- Fix the kerberos downgrade problem:
[Samba/gebeck_regimport.git] / docs / htmldocs / using_samba / ch08_05.html
blob90fa20a8cdae71f71528319974c5117fd30acbcb
1 <HTML>
2 <HEAD>
3 <TITLE>
4 [Chapter 8] 8.5 Recently Added Options</title><META NAME="DC.title" CONTENT=""><META NAME="DC.creator" CONTENT=""><META NAME="DC.publisher" CONTENT="O'Reilly &amp; Associates, Inc."><META NAME="DC.date" CONTENT="1999-11-05T21:35:55Z"><META NAME="DC.type" CONTENT="Text.Monograph"><META NAME="DC.format" CONTENT="text/html" SCHEME="MIME"><META NAME="DC.source" CONTENT="" SCHEME="ISBN"><META NAME="DC.language" CONTENT="en-US"><META NAME="generator" CONTENT="Jade 1.1/O'Reilly DocBook 3.0 to HTML 4.0"></head>
5 <BODY BGCOLOR="#FFFFFF" TEXT="#000000" link="#990000" vlink="#0000CC">
6 <table BORDER="0" CELLPADDING="0" CELLSPACING="0" width="90%">
7 <tr>
8 <td width="25%" valign="TOP">
9 <img hspace=10 vspace=10 src="gifs/samba.s.gif"
10 alt="Using Samba" align=left valign=top border=0>
11 </td>
12 <td height="105" valign="TOP">
13 <br>
14 <H2>Using Samba</H2>
15 <font size="-1">
16 Robert Eckstein, David Collier-Brown, Peter Kelly
17 <br>1st Edition November 1999
18 <br>1-56592-449-5, Order Number: 4495
19 <br>416 pages, $34.95
20 </font>
21 <p> <a href="http://www.oreilly.com/catalog/samba/">Buy the hardcopy</a>
22 <p><a href="index.html">Table of Contents</a>
23 </td>
24 </tr>
25 </table>
26 <hr size=1 noshade>
27 <!--sample chapter begins -->
29 <center>
30 <DIV CLASS="htmlnav">
31 <TABLE WIDTH="515" BORDER="0" CELLSPACING="0" CELLPADDING="0">
32 <TR>
33 <TD ALIGN="LEFT" VALIGN="TOP" WIDTH="172">
34 <A CLASS="sect1" HREF="ch08_04.html" TITLE="8.4 WinPopup Messages">
35 <IMG SRC="gifs/txtpreva.gif" ALT="Previous: 8.4 WinPopup Messages" BORDER="0"></a></td><TD ALIGN="CENTER" VALIGN="TOP" WIDTH="171">
36 <B>
37 <FONT FACE="ARIEL,HELVETICA,HELV,SANSERIF" SIZE="-1">
38 <A CLASS="chapter" REL="up" HREF="ch08_01.html" TITLE="8. Additional Samba Information ">
39 Chapter 8<br>
40 Additional Samba Information </a></font></b></td><TD ALIGN="RIGHT" VALIGN="TOP" WIDTH="172">
41 <A CLASS="sect1" HREF="ch08_06.html" TITLE="8.6 Miscellaneous Options">
42 <IMG SRC="gifs/txtnexta.gif" ALT="Next: 8.6 Miscellaneous Options" BORDER="0"></a></td></tr></table>&nbsp;<hr noshade size=1></center>
43 </div>
44 <blockquote>
45 <div>
46 <H2 CLASS="sect1">
47 <A CLASS="title" NAME="ch08-pgfId-958954">
49 <!-- 2.0.7 amendments begin, davecb --> 8.5 Recently Added
50 Options</a></h2><P CLASS="para">Samba has several options that appeared
51 around the time of Samba 2.0, but either were not entirely supported or were
52 in the process of being developed. With Samba 2.0.7, several more were
53 introduced. We will give you a brief overview of their workings in this
54 section. These options are shown in <A CLASS="xref"
55 HREF="ch08_05.html#ch08-72538">
56 <!-- end of first addition -->
58 Table 8.9</a>. </p><br>
59 <TABLE CLASS="table" BORDER="1" CELLPADDING="3">
60 <CAPTION CLASS="table">
61 <A CLASS="title" NAME="ch08-72538">
62 Table 8.9: Recently Added Options </a></caption><THEAD CLASS="thead">
63 <TR CLASS="row" VALIGN="TOP">
64 <TH CLASS="entry" ALIGN="LEFT" ROWSPAN="1" COLSPAN="1">
65 <P CLASS="para">
66 Option</p></th><TH CLASS="entry" ALIGN="LEFT" ROWSPAN="1" COLSPAN="1">
67 <P CLASS="para">
68 Parameters</p></th><TH CLASS="entry" ALIGN="LEFT" ROWSPAN="1" COLSPAN="1">
69 <P CLASS="para">
70 Function</p></th><TH CLASS="entry" ALIGN="LEFT" ROWSPAN="1" COLSPAN="1">
71 <P CLASS="para">
72 Default</p></th><TH CLASS="entry" ALIGN="LEFT" ROWSPAN="1" COLSPAN="1">
73 <P CLASS="para">
74 Scope</p></th></tr></thead><TBODY CLASS="tbody">
76 <TR CLASS="row" VALIGN="TOP">
77 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
78 <P CLASS="para">
79 <CODE CLASS="literal">
80 change notify timeout</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
81 <P CLASS="para">
82 numerical (number of seconds)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
