summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* source4 smbd prefork: Add backoff to process restartGary Lockyer2018-11-232-0/+38
| | | | | | | | | Add new smbd.conf variables 'prefork backoff increment' and 'prefork maximum backoff' to control the rate at which failed pre-forked processes are restarted. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smbd: Add "hide new files" optionVolker Lendecke2018-11-091-0/+15
| | | | | | | See the manpage for the description Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* source4 smbd prefork: Increase default worklers to 4Gary Lockyer2018-11-071-4/+4
| | | | | | | | Increase the default number of worker processes started by the pre-fork process model from 1 to 4. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs:vfs_fruit: add "delete_empty_adfiles" optionRalph Boehme2018-10-311-0/+11
| | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=13642 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs:vfs_fruit: add "wipe_intentionally_left_blank_rfork" optionRalph Boehme2018-10-311-0/+14
| | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=13642 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* netcmd: Add 'samba-tool group stats' commandTim Beale2018-10-311-0/+5
| | | | | | | | | | | | | | | With large domains it's hard to get an idea of how many groups there are, and how many users are in each group, on average. However, this could have a big impact on whether a problem can be reproduced or not. This patch dumps out some summary information so that you can get a quick idea of how big the groups are. Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org> Autobuild-Date(master): Wed Oct 31 03:40:41 CET 2018 on sn-devel-144
* nsswitch: Add try_authtok option to pam_winbindMathieu Parent2018-10-021-0/+8
| | | | | | | | | | | | Same as the use_authtok option, except that if the new password is not valid, PAM will prompt for a password. Bug-Debian: https://bugs.debian.org/858923 Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/570944 Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org>
* turn --with-json-audit into global --with-jsonPhilipp Gesang2018-09-261-1/+1
| | | | | | | | | | Fold the build option --with-json-audit into the toplevel wscript to reflect the fact that JSON support is no longer local to the audit subsystem. Signed-off-by: Philipp Gesang <philipp.gesang@intra2net.com> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs: Only build vfs manpages if the module is enabledAndreas Schneider2018-09-261-46/+49
| | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Sep 26 20:10:07 CEST 2018 on sn-devel-144
* docs: Add gpfs:check_fstype to vfs_gpfs manpageChristof Schmitt2018-09-191-0/+22
| | | | | | | | Signed-off-by; Christof Schmit <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Christof Schmitt <cs@samba.org> Autobuild-Date(master): Wed Sep 19 03:56:47 CEST 2018 on sn-devel-144
* s3-spoolss: Make spoolss client os_major,os_minor and os_build configurable.Günther Deschner2018-09-081-0/+39
| | | | | | | | | | | Similar to spoolss server options, make the client advertised OS version values configurable to allow overriding the defaults provided to the print server. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13597 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs-xml/wscript_build: update to handle waf 2.0.4Alexander Bokovoy2018-09-051-1/+1
| | | | | Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs smb.conf: Clarify that wreplsrv:periodic_interval is in secondsAndrew Bartlett2018-08-171-1/+1
| | | | | | | | | | As requested by oota on samba-technical Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Aug 17 05:53:54 CEST 2018 on sn-devel-144
* Shorten description in vfs_linux_xfs_sgid manualJustin Stephenson2018-08-091-1/+1
| | | | | | | | | | | | | | | this fixes a lexgrog parse error, the NAME subheader description of the vfs_linux_xfs_sgid(8) manual was too long, this will shorten the description and allow it to be correctly detected by mandb. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13562 Signed-off-by: Justin Stephenson <jstephen@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Aug 9 04:06:17 CEST 2018 on sn-devel-144
* netcmd: domain backup offline commandAaron Haslett2018-08-061-0/+5
| | | | | | | | | | | | | Unlike the existing 'domain backup online' command, this command allows an admin to back up a local samba installation using the filesystem and the tdbbackup tool instead of using remote protocols. It replaces samba_backup as that tool does not handle sam.ldb and secrets.ldb correctly. Those two databases need to have transactions started on them before their downstream ldb and tdb files are backed up. Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* Add net lookup optionsJustin Stephenson2018-08-061-0/+24
| | | | | | | | Add missing net lookup options to net man page Signed-off-by: Justin Stephenson <jstephen@redhat.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jim McDonough <jmcd@samba.org>
* s3:libads: Add net ads leave keep-account optionJustin Stephenson2018-07-301-1/+8
| | | | | | | | | | | Add the ability to leave the domain with --keep-account argument to avoid removal of the host machine account. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13498 Signed-off-by: Justin Stephenson <jstephen@redhat.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs/kerneloplocks: drop Irix referencesDavid Disseldorp2018-07-251-8/+7
| | | | | | | | Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 25 06:28:21 CEST 2018 on sn-devel-144
* docs: mention that the echo handler is for SMB1 onlyBjörn Jacke2018-07-131-1/+2
| | | | | | | | Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Karolin Seeger <kseeger@samba.org> Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Fri Jul 13 11:44:02 CEST 2018 on sn-devel-144
* docs: Remove mention of --without-json-audit from the AD DCAndrew Bartlett2018-07-124-15/+6
| | | | | | | This is no longer optional for the AD DC. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* docs: Explain that "max xmit" is SMB1 onlyAndrew Bartlett2018-07-121-1/+3
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* smb.conf: add dns_zone_scavengingGary Lockyer2018-07-121-0/+23
| | | | | | | | | Add parameter dns_zone_scavenging to control dns zone scavenging. Scavenging is disabled by default, as due to https://bugzilla.samba.org/show_bug.cgi?id=12451 the ageing properties of existing DNS entries are incorrect. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
* doc: samba-tool drs showrepl --json and --summaryDouglas Bagnall2018-07-111-1/+5
| | | | | Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* doc: samba-tool visualize uptodatenessDouglas Bagnall2018-07-111-12/+29
| | | | | | | and --xdot option. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* Revert "s3/service: convert lp_force_group() to const"David Disseldorp2018-07-101-1/+0
| | | | | | | | | | | | This reverts commit c53646bccd87ef3b3133d3f7526ef85591909528. As mentioned by Andrew, we shouldn't break environments where "force group" has been configured to use substituted variables. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 00:12:19 CEST 2018 on sn-devel-144
* Revert "s3/service: convert lp_force_user() to const"David Disseldorp2018-07-091-1/+0
| | | | | | | | | This reverts commit c58194e3d296f4e14e7689bdf192c561635ae161. As mentioned by Andrew, we shouldn't break environments where "force user" has been configured to use substituted variables. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs/vfs_ceph: add CTDB_SAMBA_SKIP_SHARE_CHECK=yes caveatDavid Disseldorp2018-07-061-0/+11
| | | | | | | | | | | Mostly copied from the vfs_gluster manpage: the CephFS share path is not locally mounted, which breaks the ctdb_check_directories_probe() check. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jul 6 23:19:02 CEST 2018 on sn-devel-144
* vfs_ceph: don't lie about flock supportDavid Disseldorp2018-07-061-0/+8
| | | | | | | | | | Instead, match vfs_gluster behaviour and require that users explicitly disable "kernel share modes". Bug: https://bugzilla.samba.org/show_bug.cgi?id=13506 Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* s3/service: convert lp_force_user() to constDavid Disseldorp2018-07-061-0/+1
| | | | | | | Avoid set_conn_force_user_group() talloc stackframe leaks in doing so. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* s3/service: convert lp_force_group() to constDavid Disseldorp2018-07-061-0/+1
| | | | | | | | set_conn_force_user_group() and change_to_user_internal() leak onto the callers' talloc stackframe. Drop the unnecessary heap allocations. Signed-off-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* Document that vfs_full_audit defaults are "none" for the successful and ↵Timur I. Bakeyev2018-07-051-2/+2
| | | | | | | | failed operations. Signed-off-by: Timur I. Bakeyev <timur@iXsystems.com> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* netcmd: Add 'samba-tool domain backup rename' commandTim Beale2018-07-051-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a new command that takes a clone of the domain's DB, and renames the domain as well. (We rename the domain during the clone because it's easier to implement - the DRS code handles most of the renaming for us, as it applies the received replication chunks). The new option is similar to an online backup, except we also do the following: - use the new DCCloneAndRenameContext code to clone the DB - run dbcheck to fix up any residual old DNs (mostly objectCategory references) - rename the domain's netBIOSName - add dnsRoot objects for the new DNS realm - by default, remove the old realm's DNS objects (optional) - add an extra backupRename marker to the backed-up DB. In the restore code, if the backup was renamed, then we need to register the new domain's DNS zone at that point (we only know the new DC's host IP at the restore stage). Note that the backup will contain the old DC entries that still use the old dnsHostname, but these DC entries will all be removed during the restore, and a new DC will be added with the correct dnsHostname. Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* samba_gpoupdate: Rename the command to samba-gpupdateDavid Mulder2018-07-041-2/+2
| | | | | | | | | On a Windows client, this command is called 'gpupdate' Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* MAN: Adding entry for net ads lookupAmit Kumar2018-07-041-0/+6
| | | | | | | | | | | | | There is no man page description for net ads lookup. This PR adds entry for the same. Signed-off-by: Amit Kumar amitkuma@redhat.com Reviewed-by: Ralph Böhme <slow@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jul 4 07:38:04 CEST 2018 on sn-devel-144
* netcmd: domain backup restore commandAaron Haslett2018-07-031-0/+5
