source/param/loadparm.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Parameter loading functions
   4    Copyright (C) Karl Auer 1993-1998
   5
   6    Largely re-written by Andrew Tridgell, September 1994
   7
   8    Copyright (C) Simo Sorce 2001
   9    Copyright (C) Alexander Bokovoy 2002
  10    Copyright (C) Stefan (metze) Metzmacher 2002
  11    Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
  12
  13    This program is free software; you can redistribute it and/or modify
  14    it under the terms of the GNU General Public License as published by
  15    the Free Software Foundation; either version 2 of the License, or
  16    (at your option) any later version.
  17
  18    This program is distributed in the hope that it will be useful,
  19    but WITHOUT ANY WARRANTY; without even the implied warranty of
  20    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  21    GNU General Public License for more details.
  22
  23    You should have received a copy of the GNU General Public License
  24    along with this program; if not, write to the Free Software
  25    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  26 */
  27
  28 /*
  29  *  Load parameters.
  30  *
  31  *  This module provides suitable callback functions for the params
  32  *  module. It builds the internal table of service details which is
  33  *  then used by the rest of the server.
  34  *
  35  * To add a parameter:
  36  *
  37  * 1) add it to the global or service structure definition
  38  * 2) add it to the parm_table
  39  * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
  40  * 4) If it's a global then initialise it in init_globals. If a local
  41  *    (ie. service) parameter then initialise it in the sDefault structure
  42  *
  43  *
  44  * Notes:
  45  *   The configuration file is processed sequentially for speed. It is NOT
  46  *   accessed randomly as happens in 'real' Windows. For this reason, there
  47  *   is a fair bit of sequence-dependent code here - ie., code which assumes
  48  *   that certain things happen before others. In particular, the code which
  49  *   happens at the boundary between sections is delicately poised, so be
  50  *   careful!
  51  *
  52  */
  53
  54 #include "includes.h"
  55
  56 BOOL in_client = False;         /* Not in the client by default */
  57 BOOL in_server = False;         /* Not in the server by default */
  58 BOOL bLoaded = False;
  59
  60 extern userdom_struct current_user_info;
  61 extern pstring user_socket_options;
  62 extern enum protocol_types Protocol;
  63
  64 #ifndef GLOBAL_NAME
  65 #define GLOBAL_NAME "global"
  66 #endif
  67
  68 #ifndef PRINTERS_NAME
  69 #define PRINTERS_NAME "printers"
  70 #endif
  71
  72 #ifndef HOMES_NAME
  73 #define HOMES_NAME "homes"
  74 #endif
  75
  76 /* some helpful bits */
  77 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
  78 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
  79
  80 #define USERSHARE_VALID 1
  81 #define USERSHARE_PENDING_DELETE 2
  82
  83 int keepalive = DEFAULT_KEEPALIVE;
  84 BOOL use_getwd_cache = True;
  85
  86 extern int extra_time_offset;
  87
  88 static BOOL defaults_saved = False;
  89
  90 typedef struct _param_opt_struct param_opt_struct;
  91 struct _param_opt_struct {
  92         param_opt_struct *prev, *next;
  93         char *key;
  94         char *value;
  95         char **list;
  96 };
  97
  98 /*
  99  * This structure describes global (ie., server-wide) parameters.
