summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* Remove misleading entry from vfs_streams_xattr man pageAnoop C S2017-09-051-4/+0
| | | | | | | | | | | The line which is being removed says that streams_xattr vfs module cannot be used when kernel oplocks is enabled. But the underlying bug(#7537) and another dependant bug(#12791) has been resolved sometime back. Signed-off-by: Anoop C S <anoopcs@redhat.com> Reviewed-by: Ralph Böhme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* scripts: Scripts to replay and generate samba trafficGary Lockyer2017-08-173-0/+768
| | | | | | | | | | | | | | | | | | | | | | | | Scripts to generate representative network traffic and replay this to a samba instance. For load testing, performance profiling and capacity planning. traffic_learner process a file generated by traffic_summary and generate a model that can be used by traffic_replay to generate samba network traffic. traffic_replay Replay a summary file generated by traffic_summary, or use a model created by traffic_learner to generate network traffic. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Pair-programmed-with: Garming Sam <garming@catalyst.net.nz> Pair-programmed-with: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Tim Beale <timbeale@catalyst.net.nz>
* docs/vfs_fruit: remove period outside of the <para> tagRalph Boehme2017-07-291-1/+1
| | | | | | | | | | | | | | Period that is outside of the <para> tag causes unneccessary vertical space in the htmlman output. (Paragraph including only one period will be created.) From matsuand <michio_matsuyama@yahoo.co.jp>. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sat Jul 29 15:09:37 CEST 2017 on sn-devel-144
* docs/smbget: Fix typo in options within man pageAnoop C S2017-07-271-2/+2
| | | | | | | | | | | | | `smbget` utility accepts '--user' as a valid argument. But still the man page specifies it as '--username'. So fixing the man page to reflect the current behaviour. Signed-off-by: Anoop C S <anoopcs@redhat.com> Reviewed-by: Martin Schwenke <martin@meltin.net> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Jul 27 06:35:10 CEST 2017 on sn-devel-144
* smb.conf: Explain that "ntlm auth" is a per-passdb settingAndrew Bartlett2017-07-241-4/+14
| | | | | | | | This parameter has always applied to this passdb only, not to domain authentication. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12929 Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* docs: Fix a typo in cifsdd.8Samba-JP oota2017-07-181-1/+1
| | | | | | | | | Signed-off-by: Samba-JP oota <ribbon@samba.gr.jp> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Tue Jul 18 18:35:16 CEST 2017 on sn-devel-144
* vfs_fruit: add fruit:model = <modelname> parametric optionGünther Deschner2017-07-121-0/+9
| | | | | | | | | | | | | | | | | | | | | | | fruit:model = iMac fruit:model = MacBook fruit:model = MacPro fruit:model = Xserve will all display a different icon inside Finder. Formerly, we used "Samba" which resulted in a "?" icon in Finder, with the new default "MacSamba" we appear with a computer box icon at least. Guenther Bug: https://bugzilla.samba.org/show_bug.cgi?id=12840 Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Jul 12 03:17:57 CEST 2017 on sn-devel-144
* vfs_fruit: fix a typoRalph Boehme2017-07-101-1/+1
| | | | | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Mon Jul 10 16:48:24 CEST 2017 on sn-devel-144
* docs: Document new smbclient deltree command.Jeremy Allison2017-07-071-0/+10
| | | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* samr: Disable NTLM-based password changes on the server if NTLM is disabledAndrew Bartlett2017-07-041-1/+2
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* param: Add new "disabled" value to "ntlm auth" to disable NTLM totallyAndrew Bartlett2017-07-041-0/+5
| | | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923 Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* param: Disable LanMan authentication unless NTLMv1 is also enabledAndrew Bartlett2017-07-042-2/+2
| | | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923
* auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm ↵Andrew Bartlett2017-07-041-7/+37
| | | | | | | | | | | | | | | | | | | | | | | | | auth =' The ntlm auth parameter is expanded to more clearly describe the role of each option, and to allow the new mode that permits MSCHAPv2 (as declared by the client over the NETLOGON protocol) while still banning NTLMv1. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Based on a patch by Mantas Mikulėnas <mantas@utenos-kolegija.lt>: Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth") added the --allow-mschapv2 option, but didn't implement checking for it server-side. This implements such checking. Additionally, Samba now disables NTLMv1 authentication by default for security reasons. To avoid having to re-enable it globally, 'ntlm auth' becomes an enum and a new setting is added to allow only MSCHAPv2. Signed-off-by: Mantas Mikulėnas <mantas@utenos-kolegija.lt> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* debug: new debug class for kerberosAndrew Bartlett2017-06-301-0/+1
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* param: change the effective default for "client max protocol" to the latest ↵Stefan Metzmacher2017-06-271-1/+1
