Configuration File Option

 

This Section lists each of the options that can be used in a Samba configuration file, which is usually named smb.conf.   Most configuration files contain a global section of options that apply to all directories(shares), and a separate section for various individual shares.   If an option applies only to the global section, [global] appears before its name in the following reference section.   Any lists mentioned are space-separated, except where noted.


Information below is a subset from the O'Relly pocket reference and I have only included the most common terms from the said reference and as follows:


admin users = user list 

   allowable values: user list

   default : NULL

   specifies a list of users who will be granted root permissions on share by Samba

allow host = host list 

   allowable values: list of hosts or networks

   default : NULL

   specifies a list of machines that may connect to a share or shares.   If NULL, any machines can access the share unless there is a host deny option

[global] allow trusted domains = boolean 

   allowable values: YES, NO

   default: YES

   allow access to users who lack accounts on the Samba server but have accounts in another, trusted domain.   

   Requires security = server or security = domain 

[global] auto services = share list 

   allowable values: list of shares

   default: NULL

   specifies a list of shares that will always appear in browse lists, also called preload 

available = boolean 

   allowable values: YES, NO

   default: YES

   If set to NO, denies access to a share.   does not affect browsing functions

browsable = boolean 

   allowable values: YES, NO

   default: YES

   allows a share to be announced in browse lists.   also called browseable 

create mask = octal permission bits 

   allowable values: octal values from 0 to 0777

   default: 0744

   sets the maximum allowable permissions for a new files(e.g. 0755).   see also directory mask.   

   To require certain permissions to be set, see force create mask and force directory mask.

[global] deadtime = number 

   allowable values: number of minutes

   default: 0(zero)

   specifies the time in minutes before an unused connection will be terminated.   

   Zero(0) means never.  used to keep clients from tying up, server resources for

   long periods of time.   If used, clients will have to auto-reconnect after the specified period of inactivity.   

   see also keepalive 

directory = pathname 

   allowable values: full Unix pathname

   default: varies

   sets the path to the directory provided by the file share or used by printer share.   

   If the option is omitted, set automatically in the [home] folder share to the user's home directory;   

   Otherwise defaults to /tmp honors the %u (user) and %m (machine) variables. see also path.

directory mask = octal permission bits 

   allowable values: octal values from 0 to 0777

   default: 0755

   sets the maximum allowable permissions for newly created directories.   

   To require that certain permissions be set, see the force create mask and force directory 

mask directory mode = octal permission bits 

   allowable values: octal values from 0 to 0777

   default : 0755

   synonym for directory mask

[global] domain master = boolean 

   allowable values: YES, NO

   default: NO

   makes the server become a domain master browse-list collector, If possible, for the entire workgroup or domain

force create mask = octal permission bits 

   allowable values: octal values from 0 to 0777

   default: 0 (zero)

   Takes effect when a user on a Windows system creates a file that resides on the Samba server.   

   This option ensures that bits will always be set on the file when they are set in this mask.   

   used with the create mask configuration option, above and also called force create mode 

force directory mask = octal permission bits 

   allowable values: octal values from 0 to 0777

   default: 0 (zero)

   takes effect when a user on a Windows systems creates a directory or folder on the Samba Server side.   

   This option ensures that bits will always be set on a directory when they are set in this mask.   

   used with directory mask and also called force directory mode 

guest account = username 

   allowable values: username

   default: NULL

   sets the name of the unprivileged Unix account to use for tasks such as printing and for accessing shares marked with guest ok 

guest ok = boolean 

   allowable values: YES, NO

   default: NO

   If set to YES, passwords are not needed for this share (for particular shares only).   requires that Public to be set.

[global] keepalive = number 

   allowable values: number of seconds

   default: 0 (zero)

   sets the number of seconds between checks for a crashed client.   

   The default of 0 (zero) causes no checks to be performed.   setting SOCKET OPTIONS=KEEPALIVE will turn on checks every four(4) hours.   

   A value of 3600 (every 10 minutes) is recommended if you want checks more often than every four(4) hours.

[global] load printers = boolean 

   allowable values: YES, NO

   default: YES

   loads all printer names from the system's printcap file into the browse list.   

   uses configuration options from the [printers] section

[global] map to guest = value 

   allowable values: Never, Bad User, Bad Password

   default: Never

   If set to Bad User, allows users without accounts on the Samba server or system to log in and be assigned the guest account.   

   This option can be used as part of making public shares for anyone to use.   

   The default setting of Never prevents users without accounts from loggin into the Samba Server.

printable = boolean 

   allowable values: YES, NO

   default: NO

   Sets a share to be a print share.   required for all printers.   Synonym for print ok 

[global] printcap name = pathname 

   allowable values: full Unix pathname

   default: /etc/printcap

   Sets the path to the printer capabilities file used by the [printers] share section.   

   The default value changes to /etc/qconfig under AIX and lpstat on System V.   also called printcap 

public = boolean 

   allowable values: YES, NO

   default: NO

   If YES, passwords are not needed for this share.

[global] security = value 

   allowable values: share, user, server, domain

   default: user

   Sets the password security policy.

   If security = share, services have a shared password, available to everyone.

   If security = user, users have (Unix) accounts and passwords.

   If security = server, users have accounts and passwords and a separate machine authenticates them for Samba.

   If security = domain, full NT-domain authentication is done.

valid users = user

   list allowable values: list of users

   default : NULL (everyone)

   specifies a list of users that can log in to a share.

[global] workgroup = name 

   allowable values: workgroup name

   default: compiled-in

   Sets the workgroup to which things will be served.   Overrides the compiled-in values.   

   choosing a name other than WORKGROUP is strongly recommended

writable = boolean 

   allowable values: YES, NO

   default: YES

   Antonym for read only; writeable and write ok are synonyms

write list = comma-separated list 

   allowable values: comma-separated list of users

   default: NULL (everyone)

   Specifies a list of valid users that can/are given read/write access to a read-only share.