Convert Logon parameters.

[Samba/gebeck_regimport.git] / docs / docbook / smbdotconf / security / forceuser.xml

<samba:parameter name="force user"
                 context="S"
                 xmlns:samba="http://samba.org/common">
<listitem>
    <para>This specifies a UNIX user name that will be 
    assigned as the default user for all users connecting to this service. 
    This is useful for sharing files. You should also use it carefully 
    as using it incorrectly can cause security problems.</para>

    <para>This user name only gets used once a connection is established. 
    Thus clients still need to connect as a valid user and supply a 
    valid password. Once connected, all file operations will be performed 
    as the &quot;forced user&quot;, no matter what username the client connected 
    as.  This can be very useful.</para>

    <para>In Samba 2.0.5 and above this parameter also causes the 
    primary group of the forced user to be used as the primary group 
    for all file activity. Prior to 2.0.5 the primary group was left 
    as the primary group of the connecting user (this was a bug).</para>

    <para>See also <link linkend="FORCEGROUP"><parameter moreinfo="none">force group</parameter></link></para>

    <para>Default: <emphasis>no forced user</emphasis></para>

    <para>Example: <command moreinfo="none">force user = auser</command></para>
</listitem>
</samba:parameter>