smb.conf/manpage/2006/parameters/D

deadtime

 * deadtime (G):The value of the parameter (a decimal integer) represents the number of minutes of inactivity before a connection is  considered  dead and is disconnected. The deadtime only takes effect if the number of open files is zero.
 * This is useful to stop a server's resources being exhausted by a large number of inactive connections.
 * Most clients have an auto-reconnect feature when a connection is broken so in most cases this parameter should be transparent to users.
 * Using this parameter with a timeout of a few minutes is recommended for most systems.
 * A deadtime of zero indicates that no auto-disconnection should be performed.
 * Default: deadtime = 0
 * Example: deadtime = 15
 * debug hires timestamp (G):Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this boolean parameter adds microsecond resolution to the timestamp message header when turned on.
 * Note that the parameter debug timestamp must be on for this to have an effect.
 * Default: debug hires timestamp = no

debug pid

 * debug pid (G):When using  only one log file for more then one forked smbd(8)-process there may be hard to follow which process outputs which message.
 * This boolean parameter is adds the process-id to the timestamp message headers in the logfile when turned on.
 * Note that the parameter debug timestamp must be on for this to have an effect.
 * Default: debug pid = no

debug timestamp

 * timestamp logs:This parameter is a synonym for debug timestamp.
 * debug timestamp (G):Samba debug log messages are timestamped by default. If you are running at a high debug level these timestamps can be distracting. This boolean parameter allows timestamping to be turned off.
 * Default: debug timestamp = yes
 * debug uid (G):Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the current euid, egid, uid and gid to the timestamp message headers in  the  log  file  if turned on.
 * Note that the parameter  debug timestamp must be on for this to have an effect.
 * Default: debug uid = no
 * default case (S):See the section on NAME MANGLING. Also note the short preserve case parameter.
 * Default: default case = lower

default devmode

 * default devmode (S):This parameter  is  only applicable to printable services. When smbd is serving Printer Drivers  to  Windows  NT/2k/XP  clients, each printer on the Samba server has a Device Mode which defines things such as paper size and orientation and  duplex  settings. The  device  mode can only correctly be generated by the printer driver itself (which can only be executed on a Win32  platform). Because  smbd  is  unable to execute the driver code to generate the device mode, the default behavior is to set  this  field  to NULL.
 * Most problems  with serving printer drivers to Windows NT/2k/XP clients can be traced to a problem  with  the  generated  device mode.  Certain  drivers  will  do  things  such  as crashing the client's  Explorer.exe  with  a  NULL  devmode.  However,  other printer   drivers   can   cause  the  client's  spooler  service (spoolsv.exe) to die if the  devmode  was  not  created  by  the driver itself (i.e. smbd generates a default devmode).
 * This parameter  should  be  used  with care and tested with the printer driver in question. It is better  to  leave  the  device mode  to NULL and let the Windows client set the correct values. Because drivers do not do this all  the  time,  setting  default devmode = yes will instruct smbd to generate a default one.
 * For more information on Windows NT/2k printing and Device Modes, see the MSDN documentation.
 * Default: default devmode = no

default service

 * default:This parameter is a synonym for default service.
 * default service (G):This parameter specifies the name of a service  which  will  be connected  to if the service actually requested cannot be found. Note that the square brackets are NOT  given  in  the  parameter value (see example below).
 * There is no default value for this parameter. If this parameter is not given, attempting to connect  to  a  nonexistent  service results in an error.
 * Typically the default service would be a guest ok, read-only service.
 * Also note that the apparent service name  will  be  changed  to equal  that  of the requested service, this is very useful as it allows you to use macros like %S to make a wildcard service.
 * Note also that any "_" characters in the name  of  the  service used  in  the  default  service  will  get mapped to a "/". This allows for interesting things.
 * Default: default service =
 * Example: default service = pub

defer sharing violations

 * defer sharing violations (G):Windows allows specifying how a file will be shared with  other processes  when  it  is  opened. Sharing violations occur when a file is opened by a different process using options that violate the  share settings specified by other processes. This parameter causes smbd to act as a Windows server does, and defer returning a "sharing violation" error message for up to one second, allowing the client to close the file causing the  violation  in  the meantime.
 * Unix by default does not have this behaviour.
 * There should  be no reason to turn off this parameter, as it is designed to enable Samba to more correctly emulate Windows.
 * Default: defer sharing violations = True

