source/param/loadparm.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Parameter loading functions
   4    Copyright (C) Karl Auer 1993-1998
   5
   6    Largely re-written by Andrew Tridgell, September 1994
   7
   8    Copyright (C) Simo Sorce 2001
   9    Copyright (C) Alexander Bokovoy 2002
  10    Copyright (C) Stefan (metze) Metzmacher 2002
  11    Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
  12
  13    This program is free software; you can redistribute it and/or modify
  14    it under the terms of the GNU General Public License as published by
  15    the Free Software Foundation; either version 2 of the License, or
  16    (at your option) any later version.
  17
  18    This program is distributed in the hope that it will be useful,
  19    but WITHOUT ANY WARRANTY; without even the implied warranty of
  20    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  21    GNU General Public License for more details.
  22
  23    You should have received a copy of the GNU General Public License
  24    along with this program; if not, write to the Free Software
  25    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  26 */
  27
  28 /*
  29  *  Load parameters.
  30  *
  31  *  This module provides suitable callback functions for the params
  32  *  module. It builds the internal table of service details which is
  33  *  then used by the rest of the server.
  34  *
  35  * To add a parameter:
  36  *
  37  * 1) add it to the global or service structure definition
  38  * 2) add it to the parm_table
  39  * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
  40  * 4) If it's a global then initialise it in init_globals. If a local
  41  *    (ie. service) parameter then initialise it in the sDefault structure
  42  *
  43  *
  44  * Notes:
  45  *   The configuration file is processed sequentially for speed. It is NOT
  46  *   accessed randomly as happens in 'real' Windows. For this reason, there
  47  *   is a fair bit of sequence-dependent code here - ie., code which assumes
  48  *   that certain things happen before others. In particular, the code which
  49  *   happens at the boundary between sections is delicately poised, so be
  50  *   careful!
  51  *
  52  */
  53
  54 #include "includes.h"
  55
  56 BOOL in_client = False;         /* Not in the client by default */
  57 BOOL in_server = False;         /* Not in the server by default */
  58 BOOL bLoaded = False;
  59
  60 extern userdom_struct current_user_info;
  61 extern pstring user_socket_options;
  62 extern enum protocol_types Protocol;
  63
  64 #ifndef GLOBAL_NAME
  65 #define GLOBAL_NAME "global"
  66 #endif
  67
  68 #ifndef PRINTERS_NAME
  69 #define PRINTERS_NAME "printers"
  70 #endif
  71
  72 #ifndef HOMES_NAME
  73 #define HOMES_NAME "homes"
  74 #endif
  75
  76 /* some helpful bits */
  77 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
  78 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
  79
  80 #define USERSHARE_VALID 1
  81 #define USERSHARE_PENDING_DELETE 2
  82
  83 int keepalive = DEFAULT_KEEPALIVE;
  84 BOOL use_getwd_cache = True;
  85
  86 extern int extra_time_offset;
  87
  88 static BOOL defaults_saved = False;
  89
  90 typedef struct _param_opt_struct param_opt_struct;
  91 struct _param_opt_struct {
  92         param_opt_struct *prev, *next;
  93         char *key;
  94         char *value;
  95         char **list;
  96 };
  97
  98 /*
  99  * This structure describes global (ie., server-wide) parameters.
 100  */
 101 typedef struct {
 102         char *smb_ports;
 103         char *dos_charset;
 104         char *unix_charset;
 105         char *display_charset;
 106         char *szPrintcapname;
 107         char *szEnumPortsCommand;
 108         char *szAddPrinterCommand;
 109         char *szDeletePrinterCommand;
 110         char *szOs2DriverMap;
 111         char *szLockDir;
 112         char *szPidDir;
 113         char *szRootdir;
 114         char *szDefaultService;
 115         char *szGetQuota;
 116         char *szSetQuota;
 117         char *szMsgCommand;
 118         char *szHostsEquiv;
 119         char *szServerString;
 120         char *szAutoServices;
 121         char *szPasswdProgram;
 122         char *szPasswdChat;
 123         char *szLogFile;
 124         char *szConfigFile;
 125         char *szSMBPasswdFile;
 126         char *szPrivateDir;
 127         char *szPassdbBackend;
 128         char **szPreloadModules;
 129         char *szPasswordServer;
 130         char *szSocketOptions;
 131         char *szRealm;
 132         char *szAfsUsernameMap;
 133         int iAfsTokenLifetime;
 134         char *szLogNtTokenCommand;
 135         char *szUsernameMap;
 136         char *szLogonScript;
 137         char *szLogonPath;
 138         char *szLogonDrive;
 139         char *szLogonHome;
 140         char **szWINSservers;
 141         char **szInterfaces;
 142         char *szRemoteAnnounce;
 143         char *szRemoteBrowseSync;
 144         char *szSocketAddress;
 145         char *szNISHomeMapName;
 146         char *szAnnounceVersion;        /* This is initialised in init_globals */
 147         char *szWorkgroup;
 148         char *szNetbiosName;
 149         char **szNetbiosAliases;
 150         char *szNetbiosScope;
 151         char *szNameResolveOrder;
 152         char *szPanicAction;
 153         char *szAddUserScript;
 154         char *szRenameUserScript;
 155         char *szDelUserScript;
 156         char *szAddGroupScript;
 157         char *szDelGroupScript;
 158         char *szAddUserToGroupScript;
 159         char *szDelUserFromGroupScript;
 160         char *szSetPrimaryGroupScript;
 161         char *szAddMachineScript;
 162         char *szShutdownScript;
 163         char *szAbortShutdownScript;
 164         char *szUsernameMapScript;
 165         char *szCheckPasswordScript;
 166         char *szWINSHook;
 167         char *szWINSPartners;
 168         char *szUtmpDir;
 169         char *szWtmpDir;
 170         BOOL bUtmp;
 171         char *szIdmapUID;
 172         char *szIdmapGID;
 173         BOOL bPassdbExpandExplicit;
 174         int AlgorithmicRidBase;
 175         char *szTemplateHomedir;
 176         char *szTemplateShell;
 177         char *szWinbindSeparator;
 178         BOOL bWinbindEnumUsers;
 179         BOOL bWinbindEnumGroups;
 180         BOOL bWinbindUseDefaultDomain;
 181         BOOL bWinbindTrustedDomainsOnly;
 182         BOOL bWinbindNestedGroups;
 183         BOOL bWinbindRefreshTickets;
 184         BOOL bWinbindOfflineLogon;
 185         char **szIdmapBackend;
 186         char *szAddShareCommand;
 187         char *szChangeShareCommand;
 188         char *szDeleteShareCommand;
 189         char **szEventLogs;
 190         char *szGuestaccount;
 191         char *szManglingMethod;
 192         char **szServicesList;
 193         char *szUsersharePath;
 194         char *szUsershareTemplateShare;
 195         char **szUsersharePrefixAllowList;
 196         char **szUsersharePrefixDenyList;
 197         int mangle_prefix;
 198         int max_log_size;
 199         char *szLogLevel;
 200         int max_xmit;
 201         int max_mux;
 202         int max_open_files;
 203         int pwordlevel;
 204         int unamelevel;
 205         int deadtime;
 206         int maxprotocol;
 207         int minprotocol;
 208         int security;
 209         char **AuthMethods;
 210         BOOL paranoid_server_security;
 211         int maxdisksize;
 212         int lpqcachetime;
 213         int iMaxSmbdProcesses;
 214         BOOL bDisableSpoolss;
 215         int syslog;
 216         int os_level;
 217         int enhanced_browsing;
 218         int max_ttl;
 219         int max_wins_ttl;
 220         int min_wins_ttl;
 221         int lm_announce;
 222         int lm_interval;
 223         int announce_as;        /* This is initialised in init_globals */
 224         int machine_password_timeout;
 225         int change_notify_timeout;
 226         int map_to_guest;
 227         int oplock_break_wait_time;
 228         int winbind_cache_time;
 229         int winbind_max_idle_children;
 230         char **szWinbindNssInfo;
 231         int iLockSpinCount;
 232         int iLockSpinTime;
 233         char *szLdapMachineSuffix;
 234         char *szLdapUserSuffix;
 235         char *szLdapIdmapSuffix;
 236         char *szLdapGroupSuffix;
 237 #ifdef WITH_LDAP_SAMCONFIG
 238         int ldap_port;
 239         char *szLdapServer;
 240 #endif
 241         int ldap_ssl;
 242         char *szLdapSuffix;
 243         char *szLdapAdminDn;
 244         char *szAclCompat;
 245         char *szCupsServer;
 246         char *szIPrintServer;
 247         int ldap_passwd_sync;
 248         int ldap_replication_sleep;
 249         int ldap_timeout; /* This is initialised in init_globals */
 250         int ldap_page_size;
 251         BOOL ldap_delete_dn;
 252         BOOL bMsAddPrinterWizard;
 253         BOOL bDNSproxy;
 254         BOOL bWINSsupport;
 255         BOOL bWINSproxy;
 256         BOOL bLocalMaster;
 257         BOOL bPreferredMaster;
 258         BOOL bDomainMaster;
 259         BOOL bDomainLogons;
 260         BOOL bEncryptPasswords;
 261         BOOL bUpdateEncrypt;
 262         int  clientSchannel;
 263         int  serverSchannel;
 264         BOOL bNullPasswords;
 265         BOOL bObeyPamRestrictions;
 266         BOOL bLoadPrinters;
 267         int PrintcapCacheTime;
 268         BOOL bLargeReadwrite;
 269         BOOL bReadRaw;
 270         BOOL bWriteRaw;
 271         BOOL bReadbmpx;
 272         BOOL bSyslogOnly;
 273         BOOL bBrowseList;
 274         BOOL bNISHomeMap;
 275         BOOL bTimeServer;
 276         BOOL bBindInterfacesOnly;
 277         BOOL bPamPasswordChange;
 278         BOOL bUnixPasswdSync;
 279         BOOL bPasswdChatDebug;
 280         int iPasswdChatTimeout;
 281         BOOL bTimestampLogs;
 282         BOOL bNTSmbSupport;
 283         BOOL bNTPipeSupport;
 284         BOOL bNTStatusSupport;
 285         BOOL bStatCache;
 286         int iMaxStatCacheSize;
 287         BOOL bKernelOplocks;
 288         BOOL bAllowTrustedDomains;
 289         BOOL bLanmanAuth;
 290         BOOL bNTLMAuth;
 291         BOOL bUseSpnego;
 292         BOOL bClientLanManAuth;
 293         BOOL bClientNTLMv2Auth;
 294         BOOL bClientPlaintextAuth;
 295         BOOL bClientUseSpnego;
 296         BOOL bDebugHiresTimestamp;
 297         BOOL bDebugPid;
 298         BOOL bDebugUid;
 299         BOOL bHostMSDfs;
 300         BOOL bUseMmap;
 301         BOOL bHostnameLookups;
 302         BOOL bUnixExtensions;
 303         BOOL bDisableNetbios;
 304         BOOL bKernelChangeNotify;
 305         BOOL bFamChangeNotify;
 306         BOOL bUseKerberosKeytab;
 307         BOOL bDeferSharingViolations;
 308         BOOL bEnablePrivileges;
 309         BOOL bASUSupport;
 310         BOOL bUsershareOwnerOnly;
 311         int restrict_anonymous;
 312         int name_cache_timeout;
 313         int client_signing;
 314         int server_signing;
 315         int iUsershareMaxShares;
 316
 317         BOOL bResetOnZeroVC;
 318         param_opt_struct *param_opt;
 319 } global;
 320
 321 static global Globals;
 322
 323 /*
 324  * This structure describes a single service.
 325  */
 326 typedef struct {
 327         BOOL valid;
 328         BOOL autoloaded;
 329         int usershare;
 330         time_t usershare_last_mod;
 331         char *szService;
 332         char *szPath;
 333         char *szUsername;
 334         char **szInvalidUsers;
 335         char **szValidUsers;
 336         char **szAdminUsers;
 337         char *szCopy;
 338         char *szInclude;
 339         char *szPreExec;
 340         char *szPostExec;
 341         char *szRootPreExec;
 342         char *szRootPostExec;
 343         char *szCupsOptions;
 344         char *szPrintcommand;
 345         char *szLpqcommand;
 346         char *szLprmcommand;
 347         char *szLppausecommand;
 348         char *szLpresumecommand;
 349         char *szQueuepausecommand;
 350         char *szQueueresumecommand;
 351         char *szPrintername;
 352         char *szDontdescend;
 353         char **szHostsallow;
 354         char **szHostsdeny;
 355         char *szMagicScript;
 356         char *szMagicOutput;
 357         char *szMangledMap;
 358         char *szVetoFiles;
 359         char *szHideFiles;
 360         char *szVetoOplockFiles;
 361         char *comment;
 362         char *force_user;
 363         char *force_group;
 364         char **readlist;
 365         char **writelist;
 366         char **printer_admin;
 367         char *volume;
 368         char *fstype;
 369         char **szVfsObjects;
 370         char *szMSDfsProxy;
 371         char *szAioWriteBehind;
 372         char *szDfree;
 373         int iMinPrintSpace;
 374         int iMaxPrintJobs;
 375         int iMaxReportedPrintJobs;
 376         int iWriteCacheSize;
 377         int iCreate_mask;
 378         int iCreate_force_mode;
 379         int iSecurity_mask;
 380         int iSecurity_force_mode;
 381         int iDir_mask;
 382         int iDir_force_mode;
 383         int iDir_Security_mask;
 384         int iDir_Security_force_mode;
 385         int iMaxConnections;
 386         int iDefaultCase;
 387         int iPrinting;
 388         int iOplockContentionLimit;
 389         int iCSCPolicy;
 390         int iBlock_size;
 391         int iDfreeCacheTime;
 392         BOOL bPreexecClose;
 393         BOOL bRootpreexecClose;
 394         int  iCaseSensitive;
 395         BOOL bCasePreserve;
 396         BOOL bShortCasePreserve;
 397         BOOL bHideDotFiles;
 398         BOOL bHideSpecialFiles;
 399         BOOL bHideUnReadable;
 400         BOOL bHideUnWriteableFiles;
 401         BOOL bBrowseable;
 402         BOOL bAvailable;
 403         BOOL bRead_only;
 404         BOOL bNo_set_dir;
 405         BOOL bGuest_only;
 406         BOOL bGuest_ok;
 407         BOOL bPrint_ok;
 408         BOOL bMap_system;
 409         BOOL bMap_hidden;
 410         BOOL bMap_archive;
 411         BOOL bStoreDosAttributes;
 412         BOOL bLocking;
 413         int iStrictLocking;
 414         BOOL bPosixLocking;
 415         BOOL bShareModes;
 416         BOOL bOpLocks;
 417         BOOL bLevel2OpLocks;
 418         BOOL bOnlyUser;
 419         BOOL bMangledNames;
 420         BOOL bWidelinks;
 421         BOOL bSymlinks;
 422         BOOL bSyncAlways;
 423         BOOL bStrictAllocate;
 424         BOOL bStrictSync;
 425         char magic_char;
 426         BOOL *copymap;
 427         BOOL bDeleteReadonly;
 428         BOOL bFakeOplocks;
 429         BOOL bDeleteVetoFiles;
 430         BOOL bDosFilemode;
 431         BOOL bDosFiletimes;
 432         BOOL bDosFiletimeResolution;
 433         BOOL bFakeDirCreateTimes;
 434         BOOL bBlockingLocks;
 435         BOOL bInheritPerms;
 436         BOOL bInheritACLS;
 437         BOOL bInheritOwner;
 438         BOOL bMSDfsRoot;
 439         BOOL bUseClientDriver;
 440         BOOL bDefaultDevmode;
 441         BOOL bForcePrintername;
 442         BOOL bNTAclSupport;
 443         BOOL bForceUnknownAclUser;
 444         BOOL bUseSendfile;
 445         BOOL bProfileAcls;
 446         BOOL bMap_acl_inherit;
 447         BOOL bAfs_Share;
 448         BOOL bEASupport;
 449         BOOL bAclCheckPermissions;
 450         BOOL bAclMapFullControl;
 451         BOOL bAclGroupControl;
 452         int iallocation_roundup_size;
 453         int iAioReadSize;
 454         int iAioWriteSize;
 455         int iMap_readonly;
 456         param_opt_struct *param_opt;
 457
 458         char dummy[3];          /* for alignment */
 459 } service;
 460
 461
 462 /* This is a default service used to prime a services structure */
 463 static service sDefault = {
 464         True,                   /* valid */
 465         False,                  /* not autoloaded */
 466         0,                      /* not a usershare */
 467         (time_t)0,              /* No last mod time */
 468         NULL,                   /* szService */
 469         NULL,                   /* szPath */
 470         NULL,                   /* szUsername */
 471         NULL,                   /* szInvalidUsers */
 472         NULL,                   /* szValidUsers */
 473         NULL,                   /* szAdminUsers */
 474         NULL,                   /* szCopy */
 475         NULL,                   /* szInclude */
 476         NULL,                   /* szPreExec */
 477         NULL,                   /* szPostExec */
 478         NULL,                   /* szRootPreExec */
 479         NULL,                   /* szRootPostExec */
 480         NULL,                   /* szCupsOptions */
 481         NULL,                   /* szPrintcommand */
 482         NULL,                   /* szLpqcommand */
 483         NULL,                   /* szLprmcommand */
 484         NULL,                   /* szLppausecommand */
 485         NULL,                   /* szLpresumecommand */
 486         NULL,                   /* szQueuepausecommand */
 487         NULL,                   /* szQueueresumecommand */
 488         NULL,                   /* szPrintername */
 489         NULL,                   /* szDontdescend */
 490         NULL,                   /* szHostsallow */
 491         NULL,                   /* szHostsdeny */
 492         NULL,                   /* szMagicScript */
 493         NULL,                   /* szMagicOutput */
 494         NULL,                   /* szMangledMap */
 495         NULL,                   /* szVetoFiles */
 496         NULL,                   /* szHideFiles */
 497         NULL,                   /* szVetoOplockFiles */
 498         NULL,                   /* comment */
 499         NULL,                   /* force user */
 500         NULL,                   /* force group */
 501         NULL,                   /* readlist */
 502         NULL,                   /* writelist */
 503         NULL,                   /* printer admin */
 504         NULL,                   /* volume */
 505         NULL,                   /* fstype */
 506         NULL,                   /* vfs objects */
 507         NULL,                   /* szMSDfsProxy */
 508         NULL,                   /* szAioWriteBehind */
 509         NULL,                   /* szDfree */
 510         0,                      /* iMinPrintSpace */
 511         1000,                   /* iMaxPrintJobs */
 512         0,                      /* iMaxReportedPrintJobs */
 513         0,                      /* iWriteCacheSize */
 514         0744,                   /* iCreate_mask */
 515         0000,                   /* iCreate_force_mode */
 516         0777,                   /* iSecurity_mask */
 517         0,                      /* iSecurity_force_mode */
 518         0755,                   /* iDir_mask */
 519         0000,                   /* iDir_force_mode */
 520         0777,                   /* iDir_Security_mask */
 521         0,                      /* iDir_Security_force_mode */
 522         0,                      /* iMaxConnections */
 523         CASE_LOWER,             /* iDefaultCase */
 524         DEFAULT_PRINTING,       /* iPrinting */
 525         2,                      /* iOplockContentionLimit */
 526         0,                      /* iCSCPolicy */
 527         1024,                   /* iBlock_size */
 528         0,                      /* iDfreeCacheTime */
 529         False,                  /* bPreexecClose */
 530         False,                  /* bRootpreexecClose */
 531         Auto,                   /* case sensitive */
 532         True,                   /* case preserve */
 533         True,                   /* short case preserve */
 534         True,                   /* bHideDotFiles */
 535         False,                  /* bHideSpecialFiles */
 536         False,                  /* bHideUnReadable */
 537         False,                  /* bHideUnWriteableFiles */
 538         True,                   /* bBrowseable */
 539         True,                   /* bAvailable */
 540         True,                   /* bRead_only */
 541         True,                   /* bNo_set_dir */
 542         False,                  /* bGuest_only */
 543         False,                  /* bGuest_ok */
 544         False,                  /* bPrint_ok */
 545         False,                  /* bMap_system */
 546         False,                  /* bMap_hidden */
 547         True,                   /* bMap_archive */
 548         False,                  /* bStoreDosAttributes */
 549         True,                   /* bLocking */
 550         True,                   /* iStrictLocking */
 551         True,                   /* bPosixLocking */
 552         True,                   /* bShareModes */
 553         True,                   /* bOpLocks */
 554         True,                   /* bLevel2OpLocks */
 555         False,                  /* bOnlyUser */
 556         True,                   /* bMangledNames */
 557         True,                   /* bWidelinks */
 558         True,                   /* bSymlinks */
 559         False,                  /* bSyncAlways */
 560         False,                  /* bStrictAllocate */
 561         False,                  /* bStrictSync */
 562         '~',                    /* magic char */
 563         NULL,                   /* copymap */
 564         False,                  /* bDeleteReadonly */
 565         False,                  /* bFakeOplocks */
 566         False,                  /* bDeleteVetoFiles */
 567         False,                  /* bDosFilemode */
 568         True,                   /* bDosFiletimes */
 569         False,                  /* bDosFiletimeResolution */
 570         False,                  /* bFakeDirCreateTimes */
 571         True,                   /* bBlockingLocks */
 572         False,                  /* bInheritPerms */
 573         False,                  /* bInheritACLS */
 574         False,                  /* bInheritOwner */
 575         False,                  /* bMSDfsRoot */
 576         False,                  /* bUseClientDriver */
 577         False,                  /* bDefaultDevmode */
 578         False,                  /* bForcePrintername */
 579         True,                   /* bNTAclSupport */
 580         False,                  /* bForceUnknownAclUser */
 581         False,                  /* bUseSendfile */
 582         False,                  /* bProfileAcls */
 583         False,                  /* bMap_acl_inherit */
 584         False,                  /* bAfs_Share */
 585         False,                  /* bEASupport */
 586         True,                   /* bAclCheckPermissions */
 587         True,                   /* bAclMapFullControl */
 588         False,                  /* bAclGroupControl */
 589         SMB_ROUNDUP_ALLOCATION_SIZE,            /* iallocation_roundup_size */
 590         0,                      /* iAioReadSize */
 591         0,                      /* iAioWriteSize */
 592         MAP_READONLY_YES,       /* iMap_readonly */
 593
 594         NULL,                   /* Parametric options */
 595
 596         ""                      /* dummy */
 597 };
 598
 599 /* local variables */
 600 static service **ServicePtrs = NULL;
 601 static int iNumServices = 0;
 602 static int iServiceIndex = 0;
 603 static TDB_CONTEXT *ServiceHash;
 604 static int *invalid_services = NULL;
 605 static int num_invalid_services = 0;
 606 static BOOL bInGlobalSection = True;
 607 static BOOL bGlobalOnly = False;
 608 static int server_role;
 609 static int default_server_announce;
 610
 611 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
 612
 613 /* prototypes for the special type handlers */
 614 static BOOL handle_include( int snum, const char *pszParmValue, char **ptr);
 615 static BOOL handle_copy( int snum, const char *pszParmValue, char **ptr);
 616 static BOOL handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
 617 static BOOL handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
 618 static BOOL handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
 619 static BOOL handle_debug_list( int snum, const char *pszParmValue, char **ptr );
 620 static BOOL handle_workgroup( int snum, const char *pszParmValue, char **ptr );
 621 static BOOL handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
 622 static BOOL handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
 623 static BOOL handle_charset( int snum, const char *pszParmValue, char **ptr );
 624 static BOOL handle_acl_compatibility( int snum, const char *pszParmValue, char **ptr);
 625 static BOOL handle_printing( int snum, const char *pszParmValue, char **ptr);
 626
 627 static void set_server_role(void);
 628 static void set_default_server_announce_type(void);
 629 static void set_allowed_client_auth(void);
 630
 631 static const struct enum_list enum_protocol[] = {
 632         {PROTOCOL_NT1, "NT1"},
 633         {PROTOCOL_LANMAN2, "LANMAN2"},
 634         {PROTOCOL_LANMAN1, "LANMAN1"},
 635         {PROTOCOL_CORE, "CORE"},
 636         {PROTOCOL_COREPLUS, "COREPLUS"},
 637         {PROTOCOL_COREPLUS, "CORE+"},
 638         {-1, NULL}
 639 };
 640
 641 static const struct enum_list enum_security[] = {
 642         {SEC_SHARE, "SHARE"},
 643         {SEC_USER, "USER"},
 644         {SEC_SERVER, "SERVER"},
 645         {SEC_DOMAIN, "DOMAIN"},
 646 #ifdef HAVE_ADS
 647         {SEC_ADS, "ADS"},
 648 #endif
 649         {-1, NULL}
 650 };
 651
 652 static const struct enum_list enum_printing[] = {
 653         {PRINT_SYSV, "sysv"},
 654         {PRINT_AIX, "aix"},
 655         {PRINT_HPUX, "hpux"},
 656         {PRINT_BSD, "bsd"},
 657         {PRINT_QNX, "qnx"},
 658         {PRINT_PLP, "plp"},
 659         {PRINT_LPRNG, "lprng"},
 660         {PRINT_CUPS, "cups"},
 661         {PRINT_IPRINT, "iprint"},
 662         {PRINT_LPRNT, "nt"},
 663         {PRINT_LPROS2, "os2"},
 664 #ifdef DEVELOPER
 665         {PRINT_TEST, "test"},
 666         {PRINT_VLP, "vlp"},
 667 #endif /* DEVELOPER */
 668         {-1, NULL}
 669 };
 670
 671 static const struct enum_list enum_ldap_ssl[] = {
 672 #ifdef WITH_LDAP_SAMCONFIG
 673         {LDAP_SSL_ON, "Yes"},
 674         {LDAP_SSL_ON, "yes"},
 675         {LDAP_SSL_ON, "on"},
 676         {LDAP_SSL_ON, "On"},
 677 #endif
 678         {LDAP_SSL_OFF, "no"},
 679         {LDAP_SSL_OFF, "No"},
 680         {LDAP_SSL_OFF, "off"},
 681         {LDAP_SSL_OFF, "Off"},
 682         {LDAP_SSL_START_TLS, "start tls"},
 683         {LDAP_SSL_START_TLS, "Start_tls"},
 684         {-1, NULL}
 685 };
 686
 687 static const struct enum_list enum_ldap_passwd_sync[] = {
 688         {LDAP_PASSWD_SYNC_OFF, "no"},
 689         {LDAP_PASSWD_SYNC_OFF, "No"},
 690         {LDAP_PASSWD_SYNC_OFF, "off"},
 691         {LDAP_PASSWD_SYNC_OFF, "Off"},
 692         {LDAP_PASSWD_SYNC_ON, "Yes"},
 693         {LDAP_PASSWD_SYNC_ON, "yes"},
 694         {LDAP_PASSWD_SYNC_ON, "on"},
 695         {LDAP_PASSWD_SYNC_ON, "On"},
 696         {LDAP_PASSWD_SYNC_ONLY, "Only"},
 697         {LDAP_PASSWD_SYNC_ONLY, "only"},
 698         {-1, NULL}
 699 };
 700
 701 /* Types of machine we can announce as. */
 702 #define ANNOUNCE_AS_NT_SERVER 1
 703 #define ANNOUNCE_AS_WIN95 2
 704 #define ANNOUNCE_AS_WFW 3
 705 #define ANNOUNCE_AS_NT_WORKSTATION 4
 706
 707 static const struct enum_list enum_announce_as[] = {
 708         {ANNOUNCE_AS_NT_SERVER, "NT"},
 709         {ANNOUNCE_AS_NT_SERVER, "NT Server"},
 710         {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
 711         {ANNOUNCE_AS_WIN95, "win95"},
 712         {ANNOUNCE_AS_WFW, "WfW"},
 713         {-1, NULL}
 714 };
 715
 716 static const struct enum_list enum_map_readonly[] = {
 717         {MAP_READONLY_NO, "no"},
 718         {MAP_READONLY_NO, "false"},
 719         {MAP_READONLY_NO, "0"},
 720         {MAP_READONLY_YES, "yes"},
 721         {MAP_READONLY_YES, "true"},
 722         {MAP_READONLY_YES, "1"},
 723         {MAP_READONLY_PERMISSIONS, "permissions"},
 724         {MAP_READONLY_PERMISSIONS, "perms"},
 725         {-1, NULL}
 726 };
 727
 728 static const struct enum_list enum_case[] = {
 729         {CASE_LOWER, "lower"},
 730         {CASE_UPPER, "upper"},
 731         {-1, NULL}
 732 };
 733
 734 static const struct enum_list enum_bool_auto[] = {
 735         {False, "No"},
 736         {False, "False"},
 737         {False, "0"},
 738         {True, "Yes"},
 739         {True, "True"},
 740         {True, "1"},
 741         {Auto, "Auto"},
 742         {-1, NULL}
 743 };
 744
 745 /* Client-side offline caching policy types */
 746 #define CSC_POLICY_MANUAL 0
 747 #define CSC_POLICY_DOCUMENTS 1
 748 #define CSC_POLICY_PROGRAMS 2
 749 #define CSC_POLICY_DISABLE 3
 750
 751 static const struct enum_list enum_csc_policy[] = {
 752         {CSC_POLICY_MANUAL, "manual"},
 753         {CSC_POLICY_DOCUMENTS, "documents"},
 754         {CSC_POLICY_PROGRAMS, "programs"},
 755         {CSC_POLICY_DISABLE, "disable"},
 756         {-1, NULL}
 757 };
 758
 759 /* SMB signing types. */
 760 static const struct enum_list enum_smb_signing_vals[] = {
 761         {False, "No"},
 762         {False, "False"},
 763         {False, "0"},
 764         {False, "Off"},
 765         {False, "disabled"},
 766         {True, "Yes"},
 767         {True, "True"},
 768         {True, "1"},
 769         {True, "On"},
 770         {True, "enabled"},
 771         {Auto, "auto"},
 772         {Required, "required"},
 773         {Required, "mandatory"},
 774         {Required, "force"},
 775         {Required, "forced"},
 776         {Required, "enforced"},
 777         {-1, NULL}
 778 };
 779
 780
 781 /*
 782    Do you want session setups at user level security with a invalid
 783    password to be rejected or allowed in as guest? WinNT rejects them
 784    but it can be a pain as it means "net view" needs to use a password
 785
 786    You have 3 choices in the setting of map_to_guest:
 787
 788    "Never" means session setups with an invalid password
 789    are rejected. This is the default.
