemoteBrowseSync;
155 char *szSocketAddress;
156 char *szNISHomeMapName;
157 char *szAnnounceVersion; /* This is initialised in init_globals */
160 char **szNetbiosAliases;
161 char *szNetbiosScope;
162 char *szNameResolveOrder;
164 char *szAddUserScript;
165 char *szRenameUserScript;
166 char *szDelUserScript;
167 char *szAddGroupScript;
168 char *szDelGroupScript;
169 char *szAddUserToGroupScript;
170 char *szDelUserFromGroupScript;
171 char *szSetPrimaryGroupScript;
172 char *szAddMachineScript;
173 char *szShutdownScript;
174 char *szAbortShutdownScript;
175 char *szUsernameMapScript;
176 char *szCheckPasswordScript;
183 bool bPassdbExpandExplicit;
184 int AlgorithmicRidBase;
185 char *szTemplateHomedir;
186 char *szTemplateShell;
187 char *szWinbindSeparator;
188 bool bWinbindEnumUsers;
189 bool bWinbindEnumGroups;
190 bool bWinbindUseDefaultDomain;
191 bool bWinbindTrustedDomainsOnly;
192 bool bWinbindNestedGroups;
193 int winbind_expand_groups;
194 bool bWinbindRefreshTickets;
195 bool bWinbindOfflineLogon;
196 bool bWinbindNormalizeNames;
197 bool bWinbindRpcOnly;
198 char **szIdmapDomains;
199 char **szIdmapBackend; /* deprecated */
200 char *szIdmapAllocBackend;
201 char *szAddShareCommand;
202 char *szChangeShareCommand;
203 char *szDeleteShareCommand;
205 char *szGuestaccount;
206 char *szManglingMethod;
207 char **szServicesList;
208 char *szUsersharePath;
209 char *szUsershareTemplateShare;
210 char **szUsersharePrefixAllowList;
211 char **szUsersharePrefixDenyList;
218 int open_files_db_hash_size;
227 bool paranoid_server_security;
230 int iMaxSmbdProcesses;
231 bool bDisableSpoolss;
234 bool enhanced_browsing;
240 int announce_as; /* This is initialised in init_globals */
241 int machine_password_timeout;
243 int oplock_break_wait_time;
244 int winbind_cache_time;
245 int winbind_max_idle_children;
246 char **szWinbindNssInfo;
248 char *szLdapMachineSuffix;
249 char *szLdapUserSuffix;
250 char *szLdapIdmapSuffix;
251 char *szLdapGroupSuffix;
255 int ldap_debug_level;
256 int ldap_debug_threshold;
259 char *szIPrintServer;
261 char **szClusterAddresses;
263 int ldap_passwd_sync;
264 int ldap_replication_sleep;
265 int ldap_timeout; /* This is initialised in init_globals */
266 int ldap_connection_timeout;
269 bool bMsAddPrinterWizard;
274 int iPreferredMaster;
277 bool bEncryptPasswords;
282 bool bObeyPamRestrictions;
284 int PrintcapCacheTime;
285 bool bLargeReadwrite;
292 bool bBindInterfacesOnly;
293 bool bPamPasswordChange;
294 bool bUnixPasswdSync;
295 bool bPasswdChatDebug;
296 int iPasswdChatTimeout;
300 bool bNTStatusSupport;
302 int iMaxStatCacheSize;
304 bool bAllowTrustedDomains;
308 bool bClientLanManAuth;
309 bool bClientNTLMv2Auth;
310 bool bClientPlaintextAuth;
311 bool bClientUseSpnego;
312 bool bDebugPrefixTimestamp;
313 bool bDebugHiresTimestamp;
317 bool bEnableCoreFiles;
320 bool bHostnameLookups;
321 bool bUnixExtensions;
322 bool bDisableNetbios;
323 bool bUseKerberosKeytab;
324 bool bDeferSharingViolations;
325 bool bEnablePrivileges;
327 bool bUsershareOwnerOnly;
328 bool bUsershareAllowGuests;
329 bool bRegistryShares;
330 int restrict_anonymous;
331 int name_cache_timeout;
334 int client_ldap_sasl_wrapping;
335 int iUsershareMaxShares;
337 int iIdmapNegativeCacheTime;
341 param_opt_struct *param_opt;
344 static struct global Globals;
347 * This structure describes a single service.
353 time_t usershare_last_mod;
357 char **szInvalidUsers;
365 char *szRootPostExec;
367 char *szPrintcommand;
370 char *szLppausecommand;
371 char *szLpresumecommand;
372 char *szQueuepausecommand;
373 char *szQueueresumecommand;
375 char *szPrintjobUsername;
383 char *szVetoOplockFiles;
389 char **printer_admin;
394 char *szAioWriteBehind;
398 int iMaxReportedPrintJobs;
401 int iCreate_force_mode;
403 int iSecurity_force_mode;
406 int iDir_Security_mask;
407 int iDir_Security_force_mode;
411 int iOplockContentionLimit;
416 bool bRootpreexecClose;
419 bool bShortCasePreserve;
421 bool bHideSpecialFiles;
422 bool bHideUnReadable;
423 bool bHideUnWriteableFiles;
429 bool bAdministrative_share;
435 bool bStoreDosAttributes;
448 bool bStrictAllocate;
451 struct bitmap *copymap;
452 bool bDeleteReadonly;
454 bool bDeleteVetoFiles;
457 bool bDosFiletimeResolution;
458 bool bFakeDirCreateTimes;
464 bool bUseClientDriver;
465 bool bDefaultDevmode;
466 bool bForcePrintername;
468 bool bForceUnknownAclUser;
471 bool bMap_acl_inherit;
474 bool bAclCheckPermissions;
475 bool bAclMapFullControl;
476 bool bAclGroupControl;
478 bool bKernelChangeNotify;
479 int iallocation_roundup_size;
483 int iDirectoryNameCacheSize;
485 param_opt_struct *param_opt;
487 char dummy[3]; /* for alignment */
491 /* This is a default service used to prime a services structure */
492 static struct service sDefault = {
494 False, /* not autoloaded */
495 0, /* not a usershare */
496 (time_t)0, /* No last mod time */
497 NULL, /* szService */
499 NULL, /* szUsername */
500 NULL, /* szInvalidUsers */
501 NULL, /* szValidUsers */
502 NULL, /* szAdminUsers */
504 NULL, /* szInclude */
505 NULL, /* szPreExec */
506 NULL, /* szPostExec */
507 NULL, /* szRootPreExec */
508 NULL, /* szRootPostExec */
