1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Commit Graph

521 Commits

Author SHA1 Message Date
Garming Sam
962f3e9a34 docs: update user share template share to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:38 +13:00
Garming Sam
6cfee0d8b7 docs: fix template shell to include the default correctly
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:38 +13:00
Garming Sam
060e3efb8b docs: fix map hidden to include the default correctly
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
56fae25b74 docs: fix locking to include the default correctly
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
1273df8379 docs: update veto files to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
d44a70f4f6 docs: update usershare prefix deny list to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
c3f6a09add docs: update idmap cache time to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
b889f0fa77 docs: update unicode default to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
635b062d6c docs: update winbind offline logon to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
ce25bcf000 docs: update rpc big endian to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
580bde7176 docs: update acl map full control to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
663755791d docs: update defer sharing violations to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:37 +13:00
Garming Sam
68a145b5ce docs: update winbind refresh tickets to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Garming Sam
2e80b47a9e docs: update cups encrypt to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Garming Sam
de43178dec docs: update unix charset to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Garming Sam
d64a35e8b2 docs: update use sendfile to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Garming Sam
0b1fd3ca01 docs: update usershare owner only always to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Garming Sam
346f0d276c docs: update acl allow execute always to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Garming Sam
3c36067e84 docs: update acl check permissions to be consistent with testparm
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-01-28 17:26:36 +13:00
Stefan Metzmacher
807bcb4981 lib/param: add "reject md5 client" option, defaulting to false
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:17 +01:00
Stefan Metzmacher
87bdc88328 lib/param: add "allow nt4 crypto" option, defaulting to false
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:17 +01:00
Stefan Metzmacher
11aed7cd3d docs-xml: update 'winbind sealed pipes' description
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:06 +01:00
Stefan Metzmacher
1d69fdddd5 docs-xml: explain the interaction of 'client schannel' with 'require strong key = yes'
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:06 +01:00
Stefan Metzmacher
f703a37a56 docs-xml: explain the interaction between security = ads and other options.
It implies 'require strong key = yes' and 'client schannel = yes'.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:05 +01:00
Stefan Metzmacher
6630c68cce lib/param: add "require strong key" option, defaulting to true
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:05 +01:00
Stefan Metzmacher
de4f8f0825 lib/param: add "reject md5 servers" option, defaulting to false
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:04 +01:00
Stefan Metzmacher
b39ca3a2ae lib/param: add "neutralize nt4 emulation" option, defaulting to false
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-01-07 12:47:04 +01:00
Andrew Bartlett
e665fc3940 lib/param: Consolidate code to enable smb signing on the server, always enable on AD DC
This uses the code from the source4/ SMB server (the NTVFS smb server)
in common, to force SMB Signing to be on when we are an AD DC.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Fri Nov 22 13:13:05 CET 2013 on sn-devel-104
2013-11-22 13:13:03 +01:00
Günther Deschner
c0bdd8011c docs: remove duplicate "used" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Tue Nov 19 14:40:40 CET 2013 on sn-devel-104
2013-11-19 14:40:40 +01:00
Günther Deschner
344c59f999 docs: remove duplicate "line" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:34:54 +01:00
Günther Deschner
8d1ff1d73f docs: remove duplicate "must" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:34:33 +01:00
Günther Deschner
0cf92d476f docs: remove duplicate "on" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:34:05 +01:00
Günther Deschner
59a240513c docs: remove duplicate "or" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:33:49 +01:00
Günther Deschner
ced12107e0 docs: remove duplicate "not" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:20:25 +01:00
Günther Deschner
2557727821 docs: remove duplicate "to" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:19:11 +01:00
Günther Deschner
b55b56351d docs: remove duplicate "the" from smb.conf manpage.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2013-11-19 12:17:19 +01:00
Scott Lovenberg
671a2fa3f8 docs: Fix typo in "max open files" description
Removed extra word "The" from parameter description.

Signed-off-by: Scott Lovenberg <scott.lovenberg@gmail.com>
[ddiss@samba.org: removed white space damage]
Reviewed-by: David Disseldorp <ddiss@samba.org>
2013-11-14 17:21:27 +01:00
Björn Jacke
22945de430 doc/msdfs proxy: extend example for multi target config
Signed-off-by: Björn Jacke <bj@sernet.de>
Reviewed-by: Michael Adam <obnox@samba.org>

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Fri Nov  1 00:12:19 CET 2013 on sn-devel-104
2013-11-01 00:12:18 +01:00
David Disseldorp
b92937e64e doc: add "spoolss: architecture" parameter usage
Windows spoolss print clients only allow association of server-side
drivers with printers when the driver architecture matches the
advertised print server architecture. Samba's spoolss print server
architecture can be changed using this parameter.

Signed-off-by: David Disseldorp <ddiss@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Wed Oct 16 17:12:34 CEST 2013 on sn-devel-104
2013-10-16 17:12:34 +02:00
Andrew Bartlett
54019ca9aa docs: Explain why this option should not be used
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Oct 15 01:51:39 CEST 2013 on sn-devel-104
2013-10-15 01:51:39 +02:00
David Disseldorp
477e53a8cb param: disable print notify backchannel by default
In handling RemoteFindFirstPrinterChangeNotifyEx requests, the spoolss
server can establish a "backchannel" connection to the print client, as
a mechanism for sending print notifications. This behaviour is governed
by the "print notify backchannel" smb.conf parameter.

This change sets "print notify backchannel" to "no" by default, which
sees Samba respond to RemoteFindFirstPrinterChangeNotifyEx requests with
WERR_SERVER_UNAVAILABLE. In recieving such a response, print clients can
fall back to polling for print queue changes.

Signed-off-by: David Disseldorp <ddiss@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Mon Oct 14 18:49:41 CEST 2013 on sn-devel-104
2013-10-14 18:49:41 +02:00
Andrew Bartlett
274b899095 smb.conf: Fill out the ntvfs handler smb.conf page from source4/NEWS
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
2013-09-22 11:24:31 -07:00
Günther Deschner
0099c652e7 docs: point out side-effects of global "valid users" setting.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Tue Sep 17 16:20:16 CEST 2013 on sn-devel-104
2013-09-17 16:20:16 +02:00
Stefan Metzmacher
6ef3c98ade docs-xml: document SMB3_02 as available protocol for the client side
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Tue Sep 17 05:55:04 CEST 2013 on sn-devel-104
2013-09-17 05:55:04 +02:00
Karolin Seeger
4af7b709e9 docs: Fix typos.
This is a follow-up patch for bug #10134 - Samba 4.0 is stricter in checking
acls for "open for execution".