 790
 791    "Bad User" means session setups with an invalid password
 792    are rejected, unless the username does not exist, in which case it
 793    is treated as a guest login
 794
 795    "Bad Password" means session setups with an invalid password
 796    are treated as a guest login
 797
 798    Note that map_to_guest only has an effect in user or server
 799    level security.
 800 */
 801
 802 static const struct enum_list enum_map_to_guest[] = {
 803         {NEVER_MAP_TO_GUEST, "Never"},
 804         {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
 805         {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
 806         {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
 807         {-1, NULL}
 808 };
 809
 810 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
 811  *
 812  * The FLAG_HIDE is explicit. Paramters set this way do NOT appear in any edit
 813  * screen in SWAT. This is used to exclude parameters as well as to squash all
 814  * parameters that have been duplicated by pseudonyms.
 815  *
 816  * NOTE: To display a parameter in BASIC view set FLAG_BASIC
 817  *       Any parameter that does NOT have FLAG_ADVANCED will not disply at all
 818  *       Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
 819  *        respective views.
 820  *
 821  * NOTE2: Handling of duplicated (synonym) paramters:
 822  *      Only the first occurance of a parameter should be enabled by FLAG_BASIC
 823  *      and/or FLAG_ADVANCED. All duplicates following the first mention should be
 824  *      set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
 825  *      name first, and all synonyms must follow it with the FLAG_HIDE attribute.
 826  */
 827
 828 static struct parm_struct parm_table[] = {
 829         {N_("Base Options"), P_SEP, P_SEPARATOR},
 830
 831         {"dos charset", P_STRING, P_GLOBAL, &Globals.dos_charset, handle_charset, NULL, FLAG_ADVANCED},
 832         {"unix charset", P_STRING, P_GLOBAL, &Globals.unix_charset, handle_charset, NULL, FLAG_ADVANCED},
 833         {"display charset", P_STRING, P_GLOBAL, &Globals.display_charset, handle_charset, NULL, FLAG_ADVANCED},
 834         {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 835         {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 836         {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_HIDE},
 837         {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkgroup, handle_workgroup, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 838 #ifdef WITH_ADS
 839         {"realm", P_USTRING, P_GLOBAL, &Globals.szRealm, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 840 #endif
 841         {"netbios name", P_USTRING, P_GLOBAL, &Globals.szNetbiosName, handle_netbios_name, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 842         {"netbios aliases", P_LIST, P_GLOBAL, &Globals.szNetbiosAliases, handle_netbios_aliases,  NULL, FLAG_ADVANCED},
 843         {"netbios scope", P_USTRING, P_GLOBAL, &Globals.szNetbiosScope, handle_netbios_scope,  NULL, FLAG_ADVANCED},
 844         {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED },
 845         {"interfaces", P_LIST, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 846         {"bind interfaces only", P_BOOL, P_GLOBAL, &Globals.bBindInterfacesOnly, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 847
 848         {N_("Security Options"), P_SEP, P_SEPARATOR},
 849
 850         {"security", P_ENUM, P_GLOBAL, &Globals.security, NULL, enum_security, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 851         {"auth methods", P_LIST, P_GLOBAL, &Globals.AuthMethods, NULL, NULL, FLAG_ADVANCED},
 852         {"encrypt passwords", P_BOOL, P_GLOBAL, &Globals.bEncryptPasswords, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 853         {"update encrypted", P_BOOL, P_GLOBAL, &Globals.bUpdateEncrypt, NULL, NULL, FLAG_ADVANCED},
 854         {"client schannel", P_ENUM, P_GLOBAL, &Globals.clientSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 855         {"server schannel", P_ENUM, P_GLOBAL, &Globals.serverSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 856         {"allow trusted domains", P_BOOL, P_GLOBAL, &Globals.bAllowTrustedDomains, NULL, NULL, FLAG_ADVANCED},
 857         {"hosts equiv", P_STRING, P_GLOBAL, &Globals.szHostsEquiv, NULL, NULL, FLAG_ADVANCED},
 858         {"map to guest", P_ENUM, P_GLOBAL, &Globals.map_to_guest, NULL, enum_map_to_guest, FLAG_ADVANCED},
 859         {"null passwords", P_BOOL, P_GLOBAL, &Globals.bNullPasswords, NULL, NULL, FLAG_ADVANCED},
 860         {"obey pam restrictions", P_BOOL, P_GLOBAL, &Globals.bObeyPamRestrictions, NULL, NULL, FLAG_ADVANCED},
 861         {"password server", P_STRING, P_GLOBAL, &Globals.szPasswordServer, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 862         {"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, FLAG_ADVANCED},
 863         {"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, FLAG_ADVANCED},
 864         {"passdb backend", P_STRING, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 865         {"algorithmic rid base", P_INTEGER, P_GLOBAL, &Globals.AlgorithmicRidBase, NULL, NULL, FLAG_ADVANCED},
 866         {"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_ADVANCED},
 867         {"root dir", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 868         {"root", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 869         {"guest account", P_STRING, P_GLOBAL, &Globals.szGuestaccount, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
 870         {"enable privileges", P_BOOL, P_GLOBAL, &Globals.bEnablePrivileges, NULL, NULL, FLAG_ADVANCED},
 871
 872         {"pam password change", P_BOOL, P_GLOBAL, &Globals.bPamPasswordChange, NULL, NULL, FLAG_ADVANCED},
 873         {"passwd program", P_STRING, P_GLOBAL, &Globals.szPasswdProgram, NULL, NULL, FLAG_ADVANCED},
 874         {"passwd chat", P_STRING, P_GLOBAL, &Globals.szPasswdChat, NULL, NULL, FLAG_ADVANCED},
 875         {"passwd chat debug", P_BOOL, P_GLOBAL, &Globals.bPasswdChatDebug, NULL, NULL, FLAG_ADVANCED},
 876         {"passwd chat timeout", P_INTEGER, P_GLOBAL, &Globals.iPasswdChatTimeout, NULL, NULL, FLAG_ADVANCED},
 877         {"check password script", P_STRING, P_GLOBAL, &Globals.szCheckPasswordScript, NULL, NULL, FLAG_ADVANCED},
 878         {"username map", P_STRING, P_GLOBAL, &Globals.szUsernameMap, NULL, NULL, FLAG_ADVANCED},
 879         {"password level", P_INTEGER, P_GLOBAL, &Globals.pwordlevel, NULL, NULL, FLAG_ADVANCED},
 880         {"username level", P_INTEGER, P_GLOBAL, &Globals.unamelevel, NULL, NULL, FLAG_ADVANCED},
 881         {"unix password sync", P_BOOL, P_GLOBAL, &Globals.bUnixPasswdSync, NULL, NULL, FLAG_ADVANCED},
 882         {"restrict anonymous", P_INTEGER, P_GLOBAL, &Globals.restrict_anonymous, NULL, NULL, FLAG_ADVANCED},
 883         {"lanman auth", P_BOOL, P_GLOBAL, &Globals.bLanmanAuth, NULL, NULL, FLAG_ADVANCED},
 884         {"ntlm auth", P_BOOL, P_GLOBAL, &Globals.bNTLMAuth, NULL, NULL, FLAG_ADVANCED},
 885         {"client NTLMv2 auth", P_BOOL, P_GLOBAL, &Globals.bClientNTLMv2Auth, NULL, NULL, FLAG_ADVANCED},
 886         {"client lanman auth", P_BOOL, P_GLOBAL, &Globals.bClientLanManAuth, NULL, NULL, FLAG_ADVANCED},
 887         {"client plaintext auth", P_BOOL, P_GLOBAL, &Globals.bClientPlaintextAuth, NULL, NULL, FLAG_ADVANCED},
 888
 889         {"username", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 890         {"user", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 891         {"users", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 892
 893         {"invalid users", P_LIST, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 894         {"valid users", P_LIST, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 895         {"admin users", P_LIST, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 896         {"read list", P_LIST, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 897         {"write list", P_LIST, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 898         {"printer admin", P_LIST, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED },
 899         {"force user", P_STRING, P_LOCAL, &sDefault.force_user, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 900         {"force group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 901         {"group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED},
 902
 903         {"read only", P_BOOL, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE},
 904         {"write ok", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 905         {"writeable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 906         {"writable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 907
 908         {"acl check permissions", P_BOOL, P_LOCAL, &sDefault.bAclCheckPermissions, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 909         {"acl group control", P_BOOL, P_LOCAL, &sDefault.bAclGroupControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 910         {"acl map full control", P_BOOL, P_LOCAL, &sDefault.bAclMapFullControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 911         {"create mask", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 912         {"create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_HIDE},
 913         {"force create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 914         {"security mask", P_OCTAL, P_LOCAL, &sDefault.iSecurity_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 915         {"force security mode", P_OCTAL, P_LOCAL, &sDefault.iSecurity_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 916         {"directory mask", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 917         {"directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 918         {"force directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 919         {"directory security mask", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 920         {"force directory security mode", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 921         {"force unknown acl user", P_BOOL, P_LOCAL, &sDefault.bForceUnknownAclUser, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 922         {"inherit permissions", P_BOOL, P_LOCAL, &sDefault.bInheritPerms, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 923         {"inherit acls", P_BOOL, P_LOCAL, &sDefault.bInheritACLS, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 924         {"inherit owner", P_BOOL, P_LOCAL, &sDefault.bInheritOwner, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 925         {"guest only", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 926         {"only guest", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_HIDE},
 927
 928         {"guest ok", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 929         {"public", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_HIDE},
 930
 931         {"only user", P_BOOL, P_LOCAL, &sDefault.bOnlyUser, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
 932         {"hosts allow", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 933         {"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_HIDE},
 934         {"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 935         {"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_HIDE},
 936         {"preload modules", P_LIST, P_GLOBAL, &Globals.szPreloadModules, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 937         {"use kerberos keytab", P_BOOL, P_GLOBAL, &Globals.bUseKerberosKeytab, NULL, NULL, FLAG_ADVANCED},
 938
 939         {N_("Logging Options"), P_SEP, P_SEPARATOR},
 940
 941         {"log level", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_ADVANCED},
 942         {"debuglevel", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_HIDE},
 943         {"syslog", P_INTEGER, P_GLOBAL, &Globals.syslog, NULL, NULL, FLAG_ADVANCED},
 944         {"syslog only", P_BOOL, P_GLOBAL, &Globals.bSyslogOnly, NULL, NULL, FLAG_ADVANCED},
 945         {"log file", P_STRING, P_GLOBAL, &Globals.szLogFile, NULL, NULL, FLAG_ADVANCED},
 946
 947         {"max log size", P_INTEGER, P_GLOBAL, &Globals.max_log_size, NULL, NULL, FLAG_ADVANCED},
 948         {"debug timestamp", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 949         {"timestamp logs", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 950         {"debug hires timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugHiresTimestamp, NULL, NULL, FLAG_ADVANCED},
 951         {"debug pid", P_BOOL, P_GLOBAL, &Globals.bDebugPid, NULL, NULL, FLAG_ADVANCED},
 952         {"debug uid", P_BOOL, P_GLOBAL, &Globals.bDebugUid, NULL, NULL, FLAG_ADVANCED},
 953
 954         {N_("Protocol Options"), P_SEP, P_SEPARATOR},
 955
 956         {"allocation roundup size", P_INTEGER, P_LOCAL, &sDefault.iallocation_roundup_size, NULL, NULL, FLAG_ADVANCED},
 957         {"aio read size", P_INTEGER, P_LOCAL, &sDefault.iAioReadSize, NULL, NULL, FLAG_ADVANCED},
 958         {"aio write size", P_INTEGER, P_LOCAL, &sDefault.iAioWriteSize, NULL, NULL, FLAG_ADVANCED},
 959         {"aio write behind", P_STRING, P_LOCAL, &sDefault.szAioWriteBehind, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
 960         {"smb ports", P_STRING, P_GLOBAL, &Globals.smb_ports, NULL, NULL, FLAG_ADVANCED},
 961         {"large readwrite", P_BOOL, P_GLOBAL, &Globals.bLargeReadwrite, NULL, NULL, FLAG_ADVANCED},
 962         {"max protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 963         {"protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 964         {"min protocol", P_ENUM, P_GLOBAL, &Globals.minprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 965         {"read bmpx", P_BOOL, P_GLOBAL, &Globals.bReadbmpx, NULL, NULL, FLAG_ADVANCED},
 966         {"read raw", P_BOOL, P_GLOBAL, &Globals.bReadRaw, NULL, NULL, FLAG_ADVANCED},
 967         {"write raw", P_BOOL, P_GLOBAL, &Globals.bWriteRaw, NULL, NULL, FLAG_ADVANCED},
 968         {"disable netbios", P_BOOL, P_GLOBAL, &Globals.bDisableNetbios, NULL, NULL, FLAG_ADVANCED},
 969         {"reset on zero vc", P_BOOL, P_GLOBAL, &Globals.bResetOnZeroVC, NULL, NULL, FLAG_ADVANCED},
 970
 971         {"acl compatibility", P_STRING, P_GLOBAL, &Globals.szAclCompat, handle_acl_compatibility,  NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 972         {"defer sharing violations", P_BOOL, P_GLOBAL, &Globals.bDeferSharingViolations, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 973         {"ea support", P_BOOL, P_LOCAL, &sDefault.bEASupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 974         {"nt acl support", P_BOOL, P_LOCAL, &sDefault.bNTAclSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 975         {"nt pipe support", P_BOOL, P_GLOBAL, &Globals.bNTPipeSupport, NULL, NULL, FLAG_ADVANCED},
 976         {"nt status support", P_BOOL, P_GLOBAL, &Globals.bNTStatusSupport, NULL, NULL, FLAG_ADVANCED},
 977         {"profile acls", P_BOOL, P_LOCAL, &sDefault.bProfileAcls, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 978
 979         {"announce version", P_STRING, P_GLOBAL, &Globals.szAnnounceVersion, NULL, NULL, FLAG_ADVANCED},
 980         {"announce as", P_ENUM, P_GLOBAL, &Globals.announce_as, NULL, enum_announce_as,  FLAG_ADVANCED},
 981         {"map acl inherit", P_BOOL, P_LOCAL, &sDefault.bMap_acl_inherit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 982         {"afs share", P_BOOL, P_LOCAL, &sDefault.bAfs_Share, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 983         {"max mux", P_INTEGER, P_GLOBAL, &Globals.max_mux, NULL, NULL, FLAG_ADVANCED},
 984         {"max xmit", P_INTEGER, P_GLOBAL, &Globals.max_xmit, NULL, NULL, FLAG_ADVANCED},
 985
 986         {"name resolve order", P_STRING, P_GLOBAL, &Globals.szNameResolveOrder, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 987         {"max ttl", P_INTEGER, P_GLOBAL, &Globals.max_ttl, NULL, NULL, FLAG_ADVANCED},
 988         {"max wins ttl", P_INTEGER, P_GLOBAL, &Globals.max_wins_ttl, NULL, NULL, FLAG_ADVANCED},
 989         {"min wins ttl", P_INTEGER, P_GLOBAL, &Globals.min_wins_ttl, NULL, NULL, FLAG_ADVANCED},
 990         {"time server", P_BOOL, P_GLOBAL, &Globals.bTimeServer, NULL, NULL, FLAG_ADVANCED},
 991         {"unix extensions", P_BOOL, P_GLOBAL, &Globals.bUnixExtensions, NULL, NULL, FLAG_ADVANCED},
 992         {"use spnego", P_BOOL, P_GLOBAL, &Globals.bUseSpnego, NULL, NULL, FLAG_ADVANCED},
 993         {"client signing", P_ENUM, P_GLOBAL, &Globals.client_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
 994         {"server signing", P_ENUM, P_GLOBAL, &Globals.server_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
 995         {"client use spnego", P_BOOL, P_GLOBAL, &Globals.bClientUseSpnego, NULL, NULL, FLAG_ADVANCED},
 996
 997         {"enable asu support", P_BOOL, P_GLOBAL, &Globals.bASUSupport, NULL, NULL, FLAG_ADVANCED},
 998         {"svcctl list", P_LIST, P_GLOBAL, &Globals.szServicesList, NULL, NULL, FLAG_ADVANCED},
 999
1000         {N_("Tuning Options"), P_SEP, P_SEPARATOR},
1001
1002         {"block size", P_INTEGER, P_LOCAL, &sDefault.iBlock_size, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1003         {"change notify timeout", P_INTEGER, P_GLOBAL, &Globals.change_notify_timeout, NULL, NULL, FLAG_ADVANCED},
1004         {"deadtime", P_INTEGER, P_GLOBAL, &Globals.deadtime, NULL, NULL, FLAG_ADVANCED},
1005         {"getwd cache", P_BOOL, P_GLOBAL, &use_getwd_cache, NULL, NULL, FLAG_ADVANCED},
1006         {"keepalive", P_INTEGER, P_GLOBAL, &keepalive, NULL, NULL, FLAG_ADVANCED},
1007         {"kernel change notify", P_BOOL, P_GLOBAL, &Globals.bKernelChangeNotify, NULL, NULL, FLAG_ADVANCED},
1008         {"fam change notify", P_BOOL, P_GLOBAL, &Globals.bFamChangeNotify, NULL, NULL, FLAG_ADVANCED},
1009
1010         {"lpq cache time", P_INTEGER, P_GLOBAL, &Globals.lpqcachetime, NULL, NULL, FLAG_ADVANCED},
1011         {"max smbd processes", P_INTEGER, P_GLOBAL, &Globals.iMaxSmbdProcesses, NULL, NULL, FLAG_ADVANCED},
1012         {"max connections", P_INTEGER, P_LOCAL, &sDefault.iMaxConnections, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1013         {"paranoid server security", P_BOOL, P_GLOBAL, &Globals.paranoid_server_security, NULL, NULL, FLAG_ADVANCED},
1014         {"max disk size", P_INTEGER, P_GLOBAL, &Globals.maxdisksize, NULL, NULL, FLAG_ADVANCED},
1015         {"max open files", P_INTEGER, P_GLOBAL, &Globals.max_open_files, NULL, NULL, FLAG_ADVANCED},
1016         {"min print space", P_INTEGER, P_LOCAL, &sDefault.iMinPrintSpace, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1017
1018         {"socket options", P_GSTRING, P_GLOBAL, user_socket_options, NULL, NULL, FLAG_ADVANCED},
1019         {"strict allocate", P_BOOL, P_LOCAL, &sDefault.bStrictAllocate, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1020         {"strict sync", P_BOOL, P_LOCAL, &sDefault.bStrictSync, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1021         {"sync always", P_BOOL, P_LOCAL, &sDefault.bSyncAlways, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1022         {"use mmap", P_BOOL, P_GLOBAL, &Globals.bUseMmap, NULL, NULL, FLAG_ADVANCED},
1023         {"use sendfile", P_BOOL, P_LOCAL, &sDefault.bUseSendfile, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1024         {"hostname lookups", P_BOOL, P_GLOBAL, &Globals.bHostnameLookups, NULL, NULL, FLAG_ADVANCED},
1025         {"write cache size", P_INTEGER, P_LOCAL, &sDefault.iWriteCacheSize, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
1026
1027         {"name cache timeout", P_INTEGER, P_GLOBAL, &Globals.name_cache_timeout, NULL, NULL, FLAG_ADVANCED},
1028
1029         {N_("Printing Options"), P_SEP, P_SEPARATOR},
1030
1031         {"max reported print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxReportedPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1032         {"max print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1033         {"load printers", P_BOOL, P_GLOBAL, &Globals.bLoadPrinters, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1034         {"printcap cache time", P_INTEGER, P_GLOBAL, &Globals.PrintcapCacheTime, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1035         {"printcap name", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1036         {"printcap", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_HIDE},
1037         {"printable", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1038         {"print ok", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_HIDE},
1039         {"printing", P_ENUM, P_LOCAL, &sDefault.iPrinting, handle_printing, enum_printing, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1040         {"cups options", P_STRING, P_LOCAL, &sDefault.szCupsOptions, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1041         {"cups server", P_STRING, P_GLOBAL, &Globals.szCupsServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1042         {"iprint server", P_STRING, P_GLOBAL, &Globals.szIPrintServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1043         {"print command", P_STRING, P_LOCAL, &sDefault.szPrintcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1044         {"disable spoolss", P_BOOL, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1045         {"enable spoolss", P_BOOLREV, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_HIDE},
1046         {"lpq command", P_STRING, P_LOCAL, &sDefault.szLpqcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1047         {"lprm command", P_STRING, P_LOCAL, &sDefault.szLprmcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1048         {"lppause command", P_STRING, P_LOCAL, &sDefault.szLppausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1049         {"lpresume command", P_STRING, P_LOCAL, &sDefault.szLpresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1050         {"queuepause command", P_STRING, P_LOCAL, &sDefault.szQueuepausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1051         {"queueresume command", P_STRING, P_LOCAL, &sDefault.szQueueresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1052
1053         {"enumports command", P_STRING, P_GLOBAL, &Globals.szEnumPortsCommand, NULL, NULL, FLAG_ADVANCED},
1054         {"addprinter command", P_STRING, P_GLOBAL, &Globals.szAddPrinterCommand, NULL, NULL, FLAG_ADVANCED},
1055         {"deleteprinter command", P_STRING, P_GLOBAL, &Globals.szDeletePrinterCommand, NULL, NULL, FLAG_ADVANCED},
1056         {"show add printer wizard", P_BOOL, P_GLOBAL, &Globals.bMsAddPrinterWizard, NULL, NULL, FLAG_ADVANCED},
1057         {"os2 driver map", P_STRING, P_GLOBAL, &Globals.szOs2DriverMap, NULL, NULL, FLAG_ADVANCED},
1058
1059         {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1060         {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_HIDE},
1061         {"use client driver", P_BOOL, P_LOCAL, &sDefault.bUseClientDriver, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1062         {"default devmode", P_BOOL, P_LOCAL, &sDefault.bDefaultDevmode, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1063         {"force printername", P_BOOL, P_LOCAL, &sDefault.bForcePrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1064
1065         {N_("Filename Handling"), P_SEP, P_SEPARATOR},
1066         {"mangling method", P_STRING, P_GLOBAL, &Globals.szManglingMethod, NULL, NULL, FLAG_ADVANCED},
1067         {"mangle prefix", P_INTEGER, P_GLOBAL, &Globals.mangle_prefix, NULL, NULL, FLAG_ADVANCED},
1068
1069         {"default case", P_ENUM, P_LOCAL, &sDefault.iDefaultCase, NULL, enum_case, FLAG_ADVANCED | FLAG_SHARE},
1070         {"case sensitive", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1071         {"casesignames", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE},
1072         {"preserve case", P_BOOL, P_LOCAL, &sDefault.bCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1073         {"short preserve case", P_BOOL, P_LOCAL, &sDefault.bShortCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1074         {"mangling char", P_CHAR, P_LOCAL, &sDefault.magic_char, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1075         {"hide dot files", P_BOOL, P_LOCAL, &sDefault.bHideDotFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1076         {"hide special files", P_BOOL, P_LOCAL, &sDefault.bHideSpecialFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1077         {"hide unreadable", P_BOOL, P_LOCAL, &sDefault.bHideUnReadable, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1078         {"hide unwriteable files", P_BOOL, P_LOCAL, &sDefault.bHideUnWriteableFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1079         {"delete veto files", P_BOOL, P_LOCAL, &sDefault.bDeleteVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1080         {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1081         {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1082         {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1083         {"map archive", P_BOOL, P_LOCAL, &sDefault.bMap_archive, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1084         {"map hidden", P_BOOL, P_LOCAL, &sDefault.bMap_hidden, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1085         {"map system", P_BOOL, P_LOCAL, &sDefault.bMap_system, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1086         {"map readonly", P_ENUM, P_LOCAL, &sDefault.iMap_readonly, NULL, enum_map_readonly, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1087         {"mangled names", P_BOOL, P_LOCAL, &sDefault.bMangledNames, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1088         {"mangled map", P_STRING, P_LOCAL, &sDefault.szMangledMap, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_DEPRECATED },
1089         {"max stat cache size", P_INTEGER, P_GLOBAL, &Globals.iMaxStatCacheSize, NULL, NULL, FLAG_ADVANCED},
1090         {"stat cache", P_BOOL, P_GLOBAL, &Globals.bStatCache, NULL, NULL, FLAG_ADVANCED},
1091         {"store dos attributes", P_BOOL, P_LOCAL, &sDefault.bStoreDosAttributes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1092
1093         {N_("Domain Options"), P_SEP, P_SEPARATOR},
1094
1095         {"machine password timeout", P_INTEGER, P_GLOBAL, &Globals.machine_password_timeout, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1096
1097         {N_("Logon Options"), P_SEP, P_SEPARATOR},
1098
1099         {"add user script", P_STRING, P_GLOBAL, &Globals.szAddUserScript, NULL, NULL, FLAG_ADVANCED},
1100         {"rename user script", P_STRING, P_GLOBAL, &Globals.szRenameUserScript, NULL, NULL, FLAG_ADVANCED},
1101         {"delete user script", P_STRING, P_GLOBAL, &Globals.szDelUserScript, NULL, NULL, FLAG_ADVANCED},
1102         {"add group script", P_STRING, P_GLOBAL, &Globals.szAddGroupScript, NULL, NULL, FLAG_ADVANCED},
1103         {"delete group script", P_STRING, P_GLOBAL, &Globals.szDelGroupScript, NULL, NULL, FLAG_ADVANCED},
1104         {"add user to group script", P_STRING, P_GLOBAL, &Globals.szAddUserToGroupScript, NULL, NULL, FLAG_ADVANCED},
1105         {"delete user from group script", P_STRING, P_GLOBAL, &Globals.szDelUserFromGroupScript, NULL, NULL, FLAG_ADVANCED},
1106         {"set primary group script", P_STRING, P_GLOBAL, &Globals.szSetPrimaryGroupScript, NULL, NULL, FLAG_ADVANCED},
1107         {"add machine script", P_STRING, P_GLOBAL, &Globals.szAddMachineScript, NULL, NULL, FLAG_ADVANCED},
1108         {"shutdown script", P_STRING, P_GLOBAL, &Globals.szShutdownScript, NULL, NULL, FLAG_ADVANCED},
1109         {"abort shutdown script", P_STRING, P_GLOBAL, &Globals.szAbortShutdownScript, NULL, NULL, FLAG_ADVANCED},
1110         {"username map script", P_STRING, P_GLOBAL, &Globals.szUsernameMapScript, NULL, NULL, FLAG_ADVANCED},
1111
1112         {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, FLAG_ADVANCED},
1113         {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, FLAG_ADVANCED},
1114         {"logon drive", P_STRING, P_GLOBAL, &Globals.szLogonDrive, NULL, NULL, FLAG_ADVANCED},
1115         {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, FLAG_ADVANCED},
1116         {"domain logons", P_BOOL, P_GLOBAL, &Globals.bDomainLogons, NULL, NULL, FLAG_ADVANCED},
1117
1118         {N_("Browse Options"), P_SEP, P_SEPARATOR},
1119
1120         {"os level", P_INTEGER, P_GLOBAL, &Globals.os_level, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1121         {"lm announce", P_ENUM, P_GLOBAL, &Globals.lm_announce, NULL, enum_bool_auto, FLAG_ADVANCED},
1122         {"lm interval", P_INTEGER, P_GLOBAL, &Globals.lm_interval, NULL, NULL, FLAG_ADVANCED},
1123         {"preferred master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1124         {"prefered master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_HIDE},
1125         {"local master", P_BOOL, P_GLOBAL, &Globals.bLocalMaster, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1126         {"domain master", P_ENUM, P_GLOBAL, &Globals.bDomainMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1127         {"browse list", P_BOOL, P_GLOBAL, &Globals.bBrowseList, NULL, NULL, FLAG_ADVANCED},
1128         {"browseable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1129         {"browsable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_HIDE},