509 NULL, /* szCupsOptions */
510 NULL, /* szPrintcommand */
511 NULL, /* szLpqcommand */
512 NULL, /* szLprmcommand */
513 NULL, /* szLppausecommand */
514 NULL, /* szLpresumecommand */
515 NULL, /* szQueuepausecommand */
516 NULL, /* szQueueresumecommand */
517 NULL, /* szPrintername */
518 NULL, /* szPrintjobUsername */
519 NULL, /* szDontdescend */
520 NULL, /* szHostsallow */
521 NULL, /* szHostsdeny */
522 NULL, /* szMagicScript */
523 NULL, /* szMagicOutput */
524 NULL, /* szVetoFiles */
525 NULL, /* szHideFiles */
526 NULL, /* szVetoOplockFiles */
528 NULL, /* force user */
529 NULL, /* force group */
531 NULL, /* writelist */
532 NULL, /* printer admin */
535 NULL, /* vfs objects */
536 NULL, /* szMSDfsProxy */
537 NULL, /* szAioWriteBehind */
539 0, /* iMinPrintSpace */
540 1000, /* iMaxPrintJobs */
541 0, /* iMaxReportedPrintJobs */
542 0, /* iWriteCacheSize */
543 0744, /* iCreate_mask */
544 0000, /* iCreate_force_mode */
545 0777, /* iSecurity_mask */
546 0, /* iSecurity_force_mode */
547 0755, /* iDir_mask */
548 0000, /* iDir_force_mode */
549 0777, /* iDir_Security_mask */
550 0, /* iDir_Security_force_mode */
551 0, /* iMaxConnections */
552 CASE_LOWER, /* iDefaultCase */
553 DEFAULT_PRINTING, /* iPrinting */
554 2, /* iOplockContentionLimit */
556 1024, /* iBlock_size */
557 0, /* iDfreeCacheTime */
558 False, /* bPreexecClose */
559 False, /* bRootpreexecClose */
560 Auto, /* case sensitive */
561 True, /* case preserve */
562 True, /* short case preserve */
563 True, /* bHideDotFiles */
564 False, /* bHideSpecialFiles */
565 False, /* bHideUnReadable */
566 False, /* bHideUnWriteableFiles */
567 True, /* bBrowseable */
568 True, /* bAvailable */
569 True, /* bRead_only */
570 True, /* bNo_set_dir */
571 False, /* bGuest_only */
572 False, /* bAdministrative_share */
573 False, /* bGuest_ok */
574 False, /* bPrint_ok */
575 False, /* bMap_system */
576 False, /* bMap_hidden */
577 True, /* bMap_archive */
578 False, /* bStoreDosAttributes */
579 False, /* bDmapiSupport */
581 Auto, /* iStrictLocking */
582 True, /* bPosixLocking */
583 True, /* bShareModes */
585 True, /* bLevel2OpLocks */
586 False, /* bOnlyUser */
587 True, /* bMangledNames */
588 True, /* bWidelinks */
589 True, /* bSymlinks */
590 False, /* bSyncAlways */
591 False, /* bStrictAllocate */
592 False, /* bStrictSync */
593 '~', /* magic char */
595 False, /* bDeleteReadonly */
596 False, /* bFakeOplocks */
597 False, /* bDeleteVetoFiles */
598 False, /* bDosFilemode */
599 True, /* bDosFiletimes */
600 False, /* bDosFiletimeResolution */
601 False, /* bFakeDirCreateTimes */
602 True, /* bBlockingLocks */
603 False, /* bInheritPerms */
604 False, /* bInheritACLS */
605 False, /* bInheritOwner */
606 False, /* bMSDfsRoot */
607 False, /* bUseClientDriver */
608 True, /* bDefaultDevmode */
609 False, /* bForcePrintername */
610 True, /* bNTAclSupport */
611 False, /* bForceUnknownAclUser */
612 False, /* bUseSendfile */
613 False, /* bProfileAcls */
614 False, /* bMap_acl_inherit */
615 False, /* bAfs_Share */
616 False, /* bEASupport */
617 True, /* bAclCheckPermissions */
618 True, /* bAclMapFullControl */
619 False, /* bAclGroupControl */
620 True, /* bChangeNotify */
621 True, /* bKernelChangeNotify */
622 SMB_ROUNDUP_ALLOCATION_SIZE, /* iallocation_roundup_size */
623 0, /* iAioReadSize */
624 0, /* iAioWriteSize */
625 MAP_READONLY_YES, /* iMap_readonly */
626 #ifdef BROKEN_DIRECTORY_HANDLING
627 0, /* iDirectoryNameCacheSize */
629 100, /* iDirectoryNameCacheSize */
631 Auto, /* ismb_encrypt */
632 NULL, /* Parametric options */
637 /* local variables */
638 static struct service **ServicePtrs = NULL;
639 static int iNumServices = 0;
640 static int iServiceIndex = 0;
641 static struct db_context *ServiceHash;
642 static int *invalid_services = NULL;
643 static int num_invalid_services = 0;
644 static bool bInGlobalSection = True;
645 static bool bGlobalOnly = False;
646 static int server_role;
647 static int default_server_announce;
649 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
651 /* prototypes for the special type handlers */
652 static bool handle_include( int snum, const char *pszParmValue, char **ptr);
653 static bool handle_copy( int snum, const char *pszParmValue, char **ptr);
654 static bool handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
655 static bool handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
656 static bool handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
657 static bool handle_debug_list( int snum, const char *pszParmValue, char **ptr );
658 static bool handle_workgroup( int snum, const char *pszParmValue, char **ptr );
659 static bool handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
660 static bool handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
661 static bool handle_charset( int snum, const char *pszParmValue, char **ptr );
662 static bool handle_printing( int snum, const char *pszParmValue, char **ptr);
663 static bool handle_ldap_debug_level( int snum, const char *pszParmValue, char **ptr);
665 static void set_server_role(void);
666 static void set_default_server_announce_type(void);
