summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* docs/vfs_ceph: add CTDB_SAMBA_SKIP_SHARE_CHECK=yes caveatDavid Disseldorp2018-07-281-0/+11
| | | | | | | | | | | | | Mostly copied from the vfs_gluster manpage: the CephFS share path is not locally mounted, which breaks the ctdb_check_directories_probe() check. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jul 6 23:19:02 CEST 2018 on sn-devel-144 (cherry picked from commit 0cd44821f3889067620d685344c3eaf913a31329)
* vfs_ceph: don't lie about flock supportDavid Disseldorp2018-07-281-0/+8
| | | | | | | | | | | Instead, match vfs_gluster behaviour and require that users explicitly disable "kernel share modes". Bug: https://bugzilla.samba.org/show_bug.cgi?id=13506 Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 926ae50627d536735cee9b3931ee35bc19060261)
* s3:smbd: don't use the directory cache for SMB2/3Ralph Boehme2018-04-101-2/+3
| | | | | | | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=13363 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Mar 30 03:51:48 CEST 2018 on sn-devel-144 (cherry picked from commit 66052fdccd28922cf1caa2bc750e39051a6414cf)
* s3: docs: Add documentation for "smb2" and "smb2_credits" debug classes.Jeremy Allison2018-03-231-0/+2
| | | | | | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=13347 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org> (cherry picked from commit fc922bd29b40a20450f16728fa7347f8f83d3bcd) Autobuild-User(v4-7-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-7-test): Fri Mar 23 02:37:09 CET 2018 on sn-devel-144
* Add vfs_zfsacl manpage to the list of manpages if we have this module enabled.Timur I. Bakeyev2017-12-051-0/+3
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12934 Signed-off-by: Timur I. Bakeyev <timur@iXsystems.com> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org> (cherry picked from commit 8034b88d4e771663c4b7b581fb6b1992c33d5d96)
* Fix typo in the "wide links" description for the getwd cache.Timur I. Bakeyev2017-12-051-1/+1
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12934 Signed-off-by: Timur I. Bakeyev <timur@iXsystems.com> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org> (cherry picked from commit e9e4cd4d2b6ae376cba90fdb56b9c9684f2dc492)
* smb.conf.5: sort parameters alphabeticallyAlexander Bokovoy2017-10-251-1/+8
| | | | | | | | | | | | | | | | | | | | Content of each separate parameter description file is added into a parameters.all.xml file before compiling smb.conf.5. The issue is that POSIX file systems generally don't give any promises over how glob-produced files are sorted. Thus, we need to sort them in a predictable way. This patch adds sorting based on a file name as a string. Since all parameter files named after the parameter itself (plus .xml), we can use file name sorting. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13081 Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-By: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 543c0af4767f5be723594b87d078357e1e04f02e)
* man pages: properly ident listsAlexander Bokovoy2017-10-251-0/+1
| | | | | | | | | | | | | | | | It took me some time (original bug was filed in 2013!) but now lists in smb.conf.5 are properly idented. BUG: https://bugzilla.samba.org/show_bug.cgi?id=9613 Signed-Off-By: Alexander Bokovoy <ab@samba.org> Reviewed-By: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sat Oct 14 11:31:07 CEST 2017 on sn-devel-144 (cherry picked from commit 7d47f75be460977894ca11b2ecc1e74e08ffb9f3)
* smb.conf: Explain that "ntlm auth" is a per-passdb settingAndrew Bartlett2017-08-171-4/+14
| | | | | | | | | This parameter has always applied to this passdb only, not to domain authentication. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12929 Signed-off-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 9d4a9bd3cc6d5031b4cb6120be8d261350a8bdfc)
* vfs_fruit: add fruit:model = <modelname> parametric optionGünther Deschner2017-07-241-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | fruit:model = iMac fruit:model = MacBook fruit:model = MacPro fruit:model = Xserve will all display a different icon inside Finder. Formerly, we used "Samba" which resulted in a "?" icon in Finder, with the new default "MacSamba" we appear with a computer box icon at least. Guenther Bug: https://bugzilla.samba.org/show_bug.cgi?id=12840 Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Jul 12 03:17:57 CEST 2017 on sn-devel-144 (cherry picked from commit 259e1706e3206b215e136ea9d5beef4c9e3fcdee)
* docs: Document new smbclient deltree command.Jeremy Allison2017-07-201-0/+10
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12914 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit f2f9f51fef8e264fdad11018e3c447db0ad03cc1)
* samr: Disable NTLM-based password changes on the server if NTLM is disabledAndrew Bartlett2017-07-041-1/+2
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* param: Add new "disabled" value to "ntlm auth" to disable NTLM totallyAndrew Bartlett2017-07-041-0/+5
| | | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923 Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* param: Disable LanMan authentication unless NTLMv1 is also enabledAndrew Bartlett2017-07-042-2/+2
| | | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923
* auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm ↵Andrew Bartlett2017-07-041-7/+37