| | | | | | | | | supported protocol Currently it's SMB3_11. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: Sort input file listBernhard M. Wiedemann via samba-technical2017-06-271-1/+1
| | | | | | | | | | | | | | | because filesystems return entries in undeterministic order and that ends up in index.xml and influences index.html preventing reproducible builds of samba packages (e.g. for openSUSE) See https://reproducible-builds.org/ for why this matters Signed-off-by: Bernhard M. Wiedemann <bwiedemann@suse.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Tue Jun 27 16:56:06 CEST 2017 on sn-devel-144
* docs-xml: change the default for "map untrusted to domain" to "auto"Stefan Metzmacher2017-06-161-4/+11
| | | | | | | | | | | | | | This makes the behaviour much more robust, particularly with forest child domains over one-way forest trusts. Sadly we don't support this kind of setup with our current ADDC, so there's no way to have automated tests for this behaviour, but at least we know it doesn't break any existing tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: document "map untrusted to domain = auto"Stefan Metzmacher2017-06-161-1/+22
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: improve documentation of "map untrusted to domain"Stefan Metzmacher2017-06-161-15/+10
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smbd: Claim version in g_lockVolker Lendecke2017-06-151-0/+16
| | | | | | | | | | | | | | | Protect smbd against version incompatibilities in a cluster. At first startup smbd locks "samba_version_string" and writes its version string. It then downgrades the lock to a read lock. Subsequent smbds check against the version string and also keep the read lock around. If the version does not match, we try to write our own version. But as there's a read lock, the lock upgrade to write lock will fail due the read lock being around. So as long as there's one smbd with this read lock, no other version of smbd will be able to start. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml/smbdotconf: deprecated "profile acls"Stefan Metzmacher2017-06-131-0/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This doesn't work anymore with modern clients, and there're better ways to support profiles on a share. Typically something like this seems to work: [winprofiles] comment = Users profiles New path = /data/winprofiles/ browseable = No read only = No csc policy = disable store dos attributes = yes vfs objects = acl_xattr With chmod 1777 on /data/winprofiles/ In order to work around some locking problems, see https://bugzilla.samba.org/show_bug.cgi?id=12833 It's also useful to something like this in the global section in order to detect disconnects reliable: socket options = TCP_KEEPCNT=5 TCP_KEEPIDLE=30 TCP_KEEPINTVL=1 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* Revert "param: Add 'mit kdc config' option to smb.conf"Andreas Schneider2017-05-261-14/+0
| | | | | | | This reverts commit eaaf5ce66e32d05b0a649619986d67ab6176a27a. Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri May 26 15:28:40 CEST 2017 on sn-devel-144
* docs: configuration options for extra password hashesGary Lockyer2017-05-251-0/+67
| | | | | | | | | Add the configuration options for the generation and storage of crypt() based sha256 and sha512 password hashes in supplementalCredentials Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs: Remove old docs.Karolin Seeger2017-05-11310-160278/+0
| | | | | | | | | | | This does not yet remove the Makefile rules for the removed xml, someone with better make-fu should step in here. Signed-off-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Thu May 11 19:37:37 CEST 2017 on sn-devel-144
* docs: Rename Samba3-Developers-Guide to Samba-Developers-GuideKarolin Seeger2017-05-1019-283/+282
| | | | | | | | | | This guide is not obsolete but needs an update. Signed-off-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed May 10 19:57:36 CEST 2017 on sn-devel-144
* docs-xml: Document net tdb commandChristof Schmitt2017-05-081-0/+22
| | | | | Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* param: Add 'mit kdc config' option to smb.confAndreas Schneider2017-04-291-0/+14
| | | | | | | | This points to the kdc config file created by Samba by default. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* param: Add 'mit kdc command' to change the default.Andreas Schneider2017-04-293-0/+26
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* lib: modules: Change XXX_init interface from XXX_init(void) to ↵Jeremy Allison2017-04-221-2/+12
| | | | | | | | | | | | | | | | | | | | XXX_init(TALLOC_CTX *) Not currently used - no logic changes inside. This will make it possible to pass down a long-lived talloc context from the loading function for modules to use instead of having them internally all use talloc_autofree_context() which is a hidden global. Updated all known module interface numbers, and added a WHATSNEW. Signed-off-by: Jeremy Allison <jra@samba.org> Signed-off-by: Ralph Böhme <slow@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Apr 22 01:17:00 CEST 2017 on sn-devel-144
* docs: Update idmap_rid manpageAndreas Schneider2017-04-181-8/+4
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* param: Check for valid values of 'name resolve order' optionNoel Power2017-04-131-0/+1
