summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* CVE-2020-25717: Add FreeIPA domain controller roleAlexander Bokovoy2021-11-081-0/+7
| | | | | | | | | | | | | | | | | As we want to reduce use of 'classic domain controller' role but FreeIPA relies on it internally, add a separate role to mark FreeIPA domain controller role. It means that role won't result in ROLE_STANDALONE. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2020-25717: loadparm: Add new parameter "min domain uid"Samuel Cabrero2021-11-082-0/+21
| | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Samuel Cabrero <scabrero@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> [abartlet@samba.org Backported from master/4.15 due to conflicts with other new parameters]
* docs: Expand the "log level" docs on audit loggingAndrew Bartlett2021-05-031-5/+33
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 38fe888f95f8d22736080ed521939be932e7bca0)
* docs: underline special words in the audit logging part of "log level" in ↵Andrew Bartlett2021-05-031-13/+17
| | | | | | | | | | man smb.conf BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit d03e7ffcff32452bb92f2ced9f06cbeab9843e04)
* docs: Further discourage the use of the "event notification" optionsAndrew Bartlett2021-05-034-24/+39
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 364b8be9816b34b2a1b07c6259345c406d68c9f2)
* docs: Add proper explination on why transactions need to be audited.Andrew Bartlett2021-05-031-3/+16
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit a778a3a6420f094a953563b87f84457fdebd20a3)
* docs: Add missing documentation on dsdb_group_audit and dsdb_group_audit_jsonAndrew Bartlett2021-05-031-0/+4
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 2e533664e756ccde8fc1b3e41e70437c9e7bafcd)
* debug: Synchronise "log level" in smb.conf with the codeAndrew Bartlett2021-05-031-15/+18
| | | | | | | | | | | | This is done by pasting in the contents of default_classname_table[] in lib/util/debug.c into cut -f 2 -d \"| xargs -i sh -c 'echo "\t<listitem><para><parameter moreinfo=\"none\">{}</parameter></para></listitem>"' BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 0d30d74e89829cc7b4faa6ba835e3d90c1c410aa)
* vfs_glusterfs: print exact cmdline for disabling write-behind translatorGünther Deschner2020-12-021-1/+5
| | | | | | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14486 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Anoop C S <anoopcs@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Fri Nov 27 17:15:07 UTC 2020 on sn-devel-184 (cherry picked from commit 369c1d539837b70e94fe9d533d44860c8a9380a1) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Wed Dec 2 14:49:18 UTC 2020 on sn-devel-184
* manpages/vfs_glusterfs: Mention silent skipping of write-behind translatorAnoop C S2020-12-021-0/+5
| | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14486 Signed-off-by: Anoop C S <anoopcs@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Mon Nov 9 13:30:06 UTC 2020 on sn-devel-184 (cherry picked from commit be03ce7d8bb213633eedcfc3299b8d9865a3c67f)
* docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfsSachin Prabhu2020-11-031-0/+22
| | | | | | | | | | | | | | | Add warning about data corruption with the write-behind translator. The data corruption is highlighted by the smbtorture test smb2.rw.rw1. More information about this data corruption issue is available in the bz. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14486 Signed-off-by: Sachin Prabhu <sprabhu@redhat.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 08f8f665d409ee7b93840c25a8142f2ce8bacfa1)
* vfs_zfsacl: Add new parameter to stop automatic addition of special entriesAndrew Walker2020-10-301-0/+20
| | | | | | | | | | | | | | | | | | | | | | Prevent ZFS from automatically adding NFSv4 special entries (owner@, group@, everyone@). ZFS will automatically add these these entries when calculating the inherited ACL of new files if the ACL of the parent directory lacks an inheriting special entry. This may result in user confusion and unexpected change in permissions of files and directories as the inherited ACL is generated. Blocking this behavior is achieved by setting an inheriting everyone@ that grants no permissions and not adding the entry to the file's Security Descriptor. This change also updates behavior so that the fd-based syscall facl() is used where possible. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14470 RN: vfs_zfsacl: Add new parameter to stop automatic addition of special entries Signed-off-by: Andrew Walker <awalker@ixsystems.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit c10ae30c1185463eb937f69c1fc9914558087167)
* smb.conf.5: add clarification how configuration changes reflected by SambaAlexander Bokovoy2020-10-304-5/+55
| | | | | | | | | | | | | | | | | | | | | | | Users of Linux distributions know to read smb.conf(5) manual page but apparently not many of them read smbd(8) and winbindd(8) to understand how changes to smb.conf file are reflected in the running processes. Add a small section that makes it clear where to find relevant information. Also correct the information in smbd, nmbd, and winbindd manual pages. The interval at which smbd does check for smb.conf changes was increased from 60 seconds to 180 seconds in 1999 with commit 3db52feb1f3b. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14538 Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Isaac Boukris <iboukris@samba.org> Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Tue Oct 20 08:50:13 UTC 2020 on sn-devel-184 (cherry picked from commit e32846f0692df44b4ee929c5ed6ba1de88ec4bd2)
