|
;******************************************************************************
|
|
; File to define cifsd configuration parameters which are comparable with
|
|
; samba's ones
|
|
;
|
|
; Supported [global] level parameters list:
|
|
; - server string
|
|
; This controls what string will show up in browse lists next
|
|
; to the machine name
|
|
; - workgroup
|
|
; This controls what workgroup your server will appear to be
|
|
; in when queried by clients
|
|
; - netbios name
|
|
; This sets the NetBIOS name by which a SMB server is known.
|
|
; By default it is the same as the first component of the host's
|
|
; DNS name. If a machine is a browse server or logon server this
|
|
; name (or the first component of the hosts DNS name) will be
|
|
; the name that these services are advertised under.
|
|
; - server min protocol
|
|
; This setting controls the minimum protocol version that the
|
|
; server will allow the client to use.
|
|
; - server max protocol
|
|
; The value of the parameter (a string) is the highest protocol
|
|
; level that will be supported by the server.
|
|
; - server signing
|
|
; This controls whether the client is allowed or required to use
|
|
; SMB1 and SMB2 signing. Possible values are default, auto,
|
|
; mandatory and disabled.
|
|
; - guest account
|
|
; This is a username which will be used for access to services
|
|
; which are specified as guest ok.
|
|
; - max active sessions
|
|
; This option allows the number of simultaneous connections to
|
|
; a service to be limited.
|
|
; - ipc timeout
|
|
; This option specifies the number of seconds server will wait
|
|
; for the userspace to reply to heartbeat frames. If user space
|
|
; is down for more than `ipc timeout` seconds the server will
|
|
; reset itself - close all sessions and all TCP connections.
|
|
; - restrict anonymous
|
|
; The setting of this parameter determines whether user and
|
|
; group list information is returned for an anonymous connection.
|
|
; - map to guest
|
|
; This parameter can take four different values, which tell cifsd
|
|
; what to do with user login requests.(bad user
|
|
; - bind interfaces only
|
|
; This global parameter allows the cifsd admin to limit what
|
|
; interfaces on a machine will serve SMB requests.
|
|
; - interfaces
|
|
; This option allows you to override the default network
|
|
; interfaces list that cifsd will use for browsing. The option
|
|
; takes only list of interface name.
|
|
; - deadtime
|
|
; The value of the parameter (a decimal integer) represents
|
|
; the number of minutes of inactivity before a connection is
|
|
; considered dead, and it is disconnected. The deadtime only
|
|
; takes effect if the number of open files is zero.
|
|
; - root directory
|
|
; Sets up a root (base) directory for all shares. In some
|
|
; sense it's equal to chroot(). When this option set all shares'
|
|
; paths become relative to root directory, IOW the file name
|
|
; lookup resolves '/root directory/share path/file path' path.
|
|
;
|
|
; Supported [share] level parameters list:
|
|
; - comment
|
|
; comment string to associate with the new share
|
|
; - path
|
|
; This parameter specifies a directory to which the user of the
|
|
; service is to be given access.
|
|
; - guest ok
|
|
; If this parameter is yes for a service, then no password is
|
|
; required to connect to the service.
|
|
; - read only
|
|
; If this parameter is yes, then users of a service may not
|
|
; create or modify files in the service's directory.
|
|
; - browseable
|
|
; This controls whether this share is seen in the list of
|
|
; available shares in a net view and in the browse list.
|
|
; - write ok
|
|
; - writeable
|
|
; Inverted synonym for read only.
|
|
; - store dos attributes
|
|
; If this parameter is set cifsd attempts to first read DOS
|
|
; attributes (SYSTEM, HIDDEN, ARCHIVE or READ-ONLY) from a
|
|
; filesystem extended attribute, before mapping DOS attributes
|
|
; to UNIX permission bits (such as occurs with map hidden and
|
|
; map readonly).
|
|
; - oplocks
|
|
; This boolean option tells cifsd whether to issue oplocks
|
|
; (opportunistic locks) to file open requests on this share.
|
|
; - create mask
|
|
; When a file is created, the necessary permissions are calculated
|
|
; according to the mapping from DOS modes to UNIX permissions, and
|
|
; the resulting UNIX mode is then bit-wise 'AND'ed with this
|
|
; parameter.
|
|
; - directory mask
|
|
; This parameter is the octal modes which are used when converting
|
|
; DOS modes to UNIX modes when creating UNIX directories.
|
|
; - force group
|
|
; This specifies a UNIX group name that will be assigned as
|
|
; the default primary group for all users connecting to this
|
|
; service.
|
|
; - force user
|
|
; This specifies a UNIX user name that will be assigned as
|
|
; the default user for all users connecting to this service.
|
|
; - hide dot files
|
|
; This is a boolean parameter that controls whether files starting
|
|
; with a dot appear as hidden files.
|
|
; - hosts allow
|
|
; This parameter is a comma, space, or tab delimited set of hosts
|
|
; which are permitted to access a service
|
|
; - hosts deny
|
|
; The opposite of allow hosts - hosts listed here are NOT
|
|
; permitted access to services unless the specific services have
|
|
; their own lists to override this one. Where the lists conflict,
|
|
; the allow list takes precedence.
|
|
; - valid users
|
|
; This is a list of users that should be allowed to login to this
|
|
; service
|
|
; - invalid users
|
|
; This is a list of users that should not be allowed to login to
|
|
; this service.
|
|
; - read list
|
|
; This is a list of users that are given read-only access to
|
|
; a service.
|
|
; - write list
|
|
; This is a list of users that are given read-write access to
|
|
; a service.
|
|
; - max connections
|
|
; This option allows the number of simultaneous connections to
|
|
; a service to be limited.
|
|
; - veto files
|
|
; This is a list of files and directories that are neither visible
|
|
; nor accessible.
|
|
;
|
|
; Veto any files containing the word Security,
|
|
; any ending in .tmp, and any directory containing the
|
|
; word root.
|
|
; veto files = /*Security*/*.tmp/*root*/
|
|
;
|
|
; Veto the Apple specific files that a NetAtalk server
|
|
; creates.
|
|
; veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
|
|
; - inherit owner
|
|
; The ownership for new files and directories should be controlled
|
|
; by the ownership of the parent directory.
|
|
; Valid options are yes or no.
|
|
; - inherit smack
|
|
; This parameter can be used to ensure that if smack label exist
|
|
; on parent directories.
|
|
; Valid options are yes or no.
|
|
; - force create mode
|
|
; This parameter specifies a set of UNIX mode bit permissions
|
|
; that will always be set on a file created by cifsd.
|
|
; - force directory mode
|
|
; This parameter specifies a set of UNIX mode bit permissions
|
|
; that will always be set on a directory created by cifsd.
|
|
;
|
|
; Rules to update this file:
|
|
; - Every [share] definition should start on new line
|
|
; - Every parameter should be indented with single tab
|
|
; - There should be single spaces around equal (eg: " = ")
|
|
; - Multiple parameters should be separated with comma
|
|
; eg: "invalid users = usr1,usr2,usr3"
|
|
;
|
|
; Make sure to configure the server after making changes to this file.
|
|
;******************************************************************************
|
|
|
|
[global]
|
|
netbios name = CIFSD
|
|
|
|
[homes]
|
|
comment = content server share
|
|
path = /tmp
|