83 <P CLASS="para">
84 Sets the interval between checks when a client asks to wait for a change in a specified directory.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
85 <P CLASS="para">
86 <CODE CLASS="literal">
87 60</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
88 <P CLASS="para">
89 Global</p></td></tr>
91 <TR CLASS="row" VALIGN="TOP">
92 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
93 <P CLASS="para">
94 <CODE CLASS="literal">
95 machine password timeout</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
96 <P CLASS="para">
97 numerical (number of seconds)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
98 <P CLASS="para">
99 Sets the renewal interval for NT domain machine passwords.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
100 <P CLASS="para">
101 <CODE CLASS="literal">
102 604,800</code> (1 week)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
103 <P CLASS="para">
104 Global</p></td></tr><TR CLASS="row" VALIGN="TOP">
105 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
106 <P CLASS="para">
107 <CODE CLASS="literal">
108 stat cache</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
109 <P CLASS="para">
110 boolean</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
111 <P CLASS="para">
112 If <CODE CLASS="literal">
113 yes</code>, Samba will cache recent name mappings.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
114 <P CLASS="para">
115 <CODE CLASS="literal">
116 yes</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
117 <P CLASS="para">
118 Global</p></td></tr><TR CLASS="row" VALIGN="TOP">
119 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
120 <P CLASS="para">
121 <CODE CLASS="literal">
122 stat cache size</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
123 <P CLASS="para">
124 numerical</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
125 <P CLASS="para">
126 Sets the size of the stat cache.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
127 <P CLASS="para">
128 <CODE CLASS="literal">
129 50</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
130 <P CLASS="para">
131 Global</p></td></tr>
133 <!-- 2.0.7 table insertions begin -->
134 <TR CLASS="row" VALIGN="TOP">
135 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
136 <P CLASS="para">
137 <CODE CLASS="literal">
138 utmp</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
139 <P CLASS="para">
140 boolean</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
141 <P CLASS="para">
142 Turns on logging of Samba users in the utmp file. Requires --with-utmp. </p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
143 <P CLASS="para">
144 <CODE CLASS="literal">
145 no</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
146 <P CLASS="para">
147 Share</p></td></tr>
149 <TR CLASS="row" VALIGN="TOP">
150 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
151 <P CLASS="para">
152 <CODE CLASS="literal">
153 utmp dir</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
154 <P CLASS="para">
155 string (pathname)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
156 <P CLASS="para">
157 Sets the directory where Samba expects to find the utmp/utmpx file.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
158 <P CLASS="para">
159 <CODE CLASS="literal">
160 None</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
161 <P CLASS="para">
162 Share</p></td></tr>
164 <TR CLASS="row" VALIGN="TOP">
165 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
166 <P CLASS="para">
167 <CODE CLASS="literal">
168 inherit permissions</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
169 <P CLASS="para">
170 boolean</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
171 <P CLASS="para">
172 Sets the permissions of newly created directories to the same as their parent.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
173 <P CLASS="para">
174 <CODE CLASS="literal">