 100  */
 101 typedef struct {
 102         char *smb_ports;
 103         char *dos_charset;
 104         char *unix_charset;
 105         char *display_charset;
 106         char *szPrintcapname;
 107         char *szAddPortCommand;
 108         char *szEnumPortsCommand;
 109         char *szAddPrinterCommand;
 110         char *szDeletePrinterCommand;
 111         char *szOs2DriverMap;
 112         char *szLockDir;
 113         char *szPidDir;
 114         char *szRootdir;
 115         char *szDefaultService;
 116         char *szGetQuota;
 117         char *szSetQuota;
 118         char *szMsgCommand;
 119         char *szHostsEquiv;
 120         char *szServerString;
 121         char *szAutoServices;
 122         char *szPasswdProgram;
 123         char *szPasswdChat;
 124         char *szLogFile;
 125         char *szConfigFile;
 126         char *szSMBPasswdFile;
 127         char *szPrivateDir;
 128         char *szPassdbBackend;
 129         char **szPreloadModules;
 130         char *szPasswordServer;
 131         char *szSocketOptions;
 132         char *szRealm;
 133         char *szAfsUsernameMap;
 134         int iAfsTokenLifetime;
 135         char *szLogNtTokenCommand;
 136         char *szUsernameMap;
 137         char *szLogonScript;
 138         char *szLogonPath;
 139         char *szLogonDrive;
 140         char *szLogonHome;
 141         char **szWINSservers;
 142         char **szInterfaces;
 143         char *szRemoteAnnounce;
 144         char *szRemoteBrowseSync;
 145         char *szSocketAddress;
 146         char *szNISHomeMapName;
 147         char *szAnnounceVersion;        /* This is initialised in init_globals */
 148         char *szWorkgroup;
 149         char *szNetbiosName;
 150         char **szNetbiosAliases;
 151         char *szNetbiosScope;
 152         char *szNameResolveOrder;
 153         char *szPanicAction;
 154         char *szAddUserScript;
 155         char *szRenameUserScript;
 156         char *szDelUserScript;
 157         char *szAddGroupScript;
 158         char *szDelGroupScript;
 159         char *szAddUserToGroupScript;
 160         char *szDelUserFromGroupScript;
 161         char *szSetPrimaryGroupScript;
 162         char *szAddMachineScript;
 163         char *szShutdownScript;
 164         char *szAbortShutdownScript;
 165         char *szUsernameMapScript;
 166         char *szCheckPasswordScript;
 167         char *szWINSHook;
 168         char *szWINSPartners;
 169         char *szUtmpDir;
 170         char *szWtmpDir;
 171         BOOL bUtmp;
 172         char *szIdmapUID;
 173         char *szIdmapGID;
 174         BOOL bPassdbExpandExplicit;
 175         int AlgorithmicRidBase;
 176         char *szTemplateHomedir;
 177         char *szTemplateShell;
 178         char *szWinbindSeparator;
 179         BOOL bWinbindEnumUsers;
 180         BOOL bWinbindEnumGroups;
 181         BOOL bWinbindUseDefaultDomain;
 182         BOOL bWinbindTrustedDomainsOnly;
 183         BOOL bWinbindNestedGroups;
 184         BOOL bWinbindRefreshTickets;
 185         BOOL bWinbindOfflineLogon;
 186         char **szIdmapBackend;
 187         char *szAddShareCommand;
 188         char *szChangeShareCommand;
 189         char *szDeleteShareCommand;
 190         char **szEventLogs;
 191         char *szGuestaccount;
 192         char *szManglingMethod;
 193         char **szServicesList;
 194         char *szUsersharePath;
 195         char *szUsershareTemplateShare;
 196         char **szUsersharePrefixAllowList;
 197         char **szUsersharePrefixDenyList;
 198         int mangle_prefix;
 199         int max_log_size;
 200         char *szLogLevel;
 201         int max_xmit;
 202         int max_mux;
 203         int max_open_files;
 204         int open_files_db_hash_size;
 205         int pwordlevel;
 206         int unamelevel;
 207         int deadtime;
 208         int maxprotocol;
 209         int minprotocol;
 210         int security;
 211         char **AuthMethods;
 212         BOOL paranoid_server_security;
 213         int maxdisksize;
 214         int lpqcachetime;
 215         int iMaxSmbdProcesses;
 216         BOOL bDisableSpoolss;
 217         int syslog;
 218         int os_level;
 219         int enhanced_browsing;
 220         int max_ttl;
 221         int max_wins_ttl;
 222         int min_wins_ttl;
 223         int lm_announce;
 224         int lm_interval;
 225         int announce_as;        /* This is initialised in init_globals */
 226         int machine_password_timeout;
 227         int change_notify_timeout;
 228         int map_to_guest;
 229         int oplock_break_wait_time;
 230         int winbind_cache_time;
 231         int winbind_max_idle_children;
 232         char **szWinbindNssInfo;
 233         int iLockSpinCount;
