summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* docs-xml: Fix usernames in pam_winbind manpagesAndreas Schneider2020-05-182-4/+4
| | | | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14358 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Apr 29 09:44:55 UTC 2020 on sn-devel-184 (cherry picked from commit 3abd92d7824e803f1ff53425088ebee30b58894b) Autobuild-User(v4-10-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-10-test): Mon May 18 09:23:44 UTC 2020 on sn-devel-144
* CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decodeGary Lockyer2020-04-211-0/+18
| | | | | | | | | | | | | | | | Add search request size limits to ldap_decode calls. The ldap server uses the smb.conf variable "ldap max search request size" which defaults to 250Kb. For cldap the limit is hard coded as 4096. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2020-10704: smb.conf: Add max ldap request sizesGary Lockyer2020-04-212-0/+36
| | | | | | | | | | | | | | | | | Add two new smb.conf parameters to control the maximum permitted ldap request size. Adds: ldap max anonymous request size default 250Kb ldap max authenticated request size default 16Mb Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml/winbindnssinfo: clarify interaction with idmap_ad etc.Björn Jacke2020-01-141-5/+4
| | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14122 RN: docs: clarify interaction between winbind nss info and idmap backend Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Wed Jan 8 15:37:46 UTC 2020 on sn-devel-184 (cherry picked from commit 55fbd4c05b477e95920b53b94eda2572e075e6e1)
* s3:printing: Fix %J substitionRalph Boehme2019-11-187-0/+7
| | | | | | | | | | | | | | | | | | | | | | | print_run_command() uses lp_print_command() which internally performs basic substition by calling talloc_sub_basic(). As a result. any of the variables in the "basic set", including "%J" are already substituted. To prevent the unwanted subtitution, we declare all affected configuration options as const, which disabled the basic substition. As a result print_run_command() can run manual substitution on all characters, including %J, in the variadic argument list *before* calling lp_string() to run basic substition which we had disabled before with the const. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13745 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Thu Nov 7 16:01:21 UTC 2019 on sn-devel-184 (cherry picked from commit 8846887a55b0c97a1639fc6ecb228941cf16b8f2)
* docs-xml: add "additional dns hostnames" smb.conf optionIsaac Boukris2019-11-051-0/+11
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14116 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs-xml: add "winbind use krb5 enterprise principals" optionStefan Metzmacher2019-09-251-0/+34
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 9520652399696010c333a3ce7247809ce5337a91)
* docs: Remove gpfs:merge_writeappend from vfs_gpfs manpageChristof Schmitt2019-08-231-20/+0
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14032 Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> (cherry picked from commit 8bd79ecc37376dbaa35606f9c2777653eb3d55e3)
* vfs:glusterfs_fuse: ensure fileids are constant across nodesMichael Adam2019-08-231-0/+8
| | | | | | | | | | | | | | | | Instead of adding a new gluster-specific mode to the fileid module, this patches provides a fileid algorithm as part of the glusterfs_fuse vfs module. This can not be configured further, simply adding the glusterfs_fuse vfs module to the vfs objects configuration will enable the new fileid mode. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13972 Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Sat Jul 13 22:54:56 UTC 2019 on sn-devel-184
* docs: Document DCEPRC binding string for rpcclientAndreas Schneider2019-06-261-7/+67
| | | | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Feb 4 02:03:56 CET 2019 on sn-devel-144 (cherry picked from commit cca48c1a1029685672e1c25e39e8be2be947238f)
* docs: Improve documentation of "lanman auth" and "ntlm auth" connectionAndrew Bartlett2019-06-212-10/+13
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=13981 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit dbf3e81f7f0b28c69dca004b32ea3a7344b0cad3)
* docs: dfree command. Correct usage of dfree scripts.Jeremy Allison2019-06-131-2/+4
| | | | | | | | | | | | | | | Add quotes to the sample scripts to prevent incorrect parameter usage. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13964 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri May 24 20:12:02 UTC 2019 on sn-devel-184 (cherry picked from commit 77eabd74e9a28b1e6decf0890a9ef4c83fa002d4)
* docs/vfs_ceph: describe new ACL behaviourDavid Disseldorp2019-04-161-0/+11
| | | | | | | | | | | | | | | | | vfs_ceph now explicitly enables libcephfs POSIX ACL support. Bug: https://bugzilla.samba.org/show_bug.cgi?id=13896 Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Apr 12 19:40:25 UTC 2019 on sn-devel-144 (cherry picked from commit 58314d71ea63e36d5f1bbd2c3e190b1edffee726) Autobuild-User(v4-10-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-10-test): Tue Apr 16 14:42:07 UTC 2019 on sn-devel-144
* memcache: Increase size of default memcache to 512kChristof Schmitt2019-04-111-1/+1
| | | | | | | | | | | | With the fixed accounting of talloc objects, the default cache size needs to increase. The exact increase required depends on the workloads, going form 256k to 512k seems like a reasonable guess. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13865 Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 9ff5c0bab76c5d3d7bea1fcb79861d0c9a3b9839)
