1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-03 13:47:25 +03:00

178 Commits

Author SHA1 Message Date
Garming Sam
5c2aac0f8e param: pad permissions to 3 digits and update docs to be consistent
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
2014-01-30 00:40:22 +01:00
Garming Sam
166022c864 docs: adjust default for kerberos method to match testparm output
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:40 +13:00
Andrew Bartlett
dec0625929 docs: Change client signing default in docs to match s3 and lib/param
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:40 +13:00
Andrew Bartlett
dba465b6c7 docs: Change smb encrypt default in docs to match s3 and lib/param
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:40 +13:00
Andrew Bartlett
b9678e5b0f docs: fix and explain defaults for tls parameters
These parameters are relative to the private directory if it does not start with a /

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:40 +13:00
Garming Sam
0e7e9a21be docs: update check password script to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:39 +13:00
Garming Sam
7b347f6b68 docs: change default string slightly for passwd chat to match source code
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:39 +13:00
Garming Sam
7b82f7cefa docs: change default root directory to blank
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:39 +13:00
Garming Sam
c49af66f01 docs: include the type attribute for force create mode
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:39 +13:00
Garming Sam
8727459fdb docs: fix rename user script to be of the correct type (string)
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:38 +13:00
Stefan Metzmacher
1d69fdddd5 docs-xml: explain the interaction of 'client schannel' with 'require strong key = yes'
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:06 +01:00
Stefan Metzmacher
f703a37a56 docs-xml: explain the interaction between security = ads and other options.
It implies 'require strong key = yes' and 'client schannel = yes'.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:05 +01:00
Andrew Bartlett
e665fc3940 lib/param: Consolidate code to enable smb signing on the server, always enable on AD DC
This uses the code from the source4/ SMB server (the NTVFS smb server)
in common, to force SMB Signing to be on when we are an AD DC.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Fri Nov 22 13:13:05 CET 2013 on sn-devel-104
2013-11-22 13:13:03 +01:00
Günther Deschner
344c59f999 docs: remove duplicate "line" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:34:54 +01:00
Günther Deschner
8d1ff1d73f docs: remove duplicate "must" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:34:33 +01:00
Günther Deschner
0cf92d476f docs: remove duplicate "on" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:34:05 +01:00
Günther Deschner
0099c652e7 docs: point out side-effects of global "valid users" setting.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Tue Sep 17 16:20:16 CEST 2013 on sn-devel-104
2013-09-17 16:20:16 +02:00
Andrew Bartlett
26279a9698 auth: Remove "password level"
We now only lowercase the password, we do not attempt to find another case
combination that the password might be in.

This option is already depricated, so it is now time to remove it.

Andrew Bartlett

Reviewed-by: Simo Sorce <idra@samba.org>
2013-06-11 08:35:21 -04:00
Rusty Russell
2f4b21bb57 ntdb: switch between secrets.tdb and secrets.ntdb depending on 'use ntdb'
Since we open with dbwrap, it auto-converts old tdbs (which it will
rename to secrets.tdb.bak once it's done).

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Rusty Russell <rusty@rustcorp.com.au>
Autobuild-Date(master): Wed Feb 20 07:09:19 CET 2013 on sn-devel-104
2013-02-20 07:09:19 +01:00
Samba-JP oota
736e3b1335 docs: fix typo in serverrole.xml
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Thu Feb 14 18:43:57 CET 2013 on sn-devel-104
2013-02-14 18:43:57 +01:00
Jeremy Allison
1ff1597e1f Documentation fixes for bug #9462 - Users can not be given write permissions any more by default
Ensure we don't apply the masks + force modes on security setting
changes, only on create.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
2012-12-05 16:35:07 -08:00
Jelmer Vernooij
4b4e8e2123 smb.conf(5): Mark four removed parameters as such. 2012-10-19 09:20:44 +02:00
Jelmer Vernooij
47902702b3 smb.conf(5): Fix mixing of tabs and spaces. 2012-10-19 08:33:31 +02:00
Jelmer Vernooij
03b48e2bdb smb.conf(5): Add basic documentation for 'tls dh params file'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
946a873e47 smb.conf(5): Add basic documentation for 'tls enabled'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
2e4f054e16 smb.conf(5): Add basic documentation for 'tls crlfile'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
008dfb9a21 smb.conf(5): Add basic documentation for 'tls certfile'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
0f5e45b84c smb.conf(5): Add basic documentation for 'tls keyfile'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
4e1a06dc23 smb.conf(5): Add basic documentation for 'tls cafile'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
e27e8f4f88 smb.conf(5): Add basic documentation for 'log nt token command'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
7341dcac10 smb.conf(5): Add basic documentation for 'ntp signd socket directory'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
a63d6a9094 smb.conf(5): Add basic documentation for 'samba kcc command'. 2012-10-18 22:34:29 +02:00
Björn Baumbach
b1393d93bc docs: fix opening and ending tag mismatch: para
in forcedirectorysecuritymode.xml.
2012-10-08 11:14:42 +02:00
Björn Baumbach
a93c9e23f9 docs: fix opening and ending tag mismatch: para
in directorysecuritymask.xml.
2012-10-08 11:14:42 +02:00
Jeremy Allison
db62a159b8 Remove the parameters:
security mask
force security mode
directory security mask
force directory security mode