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>

Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Thu Sep 12 11:59:56 CEST 2013 on sn-devel-104
2013-09-12 11:59:55 +02:00
Michael Adam
a2a3c9f36d docs: document "acl allow execute always"
Signed-off-by: Michael Adam <obnox@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Wed Sep 11 01:21:00 CEST 2013 on sn-devel-104
2013-09-11 01:20:59 +02:00
Michael Adam
871488ac43 docs: fix a typo on the description of "acl check permissions"
Signed-off-by: Michael Adam <obnox@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Mon Sep  2 23:03:01 CEST 2013 on sn-devel-104
2013-09-02 23:03:01 +02:00
Andreas Schneider
a7801db32a docs-xml: Remove obsolete swat manpage and references.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=10041

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Kai Blin <kai@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Jul 24 12:42:29 CEST 2013 on sn-devel-104
2013-07-24 12:42:29 +02:00
Karolin Seeger
f87dcdcf55 docs: Fix typo.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Mon Jul  8 12:19:38 CEST 2013 on sn-devel-104
2013-07-08 12:19:38 +02:00
Karolin Seeger
415235b62d docs: Fix typo.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
2013-07-08 10:23:13 +02:00
Karolin Seeger
a68cea6ccb docs: Fix typos in "use ntdb" section.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Jul  4 22:44:54 CEST 2013 on sn-devel-104
2013-07-04 22:44:54 +02:00
Andrew Bartlett
26279a9698 auth: Remove "password level"
We now only lowercase the password, we do not attempt to find another case
combination that the password might be in.

This option is already depricated, so it is now time to remove it.

Andrew Bartlett

Reviewed-by: Simo Sorce <idra@samba.org>
2013-06-11 08:35:21 -04:00
Michael Wood
5528551ea3 docs: Avoid mentioning a possibly misleading option.
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2013-06-01 18:54:08 +10:00
Björn Jacke
355f78fe9e docs/rpcdaemon: some formating fixes
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Fri May 17 10:34:18 CEST 2013 on sn-devel-104
2013-05-17 10:34:18 +02:00
Stefan Metzmacher
0ffd074690 doc-xml/smbdotconf: fix server [min|max] protocol documentation
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
2013-05-14 19:58:49 +02:00
Björn Baumbach
3b3b5b0255 docs: smb.conf: fix max read/write/trans default values (bug #9871)
Commit 6d128aac11 has increased the limit:
"s3:smb2_server increase defaults for read/write/trans sizes to 1MB"

Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri May 10 23:14:50 CEST 2013 on sn-devel-104
2013-05-10 23:14:50 +02:00
Jeremy Allison
8ca4b7597d Fix up the man pages to explain that "store dos attributes" overrides them.
Signed-off-by: Jeremy Allison <jra@samba.org>

Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue May  7 01:24:54 CEST 2013 on sn-devel-104
2013-05-07 01:24:53 +02:00
Volker Lendecke
243278a2c5 doc: Document performance impact of "hide unxx" parameters
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Fri Apr  5 18:40:58 CEST 2013 on sn-devel-104
2013-04-05 18:40:58 +02:00
Christian Ambach
fb924d02ec s3: remove some dead code (for setdir command)
set dir seems to have been a special SMB command used by Pathworks clients
the supporting code for it was already removed in 2007, so just remove all
remnants related to it (smb.conf parameter, documentation, ...)

Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Mar 12 01:03:37 CET 2013 on sn-devel-104
2013-03-12 01:03:37 +01:00
Scott Lovenberg
511e575e29 Documentation: Add a warning to "socket options"
Add a warning to the "socket options" section of the
 smb.conf man page that changing socket options can be
 dangerous to performance.  Hopefully this will cut down on
 users reporting poor performance after changing socket
 options.

Signed-off-by: Scott Lovenberg <scott.lovenberg@gmail.com>

Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
2013-03-06 02:22:24 +01:00
Rusty Russell
2f4b21bb57 ntdb: switch between secrets.tdb and secrets.ntdb depending on 'use ntdb'
Since we open with dbwrap, it auto-converts old tdbs (which it will
rename to secrets.tdb.bak once it's done).

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Rusty Russell <rusty@rustcorp.com.au>
Autobuild-Date(master): Wed Feb 20 07:09:19 CET 2013 on sn-devel-104
2013-02-20 07:09:19 +01:00
Rusty Russell
3c9c3029f2 param: 'use ntdb' flag (off by default).
For simplicity, we use this in the caller to choose between filenames.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2013-02-20 05:31:20 +01:00
Karolin Seeger
68b2e30ae6 docs: Fix typo.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
2013-02-18 22:07:39 +11:00
Samba-JP oota
736e3b1335 docs: fix typo in serverrole.xml
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Thu Feb 14 18:43:57 CET 2013 on sn-devel-104
2013-02-14 18:43:57 +01:00
Samba-JP oota
1aa1d658c8 docs: Add missing ")".
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Karolin Seeger <kseeger@samba.org>

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Wed Feb  6 10:47:11 CET 2013 on sn-devel-104
2013-02-06 10:47:11 +01:00
Björn Baumbach
07660ac01a smb.conf(5): client min protocol: add hint at list of available protocols
And fix the format.

Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
2013-01-15 14:49:19 +01:00
Björn Baumbach
d6ec1ef6cc smb.conf(5): server min protocol: add hint at list of available protocols
And fix the format.

Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
2013-01-15 14:49:19 +01:00
Jeremy Allison
1ff1597e1f Documentation fixes for bug #9462 - Users can not be given write permissions any more by default
Ensure we don't apply the masks + force modes on security setting
changes, only on create.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
2012-12-05 16:35:07 -08:00
Andrew Bartlett
d6c7e9b1ed smbd: Remove NT4 compatability handling in posix -> NT ACL conversion
NT4 is long dead, and we should not change which ACL we return based
on what we think the client is.  The reason we should not do this, is
that if we are using vfs_acl_xattr then the hash will break if we do.
Additionally, it would require that the python VFS interface set the
global remote_arch to fake up being a modern client.