| | | | | | | | | | | | | | | | | | | | | | | | | auth =' The ntlm auth parameter is expanded to more clearly describe the role of each option, and to allow the new mode that permits MSCHAPv2 (as declared by the client over the NETLOGON protocol) while still banning NTLMv1. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Based on a patch by Mantas Mikulėnas <mantas@utenos-kolegija.lt>: Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth") added the --allow-mschapv2 option, but didn't implement checking for it server-side. This implements such checking. Additionally, Samba now disables NTLMv1 authentication by default for security reasons. To avoid having to re-enable it globally, 'ntlm auth' becomes an enum and a new setting is added to allow only MSCHAPv2. Signed-off-by: Mantas Mikulėnas <mantas@utenos-kolegija.lt> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* debug: new debug class for kerberosAndrew Bartlett2017-06-301-0/+1
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* param: change the effective default for "client max protocol" to the latest ↵Stefan Metzmacher2017-06-271-1/+1
| | | | | | | | | supported protocol Currently it's SMB3_11. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: Sort input file listBernhard M. Wiedemann via samba-technical2017-06-271-1/+1
| | | | | | | | | | | | | | | because filesystems return entries in undeterministic order and that ends up in index.xml and influences index.html preventing reproducible builds of samba packages (e.g. for openSUSE) See https://reproducible-builds.org/ for why this matters Signed-off-by: Bernhard M. Wiedemann <bwiedemann@suse.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Tue Jun 27 16:56:06 CEST 2017 on sn-devel-144
* docs-xml: change the default for "map untrusted to domain" to "auto"Stefan Metzmacher2017-06-161-4/+11
| | | | | | | | | | | | | | This makes the behaviour much more robust, particularly with forest child domains over one-way forest trusts. Sadly we don't support this kind of setup with our current ADDC, so there's no way to have automated tests for this behaviour, but at least we know it doesn't break any existing tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: document "map untrusted to domain = auto"Stefan Metzmacher2017-06-161-1/+22
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: improve documentation of "map untrusted to domain"Stefan Metzmacher2017-06-161-15/+10
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smbd: Claim version in g_lockVolker Lendecke2017-06-151-0/+16
| | | | | | | | | | | | | | | Protect smbd against version incompatibilities in a cluster. At first startup smbd locks "samba_version_string" and writes its version string. It then downgrades the lock to a read lock. Subsequent smbds check against the version string and also keep the read lock around. If the version does not match, we try to write our own version. But as there's a read lock, the lock upgrade to write lock will fail due the read lock being around. So as long as there's one smbd with this read lock, no other version of smbd will be able to start. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml/smbdotconf: deprecated "profile acls"Stefan Metzmacher2017-06-131-0/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This doesn't work anymore with modern clients, and there're better ways to support profiles on a share. Typically something like this seems to work: [winprofiles] comment = Users profiles New path = /data/winprofiles/ browseable = No read only = No csc policy = disable store dos attributes = yes vfs objects = acl_xattr With chmod 1777 on /data/winprofiles/ In order to work around some locking problems, see https://bugzilla.samba.org/show_bug.cgi?id=12833 It's also useful to something like this in the global section in order to detect disconnects reliable: socket options = TCP_KEEPCNT=5 TCP_KEEPIDLE=30 TCP_KEEPINTVL=1 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* Revert "param: Add 'mit kdc config' option to smb.conf"Andreas Schneider2017-05-261-14/+0
| | | | | | | This reverts commit eaaf5ce66e32d05b0a649619986d67ab6176a27a. Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri May 26 15:28:40 CEST 2017 on sn-devel-144
* docs: configuration options for extra password hashesGary Lockyer2017-05-251-0/+67
| | | | | | | | | Add the configuration options for the generation and storage of crypt() based sha256 and sha512 password hashes in supplementalCredentials Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs: Remove old docs.Karolin Seeger2017-05-11310-160278/+0
| | | | | | | | | | | This does not yet remove the Makefile rules for the removed xml, someone with better make-fu should step in here. Signed-off-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Thu May 11 19:37:37 CEST 2017 on sn-devel-144
* docs: Rename Samba3-Developers-Guide to Samba-Developers-GuideKarolin Seeger2017-05-1019-283/+282
| | | | | | | | | | This guide is not obsolete but needs an update. Signed-off-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed May 10 19:57:36 CEST 2017 on sn-devel-144
* docs-xml: Document net tdb commandChristof Schmitt2017-05-081-0/+22
| | | | | Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* param: Add 'mit kdc config' option to smb.confAndreas Schneider2017-04-291-0/+14
| | | | | | | | This points to the kdc config file created by Samba by default. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* param: Add 'mit kdc command' to change the default.Andreas Schneider2017-04-293-0/+26
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* lib: modules: Change XXX_init interface from XXX_init(void) to ↵Jeremy Allison2017-04-221-2/+12