delete group script

 * delete group script (G):This is the full pathname to a script that will be run AS ROOT smbd(8)  when a group is requested to be deleted. It will expand any %g to the group name passed. This script is only useful for installations  using the Windows NT domain administration tools.
 * Default: delete group script =

deleteprinter

 * deleteprinter command (G):With the introduction of MS-RPC based printer support for  Windows  NT/2000 clients in Samba 2.2, it is now possible to delete printer at run time by issuing the DeletePrinter RPC call.
 * For a Samba host this means that the printer must be physically deleted from underlying printing system. The deleteprinter command defines a script to be run which will perform the necessary operations  for  removing  the printer from the print system and from smb.conf.
 * The deleteprinter command is automatically called with only one parameter: "printer name".
 * Once the deleteprinter command has been executed, smbd will reparse the smb.conf to associated printer no longer exists. If the sharename  is  still  valid,  then smbd will return an ACCESS_DENIED error to the client.
 * Default: deleteprinter command =
 * Example: deleteprinter command = /usr/bin/removeprinter
 * delete readonly (S):This parameter allows readonly files to be deleted. This is not normal DOS semantics, but is allowed by UNIX.
 * This option may be useful for running applications such as rcs, where UNIX file ownership prevents  changing  file  permissions, and DOS semantics prevent deletion of a read only file.
 * Default: delete readonly = no

delete share command
delete share command (G) Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server Manager. The_�d_�e_�l_�e_�t_�e _�s_�h_�a_�r_�e _�c_�o_�m_�m_�a_�n_�d is  used  to define an external program or script which will remove an existing service definition  from  _�s_�m_�b_�._�c_�o_�n_�f. In             order  to  successfully  execute  the _�d_�e_�l_�e_�t_�e _�s_�h_�a_�r_�e _�c_�o_�m_�m_�a_�n_�d, s�sm�mb�bd�d requires that the  administrator  be  connected  using  a  root account (i.e. uid == 0).

When executed,  s�sm�mb�bd�d  will automatically invoke the_�d_�e_�l_�e_�t_�e _�s_�h_�a_�r_�e _�c_�o_�m_�m_�a_�n_�d with two parameters.

· _�c_�o_�n_�f_�i_�g_�F_�i_�l_�e - the location of the global _�s_�m_�b_�._�c_�o_�n_�f file.

· _�s_�h_�a_�r_�e_�N_�a_�m_�e - the name of the existing service.

This parameter is only used to remove file shares. To delete  printer shares, see the _�d_�e_�l_�e_�t_�e_�p_�r_�i_�n_�t_�e_�r _�c_�o_�m_�m_�a_�n_�d.

Default: _�d_�e_�l_�e_�t_�e _�s_�h_�a_�r_�e _�c_�o_�m_�m_�a_�n_�d =

Example: _�d_�e_�l_�e_�t_�e _�s_�h_�a_�r_�e _�c_�o_�m_�m_�a_�n_�d = /usr/local/bin/delshare

delete user from group script
delete user from group script (G) Full path  to  the  script  that  will be called when a user is              removed from a group using the Windows NT domain  administration tools. It will  be  run  by  s�sm�mb�bd�d(8)   A�AS�S R�RO�OO�OT�T. Any _�%_�g will be             replaced with the group name and any _�%_�u will  be  replaced  with the user name.

Default: _�d_�e_�l_�e_�t_�e _�u_�s_�e_�r _�f_�r_�o_�m _�g_�r_�o_�u_�p _�s_�c_�r_�i_�p_�t =

Example: _�d_�e_�l_�e_�t_�e _�u_�s_�e_�r _�f_�r_�o_�m _�g_�r_�o_�u_�p _�s_�c_�r_�i_�p_�t = /usr/sbin/deluser %u %g

delete user script
delete user script (G) This is the full pathname to a  script  that  will  be  run  by              s�sm�mb�bd�d(8) when managing users with remote RPC (NT) tools.

This script  is called when a remote client removes a user from the server, normally using 'User Manager  for  Domains'  orr�rp�pc�c-�- c�cl�li�ie�en�nt�t.

This script should delete the given UNIX username.

Default: _�d_�e_�l_�e_�t_�e _�u_�s_�e_�r _�s_�c_�r_�i_�p_�t =

Example: _�d_�e_�l_�e_�t_�e _�u_�s_�e_�r _�s_�c_�r_�i_�p_�t = /usr/local/samba/bin/del_user %u

delete veto files
delete veto files (S) This option is used when Samba is attempting to delete a direc- tory that contains one or more vetoed directories (see the _�v_�e_�t_�o              _�f_�i_�l_�e_�s option). If this option is set to n�no�o (the default) then if             a vetoed directory contains any non-vetoed files or  directories then the  directory  delete will fail. This is usually what you want.