 234         int iLockSpinTime;
 235         char *szLdapMachineSuffix;
 236         char *szLdapUserSuffix;
 237         char *szLdapIdmapSuffix;
 238         char *szLdapGroupSuffix;
 239 #ifdef WITH_LDAP_SAMCONFIG
 240         int ldap_port;
 241         char *szLdapServer;
 242 #endif
 243         int ldap_ssl;
 244         char *szLdapSuffix;
 245         char *szLdapAdminDn;
 246         char *szAclCompat;
 247         char *szCupsServer;
 248         char *szIPrintServer;
 249         int ldap_passwd_sync;
 250         int ldap_replication_sleep;
 251         int ldap_timeout; /* This is initialised in init_globals */
 252         int ldap_page_size;
 253         BOOL ldap_delete_dn;
 254         BOOL bMsAddPrinterWizard;
 255         BOOL bDNSproxy;
 256         BOOL bWINSsupport;
 257         BOOL bWINSproxy;
 258         BOOL bLocalMaster;
 259         BOOL bPreferredMaster;
 260         BOOL bDomainMaster;
 261         BOOL bDomainLogons;
 262         BOOL bEncryptPasswords;
 263         BOOL bUpdateEncrypt;
 264         int  clientSchannel;
 265         int  serverSchannel;
 266         BOOL bNullPasswords;
 267         BOOL bObeyPamRestrictions;
 268         BOOL bLoadPrinters;
 269         int PrintcapCacheTime;
 270         BOOL bLargeReadwrite;
 271         BOOL bReadRaw;
 272         BOOL bWriteRaw;
 273         BOOL bReadbmpx;
 274         BOOL bSyslogOnly;
 275         BOOL bBrowseList;
 276         BOOL bNISHomeMap;
 277         BOOL bTimeServer;
 278         BOOL bBindInterfacesOnly;
 279         BOOL bPamPasswordChange;
 280         BOOL bUnixPasswdSync;
 281         BOOL bPasswdChatDebug;
 282         int iPasswdChatTimeout;
 283         BOOL bTimestampLogs;
 284         BOOL bNTSmbSupport;
 285         BOOL bNTPipeSupport;
 286         BOOL bNTStatusSupport;
 287         BOOL bStatCache;
 288         int iMaxStatCacheSize;
 289         BOOL bKernelOplocks;
 290         BOOL bAllowTrustedDomains;
 291         BOOL bLanmanAuth;
 292         BOOL bNTLMAuth;
 293         BOOL bUseSpnego;
 294         BOOL bClientLanManAuth;
 295         BOOL bClientNTLMv2Auth;
 296         BOOL bClientPlaintextAuth;
 297         BOOL bClientUseSpnego;
 298         BOOL bDebugHiresTimestamp;
 299         BOOL bDebugPid;
 300         BOOL bDebugUid;
 301         BOOL bHostMSDfs;
 302         BOOL bUseMmap;
 303         BOOL bHostnameLookups;
 304         BOOL bUnixExtensions;
 305         BOOL bDisableNetbios;
 306         BOOL bKernelChangeNotify;
 307         BOOL bFamChangeNotify;
 308         BOOL bUseKerberosKeytab;
 309         BOOL bDeferSharingViolations;
 310         BOOL bEnablePrivileges;
 311         BOOL bASUSupport;
 312         BOOL bUsershareOwnerOnly;
 313         int restrict_anonymous;
 314         int name_cache_timeout;
 315         int client_signing;
 316         int server_signing;
 317         int iUsershareMaxShares;
 318
 319         BOOL bResetOnZeroVC;
 320         param_opt_struct *param_opt;
 321 } global;
 322
 323 static global Globals;
 324
 325 /*
 326  * This structure describes a single service.
 327  */
 328 typedef struct {
 329         BOOL valid;
 330         BOOL autoloaded;
 331         int usershare;
 332         time_t usershare_last_mod;
 333         char *szService;
 334         char *szPath;
 335         char *szUsername;
 336         char **szInvalidUsers;
 337         char **szValidUsers;
 338         char **szAdminUsers;
 339         char *szCopy;
 340         char *szInclude;
 341         char *szPreExec;
 342         char *szPostExec;
 343         char *szRootPreExec;
 344         char *szRootPostExec;
 345         char *szCupsOptions;
 346         char *szPrintcommand;
 347         char *szLpqcommand;
 348         char *szLprmcommand;
 349         char *szLppausecommand;
 350         char *szLpresumecommand;
 351         char *szQueuepausecommand;
 352         char *szQueueresumecommand;
 353         char *szPrintername;
 354         char *szDontdescend;
 355         char **szHostsallow;
 356         char **szHostsdeny;
 357         char *szMagicScript;
 358         char *szMagicOutput;
 359         char *szMangledMap;
 360         char *szVetoFiles;
 361         char *szHideFiles;
 362         char *szVetoOplockFiles;
 363         char *comment;
 364         char *force_user;
 365         char *force_group;
 366         char **readlist;
 367         char **writelist;
 368         char **printer_admin;
 369         char *volume;
 370         char *fstype;
 371         char **szVfsObjects;
 372         char *szMSDfsProxy;
 373         char *szAioWriteBehind;
 374         char *szDfree;
 375         int iMinPrintSpace;
 376         int iMaxPrintJobs;
 377         int iMaxReportedPrintJobs;
 378         int iWriteCacheSize;