This instead seems cleaner and removes untested code (the tests are
updated to then handle the results of the modern codepath).

The supporting 'acl compatability' parameter is also removed.

Andrew Bartlett

Reviewed by: Jeremy Allison <jra@samba.org>
2012-11-13 22:48:19 +01:00
Jelmer Vernooij
4b4e8e2123 smb.conf(5): Mark four removed parameters as such. 2012-10-19 09:20:44 +02:00
Jelmer Vernooij
47902702b3 smb.conf(5): Fix mixing of tabs and spaces. 2012-10-19 08:33:31 +02:00
Jelmer Vernooij
aad30c062f smb.conf(5): Add basic documentation for 'nsupdate command'. 2012-10-18 22:34:32 +02:00
Jelmer Vernooij
0cea6daffe smb.conf(5): Add basic documentation for 'afs token lifetime'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
695df863ed smb.conf(5): Add 'ldap password sync' as synonym for 'ldap passwd sync'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
6c160e3892 smb.conf(5): Add 'socket address' as alias for 'nbt client socket address'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
03b48e2bdb smb.conf(5): Add basic documentation for 'tls dh params file'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
946a873e47 smb.conf(5): Add basic documentation for 'tls enabled'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
2e4f054e16 smb.conf(5): Add basic documentation for 'tls crlfile'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
008dfb9a21 smb.conf(5): Add basic documentation for 'tls certfile'. 2012-10-18 22:34:31 +02:00
Jelmer Vernooij
0f5e45b84c smb.conf(5): Add basic documentation for 'tls keyfile'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
4e1a06dc23 smb.conf(5): Add basic documentation for 'tls cafile'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
e27e8f4f88 smb.conf(5): Add basic documentation for 'log nt token command'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
7341dcac10 smb.conf(5): Add basic documentation for 'ntp signd socket directory'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
6f36bde82f smb.conf(5): Add basic documentation for 'spn update command'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
68fdcaa6b7 smb.conf(5): Add basic documentation for 'allow dns updates'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
b0b0266aa7 smb.conf(5): Add basic documentation for 'rndc command'. 2012-10-18 22:34:30 +02:00
Jelmer Vernooij
4ccea7f867 smb.conf(5): Add basic documentation for 'dns update command'. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
3cc61af7ff smb.conf(5): Add basic documentation for 'server services'. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
a63d6a9094 smb.conf(5): Add basic documentation for 'samba kcc command'. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
e7c8fcaea5 smb.conf(5): Add basic documentation 'winbind sealed pipes'. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
e9d91cd4a1 smb.conf(5): Add basic documentation for 'dns forwarder'. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
394258ad4c smb.conf(5): Add basic documentation for 'ntvfs handler'. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
c6ba8575ea smb.conf(5): Add : to idmap config description to mark it as parametric. 2012-10-18 22:34:29 +02:00
Jelmer Vernooij
3cea6257a9 smb.conf(5): Add basic documentation for 'winbindd privileged socket directory'. 2012-10-18 22:34:28 +02:00
Jelmer Vernooij
d0b3875247 smb.conf(5): Add basic documentation for 'winbindd socket directory'. 2012-10-18 22:34:28 +02:00
Jelmer Vernooij
dfe75c2f35 smb.conf(5): Extend 'server min protocol' description. 2012-10-18 22:34:28 +02:00
Björn Baumbach
b1393d93bc docs: fix opening and ending tag mismatch: para
in forcedirectorysecuritymode.xml.
2012-10-08 11:14:42 +02:00
Björn Baumbach
a93c9e23f9 docs: fix opening and ending tag mismatch: para
in directorysecuritymask.xml.
2012-10-08 11:14:42 +02:00
Jeremy Allison
db62a159b8 Remove the parameters:
security mask
force security mode
directory security mask
force directory security mode

and update the docs.
2012-10-04 12:04:21 -07:00
Karolin Seeger
c627ba145e docs: Remove duplicate synonym min protocol.
Karolin
2012-10-04 12:07:59 +02:00
Jeremy Allison
fe38a93c71 Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
Signing cannot be disabled for SMB2 by design, so fix the documentation
instead.

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Oct  3 23:47:23 CEST 2012 on sn-devel-104
2012-10-03 23:47:23 +02:00
Jelmer Vernooij
f8aab2f55f smb.conf(5): Add basic documentation for 'dcerpc endpoint servers'. 2012-09-27 18:45:11 +02:00
Christian Ambach
965a2fb6b6 Revert "smb.conf(5): Remove 'idmap config' documentation - the parameter has"
This reverts commit e809abf55f.

This parameter still exists, it is just only used as parametric option
in the code and not easy to spot when looking out for lp_xxx

Autobuild-User(master): Christian Ambach <ambi@samba.org>
Autobuild-Date(master): Thu Sep 27 06:18:38 CEST 2012 on sn-devel-104
2012-09-27 06:18:38 +02:00
Jelmer Vernooij
ba7075597e smb.conf(5): List 'protocol' as alias for 'server max protocol'. 2012-09-27 02:52:38 +02:00
Jelmer Vernooij
3dc6daf6a9 smb.conf(5): Add documentation for 'client max protocol'. 2012-09-27 02:52:38 +02:00
Jelmer Vernooij
60b93c314c smb.conf(5): Add basic documentation for 'client min protocol'. 2012-09-27 02:52:38 +02:00
Jelmer Vernooij
b6cb0b65e0 smb.conf(5): Document 'share backend' parameter. 2012-09-27 02:52:38 +02:00
Jelmer Vernooij
b97c257f3a smb.conf(5): Add basic documentation for 'server min protocol'.
Conflicts:
	docs-xml/smbdotconf/protocol/serverminprotocol.xml
2012-09-27 02:52:38 +02:00
Jelmer Vernooij
d1845558e0 smb.conf(5): Extend 'server min protocol' description.
Conflicts:
	docs-xml/smbdotconf/protocol/serverminprotocol.xml
2012-09-27 02:52:38 +02:00
Jelmer Vernooij
bc9d5cb13f smb.conf(5): Consistent spelling of parameter names.
This includes spacing and casing.