175 no</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
176 <P CLASS="para">
177 Share</p></td></tr>
179 <TR CLASS="row" VALIGN="TOP">
180 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
181 <P CLASS="para">
182 <CODE CLASS="literal">
183 write cache size</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
184 <P CLASS="para">
185 numerical (bytes)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
186 <P CLASS="para">
187 Sets the size of a write cache (buffer) used for oplocked files.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
188 <P CLASS="para">
189 <CODE CLASS="literal">
190 0</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
191 <P CLASS="para">
192 Share</p></td></tr>
194 <TR CLASS="row" VALIGN="TOP">
195 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
196 <P CLASS="para">
197 <CODE CLASS="literal">
198 source environment</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
199 <P CLASS="para">
200 string (pathname)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
201 <P CLASS="para">
202 Sets a file to read environment variable from.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
203 <P CLASS="para">
204 <CODE CLASS="literal">
205 None</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
206 <P CLASS="para">
207 Global</p></td></tr>
209 <TR CLASS="row" VALIGN="TOP">
210 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
211 <P CLASS="para">
212 <CODE CLASS="literal">
213 min password length</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
214 <P CLASS="para">
215 numerical (number of characters)</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
216 <P CLASS="para">
217 Sets the minimum length of a new password which Samba will try to update the password file with .</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
218 <P CLASS="para">
219 <CODE CLASS="literal">
220 5</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
221 <P CLASS="para">
222 Global</p></td></tr>
225 <TR CLASS="row" VALIGN="TOP">
226 <TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
227 <P CLASS="para">
228 <CODE CLASS="literal">
229 netbios scope</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
230 <P CLASS="para">
231 string</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
232 <P CLASS="para">
233 Sets the NetBIOS scope.</p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
234 <P CLASS="para">
235 <CODE CLASS="literal">
236 None</code></p></td><TD CLASS="entry" ROWSPAN="1" COLSPAN="1">
237 <P CLASS="para">
238 Global</p></td></tr>
239 <!-- end of 2.0.7 insertions-->
240 </tbody></table>
242 <DIV CLASS="sect2">
243 <H3 CLASS="sect2">
244 <A CLASS="title" NAME="ch08-pgfId-959050">
245 8.5.1 change notify timeout</a></h3><P CLASS="para">
246 The <CODE CLASS="literal">
247 change</code> <CODE CLASS="literal">
248 notify</code> <CODE CLASS="literal">
249 timeout</code> global option emulates a Windows NT SMB feature called <I CLASS="firstterm">
250 change notification</i>. This allows a client to request that a Windows NT server periodically monitor a specific directory on a share for any changes. If any changes occur, the server will notify the client.</p><P CLASS="para">
251 As of version 2.0, Samba will perform this function for its clients. However, performing these checks too often can slow the server down considerably. This option sets the time period that Samba should wait between such checks. The default is one minute (60 seconds); however, you can use this option to specify an alternate time that Samba should wait between performing checks:</p><PRE CLASS="programlisting">
252 [global]
253 change notify timeout = 30</pre></div><DIV CLASS="sect2">
254 <H3 CLASS="sect2">
255 <A CLASS="title" NAME="ch08-pgfId-959054">
256 8.5.2 machine password timeout</a></h3><P CLASS="para">
257 The <CODE CLASS="literal">
258 machine</code> <CODE CLASS="literal">
259 password</code> <CODE CLASS="literal">