 379         int iCreate_mask;
 380         int iCreate_force_mode;
 381         int iSecurity_mask;
 382         int iSecurity_force_mode;
 383         int iDir_mask;
 384         int iDir_force_mode;
 385         int iDir_Security_mask;
 386         int iDir_Security_force_mode;
 387         int iMaxConnections;
 388         int iDefaultCase;
 389         int iPrinting;
 390         int iOplockContentionLimit;
 391         int iCSCPolicy;
 392         int iBlock_size;
 393         int iDfreeCacheTime;
 394         BOOL bPreexecClose;
 395         BOOL bRootpreexecClose;
 396         int  iCaseSensitive;
 397         BOOL bCasePreserve;
 398         BOOL bShortCasePreserve;
 399         BOOL bHideDotFiles;
 400         BOOL bHideSpecialFiles;
 401         BOOL bHideUnReadable;
 402         BOOL bHideUnWriteableFiles;
 403         BOOL bBrowseable;
 404         BOOL bAvailable;
 405         BOOL bRead_only;
 406         BOOL bNo_set_dir;
 407         BOOL bGuest_only;
 408         BOOL bGuest_ok;
 409         BOOL bPrint_ok;
 410         BOOL bMap_system;
 411         BOOL bMap_hidden;
 412         BOOL bMap_archive;
 413         BOOL bStoreDosAttributes;
 414         BOOL bDmapiSupport;
 415         BOOL bLocking;
 416         int iStrictLocking;
 417         BOOL bPosixLocking;
 418         BOOL bShareModes;
 419         BOOL bOpLocks;
 420         BOOL bLevel2OpLocks;
 421         BOOL bOnlyUser;
 422         BOOL bMangledNames;
 423         BOOL bWidelinks;
 424         BOOL bSymlinks;
 425         BOOL bSyncAlways;
 426         BOOL bStrictAllocate;
 427         BOOL bStrictSync;
 428         char magic_char;
 429         BOOL *copymap;
 430         BOOL bDeleteReadonly;
 431         BOOL bFakeOplocks;
 432         BOOL bDeleteVetoFiles;
 433         BOOL bDosFilemode;
 434         BOOL bDosFiletimes;
 435         BOOL bDosFiletimeResolution;
 436         BOOL bFakeDirCreateTimes;
 437         BOOL bBlockingLocks;
 438         BOOL bInheritPerms;
 439         BOOL bInheritACLS;
 440         BOOL bInheritOwner;
 441         BOOL bMSDfsRoot;
 442         BOOL bUseClientDriver;
 443         BOOL bDefaultDevmode;
 444         BOOL bForcePrintername;
 445         BOOL bNTAclSupport;
 446         BOOL bForceUnknownAclUser;
 447         BOOL bUseSendfile;
 448         BOOL bProfileAcls;
 449         BOOL bMap_acl_inherit;
 450         BOOL bAfs_Share;
 451         BOOL bEASupport;
 452         BOOL bAclCheckPermissions;
 453         BOOL bAclMapFullControl;
 454         BOOL bAclGroupControl;
 455         int iallocation_roundup_size;
 456         int iAioReadSize;
 457         int iAioWriteSize;
 458         int iMap_readonly;
 459         param_opt_struct *param_opt;
 460
 461         char dummy[3];          /* for alignment */
 462 } service;
 463
 464
 465 /* This is a default service used to prime a services structure */
 466 static service sDefault = {
 467         True,                   /* valid */
 468         False,                  /* not autoloaded */
 469         0,                      /* not a usershare */
 470         (time_t)0,              /* No last mod time */
 471         NULL,                   /* szService */
 472         NULL,                   /* szPath */
 473         NULL,                   /* szUsername */
 474         NULL,                   /* szInvalidUsers */
 475         NULL,                   /* szValidUsers */
 476         NULL,                   /* szAdminUsers */
 477         NULL,                   /* szCopy */
 478         NULL,                   /* szInclude */
 479         NULL,                   /* szPreExec */
 480         NULL,                   /* szPostExec */
 481         NULL,                   /* szRootPreExec */
 482         NULL,                   /* szRootPostExec */
 483         NULL,                   /* szCupsOptions */
 484         NULL,                   /* szPrintcommand */
 485         NULL,                   /* szLpqcommand */
 486         NULL,                   /* szLprmcommand */
 487         NULL,                   /* szLppausecommand */
 488         NULL,                   /* szLpresumecommand */
 489         NULL,                   /* szQueuepausecommand */
 490         NULL,                   /* szQueueresumecommand */
 491         NULL,                   /* szPrintername */
 492         NULL,                   /* szDontdescend */
 493         NULL,                   /* szHostsallow */
 494         NULL,                   /* szHostsdeny */
 495         NULL,                   /* szMagicScript */
 496         NULL,                   /* szMagicOutput */
 497         NULL,                   /* szMangledMap */
 498         NULL,                   /* szVetoFiles */
 499         NULL,                   /* szHideFiles */