Conflicts:
	source4/scripting/python/samba/tests/docs.py
2012-09-27 02:52:38 +02:00
Jelmer Vernooij
3bdca921cc smb.conf(5): Add basic documentation for 'rpc bigendian'.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Wed Sep 26 23:51:34 CEST 2012 on sn-devel-104
2012-09-26 23:51:34 +02:00
Jelmer Vernooij
0dd965492c smb.conf(5): Add basic documentation for 'kpasswd port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
879b3ad081 smb.conf(5): Add basic documentation for 'dgram port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
12ab467f87 smb.conf(5): Add basic documentation for 'unicode'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
3ab03ccd84 smb.conf(5): Add basic documentation for 'web port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
c66744a8c9 smb.conf(5): Add basic documentation for 'nbt port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
29a763aa0f smb.conf(5): Add basic documentation for 'krb5 port'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
7dd3cdc673 smb.conf(5): 'write ok' is a reverse synonym for 'read only'. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
6b9960e78a smb.conf(5): Distinguish parametric options. 2012-09-26 22:12:07 +02:00
Jelmer Vernooij
11634e6cd7 smb.conf(5): Remove documentation for removed 'lock spin count'
parameter.

Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Wed Sep 26 09:41:09 CEST 2012 on sn-devel-104
2012-09-26 09:41:09 +02:00
Jelmer Vernooij
e809abf55f smb.conf(5): Remove 'idmap config' documentation - the parameter has
been removed.
2012-09-26 07:58:31 +02:00
Jelmer Vernooij
be564022cb smb.conf.5: Document 'cldap port'. 2012-09-26 07:58:31 +02:00
Michael Adam
ebdf147d4a docs: describe the new parameter "durable handles" in the smb.conf manpage 2012-09-10 01:06:54 +02:00
Michael Adam
24914531fc docs: add desciption of new parameter "kernel share modes" to the smb.conf manpage 2012-09-10 01:06:51 +02:00
Stefan Metzmacher
196b7f336e docs-xml: change "server max protocol" to "SMB3"
metze
2012-09-08 03:39:06 +02:00
Björn Jacke
869b67764d doc: improve quotacommand man page docu 2012-09-08 01:29:00 +02:00
Andrew Bartlett
f453117569 s3-printing: Restrict printing=cups to systems with cups development headers at build time
This means that instead of failing due to the default commandline values not being quite correct
that we clearly fail at loadparm and testparm time when parsing the printing= line.

Andrew Bartlett
2012-09-06 11:16:11 +10:00
Andrew Bartlett
00108282d0 docs: Remove docs for removed parameter 'display charset' 2012-09-04 09:31:49 +10:00
Andrew Bartlett
28499b0476 docs: Remove references to security=share and security=server from the smb.conf docs 2012-09-04 09:31:48 +10:00
Andrew Bartlett
4a52a3f48d docs: Remove docs for removed parameter 'parinoid server security' 2012-09-04 09:31:48 +10:00
Björn Baumbach
d12831d4b4 docs-xml: fix pid directory example
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Fri Aug  3 10:30:37 CEST 2012 on sn-devel-104
2012-08-03 10:30:37 +02:00
Björn Baumbach
5beb3458ce docs-xml: fix dfree cache time example
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-08-03 08:28:09 +02:00
Andrew Bartlett
dc00df2add lib/param: Rename "socket address" to "nbt client socket address" to clarify role
This parameter is only used in our NBT client code and in nmbd as a
fallback when we fail to select a better interface from "interfaces"
to use directly.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Jul 27 12:16:25 CEST 2012 on sn-devel-104
2012-07-27 12:16:25 +02:00
Andrew Bartlett
ecb89cebd6 docs: Mark "socket address" as deprecated 2012-07-27 03:34:23 +02:00
Andrew Bartlett
42e405a422 param: Make socket_address common, Revert 611ef42053
This essentially reverts the commit 611ef42053
Author: Yasuma Takeda <yasuma@osstech.co.jp>
Date:   Fri Dec 5 13:37:51 2008 -0800

    Fix bug #5944 - nmbd does not boot if socket adress = "" is defined in smb.conf

Intead, the documentation is fixed so that the correct default is
recorded.  Removing the special case handling here allows this to be
dealt with in the same way as all other parameters.

Andrew Bartlett
2012-07-27 03:34:23 +02:00
Andreas Schneider
0ed3433469 doc: Remove references to deprecated 'share modes' parameter.
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Tue Jul  3 23:49:18 CEST 2012 on sn-devel-104
2012-07-03 23:49:18 +02:00
Andreas Schneider
3f14155a9f doc: Remove all references to 'printer admin' option. 2012-07-03 21:56:49 +02:00
Andreas Schneider
c87acebd7e doc: Remove documentation about idmap_adex. 2012-07-03 21:56:48 +02:00
Stefan Metzmacher
ded2cb8f27 docs-xml: document "server max protocol" "SMB2" selects PROTOCOL_SMB2_10
metze

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Fri Jun 29 02:07:17 CEST 2012 on sn-devel-104
2012-06-29 02:07:17 +02:00
Björn Baumbach
f6ac6b8f3c docs-xml: fix typos and format in smb.conf server max protocol man 2012-06-28 21:19:17 +02:00
Björn Jacke
a6c5376b97 Merge suggested fix from bug 7511 and enhance it
Changes from Lars Müller and Olaf Flebbe:

a) The location in the filesystem defaults to STATEDIR/usershare
b) If undefined the default location is used; if set to zero (the
   default) user defined shares are ignored.

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Tue Jun 26 19:55:00 CEST 2012 on sn-devel-104
2012-06-26 19:55:00 +02:00
Stefan Metzmacher
f3c606b131 docs-xml: document "server max protocol" SMB3 and SMB3_00
metze
2012-06-25 20:55:06 +02:00
Stefan Metzmacher
6aec0ce288 docs-xml: fix reference from "server min protocol" to "server max protocol"
metze
2012-06-25 20:55:06 +02:00
Olaf Flebbe
8558e321c5 s3: Correct documentation of case sensitive
this fixes bug #8552

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Fri Jun 22 21:59:59 CEST 2012 on sn-devel-104
2012-06-22 21:59:59 +02:00
Andrew Bartlett
bf3235f8c6 docs: document new server role values 2012-06-15 09:18:33 +02:00
Björn Jacke
dba3b2e0b6 doc: fix typo uniq → unique 2012-06-13 17:33:14 +02:00
Björn Jacke
1b0690fd83 s3/doc: some spelling fixes
Thanks to Frans Luteijn <f.a.g.luteijn at knoware.nl> for providing the fixes!

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Mon Jun 11 23:16:26 CEST 2012 on sn-devel-104
2012-06-11 23:16:26 +02:00
Andrew Bartlett
9db04c481d s3-smbd: Remove support for protocols before LANMAN1
This falls out of the removal of security=share, because we now require that
a session setup has been performed before (essentially) all other operations.

Andrew Bartlett
2012-06-05 04:27:36 +02:00
Andrew Bartlett
27fb14bfbe s3-loadparm: Swap synonyms of max/min protocol to server max/min protocol
This matches the lib/param code, as is a seperate parameter for the
client there.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May 30 06:04:41 CEST 2012 on sn-devel-104
2012-05-30 06:04:41 +02:00
Jeremy Allison
e0b924b6d5 Note that "keepalive" only applies to SMB1 connections.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri May 18 02:59:34 CEST 2012 on sn-devel-104
2012-05-18 02:59:34 +02:00
Stefan Metzmacher
0239f680a7 docs-xml: remove documentation of "SECURITY = SERVER"
metze
2012-05-15 08:18:28 +02:00
Karolin Seeger
70feedbfe3 s3-loadparm: Add synonym "private directory".
Karolin

Autobuild-User: Karolin Seeger <kseeger@samba.org>
Autobuild-Date: Fri May 11 13:04:03 CEST 2012 on sn-devel-104
2012-05-11 13:04:03 +02:00
Karolin Seeger
4cc04a2924 s3-docs: Fix bug #7930.
Add hint that setting "profile acls = yes" on normal shares can cause trouble.

Karolin

Autobuild-User: Karolin Seeger <kseeger@samba.org>
Autobuild-Date: Tue May  8 18:47:59 CEST 2012 on sn-devel-104
2012-05-08 18:47:59 +02:00
Karolin Seeger
e42e87d544 s3-docs: Fix several typos.
Part of a fix for bug #7938. Based on a patch provided by John Bradshaw
<john@johnbradshaw.org>.

Karolin

Autobuild-User: Karolin Seeger <kseeger@samba.org>
Autobuild-Date: Tue May  8 13:56:32 CEST 2012 on sn-devel-104
2012-05-08 13:56:32 +02:00
Christian Ambach
d642afa7f1 s3: switch off kernel oplocks by default
as discussed on samba-technical, turn kernel oplocks off by default
to not leave users without the benefits of Level II oplocks
2012-04-16 21:28:36 +02:00
Christian Ambach
639a775866 docs: update kernel oplocks documentation
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-04-11 11:11:39 -07:00
Björn Baumbach
189b3d9b24 docs-xml: fix default name resolve order (fix bug #7564)
Autobuild-User: Volker Lendecke <vl@samba.org>
Autobuild-Date: Fri Apr  6 09:54:37 CEST 2012 on sn-devel-104
2012-04-06 09:54:37 +02:00
Jeremy Allison
9788d6a348 Change default protocol to SMB2_02.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Mar  7 22:41:21 CET 2012 on sn-devel-104
2012-03-07 22:41:21 +01:00
Andrew Bartlett
d7bb961859 s3-auth: Remove security=share (depricated since 3.6).
This patch removes security=share, which Samba implemented by matching
the per-share password provided by the client in the Tree Connect with
a selection of usernames supplied by the client, the smb.conf or
guessed from the environment.

The rationale for the removal is that for the bulk of security=share
users, we just we need a very simple way to run a 'trust the network'
Samba server, where users mark shares as guest ok.  This is still
supported, and the smb.conf options are documented at
https://wiki.samba.org/index.php/Public_Samba_Server

At the same time, this closes the door on one of the most arcane areas
of Samba authentication.

Naturally, full user-name/password authentication remain available in
security=user and above.

This includes documentation updates for username and only user, which
now only do a small amount of what they used to do.

Andrew Bartlett

                       --------------
                      /              \
                     /      REST      \
                    /        IN        \
                   /       PEACE        \
                  /                      \
                  |      SEC_SHARE       |
                  |    security=share    |
                  |                      |
                  |                      |
                  |       5 March        |
                  |                      |
                  |        2012          |
                 *|     *  *  *          | *
        _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-03-04 23:33:05 +01:00
Stefan Metzmacher
024737698e docs-xml: remove docs for "send spnego principal"
metze
2012-02-16 15:18:44 +01:00
Andrew Bartlett
afcd3c625d docs: Add documentation for server role 2011-11-17 00:34:09 +01:00
Jeremy Allison
6bd49ea4ae Deprecate "acl check permissions".
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Oct 21 21:51:18 CEST 2011 on sn-devel-104
2011-10-21 21:51:18 +02:00
Günther Deschner
e1d2b47693 s3-docs: Add a clarification note for nss_info primary group membership calculation.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Oct 19 03:10:40 CEST 2011 on sn-devel-104
2011-10-19 03:10:40 +02:00
Günther Deschner
5543e6c8e5 s3-docs: Document Services for Unix 2.0 (sfu20) nss_info ldap schema support.
Guenther
2011-10-19 01:40:40 +02:00
Jeremy Allison
d2a9e8df35 Another part of the fix for Bug 8473 - smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans.
Change the defaults and the documentation to reflect the 64k limit.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Oct 13 12:22:23 CEST 2011 on sn-devel-104
2011-10-13 12:22:23 +02:00
Volker Lendecke
37b9753096 Fix some typos 2011-09-20 23:15:36 +02:00
Volker Lendecke
cb2fe8bafc s3: Fix typos 2011-09-20 23:15:36 +02:00
Volker Lendecke
4e058475fb Fix a typo. This is not an electromagnet pulse daemon I guess :-)
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Mon Sep 19 01:25:23 CEST 2011 on sn-devel-104
2011-09-19 01:25:23 +02:00
Jeremy Allison
fbbfdbd648 Fix bug #8229 - git patch attached against 3.6.0-rc2 to fix 'widelinks' regression intro'd in 3.2
Add "allow insecure widelinks" to re-enable the ability (requested
by some sites) to have "widelinks = yes" and "unix extensions = yes".