667 static void set_allowed_client_auth(void);
669 static const struct enum_list enum_protocol[] = {
670 {PROTOCOL_NT1, "NT1"},
671 {PROTOCOL_LANMAN2, "LANMAN2"},
672 {PROTOCOL_LANMAN1, "LANMAN1"},
673 {PROTOCOL_CORE, "CORE"},
674 {PROTOCOL_COREPLUS, "COREPLUS"},
675 {PROTOCOL_COREPLUS, "CORE+"},
679 static const struct enum_list enum_security[] = {
680 {SEC_SHARE, "SHARE"},
682 {SEC_SERVER, "SERVER"},
683 {SEC_DOMAIN, "DOMAIN"},
690 static const struct enum_list enum_printing[] = {
691 {PRINT_SYSV, "sysv"},
693 {PRINT_HPUX, "hpux"},
697 {PRINT_LPRNG, "lprng"},
698 {PRINT_CUPS, "cups"},
699 {PRINT_IPRINT, "iprint"},
701 {PRINT_LPROS2, "os2"},
703 {PRINT_TEST, "test"},
705 #endif /* DEVELOPER */
709 static const struct enum_list enum_ldap_sasl_wrapping[] = {
711 {ADS_AUTH_SASL_SIGN, "sign"},
712 {ADS_AUTH_SASL_SEAL, "seal"},
716 static const struct enum_list enum_ldap_ssl[] = {
717 {LDAP_SSL_OFF, "no"},
718 {LDAP_SSL_OFF, "No"},
719 {LDAP_SSL_OFF, "off"},
720 {LDAP_SSL_OFF, "Off"},
721 {LDAP_SSL_START_TLS, "start tls"},
722 {LDAP_SSL_START_TLS, "Start_tls"},
726 static const struct enum_list enum_ldap_passwd_sync[] = {
727 {LDAP_PASSWD_SYNC_OFF, "no"},
728 {LDAP_PASSWD_SYNC_OFF, "No"},
729 {LDAP_PASSWD_SYNC_OFF, "off"},
730 {LDAP_PASSWD_SYNC_OFF, "Off"},
731 {LDAP_PASSWD_SYNC_ON, "Yes"},
732 {LDAP_PASSWD_SYNC_ON, "yes"},
733 {LDAP_PASSWD_SYNC_ON, "on"},
734 {LDAP_PASSWD_SYNC_ON, "On"},
735 {LDAP_PASSWD_SYNC_ONLY, "Only"},
736 {LDAP_PASSWD_SYNC_ONLY, "only"},
740 /* Types of machine we can announce as. */
741 #define ANNOUNCE_AS_NT_SERVER 1
742 #define ANNOUNCE_AS_WIN95 2
743 #define ANNOUNCE_AS_WFW 3
744 #define ANNOUNCE_AS_NT_WORKSTATION 4
746 static const struct enum_list enum_announce_as[] = {
747 {ANNOUNCE_AS_NT_SERVER, "NT"},
748 {ANNOUNCE_AS_NT_SERVER, "NT Server"},
749 {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
750 {ANNOUNCE_AS_WIN95, "win95"},
751 {ANNOUNCE_AS_WFW, "WfW"},
755 static const struct enum_list enum_map_readonly[] = {
756 {MAP_READONLY_NO, "no"},
757 {MAP_READONLY_NO, "false"},
758 {MAP_READONLY_NO, "0"},
759 {MAP_READONLY_YES, "yes"},
760 {MAP_READONLY_YES, "true"},
761 {MAP_READONLY_YES, "1"},
762 {MAP_READONLY_PERMISSIONS, "permissions"},
763 {MAP_READONLY_PERMISSIONS, "perms"},
767 static const struct enum_list enum_case[] = {
768 {CASE_LOWER, "lower"},
769 {CASE_UPPER, "upper"},
773 static const struct enum_list enum_bool_auto[] = {
784 /* Client-side offline caching policy types */
785 #define CSC_POLICY_MANUAL 0
786 #define CSC_POLICY_DOCUMENTS 1
787 #define CSC_POLICY_PROGRAMS 2
788 #define CSC_POLICY_DISABLE 3
790 static const struct enum_list enum_csc_policy[] = {
791 {CSC_POLICY_MANUAL, "manual"},
792 {CSC_POLICY_DOCUMENTS, "documents"},
793 {CSC_POLICY_PROGRAMS, "programs"},
794 {CSC_POLICY_DISABLE, "disable"},
798 /* SMB signing types. */
799 static const struct enum_list enum_smb_signing_vals[] = {
811 {Required, "required"},
812 {Required, "mandatory"},
814 {Required, "forced"},
815 {Required, "enforced"},
819 /* ACL compatibility options. */
820 static const struct enum_list enum_acl_compat_vals[] = {
821 { ACL_COMPAT_AUTO, "auto" },
822 { ACL_COMPAT_WINNT, "winnt" },
823 { ACL_COMPAT_WIN2K, "win2k" },
828 Do you want session setups at user level security with a invalid
829 password to be rejected or allowed in as guest? WinNT rejects them
830 but it can be a pain as it means "net view" needs to use a password
832 You have 3 choices in the setting of map_to_guest:
834 "Never" means session setups with an invalid password
835 are rejected. This is the default.
837 "Bad User" means session setups with an invalid password
838 are rejected, unless the username does not exist, in which case it
839 is treated as a guest login
841 "Bad Password" means session setups with an invalid password
842 are treated as a guest login
844 Note that map_to_guest only has an effect in user or server
848 static const struct enum_list enum_map_to_guest[] = {
849 {NEVER_MAP_TO_GUEST, "Never"},
850 {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
851 {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
852 {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
856 /* Config backend options */
858 static const struct enum_list enum_config_backend[] = {
859 {CONFIG_BACKEND_FILE, "file"},
860 {CONFIG_BACKEND_REGISTRY, "registry"},
864 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
866 * The FLAG_HIDE is explicit. Paramters set this way do NOT appear in any edit
867 * screen in SWAT. This is used to exclude parameters as well as to squash all
868 * parameters that have been duplicated by pseudonyms.
870 * NOTE: To display a parameter in BASIC view set FLAG_BASIC
871 * Any parameter that does NOT have FLAG_ADVANCED will not disply at all
872 * Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
875 * NOTE2: Handling of duplicated (synonym) paramters:
876 * Only the first occurance of a parameter should be enabled by FLAG_BASIC
877 * and/or FLAG_ADVANCED. All duplicates following the first mention should be
878 * set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
879 * name first, and all synonyms must follow it with the FLAG_HIDE attribute.