* docs: fix default value of spoolss:architectureBjörn Jacke2020-10-271-2/+2
| | | | | | | | | | | | | | "Windows x64" is the default here since a couple of years already. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14522 Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Oct 6 23:06:50 UTC 2020 on sn-devel-184 (cherry picked from commit c587685dde2448d1f68ada47ce5ad42b02a118ce)
* CVE-2020-1472(ZeroLogon): docs-xml: document 'server require ↵Stefan Metzmacher2020-09-181-15/+54
| | | | | | | | schannel:COMPUTERACCOUNT' BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497 Signed-off-by: Stefan Metzmacher <metze@samba.org>
* docs: Add missing winexe manpageGünther Deschner2020-08-272-0/+189
| | | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14318 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Thu Aug 20 12:55:23 UTC 2020 on sn-devel-184 (cherry picked from commit a9b6a8378e5db19d5d5ecd42f08ec3abd49ad5b8)
* docs: deprecate "raw NTLMv2 auth"Andrew Bartlett2020-08-241-0/+8
| | | | | | | | | | | This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific authentication options for possible removal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 8c9d9441edce2e8d7f0428d0ec5e209ed8a55dbc)
* docs: deprecate "client plaintext auth"Andrew Bartlett2020-08-241-0/+9
| | | | | | | | | | | This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific authentication options for possible removal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 37583b19d2c3dbf3e9d0498a39b8b9d9c727e1d4)
* docs: deprecate "client NTLMv2 auth"Andrew Bartlett2020-08-241-0/+9
| | | | | | | | | | | This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific authentication options for possible removal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 5543c11c8b007b49641758428af7ba3976683438)
* docs: deprecate "client lanman auth"Andrew Bartlett2020-08-241-0/+9
| | | | | | | | | | | This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific authentication options for possible removal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit ac8e5ea22d9f9b16a79f519f69852b46ac798541)
* docs: deprecate "client use spnego"Andrew Bartlett2020-08-241-0/+8
| | | | | | | | | | | This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific authentication options for possible removal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 1b85db57e53533ce14beb79f6d949a08f6ef9f91)
* docs: Deprecate NT4-like domains and SMBv1-only protocol optionsAndrew Bartlett2020-08-241-0/+7
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c6aa710f8da9ef92b388f1c0c59b2dd3c602ad2d)
* Remove depracated "ldap ssl ads" smb.conf optionIsaac Boukris2020-08-121-21/+0
| | | | | | | Signed-off-by: Isaac Boukris <iboukris@samba.org> Autobuild-User(v4-13-test): Stefan Metzmacher <metze@samba.org> Autobuild-Date(v4-13-test): Wed Aug 12 11:16:04 UTC 2020 on sn-devel-184
* docs: Fix documentation for require_membership_of of pam_winbind.confAndreas Schneider2020-08-101-3/+6
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14358 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Isaac Boukris <iboukris@samba.org> (cherry picked from commit 71b7140fd0a33e7e8c5bf37c2897cea8224b3f01)
* docs: Fix documentation for require_membership_of of pam_winbindAndreas Schneider2020-08-101-3/+5
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14358 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> (cherry picked from commit 4c74db6978c682f8ba4e74a6ee8157cfcbb54971)
* s3:smbd: force multi-channel to be turned off without FreeBSD/Linux supportStefan Metzmacher2020-07-081-0/+5
| | | | | | | | | | | | | | | | | For now it's safer to disable multi-channel without having support for TIOCOUTQ/FIONWRITE on tcp sockets. Using a fixed retransmission timeout (rto) of 1 second would be ok, but we better require kernel support for requesting for unacked bytes in the kernel send queue. "force:server multi channel support = yes" can be used to overwrite the compile time restriction (mainly for testing). BUG: https://bugzilla.samba.org/show_bug.cgi?id=11897 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
* docs-xml/smbdotconf: add "smb2 disable oplock break retry"Stefan Metzmacher2020-07-081-0/+39
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
* lib/util: allow to set TCP_USER_TIMEOUT socket optionGünther Deschner2020-07-081-0/+1
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11897 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* tls: Use NORMAL:-VERS-SSL3.0 as the default configurationAndreas Schneider2020-07-011-4/+2
| | | | | | | | | | | | | | | This seems to be really broken in GnuTLS and the documentation is also not correct. This partially reverts 53e3a959b958a3b099df6ecc5f6e294e96bd948e BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jul 1 14:56:33 UTC 2020 on sn-devel-184