If this option is set to y�ye�es�s, then Samba will attempt to recur- sively delete any files and directories within the vetoed direc- tory. This can be useful for integration with file serving sys- tems such as NetAtalk which create meta-files within directories you might normally veto DOS/Windows  users  from  seeing  (e.g.              _�._�A_�p_�p_�l_�e_�D_�o_�u_�b_�l_�e)

Setting d�de�el�le�et�te�e  v�ve�et�to�o f�fi�il�le�es�s =�= y�ye�es�s allows these directories to be              transparently deleted when the parent directory is  deleted  (so              long as the user has permissions to do so).

Default: _�d_�e_�l_�e_�t_�e _�v_�e_�t_�o _�f_�i_�l_�e_�s = no

dfree command
dfree command (G) The _�d_�f_�r_�e_�e _�c_�o_�m_�m_�a_�n_�d setting should only be used on systems where a             problem occurs with the internal disk space  calculations. This has been  known to happen with Ultrix, but may occur with other operating systems. The symptom that was seen was  an  error  of              "Abort Retry Ignore" at the end of each directory listing.

This setting allows the replacement of the internal routines to              calculate the total disk space  and  amount  available  with  an              external routine. The example below gives a possible script that might fulfill this function.

The external program will be passed a single parameter indicat- ing a directory in the filesystem being queried. This will typi- cally consist of the string _�._�/. The script  should  return  two integers in  ASCII. The first should be the total disk space in             blocks, and the second should be the number of available blocks. An optional third return value can give the block size in bytes. The default blocksize is 1024 bytes.

Note: Your script should N�NO�OT�T be setuid or setgid and should  be              owned by (and writeable only by) root!

Where the script dfree (which must be made executable) could be:

#!/bin/sh df $1 | tail -1 | awk '{print $2" "$4}'

or perhaps (on Sys V based systems):

#!/bin/sh /usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}'

Note that you may have to replace the command names  with  full path names on some systems.

Default: _�d_�f_�r_�e_�e  _�c_�o_�m_�m_�a_�n_�d  =  #  By default internal routines for determining the disk capacity and remaining space will be used.

Example: _�d_�f_�r_�e_�e _�c_�o_�m_�m_�a_�n_�d = /usr/local/samba/bin/dfree

directory mask
directory mode This parameter is a synonym for directory mask.

directory mask (S) This parameter is the octal modes which are used when converting DOS modes to UNIX modes when creating UNIX directories.

When a directory is  created,  the  necessary  permissions  are calculated according to the mapping from DOS modes to UNIX per- missions, and the resulting UNIX mode is then bit-wise  'AND'ed              with  this  parameter. This parameter  may  be thought of as a              bit-wise MASK for the UNIX modes of a directory. Any bit n�no�ot�t set here will  be removed from the modes set on a directory when it              is created.

The default value of this parameter  removes  the  'group'  and 'other' write  bits  from the UNIX mode, allowing only the user who owns the directory to modify it.

Following this Samba will bit-wise 'OR' the UNIX  mode  created from this  parameter with the value of the _�f_�o_�r_�c_�e _�d_�i_�r_�e_�c_�t_�o_�r_�y _�m_�o_�d_�e parameter. This parameter is set to 000  by  default  (i.e.  no              extra mode bits are added).

Note that  this  parameter does not apply to permissions set by              Windows NT/2000 ACL editors. If the  administrator  wishes  to              enforce  a  mask  on access control lists also, they need to set the _�d_�i_�r_�e_�c_�t_�o_�r_�y _�s_�e_�c_�u_�r_�i_�t_�y _�m_�a_�s_�k.

Default: _�d_�i_�r_�e_�c_�t_�o_�r_�y _�m_�a_�s_�k = 0755

Example: _�d_�i_�r_�e_�c_�t_�o_�r_�y _�m_�a_�s_�k = 0775

directory security mask
directory security mask (S) This parameter controls what UNIX permission bits can be  modi- fied when  a Windows NT client is manipulating the UNIX permis- sion on a directory using the native NT security dialog box.

This parameter is applied as a mask (AND'ed with) to the changed permission bits, thus preventing any bits not in this mask from being modified. Essentially, zero bits  in  this  mask  may  be              treated as a set of bits the user is not allowed to change.