882 static struct parm_struct parm_table[] = {
883 {N_("Base Options"), P_SEP, P_SEPARATOR},
886 .label = "dos charset",
889 .ptr = &Globals.dos_charset,
890 .special = handle_charset,
892 .flags = FLAG_ADVANCED
895 .label = "unix charset",
898 .ptr = &Globals.unix_charset,
899 .special = handle_charset,
901 .flags = FLAG_ADVANCED
904 .label = "display charset",
907 .ptr = &Globals.display_charset,
908 .special = handle_charset,
910 .flags = FLAG_ADVANCED
916 .ptr = &sDefault.comment,
919 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT
925 .ptr = &sDefault.szPath,
928 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
931 .label = "directory",
934 .ptr = &sDefault.szPath,
940 .label = "workgroup",
943 .ptr = &Globals.szWorkgroup,
944 .special = handle_workgroup,
946 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
953 .ptr = &Globals.szRealm,
956 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
960 .label = "netbios name",
963 .ptr = &Globals.szNetbiosName,
964 .special = handle_netbios_name,
966 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
969 .label = "netbios aliases",
972 .ptr = &Globals.szNetbiosAliases,
973 .special = handle_netbios_aliases,
975 .flags = FLAG_ADVANCED,
978 .label = "netbios scope",
981 .ptr = &Globals.szNetbiosScope,
982 .special = handle_netbios_scope,
984 .flags = FLAG_ADVANCED,
987 .label = "server string",
990 .ptr = &Globals.szServerString,
993 .flags = FLAG_BASIC | FLAG_ADVANCED,
996 .label = "interfaces",
999 .ptr = &Globals.szInterfaces,
1002 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1005 .label = "bind interfaces only",
1007 .p_class = P_GLOBAL,
1008 .ptr = &Globals.bBindInterfacesOnly,
1011 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1014 .label = "config backend",
1016 .p_class = P_GLOBAL,
1017 .ptr = &Globals.ConfigBackend,
1019 .enum_list = enum_config_backend,
1020 .flags = FLAG_ADVANCED,
1023 {N_("Security Options"), P_SEP, P_SEPARATOR},
1026 .label = "security",
1028 .p_class = P_GLOBAL,
1029 .ptr = &Globals.security,
1031 .enum_list = enum_security,
1032 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1035 .label = "auth methods",
1037 .p_class = P_GLOBAL,
1038 .ptr = &Globals.AuthMethods,
1041 .flags = FLAG_ADVANCED,
1044 .label = "encrypt passwords",
1046 .p_class = P_GLOBAL,
1047 .ptr = &Globals.bEncryptPasswords,
1050 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD,
1053 .label = "update encrypted",
1055 .p_class = P_GLOBAL,
1056 .ptr = &Globals.bUpdateEncrypt,
1059 .flags = FLAG_ADVANCED,
1062 .label = "client schannel",
1064 .p_class = P_GLOBAL,
1065 .ptr = &Globals.clientSchannel,
1067 .enum_list = enum_bool_auto,
1068 .flags = FLAG_BASIC | FLAG_ADVANCED,
1071 .label = "server schannel",
1073 .p_class = P_GLOBAL,
1074 .ptr = &Globals.serverSchannel,
1076 .enum_list = enum_bool_auto,
1077 .flags = FLAG_BASIC | FLAG_ADVANCED,
1080 .label = "allow trusted domains",
1082 .p_class = P_GLOBAL,
1083 .ptr = &Globals.bAllowTrustedDomains,
1086 .flags = FLAG_ADVANCED,
1089 .label = "map to guest",
1091 .p_class = P_GLOBAL,
1092 .ptr = &Globals.map_to_guest,
1094 .enum_list = enum_map_to_guest,
1095 .flags = FLAG_ADVANCED,
1098 .label = "null passwords",
1100 .p_class = P_GLOBAL,
1101 .ptr = &Globals.bNullPasswords,
1104 .flags = FLAG_ADVANCED,
1107 .label = "obey pam restrictions",
1109 .p_class = P_GLOBAL,
1110 .ptr = &Globals.bObeyPamRestrictions,
1113 .flags = FLAG_ADVANCED,
1116 .label = "password server",
1118 .p_class = P_GLOBAL,
1119 .ptr = &Globals.szPasswordServer,
1122 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1125 .label = "smb passwd file",
1127 .p_class = P_GLOBAL,
1128 .ptr = &Globals.szSMBPasswdFile,
1131 .flags = FLAG_ADVANCED,
1134 .label = "private dir",
1136 .p_class = P_GLOBAL,
1137 .ptr = &Globals.szPrivateDir,
1140 .flags = FLAG_ADVANCED,
1143 .label = "passdb backend",
1145 .p_class = P_GLOBAL,
1146 .ptr = &Globals.szPassdbBackend,
1149 .flags = FLAG_ADVANCED | FLAG_WIZARD,
1152 .label = "algorithmic rid base",
1154 .p_class = P_GLOBAL,
1155 .ptr = &Globals.AlgorithmicRidBase,
1158 .flags = FLAG_ADVANCED,
1161 .label = "root directory",
1163 .p_class = P_GLOBAL,
1164 .ptr = &Globals.szRootdir,
1167 .flags = FLAG_ADVANCED,
1170 .label = "root dir",
1172 .p_class = P_GLOBAL,
1173 .ptr = &Globals.szRootdir,
1181 .p_class = P_GLOBAL,
1182 .ptr = &Globals.szRootdir,
1188 .label = "guest account",
1190 .p_class = P_GLOBAL,
1191 .ptr = &Globals.szGuestaccount,
1194 .flags = FLAG_BASIC | FLAG_ADVANCED,
1197 .label = "enable privileges",
1199 .p_class = P_GLOBAL,
1200 .ptr = &Globals.bEnablePrivileges,
1203 .flags = FLAG_ADVANCED,
1207 .label = "pam password change",
1209 .p_class = P_GLOBAL,
1210 .ptr = &Globals.bPamPasswordChange,
1213 .flags = FLAG_ADVANCED,
1216 .label = "passwd program",
1218 .p_class = P_GLOBAL,
1219 .ptr = &Globals.szPasswdProgram,
1222 .flags = FLAG_ADVANCED,
1225 .label = "passwd chat",
1227 .p_class = P_GLOBAL,
1228 .ptr = &Globals.szPasswdChat,
1231 .flags = FLAG_ADVANCED,
1234 .label = "passwd chat debug",
1236 .p_class = P_GLOBAL,
1237 .ptr = &Globals.bPasswdChatDebug,
1240 .flags = FLAG_ADVANCED,
1243 .label = "passwd chat timeout",
1245 .p_class = P_GLOBAL,
1246 .ptr = &Globals.iPasswdChatTimeout,
1249 .flags = FLAG_ADVANCED,
1252 .label = "check password script",
1254 .p_class = P_GLOBAL,
1255 .ptr = &Globals.szCheckPasswordScript,
1258 .flags = FLAG_ADVANCED,
1261 .label = "username map",
1263 .p_class = P_GLOBAL,
1264 .ptr = &Globals.szUsernameMap,
1267 .flags = FLAG_ADVANCED,
1270 .label = "password level",
1272 .p_class = P_GLOBAL,
1273 .ptr = &Globals.pwordlevel,
1276 .flags = FLAG_ADVANCED,