Based on an original patch by Linda Walsh <samba@tlinx.org>

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Sep 14 03:55:45 CEST 2011 on sn-devel-104
2011-09-14 03:55:45 +02:00
Simo Sorce
6d9eb66f29 docs: Add documentation for the rpc_daemon parametric option. 2011-08-31 14:46:15 +02:00
Andreas Schneider
40006cf212 doc: Reflect the latest changes to the rpc_server option.
bug #8425.
2011-08-31 14:46:08 +02:00
Jeremy Allison
9edc159912 First part of bugfix for bug #8335 - file copy aborts with smb2_validate_message_id: bad message_id
Set default max credits to 8192 now this has been documented in the
SMB2 spec.
2011-07-29 10:18:12 -07:00
Christian Ambach
d2adf96402 docs: fix some whitespace
replace spaces with tabs, removing whitespaces at end of lines
2011-06-30 12:08:25 +02:00
Christian Ambach
1ae9a7160c docs: fix a typo 2011-06-30 12:08:25 +02:00
Andrew Bartlett
734e1b6812 s3-param Remove 'announce version' parameter
The only users I can find of this on the internet involve confused
users, and our own documentation recommends never setting this.  Don't
confuse our users any longer.

Andrew Bartlett
2011-06-23 13:47:27 +02:00
Andrew Bartlett
38b5beb33d param: Remove "announce as" parameter 2011-06-23 13:47:27 +02:00
Andrew Bartlett
530e4cac2e s3-param Remove 'time offset' from smb.conf
This strange parameter is apparently very rarely used, and it seems to
me that on modern networks, if clients don't have correct clocks and
DST offsets, that many other things (Kerberos) start to fail pretty
quickly, and time and DST tables tend to be internet delivered anyway.

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Sat Jun 11 03:54:45 CEST 2011 on sn-devel-104
2011-06-11 03:54:44 +02:00
Andrew Bartlett
776598a981 s3-docs Add documentation for ncalrpc dir
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Jun  7 02:57:33 CEST 2011 on sn-devel-104
2011-06-07 02:57:33 +02:00
Andrew Bartlett
ec9ff19e60 s3-param Make lp_passwordserver() const.
This means that it no longer takes % substituations, and so the documentation for this behaviour is removed from the smb.conf manpage.  (This mode is only useful in security=server, which is already marked as deprecated in 3.6).

Andrew Bartlett
2011-06-01 04:19:05 +02:00
Michael Adam
54c788f2df s3:doc: document "idmap gid" as deprecated.
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue May 31 11:39:38 CEST 2011 on sn-devel-104
2011-05-31 11:39:38 +02:00
Michael Adam
7c1021bc2b s3:doc: document "idmap uid" as deprecated. 2011-05-31 10:33:56 +02:00
Michael Adam
871daf1aa4 s3:doc: remove the documentation of "idmap alloc backend", which has been removed 2011-05-31 10:33:56 +02:00
Michael Adam
13c4c30a02 s3:doc: document "idmap backend" as deprecated. 2011-05-31 10:33:55 +02:00
Michael Adam
939378d42a s3:doc: update documentation of the "idmap config FOO : BAR" familiy of parameters 2011-05-31 10:33:55 +02:00
Volker Lendecke
875e29ba83 s3: Document "async smb echo handler"
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu May 26 12:50:55 CEST 2011 on sn-devel-104
2011-05-26 12:50:55 +02:00
Andrew Bartlett
ddbc5fa236 docs: Rewrite 'password server' documentation
I think this new version is more clear.

Andrew Bartlett
2011-05-25 12:13:01 +10:00
Andrew Bartlett
387cbb1c37 docs: Clarify the 'security=server' fails for NTLMv2 2011-05-25 09:15:18 +10:00
Björn Baumbach
5608995bd2 s3-docs: change eventlog path from lockdir to statedir
See elog_tdbname() in source3/lib/eventlog/eventlog.c.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-05-18 10:56:12 +02:00
Andrew Bartlett
46168e99f7 s3-param Deprecate a number of security parameters for 3.6
This follows up on the agreement on the samba-technical list in Jan
2011 to deprecate these options, and to possibly remove these in the
4.0 release after user feedback.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri May 13 19:51:41 CEST 2011 on sn-devel-104
2011-05-13 19:51:41 +02:00
Jeremy Allison
67aa53a1e1 Be a little clearer about when and when not to set this option.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Mon Mar 28 23:59:47 CEST 2011 on sn-devel-104
2011-03-28 23:59:47 +02:00
Stefan Metzmacher
dc36d75d5f Revert "Change strict allocate to default to true.
This reverts commit ecf48af135.

This makes Samba unusable on systems without Linux and
a modern Filesystem.

This was discussed with Jeremy on IRC:
http://irclog.samba.org/2011/01/20110126-Wed.log

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Mar 28 09:00:09 CEST 2011 on sn-devel-104
2011-03-28 09:00:09 +02:00
Michael Adam
cafb25ab37 s3:docs: remove documentation of "idmap read only" which was removed. 2011-03-22 22:49:57 +01:00
Michael Adam
bc3fb2405c s3:docs: fix xml of "printnotifybackchannel" parameter (missing closing tag)
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue Mar 22 13:57:25 CET 2011 on sn-devel-104
2011-03-22 13:57:25 +01:00
Volker Lendecke
4b347a1b17 s3: Add "print notify backchannel" parameter to prevent us doing the reverse print notify connection.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Mar 18 21:34:30 CET 2011 on sn-devel-104
2011-03-18 21:34:30 +01:00
Michael Adam
fea41496a1 s3:docs: document "winbind max domain connections"
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Fri Jan 21 14:33:57 CET 2011 on sn-devel-104
2011-01-21 14:33:57 +01:00
David Disseldorp
0b188e7784 s3-printing: Initiate pcap reload from parent smbd
Since commit 7022554, smbds share a printcap cache (printer_list.tdb),
therefore ordering of events between smbd processes is important when
updating printcap cache information. Consider the following two process
example:
1) smbd1 receives HUP or printcap cache time expiry
2) smbd1 checks whether pcap needs refresh, it does
3) smbd1 marks pcap as refreshed
4) smbd1 forks child1 to obtain cups printer info
5) smbd2 receives HUP or printcap cache time expiry
6) smbd2 checks whether pcap needs refresh, it does not (due to step 3)
7) smbd2 reloads printer shares prior to child1 completion (stale pcap)
8) child1 completion, pcap cache (printer_list.tdb) is updated by smbd1
9) smbd1 reloads printer shares based on new pcap information

In this case both smbd1 and smbd2 are reliant on the pcap update
performed on child1 completion.
The prior commit "reload shares after pcap cache fill" ensures that
smbd1 only reloads printer shares following pcap update, however smbd2
continues to present shares based on stale pcap data.