1130         {"enhanced browsing", P_BOOL, P_GLOBAL, &Globals.enhanced_browsing, NULL, NULL, FLAG_ADVANCED},
1131
1132         {N_("WINS Options"), P_SEP, P_SEPARATOR},
1133
1134         {"dns proxy", P_BOOL, P_GLOBAL, &Globals.bDNSproxy, NULL, NULL, FLAG_ADVANCED},
1135         {"wins proxy", P_BOOL, P_GLOBAL, &Globals.bWINSproxy, NULL, NULL, FLAG_ADVANCED},
1136
1137         {"wins server", P_LIST, P_GLOBAL, &Globals.szWINSservers, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1138         {"wins support", P_BOOL, P_GLOBAL, &Globals.bWINSsupport, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1139         {"wins hook", P_STRING, P_GLOBAL, &Globals.szWINSHook, NULL, NULL, FLAG_ADVANCED},
1140         {"wins partners", P_STRING, P_GLOBAL, &Globals.szWINSPartners, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1141
1142         {N_("Locking Options"), P_SEP, P_SEPARATOR},
1143
1144         {"blocking locks", P_BOOL, P_LOCAL, &sDefault.bBlockingLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1145         {"csc policy", P_ENUM, P_LOCAL, &sDefault.iCSCPolicy, NULL, enum_csc_policy, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1146         {"fake oplocks", P_BOOL, P_LOCAL, &sDefault.bFakeOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1147         {"kernel oplocks", P_BOOL, P_GLOBAL, &Globals.bKernelOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1148         {"locking", P_BOOL, P_LOCAL, &sDefault.bLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1149         {"lock spin count", P_INTEGER, P_GLOBAL, &Globals.iLockSpinCount, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1150         {"lock spin time", P_INTEGER, P_GLOBAL, &Globals.iLockSpinTime, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1151
1152         {"oplocks", P_BOOL, P_LOCAL, &sDefault.bOpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1153         {"level2 oplocks", P_BOOL, P_LOCAL, &sDefault.bLevel2OpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1154         {"oplock break wait time", P_INTEGER, P_GLOBAL, &Globals.oplock_break_wait_time, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1155         {"oplock contention limit", P_INTEGER, P_LOCAL, &sDefault.iOplockContentionLimit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1156         {"posix locking", P_BOOL, P_LOCAL, &sDefault.bPosixLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1157         {"strict locking", P_ENUM, P_LOCAL, &sDefault.iStrictLocking, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1158         {"share modes", P_BOOL, P_LOCAL,  &sDefault.bShareModes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1159
1160         {N_("Ldap Options"), P_SEP, P_SEPARATOR},
1161
1162 #ifdef WITH_LDAP_SAMCONFIG
1163         {"ldap server", P_STRING, P_GLOBAL, &Globals.szLdapServer, NULL, NULL, FLAG_ADVANCED},
1164         {"ldap port", P_INTEGER, P_GLOBAL, &Globals.ldap_port, NULL, NULL, FLAG_ADVANCED},
1165 #endif
1166         {"ldap admin dn", P_STRING, P_GLOBAL, &Globals.szLdapAdminDn, NULL, NULL, FLAG_ADVANCED},
1167         {"ldap delete dn", P_BOOL, P_GLOBAL, &Globals.ldap_delete_dn, NULL, NULL, FLAG_ADVANCED},
1168         {"ldap group suffix", P_STRING, P_GLOBAL, &Globals.szLdapGroupSuffix, NULL, NULL, FLAG_ADVANCED},
1169         {"ldap idmap suffix", P_STRING, P_GLOBAL, &Globals.szLdapIdmapSuffix, NULL, NULL, FLAG_ADVANCED},
1170         {"ldap machine suffix", P_STRING, P_GLOBAL, &Globals.szLdapMachineSuffix, NULL, NULL, FLAG_ADVANCED},
1171         {"ldap passwd sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_ADVANCED},
1172         {"ldap password sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_HIDE},
1173         {"ldap replication sleep", P_INTEGER, P_GLOBAL, &Globals.ldap_replication_sleep, NULL, NULL, FLAG_ADVANCED},
1174         {"ldap suffix", P_STRING, P_GLOBAL, &Globals.szLdapSuffix, NULL, NULL, FLAG_ADVANCED},
1175         {"ldap ssl", P_ENUM, P_GLOBAL, &Globals.ldap_ssl, NULL, enum_ldap_ssl, FLAG_ADVANCED},
1176         {"ldap timeout", P_INTEGER, P_GLOBAL, &Globals.ldap_timeout, NULL, NULL, FLAG_ADVANCED},
1177         {"ldap page size", P_INTEGER, P_GLOBAL, &Globals.ldap_page_size, NULL, NULL, FLAG_ADVANCED},
1178         {"ldap user suffix", P_STRING, P_GLOBAL, &Globals.szLdapUserSuffix, NULL, NULL, FLAG_ADVANCED},
1179
1180         {N_("Miscellaneous Options"), P_SEP, P_SEPARATOR},
1181         {"add share command", P_STRING, P_GLOBAL, &Globals.szAddShareCommand, NULL, NULL, FLAG_ADVANCED},
1182         {"change share command", P_STRING, P_GLOBAL, &Globals.szChangeShareCommand, NULL, NULL, FLAG_ADVANCED},
1183         {"delete share command", P_STRING, P_GLOBAL, &Globals.szDeleteShareCommand, NULL, NULL, FLAG_ADVANCED},
1184
1185         {N_("EventLog Options"), P_SEP, P_SEPARATOR},
1186         {"eventlog list",  P_LIST, P_GLOBAL, &Globals.szEventLogs, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
1187
1188         {"config file", P_STRING, P_GLOBAL, &Globals.szConfigFile, NULL, NULL, FLAG_HIDE},
1189         {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1190         {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1191         {"lock directory", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_ADVANCED},
1192         {"lock dir", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_HIDE},
1193         {"pid directory", P_STRING, P_GLOBAL, &Globals.szPidDir, NULL, NULL, FLAG_ADVANCED},
1194 #ifdef WITH_UTMP
1195         {"utmp directory", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, FLAG_ADVANCED},
1196         {"wtmp directory", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, FLAG_ADVANCED},
1197         {"utmp", P_BOOL, P_GLOBAL, &Globals.bUtmp, NULL, NULL, FLAG_ADVANCED},
1198 #endif
1199
1200         {"default service", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1201         {"default", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1202         {"message command", P_STRING, P_GLOBAL, &Globals.szMsgCommand, NULL, NULL, FLAG_ADVANCED},
1203         {"dfree cache time", P_INTEGER, P_LOCAL, &sDefault.iDfreeCacheTime, NULL, NULL, FLAG_ADVANCED},
1204         {"dfree command", P_STRING, P_LOCAL, &sDefault.szDfree, NULL, NULL, FLAG_ADVANCED},
1205         {"get quota command", P_STRING, P_GLOBAL, &Globals.szGetQuota, NULL, NULL, FLAG_ADVANCED},
1206         {"set quota command", P_STRING, P_GLOBAL, &Globals.szSetQuota, NULL, NULL, FLAG_ADVANCED},
1207         {"remote announce", P_STRING, P_GLOBAL, &Globals.szRemoteAnnounce, NULL, NULL, FLAG_ADVANCED},
1208         {"remote browse sync", P_STRING, P_GLOBAL, &Globals.szRemoteBrowseSync, NULL, NULL, FLAG_ADVANCED},
1209         {"socket address", P_STRING, P_GLOBAL, &Globals.szSocketAddress, NULL, NULL, FLAG_ADVANCED},
1210         {"homedir map", P_STRING, P_GLOBAL, &Globals.szNISHomeMapName, NULL, NULL, FLAG_ADVANCED},
1211         {"afs username map", P_STRING, P_GLOBAL, &Globals.szAfsUsernameMap, NULL, NULL, FLAG_ADVANCED},
1212         {"afs token lifetime", P_INTEGER, P_GLOBAL, &Globals.iAfsTokenLifetime, NULL, NULL, FLAG_ADVANCED},
1213         {"log nt token command", P_STRING, P_GLOBAL, &Globals.szLogNtTokenCommand, NULL, NULL, FLAG_ADVANCED},
1214         {"time offset", P_INTEGER, P_GLOBAL, &extra_time_offset, NULL, NULL, FLAG_ADVANCED},
1215         {"NIS homedir", P_BOOL, P_GLOBAL, &Globals.bNISHomeMap, NULL, NULL, FLAG_ADVANCED},
1216         {"-valid", P_BOOL, P_LOCAL, &sDefault.valid, NULL, NULL, FLAG_HIDE},
1217
1218         {"copy", P_STRING, P_LOCAL, &sDefault.szCopy, handle_copy, NULL, FLAG_HIDE},
1219         {"include", P_STRING, P_LOCAL, &sDefault.szInclude, handle_include, NULL, FLAG_HIDE},
1220         {"preexec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1221         {"exec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED},
1222
1223         {"preexec close", P_BOOL, P_LOCAL, &sDefault.bPreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1224         {"postexec", P_STRING, P_LOCAL, &sDefault.szPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1225         {"root preexec", P_STRING, P_LOCAL, &sDefault.szRootPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1226         {"root preexec close", P_BOOL, P_LOCAL, &sDefault.bRootpreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1227         {"root postexec", P_STRING, P_LOCAL, &sDefault.szRootPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1228         {"available", P_BOOL, P_LOCAL, &sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1229         {"usershare max shares", P_INTEGER, P_GLOBAL, &Globals.iUsershareMaxShares, NULL, NULL, FLAG_ADVANCED},
1230         {"usershare owner only", P_BOOL, P_GLOBAL, &Globals.bUsershareOwnerOnly, NULL, NULL, FLAG_ADVANCED},
1231         {"usershare path", P_STRING, P_GLOBAL, &Globals.szUsersharePath, NULL, NULL, FLAG_ADVANCED},
1232         {"usershare prefix allow list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixAllowList, NULL, NULL, FLAG_ADVANCED},
1233         {"usershare prefix deny list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixDenyList, NULL, NULL, FLAG_ADVANCED},
1234         {"usershare template share", P_STRING, P_GLOBAL, &Globals.szUsershareTemplateShare, NULL, NULL, FLAG_ADVANCED},
1235         {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1236         {"fstype", P_STRING, P_LOCAL, &sDefault.fstype, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1237         {"set directory", P_BOOLREV, P_LOCAL, &sDefault.bNo_set_dir, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1238         {"wide links", P_BOOL, P_LOCAL, &sDefault.bWidelinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1239         {"follow symlinks", P_BOOL, P_LOCAL, &sDefault.bSymlinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1240         {"dont descend", P_STRING, P_LOCAL, &sDefault.szDontdescend, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1241         {"magic script", P_STRING, P_LOCAL, &sDefault.szMagicScript, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1242         {"magic output", P_STRING, P_LOCAL, &sDefault.szMagicOutput, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1243         {"delete readonly", P_BOOL, P_LOCAL, &sDefault.bDeleteReadonly, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1244         {"dos filemode", P_BOOL, P_LOCAL, &sDefault.bDosFilemode, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1245         {"dos filetimes", P_BOOL, P_LOCAL, &sDefault.bDosFiletimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1246         {"dos filetime resolution", P_BOOL, P_LOCAL, &sDefault.bDosFiletimeResolution, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1247
1248         {"fake directory create times", P_BOOL, P_LOCAL, &sDefault.bFakeDirCreateTimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1249         {"panic action", P_STRING, P_GLOBAL, &Globals.szPanicAction, NULL, NULL, FLAG_ADVANCED},
1250
1251         {N_("VFS module options"), P_SEP, P_SEPARATOR},
1252
1253         {"vfs objects", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1254         {"vfs object", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_HIDE},
1255
1256
1257         {"msdfs root", P_BOOL, P_LOCAL, &sDefault.bMSDfsRoot, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1258         {"msdfs proxy", P_STRING, P_LOCAL, &sDefault.szMSDfsProxy, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1259         {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, FLAG_ADVANCED},
1260
1261         {N_("Winbind options"), P_SEP, P_SEPARATOR},
1262
1263         {"passdb expand explicit", P_BOOL, P_GLOBAL, &Globals.bPassdbExpandExplicit, NULL, NULL, FLAG_ADVANCED},
1264         {"idmap backend", P_LIST, P_GLOBAL, &Globals.szIdmapBackend, NULL, NULL, FLAG_ADVANCED},
1265         {"idmap uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_ADVANCED},
1266         {"winbind uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_HIDE},
1267         {"idmap gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_ADVANCED},
1268         {"winbind gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_HIDE},
1269         {"template homedir", P_STRING, P_GLOBAL, &Globals.szTemplateHomedir, NULL, NULL, FLAG_ADVANCED},
1270         {"template shell", P_STRING, P_GLOBAL, &Globals.szTemplateShell, NULL, NULL, FLAG_ADVANCED},
1271         {"winbind separator", P_STRING, P_GLOBAL, &Globals.szWinbindSeparator, NULL, NULL, FLAG_ADVANCED},
1272         {"winbind cache time", P_INTEGER, P_GLOBAL, &Globals.winbind_cache_time, NULL, NULL, FLAG_ADVANCED},
1273         {"winbind enum users", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumUsers, NULL, NULL, FLAG_ADVANCED},
1274         {"winbind enum groups", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumGroups, NULL, NULL, FLAG_ADVANCED},
1275         {"winbind use default domain", P_BOOL, P_GLOBAL, &Globals.bWinbindUseDefaultDomain, NULL, NULL, FLAG_ADVANCED},
1276         {"winbind trusted domains only", P_BOOL, P_GLOBAL, &Globals.bWinbindTrustedDomainsOnly, NULL, NULL, FLAG_ADVANCED},
1277         {"winbind nested groups", P_BOOL, P_GLOBAL, &Globals.bWinbindNestedGroups, NULL, NULL, FLAG_ADVANCED},
1278         {"winbind max idle children", P_INTEGER, P_GLOBAL, &Globals.winbind_max_idle_children, NULL, NULL, FLAG_ADVANCED},
1279         {"winbind nss info", P_LIST, P_GLOBAL, &Globals.szWinbindNssInfo, NULL, NULL, FLAG_ADVANCED},
1280         {"winbind refresh tickets", P_BOOL, P_GLOBAL, &Globals.bWinbindRefreshTickets, NULL, NULL, FLAG_ADVANCED},
1281         {"winbind offline logon", P_BOOL, P_GLOBAL, &Globals.bWinbindOfflineLogon, NULL, NULL, FLAG_ADVANCED},
1282
1283         {NULL,  P_BOOL,  P_NONE,  NULL,  NULL,  NULL,  0}
1284 };
1285
1286 /***************************************************************************
1287  Initialise the sDefault parameter structure for the printer values.
1288 ***************************************************************************/
1289
1290 static void init_printer_values(service *pService)
1291 {
1292         /* choose defaults depending on the type of printing */
1293         switch (pService->iPrinting) {
1294                 case PRINT_BSD:
1295                 case PRINT_AIX:
1296                 case PRINT_LPRNT:
1297                 case PRINT_LPROS2:
1298                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1299                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1300                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1301                         break;
1302
1303                 case PRINT_LPRNG:
1304                 case PRINT_PLP:
1305                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1306                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1307                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1308                         string_set(&pService->szQueuepausecommand, "lpc stop '%p'");
1309                         string_set(&pService->szQueueresumecommand, "lpc start '%p'");
1310                         string_set(&pService->szLppausecommand, "lpc hold '%p' %j");
1311                         string_set(&pService->szLpresumecommand, "lpc release '%p' %j");
1312                         break;
1313
1314                 case PRINT_CUPS:
1315                 case PRINT_IPRINT:
1316 #ifdef HAVE_CUPS
1317                         /* set the lpq command to contain the destination printer
1318                            name only.  This is used by cups_queue_get() */
1319                         string_set(&pService->szLpqcommand, "%p");
1320                         string_set(&pService->szLprmcommand, "");
1321                         string_set(&pService->szPrintcommand, "");
1322                         string_set(&pService->szLppausecommand, "");
1323                         string_set(&pService->szLpresumecommand, "");
1324                         string_set(&pService->szQueuepausecommand, "");
1325                         string_set(&pService->szQueueresumecommand, "");
1326 #else
1327                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1328                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1329                         string_set(&pService->szPrintcommand, "lpr -P'%p' %s; rm %s");
1330                         string_set(&pService->szLppausecommand, "lp -i '%p-%j' -H hold");
1331                         string_set(&pService->szLpresumecommand, "lp -i '%p-%j' -H resume");
1332                         string_set(&pService->szQueuepausecommand, "disable '%p'");
1333                         string_set(&pService->szQueueresumecommand, "enable '%p'");
1334 #endif /* HAVE_CUPS */
1335                         break;
1336
1337                 case PRINT_SYSV:
1338                 case PRINT_HPUX:
1339                         string_set(&pService->szLpqcommand, "lpstat -o%p");
1340                         string_set(&pService->szLprmcommand, "cancel %p-%j");
1341                         string_set(&pService->szPrintcommand, "lp -c -d%p %s; rm %s");
1342                         string_set(&pService->szQueuepausecommand, "disable %p");
1343                         string_set(&pService->szQueueresumecommand, "enable %p");
1344 #ifndef HPUX
1345                         string_set(&pService->szLppausecommand, "lp -i %p-%j -H hold");
1346                         string_set(&pService->szLpresumecommand, "lp -i %p-%j -H resume");
1347 #endif /* HPUX */
1348                         break;
1349
1350                 case PRINT_QNX:
1351                         string_set(&pService->szLpqcommand, "lpq -P%p");
1352                         string_set(&pService->szLprmcommand, "lprm -P%p %j");
1353                         string_set(&pService->szPrintcommand, "lp -r -P%p %s");
1354                         break;
1355
1356 #ifdef DEVELOPER
1357         case PRINT_TEST:
1358         case PRINT_VLP:
1359                 string_set(&pService->szPrintcommand, "vlp print %p %s");
1360                 string_set(&pService->szLpqcommand, "vlp lpq %p");
1361                 string_set(&pService->szLprmcommand, "vlp lprm %p %j");
1362                 string_set(&pService->szLppausecommand, "vlp lppause %p %j");
1363                 string_set(&pService->szLpresumecommand, "vlp lpresum %p %j");
1364                 string_set(&pService->szQueuepausecommand, "vlp queuepause %p");
1365                 string_set(&pService->szQueueresumecommand, "vlp queueresume %p");
1366                 break;
1367 #endif /* DEVELOPER */
1368
1369         }
1370 }
1371
1372 /***************************************************************************
1373  Initialise the global parameter structure.
1374 ***************************************************************************/
1375
1376 static void init_globals(BOOL first_time_only)
1377 {
1378         static BOOL done_init = False;
1379         pstring s;
1380
1381         /* If requested to initialize only once and we've already done it... */
1382         if (first_time_only && done_init) {
1383                 /* ... then we have nothing more to do */
1384                 return;
1385         }
1386
1387         if (!done_init) {
1388                 int i;
1389
1390                 /* The logfile can be set before this is invoked. Free it if so. */
1391                 if (Globals.szLogFile != NULL) {
1392                         string_free(&Globals.szLogFile);
1393                         Globals.szLogFile = NULL;
1394                 }
1395
1396                 memset((void *)&Globals, '\0', sizeof(Globals));
1397
1398                 for (i = 0; parm_table[i].label; i++)
1399                         if ((parm_table[i].type == P_STRING ||
1400                              parm_table[i].type == P_USTRING) &&
1401                             parm_table[i].ptr)
1402                                 string_set((char **)parm_table[i].ptr, "");
1403
1404                 string_set(&sDefault.fstype, FSTYPE_STRING);
1405
1406                 init_printer_values(&sDefault);
1407
1408                 done_init = True;
1409         }
1410
1411
1412         DEBUG(3, ("Initialising global parameters\n"));
1413
1414         string_set(&Globals.szSMBPasswdFile, dyn_SMB_PASSWD_FILE);
1415         string_set(&Globals.szPrivateDir, dyn_PRIVATE_DIR);
1416
1417         /* use the new 'hash2' method by default, with a prefix of 1 */
1418         string_set(&Globals.szManglingMethod, "hash2");
1419         Globals.mangle_prefix = 1;
1420
1421         string_set(&Globals.szGuestaccount, GUEST_ACCOUNT);
1422
1423         /* using UTF8 by default allows us to support all chars */
1424         string_set(&Globals.unix_charset, DEFAULT_UNIX_CHARSET);
1425
1426 #if defined(HAVE_NL_LANGINFO) && defined(CODESET)
1427         /* If the system supports nl_langinfo(), try to grab the value
1428            from the user's locale */
1429         string_set(&Globals.display_charset, "LOCALE");
1430 #else
1431         string_set(&Globals.display_charset, DEFAULT_DISPLAY_CHARSET);
1432 #endif
1433
1434         /* Use codepage 850 as a default for the dos character set */
1435         string_set(&Globals.dos_charset, DEFAULT_DOS_CHARSET);
1436
1437         /*
1438          * Allow the default PASSWD_CHAT to be overridden in local.h.
1439          */
1440         string_set(&Globals.szPasswdChat, DEFAULT_PASSWD_CHAT);
1441
1442         set_global_myname(myhostname());
1443         string_set(&Globals.szNetbiosName,global_myname());
1444
1445         set_global_myworkgroup(WORKGROUP);
1446         string_set(&Globals.szWorkgroup, lp_workgroup());
1447
1448         string_set(&Globals.szPasswdProgram, "");
1449         string_set(&Globals.szPidDir, dyn_PIDDIR);
1450         string_set(&Globals.szLockDir, dyn_LOCKDIR);
1451         string_set(&Globals.szSocketAddress, "0.0.0.0");
1452         pstrcpy(s, "Samba ");
1453         pstrcat(s, SAMBA_VERSION_STRING);
1454         string_set(&Globals.szServerString, s);
1455         slprintf(s, sizeof(s) - 1, "%d.%d", DEFAULT_MAJOR_VERSION,
1456                  DEFAULT_MINOR_VERSION);
1457         string_set(&Globals.szAnnounceVersion, s);
1458 #ifdef DEVELOPER
1459         string_set(&Globals.szPanicAction, "/bin/sleep 999999999");
1460 #endif
1461
1462         pstrcpy(user_socket_options, DEFAULT_SOCKET_OPTIONS);
1463
1464         string_set(&Globals.szLogonDrive, "");
1465         /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
1466         string_set(&Globals.szLogonHome, "\\\\%N\\%U");
1467         string_set(&Globals.szLogonPath, "\\\\%N\\%U\\profile");
1468
1469         string_set(&Globals.szNameResolveOrder, "lmhosts wins host bcast");
1470         string_set(&Globals.szPasswordServer, "*");
1471
1472         Globals.AlgorithmicRidBase = BASE_RID;
1473
1474         Globals.bLoadPrinters = True;
1475         Globals.PrintcapCacheTime = 750;        /* 12.5 minutes */
1476
1477         /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
1478         /* Discovered by 2 days of pain by Don McCall @ HP :-). */
1479         Globals.max_xmit = 0x4104;
1480         Globals.max_mux = 50;   /* This is *needed* for profile support. */
1481         Globals.lpqcachetime = 30;      /* changed to handle large print servers better -- jerry */
1482         Globals.bDisableSpoolss = False;
1483         Globals.iMaxSmbdProcesses = 0;/* no limit specified */
1484         Globals.pwordlevel = 0;
1485         Globals.unamelevel = 0;
1486         Globals.deadtime = 0;
1487         Globals.bLargeReadwrite = True;
1488         Globals.max_log_size = 5000;
1489         Globals.max_open_files = MAX_OPEN_FILES;
1490         Globals.maxprotocol = PROTOCOL_NT1;
1491         Globals.minprotocol = PROTOCOL_CORE;
1492         Globals.security = SEC_USER;
1493         Globals.paranoid_server_security = True;
1494         Globals.bEncryptPasswords = True;
1495         Globals.bUpdateEncrypt = False;
1496         Globals.clientSchannel = Auto;
1497         Globals.serverSchannel = Auto;
1498         Globals.bReadRaw = True;
1499         Globals.bWriteRaw = True;
1500         Globals.bReadbmpx = False;
1501         Globals.bNullPasswords = False;
1502         Globals.bObeyPamRestrictions = False;
1503         Globals.syslog = 1;
1504         Globals.bSyslogOnly = False;
1505         Globals.bTimestampLogs = True;
1506         string_set(&Globals.szLogLevel, "0");
1507         Globals.bDebugHiresTimestamp = False;
1508         Globals.bDebugPid = False;
1509         Globals.bDebugUid = False;
1510         Globals.max_ttl = 60 * 60 * 24 * 3;     /* 3 days default. */
1511         Globals.max_wins_ttl = 60 * 60 * 24 * 6;        /* 6 days default. */
1512         Globals.min_wins_ttl = 60 * 60 * 6;     /* 6 hours default. */
1513         Globals.machine_password_timeout = 60 * 60 * 24 * 7;    /* 7 days default. */
1514         Globals.change_notify_timeout = 60;     /* 1 minute default. */
1515         Globals.bKernelChangeNotify = True;     /* On if we have it. */
1516         Globals.bFamChangeNotify = True;        /* On if we have it. */
1517         Globals.lm_announce = 2;        /* = Auto: send only if LM clients found */
1518         Globals.lm_interval = 60;
1519         Globals.announce_as = ANNOUNCE_AS_NT_SERVER;
1520 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
1521         Globals.bNISHomeMap = False;
1522 #ifdef WITH_NISPLUS_HOME
1523         string_set(&Globals.szNISHomeMapName, "auto_home.org_dir");
1524 #else
1525         string_set(&Globals.szNISHomeMapName, "auto.home");
1526 #endif
1527 #endif
1528         Globals.bTimeServer = False;
1529         Globals.bBindInterfacesOnly = False;
1530         Globals.bUnixPasswdSync = False;
1531         Globals.bPamPasswordChange = False;
1532         Globals.bPasswdChatDebug = False;
1533         Globals.iPasswdChatTimeout = 2; /* 2 second default. */
1534         Globals.bNTPipeSupport = True;  /* Do NT pipes by default. */
1535         Globals.bNTStatusSupport = True; /* Use NT status by default. */
1536         Globals.bStatCache = True;      /* use stat cache by default */
1537         Globals.iMaxStatCacheSize = 0;  /* unlimited size in kb by default. */
1538         Globals.restrict_anonymous = 0;
1539         Globals.bClientLanManAuth = True;       /* Do use the LanMan hash if it is available */
1540         Globals.bClientPlaintextAuth = True;    /* Do use a plaintext password if is requested by the server */
1541         Globals.bLanmanAuth = True;     /* Do use the LanMan hash if it is available */
1542         Globals.bNTLMAuth = True;       /* Do use NTLMv1 if it is available (otherwise NTLMv2) */
1543         Globals.bClientNTLMv2Auth = False; /* Client should not use NTLMv2, as we can't tell that the server supports it. */
1544         /* Note, that we will use NTLM2 session security (which is different), if it is available */
1545
1546         Globals.map_to_guest = 0;       /* By Default, "Never" */
1547         Globals.oplock_break_wait_time = 0;     /* By Default, 0 msecs. */
1548         Globals.enhanced_browsing = True;
1549         Globals.iLockSpinCount = 3; /* Try 3 times. */
1550         Globals.iLockSpinTime = 10; /* usec. */
1551 #ifdef MMAP_BLACKLIST
1552         Globals.bUseMmap = False;
1553 #else
1554         Globals.bUseMmap = True;
1555 #endif
1556         Globals.bUnixExtensions = True;
1557         Globals.bResetOnZeroVC = False;
1558
1559         /* hostname lookups can be very expensive and are broken on
1560            a large number of sites (tridge) */
1561         Globals.bHostnameLookups = False;
1562
1563 #ifdef WITH_LDAP_SAMCONFIG
1564         string_set(&Globals.szLdapServer, "localhost");
1565         Globals.ldap_port = 636;
1566         string_set(&Globals.szPassdbBackend, "ldapsam_compat");
1567 #else
1568         string_set(&Globals.szPassdbBackend, "smbpasswd");
1569 #endif /* WITH_LDAP_SAMCONFIG */
1570         string_set(&Globals.szLdapSuffix, "");
1571         string_set(&Globals.szLdapMachineSuffix, "");
1572         string_set(&Globals.szLdapUserSuffix, "");
1573         string_set(&Globals.szLdapGroupSuffix, "");
1574         string_set(&Globals.szLdapIdmapSuffix, "");
1575
1576         string_set(&Globals.szLdapAdminDn, "");
1577         Globals.ldap_ssl = LDAP_SSL_ON;
1578         Globals.ldap_passwd_sync = LDAP_PASSWD_SYNC_OFF;
1579         Globals.ldap_delete_dn = False;
1580         Globals.ldap_replication_sleep = 1000; /* wait 1 sec for replication */
1581         Globals.ldap_timeout = LDAP_CONNECT_DEFAULT_TIMEOUT;
1582         Globals.ldap_page_size = LDAP_PAGE_SIZE;
1583
1584         /* This is what we tell the afs client. in reality we set the token
1585          * to never expire, though, when this runs out the afs client will
1586          * forget the token. Set to 0 to get NEVERDATE.*/
1587         Globals.iAfsTokenLifetime = 604800;
1588
1589 /* these parameters are set to defaults that are more appropriate
1590    for the increasing samba install base:
1591
1592    as a member of the workgroup, that will possibly become a
1593    _local_ master browser (lm = True).  this is opposed to a forced
1594    local master browser startup (pm = True).