1279 .label = "username level",
1281 .p_class = P_GLOBAL,
1282 .ptr = &Globals.unamelevel,
1285 .flags = FLAG_ADVANCED,
1288 .label = "unix password sync",
1290 .p_class = P_GLOBAL,
1291 .ptr = &Globals.bUnixPasswdSync,
1294 .flags = FLAG_ADVANCED,
1297 .label = "restrict anonymous",
1299 .p_class = P_GLOBAL,
1300 .ptr = &Globals.restrict_anonymous,
1303 .flags = FLAG_ADVANCED,
1306 .label = "lanman auth",
1308 .p_class = P_GLOBAL,
1309 .ptr = &Globals.bLanmanAuth,
1312 .flags = FLAG_ADVANCED,
1315 .label = "ntlm auth",
1317 .p_class = P_GLOBAL,
1318 .ptr = &Globals.bNTLMAuth,
1321 .flags = FLAG_ADVANCED,
1324 .label = "client NTLMv2 auth",
1326 .p_class = P_GLOBAL,
1327 .ptr = &Globals.bClientNTLMv2Auth,
1330 .flags = FLAG_ADVANCED,
1333 .label = "client lanman auth",
1335 .p_class = P_GLOBAL,
1336 .ptr = &Globals.bClientLanManAuth,
1339 .flags = FLAG_ADVANCED,
1342 .label = "client plaintext auth",
1344 .p_class = P_GLOBAL,
1345 .ptr = &Globals.bClientPlaintextAuth,
1348 .flags = FLAG_ADVANCED,
1351 .label = "username",
1354 .ptr = &sDefault.szUsername,
1357 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1363 .ptr = &sDefault.szUsername,
1372 .ptr = &sDefault.szUsername,
1378 .label = "invalid users",
1381 .ptr = &sDefault.szInvalidUsers,
1384 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1387 .label = "valid users",
1390 .ptr = &sDefault.szValidUsers,
1393 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1396 .label = "admin users",
1399 .ptr = &sDefault.szAdminUsers,
1402 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1405 .label = "read list",
1408 .ptr = &sDefault.readlist,
1411 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1414 .label = "write list",
1417 .ptr = &sDefault.writelist,
1420 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1423 .label = "printer admin",
1426 .ptr = &sDefault.printer_admin,
1429 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED,
1432 .label = "force user",
1435 .ptr = &sDefault.force_user,
1438 .flags = FLAG_ADVANCED | FLAG_SHARE,
1441 .label = "force group",
1444 .ptr = &sDefault.force_group,
1447 .flags = FLAG_ADVANCED | FLAG_SHARE,
1453 .ptr = &sDefault.force_group,
1456 .flags = FLAG_ADVANCED,
1459 .label = "read only",
1462 .ptr = &sDefault.bRead_only,
1465 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE,
1468 .label = "write ok",
1471 .ptr = &sDefault.bRead_only,
1477 .label = "writeable",
1480 .ptr = &sDefault.bRead_only,
1486 .label = "writable",
1489 .ptr = &sDefault.bRead_only,
1495 .label = "acl check permissions",
1498 .ptr = &sDefault.bAclCheckPermissions,
1501 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1504 .label = "acl group control",
1507 .ptr = &sDefault.bAclGroupControl,
1510 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE | FLAG_DEPRECATED,
1513 .label = "acl map full control",
1516 .ptr = &sDefault.bAclMapFullControl,
1519 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1522 .label = "create mask",
1525 .ptr = &sDefault.iCreate_mask,
1528 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1531 .label = "create mode",
1534 .ptr = &sDefault.iCreate_mask,
1540 .label = "force create mode",
1543 .ptr = &sDefault.iCreate_force_mode,
1546 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1549 .label = "security mask",
1552 .ptr = &sDefault.iSecurity_mask,
1555 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1558 .label = "force security mode",
1561 .ptr = &sDefault.iSecurity_force_mode,
1564 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1567 .label = "directory mask",
1570 .ptr = &sDefault.iDir_mask,
1573 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1576 .label = "directory mode",
1579 .ptr = &sDefault.iDir_mask,
1582 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1585 .label = "force directory mode",
1588 .ptr = &sDefault.iDir_force_mode,
1591 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1594 .label = "directory security mask",
1597 .ptr = &sDefault.iDir_Security_mask,
1600 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1603 .label = "force directory security mode",
1606 .ptr = &sDefault.iDir_Security_force_mode,
1609 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1612 .label = "force unknown acl user",
1615 .ptr = &sDefault.bForceUnknownAclUser,
1618 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
1621 .label = "inherit permissions",
1624 .ptr = &sDefault.bInheritPerms,
1627 .flags = FLAG_ADVANCED | FLAG_SHARE,
1630 .label = "inherit acls",
1633 .ptr = &sDefault.bInheritACLS,
1636 .flags = FLAG_ADVANCED | FLAG_SHARE,
1639 .label = "inherit owner",
1642 .ptr = &sDefault.bInheritOwner,
1645 .flags = FLAG_ADVANCED | FLAG_SHARE,
1648 .label = "guest only",
1651 .ptr = &sDefault.bGuest_only,
1654 .flags = FLAG_ADVANCED | FLAG_SHARE,
1657 .label = "only guest",
1660 .ptr = &sDefault.bGuest_only,
1666 .label = "administrative share",
1669 .ptr = &sDefault.bAdministrative_share,
1672 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1676 .label = "guest ok",
1679 .ptr = &sDefault.bGuest_ok,
1682 .flags = FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1688 .ptr = &sDefault.bGuest_ok,
1694 .label = "only user",
1697 .ptr = &sDefault.bOnlyUser,
1700 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED,
1703 .label = "hosts allow",
1706 .ptr = &sDefault.szHostsallow,
1709 .flags = FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1712 .label = "allow hosts",
1715 .ptr = &sDefault.szHostsallow,
1721 .label = "hosts deny",
1724 .ptr = &sDefault.szHostsdeny,
1727 .flags = FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT,
1730 .label = "deny hosts",
