summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* lib/util: allow to set TCP_USER_TIMEOUT socket optionGünther Deschner2020-07-081-0/+1
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11897 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* tls: Use NORMAL:-VERS-SSL3.0 as the default configurationAndreas Schneider2020-07-011-4/+2
| | | | | | | | | | | | | | | This seems to be really broken in GnuTLS and the documentation is also not correct. This partially reverts 53e3a959b958a3b099df6ecc5f6e294e96bd948e BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jul 1 14:56:33 UTC 2020 on sn-devel-184
* docs-xml/smbdotconf: add "smb2 disable lock sequence checking"Stefan Metzmacher2020-06-271-0/+41
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* Fix a typo in recent net man page changesIsaac Boukris2020-06-181-1/+1
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14406 Signed-off-by: Isaac Boukris <iboukris@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* s3:lib:tls: Use better priority lists for modern GnuTLSAndreas Schneider2020-06-171-5/+5
| | | | | | | | | | | | | | | We should use the default priority list. That is a good practice, because TLS protocol hardening and phasing out of legacy algorithms, is easier to co-ordinate when happens at a single place. See crypto policies of Fedora. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Jun 17 17:42:02 UTC 2020 on sn-devel-184
* docs: Remove defaults test exception for "mit kdc command"Andrew Bartlett2020-06-171-2/+3
| | | | | | This ensures the documentation matches the code. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: Ensure "use mmap" always has the correct defaultAndrew Bartlett2020-06-171-3/+3
| | | | | | We clarify the smb.conf manpage entry for "use mmap" to match the actual behaviour Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* Add docs build to CIAndrew Bartlett2020-06-104-15/+4
| | | | | | | | | | | We did not check we could actually build the HTML of the Samba Developers guide and HTML of the manpages previously. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jun 10 07:11:59 UTC 2020 on sn-devel-184
* docs-xml: Remove GNU TexInfo buildAndrew Bartlett2020-06-103-15/+0
| | | | | | | | This does not build and is not a common or required format for documentation any more. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs-xml: Remove references to inkscape (not used any more, no more SVG files)Andrew Bartlett2020-06-104-23/+0
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs-xml: Remove final references to Samba3-HOWTO and Samba3-ByExampleAndrew Bartlett2020-06-106-105/+3
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs-xml: Remove references to building docs using PluckerAndrew Bartlett2020-06-104-15/+0
| | | | | | | This was for Palm OS based handheld devices, Windows Mobile devices, and other PDAs... Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* Remove "undocumented" target mentioned in configure scriptAndrew Bartlett2020-06-101-2/+0
| | | | | | | This was left over from 12aed897ec688d5bc379690208e8b85158b8227f Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* Add net-ads-join dnshostname=fqdn optionIsaac Boukris2020-05-291-1/+6
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14396 Signed-off-by: Isaac Boukris <iboukris@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri May 29 13:33:28 UTC 2020 on sn-devel-184
* docs-xml: update list of posible VFS operations for vfs_full_auditBjörn Jacke2020-05-191-16/+57
| | | | | | | | | | | the list of valid operations can be generated by grep "{ SMB_VFS_OP_" source3/modules/vfs_full_audit.c |sed 's/.*,[ \t]*"//;s/".*//'|grep -v NULL | sort BUG: https://bugzilla.samba.org/show_bug.cgi?id=14386 Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* docs: improve desription of map acl inheritBjörn Jacke2020-05-191-4/+4
| | | | | Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* docs-xml/smbdotconf: clarify the quoting for advanced "interfaces" optionsStefan Metzmacher2020-05-071-4/+16
| | | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu May 7 16:23:40 UTC 2020 on sn-devel-184
* CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decodeGary Lockyer2020-05-041-0/+18
| | | | | | | | | | | | | | | | Add search request size limits to ldap_decode calls. The ldap server uses the smb.conf variable "ldap max search request size" which defaults to 250Kb. For cldap the limit is hard coded as 4096. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2020-10704: smb.conf: Add max ldap request sizesGary Lockyer2020-05-042-0/+36
| | | | | | | | | | | | | | | | | Add two new smb.conf parameters to control the maximum permitted ldap request size. Adds: ldap max anonymous request size default 250Kb ldap max authenticated request size default 16Mb Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: Fix usernames in pam_winbind manpagesAndreas Schneider2020-04-292-4/+4
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14358 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Apr 29 09:44:55 UTC 2020 on sn-devel-184
* utils: Convert smbtree to use libsmbclientVolker Lendecke2020-04-181-8/+0
| | | | | | | | | | | | | We have the domain browsing functionality in libsmbclient, don't duplicate it in smbtree with special code. Not too much gain in lines of code, but the new code is much more regular and reuses functionality provided elsewhere. This removes the "-b" option from smbtree, libsmbclient always does that. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Update smbclient manpage that four digit years are also allowedChristof Schmitt2020-04-161-1/+1
| | | | | | | | Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Christof Schmitt <cs@samba.org> Autobuild-Date(master): Thu Apr 16 19:06:32 UTC 2020 on sn-devel-184
* docs-xml: Add a vfs_widelinks manpage.Jeremy Allison2020-04-092-0/+91
| | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* s3:modules: add vfs_io_uring moduleStefan Metzmacher2020-02-152-0/+108