1595
1596    doesn't provide WINS server service by default (wsupp = False),
1597    and doesn't provide domain master browser services by default, either.
1598
1599 */
1600
1601         Globals.bMsAddPrinterWizard = True;
1602         Globals.bPreferredMaster = Auto;        /* depending on bDomainMaster */
1603         Globals.os_level = 20;
1604         Globals.bLocalMaster = True;
1605         Globals.bDomainMaster = Auto;   /* depending on bDomainLogons */
1606         Globals.bDomainLogons = False;
1607         Globals.bBrowseList = True;
1608         Globals.bWINSsupport = False;
1609         Globals.bWINSproxy = False;
1610
1611         Globals.bDNSproxy = True;
1612
1613         /* this just means to use them if they exist */
1614         Globals.bKernelOplocks = True;
1615
1616         Globals.bAllowTrustedDomains = True;
1617
1618         string_set(&Globals.szTemplateShell, "/bin/false");
1619         string_set(&Globals.szTemplateHomedir, "/home/%D/%U");
1620         string_set(&Globals.szWinbindSeparator, "\\");
1621         string_set(&Globals.szAclCompat, "");
1622         string_set(&Globals.szCupsServer, "");
1623         string_set(&Globals.szIPrintServer, "");
1624
1625         Globals.winbind_cache_time = 300;       /* 5 minutes */
1626         Globals.bWinbindEnumUsers = True;
1627         Globals.bWinbindEnumGroups = True;
1628         Globals.bWinbindUseDefaultDomain = False;
1629         Globals.bWinbindTrustedDomainsOnly = False;
1630         Globals.bWinbindNestedGroups = False;
1631         Globals.winbind_max_idle_children = 3;
1632         Globals.szWinbindNssInfo = str_list_make("template", NULL);
1633         Globals.bWinbindRefreshTickets = False;
1634         Globals.bWinbindOfflineLogon = False;
1635
1636         Globals.bPassdbExpandExplicit = True;
1637
1638         Globals.name_cache_timeout = 660; /* In seconds */
1639
1640         Globals.bUseSpnego = True;
1641         Globals.bClientUseSpnego = True;
1642
1643         Globals.client_signing = Auto;
1644         Globals.server_signing = False;
1645
1646         Globals.bDeferSharingViolations = True;
1647         string_set(&Globals.smb_ports, SMB_PORTS);
1648
1649         Globals.bEnablePrivileges = True;
1650         Globals.bASUSupport       = False;
1651
1652         /* User defined shares. */
1653         pstrcpy(s, dyn_LOCKDIR);
1654         pstrcat(s, "/usershares");
1655         string_set(&Globals.szUsersharePath, s);
1656         string_set(&Globals.szUsershareTemplateShare, "");
1657         Globals.iUsershareMaxShares = 0;
1658         /* By default disallow sharing of directories not owned by the sharer. */
1659         Globals.bUsershareOwnerOnly = True;
1660 }
1661
1662 static TALLOC_CTX *lp_talloc;
1663
1664 /******************************************************************* a
1665  Free up temporary memory - called from the main loop.
1666 ********************************************************************/
1667
1668 void lp_talloc_free(void)
1669 {
1670         if (!lp_talloc)
1671                 return;
1672         talloc_free(lp_talloc);
1673         lp_talloc = NULL;
1674 }
1675
1676 TALLOC_CTX *tmp_talloc_ctx(void)
1677 {
1678         if (lp_talloc == NULL) {
1679                 lp_talloc = talloc_init(NULL);
1680         }
1681
1682         if (lp_talloc == NULL) {
1683                 smb_panic("Could not create temporary talloc context\n");
1684         }
1685
1686         return lp_talloc;
1687 }
1688
1689 /*******************************************************************
1690  Convenience routine to grab string parameters into temporary memory
1691  and run standard_sub_basic on them. The buffers can be written to by
1692  callers without affecting the source string.
1693 ********************************************************************/
1694
1695 static char *lp_string(const char *s)
1696 {
1697         char *ret, *tmpstr;
1698
1699         /* The follow debug is useful for tracking down memory problems
1700            especially if you have an inner loop that is calling a lp_*()
1701            function that returns a string.  Perhaps this debug should be
1702            present all the time? */
1703
1704 #if 0
1705         DEBUG(10, ("lp_string(%s)\n", s));
1706 #endif
1707
1708         if (!lp_talloc)
1709                 lp_talloc = talloc_init("lp_talloc");
1710
1711         tmpstr = alloc_sub_basic(get_current_username(), s);
1712         if (trim_char(tmpstr, '\"', '\"')) {
1713                 if (strchr(tmpstr,'\"') != NULL) {
1714                         SAFE_FREE(tmpstr);
1715                         tmpstr = alloc_sub_basic(get_current_username(),s);
1716                 }
1717         }
1718         ret = talloc_strdup(lp_talloc, tmpstr);
1719         SAFE_FREE(tmpstr);
1720
1721         return (ret);
1722 }
1723
1724 /*
1725    In this section all the functions that are used to access the
1726    parameters from the rest of the program are defined
1727 */
1728
1729 #define FN_GLOBAL_STRING(fn_name,ptr) \
1730  char *fn_name(void) {return(lp_string(*(char **)(ptr) ? *(char **)(ptr) : ""));}
1731 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1732  const char *fn_name(void) {return(*(const char **)(ptr) ? *(const char **)(ptr) : "");}
1733 #define FN_GLOBAL_LIST(fn_name,ptr) \
1734  const char **fn_name(void) {return(*(const char ***)(ptr));}
1735 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1736  BOOL fn_name(void) {return(*(BOOL *)(ptr));}
1737 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1738  char fn_name(void) {return(*(char *)(ptr));}
1739 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1740  int fn_name(void) {return(*(int *)(ptr));}
1741
1742 #define FN_LOCAL_STRING(fn_name,val) \
1743  char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1744 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1745  const char *fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1746 #define FN_LOCAL_LIST(fn_name,val) \
1747  const char **fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1748 #define FN_LOCAL_BOOL(fn_name,val) \
1749  BOOL fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1750 #define FN_LOCAL_CHAR(fn_name,val) \
1751  char fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1752 #define FN_LOCAL_INTEGER(fn_name,val) \
1753  int fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1754
1755 FN_GLOBAL_STRING(lp_smb_ports, &Globals.smb_ports)
1756 FN_GLOBAL_STRING(lp_dos_charset, &Globals.dos_charset)
1757 FN_GLOBAL_STRING(lp_unix_charset, &Globals.unix_charset)
1758 FN_GLOBAL_STRING(lp_display_charset, &Globals.display_charset)
1759 FN_GLOBAL_STRING(lp_logfile, &Globals.szLogFile)
1760 FN_GLOBAL_STRING(lp_configfile, &Globals.szConfigFile)
1761 FN_GLOBAL_STRING(lp_smb_passwd_file, &Globals.szSMBPasswdFile)
1762 FN_GLOBAL_STRING(lp_private_dir, &Globals.szPrivateDir)
1763 FN_GLOBAL_STRING(lp_serverstring, &Globals.szServerString)
1764 FN_GLOBAL_INTEGER(lp_printcap_cache_time, &Globals.PrintcapCacheTime)
1765 FN_GLOBAL_STRING(lp_enumports_cmd, &Globals.szEnumPortsCommand)
1766 FN_GLOBAL_STRING(lp_addprinter_cmd, &Globals.szAddPrinterCommand)
1767 FN_GLOBAL_STRING(lp_deleteprinter_cmd, &Globals.szDeletePrinterCommand)
1768 FN_GLOBAL_STRING(lp_os2_driver_map, &Globals.szOs2DriverMap)
1769 FN_GLOBAL_STRING(lp_lockdir, &Globals.szLockDir)
1770 FN_GLOBAL_STRING(lp_piddir, &Globals.szPidDir)
1771 FN_GLOBAL_STRING(lp_mangling_method, &Globals.szManglingMethod)
1772 FN_GLOBAL_INTEGER(lp_mangle_prefix, &Globals.mangle_prefix)
1773 FN_GLOBAL_STRING(lp_utmpdir, &Globals.szUtmpDir)
1774 FN_GLOBAL_STRING(lp_wtmpdir, &Globals.szWtmpDir)
1775 FN_GLOBAL_BOOL(lp_utmp, &Globals.bUtmp)
1776 FN_GLOBAL_STRING(lp_rootdir, &Globals.szRootdir)
1777 FN_GLOBAL_STRING(lp_defaultservice, &Globals.szDefaultService)
1778 FN_GLOBAL_STRING(lp_msg_command, &Globals.szMsgCommand)
1779 FN_GLOBAL_STRING(lp_get_quota_command, &Globals.szGetQuota)
1780 FN_GLOBAL_STRING(lp_set_quota_command, &Globals.szSetQuota)
1781 FN_GLOBAL_STRING(lp_hosts_equiv, &Globals.szHostsEquiv)
1782 FN_GLOBAL_STRING(lp_auto_services, &Globals.szAutoServices)
1783 FN_GLOBAL_STRING(lp_passwd_program, &Globals.szPasswdProgram)
1784 FN_GLOBAL_STRING(lp_passwd_chat, &Globals.szPasswdChat)
1785 FN_GLOBAL_STRING(lp_passwordserver, &Globals.szPasswordServer)
1786 FN_GLOBAL_STRING(lp_name_resolve_order, &Globals.szNameResolveOrder)
1787 FN_GLOBAL_STRING(lp_realm, &Globals.szRealm)
1788 FN_GLOBAL_CONST_STRING(lp_afs_username_map, &Globals.szAfsUsernameMap)
1789 FN_GLOBAL_INTEGER(lp_afs_token_lifetime, &Globals.iAfsTokenLifetime)
1790 FN_GLOBAL_STRING(lp_log_nt_token_command, &Globals.szLogNtTokenCommand)
1791 FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
1792 FN_GLOBAL_CONST_STRING(lp_logon_script, &Globals.szLogonScript)
1793 FN_GLOBAL_CONST_STRING(lp_logon_path, &Globals.szLogonPath)
1794 FN_GLOBAL_CONST_STRING(lp_logon_drive, &Globals.szLogonDrive)
1795 FN_GLOBAL_CONST_STRING(lp_logon_home, &Globals.szLogonHome)
1796 FN_GLOBAL_STRING(lp_remote_announce, &Globals.szRemoteAnnounce)
1797 FN_GLOBAL_STRING(lp_remote_browse_sync, &Globals.szRemoteBrowseSync)
1798 FN_GLOBAL_LIST(lp_wins_server_list, &Globals.szWINSservers)
1799 FN_GLOBAL_LIST(lp_interfaces, &Globals.szInterfaces)
1800 FN_GLOBAL_STRING(lp_socket_address, &Globals.szSocketAddress)
1801 FN_GLOBAL_STRING(lp_nis_home_map_name, &Globals.szNISHomeMapName)
1802 static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
1803 FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
1804 FN_GLOBAL_STRING(lp_passdb_backend, &Globals.szPassdbBackend)
1805 FN_GLOBAL_LIST(lp_preload_modules, &Globals.szPreloadModules)
1806 FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
1807 FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
1808 FN_GLOBAL_STRING(lp_renameuser_script, &Globals.szRenameUserScript)
1809 FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
1810
1811 FN_GLOBAL_CONST_STRING(lp_guestaccount, &Globals.szGuestaccount)
1812 FN_GLOBAL_STRING(lp_addgroup_script, &Globals.szAddGroupScript)
1813 FN_GLOBAL_STRING(lp_delgroup_script, &Globals.szDelGroupScript)
1814 FN_GLOBAL_STRING(lp_addusertogroup_script, &Globals.szAddUserToGroupScript)
1815 FN_GLOBAL_STRING(lp_deluserfromgroup_script, &Globals.szDelUserFromGroupScript)
1816 FN_GLOBAL_STRING(lp_setprimarygroup_script, &Globals.szSetPrimaryGroupScript)
1817
1818 FN_GLOBAL_STRING(lp_addmachine_script, &Globals.szAddMachineScript)
1819
1820 FN_GLOBAL_STRING(lp_shutdown_script, &Globals.szShutdownScript)
1821 FN_GLOBAL_STRING(lp_abort_shutdown_script, &Globals.szAbortShutdownScript)
1822 FN_GLOBAL_STRING(lp_username_map_script, &Globals.szUsernameMapScript)
1823
1824 FN_GLOBAL_STRING(lp_check_password_script, &Globals.szCheckPasswordScript)
1825
1826 FN_GLOBAL_STRING(lp_wins_hook, &Globals.szWINSHook)
1827 FN_GLOBAL_STRING(lp_wins_partners, &Globals.szWINSPartners)
1828 FN_GLOBAL_CONST_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
1829 FN_GLOBAL_CONST_STRING(lp_template_shell, &Globals.szTemplateShell)
1830 FN_GLOBAL_CONST_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
1831 FN_GLOBAL_STRING(lp_acl_compatibility, &Globals.szAclCompat)
1832 FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
1833 FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
1834 FN_GLOBAL_BOOL(lp_winbind_use_default_domain, &Globals.bWinbindUseDefaultDomain)
1835 FN_GLOBAL_BOOL(lp_winbind_trusted_domains_only, &Globals.bWinbindTrustedDomainsOnly)
1836 FN_GLOBAL_BOOL(lp_winbind_nested_groups, &Globals.bWinbindNestedGroups)
1837 FN_GLOBAL_BOOL(lp_winbind_refresh_tickets, &Globals.bWinbindRefreshTickets)
1838 FN_GLOBAL_BOOL(lp_winbind_offline_logon, &Globals.bWinbindOfflineLogon)
1839
1840 FN_GLOBAL_LIST(lp_idmap_backend, &Globals.szIdmapBackend)
1841 FN_GLOBAL_BOOL(lp_passdb_expand_explicit, &Globals.bPassdbExpandExplicit)
1842
1843 #ifdef WITH_LDAP_SAMCONFIG
1844 FN_GLOBAL_STRING(lp_ldap_server, &Globals.szLdapServer)
1845 FN_GLOBAL_INTEGER(lp_ldap_port, &Globals.ldap_port)
1846 #endif
1847 FN_GLOBAL_STRING(lp_ldap_suffix, &Globals.szLdapSuffix)
1848 FN_GLOBAL_STRING(lp_ldap_admin_dn, &Globals.szLdapAdminDn)
1849 FN_GLOBAL_INTEGER(lp_ldap_ssl, &Globals.ldap_ssl)
1850 FN_GLOBAL_INTEGER(lp_ldap_passwd_sync, &Globals.ldap_passwd_sync)
1851 FN_GLOBAL_BOOL(lp_ldap_delete_dn, &Globals.ldap_delete_dn)
1852 FN_GLOBAL_INTEGER(lp_ldap_replication_sleep, &Globals.ldap_replication_sleep)
1853 FN_GLOBAL_INTEGER(lp_ldap_timeout, &Globals.ldap_timeout)
1854 FN_GLOBAL_INTEGER(lp_ldap_page_size, &Globals.ldap_page_size)
1855 FN_GLOBAL_STRING(lp_add_share_cmd, &Globals.szAddShareCommand)
1856 FN_GLOBAL_STRING(lp_change_share_cmd, &Globals.szChangeShareCommand)
1857 FN_GLOBAL_STRING(lp_delete_share_cmd, &Globals.szDeleteShareCommand)
1858 FN_GLOBAL_STRING(lp_usershare_path, &Globals.szUsersharePath)
1859 FN_GLOBAL_LIST(lp_usershare_prefix_allow_list, &Globals.szUsersharePrefixAllowList)
1860 FN_GLOBAL_LIST(lp_usershare_prefix_deny_list, &Globals.szUsersharePrefixDenyList)
1861
1862 FN_GLOBAL_LIST(lp_eventlog_list, &Globals.szEventLogs)
1863
1864 FN_GLOBAL_BOOL(lp_usershare_owner_only, &Globals.bUsershareOwnerOnly)
1865 FN_GLOBAL_BOOL(lp_disable_netbios, &Globals.bDisableNetbios)
1866 FN_GLOBAL_BOOL(lp_reset_on_zero_vc, &Globals.bResetOnZeroVC)
1867 FN_GLOBAL_BOOL(lp_ms_add_printer_wizard, &Globals.bMsAddPrinterWizard)
1868 FN_GLOBAL_BOOL(lp_dns_proxy, &Globals.bDNSproxy)
1869 FN_GLOBAL_BOOL(lp_wins_support, &Globals.bWINSsupport)
1870 FN_GLOBAL_BOOL(lp_we_are_a_wins_server, &Globals.bWINSsupport)
1871 FN_GLOBAL_BOOL(lp_wins_proxy, &Globals.bWINSproxy)
1872 FN_GLOBAL_BOOL(lp_local_master, &Globals.bLocalMaster)
1873 FN_GLOBAL_BOOL(lp_domain_logons, &Globals.bDomainLogons)
1874 FN_GLOBAL_BOOL(lp_load_printers, &Globals.bLoadPrinters)
1875 FN_GLOBAL_BOOL(lp_readbmpx, &Globals.bReadbmpx)
1876 FN_GLOBAL_BOOL(lp_readraw, &Globals.bReadRaw)
1877 FN_GLOBAL_BOOL(lp_large_readwrite, &Globals.bLargeReadwrite)
1878 FN_GLOBAL_BOOL(lp_writeraw, &Globals.bWriteRaw)
1879 FN_GLOBAL_BOOL(lp_null_passwords, &Globals.bNullPasswords)
1880 FN_GLOBAL_BOOL(lp_obey_pam_restrictions, &Globals.bObeyPamRestrictions)
1881 FN_GLOBAL_BOOL(lp_encrypted_passwords, &Globals.bEncryptPasswords)
1882 FN_GLOBAL_BOOL(lp_update_encrypted, &Globals.bUpdateEncrypt)
1883 FN_GLOBAL_INTEGER(lp_client_schannel, &Globals.clientSchannel)
1884 FN_GLOBAL_INTEGER(lp_server_schannel, &Globals.serverSchannel)
1885 FN_GLOBAL_BOOL(lp_syslog_only, &Globals.bSyslogOnly)
1886 FN_GLOBAL_BOOL(lp_timestamp_logs, &Globals.bTimestampLogs)
1887 FN_GLOBAL_BOOL(lp_debug_hires_timestamp, &Globals.bDebugHiresTimestamp)
1888 FN_GLOBAL_BOOL(lp_debug_pid, &Globals.bDebugPid)
1889 FN_GLOBAL_BOOL(lp_debug_uid, &Globals.bDebugUid)
1890 FN_GLOBAL_BOOL(lp_browse_list, &Globals.bBrowseList)
1891 FN_GLOBAL_BOOL(lp_nis_home_map, &Globals.bNISHomeMap)
1892 static FN_GLOBAL_BOOL(lp_time_server, &Globals.bTimeServer)
1893 FN_GLOBAL_BOOL(lp_bind_interfaces_only, &Globals.bBindInterfacesOnly)
1894 FN_GLOBAL_BOOL(lp_pam_password_change, &Globals.bPamPasswordChange)
1895 FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync)
1896 FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug)
1897 FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout)
1898 FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport)
1899 FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport)
1900 FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache)
1901 FN_GLOBAL_INTEGER(lp_max_stat_cache_size, &Globals.iMaxStatCacheSize)
1902 FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains)
1903 FN_GLOBAL_INTEGER(lp_restrict_anonymous, &Globals.restrict_anonymous)
1904 FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth)
1905 FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth)
1906 FN_GLOBAL_BOOL(lp_client_plaintext_auth, &Globals.bClientPlaintextAuth)
1907 FN_GLOBAL_BOOL(lp_client_lanman_auth, &Globals.bClientLanManAuth)
1908 FN_GLOBAL_BOOL(lp_client_ntlmv2_auth, &Globals.bClientNTLMv2Auth)
1909 FN_GLOBAL_BOOL(lp_host_msdfs, &Globals.bHostMSDfs)
1910 FN_GLOBAL_BOOL(lp_kernel_oplocks, &Globals.bKernelOplocks)
1911 FN_GLOBAL_BOOL(lp_enhanced_browsing, &Globals.enhanced_browsing)
1912 FN_GLOBAL_BOOL(lp_use_mmap, &Globals.bUseMmap)
1913 FN_GLOBAL_BOOL(lp_unix_extensions, &Globals.bUnixExtensions)
1914 FN_GLOBAL_BOOL(lp_use_spnego, &Globals.bUseSpnego)
1915 FN_GLOBAL_BOOL(lp_client_use_spnego, &Globals.bClientUseSpnego)
1916 FN_GLOBAL_BOOL(lp_hostname_lookups, &Globals.bHostnameLookups)
1917 FN_GLOBAL_BOOL(lp_kernel_change_notify, &Globals.bKernelChangeNotify)
1918 FN_GLOBAL_BOOL(lp_fam_change_notify, &Globals.bFamChangeNotify)
1919 FN_GLOBAL_BOOL(lp_use_kerberos_keytab, &Globals.bUseKerberosKeytab)
1920 FN_GLOBAL_BOOL(lp_defer_sharing_violations, &Globals.bDeferSharingViolations)
1921 FN_GLOBAL_BOOL(lp_enable_privileges, &Globals.bEnablePrivileges)
1922 FN_GLOBAL_BOOL(lp_enable_asu_support, &Globals.bASUSupport)
1923 FN_GLOBAL_INTEGER(lp_os_level, &Globals.os_level)
1924 FN_GLOBAL_INTEGER(lp_max_ttl, &Globals.max_ttl)
1925 FN_GLOBAL_INTEGER(lp_max_wins_ttl, &Globals.max_wins_ttl)
1926 FN_GLOBAL_INTEGER(lp_min_wins_ttl, &Globals.min_wins_ttl)
1927 FN_GLOBAL_INTEGER(lp_max_log_size, &Globals.max_log_size)
1928 FN_GLOBAL_INTEGER(lp_max_open_files, &Globals.max_open_files)
1929 FN_GLOBAL_INTEGER(lp_maxxmit, &Globals.max_xmit)
1930 FN_GLOBAL_INTEGER(lp_maxmux, &Globals.max_mux)
1931 FN_GLOBAL_INTEGER(lp_passwordlevel, &Globals.pwordlevel)
1932 FN_GLOBAL_INTEGER(lp_usernamelevel, &Globals.unamelevel)
1933 FN_GLOBAL_INTEGER(lp_deadtime, &Globals.deadtime)
1934 FN_GLOBAL_INTEGER(lp_maxprotocol, &Globals.maxprotocol)
1935 FN_GLOBAL_INTEGER(lp_minprotocol, &Globals.minprotocol)
1936 FN_GLOBAL_INTEGER(lp_security, &Globals.security)
1937 FN_GLOBAL_LIST(lp_auth_methods, &Globals.AuthMethods)
1938 FN_GLOBAL_BOOL(lp_paranoid_server_security, &Globals.paranoid_server_security)
1939 FN_GLOBAL_INTEGER(lp_maxdisksize, &Globals.maxdisksize)
1940 FN_GLOBAL_INTEGER(lp_lpqcachetime, &Globals.lpqcachetime)
1941 FN_GLOBAL_INTEGER(lp_max_smbd_processes, &Globals.iMaxSmbdProcesses)
1942 FN_GLOBAL_INTEGER(_lp_disable_spoolss, &Globals.bDisableSpoolss)
1943 FN_GLOBAL_INTEGER(lp_syslog, &Globals.syslog)
1944 static FN_GLOBAL_INTEGER(lp_announce_as, &Globals.announce_as)
1945 FN_GLOBAL_INTEGER(lp_lm_announce, &Globals.lm_announce)
1946 FN_GLOBAL_INTEGER(lp_lm_interval, &Globals.lm_interval)
1947 FN_GLOBAL_INTEGER(lp_machine_password_timeout, &Globals.machine_password_timeout)
1948 FN_GLOBAL_INTEGER(lp_change_notify_timeout, &Globals.change_notify_timeout)
1949 FN_GLOBAL_INTEGER(lp_map_to_guest, &Globals.map_to_guest)
1950 FN_GLOBAL_INTEGER(lp_oplock_break_wait_time, &Globals.oplock_break_wait_time)
1951 FN_GLOBAL_INTEGER(lp_lock_spin_count, &Globals.iLockSpinCount)
1952 FN_GLOBAL_INTEGER(lp_lock_sleep_time, &Globals.iLockSpinTime)
1953 FN_GLOBAL_INTEGER(lp_usershare_max_shares, &Globals.iUsershareMaxShares)
1954
1955 FN_LOCAL_STRING(lp_preexec, szPreExec)
1956 FN_LOCAL_STRING(lp_postexec, szPostExec)
1957 FN_LOCAL_STRING(lp_rootpreexec, szRootPreExec)
1958 FN_LOCAL_STRING(lp_rootpostexec, szRootPostExec)
1959 FN_LOCAL_STRING(lp_servicename, szService)
1960 FN_LOCAL_CONST_STRING(lp_const_servicename, szService)
1961 FN_LOCAL_STRING(lp_pathname, szPath)
1962 FN_LOCAL_STRING(lp_dontdescend, szDontdescend)
1963 FN_LOCAL_STRING(lp_username, szUsername)
1964 FN_LOCAL_LIST(lp_invalid_users, szInvalidUsers)
1965 FN_LOCAL_LIST(lp_valid_users, szValidUsers)
1966 FN_LOCAL_LIST(lp_admin_users, szAdminUsers)
1967 FN_GLOBAL_LIST(lp_svcctl_list, &Globals.szServicesList)
1968 FN_LOCAL_STRING(lp_cups_options, szCupsOptions)
1969 FN_GLOBAL_STRING(lp_cups_server, &Globals.szCupsServer)
1970 FN_GLOBAL_STRING(lp_iprint_server, &Globals.szIPrintServer)
1971 FN_LOCAL_STRING(lp_printcommand, szPrintcommand)
1972 FN_LOCAL_STRING(lp_lpqcommand, szLpqcommand)
1973 FN_LOCAL_STRING(lp_lprmcommand, szLprmcommand)
1974 FN_LOCAL_STRING(lp_lppausecommand, szLppausecommand)
1975 FN_LOCAL_STRING(lp_lpresumecommand, szLpresumecommand)
1976 FN_LOCAL_STRING(lp_queuepausecommand, szQueuepausecommand)
1977 FN_LOCAL_STRING(lp_queueresumecommand, szQueueresumecommand)
1978 static FN_LOCAL_STRING(_lp_printername, szPrintername)
1979 FN_LOCAL_LIST(lp_hostsallow, szHostsallow)
1980 FN_LOCAL_LIST(lp_hostsdeny, szHostsdeny)
1981 FN_LOCAL_STRING(lp_magicscript, szMagicScript)
1982 FN_LOCAL_STRING(lp_magicoutput, szMagicOutput)
1983 FN_LOCAL_STRING(lp_comment, comment)
1984 FN_LOCAL_STRING(lp_force_user, force_user)
1985 FN_LOCAL_STRING(lp_force_group, force_group)
1986 FN_LOCAL_LIST(lp_readlist, readlist)
1987 FN_LOCAL_LIST(lp_writelist, writelist)
1988 FN_LOCAL_LIST(lp_printer_admin, printer_admin)
1989 FN_LOCAL_STRING(lp_fstype, fstype)
1990 FN_LOCAL_LIST(lp_vfs_objects, szVfsObjects)
1991 FN_LOCAL_STRING(lp_msdfs_proxy, szMSDfsProxy)
1992 static FN_LOCAL_STRING(lp_volume, volume)
1993 FN_LOCAL_STRING(lp_mangled_map, szMangledMap)
1994 FN_LOCAL_STRING(lp_veto_files, szVetoFiles)
1995 FN_LOCAL_STRING(lp_hide_files, szHideFiles)
1996 FN_LOCAL_STRING(lp_veto_oplocks, szVetoOplockFiles)
1997 FN_LOCAL_BOOL(lp_msdfs_root, bMSDfsRoot)
1998 FN_LOCAL_STRING(lp_aio_write_behind, szAioWriteBehind)
1999 FN_LOCAL_STRING(lp_dfree_command, szDfree)
2000 FN_LOCAL_BOOL(lp_autoloaded, autoloaded)
2001 FN_LOCAL_BOOL(lp_preexec_close, bPreexecClose)
2002 FN_LOCAL_BOOL(lp_rootpreexec_close, bRootpreexecClose)
2003 FN_LOCAL_INTEGER(lp_casesensitive, iCaseSensitive)
2004 FN_LOCAL_BOOL(lp_preservecase, bCasePreserve)
2005 FN_LOCAL_BOOL(lp_shortpreservecase, bShortCasePreserve)
2006 FN_LOCAL_BOOL(lp_hide_dot_files, bHideDotFiles)
2007 FN_LOCAL_BOOL(lp_hide_special_files, bHideSpecialFiles)
2008 FN_LOCAL_BOOL(lp_hideunreadable, bHideUnReadable)
2009 FN_LOCAL_BOOL(lp_hideunwriteable_files, bHideUnWriteableFiles)
2010 FN_LOCAL_BOOL(lp_browseable, bBrowseable)
2011 FN_LOCAL_BOOL(lp_readonly, bRead_only)
2012 FN_LOCAL_BOOL(lp_no_set_dir, bNo_set_dir)
2013 FN_LOCAL_BOOL(lp_guest_ok, bGuest_ok)
2014 FN_LOCAL_BOOL(lp_guest_only, bGuest_only)
2015 FN_LOCAL_BOOL(lp_print_ok, bPrint_ok)
2016 FN_LOCAL_BOOL(lp_map_hidden, bMap_hidden)
2017 FN_LOCAL_BOOL(lp_map_archive, bMap_archive)
2018 FN_LOCAL_BOOL(lp_store_dos_attributes, bStoreDosAttributes)
2019 FN_LOCAL_BOOL(lp_locking, bLocking)
2020 FN_LOCAL_INTEGER(lp_strict_locking, iStrictLocking)
2021 FN_LOCAL_BOOL(lp_posix_locking, bPosixLocking)
2022 FN_LOCAL_BOOL(lp_share_modes, bShareModes)
2023 FN_LOCAL_BOOL(lp_oplocks, bOpLocks)
2024 FN_LOCAL_BOOL(lp_level2_oplocks, bLevel2OpLocks)
2025 FN_LOCAL_BOOL(lp_onlyuser, bOnlyUser)
2026 FN_LOCAL_BOOL(lp_manglednames, bMangledNames)
2027 FN_LOCAL_BOOL(lp_widelinks, bWidelinks)
2028 FN_LOCAL_BOOL(lp_symlinks, bSymlinks)
2029 FN_LOCAL_BOOL(lp_syncalways, bSyncAlways)
2030 FN_LOCAL_BOOL(lp_strict_allocate, bStrictAllocate)
2031 FN_LOCAL_BOOL(lp_strict_sync, bStrictSync)
2032 FN_LOCAL_BOOL(lp_map_system, bMap_system)
2033 FN_LOCAL_BOOL(lp_delete_readonly, bDeleteReadonly)
2034 FN_LOCAL_BOOL(lp_fake_oplocks, bFakeOplocks)
2035 FN_LOCAL_BOOL(lp_recursive_veto_delete, bDeleteVetoFiles)
2036 FN_LOCAL_BOOL(lp_dos_filemode, bDosFilemode)
2037 FN_LOCAL_BOOL(lp_dos_filetimes, bDosFiletimes)
2038 FN_LOCAL_BOOL(lp_dos_filetime_resolution, bDosFiletimeResolution)
2039 FN_LOCAL_BOOL(lp_fake_dir_create_times, bFakeDirCreateTimes)
2040 FN_LOCAL_BOOL(lp_blocking_locks, bBlockingLocks)
2041 FN_LOCAL_BOOL(lp_inherit_perms, bInheritPerms)
2042 FN_LOCAL_BOOL(lp_inherit_acls, bInheritACLS)
2043 FN_LOCAL_BOOL(lp_inherit_owner, bInheritOwner)
2044 FN_LOCAL_BOOL(lp_use_client_driver, bUseClientDriver)
2045 FN_LOCAL_BOOL(lp_default_devmode, bDefaultDevmode)
2046 FN_LOCAL_BOOL(lp_force_printername, bForcePrintername)
2047 FN_LOCAL_BOOL(lp_nt_acl_support, bNTAclSupport)
2048 FN_LOCAL_BOOL(lp_force_unknown_acl_user, bForceUnknownAclUser)
2049 FN_LOCAL_BOOL(lp_ea_support, bEASupport)
2050 FN_LOCAL_BOOL(_lp_use_sendfile, bUseSendfile)
2051 FN_LOCAL_BOOL(lp_profile_acls, bProfileAcls)
2052 FN_LOCAL_BOOL(lp_map_acl_inherit, bMap_acl_inherit)
2053 FN_LOCAL_BOOL(lp_afs_share, bAfs_Share)
2054 FN_LOCAL_BOOL(lp_acl_check_permissions, bAclCheckPermissions)
2055 FN_LOCAL_BOOL(lp_acl_group_control, bAclGroupControl)
2056 FN_LOCAL_BOOL(lp_acl_map_full_control, bAclMapFullControl)
2057 FN_LOCAL_INTEGER(lp_create_mask, iCreate_mask)
2058 FN_LOCAL_INTEGER(lp_force_create_mode, iCreate_force_mode)
2059 FN_LOCAL_INTEGER(lp_security_mask, iSecurity_mask)
2060 FN_LOCAL_INTEGER(lp_force_security_mode, iSecurity_force_mode)
2061 FN_LOCAL_INTEGER(lp_dir_mask, iDir_mask)
2062 FN_LOCAL_INTEGER(lp_force_dir_mode, iDir_force_mode)
2063 FN_LOCAL_INTEGER(lp_dir_security_mask, iDir_Security_mask)
2064 FN_LOCAL_INTEGER(lp_force_dir_security_mode, iDir_Security_force_mode)
2065 FN_LOCAL_INTEGER(lp_max_connections, iMaxConnections)
2066 FN_LOCAL_INTEGER(lp_defaultcase, iDefaultCase)
2067 FN_LOCAL_INTEGER(lp_minprintspace, iMinPrintSpace)
2068 FN_LOCAL_INTEGER(lp_printing, iPrinting)
2069 FN_LOCAL_INTEGER(lp_max_reported_jobs, iMaxReportedPrintJobs)
2070 FN_LOCAL_INTEGER(lp_oplock_contention_limit, iOplockContentionLimit)
2071 FN_LOCAL_INTEGER(lp_csc_policy, iCSCPolicy)
2072 FN_LOCAL_INTEGER(lp_write_cache_size, iWriteCacheSize)
2073 FN_LOCAL_INTEGER(lp_block_size, iBlock_size)
2074 FN_LOCAL_INTEGER(lp_dfree_cache_time, iDfreeCacheTime)
2075 FN_LOCAL_INTEGER(lp_allocation_roundup_size, iallocation_roundup_size)
2076 FN_LOCAL_INTEGER(lp_aio_read_size, iAioReadSize)
2077 FN_LOCAL_INTEGER(lp_aio_write_size, iAioWriteSize)
2078 FN_LOCAL_INTEGER(lp_map_readonly, iMap_readonly)
2079 FN_LOCAL_CHAR(lp_magicchar, magic_char)
2080 FN_GLOBAL_INTEGER(lp_winbind_cache_time, &Globals.winbind_cache_time)
2081 FN_GLOBAL_INTEGER(lp_winbind_max_idle_children, &Globals.winbind_max_idle_children)
2082 FN_GLOBAL_LIST(lp_winbind_nss_info, &Globals.szWinbindNssInfo)
2083 FN_GLOBAL_INTEGER(lp_algorithmic_rid_base, &Globals.AlgorithmicRidBase)
2084 FN_GLOBAL_INTEGER(lp_name_cache_timeout, &Globals.name_cache_timeout)
2085 FN_GLOBAL_INTEGER(lp_client_signing, &Globals.client_signing)
2086 FN_GLOBAL_INTEGER(lp_server_signing, &Globals.server_signing)
2087
2088 /* local prototypes */
2089
2090 static int map_parameter(const char *pszParmName);
2091 static BOOL set_boolean(BOOL *pb, const char *pszParmValue);
2092 static int getservicebyname(const char *pszServiceName,
2093                             service * pserviceDest);
2094 static void copy_service(service * pserviceDest,
2095                          service * pserviceSource, BOOL *pcopymapDest);
2096 static BOOL service_ok(int iService);
2097 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue);
2098 static BOOL do_section(const char *pszSectionName);