1733 .ptr = &sDefault.szHostsdeny,
1739 .label = "preload modules",
1741 .p_class = P_GLOBAL,
1742 .ptr = &Globals.szPreloadModules,
1745 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
1748 .label = "use kerberos keytab",
1750 .p_class = P_GLOBAL,
1751 .ptr = &Globals.bUseKerberosKeytab,
1754 .flags = FLAG_ADVANCED,
1757 {N_("Logging Options"), P_SEP, P_SEPARATOR},
1760 .label = "log level",
1762 .p_class = P_GLOBAL,
1763 .ptr = &Globals.szLogLevel,
1764 .special = handle_debug_list,
1766 .flags = FLAG_ADVANCED,
1769 .label = "debuglevel",
1771 .p_class = P_GLOBAL,
1772 .ptr = &Globals.szLogLevel,
1773 .special = handle_debug_list,
1780 .p_class = P_GLOBAL,
1781 .ptr = &Globals.syslog,
1784 .flags = FLAG_ADVANCED,
1787 .label = "syslog only",
1789 .p_class = P_GLOBAL,
1790 .ptr = &Globals.bSyslogOnly,
1793 .flags = FLAG_ADVANCED,
1796 .label = "log file",
1798 .p_class = P_GLOBAL,
1799 .ptr = &Globals.szLogFile,
1802 .flags = FLAG_ADVANCED,
1805 .label = "max log size",
1807 .p_class = P_GLOBAL,
1808 .ptr = &Globals.max_log_size,
1811 .flags = FLAG_ADVANCED,
1814 .label = "debug timestamp",
1816 .p_class = P_GLOBAL,
1817 .ptr = &Globals.bTimestampLogs,
1820 .flags = FLAG_ADVANCED,
1823 .label = "timestamp logs",
1825 .p_class = P_GLOBAL,
1826 .ptr = &Globals.bTimestampLogs,
1829 .flags = FLAG_ADVANCED,
1832 .label = "debug prefix timestamp",
1834 .p_class = P_GLOBAL,
1835 .ptr = &Globals.bDebugPrefixTimestamp,
1838 .flags = FLAG_ADVANCED,
1841 .label = "debug hires timestamp",
1843 .p_class = P_GLOBAL,
1844 .ptr = &Globals.bDebugHiresTimestamp,
1847 .flags = FLAG_ADVANCED,
1850 .label = "debug pid",
1852 .p_class = P_GLOBAL,
1853 .ptr = &Globals.bDebugPid,
1856 .flags = FLAG_ADVANCED,
1859 .label = "debug uid",
1861 .p_class = P_GLOBAL,
1862 .ptr = &Globals.bDebugUid,
1865 .flags = FLAG_ADVANCED,
1868 .label = "debug class",
1870 .p_class = P_GLOBAL,
1871 .ptr = &Globals.bDebugClass,
1874 .flags = FLAG_ADVANCED,
1877 .label = "enable core files",
1879 .p_class = P_GLOBAL,
1880 .ptr = &Globals.bEnableCoreFiles,
1883 .flags = FLAG_ADVANCED,
1886 {N_("Protocol Options"), P_SEP, P_SEPARATOR},
1889 .label = "allocation roundup size",
1892 .ptr = &sDefault.iallocation_roundup_size,
1895 .flags = FLAG_ADVANCED,
1898 .label = "aio read size",
1901 .ptr = &sDefault.iAioReadSize,
1904 .flags = FLAG_ADVANCED,
1907 .label = "aio write size",
1910 .ptr = &sDefault.iAioWriteSize,
1913 .flags = FLAG_ADVANCED,
1916 .label = "aio write behind",
1919 .ptr = &sDefault.szAioWriteBehind,
1922 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
1925 .label = "smb ports",
1927 .p_class = P_GLOBAL,
1928 .ptr = &Globals.smb_ports,
1931 .flags = FLAG_ADVANCED,
1934 .label = "large readwrite",
1936 .p_class = P_GLOBAL,
1937 .ptr = &Globals.bLargeReadwrite,
1940 .flags = FLAG_ADVANCED,
1943 .label = "max protocol",
1945 .p_class = P_GLOBAL,
1946 .ptr = &Globals.maxprotocol,
1948 .enum_list = enum_protocol,
1949 .flags = FLAG_ADVANCED,
1952 .label = "protocol",
1954 .p_class = P_GLOBAL,
1955 .ptr = &Globals.maxprotocol,
1957 .enum_list = enum_protocol,
1958 .flags = FLAG_ADVANCED,
1961 .label = "min protocol",
1963 .p_class = P_GLOBAL,
1964 .ptr = &Globals.minprotocol,
1966 .enum_list = enum_protocol,
1967 .flags = FLAG_ADVANCED,
1970 .label = "min receivefile size",
1972 .p_class = P_GLOBAL,
1973 .ptr = &Globals.iminreceivefile,
1976 .flags = FLAG_ADVANCED,
1979 .label = "read raw",
1981 .p_class = P_GLOBAL,
1982 .ptr = &Globals.bReadRaw,
1985 .flags = FLAG_ADVANCED,
1988 .label = "write raw",
1990 .p_class = P_GLOBAL,
1991 .ptr = &Globals.bWriteRaw,
1994 .flags = FLAG_ADVANCED,
1997 .label = "disable netbios",
1999 .p_class = P_GLOBAL,
2000 .ptr = &Globals.bDisableNetbios,
2003 .flags = FLAG_ADVANCED,
2006 .label = "reset on zero vc",
2008 .p_class = P_GLOBAL,
2009 .ptr = &Globals.bResetOnZeroVC,
2012 .flags = FLAG_ADVANCED,
2015 .label = "acl compatibility",
2017 .p_class = P_GLOBAL,
2018 .ptr = &Globals.iAclCompat,
2020 .enum_list = enum_acl_compat_vals,
2021 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2024 .label = "defer sharing violations",
2026 .p_class = P_GLOBAL,
2027 .ptr = &Globals.bDeferSharingViolations,
2030 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2033 .label = "ea support",
2036 .ptr = &sDefault.bEASupport,
2039 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2042 .label = "nt acl support",
2045 .ptr = &sDefault.bNTAclSupport,
2048 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2051 .label = "nt pipe support",
2053 .p_class = P_GLOBAL,
2054 .ptr = &Globals.bNTPipeSupport,
2057 .flags = FLAG_ADVANCED,
2060 .label = "nt status support",
2062 .p_class = P_GLOBAL,
2063 .ptr = &Globals.bNTStatusSupport,
2066 .flags = FLAG_ADVANCED,
2069 .label = "profile acls",
2072 .ptr = &sDefault.bProfileAcls,
2075 .flags = FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE,
2078 .label = "announce version",
2080 .p_class = P_GLOBAL,
2081 .ptr = &Globals.szAnnounceVersion,
2084 .flags = FLAG_ADVANCED,
2087 .label = "announce as",
2089 .p_class = P_GLOBAL,
2090 .ptr = &Globals.announce_as,
2092 .enum_list = enum_announce_as,
2093 .flags = FLAG_ADVANCED,
2096 .label = "map acl inherit",
2099 .ptr = &sDefault.bMap_acl_inherit,
2102 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2105 .label = "afs share",
2108 .ptr = &sDefault.bAfs_Share,
2111 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2116 .p_class = P_GLOBAL,
2117 .ptr = &Globals.max_mux,
2120 .flags = FLAG_ADVANCED,
2123 .label = "max xmit",
2125 .p_class = P_GLOBAL,
2126 .ptr = &Globals.max_xmit,
2129 .flags = FLAG_ADVANCED,
2132 .label = "name resolve order",