* docs-xml/smbdotconf: add "smb2 disable lock sequence checking"Stefan Metzmacher2020-06-271-0/+41
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* Fix a typo in recent net man page changesIsaac Boukris2020-06-181-1/+1
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14406 Signed-off-by: Isaac Boukris <iboukris@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* s3:lib:tls: Use better priority lists for modern GnuTLSAndreas Schneider2020-06-171-5/+5
| | | | | | | | | | | | | | | We should use the default priority list. That is a good practice, because TLS protocol hardening and phasing out of legacy algorithms, is easier to co-ordinate when happens at a single place. See crypto policies of Fedora. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Jun 17 17:42:02 UTC 2020 on sn-devel-184
* docs: Remove defaults test exception for "mit kdc command"Andrew Bartlett2020-06-171-2/+3
| | | | | | This ensures the documentation matches the code. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: Ensure "use mmap" always has the correct defaultAndrew Bartlett2020-06-171-3/+3
| | | | | | We clarify the smb.conf manpage entry for "use mmap" to match the actual behaviour Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* Add docs build to CIAndrew Bartlett2020-06-104-15/+4
| | | | | | | | | | | We did not check we could actually build the HTML of the Samba Developers guide and HTML of the manpages previously. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jun 10 07:11:59 UTC 2020 on sn-devel-184
* docs-xml: Remove GNU TexInfo buildAndrew Bartlett2020-06-103-15/+0
| | | | | | | | This does not build and is not a common or required format for documentation any more. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs-xml: Remove references to inkscape (not used any more, no more SVG files)Andrew Bartlett2020-06-104-23/+0
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs-xml: Remove final references to Samba3-HOWTO and Samba3-ByExampleAndrew Bartlett2020-06-106-105/+3
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs-xml: Remove references to building docs using PluckerAndrew Bartlett2020-06-104-15/+0
| | | | | | | This was for Palm OS based handheld devices, Windows Mobile devices, and other PDAs... Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* Remove "undocumented" target mentioned in configure scriptAndrew Bartlett2020-06-101-2/+0
| | | | | | | This was left over from 12aed897ec688d5bc379690208e8b85158b8227f Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* Add net-ads-join dnshostname=fqdn optionIsaac Boukris2020-05-291-1/+6
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14396 Signed-off-by: Isaac Boukris <iboukris@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri May 29 13:33:28 UTC 2020 on sn-devel-184
* docs-xml: update list of posible VFS operations for vfs_full_auditBjörn Jacke2020-05-191-16/+57
| | | | | | | | | | | the list of valid operations can be generated by grep "{ SMB_VFS_OP_" source3/modules/vfs_full_audit.c |sed 's/.*,[ \t]*"//;s/".*//'|grep -v NULL | sort BUG: https://bugzilla.samba.org/show_bug.cgi?id=14386 Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* docs: improve desription of map acl inheritBjörn Jacke2020-05-191-4/+4
| | | | | Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* docs-xml/smbdotconf: clarify the quoting for advanced "interfaces" optionsStefan Metzmacher2020-05-071-4/+16
| | | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu May 7 16:23:40 UTC 2020 on sn-devel-184
* CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decodeGary Lockyer2020-05-041-0/+18
| | | | | | | | | | | | | | | | Add search request size limits to ldap_decode calls. The ldap server uses the smb.conf variable "ldap max search request size" which defaults to 250Kb. For cldap the limit is hard coded as 4096. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2020-10704: smb.conf: Add max ldap request sizesGary Lockyer2020-05-042-0/+36
| | | | | | | | | | | | | | | | | Add two new smb.conf parameters to control the maximum permitted ldap request size. Adds: ldap max anonymous request size default 250Kb ldap max authenticated request size default 16Mb Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: Fix usernames in pam_winbind manpagesAndreas Schneider2020-04-292-4/+4
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14358 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Apr 29 09:44:55 UTC 2020 on sn-devel-184
* utils: Convert smbtree to use libsmbclientVolker Lendecke2020-04-181-8/+0
| | | | | | | | | | | | | We have the domain browsing functionality in libsmbclient, don't duplicate it in smbtree with special code. Not too much gain in lines of code, but the new code is much more regular and reuses functionality provided elsewhere. This removes the "-b" option from smbtree, libsmbclient always does that. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Update smbclient manpage that four digit years are also allowedChristof Schmitt2020-04-161-1/+1
| | | | | | | | Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Christof Schmitt <cs@samba.org> Autobuild-Date(master): Thu Apr 16 19:06:32 UTC 2020 on sn-devel-184
* docs-xml: Add a vfs_widelinks manpage.Jeremy Allison2020-04-092-0/+91
| | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>