260 timeout</code> global option sets a retention period for NT domain machine passwords. The default is currently set to the same time period that Windows NT 4.0 uses: 604,800 seconds (one week). Samba will periodically attempt to change the <I CLASS="firstterm">
261 machine account password</i>, which is a password used specifically by another server to report changes to it. This option specifies the number of seconds that Samba should wait before attempting to change that password. The following example changes it to a single day, by specifying the following:</p><PRE CLASS="programlisting">
262 [global]
263 machine password timeout = 86400</pre></div><DIV CLASS="sect2">
264 <H3 CLASS="sect2">
265 <A CLASS="title" NAME="ch08-pgfId-959058">
266 8.5.3 stat cache</a></h3><P CLASS="para">
267 The <CODE CLASS="literal">
268 stat</code> <CODE CLASS="literal">
269 cache</code> global option turns on caching of recent case-insensitive name mappings. The default is <CODE CLASS="literal">
270 yes</code>. The Samba team recommends that you never change this parameter.</p></div><DIV CLASS="sect2">
271 <H3 CLASS="sect2">
272 <A CLASS="title" NAME="ch08-pgfId-959060">
273 8.5.4 stat cache size</a></h3><P CLASS="para">The <CODE CLASS="literal">
274 stat</code> <CODE CLASS="literal">
275 cache</code> <CODE CLASS="literal">
276 size</code> global option sets the size of the cache entries to be used for the <CODE CLASS="literal">
277 stat</code> <CODE CLASS="literal">
278 cache</code> option. The default here is 50. Again, the Samba team recommends that you never change this parameter.</p>
282 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add1">
283 8.5.5 utmp</a></h3>
284 <P CLASS="para">If you specified <CODE CLASS="literal">
285 --with-utmp </CODE> when configuring, this option will turn on utmp logging
286 of users: they will appear in the utmp file and you will be able to see if
287 they are on with <I>last(1)</I>. It defaults to <CODE
288 CLASS="literal">no</code>.</p>
290 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add2">
291 8.5.6 utmp dir</a></h3>
292 <P CLASS="para">
293 If <CODE CLASS="literal">utmp</CODE> is set, the utmp dir option will change the directory Samba
294 looks in for the utmp files. If it is not set, the default system
295 location will be used.</p>
297 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add3">
298 8.5.7 inherit permissions</a></h3>
299 <P CLASS="para">
300 This option causes new files and directories to be created with
301 the same permissions as the directory they're in. For example,
302 subdirectories will inherit setgid bits from their parents.
303 This option will override the <CODE CLASS="literal">create
304 mask, directory mask, force create mode</CODE> and <CODE CLASS="literal">
305 force directory mode</CODE> options, but not the <CODE CLASS="literal">
306 map archive, map hidden</CODE> and <CODE CLASS="literal">map system</CODE>
307 options. It will never set the <CODE CLASS="literal">setuid</CODE> bit.
308 This option defaults to off.</p>
310 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add4">
311 8.5.8 write cache size</a></h3>
312 <P CLASS="para">The <CODE CLASS="literal">write cache size</code>
313 share option sets the size of a cache used by Samba while
314 writing oplocked files. The files will be written in <I>cachesize</I>
315 blocks, so you can tune Samba's write size to the optimum size for
316 your filesystem or RAID disk array.</p>
318 <p>The caching applies to the first 10 files opened with oplocks if set,
319 and defaults to zero (off) initially.</p>
321 <p>As with all caching schemes, data that hasn't been written
322 will be lost if the system crashes.</p>
324 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add5">
325 8.5.9 source environment</a></h3>
326 <P CLASS="para">
327 This options specifies a file of environment variables that Samba
328 will read on startup. <!-- and when else? When an smb.conf is read?