2134 .p_class = P_GLOBAL,
2135 .ptr = &Globals.szNameResolveOrder,
2138 .flags = FLAG_ADVANCED | FLAG_WIZARD,
2143 .p_class = P_GLOBAL,
2144 .ptr = &Globals.max_ttl,
2147 .flags = FLAG_ADVANCED,
2150 .label = "max wins ttl",
2152 .p_class = P_GLOBAL,
2153 .ptr = &Globals.max_wins_ttl,
2156 .flags = FLAG_ADVANCED,
2159 .label = "min wins ttl",
2161 .p_class = P_GLOBAL,
2162 .ptr = &Globals.min_wins_ttl,
2165 .flags = FLAG_ADVANCED,
2168 .label = "time server",
2170 .p_class = P_GLOBAL,
2171 .ptr = &Globals.bTimeServer,
2174 .flags = FLAG_ADVANCED,
2177 .label = "unix extensions",
2179 .p_class = P_GLOBAL,
2180 .ptr = &Globals.bUnixExtensions,
2183 .flags = FLAG_ADVANCED,
2186 .label = "use spnego",
2188 .p_class = P_GLOBAL,
2189 .ptr = &Globals.bUseSpnego,
2192 .flags = FLAG_ADVANCED,
2195 .label = "client signing",
2197 .p_class = P_GLOBAL,
2198 .ptr = &Globals.client_signing,
2200 .enum_list = enum_smb_signing_vals,
2201 .flags = FLAG_ADVANCED,
2204 .label = "server signing",
2206 .p_class = P_GLOBAL,
2207 .ptr = &Globals.server_signing,
2209 .enum_list = enum_smb_signing_vals,
2210 .flags = FLAG_ADVANCED,
2213 .label = "smb encrypt",
2216 .ptr = &sDefault.ismb_encrypt,
2218 .enum_list = enum_smb_signing_vals,
2219 .flags = FLAG_ADVANCED,
2222 .label = "client use spnego",
2224 .p_class = P_GLOBAL,
2225 .ptr = &Globals.bClientUseSpnego,
2228 .flags = FLAG_ADVANCED,
2231 .label = "client ldap sasl wrapping",
2233 .p_class = P_GLOBAL,
2234 .ptr = &Globals.client_ldap_sasl_wrapping,
2236 .enum_list = enum_ldap_sasl_wrapping,
2237 .flags = FLAG_ADVANCED,
2240 .label = "enable asu support",
2242 .p_class = P_GLOBAL,
2243 .ptr = &Globals.bASUSupport,
2246 .flags = FLAG_ADVANCED,
2249 .label = "svcctl list",
2251 .p_class = P_GLOBAL,
2252 .ptr = &Globals.szServicesList,
2255 .flags = FLAG_ADVANCED,
2258 {N_("Tuning Options"), P_SEP, P_SEPARATOR},
2261 .label = "block size",
2264 .ptr = &sDefault.iBlock_size,
2267 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2270 .label = "deadtime",
2272 .p_class = P_GLOBAL,
2273 .ptr = &Globals.deadtime,
2276 .flags = FLAG_ADVANCED,
2279 .label = "getwd cache",
2281 .p_class = P_GLOBAL,
2282 .ptr = &Globals.getwd_cache,
2285 .flags = FLAG_ADVANCED,
2288 .label = "keepalive",
2290 .p_class = P_GLOBAL,
2291 .ptr = &Globals.iKeepalive,
2294 .flags = FLAG_ADVANCED,
2297 .label = "change notify",
2300 .ptr = &sDefault.bChangeNotify,
2303 .flags = FLAG_ADVANCED | FLAG_SHARE,
2306 .label = "directory name cache size",
2309 .ptr = &sDefault.iDirectoryNameCacheSize,
2312 .flags = FLAG_ADVANCED | FLAG_SHARE,
2315 .label = "kernel change notify",
2318 .ptr = &sDefault.bKernelChangeNotify,
2321 .flags = FLAG_ADVANCED | FLAG_SHARE,
2324 .label = "lpq cache time",
2326 .p_class = P_GLOBAL,
2327 .ptr = &Globals.lpqcachetime,
2330 .flags = FLAG_ADVANCED,
2333 .label = "max smbd processes",
2335 .p_class = P_GLOBAL,
2336 .ptr = &Globals.iMaxSmbdProcesses,
2339 .flags = FLAG_ADVANCED,
2342 .label = "max connections",
2345 .ptr = &sDefault.iMaxConnections,
2348 .flags = FLAG_ADVANCED | FLAG_SHARE,
2351 .label = "paranoid server security",
2353 .p_class = P_GLOBAL,
2354 .ptr = &Globals.paranoid_server_security,
2357 .flags = FLAG_ADVANCED,
2360 .label = "max disk size",
2362 .p_class = P_GLOBAL,
2363 .ptr = &Globals.maxdisksize,
2366 .flags = FLAG_ADVANCED,
2369 .label = "max open files",
2371 .p_class = P_GLOBAL,
2372 .ptr = &Globals.max_open_files,
2375 .flags = FLAG_ADVANCED,
2378 .label = "min print space",
2381 .ptr = &sDefault.iMinPrintSpace,
2384 .flags = FLAG_ADVANCED | FLAG_PRINT,
2387 .label = "socket options",
2389 .p_class = P_GLOBAL,
2390 .ptr = &Globals.szSocketOptions,
2393 .flags = FLAG_ADVANCED,
2396 .label = "strict allocate",
2399 .ptr = &sDefault.bStrictAllocate,
2402 .flags = FLAG_ADVANCED | FLAG_SHARE,
2405 .label = "strict sync",
2408 .ptr = &sDefault.bStrictSync,
2411 .flags = FLAG_ADVANCED | FLAG_SHARE,
2414 .label = "sync always",
2417 .ptr = &sDefault.bSyncAlways,
2420 .flags = FLAG_ADVANCED | FLAG_SHARE,
2423 .label = "use mmap",
2425 .p_class = P_GLOBAL,
2426 .ptr = &Globals.bUseMmap,
2429 .flags = FLAG_ADVANCED,
2432 .label = "use sendfile",
2435 .ptr = &sDefault.bUseSendfile,
2438 .flags = FLAG_ADVANCED | FLAG_SHARE,
2441 .label = "hostname lookups",
2443 .p_class = P_GLOBAL,
2444 .ptr = &Globals.bHostnameLookups,
2447 .flags = FLAG_ADVANCED,
2450 .label = "write cache size",
2453 .ptr = &sDefault.iWriteCacheSize,
2456 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED,
2459 .label = "name cache timeout",
2461 .p_class = P_GLOBAL,
2462 .ptr = &Globals.name_cache_timeout,
2465 .flags = FLAG_ADVANCED,
2468 .label = "ctdbd socket",
2470 .p_class = P_GLOBAL,
2471 .ptr = &Globals.ctdbdSocket,
2474 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2477 .label = "cluster addresses",
2479 .p_class = P_GLOBAL,
2480 .ptr = &Globals.szClusterAddresses,
2483 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2486 .label = "clustering",
2488 .p_class = P_GLOBAL,
2489 .ptr = &Globals.clustering,
2492 .flags = FLAG_ADVANCED | FLAG_GLOBAL,
2495 {N_("Printing Options"), P_SEP, P_SEPARATOR},
2498 .label = "max reported print jobs",
2501 .ptr = &sDefault.iMaxReportedPrintJobs,
2504 .flags = FLAG_ADVANCED | FLAG_PRINT,
2507 .label = "max print jobs",
2510 .ptr = &sDefault.iMaxPrintJobs,
2513 .flags = FLAG_ADVANCED | FLAG_PRINT,
2516 .label = "load printers",
2518 .p_class = P_GLOBAL,
2519 .ptr = &Globals.bLoadPrinters,
2522 .flags = FLAG_ADVANCED | FLAG_PRINT,
2525 .label = "printcap cache time",
2527 .p_class = P_GLOBAL,
2528 .ptr = &Globals.PrintcapCacheTime,
2531 .flags = FLAG_ADVANCED | FLAG_PRINT,
