summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
...
* s3/service: convert lp_force_group() to constDavid Disseldorp2018-07-061-0/+1
| | | | | | | | set_conn_force_user_group() and change_to_user_internal() leak onto the callers' talloc stackframe. Drop the unnecessary heap allocations. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* Document that vfs_full_audit defaults are "none" for the successful and ↵Timur I. Bakeyev2018-07-051-2/+2
| | | | | | | | failed operations. Signed-off-by: Timur I. Bakeyev <timur@iXsystems.com> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* netcmd: Add 'samba-tool domain backup rename' commandTim Beale2018-07-051-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a new command that takes a clone of the domain's DB, and renames the domain as well. (We rename the domain during the clone because it's easier to implement - the DRS code handles most of the renaming for us, as it applies the received replication chunks). The new option is similar to an online backup, except we also do the following: - use the new DCCloneAndRenameContext code to clone the DB - run dbcheck to fix up any residual old DNs (mostly objectCategory references) - rename the domain's netBIOSName - add dnsRoot objects for the new DNS realm - by default, remove the old realm's DNS objects (optional) - add an extra backupRename marker to the backed-up DB. In the restore code, if the backup was renamed, then we need to register the new domain's DNS zone at that point (we only know the new DC's host IP at the restore stage). Note that the backup will contain the old DC entries that still use the old dnsHostname, but these DC entries will all be removed during the restore, and a new DC will be added with the correct dnsHostname. Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* samba_gpoupdate: Rename the command to samba-gpupdateDavid Mulder2018-07-041-2/+2
| | | | | | | | | On a Windows client, this command is called 'gpupdate' Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* MAN: Adding entry for net ads lookupAmit Kumar2018-07-041-0/+6
| | | | | | | | | | | | | There is no man page description for net ads lookup. This PR adds entry for the same. Signed-off-by: Amit Kumar amitkuma@redhat.com Reviewed-by: Ralph Böhme <slow@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jul 4 07:38:04 CEST 2018 on sn-devel-144
* netcmd: domain backup restore commandAaron Haslett2018-07-031-0/+5
| | | | | | | | | | | Add a command option that restores a backup file. This is only intended for recovering from a catastrophic failure of the domain. The old domain DCs are removed from the DB and a new DC is added. Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* netcmd: domain backup online commandAaron Haslett2018-07-031-0/+10
| | | | | | | | | | | This adds a samba-tool command that can be run against a remote DC to produce a backup-file for the current domain. The backup stores similar info to what a new DC would get if it joined the network. Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* docs: Add manpage for winbind_krb5_localauth.8Andreas Schneider2018-06-272-0/+90
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Jun 27 18:45:56 CEST 2018 on sn-devel-144
* docs: Move winbind_krb5_locator manpage to volume 8Andreas Schneider2018-06-272-4/+4
| | | | | | | | | The vfs and idmap manpages are in volume 8 too. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* python/samba/netcmd/schema.py: add schema show_oc for attributeWilliam Brown2018-05-291-0/+5
| | | | | | | | | | | | Often administrators need to add a specific attribute to an object, but it may not be possible with the objectClasses present. This tool allows searching "what objectclasses must or may?" take an attribute to help hint to an administrator what objectclasses can be added to objects to achieve the changes they want. Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* python/samba/netcmd/schema.py: add schema query and management.William Brown2018-05-291-0/+20
| | | | | | | | | | Schema management in active directory is complex and dangerous. Having a tool that safely wraps administrative tasks as well as allowing query of the schema will make this complex topic more accessible to administrators. Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* python/samba/netcmd/group.py: add group showWilliam Brown2018-05-291-0/+5
| | | | | | | | | | The samba-tool user command can show the ldif of a user. This is useful for groups also, especially to determine the objectSID and objectGUID. Add support for group show to samba-tool. Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* python/samba/netcmd/{forest.py,main.py}: add configuration controlsWilliam Brown2018-05-291-0/+20