| | | | | | | | | | | | | | | | | | | | | | The module makes use of the new io_uring infrastructure (intruduced in linux 5.1), see https://lwn.net/Articles/778411/ and http://git.kernel.dk/cgit/liburing/ Currently this only implements SMB_VFS_{PREAD,PWRITE,FSYNC}_SEND/RECV and avoids the overhead of our userspace threadpool. In future we'll hopefully make more use of more advanced io_uring features. For now we don't have automated tests as our test infrastructure doesn't use a recent kernel. At least we're able to do compile tests on fedora31. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Feb 15 11:37:45 UTC 2020 on sn-devel-184
* smbd: Add close-denied-share messageVolker Lendecke2020-01-151-0/+10
| | | | | | | | This is like close-share, but kicks out only active users where share access controls are changed such that now access would be denied Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* samba-tool: implement user getgroups commandStefan Metzmacher2020-01-151-0/+5
| | | | | | | | | samba-tool user getgroups command to list a users group memberships. Pair-programmed-with: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andreas Schneider <asn@samba.org>
* samba-tool: implement user setprimary group command (set primaryGroupID)Björn Baumbach2020-01-151-0/+5
| | | | | | | | | Introduce an option to set the primaryGroupID attribute of a user account. Pair-programmed-with: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* smbclient/tar: add verbose modeBjörn Jacke2020-01-141-4/+5
| | | | | | | | | | | | | | A verbose mode got lost with the introduction of libarchive support. The verbose mode is optional, default is quiet mode. The output format is close to the verbose output format of POSIX tar implementations and should be good parsable. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11642 Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml: 'mangled names = illegal' is the new defaultAndreas Schneider2020-01-141-2/+2
| | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Jan 14 15:18:02 UTC 2020 on sn-devel-184
* docs-xml/winbindnssinfo: clarify interaction with idmap_ad etc.Björn Jacke2020-01-081-5/+4
| | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14122 RN: docs: clarify interaction between winbind nss info and idmap backend Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Wed Jan 8 15:37:46 UTC 2020 on sn-devel-184
* vfs_zfsacl: fix issue with ACL inheritance in zfsaclawalker2019-12-201-0/+19
| | | | | | | | | | | | | | | | | | Add parameter zfsacl:map_dacl_protected to address issue preventing Windows Clients from disabling inheritance on ACLs. FreeBSD does not currently expose the ACL_PROTECTED NFS4.1 flag, but it does expose ACE4_INHERITED_ACE. When the parameter is enabled, map the absence of ACE4_INHERITED_ACE to SEC_DESC_DACL_PROTECTED. See also the discussion at https://gitlab.com/samba-team/samba/merge_requests/719 Signed-off-by: Andrew Walker <awalker@ixsystems.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Dec 20 23:24:54 UTC 2019 on sn-devel-184
* vfs_zfsacl: add manpage entry for zfsacl:denymissingspecialawalker2019-12-201-0/+15
| | | | | | Signed-off-by: Andrew Walker <awalker@ixsystems.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml/Samba-Developers-Guide/vfs.xml: Fix incorrect VFS func names.Richard Sharpe2019-12-081-4/+4
| | | | | | | | | | | | | Use SMB_VFS_P{READ,WRITE} since the others have been retired. Also, fix up the definitions. Signed-off-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Dec 8 21:50:52 UTC 2019 on sn-devel-184
* docs-xml: remove explicit "constant"Ralph Boehme2019-11-2759-59/+0
| | | | | | | | | | | | | | | | | The constant mark applied to types "string" and "ustring". The previous patches in this patchset already markes all string options as either constant or substituted, but it's still possible to add options or change existing ones to be neither constant nor substituted. In order to enforce strings to be either constant or substitued, remove the explicit constant marker. Instead, any option that is not marked as substituted is implicitly made constant. This patch doesn't change behaviour and all generated files are the same before and after this change. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* docs-xml: remove SWAT specific flagsRalph Boehme2019-11-272-2/+0
| | | | | | | | Most of the SWAT stuff was removed in 4a6a010e78721624813a84bfefa7a1b80eaf0abb, somehow these two crept back in afterwards. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "usershare template share" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | The code uses Globals.usershare_template_share directly anyway. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "rpc server dynamic port range" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "mangling method" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | | | | | From the manpage: ... controls the algorithm used for the generating the mangled names. Can take two different values, "hash" and "hash2". ... No need for variable substitution support in this option, declare it const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap user suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap machine suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap idmap suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap group suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix was used directly in the dependent options like "ldap group suffix", we can just mark this option as const thereby removing substitution from "ldap suffix". Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap admin dn" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | All the other LDAP related options like "ldap user suffix" don't support variable substitution, so I guess it's safe to remove support for it from this one as well. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "wins hook" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "usershare path" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "username map script" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "username map" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "shutdown script" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "set quota command" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
View Lorry Controller Status