Smb.conf - Revision history

Woozle: moved contents to lowercase version; this is now a redirect

2006-09-24T12:09:45Z

moved contents to lowercase version; this is now a redirect

← Older revision		Revision as of 12:09, 24 September 2006
Line 1:		Line 1:
	~~[[Computing]]: [[Linux]]: [[Samba]]:~~ [[smb.conf]]		#redirect [[smb.conf]]
	~~==Articles==~~
	* [[smb.conf manpage]]: the official documentation
	* [[smb.conf examples]]: sample config files (well... file)

Woozle: moved manpage to separate article; added example link

2006-01-29T22:01:46Z

moved manpage to separate article; added example link

Show changes

Woozle: /* D */ done for now; unformatted bits are inside pre-blocks.

2006-01-22T19:51:14Z

D: done for now; unformatted bits are inside pre-blocks.

Show changes

Woozle: /* C */ partial D

2006-01-22T19:17:21Z

C: partial D

@@ Line 326: / Line 326: @@
 * If  enabled,  only an NTLMv2 and LMv2 response (both much more secure than earlier versions) will be sent. Many servers (including NT4 < SP4, [[Win9x]] and Samba 2.2) are not compatible with NTLMv2.
 *Similarly, if enabled, NTLMv1, client lanman auth and client  plaintext  auth  authentication  will  be  disabled.  This  also  disables share-level authentication.
- If disabled, an NTLM response (and possibly a LANMAN response) will be sent by the client, depending on the value of client lanman auth.
+* If disabled, an NTLM response (and possibly a LANMAN response) will be sent by the client, depending on the value of client lanman auth.
 * Note that some sites (particularly those following 'best practice' security polices) only allow NTLMv2 responses, and not the weaker  LM or NTLM.
 * '''Default''': client ntlmv2 auth = no
@@ Line 347: / Line 347: @@
 * This option takes the usual substitutions, which can be very useful.
 * If the config file doesn't exist then it won't be loaded (allowing you to special case the config files of just a few clients).

Woozle: /* NOTE ABOUT USERNAME/PASSWORD VALIDATION */ alphabetic sections

2006-01-22T17:42:21Z

NOTE ABOUT USERNAME/PASSWORD VALIDATION: alphabetic sections

Woozle: partial transcription

2006-01-22T17:38:41Z

partial transcription

Show changes

← Older revision		Revision as of 17:42, 22 January 2006
Line 200:		Line 200:
	# If the service is a guest service, a connection is made as the username given in the ``guest account ='' for the service, irrespective of the supplied password.		# If the service is a guest service, a connection is made as the username given in the ``guest account ='' for the service, irrespective of the supplied password.

	====EXPLANATION OF EACH PARAMETER====		===EXPLANATION OF EACH PARAMETER===
			====A====
	;abort shutdown script (G):This parameter only exists in the HEAD cvs branch This a full path name to a script called by smbd(8) that should stop a shutdown procedure issued by the shutdown script.		;abort shutdown script (G):This parameter only exists in the HEAD cvs branch This a full path name to a script called by smbd(8) that should stop a shutdown procedure issued by the shutdown script.
	* This command will be run as user.		* This command will be run as user.
Line 280:		Line 281:
	;available (S):This parameter lets you "turn off" a service. If available = no, then ALL attempts to connect to the service will fail. Such failures are logged.		;available (S):This parameter lets you "turn off" a service. If available = no, then ALL attempts to connect to the service will fail. Such failures are logged.
	* '''Default''': available = yes		* '''Default''': available = yes
			====B====
	;bind interfaces only (G):This global parameter allows the Samba admin to limit what interfaces on a machine will serve SMB requests. It affects file service smbd(8) and name service nmbd(8) in a slightly different ways.		;bind interfaces only (G):This global parameter allows the Samba admin to limit what interfaces on a machine will serve SMB requests. It affects file service smbd(8) and name service nmbd(8) in a slightly different ways.
	* For name service it causes nmbd to bind to ports 137 and 138 on the interfaces listed in the interfaces parameter. nmbd also binds to the "all addresses" interface (0.0.0.0) on ports 137 and 138 for the purposes of reading broadcast messages. If this option is not set then nmbd will service name requests on all of these sockets. If bind interfaces only is set then nmbd will check the source address of any packets coming in on the broadcast sockets and discard any that don't match the broadcast addresses of the interfaces in the interfaces parameter list. As unicast packets are received on the other sockets it allowsnmbd to refuse to serve names to machines that send packets that arrive through any interfaces not listed in theinterfaces list. IP Source address spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for nmbd.		* For name service it causes nmbd to bind to ports 137 and 138 on the interfaces listed in the interfaces parameter. nmbd also binds to the "all addresses" interface (0.0.0.0) on ports 137 and 138 for the purposes of reading broadcast messages. If this option is not set then nmbd will service name requests on all of these sockets. If bind interfaces only is set then nmbd will check the source address of any packets coming in on the broadcast sockets and discard any that don't match the broadcast addresses of the interfaces in the interfaces parameter list. As unicast packets are received on the other sockets it allowsnmbd to refuse to serve names to machines that send packets that arrive through any interfaces not listed in theinterfaces list. IP Source address spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for nmbd.
Line 300:		Line 302:
	;browse list (G):This controls whether smbd(8) will serve a browse list to a client doing a NetServerEnum call. Normally set to yes. You should never need to change this.		;browse list (G):This controls whether smbd(8) will serve a browse list to a client doing a NetServerEnum call. Normally set to yes. You should never need to change this.
	* '''Default''': browse list = yes		* '''Default''': browse list = yes
			====C====
	;casesignames:This parameter is a synonym for case sensitive.		;casesignames:This parameter is a synonym for case sensitive.
	;case sensitive (S):See the discussion in the section [[#NAME MANGLING]].		;case sensitive (S):See the discussion in the section [[#NAME MANGLING]].