| | | | | | | | | | | | | | | With samba-tool we should expose ways to easily administer and control common configuration options. This adds the base framework for modifying forest settings, generally stored in cn=configuration partition. An example is: samba-tool forest directory_service show samba-tool forest directory_service dsheuristics X Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* s3: VFS: Remove SMB_VFS_FCHMOD_ACL().Jeremy Allison2018-05-253-4/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* s3: torture: Remove cmd_fchmod_acl().Jeremy Allison2018-05-251-1/+0
| | | | | | | No longer needed. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* s3: VFS: Remove SMB_VFS_CHMOD_ACL().Jeremy Allison2018-05-253-3/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* s3: torture: Remove cmd_chmod_acl().Jeremy Allison2018-05-251-1/+0
| | | | | | | No longer needed. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* netcmd: Add samba-tool support for managing PSOsTim Beale2018-05-231-0/+45
| | | | | | | | | | | | | | | | | Add a new command 'samba-tool domain passwordsettings pso', with the sub-command options: create, delete, set, list, show, show-user, apply, unapply. The apply and unapply options apply the PSO to a user or group. The show-user option shows the actual PSO (and its settings) that will take effect for a given user. The new commands are pretty self-contained in a new pso.py file. We decided to add these new commands under the existing 'samba-tool domain passwordsettings' command, as that's what users would be already familiar with. Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* script: Add 'random-seed' option to traffic_replayTim Beale2018-05-161-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | When using a traffic-model file to generate traffic, there is some randomness in the actual packets that get generated. This means it's hard to use the tool to detect an increase/decrease in Samba performance - we don't know whether a decrease in packets sent is due to a regression in the Samba codebase, or just due to the tool sending different types of packets (i.e. ones that take longer to process). This patch adds an option to seed the python random number generator. This means that exactly the same traffic can be generated across multiple test runs. (Previously we were using the '--traffic-summary' option to avoid this problem - we can generate a summary-file based on the model, and then use the same summary file across multiple runs. However, this proved impractical when you want to run multiple combinations of scale/rate parameters, e.g. 21 x 8 different permutations just fills up disk space with summary-files.) Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: William Brown <william@blackhats.net.au> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed May 16 13:53:26 CEST 2018 on sn-devel-144
* smb.conf: Add dsdb group change notification parameterGary Lockyer2018-05-161-0/+27
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smb conf: Add DSDB event notification parameterGary Lockyer2018-05-162-0/+54
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* logging: add ldb audit classesGary Lockyer2018-05-161-3/+25
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smbd: fileserver: Change defaults to work with EA support out of the box.Jeremy Allison2018-05-153-3/+16
| | | | | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Tue May 15 12:40:48 CEST 2018 on sn-devel-144
* build: Make --with-json-audit the defaultAndrew Bartlett2018-05-151-2/+2
| | | | | | | | | | | | | | Thanks to Rowland for a clear description of the behaviour for the smb.conf manpage. This means that those not wanting to link to libarchive will just need to build --without-json-audit. In general, we prefer that optional libraries be required by default so that they are not accidentially missed, particularly in packages. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* docs-xml:samba-tool.8: fix wrong default computer container nameBjörn Baumbach2018-05-141-1/+1
| | | | | | | CN=Users --> CN=Computers Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Björn Jacke <bjacke@samba.org>
* Improve vfs_linux_xfs_sgid manpageMathieu Parent2018-05-121-4/+7
| | | | | | | | | | - Add missing refpurpose and describe the "circumstances" - Replace dangling link by archive.org backup - Add fixed Linux version and commit link Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* Fix spelling s/protcol/protocol/Mathieu Parent2018-05-121-1/+1
| | | | | | Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* Fix spelling s/opions/options/Mathieu Parent2018-05-121-1/+1
| | | | | | Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* Fix spelling s/malicous/malicious/Mathieu Parent2018-05-121-1/+1
| | | | | | Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* Fix spelling s/authenticaiton/authentication/Mathieu Parent2018-05-121-2/+2
| | | | | | Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* Fix spelling s/allows to/allows one to/Mathieu Parent2018-05-121-1/+1
| | | | | | Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* docs-xml: rewrite the vfs_aio_pthread manpage to reflect the >= 4.0.0 behaviorStefan Metzmacher2018-04-231-37/+14
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* docs-xml:samba-tool.8: improve doc for computer management commandsJoe Guo2018-04-061-0/+15
| | | | | | | | | | Add docs for new options: 1. --ip-address 2. --service-prinicipal-name Signed-off-by: Joe Guo <joeg@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs-xml:samba-tool.8: document computer management commandsBjörn Baumbach2018-04-061-0/+70
| | | | | | Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* s3:smbd: don't use the directory cache for SMB2/3Ralph Boehme2018-03-301-2/+3
| | | | | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=13363 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Mar 30 03:51:48 CEST 2018 on sn-devel-144
* s3: docs: Add documentation for "smb2" and "smb2_credits" debug classes.Jeremy Allison2018-03-221-0/+2
| | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=13347 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* wbinfo: Improve the wording for --online-statusAndreas Schneider2018-03-161-3/+4
| | | | | | | | | | | | | | Currently it displays if a domain is online or offline which is wrong. It tells us if we maintain an active connection to the domain or not. Users are confused if they read offline because the think winbind is not functional with that domain. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Mar 16 14:46:43 CET 2018 on sn-devel-144
* docs: Add manpage for new 'net ads setspn' subcommandNoel Power2018-03-021-0/+33
| | | | | | Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: Add manpage for 'net ads keytab' subcommandNoel Power2018-03-021-0/+83
| | | | | | Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: Add a not that 'wbinfo --user-groups' may be incompleteAndreas Schneider2018-02-141-4/+29
| | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Feb 14 20:32:18 CET 2018 on sn-devel-144
* docs: Fix smbpasswd manpage about password storageAndreas Schneider2018-02-131-2/+1
| | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Tue Feb 13 16:25:33 CET 2018 on sn-devel-144
* docs-xml:samba-tool.8: document "group move" commandBjörn Baumbach2018-02-081-0/+11
| | | | | Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs-xml:samba-tool.8: document "user move" commandBjörn Baumbach2018-02-081-0/+10
| | | | | Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs-xml:samba-tool.8: document "user show" commandBjörn Baumbach2018-02-081-0/+14
| | | | | Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs-xml:samba-tool.8: document ou management commandsBjörn Baumbach2018-02-081-0/+82
| | | | | Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs-xml: Add 'samba-tool visualize' to man samba-tool.8.Karolin Seeger2018-02-071-2/+55
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=13226 Signed-off-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3/smbd: fix handling of delete-on-close on directoriesRalph Boehme2018-02-031-0/+13
| | | | | | | | | | | | | | | | | | This implements a check to test the delete-on-close flag of a directory for requests to create files in this directory. Windows server implement this check, Samba doesn't as it has performance implications. This commit implements the check and a new option to control it. By default the check is skipped, setting "check parent directory delete on close = yes" enables it. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Sat Feb 3 23:42:16 CET 2018 on sn-devel-144
* gpo: Correct documentationDavid Mulder2018-02-011-5/+4
| | | | | | | | | | | The doc still contains a reference to env var policy (which isn't present in this release). BUG: https://bugzilla.samba.org/show_bug.cgi?id=13223 Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* Samba-VirusFilter: clamav VFS and man page.Trever L. Adams2018-01-241-0/+4
| | | | | | | | | | Signed-off-by: Trever L. Adams <trever.adams@gmail.com> Signed-off-by: SATOH Fumiyasu <fumiyas@osstech.co.jp> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Wed Jan 24 15:08:59 CET 2018 on sn-devel-144
* Samba-VirusFilter: F-Secure AntiVirus (fsav) VFS and man page.Trever L. Adams2018-01-241-2/+25
| | | | | | | Signed-off-by: Trever L. Adams <trever.adams@gmail.com> Signed-off-by: SATOH Fumiyasu <fumiyas@osstech.co.jp> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>