2099 static void init_copymap(service * pservice);
2100 static BOOL hash_a_service(const char *name, int number);
2101 static void free_service_byindex(int iService);
2102 static char * canonicalize_servicename(const char *name);
2103
2104 /* This is a helper function for parametrical options support. */
2105 /* It returns a pointer to parametrical option value if it exists or NULL otherwise */
2106 /* Actual parametrical functions are quite simple */
2107 static param_opt_struct *get_parametrics(int snum, const char *type, const char *option)
2108 {
2109         BOOL global_section = False;
2110         char* param_key;
2111         param_opt_struct *data;
2112
2113         if (snum >= iNumServices) return NULL;
2114
2115         if (snum < 0) {
2116                 data = Globals.param_opt;
2117                 global_section = True;
2118         } else {
2119                 data = ServicePtrs[snum]->param_opt;
2120         }
2121
2122         asprintf(&param_key, "%s:%s", type, option);
2123         if (!param_key) {
2124                 DEBUG(0,("asprintf failed!\n"));
2125                 return NULL;
2126         }
2127
2128         while (data) {
2129                 if (strcmp(data->key, param_key) == 0) {
2130                         string_free(&param_key);
2131                         return data;
2132                 }
2133                 data = data->next;
2134         }
2135
2136         if (!global_section) {
2137                 /* Try to fetch the same option but from globals */
2138                 /* but only if we are not already working with Globals */
2139                 data = Globals.param_opt;
2140                 while (data) {
2141                         if (strcmp(data->key, param_key) == 0) {
2142                                 string_free(&param_key);
2143                                 return data;
2144                         }
2145                         data = data->next;
2146                 }
2147         }
2148
2149         string_free(&param_key);
2150
2151         return NULL;
2152 }
2153
2154
2155 /*******************************************************************
2156 convenience routine to return int parameters.
2157 ********************************************************************/
2158 static int lp_int(const char *s)
2159 {
2160
2161         if (!s) {
2162                 DEBUG(0,("lp_int(%s): is called with NULL!\n",s));
2163                 return (-1);
2164         }
2165
2166         return atoi(s);
2167 }
2168
2169 /*******************************************************************
2170 convenience routine to return unsigned long parameters.
2171 ********************************************************************/
2172 static int lp_ulong(const char *s)
2173 {
2174
2175         if (!s) {
2176                 DEBUG(0,("lp_int(%s): is called with NULL!\n",s));
2177                 return (-1);
2178         }
2179
2180         return strtoul(s, NULL, 10);
2181 }
2182
2183 /*******************************************************************
2184 convenience routine to return boolean parameters.
2185 ********************************************************************/
2186 static BOOL lp_bool(const char *s)
2187 {
2188         BOOL ret = False;
2189
2190         if (!s) {
2191                 DEBUG(0,("lp_bool(%s): is called with NULL!\n",s));
2192                 return False;
2193         }
2194
2195         if (!set_boolean(&ret,s)) {
2196                 DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
2197                 return False;
2198         }
2199
2200         return ret;
2201 }
2202
2203 /*******************************************************************
2204 convenience routine to return enum parameters.
2205 ********************************************************************/
2206 static int lp_enum(const char *s,const struct enum_list *_enum)
2207 {
2208         int i;
2209
2210         if (!s || !_enum) {
2211                 DEBUG(0,("lp_enum(%s,enum): is called with NULL!\n",s));
2212                 return (-1);
2213         }
2214
2215         for (i=0; _enum[i].name; i++) {
2216                 if (strequal(_enum[i].name,s))
2217                         return _enum[i].value;
2218         }
2219
2220         DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
2221         return (-1);
2222 }
2223
2224
2225 /* DO NOT USE lp_parm_string ANYMORE!!!!
2226  * use lp_parm_const_string or lp_parm_talloc_string
2227  *
2228  * lp_parm_string is only used to let old modules find this symbol
2229  */
2230 #undef lp_parm_string
2231  char *lp_parm_string(const char *servicename, const char *type, const char *option)
2232 {
2233         return lp_parm_talloc_string(lp_servicenumber(servicename), type, option, NULL);
2234 }
2235
2236 /* Return parametric option from a given service. Type is a part of option before ':' */
2237 /* Parametric option has following syntax: 'Type: option = value' */
2238 /* the returned value is talloced in lp_talloc */
2239 char *lp_parm_talloc_string(int snum, const char *type, const char *option, const char *def)
2240 {
2241         param_opt_struct *data = get_parametrics(snum, type, option);
2242
2243         if (data == NULL||data->value==NULL) {
2244                 if (def) {
2245                         return lp_string(def);
2246                 } else {
2247                         return NULL;
2248                 }
2249         }
2250
2251         return lp_string(data->value);
2252 }
2253
2254 /* Return parametric option from a given service. Type is a part of option before ':' */
2255 /* Parametric option has following syntax: 'Type: option = value' */
2256 const char *lp_parm_const_string(int snum, const char *type, const char *option, const char *def)
2257 {
2258         param_opt_struct *data = get_parametrics(snum, type, option);
2259
2260         if (data == NULL||data->value==NULL)
2261                 return def;
2262
2263         return data->value;
2264 }
2265
2266 /* Return parametric option from a given service. Type is a part of option before ':' */
2267 /* Parametric option has following syntax: 'Type: option = value' */
2268
2269 const char **lp_parm_string_list(int snum, const char *type, const char *option, const char **def)
2270 {
2271         param_opt_struct *data = get_parametrics(snum, type, option);
2272
2273         if (data == NULL||data->value==NULL)
2274                 return (const char **)def;
2275
2276         if (data->list==NULL) {
2277                 data->list = str_list_make(data->value, NULL);
2278         }
2279
2280         return (const char **)data->list;
2281 }
2282
2283 /* Return parametric option from a given service. Type is a part of option before ':' */
2284 /* Parametric option has following syntax: 'Type: option = value' */
2285
2286 int lp_parm_int(int snum, const char *type, const char *option, int def)
2287 {
2288         param_opt_struct *data = get_parametrics(snum, type, option);
2289
2290         if (data && data->value && *data->value)
2291                 return lp_int(data->value);
2292
2293         return def;
2294 }
2295
2296 /* Return parametric option from a given service. Type is a part of option before ':' */
2297 /* Parametric option has following syntax: 'Type: option = value' */
2298
2299 unsigned long lp_parm_ulong(int snum, const char *type, const char *option, unsigned long def)
2300 {
2301         param_opt_struct *data = get_parametrics(snum, type, option);
2302
2303         if (data && data->value && *data->value)
2304                 return lp_ulong(data->value);
2305
2306         return def;
2307 }
2308
2309 /* Return parametric option from a given service. Type is a part of option before ':' */
2310 /* Parametric option has following syntax: 'Type: option = value' */
2311
2312 BOOL lp_parm_bool(int snum, const char *type, const char *option, BOOL def)
2313 {
2314         param_opt_struct *data = get_parametrics(snum, type, option);
2315
2316         if (data && data->value && *data->value)
2317                 return lp_bool(data->value);
2318
2319         return def;
2320 }
2321
2322 /* Return parametric option from a given service. Type is a part of option before ':' */
2323 /* Parametric option has following syntax: 'Type: option = value' */
2324
2325 int lp_parm_enum(int snum, const char *type, const char *option,
2326                  const struct enum_list *_enum, int def)
2327 {
2328         param_opt_struct *data = get_parametrics(snum, type, option);
2329
2330         if (data && data->value && *data->value && _enum)
2331                 return lp_enum(data->value, _enum);
2332
2333         return def;
2334 }
2335
2336
2337 /***************************************************************************
2338  Initialise a service to the defaults.
2339 ***************************************************************************/
2340
2341 static void init_service(service * pservice)
2342 {
2343         memset((char *)pservice, '\0', sizeof(service));
2344         copy_service(pservice, &sDefault, NULL);
2345 }
2346
2347 /***************************************************************************
2348  Free the dynamically allocated parts of a service struct.
2349 ***************************************************************************/
2350
2351 static void free_service(service *pservice)
2352 {
2353         int i;
2354         param_opt_struct *data, *pdata;
2355         if (!pservice)
2356                 return;
2357
2358         if (pservice->szService)
2359                 DEBUG(5, ("free_service: Freeing service %s\n",
2360                        pservice->szService));
2361
2362         string_free(&pservice->szService);
2363         SAFE_FREE(pservice->copymap);
2364
2365         for (i = 0; parm_table[i].label; i++) {
2366                 if ((parm_table[i].type == P_STRING ||
2367                      parm_table[i].type == P_USTRING) &&
2368                     parm_table[i].p_class == P_LOCAL)
2369                         string_free((char **)
2370                                     (((char *)pservice) +
2371                                      PTR_DIFF(parm_table[i].ptr, &sDefault)));
2372                 else if (parm_table[i].type == P_LIST &&
2373                          parm_table[i].p_class == P_LOCAL)
2374                              str_list_free((char ***)
2375                                             (((char *)pservice) +
2376                                              PTR_DIFF(parm_table[i].ptr, &sDefault)));
2377         }
2378
2379         data = pservice->param_opt;
2380         if (data)
2381                 DEBUG(5,("Freeing parametrics:\n"));
2382         while (data) {
2383                 DEBUG(5,("[%s = %s]\n", data->key, data->value));
2384                 string_free(&data->key);
2385                 string_free(&data->value);
2386                 str_list_free(&data->list);
2387                 pdata = data->next;
2388                 SAFE_FREE(data);
2389                 data = pdata;
2390         }
2391
2392         ZERO_STRUCTP(pservice);
2393 }
2394
2395
2396 /***************************************************************************
2397  remove a service indexed in the ServicePtrs array from the ServiceHash
2398  and free the dynamically allocated parts
2399 ***************************************************************************/
2400
2401 static void free_service_byindex(int idx)
2402 {
2403         if ( !LP_SNUM_OK(idx) )
2404                 return;
2405
2406         ServicePtrs[idx]->valid = False;
2407         invalid_services[num_invalid_services++] = idx;
2408
2409         /* we have to cleanup the hash record */
2410
2411         if (ServicePtrs[idx]->szService) {
2412                 char *canon_name = canonicalize_servicename( ServicePtrs[idx]->szService );
2413
2414                 tdb_delete_bystring(ServiceHash, canon_name );
2415         }
2416
2417         free_service(ServicePtrs[idx]);
2418 }
2419
2420 /***************************************************************************
2421  Add a new service to the services array initialising it with the given
2422  service.
2423 ***************************************************************************/
2424
2425 static int add_a_service(const service *pservice, const char *name)
2426 {
2427         int i;
2428         service tservice;
2429         int num_to_alloc = iNumServices + 1;
2430         param_opt_struct *data, *pdata;
2431
2432         tservice = *pservice;
2433
2434         /* it might already exist */
2435         if (name) {
2436                 i = getservicebyname(name, NULL);
2437                 if (i >= 0) {
2438                         /* Clean all parametric options for service */
2439                         /* They will be added during parsing again */
2440                         data = ServicePtrs[i]->param_opt;
2441                         while (data) {
2442                                 string_free(&data->key);
2443                                 string_free(&data->value);
2444                                 str_list_free(&data->list);
2445                                 pdata = data->next;
2446                                 SAFE_FREE(data);
2447                                 data = pdata;
2448                         }
2449                         ServicePtrs[i]->param_opt = NULL;
2450                         return (i);
2451                 }
2452         }
2453
2454         /* find an invalid one */
2455         i = iNumServices;
2456         if (num_invalid_services > 0) {
2457                 i = invalid_services[--num_invalid_services];
2458         }
2459
2460         /* if not, then create one */
2461         if (i == iNumServices) {
2462                 service **tsp;
2463                 int *tinvalid;
2464
2465                 tsp = SMB_REALLOC_ARRAY(ServicePtrs, service *, num_to_alloc);
2466                 if (tsp == NULL) {
2467                         DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
2468                         return (-1);
2469                 }
2470                 ServicePtrs = tsp;
2471                 ServicePtrs[iNumServices] = SMB_MALLOC_P(service);
2472                 if (!ServicePtrs[iNumServices]) {
2473                         DEBUG(0,("add_a_service: out of memory!\n"));
2474                         return (-1);
2475                 }
2476                 iNumServices++;
2477
2478                 /* enlarge invalid_services here for now... */
2479                 tinvalid = SMB_REALLOC_ARRAY(invalid_services, int,
2480                                              num_to_alloc);
2481                 if (tinvalid == NULL) {
2482                         DEBUG(0,("add_a_service: failed to enlarge "
2483                                  "invalid_services!\n"));
2484                         return (-1);
2485                 }
2486                 invalid_services = tinvalid;
2487         } else {
2488                 free_service_byindex(i);
2489         }
2490
2491         ServicePtrs[i]->valid = True;
2492
2493         init_service(ServicePtrs[i]);
2494         copy_service(ServicePtrs[i], &tservice, NULL);
2495         if (name)
2496                 string_set(&ServicePtrs[i]->szService, name);
2497
2498         DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
2499                 i, ServicePtrs[i]->szService));
2500
2501         if (!hash_a_service(ServicePtrs[i]->szService, i)) {
2502                 return (-1);
2503         }
2504
2505         return (i);
2506 }
2507
2508 /***************************************************************************
2509   Convert a string to uppercase and remove whitespaces.
2510 ***************************************************************************/
2511
2512 static char *canonicalize_servicename(const char *src)
2513 {
2514         static fstring canon; /* is fstring large enough? */
2515
2516         if ( !src ) {
2517                 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
2518                 return NULL;
2519         }
2520
2521         fstrcpy( canon, src );
2522         strlower_m( canon );
2523
2524         return canon;
2525 }
2526
2527 /***************************************************************************
2528   Add a name/index pair for the services array to the hash table.
2529 ***************************************************************************/
2530
2531 static BOOL hash_a_service(const char *name, int idx)
2532 {
2533         char *canon_name;
2534
2535         if ( !ServiceHash ) {
2536                 DEBUG(10,("hash_a_service: creating tdb servicehash\n"));
2537                 ServiceHash = tdb_open("servicehash", 1031, TDB_INTERNAL,
2538                                         (O_RDWR|O_CREAT), 0600);
2539                 if ( !ServiceHash ) {
2540                         DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
2541                         return False;
2542                 }
2543         }
2544
2545         DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
2546                 idx, name));
2547
2548         if ( !(canon_name = canonicalize_servicename( name )) )
2549                 return False;
2550
2551         tdb_store_int32(ServiceHash, canon_name, idx);
2552
2553         return True;
2554 }
2555
2556 /***************************************************************************
2557  Add a new home service, with the specified home directory, defaults coming
2558  from service ifrom.
2559 ***************************************************************************/
2560
2561 BOOL lp_add_home(const char *pszHomename, int iDefaultService,
2562                  const char *user, const char *pszHomedir)
2563 {
2564         int i;
2565         pstring newHomedir;
2566
2567         i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
2568
2569         if (i < 0)
2570                 return (False);
2571
2572         if (!(*(ServicePtrs[iDefaultService]->szPath))
2573             || strequal(ServicePtrs[iDefaultService]->szPath, lp_pathname(GLOBAL_SECTION_SNUM))) {
2574                 pstrcpy(newHomedir, pszHomedir);
2575                 string_set(&ServicePtrs[i]->szPath, newHomedir);
2576         }
2577
2578         if (!(*(ServicePtrs[i]->comment))) {
2579                 pstring comment;
2580                 slprintf(comment, sizeof(comment) - 1,
2581                          "Home directory of %s", user);
2582                 string_set(&ServicePtrs[i]->comment, comment);
2583         }
2584
2585         /* set the browseable flag from the global default */
2586
2587         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2588
2589         ServicePtrs[i]->autoloaded = True;
2590
2591         DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename,
2592                user, ServicePtrs[i]->szPath ));
2593
2594         return (True);
2595 }
2596
2597 /***************************************************************************
2598  Add a new service, based on an old one.
2599 ***************************************************************************/
2600
2601 int lp_add_service(const char *pszService, int iDefaultService)
2602 {
2603         return (add_a_service(ServicePtrs[iDefaultService], pszService));
2604 }
2605
2606 /***************************************************************************
2607  Add the IPC service.
2608 ***************************************************************************/
2609
2610 static BOOL lp_add_ipc(const char *ipc_name, BOOL guest_ok)
2611 {
2612         pstring comment;
2613         int i = add_a_service(&sDefault, ipc_name);
2614
2615         if (i < 0)
2616                 return (False);
2617
2618         slprintf(comment, sizeof(comment) - 1,
2619                  "IPC Service (%s)", Globals.szServerString);
2620
2621         string_set(&ServicePtrs[i]->szPath, tmpdir());
2622         string_set(&ServicePtrs[i]->szUsername, "");
2623         string_set(&ServicePtrs[i]->comment, comment);
2624         string_set(&ServicePtrs[i]->fstype, "IPC");
2625         ServicePtrs[i]->iMaxConnections = 0;
2626         ServicePtrs[i]->bAvailable = True;
2627         ServicePtrs[i]->bRead_only = True;
2628         ServicePtrs[i]->bGuest_only = False;
2629         ServicePtrs[i]->bGuest_ok = guest_ok;
2630         ServicePtrs[i]->bPrint_ok = False;
2631         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2632
2633         DEBUG(3, ("adding IPC service\n"));
2634
2635         return (True);
2636 }
2637
2638 /***************************************************************************
2639  Add a new printer service, with defaults coming from service iFrom.
2640 ***************************************************************************/
2641
2642 BOOL lp_add_printer(const char *pszPrintername, int iDefaultService)
2643 {
2644         const char *comment = "From Printcap";
2645         int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
2646
2647         if (i < 0)
2648                 return (False);
2649
2650         /* note that we do NOT default the availability flag to True - */
2651         /* we take it from the default service passed. This allows all */
2652         /* dynamic printers to be disabled by disabling the [printers] */
2653         /* entry (if/when the 'available' keyword is implemented!).    */
2654
2655         /* the printer name is set to the service name. */
2656         string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
2657         string_set(&ServicePtrs[i]->comment, comment);
2658
2659         /* set the browseable flag from the gloabl default */
2660         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2661
2662         /* Printers cannot be read_only. */
2663         ServicePtrs[i]->bRead_only = False;
2664         /* No share modes on printer services. */
2665         ServicePtrs[i]->bShareModes = False;
2666         /* No oplocks on printer services. */
2667         ServicePtrs[i]->bOpLocks = False;
2668         /* Printer services must be printable. */
2669         ServicePtrs[i]->bPrint_ok = True;
2670
2671         DEBUG(3, ("adding printer service %s\n", pszPrintername));
2672
2673         return (True);
2674 }
2675
2676 /***************************************************************************
2677  Map a parameter's string representation to something we can use.
2678  Returns False if the parameter string is not recognised, else TRUE.
2679 ***************************************************************************/
2680
2681 static int map_parameter(const char *pszParmName)
2682 {
2683         int iIndex;
2684
2685         if (*pszParmName == '-')
2686                 return (-1);
2687
2688         for (iIndex = 0; parm_table[iIndex].label; iIndex++)
2689                 if (strwicmp(parm_table[iIndex].label, pszParmName) == 0)
2690                         return (iIndex);
2691
2692         /* Warn only if it isn't parametric option */
2693         if (strchr(pszParmName, ':') == NULL)
2694                 DEBUG(0, ("Unknown parameter encountered: \"%s\"\n", pszParmName));
2695         /* We do return 'fail' for parametric options as well because they are
2696            stored in different storage
2697          */
2698         return (-1);
2699 }
2700
2701 /***************************************************************************
2702  Show all parameter's name, type, [values,] and flags.
2703 ***************************************************************************/
2704
2705 void show_parameter_list(void)
2706 {
2707         int classIndex, parmIndex, enumIndex, flagIndex;
2708         BOOL hadFlag;
2709         const char *section_names[] = { "local", "global", NULL};
2710         const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
2711                 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING", "P_GSTRING",
2712                 "P_UGSTRING", "P_ENUM", "P_SEP"};
2713         unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
2714                 FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
2715                 FLAG_HIDE, FLAG_DOS_STRING};
2716         const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
2717                 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
2718                 "FLAG_DEPRECATED", "FLAG_HIDE", "FLAG_DOS_STRING", NULL};
2719
2720         for ( classIndex=0; section_names[classIndex]; classIndex++) {
2721                 printf("[%s]\n", section_names[classIndex]);
2722                 for (parmIndex = 0; parm_table[parmIndex].label; parmIndex++) {
2723                         if (parm_table[parmIndex].p_class == classIndex) {
2724                                 printf("%s=%s",
2725                                         parm_table[parmIndex].label,
2726                                         type[parm_table[parmIndex].type]);
2727                                 switch (parm_table[parmIndex].type) {
2728                                 case P_ENUM:
2729                                         printf(",");
2730                                         for (enumIndex=0; parm_table[parmIndex].enum_list[enumIndex].name; enumIndex++)
2731                                                 printf("%s%s",
2732                                                         enumIndex ? "|" : "",
2733                                                         parm_table[parmIndex].enum_list[enumIndex].name);
2734                                         break;
2735                                 default:
2736                                         break;
2737                                 }
2738                                 printf(",");
2739                                 hadFlag = False;
2740                                 for ( flagIndex=0; flag_names[flagIndex]; flagIndex++ ) {
2741                                         if (parm_table[parmIndex].flags & flags[flagIndex]) {
2742                                                 printf("%s%s",
2743                                                         hadFlag ? "|" : "",
2744                                                         flag_names[flagIndex]);
2745                                                 hadFlag = True;
2746                                         }
2747                                 }
2748                                 printf("\n");
2749                         }
2750                 }
2751         }
2752 }
2753
2754 /***************************************************************************
2755  Set a boolean variable from the text value stored in the passed string.
2756  Returns True in success, False if the passed string does not correctly
2757  represent a boolean.
