|
|
- ;******************************************************************************
- ; File to define cifsd configuration parameters which are comparable with
- ; samba's ones
- ;
- ; Supported [global] level parameters list:
- ; - server string
- ; This controls what string will show up in browse lists next
- ; to the machine name
- ; - workgroup
- ; This controls what workgroup your server will appear to be
- ; in when queried by clients
- ; - netbios name
- ; This sets the NetBIOS name by which a SMB server is known.
- ; By default it is the same as the first component of the host's
- ; DNS name. If a machine is a browse server or logon server this
- ; name (or the first component of the hosts DNS name) will be
- ; the name that these services are advertised under.
- ; - server min protocol
- ; This setting controls the minimum protocol version that the
- ; server will allow the client to use.
- ; - server max protocol
- ; The value of the parameter (a string) is the highest protocol
- ; level that will be supported by the server.
- ; - server signing
- ; This controls whether the client is allowed or required to use
- ; SMB1 and SMB2 signing. Possible values are default, auto,
- ; mandatory and disabled.
- ; - guest account
- ; This is a username which will be used for access to services
- ; which are specified as guest ok.
- ; - max active sessions
- ; This option allows the number of simultaneous connections to
- ; a service to be limited.
- ; - ipc timeout
- ; This option specifies the number of seconds server will wait
- ; for the userspace to reply to heartbeat frames. If user space
- ; is down for more than `ipc timeout` seconds the server will
- ; reset itself - close all sessions and all TCP connections.
- ; - restrict anonymous
- ; The setting of this parameter determines whether user and
- ; group list information is returned for an anonymous connection.
- ; - map to guest
- ; This parameter can take four different values, which tell cifsd
- ; what to do with user login requests.(bad user
- ; - bind interfaces only
- ; This global parameter allows the cifsd admin to limit what
- ; interfaces on a machine will serve SMB requests.
- ; - interfaces
- ; This option allows you to override the default network
- ; interfaces list that cifsd will use for browsing. The option
- ; takes only list of interface name.
- ; - deadtime
- ; The value of the parameter (a decimal integer) represents
- ; the number of minutes of inactivity before a connection is
- ; considered dead, and it is disconnected. The deadtime only
- ; takes effect if the number of open files is zero.
- ; - root directory
- ; Sets up a root (base) directory for all shares. In some
- ; sense it's equal to chroot(). When this option set all shares'
- ; paths become relative to root directory, IOW the file name
- ; lookup resolves '/root directory/share path/file path' path.
- ;
- ; Supported [share] level parameters list:
- ; - comment
- ; comment string to associate with the new share
- ; - path
- ; This parameter specifies a directory to which the user of the
- ; service is to be given access.
- ; - guest ok
- ; If this parameter is yes for a service, then no password is
- ; required to connect to the service.
- ; - read only
- ; If this parameter is yes, then users of a service may not
- ; create or modify files in the service's directory.
- ; - browseable
- ; This controls whether this share is seen in the list of
- ; available shares in a net view and in the browse list.
- ; - write ok
- ; - writeable
- ; Inverted synonym for read only.
- ; - store dos attributes
- ; If this parameter is set cifsd attempts to first read DOS
- ; attributes (SYSTEM, HIDDEN, ARCHIVE or READ-ONLY) from a
- ; filesystem extended attribute, before mapping DOS attributes
- ; to UNIX permission bits (such as occurs with map hidden and
- ; map readonly).
- ; - oplocks
- ; This boolean option tells cifsd whether to issue oplocks
- ; (opportunistic locks) to file open requests on this share.
- ; - create mask
- ; When a file is created, the necessary permissions are calculated
- ; according to the mapping from DOS modes to UNIX permissions, and
- ; the resulting UNIX mode is then bit-wise 'AND'ed with this
- ; parameter.
- ; - directory mask
- ; This parameter is the octal modes which are used when converting
- ; DOS modes to UNIX modes when creating UNIX directories.
- ; - force group
- ; This specifies a UNIX group name that will be assigned as
- ; the default primary group for all users connecting to this
- ; service.
- ; - force user
- ; This specifies a UNIX user name that will be assigned as
- ; the default user for all users connecting to this service.
- ; - hide dot files
- ; This is a boolean parameter that controls whether files starting
- ; with a dot appear as hidden files.
- ; - hosts allow
- ; This parameter is a comma, space, or tab delimited set of hosts
- ; which are permitted to access a service
- ; - hosts deny
- ; The opposite of allow hosts - hosts listed here are NOT
- ; permitted access to services unless the specific services have
- ; their own lists to override this one. Where the lists conflict,
- ; the allow list takes precedence.
- ; - valid users
- ; This is a list of users that should be allowed to login to this
- ; service
- ; - invalid users
- ; This is a list of users that should not be allowed to login to
- ; this service.
- ; - read list
- ; This is a list of users that are given read-only access to
- ; a service.
- ; - write list
- ; This is a list of users that are given read-write access to
- ; a service.
- ; - max connections
- ; This option allows the number of simultaneous connections to
- ; a service to be limited.
- ; - veto files
- ; This is a list of files and directories that are neither visible
- ; nor accessible.
- ;
- ; Veto any files containing the word Security,
- ; any ending in .tmp, and any directory containing the
- ; word root.
- ; veto files = /*Security*/*.tmp/*root*/
- ;
- ; Veto the Apple specific files that a NetAtalk server
- ; creates.
- ; veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
- ; - inherit owner
- ; The ownership for new files and directories should be controlled
- ; by the ownership of the parent directory.
- ; Valid options are yes or no.
- ; - inherit smack
- ; This parameter can be used to ensure that if smack label exist
- ; on parent directories.
- ; Valid options are yes or no.
- ; - force create mode
- ; This parameter specifies a set of UNIX mode bit permissions
- ; that will always be set on a file created by cifsd.
- ; - force directory mode
- ; This parameter specifies a set of UNIX mode bit permissions
- ; that will always be set on a directory created by cifsd.
- ;
- ; Rules to update this file:
- ; - Every [share] definition should start on new line
- ; - Every parameter should be indented with single tab
- ; - There should be single spaces around equal (eg: " = ")
- ; - Multiple parameters should be separated with comma
- ; eg: "invalid users = usr1,usr2,usr3"
- ;
- ; Make sure to configure the server after making changes to this file.
- ;******************************************************************************
-
- [global]
- netbios name = CIFSD
-
- [homes]
- comment = content server share
- path = /tmp
|