* docs: Update smbclient manpage for --max-protocolAndreas Schneider2019-04-101-3/+3
| | | | | | | | | | | We default to SMB3 now. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13857 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> (cherry picked from commit 63084375e3c536f22f65e7b7796d114fa8c804c9)
* man pages: document prefork process modelGary Lockyer2019-03-052-6/+33
| | | | | | | | | | | | | | | Document the process model options -M BUG: https://bugzilla.samba.org/show_bug.cgi?id=13765 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Autobuild-User(master): Tim Beale <timbeale@samba.org> Autobuild-Date(master): Thu Jan 31 04:25:14 CET 2019 on sn-devel-144 (cherry picked from commit 4ecdcc4b462d03bec3ec36ba1b90f45d9977be8b)
* s3-vfs: add glusterfs_fuse vfs module.Günther Deschner2019-02-052-0/+104
| | | | | | | | | | | | | | | | | | | | | | | | | | This module only implements the get_real_filename function by accessing a distinct extended attribute that is available over a glusterfs fuse mount. By implementing this vfs function users of a glusterfs fuse mount achieve a much better performance in create based workloads where samba then can avoid trying multiple case folding options to detect the real filename. Patch is based on an initial patch provided by Poornima G <pgurusid@redhat.com> BUG: https://bugzilla.samba.org/show_bug.cgi?id=13774 Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Tue Jan 22 18:37:56 CET 2019 on sn-devel-144 (cherry picked from commit adffe0dcf002aa4721dc7897261895e3486d5271)
* manpages/samba.7.xml: smbcontrol can also work with 'samba'Stefan Metzmacher2019-02-051-1/+1
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=13752 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Björn Baumbach <bbaumbach@samba.org> (cherry picked from commit 12b9adec3ff48f4356f9ff865891dc3c652ff86b)
* xml_docs: update traffic script documentationDouglas Bagnall2019-01-092-22/+64
| | | | | | | | Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Tim Beale <timbeale@samba.org> Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org> Autobuild-Date(master): Wed Jan 9 03:53:58 CET 2019 on sn-devel-144
* docs-xml: document "log level" changesRalph Boehme2018-12-201-2/+9
| | | | | | | | | "log level" now takes an optional per debug-class logfile: log level = 1 full_audit:1@/var/log/audit.log winbind:2 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* manpage: Advise vfs_fruit:veto_appledouble=yes can break rsyncAdam Nielsen2018-12-171-3/+7
| | | | | | Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: add "smbd getinfo ask sharemode"Ralph Boehme2018-12-061-0/+14
| | | | | | | Counterpart for "smbd search ask sharemode" for getinfo. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml: add "smbd max async dosmode"Ralph Boehme2018-12-061-0/+12
| | | | | | | | | | | | | | | | The parameter is added to the lists of ignored-paremteres in the samba.docs tests, as the given default "aio max threads * 2" works only as manpage string. "aio max threads" can only be calculated at run time and requires a handle to a pthreadpool_tevent which loadparm will never have. Because of that lp_smbd_max_async_dosmode() will always return 0 as default and it's up to the caller to calculate "aio max threads * 2" if lp_smbd_max_async_dosmode() returns 0. Cf the next commit. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml: add "smbd async dosmode"Ralph Boehme2018-12-061-0/+13
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml: add "smbd search ask sharemode"Ralph Boehme2018-12-061-0/+13
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* s4 smdb standard: Limit processes forked on accept.Gary Lockyer2018-11-301-0/+7
| | | | | | | | | | | | Limit the number of processes started by the standard model on accept. For those services that support fork on accept, the standard model forks a new process for each new connection. This patch limits the number of processes to the value specified in 'max smbd processes', a value of zero indicates that there is no limit on the number of processes that can be forked. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* net: Add support for a credentials fileOlly Betts2018-11-301-0/+1
| | | | | | | | | Add support for the same -A authfile/--authentication-file authfile option that most of the other tools already do. Signed-off-by: Olly Betts <olly@survex.com> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* source4 smbd prefork: Add backoff to process restartGary Lockyer2018-11-232-0/+38
| | | | | | | | | Add new smbd.conf variables 'prefork backoff increment' and 'prefork maximum backoff' to control the rate at which failed pre-forked processes are restarted. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smbd: Add "hide new files" optionVolker Lendecke2018-11-091-0/+15
| | | | | | | See the manpage for the description Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* source4 smbd prefork: Increase default worklers to 4Gary Lockyer2018-11-071-4/+4
| | | | | | | | Increase the default number of worker processes started by the pre-fork process model from 1 to 4. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs:vfs_fruit: add "delete_empty_adfiles" optionRalph Boehme2018-10-311-0/+11
| | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=13642 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs:vfs_fruit: add "wipe_intentionally_left_blank_rfork" optionRalph Boehme2018-10-311-0/+14
| | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=13642 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* netcmd: Add 'samba-tool group stats' commandTim Beale2018-10-311-0/+5
| | | | | | | | | | | | | | | With large domains it's hard to get an idea of how many groups there are, and how many users are in each group, on average. However, this could have a big impact on whether a problem can be reproduced or not. This patch dumps out some summary information so that you can get a quick idea of how big the groups are. Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org> Autobuild-Date(master): Wed Oct 31 03:40:41 CET 2018 on sn-devel-144
* nsswitch: Add try_authtok option to pam_winbindMathieu Parent2018-10-021-0/+8
| | | | | | | | | | | | Same as the use_authtok option, except that if the new password is not valid, PAM will prompt for a password. Bug-Debian: https://bugs.debian.org/858923 Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/570944 Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org>
* turn --with-json-audit into global --with-jsonPhilipp Gesang2018-09-261-1/+1
| | | | | | | | | | Fold the build option --with-json-audit into the toplevel wscript to reflect the fact that JSON support is no longer local to the audit subsystem. Signed-off-by: Philipp Gesang <philipp.gesang@intra2net.com> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs: Only build vfs manpages if the module is enabledAndreas Schneider2018-09-261-46/+49
| | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Sep 26 20:10:07 CEST 2018 on sn-devel-144
* docs: Add gpfs:check_fstype to vfs_gpfs manpageChristof Schmitt2018-09-191-0/+22
| | | | | | | | Signed-off-by; Christof Schmit <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Christof Schmitt <cs@samba.org> Autobuild-Date(master): Wed Sep 19 03:56:47 CEST 2018 on sn-devel-144
* s3-spoolss: Make spoolss client os_major,os_minor and os_build configurable.Günther Deschner2018-09-081-0/+39
| | | | | | | | | | | Similar to spoolss server options, make the client advertised OS version values configurable to allow overriding the defaults provided to the print server. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13597 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs-xml/wscript_build: update to handle waf 2.0.4Alexander Bokovoy2018-09-051-1/+1
| | | | | Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs smb.conf: Clarify that wreplsrv:periodic_interval is in secondsAndrew Bartlett2018-08-171-1/+1
| | | | | | | | | | As requested by oota on samba-technical Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Aug 17 05:53:54 CEST 2018 on sn-devel-144
* Shorten description in vfs_linux_xfs_sgid manualJustin Stephenson2018-08-091-1/+1
| | | | | | | | | | | | | | | this fixes a lexgrog parse error, the NAME subheader description of the vfs_linux_xfs_sgid(8) manual was too long, this will shorten the description and allow it to be correctly detected by mandb. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13562 Signed-off-by: Justin Stephenson <jstephen@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Aug 9 04:06:17 CEST 2018 on sn-devel-144
* netcmd: domain backup offline commandAaron Haslett2018-08-061-0/+5
| | | | | | | | | | | | | Unlike the existing 'domain backup online' command, this command allows an admin to back up a local samba installation using the filesystem and the tdbbackup tool instead of using remote protocols. It replaces samba_backup as that tool does not handle sam.ldb and secrets.ldb correctly. Those two databases need to have transactions started on them before their downstream ldb and tdb files are backed up. Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* Add net lookup optionsJustin Stephenson2018-08-061-0/+24
| | | | | | | | Add missing net lookup options to net man page Signed-off-by: Justin Stephenson <jstephen@redhat.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jim McDonough <jmcd@samba.org>
* s3:libads: Add net ads leave keep-account optionJustin Stephenson2018-07-301-1/+8
| | | | | | | | | | | Add the ability to leave the domain with --keep-account argument to avoid removal of the host machine account. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13498 Signed-off-by: Justin Stephenson <jstephen@redhat.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs/kerneloplocks: drop Irix referencesDavid Disseldorp2018-07-251-8/+7
| | | | | | | | Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 25 06:28:21 CEST 2018 on sn-devel-144
* docs: mention that the echo handler is for SMB1 onlyBjörn Jacke2018-07-131-1/+2
| | | | | | | | Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Karolin Seeger <kseeger@samba.org> Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Fri Jul 13 11:44:02 CEST 2018 on sn-devel-144
* docs: Remove mention of --without-json-audit from the AD DCAndrew Bartlett2018-07-124-15/+6
| | | | | | | This is no longer optional for the AD DC. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs: Explain that "max xmit" is SMB1 onlyAndrew Bartlett2018-07-121-1/+3
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* smb.conf: add dns_zone_scavengingGary Lockyer2018-07-121-0/+23
| | | | | | | | | Add parameter dns_zone_scavenging to control dns zone scavenging. Scavenging is disabled by default, as due to https://bugzilla.samba.org/show_bug.cgi?id=12451 the ageing properties of existing DNS entries are incorrect. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
* doc: samba-tool drs showrepl --json and --summaryDouglas Bagnall2018-07-111-1/+5
| | | | | Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>