2758 ***************************************************************************/
2759
2760 static BOOL set_boolean(BOOL *pb, const char *pszParmValue)
2761 {
2762         BOOL bRetval;
2763
2764         bRetval = True;
2765         if (strwicmp(pszParmValue, "yes") == 0 ||
2766             strwicmp(pszParmValue, "true") == 0 ||
2767             strwicmp(pszParmValue, "1") == 0)
2768                 *pb = True;
2769         else if (strwicmp(pszParmValue, "no") == 0 ||
2770                     strwicmp(pszParmValue, "False") == 0 ||
2771                     strwicmp(pszParmValue, "0") == 0)
2772                 *pb = False;
2773         else {
2774                 DEBUG(0,
2775                       ("ERROR: Badly formed boolean in configuration file: \"%s\".\n",
2776                        pszParmValue));
2777                 bRetval = False;
2778         }
2779         return (bRetval);
2780 }
2781
2782 /***************************************************************************
2783 Find a service by name. Otherwise works like get_service.
2784 ***************************************************************************/
2785
2786 static int getservicebyname(const char *pszServiceName, service * pserviceDest)
2787 {
2788         int iService = -1;
2789         char *canon_name;
2790
2791         if (ServiceHash != NULL) {
2792                 if ( !(canon_name = canonicalize_servicename( pszServiceName )) )
2793                         return -1;
2794
2795                 iService = tdb_fetch_int32(ServiceHash, canon_name );
2796
2797                 if (LP_SNUM_OK(iService)) {
2798                         if (pserviceDest != NULL) {
2799                                 copy_service(pserviceDest, ServicePtrs[iService], NULL);
2800                         }
2801                 } else {
2802                         iService = -1;
2803                 }
2804         }
2805
2806         return (iService);
2807 }
2808
2809 /***************************************************************************
2810  Copy a service structure to another.
2811  If pcopymapDest is NULL then copy all fields
2812 ***************************************************************************/
2813
2814 static void copy_service(service * pserviceDest, service * pserviceSource, BOOL *pcopymapDest)
2815 {
2816         int i;
2817         BOOL bcopyall = (pcopymapDest == NULL);
2818         param_opt_struct *data, *pdata, *paramo;
2819         BOOL not_added;
2820
2821         for (i = 0; parm_table[i].label; i++)
2822                 if (parm_table[i].ptr && parm_table[i].p_class == P_LOCAL &&
2823                     (bcopyall || pcopymapDest[i])) {
2824                         void *def_ptr = parm_table[i].ptr;
2825                         void *src_ptr =
2826                                 ((char *)pserviceSource) + PTR_DIFF(def_ptr,
2827                                                                     &sDefault);
2828                         void *dest_ptr =
2829                                 ((char *)pserviceDest) + PTR_DIFF(def_ptr,
2830                                                                   &sDefault);
2831
2832                         switch (parm_table[i].type) {
2833                                 case P_BOOL:
2834                                 case P_BOOLREV:
2835                                         *(BOOL *)dest_ptr = *(BOOL *)src_ptr;
2836                                         break;
2837
2838                                 case P_INTEGER:
2839                                 case P_ENUM:
2840                                 case P_OCTAL:
2841                                         *(int *)dest_ptr = *(int *)src_ptr;
2842                                         break;
2843
2844                                 case P_CHAR:
2845                                         *(char *)dest_ptr = *(char *)src_ptr;
2846                                         break;
2847
2848                                 case P_STRING:
2849                                         string_set((char **)dest_ptr,
2850                                                    *(char **)src_ptr);
2851                                         break;
2852
2853                                 case P_USTRING:
2854                                         string_set((char **)dest_ptr,
2855                                                    *(char **)src_ptr);
2856                                         strupper_m(*(char **)dest_ptr);
2857                                         break;
2858                                 case P_LIST:
2859                                         str_list_free((char ***)dest_ptr);
2860                                         str_list_copy((char ***)dest_ptr, *(const char ***)src_ptr);
2861                                         break;
2862                                 default:
2863                                         break;
2864                         }
2865                 }
2866
2867         if (bcopyall) {
2868                 init_copymap(pserviceDest);
2869                 if (pserviceSource->copymap)
2870                         memcpy((void *)pserviceDest->copymap,
2871                                (void *)pserviceSource->copymap,
2872                                sizeof(BOOL) * NUMPARAMETERS);
2873         }
2874
2875         data = pserviceSource->param_opt;
2876         while (data) {
2877                 not_added = True;
2878                 pdata = pserviceDest->param_opt;
2879                 /* Traverse destination */
2880                 while (pdata) {
2881                         /* If we already have same option, override it */
2882                         if (strcmp(pdata->key, data->key) == 0) {
2883                                 string_free(&pdata->value);
2884                                 str_list_free(&data->list);
2885                                 pdata->value = SMB_STRDUP(data->value);
2886                                 not_added = False;
2887                                 break;
2888                         }
2889                         pdata = pdata->next;
2890                 }
2891                 if (not_added) {
2892                     paramo = SMB_XMALLOC_P(param_opt_struct);
2893                     paramo->key = SMB_STRDUP(data->key);
2894                     paramo->value = SMB_STRDUP(data->value);
2895                     paramo->list = NULL;
2896                     DLIST_ADD(pserviceDest->param_opt, paramo);
2897                 }
2898                 data = data->next;
2899         }
2900 }
2901
2902 /***************************************************************************
2903 Check a service for consistency. Return False if the service is in any way
2904 incomplete or faulty, else True.
2905 ***************************************************************************/
2906
2907 static BOOL service_ok(int iService)
2908 {
2909         BOOL bRetval;
2910
2911         bRetval = True;
2912         if (ServicePtrs[iService]->szService[0] == '\0') {
2913                 DEBUG(0, ("The following message indicates an internal error:\n"));
2914                 DEBUG(0, ("No service name in service entry.\n"));
2915                 bRetval = False;
2916         }
2917
2918         /* The [printers] entry MUST be printable. I'm all for flexibility, but */
2919         /* I can't see why you'd want a non-printable printer service...        */
2920         if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
2921                 if (!ServicePtrs[iService]->bPrint_ok) {
2922                         DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
2923                                ServicePtrs[iService]->szService));
2924                         ServicePtrs[iService]->bPrint_ok = True;
2925                 }
2926                 /* [printers] service must also be non-browsable. */
2927                 if (ServicePtrs[iService]->bBrowseable)
2928                         ServicePtrs[iService]->bBrowseable = False;
2929         }
2930
2931         if (ServicePtrs[iService]->szPath[0] == '\0' &&
2932             strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0) {
2933                 DEBUG(0, ("No path in service %s - using %s\n",
2934                        ServicePtrs[iService]->szService, tmpdir()));
2935                 string_set(&ServicePtrs[iService]->szPath, tmpdir());
2936         }
2937
2938         /* If a service is flagged unavailable, log the fact at level 0. */
2939         if (!ServicePtrs[iService]->bAvailable)
2940                 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
2941                           ServicePtrs[iService]->szService));
2942
2943         return (bRetval);
2944 }
2945
2946 static struct file_lists {
2947         struct file_lists *next;
2948         char *name;
2949         char *subfname;
2950         time_t modtime;
2951 } *file_lists = NULL;
2952
2953 /*******************************************************************
2954  Keep a linked list of all config files so we know when one has changed
2955  it's date and needs to be reloaded.
2956 ********************************************************************/
2957
2958 static void add_to_file_list(const char *fname, const char *subfname)
2959 {
2960         struct file_lists *f = file_lists;
2961
2962         while (f) {
2963                 if (f->name && !strcmp(f->name, fname))
2964                         break;
2965                 f = f->next;
2966         }
2967
2968         if (!f) {
2969                 f = SMB_MALLOC_P(struct file_lists);
2970                 if (!f)
2971                         return;
2972                 f->next = file_lists;
2973                 f->name = SMB_STRDUP(fname);
2974                 if (!f->name) {
2975                         SAFE_FREE(f);
2976                         return;
2977                 }
2978                 f->subfname = SMB_STRDUP(subfname);
2979                 if (!f->subfname) {
2980                         SAFE_FREE(f);
2981                         return;
2982                 }
2983                 file_lists = f;
2984                 f->modtime = file_modtime(subfname);
2985         } else {
2986                 time_t t = file_modtime(subfname);
2987                 if (t)
2988                         f->modtime = t;
2989         }
2990 }
2991
2992 /*******************************************************************
2993  Check if a config file has changed date.
2994 ********************************************************************/
2995
2996 BOOL lp_file_list_changed(void)
2997 {
2998         struct file_lists *f = file_lists;
2999
3000         DEBUG(6, ("lp_file_list_changed()\n"));
3001
3002         while (f) {
3003                 pstring n2;
3004                 time_t mod_time;
3005
3006                 pstrcpy(n2, f->name);
3007                 standard_sub_basic( get_current_username(), n2, sizeof(n2) );
3008
3009                 DEBUGADD(6, ("file %s -> %s  last mod_time: %s\n",
3010                              f->name, n2, ctime(&f->modtime)));
3011
3012                 mod_time = file_modtime(n2);
3013
3014                 if (mod_time && ((f->modtime != mod_time) || (f->subfname == NULL) || (strcmp(n2, f->subfname) != 0))) {
3015                         DEBUGADD(6,
3016                                  ("file %s modified: %s\n", n2,
3017                                   ctime(&mod_time)));
3018                         f->modtime = mod_time;
3019                         SAFE_FREE(f->subfname);
3020                         f->subfname = SMB_STRDUP(n2);
3021                         return (True);
3022                 }
3023                 f = f->next;
3024         }
3025         return (False);
3026 }
3027
3028 /***************************************************************************
3029  Run standard_sub_basic on netbios name... needed because global_myname
3030  is not accessed through any lp_ macro.
3031  Note: We must *NOT* use string_set() here as ptr points to global_myname.
3032 ***************************************************************************/
3033
3034 static BOOL handle_netbios_name(int snum, const char *pszParmValue, char **ptr)
3035 {
3036         BOOL ret;
3037         pstring netbios_name;
3038
3039         pstrcpy(netbios_name, pszParmValue);
3040
3041         standard_sub_basic(get_current_username(), netbios_name,sizeof(netbios_name));
3042
3043         ret = set_global_myname(netbios_name);
3044         string_set(&Globals.szNetbiosName,global_myname());
3045
3046         DEBUG(4, ("handle_netbios_name: set global_myname to: %s\n",
3047                global_myname()));
3048
3049         return ret;
3050 }
3051
3052 static BOOL handle_charset(int snum, const char *pszParmValue, char **ptr)
3053 {
3054         if (strcmp(*ptr, pszParmValue) != 0) {
3055                 string_set(ptr, pszParmValue);
3056                 init_iconv();
3057         }
3058         return True;
3059 }
3060
3061
3062
3063 static BOOL handle_workgroup(int snum, const char *pszParmValue, char **ptr)
3064 {
3065         BOOL ret;
3066
3067         ret = set_global_myworkgroup(pszParmValue);
3068         string_set(&Globals.szWorkgroup,lp_workgroup());
3069
3070         return ret;
3071 }
3072
3073 static BOOL handle_netbios_scope(int snum, const char *pszParmValue, char **ptr)
3074 {
3075         BOOL ret;
3076
3077         ret = set_global_scope(pszParmValue);
3078         string_set(&Globals.szNetbiosScope,global_scope());
3079
3080         return ret;
3081 }
3082
3083 static BOOL handle_netbios_aliases(int snum, const char *pszParmValue, char **ptr)
3084 {
3085         str_list_free(&Globals.szNetbiosAliases);
3086         Globals.szNetbiosAliases = str_list_make(pszParmValue, NULL);
3087         return set_netbios_aliases((const char **)Globals.szNetbiosAliases);
3088 }
3089
3090 /***************************************************************************
3091  Handle the include operation.
3092 ***************************************************************************/
3093
3094 static BOOL handle_include(int snum, const char *pszParmValue, char **ptr)
3095 {
3096         pstring fname;
3097         pstrcpy(fname, pszParmValue);
3098
3099         standard_sub_basic(get_current_username(), fname,sizeof(fname));
3100
3101         add_to_file_list(pszParmValue, fname);
3102
3103         string_set(ptr, fname);
3104
3105         if (file_exist(fname, NULL))
3106                 return (pm_process(fname, do_section, do_parameter));
3107
3108         DEBUG(2, ("Can't find include file %s\n", fname));
3109
3110         return (False);
3111 }
3112
3113 /***************************************************************************
3114  Handle the interpretation of the copy parameter.
3115 ***************************************************************************/
3116
3117 static BOOL handle_copy(int snum, const char *pszParmValue, char **ptr)
3118 {
3119         BOOL bRetval;
3120         int iTemp;
3121         service serviceTemp;
3122
3123         string_set(ptr, pszParmValue);
3124
3125         init_service(&serviceTemp);
3126
3127         bRetval = False;
3128
3129         DEBUG(3, ("Copying service from service %s\n", pszParmValue));
3130
3131         if ((iTemp = getservicebyname(pszParmValue, &serviceTemp)) >= 0) {
3132                 if (iTemp == iServiceIndex) {
3133                         DEBUG(0, ("Can't copy service %s - unable to copy self!\n", pszParmValue));
3134                 } else {
3135                         copy_service(ServicePtrs[iServiceIndex],
3136                                      &serviceTemp,
3137                                      ServicePtrs[iServiceIndex]->copymap);
3138                         bRetval = True;
3139                 }
3140         } else {
3141                 DEBUG(0, ("Unable to copy service - source not found: %s\n", pszParmValue));
3142                 bRetval = False;
3143         }
3144
3145         free_service(&serviceTemp);
3146         return (bRetval);
3147 }
3148
3149 /***************************************************************************
3150  Handle idmap/non unix account uid and gid allocation parameters.  The format of these
3151  parameters is:
3152
3153  [global]
3154
3155         idmap uid = 1000-1999
3156         idmap gid = 700-899
3157
3158  We only do simple parsing checks here.  The strings are parsed into useful
3159  structures in the idmap daemon code.
3160
3161 ***************************************************************************/
3162
3163 /* Some lp_ routines to return idmap [ug]id information */
3164
3165 static uid_t idmap_uid_low, idmap_uid_high;
3166 static gid_t idmap_gid_low, idmap_gid_high;
3167
3168 BOOL lp_idmap_uid(uid_t *low, uid_t *high)
3169 {
3170         if (idmap_uid_low == 0 || idmap_uid_high == 0)
3171                 return False;
3172
3173         if (low)
3174                 *low = idmap_uid_low;
3175
3176         if (high)
3177                 *high = idmap_uid_high;
3178
3179         return True;
3180 }
3181
3182 BOOL lp_idmap_gid(gid_t *low, gid_t *high)
3183 {
3184         if (idmap_gid_low == 0 || idmap_gid_high == 0)
3185                 return False;
3186
3187         if (low)
3188                 *low = idmap_gid_low;
3189
3190         if (high)
3191                 *high = idmap_gid_high;
3192
3193         return True;
3194 }
3195
3196 /* Do some simple checks on "idmap [ug]id" parameter values */
3197
3198 static BOOL handle_idmap_uid(int snum, const char *pszParmValue, char **ptr)
3199 {
3200         uint32 low, high;
3201
3202         if (sscanf(pszParmValue, "%u-%u", &low, &high) != 2 || high < low)
3203                 return False;
3204
3205         /* Parse OK */
3206
3207         string_set(ptr, pszParmValue);
3208
3209         idmap_uid_low = low;
3210         idmap_uid_high = high;
3211
3212         return True;
3213 }
3214
3215 static BOOL handle_idmap_gid(int snum, const char *pszParmValue, char **ptr)
3216 {
3217         uint32 low, high;
3218
3219         if (sscanf(pszParmValue, "%u-%u", &low, &high) != 2 || high < low)
3220                 return False;
3221
3222         /* Parse OK */
3223
3224         string_set(ptr, pszParmValue);
3225
3226         idmap_gid_low = low;
3227         idmap_gid_high = high;
3228
3229         return True;
3230 }
3231
3232 /***************************************************************************
3233  Handle the DEBUG level list.
3234 ***************************************************************************/
3235
3236 static BOOL handle_debug_list( int snum, const char *pszParmValueIn, char **ptr )
3237 {
3238         pstring pszParmValue;
3239
3240         pstrcpy(pszParmValue, pszParmValueIn);
3241         string_set(ptr, pszParmValueIn);
3242         return debug_parse_levels( pszParmValue );
3243 }
3244
3245 /***************************************************************************
3246  Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
3247 ***************************************************************************/
3248
3249 static char* append_ldap_suffix( const char *str )
3250 {
3251         char *suffix_string;
3252
3253
3254         if (!lp_talloc)
3255                 lp_talloc = talloc_init("lp_talloc");
3256
3257         suffix_string = talloc_asprintf( lp_talloc, "%s,%s", str, Globals.szLdapSuffix );
3258         if ( !suffix_string ) {
3259                 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
3260                 return NULL;
3261         }
3262
3263         return suffix_string;
3264 }
3265
3266 char *lp_ldap_machine_suffix(void)
3267 {
3268         if (Globals.szLdapMachineSuffix[0])
3269                 return append_ldap_suffix(Globals.szLdapMachineSuffix);
3270
3271         return lp_string(Globals.szLdapSuffix);
3272 }
3273
3274 char *lp_ldap_user_suffix(void)
3275 {
3276         if (Globals.szLdapUserSuffix[0])
3277                 return append_ldap_suffix(Globals.szLdapUserSuffix);
3278
3279         return lp_string(Globals.szLdapSuffix);
3280 }
3281
3282 char *lp_ldap_group_suffix(void)
3283 {
3284         if (Globals.szLdapGroupSuffix[0])
3285                 return append_ldap_suffix(Globals.szLdapGroupSuffix);
3286
3287         return lp_string(Globals.szLdapSuffix);
3288 }
3289
3290 char *lp_ldap_idmap_suffix(void)
3291 {
3292         if (Globals.szLdapIdmapSuffix[0])
3293                 return append_ldap_suffix(Globals.szLdapIdmapSuffix);
3294
3295         return lp_string(Globals.szLdapSuffix);
3296 }
3297
3298 /***************************************************************************
3299 ***************************************************************************/
3300
3301 static BOOL handle_acl_compatibility(int snum, const char *pszParmValue, char **ptr)
3302 {
3303         if (strequal(pszParmValue, "auto"))
3304                 string_set(ptr, "");
3305         else if (strequal(pszParmValue, "winnt"))
3306                 string_set(ptr, "winnt");
3307         else if (strequal(pszParmValue, "win2k"))
3308                 string_set(ptr, "win2k");
3309         else
3310                 return False;
3311
3312         return True;
3313 }
3314
3315 /****************************************************************************
3316  set the value for a P_ENUM
3317  ***************************************************************************/
3318
3319 static void lp_set_enum_parm( struct parm_struct *parm, const char *pszParmValue,
3320                               int *ptr )
3321 {
3322         int i;
3323
3324         for (i = 0; parm->enum_list[i].name; i++) {
3325                 if ( strequal(pszParmValue, parm->enum_list[i].name)) {
3326                         *ptr = parm->enum_list[i].value;
3327                         break;
3328                 }
3329         }
3330 }
3331
3332 /***************************************************************************
3333 ***************************************************************************/
3334
3335 static BOOL handle_printing(int snum, const char *pszParmValue, char **ptr)
3336 {
3337         static int parm_num = -1;
3338         service *s;
3339
3340         if ( parm_num == -1 )
3341                 parm_num = map_parameter( "printing" );
3342
3343         lp_set_enum_parm( &parm_table[parm_num], pszParmValue, (int*)ptr );
3344
3345         if ( snum < 0 )
3346                 s = &sDefault;
3347         else
3348                 s = ServicePtrs[snum];
3349
3350         init_printer_values( s );
3351
3352         return True;
3353 }
3354
3355
3356 /***************************************************************************
3357  Initialise a copymap.
3358 ***************************************************************************/
3359
3360 static void init_copymap(service * pservice)
3361 {
3362         int i;
3363         SAFE_FREE(pservice->copymap);
3364         pservice->copymap = SMB_MALLOC_ARRAY(BOOL,NUMPARAMETERS);
3365         if (!pservice->copymap)
3366                 DEBUG(0,
3367                       ("Couldn't allocate copymap!! (size %d)\n",
3368                        (int)NUMPARAMETERS));
3369         else
3370                 for (i = 0; i < NUMPARAMETERS; i++)
3371                         pservice->copymap[i] = True;
3372 }
3373
3374 /***************************************************************************
3375  Return the local pointer to a parameter given the service number and the
3376  pointer into the default structure.
3377 ***************************************************************************/
3378
3379 void *lp_local_ptr(int snum, void *ptr)
3380 {
3381         return (void *)(((char *)ServicePtrs[snum]) + PTR_DIFF(ptr, &sDefault));
3382 }
3383
3384 /***************************************************************************
3385  Process a parameter for a particular service number. If snum < 0
3386  then assume we are in the globals.
3387 ***************************************************************************/
3388
3389 BOOL lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
3390 {
3391         int parmnum, i, slen;
3392         void *parm_ptr = NULL;  /* where we are going to store the result */
3393         void *def_ptr = NULL;
3394         pstring param_key;
3395         char *sep;
3396         param_opt_struct *paramo, *data;
3397         BOOL not_added;
3398
3399         parmnum = map_parameter(pszParmName);
3400
3401         if (parmnum < 0) {
3402                 if ((sep=strchr(pszParmName, ':')) != NULL) {
3403                         *sep = '\0';
3404                         ZERO_STRUCT(param_key);
3405                         pstr_sprintf(param_key, "%s:", pszParmName);
3406                         slen = strlen(param_key);
3407                         pstrcat(param_key, sep+1);
3408                         trim_char(param_key+slen, ' ', ' ');
3409                         not_added = True;
3410                         data = (snum < 0) ? Globals.param_opt :
3411                                 ServicePtrs[snum]->param_opt;
3412                         /* Traverse destination */
3413                         while (data) {
3414                                 /* If we already have same option, override it */
3415                                 if (strcmp(data->key, param_key) == 0) {
3416                                         string_free(&data->value);
3417                                         str_list_free(&data->list);
3418                                         data->value = SMB_STRDUP(pszParmValue);
3419                                         not_added = False;
3420                                         break;
3421                                 }
3422                                 data = data->next;
3423                         }
3424                         if (not_added) {
3425                                 paramo = SMB_XMALLOC_P(param_opt_struct);
3426                                 paramo->key = SMB_STRDUP(param_key);
3427                                 paramo->value = SMB_STRDUP(pszParmValue);
3428                                 paramo->list = NULL;
3429                                 if (snum < 0) {
3430                                         DLIST_ADD(Globals.param_opt, paramo);
3431                                 } else {
3432                                         DLIST_ADD(ServicePtrs[snum]->param_opt, paramo);
3433                                 }
3434                         }
3435
3436                         *sep = ':';
3437                         return (True);
3438                 }
3439                 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName));
3440                 return (True);
3441         }
3442
3443         if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
3444                 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
3445                           pszParmName));
3446         }
3447
3448         def_ptr = parm_table[parmnum].ptr;
3449
3450         /* we might point at a service, the default service or a global */
3451         if (snum < 0) {
3452                 parm_ptr = def_ptr;
3453         } else {
3454                 if (parm_table[parmnum].p_class == P_GLOBAL) {
3455                         DEBUG(0,
3456                               ("Global parameter %s found in service section!\n",
3457                                pszParmName));
3458                         return (True);
3459                 }
3460                 parm_ptr =
3461                         ((char *)ServicePtrs[snum]) + PTR_DIFF(def_ptr,
3462                                                             &sDefault);
3463         }
3464
3465         if (snum >= 0) {
3466                 if (!ServicePtrs[snum]->copymap)
3467                         init_copymap(ServicePtrs[snum]);
3468
3469                 /* this handles the aliases - set the copymap for other entries with
3470                    the same data pointer */
3471                 for (i = 0; parm_table[i].label; i++)
3472                         if (parm_table[i].ptr == parm_table[parmnum].ptr)
3473                                 ServicePtrs[snum]->copymap[i] = False;
3474         }
3475
3476         /* if it is a special case then go ahead */
3477         if (parm_table[parmnum].special) {
3478                 parm_table[parmnum].special(snum, pszParmValue, (char **)parm_ptr);
3479                 return (True);
3480         }
3481
3482         /* now switch on the type of variable it is */
3483         switch (parm_table[parmnum].type)
3484         {
3485                 case P_BOOL:
3486                         set_boolean((BOOL *)parm_ptr, pszParmValue);
3487                         break;
3488
3489                 case P_BOOLREV:
3490                         set_boolean((BOOL *)parm_ptr, pszParmValue);
3491                         *(BOOL *)parm_ptr = !*(BOOL *)parm_ptr;
3492                         break;
3493
3494                 case P_INTEGER:
3495                         *(int *)parm_ptr = atoi(pszParmValue);
3496                         break;
3497
3498                 case P_CHAR:
3499                         *(char *)parm_ptr = *pszParmValue;
3500                         break;
3501
3502                 case P_OCTAL:
3503                         i = sscanf(pszParmValue, "%o", (int *)parm_ptr);
3504                         if ( i != 1 ) {
3505                             DEBUG ( 0, ("Invalid octal number %s\n", pszParmName ));
3506                         }
3507                         break;
3508
3509                 case P_LIST:
3510                         str_list_free((char ***)parm_ptr);
3511                         *(char ***)parm_ptr = str_list_make(pszParmValue, NULL);
3512                         break;
3513
3514                 case P_STRING:
3515                         string_set((char **)parm_ptr, pszParmValue);
3516                         break;
3517
3518                 case P_USTRING:
3519                         string_set((char **)parm_ptr, pszParmValue);
3520                         strupper_m(*(char **)parm_ptr);
3521                         break;
3522
3523                 case P_GSTRING:
3524                         pstrcpy((char *)parm_ptr, pszParmValue);
3525                         break;
3526
3527                 case P_UGSTRING:
3528                         pstrcpy((char *)parm_ptr, pszParmValue);
3529                         strupper_m((char *)parm_ptr);
3530                         break;
3531
3532                 case P_ENUM:
3533                         lp_set_enum_parm( &parm_table[parmnum], pszParmValue, (int*)parm_ptr );
3534                         break;
3535                 case P_SEP:
3536                         break;
3537         }
3538
3539         return (True);
3540 }
3541
3542 /***************************************************************************
3543  Process a parameter.
3544 ***************************************************************************/
3545
3546 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue)
3547 {
3548         if (!bInGlobalSection && bGlobalOnly)
3549                 return (True);
3550
3551         DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
3552
3553         return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
3554                                 pszParmName, pszParmValue));
3555 }
3556
3557 /***************************************************************************
3558  Print a parameter of the specified type.
3559 ***************************************************************************/
3560
3561 static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
3562 {
3563         int i;
3564         switch (p->type)
3565         {
3566                 case P_ENUM:
3567                         for (i = 0; p->enum_list[i].name; i++) {
3568                                 if (*(int *)ptr == p->enum_list[i].value) {
3569                                         fprintf(f, "%s",
3570                                                 p->enum_list[i].name);
3571                                         break;
3572                                 }
3573                         }
3574                         break;
3575
3576                 case P_BOOL:
3577                         fprintf(f, "%s", BOOLSTR(*(BOOL *)ptr));
3578                         break;
3579
3580                 case P_BOOLREV:
3581                         fprintf(f, "%s", BOOLSTR(!*(BOOL *)ptr));
3582                         break;
3583
3584                 case P_INTEGER:
3585                         fprintf(f, "%d", *(int *)ptr);
3586                         break;
3587
3588                 case P_CHAR:
3589                         fprintf(f, "%c", *(char *)ptr);
3590                         break;
3591
3592                 case P_OCTAL:
3593                         fprintf(f, "%s", octal_string(*(int *)ptr));
3594                         break;
3595
3596                 case P_LIST:
3597                         if ((char ***)ptr && *(char ***)ptr) {
3598                                 char **list = *(char ***)ptr;
3599
3600                                 for (; *list; list++) {
3601                                         /* surround strings with whitespace in double quotes */
3602                                         if ( strchr_m( *list, ' ' ) )
3603                                                 fprintf(f, "\"%s\"%s", *list, ((*(list+1))?", ":""));
3604                                         else
3605                                                 fprintf(f, "%s%s", *list, ((*(list+1))?", ":""));
3606                                 }
3607                         }
3608                         break;
3609
3610                 case P_GSTRING:
3611                 case P_UGSTRING:
3612                         if ((char *)ptr) {
3613                                 fprintf(f, "%s", (char *)ptr);
3614                         }
3615                         break;
3616
3617                 case P_STRING:
3618                 case P_USTRING:
3619                         if (*(char **)ptr) {
3620                                 fprintf(f, "%s", *(char **)ptr);
3621                         }
3622                         break;
3623                 case P_SEP:
3624                         break;
3625         }
3626 }
3627
3628 /***************************************************************************