329 when a child server process is started? --> The variables set in this
330 files can then be used in smb.conf files as $%<I>name</I>. For example,
331 HOME=/home/sofia in the environment file could be used in a smb.conf
332 file as "path = "$HOME"</p>
334 <p>If the pathname begins with a "|" (pipe) symbol, Samba will attempt
335 to run it and read its standard output.</p>
337 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add6">
338 8.5.10 min password length</a></h3>
339 <P CLASS="para">This option sets the minimum length, in characters,
340 of a plain text password that Samba will accept when performing UNIX
341 password changing. This is used to tell Samba about system-defined
342 minimums, so it can return an appropriate error to the client.</p>
345 <H3 CLASS="sect2"> <A CLASS="title" NAME="ch08-pgfId-959060-add1">
346 8.5.11 netbios scope</a></h3>
347 <P CLASS="para">
348 This sets the NetBIOS scope that Samba will operate under: Samba
349 will not communicate with any machine with a different scope.
350 This should not be set unless every machine on your LAN also sets
351 this value. It was a predecessor to workgroups, and the Samba
352 team recommends against using it.</p>
354 <!-- end of 2.0.7 additions. -->
356 <div></div></div></blockquote>
358 <center>
359 <hr noshade size=1><TABLE WIDTH="515" BORDER="0" CELLSPACING="0" CELLPADDING="0">
360 <TR>
361 <TD ALIGN="LEFT" VALIGN="TOP" WIDTH="172">
362 <A CLASS="sect1" HREF="ch08_04.html" TITLE="8.4 WinPopup Messages">
363 <IMG SRC="gifs/txtpreva.gif" ALT="Previous: 8.4 WinPopup Messages" BORDER="0"></a></td><TD ALIGN="CENTER" VALIGN="TOP" WIDTH="171">
364 <A CLASS="book" HREF="index.html" TITLE="">
365 <IMG SRC="gifs/txthome.gif" ALT="" BORDER="0"></a></td><TD ALIGN="RIGHT" VALIGN="TOP" WIDTH="172">
366 <A CLASS="sect1" HREF="ch08_06.html" TITLE="8.6 Miscellaneous Options">
367 <IMG SRC="gifs/txtnexta.gif" ALT="Next: 8.6 Miscellaneous Options" BORDER="0"></a></td></tr><TR>
368 <TD ALIGN="LEFT" VALIGN="TOP" WIDTH="172">
369 8.4 WinPopup Messages</td><TD ALIGN="CENTER" VALIGN="TOP" WIDTH="171">
370 <A CLASS="index" HREF="inx.html" TITLE="Book Index">
371 <IMG SRC="gifs/index.gif" ALT="Book Index" BORDER="0"></a></td><TD ALIGN="RIGHT" VALIGN="TOP" WIDTH="172">
372 8.6 Miscellaneous Options</td></tr></table><hr noshade size=1></center>
373 </div>
375 <!-- End of sample chapter -->
376 <CENTER>
377 <FONT SIZE="1" FACE="Verdana, Arial, Helvetica">
378 <A HREF="http://www.oreilly.com/">
379 <B>O'Reilly Home</B></A> <B> | </B>
380 <A HREF="http://www.oreilly.com/sales/bookstores">
381 <B>O'Reilly Bookstores</B></A> <B> | </B>
382 <A HREF="http://www.oreilly.com/order_new/">
383 <B>How to Order</B></A> <B> | </B>
384 <A HREF="http://www.oreilly.com/oreilly/contact.html">
385 <B>O'Reilly Contacts<BR></B></A>
386 <A HREF="http://www.oreilly.com/international/">
387 <B>International</B></A> <B> | </B>
388 <A HREF="http://www.oreilly.com/oreilly/about.html">
389 <B>About O'Reilly</B></A> <B> | </B>
390 <A HREF="http://www.oreilly.com/affiliates.html">
391 <B>Affiliated Companies</B></A><p>
392 <EM>&copy; 1999, O'Reilly &amp; Associates, Inc.</EM>
393 </FONT>
394 </CENTER>
395 </BODY>
396 </html>