summaryrefslogtreecommitdiff
path: root/docs-xml
diff options
context:
space:
mode:
authorDavid Disseldorp <ddiss@samba.org>2014-02-14 01:18:41 +0100
committerJeremy Allison <jra@samba.org>2015-03-31 18:40:25 +0200
commitf64c2fe68a1f0f93bd11412b2001daf0958b5ea0 (patch)
tree2fe6e5140ee523b79b4609729d1c9c559ae290ee /docs-xml
parent9af9b436ed3bc3e74ca7ddf437d16c26a8d540b8 (diff)
downloadsamba-f64c2fe68a1f0f93bd11412b2001daf0958b5ea0.tar.gz
doc: explain vfs_snapper remote snapshot configuration
This extends the vfs_snapper man page to also cover FSRVP remote snapshot behaviour and configuration. The permissions section is also extended to describe specific Samba and Snapper requirements for remote snapshot creation and deletion using DiskShadow.exe. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
Diffstat (limited to 'docs-xml')
-rw-r--r--docs-xml/manpages/vfs_snapper.8.xml33
1 files changed, 32 insertions, 1 deletions
diff --git a/docs-xml/manpages/vfs_snapper.8.xml b/docs-xml/manpages/vfs_snapper.8.xml
index 0e06ec5959d..802573bea41 100644
--- a/docs-xml/manpages/vfs_snapper.8.xml
+++ b/docs-xml/manpages/vfs_snapper.8.xml
@@ -39,6 +39,12 @@
</para>
<para>
+ Snapshots can also be created and remove remotely, using the
+ File Server Remote VSS Protocol (FSRVP). Snapshot creation and
+ deletion requests are forwarded to snapper via DBus.
+ </para>
+
+ <para>
This module is stackable.
</para>
</refsect1>
@@ -56,6 +62,18 @@
<smbconfsection name="[share]"/>
<smbconfoption name="vfs objects">snapper</smbconfoption>
</programlisting>
+
+ <para>
+ For remote snapshot creation and deletion, Samba's FSRVP
+ server must be configured in the [global] section:
+ </para>
+
+ <programlisting>
+ <smbconfsection name="[global]"/>
+ <smbconfoption name="rpc_daemon:fssd">fork</smbconfoption>
+ <smbconfoption name="registry shares">yes</smbconfoption>
+ <smbconfoption name="include">registry</smbconfoption>
+ </programlisting>
</refsect1>
<refsect1>
@@ -70,13 +88,26 @@
options. Snapper can grant these users and groups .snapshots
traversal access automatically via the SYNC_ACL option.
</para>
+ <para>
+ Remote snapshot creation and deletion is only permitted by Samba
+ for Active Directory administrators, backup operators, or users
+ explicitly granted SeBackupPrivilege. Snapper must also permit
+ creation and deletion for the appropriate user, via snapper's
+ ALLOW_USERS or ALLOW_GROUPS options.
+ </para>
+ <para>
+ The DiskShadow.exe FSRVP client initially authenticates as the
+ Active Directory computer account. This account must therefore
+ be granted the same permissions as the user account issuing the
+ snapshot creation and deletion requests.
+ </para>
</refsect1>
<refsect1>
<title>VERSION</title>
<para>
- This man page is correct for version 4.2.0 of the Samba suite.
+ This man page is correct for version 4.3.0 of the Samba suite.
</para>
</refsect1>