This commit addresses the above problem by driving pcap cache and
printer share updates from the parent smbd process.
1) smbd0 (parent) receives a HUP or printcap cache time expiry
2) smbd0 forks child0 to obtain cups printer info
3) child0 completion, pcap cache (printer_list.tdb) is updated by smbd0
4) smbd0 reloads printer shares
5) smbd0 notifies child smbds of pcap update via message_send_all()
6) child smbds read fresh pcap data and reload printer shares

This architecture has the additional advantage that only a single
process (the parent smbd) requests printer information from the printcap
backend.

Use time_mono in housekeeping functions As suggested by Björn Jacke.
2011-01-07 15:37:39 -08:00
Jeremy Allison
ecf48af135 Change strict allocate to default to true. (cherry picked from commit 820ea22a07b062b1717d35de8fa7051fc1067c3f) 2010-12-15 14:09:48 -08:00
Jeremy Allison
d2e9171f1d Add documentation for "smb2 max credits".
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Sat Dec 11 02:14:07 CET 2010 on sn-devel-104
2010-12-11 02:14:07 +01:00
Andrew Bartlett
45d784e929 s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'
Andrew Bartlett
2010-12-10 16:08:30 +11:00
Andrew Bartlett
d69b4f13f7 s3-docs Explain change to NTLMv2 by default in the client 2010-12-10 16:08:30 +11:00
Kai Blin
6e27ff36b6 s3 docs: Reword posix locking text to answer a common question
vl recently pointed me to a valid reason to use posix locking = no.
Fix the smb.conf manpage to explain this reason, as this question
comes up on the samba mailing list from time to time as well.

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Wed Dec  1 10:37:30 CET 2010 on sn-devel-104
2010-12-01 10:37:30 +01:00
Volker Lendecke
568a2377cc s3: Add a word of warning about "winbind use default domain"
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Mon Nov 22 23:26:11 CET 2010 on sn-devel-104
2010-11-22 23:26:11 +01:00
Volker Lendecke
076ccc6723 s3: Fix some typos 2010-11-22 22:40:03 +01:00
Volker Lendecke
f2456cd542 s3: Allow disabling of mdns registrations
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri Nov  5 11:24:41 UTC 2010 on sn-devel-104
2010-11-05 11:24:41 +00:00
Günther Deschner
3b213f6138 s3-docs: fix typo in "add port command" smb.conf manpage.
Guenther
2010-10-07 17:25:17 +02:00
Günther Deschner
9a7d1b1e97 s3-docs: more typos in rpc_server manpage.
Guenther
2010-09-15 14:35:28 +02:00
Günther Deschner
effbebcec1 s3-docs: fix rpc_server manpage type.
Guenther
2010-09-15 14:16:45 +02:00
Andreas Schneider
34225c93af s3-rpc_server: Added new parametric option 'rpc_server'
Signed-off-by: Andreas Schneider <asn@samba.org>
2010-09-15 12:53:42 +02:00
Pierre Carrier
eeb24afd78 Allows changing the maximum number of simultaneous clients in winbindd through an smb.conf option.
Signed-off-by: Jeremy Allison <jra@samba.org>
2010-09-14 16:43:39 -07:00
Andreas Schneider
a482b3e14e s3-auth: Remove docs about obsolete 'update encrypted' option. 2010-08-16 12:48:43 +02:00
Michael Adam
8496c663ff s3:docs: add documentation for new "idmap read only" parameter 2010-08-14 02:10:40 +02:00
Michael Adam
2056703d56 s3:docs: remove documentation of removed parameter "idmap alloc backend" 2010-08-14 02:10:40 +02:00
Volker Lendecke
b742c4952e s3-docs: Add more verbose description of "log writeable files on exit". 2010-07-19 12:47:09 +02:00
Volker Lendecke
775f1ed045 s3-docs: Add more verbose description of "ctdb locktime warn threshold". 2010-07-19 12:35:58 +02:00
Volker Lendecke
4c0f760edf s3-docs: Add more verbose description of "username map cache time". 2010-07-19 12:22:05 +02:00
Karolin Seeger
a785b4349c s3-docs: Remove older documentation of smb2 parameters.
Jeremy, these parameters were already documented. My fault.
Sorry for the noise!

Karolin
2010-07-19 11:54:05 +02:00
Jeremy Allison
3036822985 Fix bug #7570 - New smb2 max parameters are undocumented.
Jeremy.
2010-07-16 14:39:52 -07:00
Karolin Seeger
2352538362 s3-docs: Add missing whitespace.
Karolin
2010-06-21 10:30:57 +02:00
Karolin Seeger
20fc769179 s3-docs: Improve "winbind nss info" section in man smb.conf.
Karolin
2010-04-16 09:24:13 +02:00
Volker Lendecke
5fc2801c09 s3: Cache the username map in gencache
This is for uses with a heavy-weight username map script
2010-04-13 09:30:06 +02:00
Jeremy Allison
9c410118cb Parameterize "smb2 max read", "smb2 max write", "smb2 max trans".
Set to 64k by default.