If not  set  explicitly this parameter is set to 0777 meaning a              user is allowed to modify all the  user/group/world  permissions on a directory.

N�No�ot�te�e that  users  who can access the Samba server through other means can easily bypass this restriction, so  it  is  primarily useful for  standalone  "appliance"  systems. Administrators of             most normal systems will  probably  want  to  leave  it  as  the default of 0�07�77�77�7.

Default: _�d_�i_�r_�e_�c_�t_�o_�r_�y _�s_�e_�c_�u_�r_�i_�t_�y _�m_�a_�s_�k = 0777

Example: _�d_�i_�r_�e_�c_�t_�o_�r_�y _�s_�e_�c_�u_�r_�i_�t_�y _�m_�a_�s_�k = 0700

disable netbios
disable netbios (G) Enabling this  parameter will disable netbios support in Samba. Netbios is the only available form of browsing in  all  windows versions except for 2000 and XP.

N�No�ot�te�e

Clients that  only  support  netbios  won't be able to see your samba server when netbios support is disabled.

Default: _�d_�i_�s_�a_�b_�l_�e _�n_�e_�t_�b_�i_�o_�s = no

disable spoolss
disable spoolss (G) Enabling this parameter will disable Samba's  support  for  the SPOOLSS set  of  MS-RPC's  and will yield identical behavior as              Samba 2.0.x. Windows NT/2000 clients  will  downgrade  to  using Lanman style printing commands. Windows 9x/ME will be uneffected by the parameter. However, this will also disable the ability to             upload  printer drivers to a Samba server via the Windows NT Add Printer Wizard or by using the NT printer properties dialog win- dow. It will  also  disable  the capability of Windows NT/2000 clients to download print drivers  from  the  Samba  host  upon demand. B�Be�e v�ve�er�ry�y c�ca�ar�re�ef�fu�ul�l a�ab�bo�ou�ut�t e�en�na�ab�bl�li�in�ng�g t�th�hi�is�s p�pa�ar�ra�am�me�et�te�er�r.�.

Default: _�d_�i_�s_�a_�b_�l_�e _�s_�p_�o_�o_�l_�s_�s = no

display charset
display charset (G) Specifies the  charset that samba will use to print messages to              stdout and stderr and SWAT will use. Should generally  be  the same as the u�un�ni�ix�x c�ch�ha�ar�rs�se�et�t.

Default: _�d_�i_�s_�p_�l_�a_�y _�c_�h_�a_�r_�s_�e_�t = ASCII

Example: _�d_�i_�s_�p_�l_�a_�y _�c_�h_�a_�r_�s_�e_�t = UTF8

dns proxy
dns proxy (G) Specifies that n�nm�mb�bd�d(8) when acting as a WINS server and finding that a NetBIOS name has not been registered, should  treat  the NetBIOS name  word-for-word  as a DNS name and do a lookup with the DNS server for that name on  behalf  of  the  name-querying client.

Note that  the  maximum length for a NetBIOS name is 15 charac- ters, so the DNS name (or DNS alias) can likewise  only  be  15 characters, maximum.

n�nm�mb�bd�d spawns  a  second copy of itself to do the DNS name lookup requests, as doing a name lookup is a blocking action.

Default: _�d_�n_�s _�p_�r_�o_�x_�y = yes

domain logons
domain logons (G) If set to y�ye�es�s, the Samba server will serve Windows 95/98 Domain logons for  the _�w_�o_�r_�k_�g_�r_�o_�u_�p it is in. Samba 2.2 has limited capa- bility to act as a domain controller for Windows NT 4  Domains. For more details on setting up this feature see the PDC chapter of the Samba HOWTO Collection.

Default: _�d_�o_�m_�a_�i_�n _�l_�o_�g_�o_�n_�s = no

domain master
domain master (G) Tell s�sm�mb�bd�d(8) to enable WAN-wide browse list collation. Setting this option causes n�nm�mb�bd�d to claim a special domain specific Net- BIOS name that identifies it as a domain master browser for its given _�w_�o_�r_�k_�g_�r_�o_�u_�p. Local master browsers in the same _�w_�o_�r_�k_�g_�r_�o_�u_�p on             broadcast-isolated subnets  will  give  this  n�nm�mb�bd�d  their  local browse lists,  and  then ask s�sm�mb�bd�d(8) for a complete copy of the browse list for the whole wide area  network. Browser clients will then  contact their local master browser, and will receive the domain-wide browse list, instead of just the list for their broadcast-isolated subnet.

Note that  Windows  NT  Primary Domain Controllers expect to be              able to claim this _�w_�o_�r_�k_�g_�r_�o_�u_�p specific special NetBIOS name  that identifies them as domain master browsers for that _�w_�o_�r_�k_�g_�r_�o_�u_�p by              default (i.e. there is no way to prevent a Windows NT  PDC  from              attempting to do this). This means that if this parameter is set and n�nm�mb�bd�d claims the special name for a _�w_�o_�r_�k_�g_�r_�o_�u_�p before a  Win- dows NT  PDC  is  able to do so then cross subnet browsing will behave strangely and may fail.

If d�do�om�ma�ai�in�n l�lo�og�go�on�ns�s =�= y�ye�es�s, then the default behavior is to  enable the _�d_�o_�m_�a_�i_�n  _�m_�a_�s_�t_�e_�r  parameter. If _�d_�o_�m_�a_�i_�n _�l_�o_�g_�o_�n_�s is not enabled (the default setting),  then  neither  will  _�d_�o_�m_�a_�i_�n  _�m_�a_�s_�t_�e_�r  be              enabled by default.

Default: _�d_�o_�m_�a_�i_�n _�m_�a_�s_�t_�e_�r = auto

dont descend
dont descend (S) There are  certain directories on some systems (e.g., the _�/_�p_�r_�o_�c              tree under Linux) that are either not of interest to clients  or              are  infinitely  deep  (recursive). This parameter allows you to             specify a comma-delimited list of directories  that  the  server should always show as empty.

Note that Samba can be very fussy about the exact format of the "dont descend" entries. For example you may need _�._�/_�p_�r_�o_�c instead of just _�/_�p_�r_�o_�c. Experimentation is the best policy :-)

Default: _�d_�o_�n_�t _�d_�e_�s_�c_�e_�n_�d =

Example: _�d_�o_�n_�t _�d_�e_�s_�c_�e_�n_�d = /proc,/dev

dos charset
dos charset (G) DOS SMB  clients assume the server has the same charset as they do. This option specifies which charset Samba should talk to DOS clients.

The default depends on which charsets you have installed. Samba tries to use charset 850 but falls back to ASCII in case it  is              not available. Run t�te�es�st�tp�pa�ar�rm�m(1) to check the default on your sys- tem.

N�No�o d�de�ef�fa�au�ul�lt�t

dos filemode
dos filemode (S) The default behavior in Samba is to provide UNIX-like  behavior where only  the owner of a file/directory is able to change the permissions on it. However, this behavior is often confusing to              DOS/Windows users. Enabling this parameter allows a user who has write access to the file (by whatever means) to modify the per- missions on  it. Note that a user belonging to the group owning the file will not be allowed to change permissions if the group is only granted read access. Ownership of the file/directory is             not changed, only the permissions are modified.

Default: _�d_�o_�s _�f_�i_�l_�e_�m_�o_�d_�e = no

dos filetime resolution
dos filetime resolution (S) Under the DOS and Windows FAT filesystem, the finest granularity on time resolution is two seconds. Setting this parameter for a             share causes Samba to round the reported time down to the  near- est two second boundary when a query call that requires one sec- ond resolution is made to s�sm�mb�bd�d(8).

This option is mainly used as a compatibility option for Visual C++ when used against Samba shares. If oplocks are enabled on a             share, Visual C++ uses two different time reading calls to check if a file has changed since it was last read. One of these calls uses a one-second granularity, the other uses a two second gran- ularity. As the two second call rounds any odd second down, then if the file has a timestamp of an odd number of seconds then the two timestamps will not match and Visual C++ will keep reporting the file has changed. Setting this option causes the two times- tamps to match, and Visual C++ is happy.

Default: _�d_�o_�s _�f_�i_�l_�e_�t_�i_�m_�e _�r_�e_�s_�o_�l_�u_�t_�i_�o_�n = no

dos filetimes
dos filetimes (S) Under DOS  and  Windows, if a user can write to a file they can change the timestamp on it. Under POSIX  semantics,  only  the owner of the file or root may change the timestamp. By default, Samba runs with POSIX semantics and refuses to change the times- tamp on  a  file if the user s�sm�mb�bd�d is acting on behalf of is not the file owner. Setting this option to y�ye�es�s allows DOS semantics and s�sm�mb�bd�d(8) will change the file timestamp as DOS requires.

Default: _�d_�o_�s _�f_�i_�l_�e_�t_�i_�m_�e_�s = no