| | | | | | | | | | | Add a command option that restores a backup file. This is only intended for recovering from a catastrophic failure of the domain. The old domain DCs are removed from the DB and a new DC is added. Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* netcmd: domain backup online commandAaron Haslett2018-07-031-0/+10
| | | | | | | | | | | This adds a samba-tool command that can be run against a remote DC to produce a backup-file for the current domain. The backup stores similar info to what a new DC would get if it joined the network. Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
* docs: Add manpage for winbind_krb5_localauth.8Andreas Schneider2018-06-272-0/+90
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Jun 27 18:45:56 CEST 2018 on sn-devel-144
* docs: Move winbind_krb5_locator manpage to volume 8Andreas Schneider2018-06-272-4/+4
| | | | | | | | | The vfs and idmap manpages are in volume 8 too. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* python/samba/netcmd/schema.py: add schema show_oc for attributeWilliam Brown2018-05-291-0/+5
| | | | | | | | | | | | Often administrators need to add a specific attribute to an object, but it may not be possible with the objectClasses present. This tool allows searching "what objectclasses must or may?" take an attribute to help hint to an administrator what objectclasses can be added to objects to achieve the changes they want. Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* python/samba/netcmd/schema.py: add schema query and management.William Brown2018-05-291-0/+20
| | | | | | | | | | Schema management in active directory is complex and dangerous. Having a tool that safely wraps administrative tasks as well as allowing query of the schema will make this complex topic more accessible to administrators. Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* python/samba/netcmd/group.py: add group showWilliam Brown2018-05-291-0/+5
| | | | | | | | | | The samba-tool user command can show the ldif of a user. This is useful for groups also, especially to determine the objectSID and objectGUID. Add support for group show to samba-tool. Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* python/samba/netcmd/{forest.py,main.py}: add configuration controlsWilliam Brown2018-05-291-0/+20
| | | | | | | | | | | | | | | With samba-tool we should expose ways to easily administer and control common configuration options. This adds the base framework for modifying forest settings, generally stored in cn=configuration partition. An example is: samba-tool forest directory_service show samba-tool forest directory_service dsheuristics X Signed-off-by: William Brown <william@blackhats.net.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* s3: VFS: Remove SMB_VFS_FCHMOD_ACL().Jeremy Allison2018-05-253-4/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* s3: torture: Remove cmd_fchmod_acl().Jeremy Allison2018-05-251-1/+0
| | | | | | | No longer needed. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* s3: VFS: Remove SMB_VFS_CHMOD_ACL().Jeremy Allison2018-05-253-3/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* s3: torture: Remove cmd_chmod_acl().Jeremy Allison2018-05-251-1/+0
| | | | | | | No longer needed. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
* netcmd: Add samba-tool support for managing PSOsTim Beale2018-05-231-0/+45
| | | | | | | | | | | | | | | | | Add a new command 'samba-tool domain passwordsettings pso', with the sub-command options: create, delete, set, list, show, show-user, apply, unapply. The apply and unapply options apply the PSO to a user or group. The show-user option shows the actual PSO (and its settings) that will take effect for a given user. The new commands are pretty self-contained in a new pso.py file. We decided to add these new commands under the existing 'samba-tool domain passwordsettings' command, as that's what users would be already familiar with. Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* script: Add 'random-seed' option to traffic_replayTim Beale2018-05-161-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | When using a traffic-model file to generate traffic, there is some randomness in the actual packets that get generated. This means it's hard to use the tool to detect an increase/decrease in Samba performance - we don't know whether a decrease in packets sent is due to a regression in the Samba codebase, or just due to the tool sending different types of packets (i.e. ones that take longer to process). This patch adds an option to seed the python random number generator. This means that exactly the same traffic can be generated across multiple test runs. (Previously we were using the '--traffic-summary' option to avoid this problem - we can generate a summary-file based on the model, and then use the same summary file across multiple runs. However, this proved impractical when you want to run multiple combinations of scale/rate parameters, e.g. 21 x 8 different permutations just fills up disk space with summary-files.) Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: William Brown <william@blackhats.net.au> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed May 16 13:53:26 CEST 2018 on sn-devel-144
* smb.conf: Add dsdb group change notification parameterGary Lockyer2018-05-161-0/+27
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* smb conf: Add DSDB event notification parameterGary Lockyer2018-05-162-0/+54
| | | | | Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>