2534 .label = "printcap name",
2536 .p_class = P_GLOBAL,
2537 .ptr = &Globals.szPrintcapname,
2540 .flags = FLAG_ADVANCED | FLAG_PRINT,
2543 .label = "printcap",
2545 .p_class = P_GLOBAL,
2546 .ptr = &Globals.szPrintcapname,
2552 .label = "printable",
2555 .ptr = &sDefault.bPrint_ok,
2558 .flags = FLAG_ADVANCED | FLAG_PRINT,
2561 .label = "print ok",
2564 .ptr = &sDefault.bPrint_ok,
2570 .label = "printing",
2573 .ptr = &sDefault.iPrinting,
2574 .special = handle_printing,
2575 .enum_list = enum_printing,
2576 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2579 .label = "cups options",
2582 .ptr = &sDefault.szCupsOptions,
2585 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2588 .label = "cups server",
2590 .p_class = P_GLOBAL,
2591 .ptr = &Globals.szCupsServer,
2594 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2597 .label = "iprint server",
2599 .p_class = P_GLOBAL,
2600 .ptr = &Globals.szIPrintServer,
2603 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2606 .label = "print command",
2609 .ptr = &sDefault.szPrintcommand,
2612 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2615 .label = "disable spoolss",
2617 .p_class = P_GLOBAL,
2618 .ptr = &Globals.bDisableSpoolss,
2621 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2624 .label = "enable spoolss",
2626 .p_class = P_GLOBAL,
2627 .ptr = &Globals.bDisableSpoolss,
2633 .label = "lpq command",
2636 .ptr = &sDefault.szLpqcommand,
2639 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2642 .label = "lprm command",
2645 .ptr = &sDefault.szLprmcommand,
2648 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2651 .label = "lppause command",
2654 .ptr = &sDefault.szLppausecommand,
2657 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2660 .label = "lpresume command",
2663 .ptr = &sDefault.szLpresumecommand,
2666 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2669 .label = "queuepause command",
2672 .ptr = &sDefault.szQueuepausecommand,
2675 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2678 .label = "queueresume command",
2681 .ptr = &sDefault.szQueueresumecommand,
2684 .flags = FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL,
2687 .label = "addport command",
2689 .p_class = P_GLOBAL,
2690 .ptr = &Globals.szAddPortCommand,
2693 .flags = FLAG_ADVANCED,
2696 .label = "enumports command",
2698 .p_class = P_GLOBAL,
2699 .ptr = &Globals.szEnumPortsCommand,
2702 .flags = FLAG_ADVANCED,
2705 .label = "addprinter command",
2707 .p_class = P_GLOBAL,
2708 .ptr = &Globals.szAddPrinterCommand,
2711 .flags = FLAG_ADVANCED,
2714 .label = "deleteprinter command",
2716 .p_class = P_GLOBAL,
2717 .ptr = &Globals.szDeletePrinterCommand,
2720 .flags = FLAG_ADVANCED,
2723 .label = "show add printer wizard",
2725 .p_class = P_GLOBAL,
2726 .ptr = &Globals.bMsAddPrinterWizard,
2729 .flags = FLAG_ADVANCED,
2732 .label = "os2 driver map",
2734 .p_class = P_GLOBAL,
2735 .ptr = &Globals.szOs2DriverMap,
2738 .flags = FLAG_ADVANCED,
2742 .label = "printer name",
2745 .ptr = &sDefault.szPrintername,
2748 .flags = FLAG_ADVANCED | FLAG_PRINT,
2754 .ptr = &sDefault.szPrintername,
2760 .label = "use client driver",
2763 .ptr = &sDefault.bUseClientDriver,
2766 .flags = FLAG_ADVANCED | FLAG_PRINT,
2769 .label = "default devmode",
2772 .ptr = &sDefault.bDefaultDevmode,
2775 .flags = FLAG_ADVANCED | FLAG_PRINT,
2778 .label = "force printername",
2781 .ptr = &sDefault.bForcePrintername,
2784 .flags = FLAG_ADVANCED | FLAG_PRINT,
2787 .label = "printjob username",
2790 .ptr = &sDefault.szPrintjobUsername,
2793 .flags = FLAG_ADVANCED | FLAG_PRINT,
2796 {N_("Filename Handling"), P_SEP, P_SEPARATOR},
2799 .label = "mangling method",
2801 .p_class = P_GLOBAL,
2802 .ptr = &Globals.szManglingMethod,
2805 .flags = FLAG_ADVANCED,
2808 .label = "mangle prefix",
2810 .p_class = P_GLOBAL,
2811 .ptr = &Globals.mangle_prefix,
2814 .flags = FLAG_ADVANCED,
2818 .label = "default case",
2821 .ptr = &sDefault.iDefaultCase,
2823 .enum_list = enum_case,
2824 .flags = FLAG_ADVANCED | FLAG_SHARE,
2827 .label = "case sensitive",
2830 .ptr = &sDefault.iCaseSensitive,
2832 .enum_list = enum_bool_auto,
2833 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2836 .label = "casesignames",
2839 .ptr = &sDefault.iCaseSensitive,
2841 .enum_list = enum_bool_auto,
2842 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE,
2845 .label = "preserve case",
2848 .ptr = &sDefault.bCasePreserve,
2851 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2854 .label = "short preserve case",
2857 .ptr = &sDefault.bShortCasePreserve,
2860 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2863 .label = "mangling char",
2866 .ptr = &sDefault.magic_char,
2869 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2872 .label = "hide dot files",
2875 .ptr = &sDefault.bHideDotFiles,
2878 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2881 .label = "hide special files",
2884 .ptr = &sDefault.bHideSpecialFiles,
2887 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2890 .label = "hide unreadable",
2893 .ptr = &sDefault.bHideUnReadable,
2896 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2899 .label = "hide unwriteable files",
2902 .ptr = &sDefault.bHideUnWriteableFiles,
2905 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2908 .label = "delete veto files",
2911 .ptr = &sDefault.bDeleteVetoFiles,
2914 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2917 .label = "veto files",
2920 .ptr = &sDefault.szVetoFiles,
2923 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,
2926 .label = "hide files",
2929 .ptr = &sDefault.szHideFiles,
2932 .flags = FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL,