samba.git/lib/param/param_table.c, branch talloc-2.3.2

param: Create and use enum_smb_encryption_vals

2020-08-19T16:22:40+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

Detect when command line max protocol < min protocol

2019-11-12T17:52:28+00:00

Due to the increased default minimum protocol
level to SMB2, some users notice that
specifying smbclient -m NT1 fails with
NT_STATUS_CONNECTION_DISCONNECTED, with no SMB
traffic on the wire. Report when the max protocol
is set less than the min protocol.

Signed-off-by: David Mulder 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Noel Power 

Autobuild-User(master): Noel Power 
Autobuild-Date(master): Tue Nov 12 17:52:28 UTC 2019 on sn-devel-184

s3:mdssvc: add Elasticsearch backend

2019-10-09T14:35:29+00:00

Signed-off-by: Ralph Boehme 
Reviewed-by: Noel Power

s3:mdssvc: add noindex backend

2019-08-08T20:24:32+00:00

Add a new default backend that, while allowing mdsvc RPC and search queries from
clients, always returns no results.

Shares using this backend will behave the same way as shares on a macOS SMB
server where indexing is disabled.

This change will later also allow us to compile the Spotlight RPC service by
default which is a big step in the direction of adding tests to CI.

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

s3:mdssvc: new option "spotlight backend"

2019-08-08T20:24:31+00:00

Currently there's only the tracker backend, but subsequent commits will add
other backends.

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

Add mdns name configuration option

2017-12-08T21:58:17+00:00

Add the mdns name configuration variable to control the mdns hostname.
The default is to use the NETBIOS name of the system to match previous
versions which is typically the hostname in all capitals. A value of mdns
can be provided to defer the hostname to the mdns library.

With the recent patch to support time machine being merged this patch
allows for a user to configure the server name that is advertised to
be lower cased through Avahi advertisements.

Signed-off-by: Kevin Anderson 
Reviewed-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

param: Add new "disabled" value to "ntlm auth" to disable NTLM totally

2017-07-04T04:57:20+00:00

Signed-off-by: Andrew Bartlett 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923
Reviewed-by: Garming Sam

auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm auth ='

2017-07-04T04:57:20+00:00

The ntlm auth parameter is expanded to more clearly describe the
role of each option, and to allow the new mode that permits MSCHAPv2
(as declared by the client over the NETLOGON protocol) while
still banning NTLMv1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252
Signed-off-by: Andrew Bartlett 

Based on a patch by Mantas Mikulėnas :

Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth")
added the --allow-mschapv2 option, but didn't implement checking for it
server-side. This implements such checking.

Additionally, Samba now disables NTLMv1 authentication by default for
security reasons. To avoid having to re-enable it globally, 'ntlm auth'
becomes an enum and a new setting is added to allow only MSCHAPv2.

Signed-off-by: Mantas Mikulėnas 
Reviewed-by: Garming Sam

param: Allow to specify kerberos method on the commandline

2017-03-14T14:22:12+00:00

We support --option for our tools but you cannot set an option where the
value of the option includes a space.

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlet

s3/smbd: new "mangled names" setting "illegal"

2017-01-09T18:31:20+00:00

This does mangling for names with illegal NTFS characters, but not for
names longer then 8.3:

Name mangling with mangled named = yes
======================================

Mangled | Short | Name
----------------------------
        |       | foo
        | yes   | 123456789
yes     |       | foo:bar

Name mangling with mangled named = illegal
==========================================

Mangled | Short | Name
----------------------------
        |       | foo
        |       | 123456789
yes     |       | foo:bar

Setting "mangled names = illegal" is the most sensible setting for
modern clients that don't use the shortname anymore.

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison