summaryrefslogtreecommitdiff
path: root/lib/param
AgeCommit message (Collapse)AuthorFilesLines
2019-03-07web_server: Remove the web port smb.conf parameterGarming Sam1-1/+0
With the removal of the web server, there are not any users of this parameter and so should just be removed. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Jeremy Allison <jra@samba.org>
2019-03-01common-lib: Use wrapper for string to integer conversionSwen Schillig1-4/+20
In order to detect an value overflow error during the string to integer conversion with strtoul/strtoull, the errno variable must be set to zero before the execution and checked after the conversion is performed. This is achieved by using the wrapper function strtoul_err and strtoull_err. Signed-off-by: Swen Schillig <swen@linux.ibm.com> Reviewed-by: Ralph Böhme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2019-02-09docs-xml: add "debug encryption" global parmAurelien Aptel1-0/+2
Add debug option to dump in the log the session id & keys in smbd and libsmb-based code for offline decryption. Wireshark can make use of this to decrypt encrypted traffic. Signed-off-by: Aurelien Aptel <aaptel@suse.com> Reviewed-by: Noel Power <npower@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
2018-12-06docs-xml: add "smbd getinfo ask sharemode"Ralph Boehme1-0/+1
Counterpart for "smbd search ask sharemode" for getinfo. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2018-12-06docs-xml: add "smbd search ask sharemode"Ralph Boehme1-0/+1
Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2018-11-23source4 smbd prefork: Add backoff to process restartGary Lockyer1-0/+2
Add new smbd.conf variables 'prefork backoff increment' and 'prefork maximum backoff' to control the rate at which failed pre-forked processes are restarted. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-11-07source4 smbd prefork: Increase default worklers to 4Gary Lockyer1-2/+1
Increase the default number of worker processes started by the pre-fork process model from 1 to 4. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-07-12smb.conf: add dns_zone_scavengingGary Lockyer1-0/+1
Add parameter dns_zone_scavenging to control dns zone scavenging. Scavenging is disabled by default, as due to https://bugzilla.samba.org/show_bug.cgi?id=12451 the ageing properties of existing DNS entries are incorrect. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
2018-07-04samba_gpoupdate: Rename the command to samba-gpupdateDavid Mulder1-1/+1
On a Windows client, this command is called 'gpupdate' Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-06-28param: Add non-global smb.cfg option (support 2 different smb.confs)Aaron Haslett1-2/+13
The default behaviour is that there is only a single global underlying LoadParm object. E.g. if you create 2 different LoadParm objects in python, they both modify the same underlying object. This patch adds a mechanism to override this and create a separate non-global LoadParm object. The use-case is the backup tool, where we want to manipulate 2 different smb.conf files (the one used to create the backup, and the smb.conf in the backup itself). Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-05-15smbd: fileserver: Change defaults to work with EA support out of the box.Jeremy Allison1-1/+5
Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Tue May 15 12:40:48 CEST 2018 on sn-devel-144
2018-05-10loadparm: Remove unused realm_originalChristof Schmitt2-2/+0
Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu May 10 22:47:15 CEST 2018 on sn-devel-144
2018-03-22lib:param: Fix the size type in lp_do_parameter_parametric()Andreas Schneider1-1/+1
This fixes compilation with -Wstrict-overflow=2 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Mar 22 01:54:08 CET 2018 on sn-devel-144
2018-03-01lib:param: Add FALL_THROUGH statements in loadparm.cAndreas Schneider1-1/+2
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-02-03s3/smbd: fix handling of delete-on-close on directoriesRalph Boehme1-0/+2
This implements a check to test the delete-on-close flag of a directory for requests to create files in this directory. Windows server implement this check, Samba doesn't as it has performance implications. This commit implements the check and a new option to control it. By default the check is skipped, setting "check parent directory delete on close = yes" enables it. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Sat Feb 3 23:42:16 CET 2018 on sn-devel-144
2018-01-13gpo: Add the winbind call to gpupdateDavid Mulder1-0/+1
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-01-13winbindd: add "winbind scan trusted domains = no" to avoid trust enumerationStefan Metzmacher1-0/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
2018-01-10docs-xml: deprecate "server schannel" and change the default to "yes"Stefan Metzmacher1-1/+1
No client should use the old protocol without DCERPC level integrity/privacy, but Maybe there're some lagacy OEM file servers, which require this. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
2018-01-10docs-xml: deprecate "client schannel" and change the default to "yes"Stefan Metzmacher1-1/+1
This is already the default, because "require strong key = yes" is the default. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
2018-01-10docs-xml: remove deprecated 'use spnego" optionStefan Metzmacher1-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
2017-12-13docs-xml: remove unused "map untrusted to domain" optionStefan Metzmacher1-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-12smbd: Enable async I/O by defaultVolker Lendecke1-0/+2
We've had this code in for long enough that we should enable it by default. Modern clients do overlapping I/O, we should utilize that if possible. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2017-12-08Add mdns name configuration optionKevin Anderson3-0/+11
Add the mdns name configuration variable to control the mdns hostname. The default is to use the NETBIOS name of the system to match previous versions which is typically the hostname in all capitals. A value of mdns can be provided to defer the hostname to the mdns library. With the recent patch to support time machine being merged this patch allows for a user to configure the server name that is advertised to be lower cased through Avahi advertisements. Signed-off-by: Kevin Anderson <andersonkw2@gmail.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2017-11-20gpo: Apply kerberos settingsDavid Mulder2-8/+44
Add kdc kerberos settings to gpo.tdb, then retrieve those settings in lpcfg_default_kdc_policy. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-11-20gpo: Create the gpo update serviceGarming Sam1-0/+1
Split from "Initial commit for GPO work done by Luke Morrison" by David Mulder Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Luke Morrison <luke@hubtrek.com> Signed-off-by: David Mulder <dmulder@suse.com> Then adapted to current master Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2017-10-19source4/smbd: add a prefork process model.Gary Lockyer1-0/+2
Add a pre fork process model to bound the number processes forked by samba. Currently workers are only pre-forked for the ldap server, all the other services have pre-fork support disabled. When pre-fork support is disabled a new process is started for each service, and requests are processed by that process. This commit partially reverts commit b5be45c453bd51373bade26c29828b500ba586ec. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
2017-10-19Removed unused 'oplock contention limit' config parameterChristof Schmitt1-2/+0
Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2017-09-05param: Add 'binddns dir' parameterAndreas Schneider2-0/+2
This allows to us to have restricted access to the directory by the group 'named' which bind is a member of. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12957 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org>
2017-07-04param: Add new "disabled" value to "ntlm auth" to disable NTLM totallyAndrew Bartlett1-0/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923 Reviewed-by: Garming Sam <garming@catalyst.net.nz>
2017-07-04param: Disable LanMan authentication unless NTLMv1 is also enabledAndrew Bartlett1-0/+16
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923
2017-07-04auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm ↵Andrew Bartlett2-1/+16
auth =' The ntlm auth parameter is expanded to more clearly describe the role of each option, and to allow the new mode that permits MSCHAPv2 (as declared by the client over the NETLOGON protocol) while still banning NTLMv1. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Based on a patch by Mantas Mikulėnas <mantas@utenos-kolegija.lt>: Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth") added the --allow-mschapv2 option, but didn't implement checking for it server-side. This implements such checking. Additionally, Samba now disables NTLMv1 authentication by default for security reasons. To avoid having to re-enable it globally, 'ntlm auth' becomes an enum and a new setting is added to allow only MSCHAPv2. Signed-off-by: Mantas Mikulėnas <mantas@utenos-kolegija.lt> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
2017-06-27param: change the effective default for "client max protocol" to the latest ↵Stefan Metzmacher1-1/+1
supported protocol Currently it's SMB3_11. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-06-16docs-xml: change the default for "map untrusted to domain" to "auto"Stefan Metzmacher1-0/+2
This makes the behaviour much more robust, particularly with forest child domains over one-way forest trusts. Sadly we don't support this kind of setup with our current ADDC, so there's no way to have automated tests for this behaviour, but at least we know it doesn't break any existing tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-04-29param: Add 'mit kdc command' to change the default.Andreas Schneider1-0/+5
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2017-04-18lib: param: Remove lpcfg_register_defaults_hook().Jeremy Allison2-48/+0
Completely unused functionality. Gets rid of another talloc_autofree_context(). Updated WHATSNEW to make this clear. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2017-04-18lib: param: Remove the last external use of global_iconv_handle by calling ↵Jeremy Allison1-9/+6
the utility function reinit_iconv_handle(). Add an error check. This *looks* like a logic change, but it is not. The only change is the addition of the error return check. The reason is that the changed function, reload_charcnv(), is the *only* function that sets lp_ctx->iconv_handle. And it does so just before setting global_iconv_handle = lp_ctx->iconv_handle. Calling the utility function reinit_iconv_handle() instead merely sets global_iconv_handle first, then assigns it (as the return) to lp_ctx->iconv_handle. So all this is doing is reversing the order of setting global_iconv_handle and lp_ctx->iconv_handle to the same thing. Even the removal of the lines: - struct smb_iconv_handle *old_ic = lp_ctx->iconv_handle - if (old_ic == NULL) { - old_ic = global_iconv_handle; has no effect, as remember that lp_ctx->iconv_handle is only ever set to the same value as global_iconv_handle, and once this function has been run once, lp_ctx->iconv_handle != NULL. This allows us finally to make global_iconv_handle private to the C source file that defines it. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2017-04-18lib: param: Use utility functions to get rid of two more uses of ↵Jeremy Allison1-9/+15
global_iconv_handle. Add error return checking. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2017-04-18lib: Remove smb_iconv_handle_reinit_lp()Jeremy Allison3-17/+7
It's merely a wrapper for smb_iconv_handle_reinit(), only used in one place and smb_iconv_handle_reinit() is already called from lib/param/loadparm.c. Removing this will make it easier to make global_iconv_handle private state to lib/util/charset/codepoints.c later. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2017-04-13param: Check for valid values of 'name resolve order' optionNoel Power2-1/+49
This variable is populated by a list of values where each value should be a known option. This patch ensures that illegal values are detected. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12739 Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
2017-03-25s3: smbd: Change "strict sync" paramter from "no" to "yes" for 4.7.0.Jeremy Allison1-0/+2
Document change and modify in loadparm.c. Safer default for new installs and vendors. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Christof Schmitt <cs@samba.org>
2017-03-14param: Allow to specify kerberos method on the commandlineAndreas Schneider1-0/+4
We support --option for our tools but you cannot set an option where the value of the option includes a space. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org>
2017-01-27rpc_server: Allow to configure the port range for RPC servicesAndreas Schneider3-1/+58
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12521 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org>
2017-01-23Add explicit dependency on samba-debug from libinterfaces and libserverrole.Zentaro Kavanagh1-1/+1
Currently these dependencies are indirect via a SAMBA_SUBSYSTEM which does not propagate private library information. This results in these 2 libraries getting generated with no RPATH information in the ELF header. Additional discussion [1]. [1] - https://lists.samba.org/archive/samba-technical/2017-January/118078.html Signed-off-by: Zentaro Kavanagh <zentaro@google.com> Reviewed-by: Ralph Böhme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Jan 23 08:26:43 CET 2017 on sn-devel-144
2017-01-22param: Remove winbindd privileged socket directory optionAndrew Bartlett1-1/+0
This option is unused and has not been used since before Samba 4.3 when the source4/ winbindd code went away. The associated dynconfig parameters used for the default are also removed. BUG: https://bugzilla.samba.org/show_bug.cgi?id=10066 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
2017-01-09s3/smbd: new "mangled names" setting "illegal"Ralph Boehme2-1/+2
This does mangling for names with illegal NTFS characters, but not for names longer then 8.3: Name mangling with mangled named = yes ====================================== Mangled | Short | Name ---------------------------- | | foo | yes | 123456789 yes | | foo:bar Name mangling with mangled named = illegal ========================================== Mangled | Short | Name ---------------------------- | | foo | | 123456789 yes | | foo:bar Setting "mangled names = illegal" is the most sensible setting for modern clients that don't use the shortname anymore. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2017-01-09s3/smbd: convert "mangled names" option to an enumRalph Boehme2-0/+13
This is in preparation of adding an additional setting for this option. No change in behaviour by this commit, that comes in the next one. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-08-10smbd: add an option to inherit only the UNIX ownerUri Simchoni2-0/+13
This can be used to emulate folder quotas, as explained in the modified manpage. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-08-09s3-param: add kerberos encryption types parameterUri Simchoni3-0/+15
Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-07-22docs-xml:smbdotconf: default "ntlm auth" to "no"Stefan Metzmacher1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2016-07-22smbd: Enable leases by defaultVolker Lendecke1-0/+2
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
generated by cgit v1.2.3 (git 2.25.1) at 2026-06-10 12:04:38 +0000