3629  Check if two parameters are equal.
3630 ***************************************************************************/
3631
3632 static BOOL equal_parameter(parm_type type, void *ptr1, void *ptr2)
3633 {
3634         switch (type) {
3635                 case P_BOOL:
3636                 case P_BOOLREV:
3637                         return (*((BOOL *)ptr1) == *((BOOL *)ptr2));
3638
3639                 case P_INTEGER:
3640                 case P_ENUM:
3641                 case P_OCTAL:
3642                         return (*((int *)ptr1) == *((int *)ptr2));
3643
3644                 case P_CHAR:
3645                         return (*((char *)ptr1) == *((char *)ptr2));
3646
3647                 case P_LIST:
3648                         return str_list_compare(*(char ***)ptr1, *(char ***)ptr2);
3649
3650                 case P_GSTRING:
3651                 case P_UGSTRING:
3652                 {
3653                         char *p1 = (char *)ptr1, *p2 = (char *)ptr2;
3654                         if (p1 && !*p1)
3655                                 p1 = NULL;
3656                         if (p2 && !*p2)
3657                                 p2 = NULL;
3658                         return (p1 == p2 || strequal(p1, p2));
3659                 }
3660                 case P_STRING:
3661                 case P_USTRING:
3662                 {
3663                         char *p1 = *(char **)ptr1, *p2 = *(char **)ptr2;
3664                         if (p1 && !*p1)
3665                                 p1 = NULL;
3666                         if (p2 && !*p2)
3667                                 p2 = NULL;
3668                         return (p1 == p2 || strequal(p1, p2));
3669                 }
3670                 case P_SEP:
3671                         break;
3672         }
3673         return (False);
3674 }
3675
3676 /***************************************************************************
3677  Initialize any local varients in the sDefault table.
3678 ***************************************************************************/
3679
3680 void init_locals(void)
3681 {
3682         /* None as yet. */
3683 }
3684
3685 /***************************************************************************
3686  Process a new section (service). At this stage all sections are services.
3687  Later we'll have special sections that permit server parameters to be set.
3688  Returns True on success, False on failure.
3689 ***************************************************************************/
3690
3691 static BOOL do_section(const char *pszSectionName)
3692 {
3693         BOOL bRetval;
3694         BOOL isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
3695                          (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
3696         bRetval = False;
3697
3698         /* if we were in a global section then do the local inits */
3699         if (bInGlobalSection && !isglobal)
3700                 init_locals();
3701
3702         /* if we've just struck a global section, note the fact. */
3703         bInGlobalSection = isglobal;
3704
3705         /* check for multiple global sections */
3706         if (bInGlobalSection) {
3707                 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName));
3708                 return (True);
3709         }
3710
3711         if (!bInGlobalSection && bGlobalOnly)
3712                 return (True);
3713
3714         /* if we have a current service, tidy it up before moving on */
3715         bRetval = True;
3716
3717         if (iServiceIndex >= 0)
3718                 bRetval = service_ok(iServiceIndex);
3719
3720         /* if all is still well, move to the next record in the services array */
3721         if (bRetval) {
3722                 /* We put this here to avoid an odd message order if messages are */
3723                 /* issued by the post-processing of a previous section. */
3724                 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName));
3725
3726                 if ((iServiceIndex = add_a_service(&sDefault, pszSectionName))
3727                     < 0) {
3728                         DEBUG(0, ("Failed to add a new service\n"));
3729                         return (False);
3730                 }
3731         }
3732
3733         return (bRetval);
3734 }
3735
3736
3737 /***************************************************************************
3738  Determine if a partcular base parameter is currentl set to the default value.
3739 ***************************************************************************/
3740
3741 static BOOL is_default(int i)
3742 {
3743         if (!defaults_saved)
3744                 return False;
3745         switch (parm_table[i].type) {
3746                 case P_LIST:
3747                         return str_list_compare (parm_table[i].def.lvalue,
3748                                                 *(char ***)parm_table[i].ptr);
3749                 case P_STRING:
3750                 case P_USTRING:
3751                         return strequal(parm_table[i].def.svalue,
3752                                         *(char **)parm_table[i].ptr);
3753                 case P_GSTRING:
3754                 case P_UGSTRING:
3755                         return strequal(parm_table[i].def.svalue,
3756                                         (char *)parm_table[i].ptr);
3757                 case P_BOOL:
3758                 case P_BOOLREV:
3759                         return parm_table[i].def.bvalue ==
3760                                 *(BOOL *)parm_table[i].ptr;
3761                 case P_CHAR:
3762                         return parm_table[i].def.cvalue ==
3763                                 *(char *)parm_table[i].ptr;
3764                 case P_INTEGER:
3765                 case P_OCTAL:
3766                 case P_ENUM:
3767                         return parm_table[i].def.ivalue ==
3768                                 *(int *)parm_table[i].ptr;
3769                 case P_SEP:
3770                         break;
3771         }
3772         return False;
3773 }
3774
3775 /***************************************************************************
3776 Display the contents of the global structure.
3777 ***************************************************************************/
3778
3779 static void dump_globals(FILE *f)
3780 {
3781         int i;
3782         param_opt_struct *data;
3783
3784         fprintf(f, "[global]\n");
3785
3786         for (i = 0; parm_table[i].label; i++)
3787                 if (parm_table[i].p_class == P_GLOBAL &&
3788                     parm_table[i].ptr &&
3789                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr))) {
3790                         if (defaults_saved && is_default(i))
3791                                 continue;
3792                         fprintf(f, "\t%s = ", parm_table[i].label);
3793                         print_parameter(&parm_table[i], parm_table[i].ptr, f);
3794                         fprintf(f, "\n");
3795         }
3796         if (Globals.param_opt != NULL) {
3797                 data = Globals.param_opt;
3798                 while(data) {
3799                         fprintf(f, "\t%s = %s\n", data->key, data->value);
3800                         data = data->next;
3801                 }
3802         }
3803
3804 }
3805
3806 /***************************************************************************
3807  Return True if a local parameter is currently set to the global default.
3808 ***************************************************************************/
3809
3810 BOOL lp_is_default(int snum, struct parm_struct *parm)
3811 {
3812         int pdiff = PTR_DIFF(parm->ptr, &sDefault);
3813
3814         return equal_parameter(parm->type,
3815                                ((char *)ServicePtrs[snum]) + pdiff,
3816                                ((char *)&sDefault) + pdiff);
3817 }
3818
3819 /***************************************************************************
3820  Display the contents of a single services record.
3821 ***************************************************************************/
3822
3823 static void dump_a_service(service * pService, FILE * f)
3824 {
3825         int i;
3826         param_opt_struct *data;
3827
3828         if (pService != &sDefault)
3829                 fprintf(f, "[%s]\n", pService->szService);
3830
3831         for (i = 0; parm_table[i].label; i++) {
3832
3833                 if (parm_table[i].p_class == P_LOCAL &&
3834                     parm_table[i].ptr &&
3835                     (*parm_table[i].label != '-') &&
3836                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3837                 {
3838
3839                         int pdiff = PTR_DIFF(parm_table[i].ptr, &sDefault);
3840
3841                         if (pService == &sDefault) {
3842                                 if (defaults_saved && is_default(i))
3843                                         continue;
3844                         } else {
3845                                 if (equal_parameter(parm_table[i].type,
3846                                                     ((char *)pService) +
3847                                                     pdiff,
3848                                                     ((char *)&sDefault) +
3849                                                     pdiff))
3850                                         continue;
3851                         }
3852
3853                         fprintf(f, "\t%s = ", parm_table[i].label);
3854                         print_parameter(&parm_table[i],
3855                                         ((char *)pService) + pdiff, f);
3856                         fprintf(f, "\n");
3857                 }
3858         }
3859
3860                 if (pService->param_opt != NULL) {
3861                         data = pService->param_opt;
3862                         while(data) {
3863                                 fprintf(f, "\t%s = %s\n", data->key, data->value);
3864                                 data = data->next;
3865                         }
3866                 }
3867 }
3868
3869 /***************************************************************************
3870  Display the contents of a parameter of a single services record.
3871 ***************************************************************************/
3872
3873 BOOL dump_a_parameter(int snum, char *parm_name, FILE * f, BOOL isGlobal)
3874 {
3875         service * pService = ServicePtrs[snum];
3876         int i, result = False;
3877         parm_class p_class;
3878         unsigned flag = 0;
3879
3880         if (isGlobal) {
3881                 p_class = P_GLOBAL;
3882                 flag = FLAG_GLOBAL;
3883         } else
3884                 p_class = P_LOCAL;
3885
3886         for (i = 0; parm_table[i].label; i++) {
3887                 if (strwicmp(parm_table[i].label, parm_name) == 0 &&
3888                     (parm_table[i].p_class == p_class || parm_table[i].flags & flag) &&
3889                     parm_table[i].ptr &&
3890                     (*parm_table[i].label != '-') &&
3891                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3892                 {
3893                         void *ptr;
3894
3895                         if (isGlobal)
3896                                 ptr = parm_table[i].ptr;
3897                         else
3898                                 ptr = ((char *)pService) +
3899                                         PTR_DIFF(parm_table[i].ptr, &sDefault);
3900
3901                         print_parameter(&parm_table[i],
3902                                         ptr, f);
3903                         fprintf(f, "\n");
3904                         result = True;
3905                         break;
3906                 }
3907         }
3908
3909         return result;
3910 }
3911
3912 /***************************************************************************
3913  Return info about the next service  in a service. snum==GLOBAL_SECTION_SNUM gives the globals.
3914  Return NULL when out of parameters.
3915 ***************************************************************************/
3916
3917 struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
3918 {
3919         if (snum < 0) {
3920                 /* do the globals */
3921                 for (; parm_table[*i].label; (*i)++) {
3922                         if (parm_table[*i].p_class == P_SEPARATOR)
3923                                 return &parm_table[(*i)++];
3924
3925                         if (!parm_table[*i].ptr
3926                             || (*parm_table[*i].label == '-'))
3927                                 continue;
3928
3929                         if ((*i) > 0
3930                             && (parm_table[*i].ptr ==
3931                                 parm_table[(*i) - 1].ptr))
3932                                 continue;
3933
3934                         return &parm_table[(*i)++];
3935                 }
3936         } else {
3937                 service *pService = ServicePtrs[snum];
3938
3939                 for (; parm_table[*i].label; (*i)++) {
3940                         if (parm_table[*i].p_class == P_SEPARATOR)
3941                                 return &parm_table[(*i)++];
3942
3943                         if (parm_table[*i].p_class == P_LOCAL &&
3944                             parm_table[*i].ptr &&
3945                             (*parm_table[*i].label != '-') &&
3946                             ((*i) == 0 ||
3947                              (parm_table[*i].ptr !=
3948                               parm_table[(*i) - 1].ptr)))
3949                         {
3950                                 int pdiff =
3951                                         PTR_DIFF(parm_table[*i].ptr,
3952                                                  &sDefault);
3953
3954                                 if (allparameters ||
3955                                     !equal_parameter(parm_table[*i].type,
3956                                                      ((char *)pService) +
3957                                                      pdiff,
3958                                                      ((char *)&sDefault) +
3959                                                      pdiff))
3960                                 {
3961                                         return &parm_table[(*i)++];
3962                                 }
3963                         }
3964                 }
3965         }
3966
3967         return NULL;
3968 }
3969
3970
3971 #if 0
3972 /***************************************************************************
3973  Display the contents of a single copy structure.
3974 ***************************************************************************/
3975 static void dump_copy_map(BOOL *pcopymap)
3976 {
3977         int i;
3978         if (!pcopymap)
3979                 return;
3980
3981         printf("\n\tNon-Copied parameters:\n");
3982
3983         for (i = 0; parm_table[i].label; i++)
3984                 if (parm_table[i].p_class == P_LOCAL &&
3985                     parm_table[i].ptr && !pcopymap[i] &&
3986                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3987                 {
3988                         printf("\t\t%s\n", parm_table[i].label);
3989                 }
3990 }
3991 #endif
3992
3993 /***************************************************************************
3994  Return TRUE if the passed service number is within range.
3995 ***************************************************************************/
3996
3997 BOOL lp_snum_ok(int iService)
3998 {
3999         return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
4000 }
4001
4002 /***************************************************************************
4003  Auto-load some home services.
4004 ***************************************************************************/
4005
4006 static void lp_add_auto_services(char *str)
4007 {
4008         char *s;
4009         char *p;
4010         int homes;
4011
4012         if (!str)
4013                 return;
4014
4015         s = SMB_STRDUP(str);
4016         if (!s)
4017                 return;
4018
4019         homes = lp_servicenumber(HOMES_NAME);
4020
4021         for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP)) {
4022                 char *home = get_user_home_dir(p);
4023
4024                 if (lp_servicenumber(p) >= 0)
4025                         continue;
4026
4027                 if (home && homes >= 0)
4028                         lp_add_home(p, homes, p, home);
4029         }
4030         SAFE_FREE(s);
4031 }
4032
4033 /***************************************************************************
4034  Auto-load one printer.
4035 ***************************************************************************/
4036
4037 void lp_add_one_printer(char *name, char *comment)
4038 {
4039         int printers = lp_servicenumber(PRINTERS_NAME);
4040         int i;
4041
4042         if (lp_servicenumber(name) < 0) {
4043                 lp_add_printer(name, printers);
4044                 if ((i = lp_servicenumber(name)) >= 0) {
4045                         string_set(&ServicePtrs[i]->comment, comment);
4046                         ServicePtrs[i]->autoloaded = True;
4047                 }
4048         }
4049 }
4050
4051 /***************************************************************************
4052  Have we loaded a services file yet?
4053 ***************************************************************************/
4054
4055 BOOL lp_loaded(void)
4056 {
4057         return (bLoaded);
4058 }
4059
4060 /***************************************************************************
4061  Unload unused services.
4062 ***************************************************************************/
4063
4064 void lp_killunused(BOOL (*snumused) (int))
4065 {
4066         int i;
4067         for (i = 0; i < iNumServices; i++) {
4068                 if (!VALID(i))
4069                         continue;
4070
4071                 /* don't kill autoloaded or usershare services */
4072                 if ( ServicePtrs[i]->autoloaded ||
4073                                 ServicePtrs[i]->usershare == USERSHARE_VALID) {
4074                         continue;
4075                 }
4076
4077                 if (!snumused || !snumused(i)) {
4078                         free_service_byindex(i);
4079                 }
4080         }
4081 }
4082
4083 /***************************************************************************
4084  Unload a service.
4085 ***************************************************************************/
4086
4087 void lp_killservice(int iServiceIn)
4088 {
4089         if (VALID(iServiceIn)) {
4090                 free_service_byindex(iServiceIn);
4091         }
4092 }
4093
4094 /***************************************************************************
4095  Save the curent values of all global and sDefault parameters into the
4096  defaults union. This allows swat and testparm to show only the
4097  changed (ie. non-default) parameters.
4098 ***************************************************************************/
4099
4100 static void lp_save_defaults(void)
4101 {
4102         int i;
4103         for (i = 0; parm_table[i].label; i++) {
4104                 if (i > 0 && parm_table[i].ptr == parm_table[i - 1].ptr)
4105                         continue;
4106                 switch (parm_table[i].type) {
4107                         case P_LIST:
4108                                 str_list_copy(&(parm_table[i].def.lvalue),
4109                                             *(const char ***)parm_table[i].ptr);
4110                                 break;
4111                         case P_STRING:
4112                         case P_USTRING:
4113                                 if (parm_table[i].ptr) {
4114                                         parm_table[i].def.svalue = SMB_STRDUP(*(char **)parm_table[i].ptr);
4115                                 } else {
4116                                         parm_table[i].def.svalue = NULL;
4117                                 }
4118                                 break;
4119                         case P_GSTRING:
4120                         case P_UGSTRING:
4121                                 if (parm_table[i].ptr) {
4122                                         parm_table[i].def.svalue = SMB_STRDUP((char *)parm_table[i].ptr);
4123                                 } else {
4124                                         parm_table[i].def.svalue = NULL;
4125                                 }
4126                                 break;
4127                         case P_BOOL:
4128                         case P_BOOLREV:
4129                                 parm_table[i].def.bvalue =
4130                                         *(BOOL *)parm_table[i].ptr;
4131                                 break;
4132                         case P_CHAR:
4133                                 parm_table[i].def.cvalue =
4134                                         *(char *)parm_table[i].ptr;
4135                                 break;
4136                         case P_INTEGER:
4137                         case P_OCTAL:
4138                         case P_ENUM:
4139                                 parm_table[i].def.ivalue =
4140                                         *(int *)parm_table[i].ptr;
4141                                 break;
4142                         case P_SEP:
4143                                 break;
4144                 }
4145         }
4146         defaults_saved = True;
4147 }
4148
4149 /*******************************************************************
4150  Set the server type we will announce as via nmbd.
4151 ********************************************************************/
4152
4153 static const struct srv_role_tab {
4154         uint32 role;
4155         const char *role_str;
4156 } srv_role_tab [] = {
4157         { ROLE_STANDALONE, "ROLE_STANDALONE" },
4158         { ROLE_DOMAIN_MEMBER, "ROLE_DOMAIN_MEMBER" },
4159         { ROLE_DOMAIN_BDC, "ROLE_DOMAIN_BDC" },
4160         { ROLE_DOMAIN_PDC, "ROLE_DOMAIN_PDC" },
4161         { 0, NULL }
4162 };
4163
4164 const char* server_role_str(uint32 role)
4165 {
4166         int i = 0;
4167         for (i=0; srv_role_tab[i].role_str; i++) {
4168                 if (role == srv_role_tab[i].role) {
4169                         return srv_role_tab[i].role_str;
4170                 }
4171         }
4172         return NULL;
4173 }
4174
4175 static void set_server_role(void)
4176 {
4177         server_role = ROLE_STANDALONE;
4178
4179         switch (lp_security()) {
4180                 case SEC_SHARE:
4181                         if (lp_domain_logons())
4182                                 DEBUG(0, ("Server's Role (logon server) conflicts with share-level security\n"));
4183                         break;
4184                 case SEC_SERVER:
4185                         if (lp_domain_logons())
4186                                 DEBUG(0, ("Server's Role (logon server) conflicts with server-level security\n"));
4187                         server_role = ROLE_DOMAIN_MEMBER;
4188                         break;
4189                 case SEC_DOMAIN:
4190                         if (lp_domain_logons()) {
4191                                 DEBUG(1, ("Server's Role (logon server) NOT ADVISED with domain-level security\n"));
4192                                 server_role = ROLE_DOMAIN_BDC;
4193                                 break;
4194                         }
4195                         server_role = ROLE_DOMAIN_MEMBER;
4196                         break;
4197                 case SEC_ADS:
4198                         if (lp_domain_logons()) {
4199                                 server_role = ROLE_DOMAIN_PDC;
4200                                 break;
4201                         }
4202                         server_role = ROLE_DOMAIN_MEMBER;
4203                         break;
4204                 case SEC_USER:
4205                         if (lp_domain_logons()) {
4206
4207                                 if (Globals.bDomainMaster) /* auto or yes */
4208                                         server_role = ROLE_DOMAIN_PDC;
4209                                 else
4210                                         server_role = ROLE_DOMAIN_BDC;
4211                         }
4212                         break;
4213                 default:
4214                         DEBUG(0, ("Server's Role undefined due to unknown security mode\n"));
4215                         break;
4216         }
4217
4218         DEBUG(10, ("set_server_role: role = %s\n", server_role_str(server_role)));
4219 }
4220
4221 /***********************************************************
4222  If we should send plaintext/LANMAN passwords in the clinet
4223 ************************************************************/
4224
4225 static void set_allowed_client_auth(void)
4226 {
4227         if (Globals.bClientNTLMv2Auth) {
4228                 Globals.bClientLanManAuth = False;
4229         }
4230         if (!Globals.bClientLanManAuth) {
4231                 Globals.bClientPlaintextAuth = False;
4232         }
4233 }
4234
4235 /***************************************************************************
4236  JRA.
4237  The following code allows smbd to read a user defined share file.
4238  Yes, this is my intent. Yes, I'm comfortable with that...
4239
4240  THE FOLLOWING IS SECURITY CRITICAL CODE.
4241
4242  It washes your clothes, it cleans your house, it guards you while you sleep...
4243  Do not f%^k with it....
4244 ***************************************************************************/
4245
4246 #define MAX_USERSHARE_FILE_SIZE (10*1024)
4247
4248 /***************************************************************************
4249  Check allowed stat state of a usershare file.
4250  Ensure we print out who is dicking with us so the admin can
4251  get their sorry ass fired.
4252 ***************************************************************************/
4253
4254 static BOOL check_usershare_stat(const char *fname, SMB_STRUCT_STAT *psbuf)
4255 {
4256         if (!S_ISREG(psbuf->st_mode)) {
4257                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4258                         "not a regular file\n",
4259                         fname, (unsigned int)psbuf->st_uid ));
4260                 return False;
4261         }
4262
4263         /* Ensure this doesn't have the other write bit set. */
4264         if (psbuf->st_mode & S_IWOTH) {
4265                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
4266                         "public write. Refusing to allow as a usershare file.\n",
4267                         fname, (unsigned int)psbuf->st_uid ));
4268                 return False;
4269         }
4270
4271         /* Should be 10k or less. */
4272         if (psbuf->st_size > MAX_USERSHARE_FILE_SIZE) {
4273                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4274                         "too large (%u) to be a user share file.\n",
4275                         fname, (unsigned int)psbuf->st_uid,
4276                         (unsigned int)psbuf->st_size ));
4277                 return False;
4278         }
4279
4280         return True;
4281 }
4282
4283 /***************************************************************************
4284  Parse the contents of a usershare file.
4285 ***************************************************************************/
4286
4287 enum usershare_err parse_usershare_file(TALLOC_CTX *ctx,
4288                         SMB_STRUCT_STAT *psbuf,
4289                         const char *servicename,
4290                         int snum,
4291                         char **lines,
4292                         int numlines,
4293                         pstring sharepath,
4294                         pstring comment,
4295                         SEC_DESC **ppsd)
4296 {
4297         const char **prefixallowlist = lp_usershare_prefix_allow_list();
4298         const char **prefixdenylist = lp_usershare_prefix_deny_list();
4299         SMB_STRUCT_DIR *dp;
4300         SMB_STRUCT_STAT sbuf;
4301
4302         if (numlines < 4) {
4303                 return USERSHARE_MALFORMED_FILE;
4304         }
4305
4306         if (!strequal(lines[0], "#VERSION 1")) {
4307                 return USERSHARE_BAD_VERSION;
4308         }
4309
4310         if (!strnequal(lines[1], "path=", 5)) {
4311                 return USERSHARE_MALFORMED_PATH;
4312         }
4313
4314         pstrcpy(sharepath, &lines[1][5]);
4315         trim_string(sharepath, " ", " ");
4316
4317         if (!strnequal(lines[2], "comment=", 8)) {
4318                 return USERSHARE_MALFORMED_COMMENT_DEF;
4319         }
4320
4321         pstrcpy(comment, &lines[2][8]);
4322         trim_string(comment, " ", " ");
4323         trim_char(comment, '"', '"');
4324
4325         if (!strnequal(lines[3], "usershare_acl=", 14)) {
4326                 return USERSHARE_MALFORMED_ACL_DEF;
4327         }
4328
4329         if (!parse_usershare_acl(ctx, &lines[3][14], ppsd)) {
4330                 return USERSHARE_ACL_ERR;
4331         }
4332
4333         if (snum != -1 && strequal(sharepath, ServicePtrs[snum]->szPath)) {
4334                 /* Path didn't change, no checks needed. */
4335                 return USERSHARE_OK;
4336         }
4337
4338         /* The path *must* be absolute. */
4339         if (sharepath[0] != '/') {
4340                 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
4341                         servicename, sharepath));
4342                 return USERSHARE_PATH_NOT_ABSOLUTE;
4343         }
4344
4345         /* If there is a usershare prefix deny list ensure one of these paths
4346            doesn't match the start of the user given path. */
4347         if (prefixdenylist) {
4348                 int i;
4349                 for ( i=0; prefixdenylist[i]; i++ ) {
4350                         DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
4351                                 servicename, i, prefixdenylist[i], sharepath ));
4352                         if (memcmp( sharepath, prefixdenylist[i], strlen(prefixdenylist[i])) == 0) {
4353                                 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
4354                                         "usershare prefix deny list entries.\n",
4355                                         servicename, sharepath));
4356                                 return USERSHARE_PATH_IS_DENIED;
4357                         }
4358                 }
4359         }
4360
4361         /* If there is a usershare prefix allow list ensure one of these paths
4362            does match the start of the user given path. */
4363
4364         if (prefixallowlist) {
4365                 int i;
4366                 for ( i=0; prefixallowlist[i]; i++ ) {
4367                         DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
4368                                 servicename, i, prefixallowlist[i], sharepath ));
4369                         if (memcmp( sharepath, prefixallowlist[i], strlen(prefixallowlist[i])) == 0) {
4370                                 break;
4371                         }
4372                 }
4373                 if (prefixallowlist[i] == NULL) {
4374                         DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
4375                                 "usershare prefix allow list entries.\n",
4376                                 servicename, sharepath));
4377                         return USERSHARE_PATH_NOT_ALLOWED;
4378                 }
4379         }
4380
4381         /* Ensure this is pointing to a directory. */
4382         dp = sys_opendir(sharepath);
4383
4384         if (!dp) {
4385                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4386                         servicename, sharepath));
4387                 return USERSHARE_PATH_NOT_DIRECTORY;
4388         }
4389
4390         /* Ensure the owner of the usershare file has permission to share
4391            this directory. */
4392
4393         if (sys_stat(sharepath, &sbuf) == -1) {
4394                 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
4395                         servicename, sharepath, strerror(errno) ));
4396                 sys_closedir(dp);
4397                 return USERSHARE_POSIX_ERR;
4398         }
4399
4400         sys_closedir(dp);
4401
4402         if (!S_ISDIR(sbuf.st_mode)) {
4403                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4404                         servicename, sharepath ));
4405                 return USERSHARE_PATH_NOT_DIRECTORY;
4406         }
4407
4408         /* Check if sharing is restricted to owner-only. */
4409         /* psbuf is the stat of the usershare definition file,
4410            sbuf is the stat of the target directory to be shared. */
4411
4412         if (lp_usershare_owner_only()) {
4413                 /* root can share anything. */
4414                 if ((psbuf->st_uid != 0) && (sbuf.st_uid != psbuf->st_uid)) {
4415                         return USERSHARE_PATH_NOT_ALLOWED;
4416                 }
4417         }
4418
4419         return USERSHARE_OK;
4420 }
4421
4422 /***************************************************************************
4423  Deal with a usershare file.
4424  Returns:
4425         >= 0 - snum
4426         -1 - Bad name, invalid contents.
4427            - service name already existed and not a usershare, problem
4428             with permissions to share directory etc.