and update the docs.
2012-10-04 12:04:21 -07:00
Jeremy Allison
fe38a93c71 Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
Signing cannot be disabled for SMB2 by design, so fix the documentation
instead.

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Oct  3 23:47:23 CEST 2012 on sn-devel-104
2012-10-03 23:47:23 +02:00
Jelmer Vernooij
bc9d5cb13f smb.conf(5): Consistent spelling of parameter names.
This includes spacing and casing.

Conflicts:
	source4/scripting/python/samba/tests/docs.py
2012-09-27 02:52:38 +02:00
Jelmer Vernooij
0dd965492c smb.conf(5): Add basic documentation for 'kpasswd port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
29a763aa0f smb.conf(5): Add basic documentation for 'krb5 port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
7dd3cdc673 smb.conf(5): 'write ok' is a reverse synonym for 'read only'. 2012-09-26 22:12:07 +02:00
Andrew Bartlett
28499b0476 docs: Remove references to security=share and security=server from the smb.conf docs 2012-09-04 09:31:48 +10:00
Andreas Schneider
3f14155a9f doc: Remove all references to 'printer admin' option. 2012-07-03 21:56:49 +02:00
Andrew Bartlett
bf3235f8c6 docs: document new server role values 2012-06-15 09:18:33 +02:00
Björn Jacke
1b0690fd83 s3/doc: some spelling fixes
Thanks to Frans Luteijn <f.a.g.luteijn at knoware.nl> for providing the fixes!

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Mon Jun 11 23:16:26 CEST 2012 on sn-devel-104
2012-06-11 23:16:26 +02:00
Stefan Metzmacher
0239f680a7 docs-xml: remove documentation of "SECURITY = SERVER"
metze
2012-05-15 08:18:28 +02:00
Karolin Seeger
70feedbfe3 s3-loadparm: Add synonym "private directory".
Karolin

Autobuild-User: Karolin Seeger <kseeger@samba.org>
Autobuild-Date: Fri May 11 13:04:03 CEST 2012 on sn-devel-104
2012-05-11 13:04:03 +02:00
Andrew Bartlett
d7bb961859 s3-auth: Remove security=share (depricated since 3.6).
This patch removes security=share, which Samba implemented by matching
the per-share password provided by the client in the Tree Connect with
a selection of usernames supplied by the client, the smb.conf or
guessed from the environment.

The rationale for the removal is that for the bulk of security=share
users, we just we need a very simple way to run a 'trust the network'
Samba server, where users mark shares as guest ok.  This is still
supported, and the smb.conf options are documented at
https://wiki.samba.org/index.php/Public_Samba_Server

At the same time, this closes the door on one of the most arcane areas
of Samba authentication.

Naturally, full user-name/password authentication remain available in
security=user and above.

This includes documentation updates for username and only user, which
now only do a small amount of what they used to do.

Andrew Bartlett

                       --------------
                      /              \
                     /      REST      \
                    /        IN        \
                   /       PEACE        \
                  /                      \
                  |      SEC_SHARE       |
                  |    security=share    |
                  |                      |
                  |                      |
                  |       5 March        |
                  |                      |
                  |        2012          |
                 *|     *  *  *          | *
        _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-03-04 23:33:05 +01:00
Stefan Metzmacher
024737698e docs-xml: remove docs for "send spnego principal"
metze
2012-02-16 15:18:44 +01:00
Andrew Bartlett
afcd3c625d docs: Add documentation for server role 2011-11-17 00:34:09 +01:00
Andrew Bartlett
ec9ff19e60 s3-param Make lp_passwordserver() const.
This means that it no longer takes % substituations, and so the documentation for this behaviour is removed from the smb.conf manpage.  (This mode is only useful in security=server, which is already marked as deprecated in 3.6).

Andrew Bartlett
2011-06-01 04:19:05 +02:00