Jeremy.
2010-04-06 15:43:35 -07:00
Volker Lendecke
70f9338bf2 s3: Add the "ctdb locktime warn threshold" parameter
This is mainly a debugging aid for post-mortem analysis in case a cluster file
system is slow.
2010-03-22 17:32:18 +01:00
Volker Lendecke
b2f45f20b0 s3: Add "log writeable files on exit" parameter
This boolean option controls whether at exit time the server dumps a list of
files with debug level 0 that were still open for write. This is an
administrative aid to find the files that were potentially corrupt if the
network connection died.
2010-03-22 12:03:44 +01:00
Karolin Seeger
494819773d s3-docs: Remove trailing whitespaces and fix a typo.
Karolin
2010-02-18 13:10:21 +01:00
Björn Jacke
37115f91ae s3:docs: add some advice for usage of strict allocate 2010-02-18 13:01:28 +01:00
Jeremy Allison
c7f16abc47 Fix error in docs. Should be milliseconds, not microseconds. 2010-02-12 21:29:58 -08:00
Jeremy Allison
f2d7d9774e Revert "Change the default of "nmbd bind explicit broadcast" to "no""
This reverts commit 84fba3c1bc.

Now we have a "processed packet queue" in nmbd we can go back
to doing this by default.

Jeremy.
2010-02-10 12:42:27 -08:00
Jeremy Allison
84fba3c1bc Change the default of "nmbd bind explicit broadcast" to "no"
until the double processing problem in bug #7118 is fixed.

Jeremy.
2010-02-10 08:39:37 -08:00
Karolin Seeger
a5b003e1f7 s3-docs: Add missing para end tag.
Karolin
(cherry picked from commit b78de63ef3)
2010-02-09 17:14:38 +01:00
Jeremy Allison
3f2415c9bf Make "nmbd bind explicit broadcast" on by default.
Fix a comment typo.

Jeremy.
2010-02-08 14:35:02 -08:00
Stefan Metzmacher
9887751f6f s3:docs-xml: document "nmbd bind explicit broadcast"
metze
2010-02-08 18:35:11 +01:00
Jeremy Allison
bd269443e3 Fix bug 7104 - "wide links" and "unix extensions" are incompatible.
Change parameter "wide links" to default to "no".
Ensure "wide links = no" if "unix extensions = yes" on a share.
Fix man pages to refect this.

Remove "within share" checks for a UNIX symlink set - even if
widelinks = no. The server will not follow that link anyway.

Correct DEBUG message in check_reduced_name() to add missing "\n"
so it's really clear when a path is being denied as it's outside
the enclosing share path.

Jeremy.
2010-02-05 15:20:18 -08:00
Karolin Seeger
e1e6b19acf s3-docs: Fix typos.
Thanks to the Debian samba package maintainers
<pkg-samba-maint@lists.alioth.debian.org> for providing the patch!

Fix bug #7017 (Typos and spelling errors in manpages).

Karolin
2010-01-20 13:34:50 +01:00
Jeremy Allison
fbf4923cad Update default with correct value. Add a note about Win7 behavior
here.
Jeremy.
2009-12-17 16:50:35 -08:00
Karolin Seeger
f740bdc47b s3:docs: Fix 'make manpages3'.
Karolin
2009-12-14 08:58:50 +01:00
Björn Jacke
c69b9b7890 s3:docs: document ldap deref 2009-12-11 13:28:31 +01:00
Björn Jacke
3609c7433d s3:doc: make dos filetimes description less contradictory 2009-12-08 21:32:51 +01:00
Karolin Seeger
5055ba140d s3:docs: Document "directory name cache size".
Karolin
2009-12-07 16:30:10 +01:00
Karolin Seeger
fde7c2ab19 s3:docs: Document "aio write behind".
Part of a fix for bug #6890 (Some smb.conf parameters are undocumented).

Karolin
2009-11-30 13:35:48 +01:00
Karolin Seeger
9478ec35b5 s3:docs: Document "ldap page size".
Part of a fix for bug #6890 (Some smb.conf parameters are undocumented).

Karolin
2009-11-30 13:35:47 +01:00
Karolin Seeger
b03ad70848 s3:docs: Document "enable core files".
Part of a fix for bug #6890 (Some smb.conf parameters are undocumented).

Karolin
2009-11-30 11:41:40 +01:00
Karolin Seeger
0003b5fad1 s3:docs: Document "cache directory" and "state directory".
Part of a fix for bug #6890 (Some smb.conf parameters are undocumented).

Karolin
2009-11-30 11:04:50 +01:00
Volker Lendecke
69a68208bd s3: Restore "fake directory create times" as a share parameter 2009-11-29 11:22:05 +01:00
Karolin Seeger
da8aba53d6 s3/docs: Add "max protocol = smb2" to man smb.conf.
Karolin
2009-11-18 13:05:24 +01:00
Jeremy Allison
a770caed0f Remove "store create time" code, cause create time to be stored
in the "user.DOSATTRIB" EA. From the docs:
In Samba 3.5.0 and above the "user.DOSATTRIB" extended attribute has been extended to store
the create time for a file as well as the DOS attributes. This is done in a backwards compatible
way so files created by Samba 3.5.0 and above can still have the DOS attribute read from this
extended attribute by earlier versions of Samba, but they will not be able to read the create
time stored there. Storing the create time separately from the normal filesystem meta-data
allows Samba to faithfully reproduce NTFS semantics on top of a POSIX filesystem.
Passes make test but will need more testing.
Jeremy.
2009-11-17 14:55:02 -08:00
Jeremy Allison
a8769e6675 Second part of bugfix for 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
We also need dos filemode = true set as well.
Jeremy.
2009-11-11 18:35:18 -08:00
Karolin Seeger
f3646ff392 s3/docs: Document "enable spoolss".
Karolin
2009-11-11 15:42:21 +01:00
Jeremy Allison
bd2ffb1c7a Fix bug 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
Jeremy.
2009-11-06 21:53:07 -08:00
Volker Lendecke
d415d4d32f s3: Add parameter "ctdb timeout"
When something in the cluster blocks, it can happen that we wait indefinitely
long for ctdb, just adding to the blocking condition. In theory, nothing should
block, but as someone said "In practice the difference between theory and
practice is larger than in theory". This adds a timeout parameter in seconds,
after which we stop waiting for ctdb and panic.
2009-11-05 12:05:36 +01:00
Volker Lendecke
ad6ee94950 s3: Make "debug hires timestamp" default to true
It does not cost much and can help a lot when debugging
2009-11-02 10:08:39 +01:00