4429 ***************************************************************************/
4430
4431 static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template)
4432 {
4433         SMB_STRUCT_STAT sbuf;
4434         SMB_STRUCT_STAT lsbuf;
4435         pstring fname;
4436         pstring sharepath;
4437         pstring comment;
4438         fstring service_name;
4439         char **lines = NULL;
4440         int numlines = 0;
4441         int fd = -1;
4442         int iService = -1;
4443         TALLOC_CTX *ctx = NULL;
4444         SEC_DESC *psd = NULL;
4445
4446         /* Ensure share name doesn't contain invalid characters. */
4447         if (!validate_net_name(file_name, INVALID_SHARENAME_CHARS, strlen(file_name))) {
4448                 DEBUG(0,("process_usershare_file: share name %s contains "
4449                         "invalid characters (any of %s)\n",
4450                         file_name, INVALID_SHARENAME_CHARS ));
4451                 return -1;
4452         }
4453
4454         fstrcpy(service_name, file_name);
4455
4456         pstrcpy(fname, dir_name);
4457         pstrcat(fname, "/");
4458         pstrcat(fname, file_name);
4459
4460         /* Minimize the race condition by doing an lstat before we
4461            open and fstat. Ensure this isn't a symlink link. */
4462
4463         if (sys_lstat(fname, &lsbuf) != 0) {
4464                 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
4465                         fname, strerror(errno) ));
4466                 return -1;
4467         }
4468
4469         /* This must be a regular file, not a symlink, directory or
4470            other strange filetype. */
4471         if (!check_usershare_stat(fname, &lsbuf)) {
4472                 return -1;
4473         }
4474
4475         /* See if there is already a servicenum for this name. */
4476         /* tdb_fetch_int32 returns -1 if not found. */
4477         iService = (int)tdb_fetch_int32(ServiceHash, canonicalize_servicename(service_name) );
4478
4479         if (iService != -1 && ServicePtrs[iService]->usershare_last_mod == lsbuf.st_mtime) {
4480                 /* Nothing changed - Mark valid and return. */
4481                 DEBUG(10,("process_usershare_file: service %s not changed.\n",
4482                         service_name ));
4483                 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4484                 return iService;
4485         }
4486
4487         /* Try and open the file read only - no symlinks allowed. */
4488 #ifdef O_NOFOLLOW
4489         fd = sys_open(fname, O_RDONLY|O_NOFOLLOW, 0);
4490 #else
4491         fd = sys_open(fname, O_RDONLY, 0);
4492 #endif
4493
4494         if (fd == -1) {
4495                 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
4496                         fname, strerror(errno) ));
4497                 return -1;
4498         }
4499
4500         /* Now fstat to be *SURE* it's a regular file. */
4501         if (sys_fstat(fd, &sbuf) != 0) {
4502                 close(fd);
4503                 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
4504                         fname, strerror(errno) ));
4505                 return -1;
4506         }
4507
4508         /* Is it the same dev/inode as was lstated ? */
4509         if (lsbuf.st_dev != sbuf.st_dev || lsbuf.st_ino != sbuf.st_ino) {
4510                 close(fd);
4511                 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
4512                         "Symlink spoofing going on ?\n", fname ));
4513                 return -1;
4514         }
4515
4516         /* This must be a regular file, not a symlink, directory or
4517            other strange filetype. */
4518         if (!check_usershare_stat(fname, &sbuf)) {
4519                 return -1;
4520         }
4521
4522         lines = fd_lines_load(fd, &numlines, MAX_USERSHARE_FILE_SIZE);
4523
4524         close(fd);
4525         if (lines == NULL) {
4526                 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
4527                         fname, (unsigned int)sbuf.st_uid ));
4528         }
4529
4530         /* Should we allow printers to be shared... ? */
4531         ctx = talloc_init("usershare_sd_xctx");
4532         if (!ctx) {
4533                 SAFE_FREE(lines);
4534                 return 1;
4535         }
4536
4537         if (parse_usershare_file(ctx, &sbuf, service_name, iService, lines, numlines, sharepath, comment, &psd) != USERSHARE_OK) {
4538                 talloc_destroy(ctx);
4539                 SAFE_FREE(lines);
4540                 return -1;
4541         }
4542
4543         SAFE_FREE(lines);
4544
4545         /* Everything ok - add the service possibly using a template. */
4546         if (iService < 0) {
4547                 const service *sp = &sDefault;
4548                 if (snum_template != -1) {
4549                         sp = ServicePtrs[snum_template];
4550                 }
4551
4552                 if ((iService = add_a_service(sp, service_name)) < 0) {
4553                         DEBUG(0, ("process_usershare_file: Failed to add "
4554                                 "new service %s\n", service_name));
4555                         talloc_destroy(ctx);
4556                         return -1;
4557                 }
4558
4559                 /* Read only is controlled by usershare ACL below. */
4560                 ServicePtrs[iService]->bRead_only = False;
4561         }
4562
4563         /* Write the ACL of the new/modified share. */
4564         if (!set_share_security(ctx, service_name, psd)) {
4565                  DEBUG(0, ("process_usershare_file: Failed to set share "
4566                         "security for user share %s\n",
4567                         service_name ));
4568                 lp_remove_service(iService);
4569                 talloc_destroy(ctx);
4570                 return -1;
4571         }
4572
4573         talloc_destroy(ctx);
4574
4575         /* If from a template it may be marked invalid. */
4576         ServicePtrs[iService]->valid = True;
4577
4578         /* Set the service as a valid usershare. */
4579         ServicePtrs[iService]->usershare = USERSHARE_VALID;
4580
4581         /* And note when it was loaded. */
4582         ServicePtrs[iService]->usershare_last_mod = sbuf.st_mtime;
4583         string_set(&ServicePtrs[iService]->szPath, sharepath);
4584         string_set(&ServicePtrs[iService]->comment, comment);
4585
4586         return iService;
4587 }
4588
4589 /***************************************************************************
4590  Checks if a usershare entry has been modified since last load.
4591 ***************************************************************************/
4592
4593 static BOOL usershare_exists(int iService, time_t *last_mod)
4594 {
4595         SMB_STRUCT_STAT lsbuf;
4596         const char *usersharepath = Globals.szUsersharePath;
4597         pstring fname;
4598
4599         pstrcpy(fname, usersharepath);
4600         pstrcat(fname, "/");
4601         pstrcat(fname, ServicePtrs[iService]->szService);
4602
4603         if (sys_lstat(fname, &lsbuf) != 0) {
4604                 return False;
4605         }
4606
4607         if (!S_ISREG(lsbuf.st_mode)) {
4608                 return False;
4609         }
4610
4611         *last_mod = lsbuf.st_mtime;
4612         return True;
4613 }
4614
4615 /***************************************************************************
4616  Load a usershare service by name. Returns a valid servicenumber or -1.
4617 ***************************************************************************/
4618
4619 int load_usershare_service(const char *servicename)
4620 {
4621         SMB_STRUCT_STAT sbuf;
4622         const char *usersharepath = Globals.szUsersharePath;
4623         int max_user_shares = Globals.iUsershareMaxShares;
4624         int snum_template = -1;
4625
4626         if (*usersharepath == 0 ||  max_user_shares == 0) {
4627                 return -1;
4628         }
4629
4630         if (sys_stat(usersharepath, &sbuf) != 0) {
4631                 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
4632                         usersharepath, strerror(errno) ));
4633                 return -1;
4634         }
4635
4636         if (!S_ISDIR(sbuf.st_mode)) {
4637                 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
4638                         usersharepath ));
4639                 return -1;
4640         }
4641
4642         /*
4643          * This directory must be owned by root, and have the 't' bit set.
4644          * It also must not be writable by "other".
4645          */
4646
4647 #ifdef S_ISVTX
4648         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4649 #else
4650         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4651 #endif
4652                 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
4653                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
4654                         usersharepath ));
4655                 return -1;
4656         }
4657
4658         /* Ensure the template share exists if it's set. */
4659         if (Globals.szUsershareTemplateShare[0]) {
4660                 /* We can't use lp_servicenumber here as we are recommending that
4661                    template shares have -valid=False set. */
4662                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4663                         if (ServicePtrs[snum_template]->szService &&
4664                                         strequal(ServicePtrs[snum_template]->szService,
4665                                                 Globals.szUsershareTemplateShare)) {
4666                                 break;
4667                         }
4668                 }
4669
4670                 if (snum_template == -1) {
4671                         DEBUG(0,("load_usershare_service: usershare template share %s "
4672                                 "does not exist.\n",
4673                                 Globals.szUsershareTemplateShare ));
4674                         return -1;
4675                 }
4676         }
4677
4678         return process_usershare_file(usersharepath, servicename, snum_template);
4679 }
4680
4681 /***************************************************************************
4682  Load all user defined shares from the user share directory.
4683  We only do this if we're enumerating the share list.
4684  This is the function that can delete usershares that have
4685  been removed.
4686 ***************************************************************************/
4687
4688 int load_usershare_shares(void)
4689 {
4690         SMB_STRUCT_DIR *dp;
4691         SMB_STRUCT_STAT sbuf;
4692         SMB_STRUCT_DIRENT *de;
4693         int num_usershares = 0;
4694         int max_user_shares = Globals.iUsershareMaxShares;
4695         unsigned int num_dir_entries, num_bad_dir_entries, num_tmp_dir_entries;
4696         unsigned int allowed_bad_entries = ((2*max_user_shares)/10);
4697         unsigned int allowed_tmp_entries = ((2*max_user_shares)/10);
4698         int iService;
4699         int snum_template = -1;
4700         const char *usersharepath = Globals.szUsersharePath;
4701         int ret = lp_numservices();
4702
4703         if (max_user_shares == 0 || *usersharepath == '\0') {
4704                 return lp_numservices();
4705         }
4706
4707         if (sys_stat(usersharepath, &sbuf) != 0) {
4708                 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
4709                         usersharepath, strerror(errno) ));
4710                 return ret;
4711         }
4712
4713         /*
4714          * This directory must be owned by root, and have the 't' bit set.
4715          * It also must not be writable by "other".
4716          */
4717
4718 #ifdef S_ISVTX
4719         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4720 #else
4721         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4722 #endif
4723                 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
4724                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
4725                         usersharepath ));
4726                 return ret;
4727         }
4728
4729         /* Ensure the template share exists if it's set. */
4730         if (Globals.szUsershareTemplateShare[0]) {
4731                 /* We can't use lp_servicenumber here as we are recommending that
4732                    template shares have -valid=False set. */
4733                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4734                         if (ServicePtrs[snum_template]->szService &&
4735                                         strequal(ServicePtrs[snum_template]->szService,
4736                                                 Globals.szUsershareTemplateShare)) {
4737                                 break;
4738                         }
4739                 }
4740
4741                 if (snum_template == -1) {
4742                         DEBUG(0,("load_usershare_shares: usershare template share %s "
4743                                 "does not exist.\n",
4744                                 Globals.szUsershareTemplateShare ));
4745                         return ret;
4746                 }
4747         }
4748
4749         /* Mark all existing usershares as pending delete. */
4750         for (iService = iNumServices - 1; iService >= 0; iService--) {
4751                 if (VALID(iService) && ServicePtrs[iService]->usershare) {
4752                         ServicePtrs[iService]->usershare = USERSHARE_PENDING_DELETE;
4753                 }
4754         }
4755
4756         dp = sys_opendir(usersharepath);
4757         if (!dp) {
4758                 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
4759                         usersharepath, strerror(errno) ));
4760                 return ret;
4761         }
4762
4763         for (num_dir_entries = 0, num_bad_dir_entries = 0, num_tmp_dir_entries = 0;
4764                         (de = sys_readdir(dp));
4765                         num_dir_entries++ ) {
4766                 int r;
4767                 const char *n = de->d_name;
4768
4769                 /* Ignore . and .. */
4770                 if (*n == '.') {
4771                         if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
4772                                 continue;
4773                         }
4774                 }
4775
4776                 if (n[0] == ':') {
4777                         /* Temporary file used when creating a share. */
4778                         num_tmp_dir_entries++;
4779                 }
4780
4781                 /* Allow 20% tmp entries. */
4782                 if (num_tmp_dir_entries > allowed_tmp_entries) {
4783                         DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
4784                                 "in directory %s\n",
4785                                 num_tmp_dir_entries, usersharepath));
4786                         break;
4787                 }
4788
4789                 r = process_usershare_file(usersharepath, n, snum_template);
4790                 if (r == 0) {
4791                         /* Update the services count. */
4792                         num_usershares++;
4793                         if (num_usershares >= max_user_shares) {
4794                                 DEBUG(0,("load_usershare_shares: max user shares reached "
4795                                         "on file %s in directory %s\n",
4796                                         n, usersharepath ));
4797                                 break;
4798                         }
4799                 } else if (r == -1) {
4800                         num_bad_dir_entries++;
4801                 }
4802
4803                 /* Allow 20% bad entries. */
4804                 if (num_bad_dir_entries > allowed_bad_entries) {
4805                         DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
4806                                 "in directory %s\n",
4807                                 num_bad_dir_entries, usersharepath));
4808                         break;
4809                 }
4810
4811                 /* Allow 20% bad entries. */
4812                 if (num_dir_entries > max_user_shares + allowed_bad_entries) {
4813                         DEBUG(0,("load_usershare_shares: too many total entries (%u) "
4814                         "in directory %s\n",
4815                         num_dir_entries, usersharepath));
4816                         break;
4817                 }
4818         }
4819
4820         sys_closedir(dp);
4821
4822         /* Sweep through and delete any non-refreshed usershares that are
4823            not currently in use. */
4824         for (iService = iNumServices - 1; iService >= 0; iService--) {
4825                 if (VALID(iService) && (ServicePtrs[iService]->usershare == USERSHARE_PENDING_DELETE)) {
4826                         if (conn_snum_used(iService)) {
4827                                 continue;
4828                         }
4829                         /* Remove from the share ACL db. */
4830                         DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
4831                                 lp_servicename(iService) ));
4832                         delete_share_security(iService);
4833                         free_service_byindex(iService);
4834                 }
4835         }
4836
4837         return lp_numservices();
4838 }
4839
4840 /***************************************************************************
4841  Load the services array from the services file. Return True on success,
4842  False on failure.
4843 ***************************************************************************/
4844
4845 BOOL lp_load(const char *pszFname,
4846              BOOL global_only,
4847              BOOL save_defaults,
4848              BOOL add_ipc,
4849              BOOL initialize_globals)
4850 {
4851         pstring n2;
4852         BOOL bRetval;
4853         param_opt_struct *data, *pdata;
4854
4855         pstrcpy(n2, pszFname);
4856
4857         standard_sub_basic( get_current_username(), n2,sizeof(n2) );
4858
4859         add_to_file_list(pszFname, n2);
4860
4861         bRetval = False;
4862
4863         DEBUG(3, ("lp_load: refreshing parameters\n"));
4864
4865         bInGlobalSection = True;
4866         bGlobalOnly = global_only;
4867
4868         init_globals(! initialize_globals);
4869         debug_init();
4870
4871         if (save_defaults) {
4872                 init_locals();
4873                 lp_save_defaults();
4874         }
4875
4876         if (Globals.param_opt != NULL) {
4877                 data = Globals.param_opt;
4878                 while (data) {
4879                         string_free(&data->key);
4880                         string_free(&data->value);
4881                         str_list_free(&data->list);
4882                         pdata = data->next;
4883                         SAFE_FREE(data);
4884                         data = pdata;
4885                 }
4886                 Globals.param_opt = NULL;
4887         }
4888
4889         /* We get sections first, so have to start 'behind' to make up */
4890         iServiceIndex = -1;
4891         bRetval = pm_process(n2, do_section, do_parameter);
4892
4893         /* finish up the last section */
4894         DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
4895         if (bRetval)
4896                 if (iServiceIndex >= 0)
4897                         bRetval = service_ok(iServiceIndex);
4898
4899         lp_add_auto_services(lp_auto_services());
4900
4901         if (add_ipc) {
4902                 /* When 'restrict anonymous = 2' guest connections to ipc$
4903                    are denied */
4904                 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
4905                 if ( lp_enable_asu_support() )
4906                         lp_add_ipc("ADMIN$", False);
4907         }
4908
4909         set_server_role();
4910         set_default_server_announce_type();
4911         set_allowed_client_auth();
4912
4913         bLoaded = True;
4914
4915         /* Now we check bWINSsupport and set szWINSserver to 127.0.0.1 */
4916         /* if bWINSsupport is true and we are in the client            */
4917         if (in_client && Globals.bWINSsupport) {
4918                 lp_do_parameter(GLOBAL_SECTION_SNUM, "wins server", "127.0.0.1");
4919         }
4920
4921         init_iconv();
4922
4923         return (bRetval);
4924 }
4925
4926 /***************************************************************************
4927  Reset the max number of services.
4928 ***************************************************************************/
4929
4930 void lp_resetnumservices(void)
4931 {
4932         iNumServices = 0;
4933 }
4934
4935 /***************************************************************************
4936  Return the max number of services.
4937 ***************************************************************************/
4938
4939 int lp_numservices(void)
4940 {
4941         return (iNumServices);
4942 }
4943
4944 /***************************************************************************
4945 Display the contents of the services array in human-readable form.
4946 ***************************************************************************/
4947
4948 void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint)
4949 {
4950         int iService;
4951
4952         if (show_defaults)
4953                 defaults_saved = False;
4954
4955         dump_globals(f);
4956
4957         dump_a_service(&sDefault, f);
4958
4959         for (iService = 0; iService < maxtoprint; iService++) {
4960                 fprintf(f,"\n");
4961                 lp_dump_one(f, show_defaults, iService);
4962         }
4963 }
4964
4965 /***************************************************************************
4966 Display the contents of one service in human-readable form.
4967 ***************************************************************************/
4968
4969 void lp_dump_one(FILE * f, BOOL show_defaults, int snum)
4970 {
4971         if (VALID(snum)) {
4972                 if (ServicePtrs[snum]->szService[0] == '\0')
4973                         return;
4974                 dump_a_service(ServicePtrs[snum], f);
4975         }
4976 }
4977
4978 /***************************************************************************
4979 Return the number of the service with the given name, or -1 if it doesn't
4980 exist. Note that this is a DIFFERENT ANIMAL from the internal function
4981 getservicebyname()! This works ONLY if all services have been loaded, and
4982 does not copy the found service.
4983 ***************************************************************************/
4984
4985 int lp_servicenumber(const char *pszServiceName)
4986 {
4987         int iService;
4988         fstring serviceName;
4989
4990         if (!pszServiceName) {
4991                 return GLOBAL_SECTION_SNUM;
4992         }
4993
4994         for (iService = iNumServices - 1; iService >= 0; iService--) {
4995                 if (VALID(iService) && ServicePtrs[iService]->szService) {
4996                         /*
4997                          * The substitution here is used to support %U is
4998                          * service names
4999                          */
5000                         fstrcpy(serviceName, ServicePtrs[iService]->szService);
5001                         standard_sub_basic(get_current_username(), serviceName,sizeof(serviceName));
5002                         if (strequal(serviceName, pszServiceName)) {
5003                                 break;
5004                         }
5005                 }
5006         }
5007
5008         if (iService >= 0 && ServicePtrs[iService]->usershare == USERSHARE_VALID) {
5009                 time_t last_mod;
5010
5011                 if (!usershare_exists(iService, &last_mod)) {
5012                         /* Remove the share security tdb entry for it. */
5013                         delete_share_security(iService);
5014                         /* Remove it from the array. */
5015                         free_service_byindex(iService);
5016                         /* Doesn't exist anymore. */
5017                         return GLOBAL_SECTION_SNUM;
5018                 }
5019
5020                 /* Has it been modified ? If so delete and reload. */
5021                 if (ServicePtrs[iService]->usershare_last_mod < last_mod) {
5022                         /* Remove it from the array. */
5023                         free_service_byindex(iService);
5024                         /* and now reload it. */
5025                         iService = load_usershare_service(pszServiceName);
5026                 }
5027         }
5028
5029         if (iService < 0) {
5030                 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
5031                 return GLOBAL_SECTION_SNUM;
5032         }
5033
5034         return (iService);
5035 }
5036
5037 /*******************************************************************
5038  A useful volume label function.
5039 ********************************************************************/
5040
5041 char *volume_label(int snum)
5042 {
5043         char *ret = lp_volume(snum);
5044         if (!*ret)
5045                 return lp_servicename(snum);
5046         return (ret);
5047 }
5048
5049
5050 /*******************************************************************
5051  Set the server type we will announce as via nmbd.
5052 ********************************************************************/
5053
5054 static void set_default_server_announce_type(void)
5055 {
5056         default_server_announce = 0;
5057         default_server_announce |= SV_TYPE_WORKSTATION;
5058         default_server_announce |= SV_TYPE_SERVER;
5059         default_server_announce |= SV_TYPE_SERVER_UNIX;
5060
5061         /* note that the flag should be set only if we have a
5062            printer service but nmbd doesn't actually load the
5063            services so we can't tell   --jerry */
5064
5065         default_server_announce |= SV_TYPE_PRINTQ_SERVER;
5066
5067         switch (lp_announce_as()) {
5068                 case ANNOUNCE_AS_NT_SERVER:
5069                         default_server_announce |= SV_TYPE_SERVER_NT;
5070                         /* fall through... */
5071                 case ANNOUNCE_AS_NT_WORKSTATION:
5072                         default_server_announce |= SV_TYPE_NT;
5073                         break;
5074                 case ANNOUNCE_AS_WIN95:
5075                         default_server_announce |= SV_TYPE_WIN95_PLUS;
5076                         break;
5077                 case ANNOUNCE_AS_WFW:
5078                         default_server_announce |= SV_TYPE_WFW;
5079                         break;
5080                 default:
5081                         break;
5082         }
5083
5084         switch (lp_server_role()) {
5085                 case ROLE_DOMAIN_MEMBER:
5086                         default_server_announce |= SV_TYPE_DOMAIN_MEMBER;
5087                         break;
5088                 case ROLE_DOMAIN_PDC:
5089                         default_server_announce |= SV_TYPE_DOMAIN_CTRL;
5090                         break;
5091                 case ROLE_DOMAIN_BDC:
5092                         default_server_announce |= SV_TYPE_DOMAIN_BAKCTRL;
5093                         break;
5094                 case ROLE_STANDALONE:
5095                 default:
5096                         break;
5097         }
5098         if (lp_time_server())
5099                 default_server_announce |= SV_TYPE_TIME_SOURCE;
5100
5101         if (lp_host_msdfs())
5102                 default_server_announce |= SV_TYPE_DFS_SERVER;
5103 }
5104
5105 /***********************************************************
5106  returns role of Samba server
5107 ************************************************************/
5108
5109 int lp_server_role(void)
5110 {
5111         return server_role;
5112 }
5113
5114 /***********************************************************
5115  If we are PDC then prefer us as DMB
5116 ************************************************************/
5117
5118 BOOL lp_domain_master(void)
5119 {
5120         if (Globals.bDomainMaster == Auto)
5121                 return (lp_server_role() == ROLE_DOMAIN_PDC);
5122
5123         return Globals.bDomainMaster;
5124 }
5125
5126 /***********************************************************
5127  If we are DMB then prefer us as LMB
5128 ************************************************************/
5129
5130 BOOL lp_preferred_master(void)
5131 {
5132         if (Globals.bPreferredMaster == Auto)
5133                 return (lp_local_master() && lp_domain_master());
5134
5135         return Globals.bPreferredMaster;
5136 }
5137
5138 /*******************************************************************
5139  Remove a service.
5140 ********************************************************************/
5141
5142 void lp_remove_service(int snum)
5143 {
5144         ServicePtrs[snum]->valid = False;
5145         invalid_services[num_invalid_services++] = snum;
5146 }
5147
5148 /*******************************************************************
5149  Copy a service.
5150 ********************************************************************/
5151
5152 void lp_copy_service(int snum, const char *new_name)
5153 {
5154         do_section(new_name);
5155         if (snum >= 0) {
5156                 snum = lp_servicenumber(new_name);
5157                 if (snum >= 0)
5158                         lp_do_parameter(snum, "copy", lp_servicename(snum));
5159         }
5160 }
5161
5162
5163 /*******************************************************************
5164  Get the default server type we will announce as via nmbd.
5165 ********************************************************************/
5166
5167 int lp_default_server_announce(void)
5168 {
5169         return default_server_announce;
5170 }
5171
5172 /*******************************************************************
5173  Split the announce version into major and minor numbers.
5174 ********************************************************************/
5175
5176 int lp_major_announce_version(void)
5177 {
5178         static BOOL got_major = False;
5179         static int major_version = DEFAULT_MAJOR_VERSION;
5180         char *vers;
5181         char *p;
5182
5183         if (got_major)
5184                 return major_version;
5185
5186         got_major = True;
5187         if ((vers = lp_announce_version()) == NULL)
5188                 return major_version;
5189
5190         if ((p = strchr_m(vers, '.')) == 0)
5191                 return major_version;
5192
5193         *p = '\0';
5194         major_version = atoi(vers);
5195         return major_version;
5196 }
5197
5198 int lp_minor_announce_version(void)
5199 {
5200         static BOOL got_minor = False;
5201         static int minor_version = DEFAULT_MINOR_VERSION;
5202         char *vers;
5203         char *p;
5204
5205         if (got_minor)
5206                 return minor_version;
5207
5208         got_minor = True;
5209         if ((vers = lp_announce_version()) == NULL)
5210                 return minor_version;
5211
5212         if ((p = strchr_m(vers, '.')) == 0)
5213                 return minor_version;
5214
5215         p++;
5216         minor_version = atoi(p);
5217         return minor_version;
5218 }
5219
5220 /***********************************************************
5221  Set the global name resolution order (used in smbclient).
5222 ************************************************************/
5223
5224 void lp_set_name_resolve_order(const char *new_order)
5225 {
5226         string_set(&Globals.szNameResolveOrder, new_order);
5227 }
5228
5229 const char *lp_printername(int snum)
5230 {
5231         const char *ret = _lp_printername(snum);
5232         if (ret == NULL || (ret != NULL && *ret == '\0'))
5233                 ret = lp_const_servicename(snum);
5234
5235         return ret;
5236 }
5237
5238
5239 /***********************************************************
5240  Allow daemons such as winbindd to fix their logfile name.
5241 ************************************************************/
5242
5243 void lp_set_logfile(const char *name)
5244 {
5245         string_set(&Globals.szLogFile, name);
5246         pstrcpy(debugf, name);
5247 }
5248
5249 /*******************************************************************
5250  Return the max print jobs per queue.
5251 ********************************************************************/
5252
5253 int lp_maxprintjobs(int snum)
5254 {
5255         int maxjobs = LP_SNUM_OK(snum) ? ServicePtrs[snum]->iMaxPrintJobs : sDefault.iMaxPrintJobs;
5256         if (maxjobs <= 0 || maxjobs >= PRINT_MAX_JOBID)
5257                 maxjobs = PRINT_MAX_JOBID - 1;
5258
5259         return maxjobs;
5260 }
5261
5262 const char *lp_printcapname(void)
5263 {
5264         if ((Globals.szPrintcapname != NULL) &&
5265             (Globals.szPrintcapname[0] != '\0'))
5266                 return Globals.szPrintcapname;
5267
5268         if (sDefault.iPrinting == PRINT_CUPS) {
5269 #ifdef HAVE_CUPS
5270                 return "cups";
5271 #else
5272                 return "lpstat";
5273 #endif
5274         }
5275
5276         if (sDefault.iPrinting == PRINT_BSD)
5277                 return "/etc/printcap";
5278
5279         return PRINTCAP_NAME;
5280 }
5281
5282 /*******************************************************************
5283  Ensure we don't use sendfile if server smb signing is active.
5284 ********************************************************************/
5285
5286 static uint32 spoolss_state;
5287
5288 BOOL lp_disable_spoolss( void )
5289 {
5290         if ( spoolss_state == SVCCTL_STATE_UNKNOWN )
5291                 spoolss_state = _lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5292
5293         return spoolss_state == SVCCTL_STOPPED ? True : False;
5294 }
5295
5296 void lp_set_spoolss_state( uint32 state )
5297 {
5298         SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
5299
5300         spoolss_state = state;
5301 }
5302
5303 uint32 lp_get_spoolss_state( void )
5304 {
5305         return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5306 }
5307
5308 /*******************************************************************
5309  Ensure we don't use sendfile if server smb signing is active.
5310 ********************************************************************/
5311
5312 BOOL lp_use_sendfile(int snum)
5313 {
5314         /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
5315         if (Protocol < PROTOCOL_NT1) {
5316                 return False;
5317         }
5318         return (_lp_use_sendfile(snum) && (get_remote_arch() != RA_WIN95) && !srv_is_signing_active());
5319 }
5320
5321 /*******************************************************************
5322  Turn off sendfile if we find the underlying OS doesn't support it.
5323 ********************************************************************/
5324
5325 void set_use_sendfile(int snum, BOOL val)
5326 {
5327         if (LP_SNUM_OK(snum))
5328                 ServicePtrs[snum]->bUseSendfile = val;
5329         else
5330                 sDefault.bUseSendfile = val;
5331 }
5332
5333 /*******************************************************************
5334  Turn off storing DOS attributes if this share doesn't support it.
5335 ********************************************************************/
5336
5337 void set_store_dos_attributes(int snum, BOOL val)
5338 {
5339         if (!LP_SNUM_OK(snum))
5340                 return;
5341         ServicePtrs[(snum)]->bStoreDosAttributes = val;
5342 }
5343
5344 void lp_set_mangling_method(const char *new_method)
5345 {
5346         string_set(&Globals.szManglingMethod, new_method);
5347 }
5348
5349 /*******************************************************************
5350  Global state for POSIX pathname processing.
5351 ********************************************************************/
5352
5353 static BOOL posix_pathnames;
5354
5355 BOOL lp_posix_pathnames(void)
5356 {
5357         return posix_pathnames;
5358 }
5359
5360 /*******************************************************************
5361  Change everything needed to ensure POSIX pathname processing (currently
5362  not much).
5363 ********************************************************************/
5364
5365 void lp_set_posix_pathnames(void)
5366 {
5367         posix_pathnames = True;
5368 }