| | | | | | | | | | | This variable is populated by a list of values where each value should be a known option. This patch ensures that illegal values are detected. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12739 Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs: fixup smbclient rename -f optionUri Simchoni2017-04-081-3/+3
| | | | | | | | | | | | Fixup documentation of new -f option of the smbclient rename command. This command is supported by SMB1 and SMB2. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Apr 8 02:38:16 CEST 2017 on sn-devel-144
* auth: Add hooks for notification of authentication events over the message busAndrew Bartlett2017-03-291-0/+26
| | | | | | | | This will allow tests to be written to confirm the correct events are triggered. We pass in a messaging context from the callers Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* auth_log: Add JSON logging of Authorisation and AuthenticationsGary Lockyer2017-03-291-0/+23
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Pair-Programmed: Andrew Bartlett <abartlet@samba.org>
* manpages: update smbclient manpage with rename -f optionUri Simchoni2017-03-281-2/+5
| | | | | | | Document the -f option of the rename command. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* vfs_fruit: document added zero_file_id parameterUri Simchoni2017-03-261-0/+17
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12715 Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* s3: smbd: Change "strict sync" paramter from "no" to "yes" for 4.7.0.Jeremy Allison2017-03-251-18/+30
| | | | | | | | Document change and modify in loadparm.c. Safer default for new installs and vendors. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Christof Schmitt <cs@samba.org>
* idmap_rfc2307: Clarify the documentation a bitVolker Lendecke2017-03-221-2/+2
| | | | | | | | | | "bind_path" is a variable name internally used inside Samba. If you look at "man ldapsearch" from OpenLDAP for example, the more common term for this parameter is "search base". Adapt the documentation accordingly. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>
* docs: Deprecate "auth methods"Volker Lendecke2017-03-161-0/+1
| | | | | | | Keeping this parameter prevents fixing bug 2976 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Deprecate "map untrusted to domain"Volker Lendecke2017-03-161-0/+1
| | | | | | | | | | | | | The implementation of this parameter depends on Samba to enumerate trusted domains. In an active directory environment, we don't know of a good way to enumerate all domains that we have to accept as trusted, in particular with multiple forests, one-way and external trusts. We hope to replace this parameter in the future with something that matches Windows behaviour better, after the deprecation phase of this parameter is over and we can remove it. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* typo: uppon -> uponGarming Sam2017-03-131-1/+1
| | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* Correct "ommited" typos.Chris Lamb2017-03-131-1/+1
| | | | | | | Signed-off-by: Chris Lamb <chris@chris-lamb.co.uk> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* doc: update "ea support" section of the smb.conf manpageUri Simchoni2017-03-121-6/+21
| | | | | | | | | | This section was badly outdated. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Sun Mar 12 21:04:11 CET 2017 on sn-devel-144
* manpages/vfs_fruit: document global optionsRalph Boehme2017-03-081-56/+99
| | | | | | | | | Some options MUST be set in the global section, better document that. Bug: https://bugzilla.samba.org/show_bug.cgi?id=12615 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Improve the idmap_hash manpageAndreas Schneider2017-03-031-3/+21
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12582 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* vfs_fruit: drop "ea support" from the manpageUri Simchoni2017-03-021-3/+0
| | | | | | | | Now that ea support is not required, drop that comment from the man page. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* vfs_fruit: only veto AppleDouble files with fruit:resource=fileRalph Boehme2017-03-021-4/+8
| | | | | | | | | | | | vfs_fruit only creates AppleDouble files itself when "fruit:resource" is set to "file" (the default). It is only then the these AppleDouble files should be treated as an internal representation and should be inaccessible from clients. Bug: https://bugzilla.samba.org/show_bug.cgi?id=12526> Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>
* docs/vfs_fruit: document known limitations with fruit:encoding=nativeRalph Boehme2017-03-021-2/+6
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12427 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>
* fix spelling of 'unchangeable'Edward Betts2017-02-221-1/+1
| | | | | | | | | Signed-off-by: Edward Betts <edward@4angle.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Autobuild-User(master): Garming Sam <garming@samba.org> Autobuild-Date(master): Wed Feb 22 12:21:51 CET 2017 on sn-devel-144
* Correct "hexidecimal" typos.Chris Lamb2017-02-224-6/+6
| | | | | | Signed-off-by: Chris Lamb <chris@chris-lamb.co.uk> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
View Lorry Controller Status