| | | | | | | | | | | | | | | | | | | | XXX_init(TALLOC_CTX *) Not currently used - no logic changes inside. This will make it possible to pass down a long-lived talloc context from the loading function for modules to use instead of having them internally all use talloc_autofree_context() which is a hidden global. Updated all known module interface numbers, and added a WHATSNEW. Signed-off-by: Jeremy Allison <jra@samba.org> Signed-off-by: Ralph Böhme <slow@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Apr 22 01:17:00 CEST 2017 on sn-devel-144
* docs: Update idmap_rid manpageAndreas Schneider2017-04-181-8/+4
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* param: Check for valid values of 'name resolve order' optionNoel Power2017-04-131-0/+1
| | | | | | | | | | | This variable is populated by a list of values where each value should be a known option. This patch ensures that illegal values are detected. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12739 Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
* docs: fixup smbclient rename -f optionUri Simchoni2017-04-081-3/+3
| | | | | | | | | | | | Fixup documentation of new -f option of the smbclient rename command. This command is supported by SMB1 and SMB2. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Apr 8 02:38:16 CEST 2017 on sn-devel-144
* auth: Add hooks for notification of authentication events over the message busAndrew Bartlett2017-03-291-0/+26
| | | | | | | | This will allow tests to be written to confirm the correct events are triggered. We pass in a messaging context from the callers Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* auth_log: Add JSON logging of Authorisation and AuthenticationsGary Lockyer2017-03-291-0/+23
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Pair-Programmed: Andrew Bartlett <abartlet@samba.org>
* manpages: update smbclient manpage with rename -f optionUri Simchoni2017-03-281-2/+5
| | | | | | | Document the -f option of the rename command. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* vfs_fruit: document added zero_file_id parameterUri Simchoni2017-03-261-0/+17
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12715 Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* s3: smbd: Change "strict sync" paramter from "no" to "yes" for 4.7.0.Jeremy Allison2017-03-251-18/+30
| | | | | | | | Document change and modify in loadparm.c. Safer default for new installs and vendors. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Christof Schmitt <cs@samba.org>
* idmap_rfc2307: Clarify the documentation a bitVolker Lendecke2017-03-221-2/+2
| | | | | | | | | | "bind_path" is a variable name internally used inside Samba. If you look at "man ldapsearch" from OpenLDAP for example, the more common term for this parameter is "search base". Adapt the documentation accordingly. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>
* docs: Deprecate "auth methods"Volker Lendecke2017-03-161-0/+1
| | | | | | | Keeping this parameter prevents fixing bug 2976 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Deprecate "map untrusted to domain"Volker Lendecke2017-03-161-0/+1
| | | | | | | | | | | | | The implementation of this parameter depends on Samba to enumerate trusted domains. In an active directory environment, we don't know of a good way to enumerate all domains that we have to accept as trusted, in particular with multiple forests, one-way and external trusts. We hope to replace this parameter in the future with something that matches Windows behaviour better, after the deprecation phase of this parameter is over and we can remove it. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* typo: uppon -> uponGarming Sam2017-03-131-1/+1
| | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* Correct "ommited" typos.Chris Lamb2017-03-131-1/+1
| | | | | | | Signed-off-by: Chris Lamb <chris@chris-lamb.co.uk> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* doc: update "ea support" section of the smb.conf manpageUri Simchoni2017-03-121-6/+21
| | | | | | | | | | This section was badly outdated. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Sun Mar 12 21:04:11 CET 2017 on sn-devel-144
* manpages/vfs_fruit: document global optionsRalph Boehme2017-03-081-56/+99
| | | | | | | | | Some options MUST be set in the global section, better document that. Bug: https://bugzilla.samba.org/show_bug.cgi?id=12615 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Improve the idmap_hash manpageAndreas Schneider2017-03-031-3/+21
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12582 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* vfs_fruit: drop "ea support" from the manpageUri Simchoni2017-03-021-3/+0
| | | | | | | | Now that ea support is not required, drop that comment from the man page. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* vfs_fruit: only veto AppleDouble files with fruit:resource=fileRalph Boehme2017-03-021-4/+8
| | | | | | | | | | | | vfs_fruit only creates AppleDouble files itself when "fruit:resource" is set to "file" (the default). It is only then the these AppleDouble files should be treated as an internal representation and should be inaccessible from clients. Bug: https://bugzilla.samba.org/show_bug.cgi?id=12526> Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>
* docs/vfs_fruit: document known limitations with fruit:encoding=nativeRalph Boehme2017-03-021-2/+6
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12427 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org>
View Lorry Controller Status