 500         NULL,                   /* szVetoOplockFiles */
 501         NULL,                   /* comment */
 502         NULL,                   /* force user */
 503         NULL,                   /* force group */
 504         NULL,                   /* readlist */
 505         NULL,                   /* writelist */
 506         NULL,                   /* printer admin */
 507         NULL,                   /* volume */
 508         NULL,                   /* fstype */
 509         NULL,                   /* vfs objects */
 510         NULL,                   /* szMSDfsProxy */
 511         NULL,                   /* szAioWriteBehind */
 512         NULL,                   /* szDfree */
 513         0,                      /* iMinPrintSpace */
 514         1000,                   /* iMaxPrintJobs */
 515         0,                      /* iMaxReportedPrintJobs */
 516         0,                      /* iWriteCacheSize */
 517         0744,                   /* iCreate_mask */
 518         0000,                   /* iCreate_force_mode */
 519         0777,                   /* iSecurity_mask */
 520         0,                      /* iSecurity_force_mode */
 521         0755,                   /* iDir_mask */
 522         0000,                   /* iDir_force_mode */
 523         0777,                   /* iDir_Security_mask */
 524         0,                      /* iDir_Security_force_mode */
 525         0,                      /* iMaxConnections */
 526         CASE_LOWER,             /* iDefaultCase */
 527         DEFAULT_PRINTING,       /* iPrinting */
 528         2,                      /* iOplockContentionLimit */
 529         0,                      /* iCSCPolicy */
 530         1024,                   /* iBlock_size */
 531         0,                      /* iDfreeCacheTime */
 532         False,                  /* bPreexecClose */
 533         False,                  /* bRootpreexecClose */
 534         Auto,                   /* case sensitive */
 535         True,                   /* case preserve */
 536         True,                   /* short case preserve */
 537         True,                   /* bHideDotFiles */
 538         False,                  /* bHideSpecialFiles */
 539         False,                  /* bHideUnReadable */
 540         False,                  /* bHideUnWriteableFiles */
 541         True,                   /* bBrowseable */
 542         True,                   /* bAvailable */
 543         True,                   /* bRead_only */
 544         True,                   /* bNo_set_dir */
 545         False,                  /* bGuest_only */
 546         False,                  /* bGuest_ok */
 547         False,                  /* bPrint_ok */
 548         False,                  /* bMap_system */
 549         False,                  /* bMap_hidden */
 550         True,                   /* bMap_archive */
 551         False,                  /* bStoreDosAttributes */
 552         False,                  /* bDmapiSupport */
 553         True,                   /* bLocking */
 554         Auto,                   /* iStrictLocking */
 555         True,                   /* bPosixLocking */
 556         True,                   /* bShareModes */
 557         True,                   /* bOpLocks */
 558         True,                   /* bLevel2OpLocks */
 559         False,                  /* bOnlyUser */
 560         True,                   /* bMangledNames */
 561         True,                   /* bWidelinks */
 562         True,                   /* bSymlinks */
 563         False,                  /* bSyncAlways */
 564         False,                  /* bStrictAllocate */
 565         False,                  /* bStrictSync */
 566         '~',                    /* magic char */
 567         NULL,                   /* copymap */
 568         False,                  /* bDeleteReadonly */
 569         False,                  /* bFakeOplocks */
 570         False,                  /* bDeleteVetoFiles */
 571         False,                  /* bDosFilemode */
 572         True,                   /* bDosFiletimes */
 573         False,                  /* bDosFiletimeResolution */
 574         False,                  /* bFakeDirCreateTimes */
 575         True,                   /* bBlockingLocks */
 576         False,                  /* bInheritPerms */
 577         False,                  /* bInheritACLS */
 578         False,                  /* bInheritOwner */
 579         True,                   /* bMSDfsRoot */
 580         False,                  /* bUseClientDriver */
 581         True,                   /* bDefaultDevmode */
 582         False,                  /* bForcePrintername */
 583         True,                   /* bNTAclSupport */
 584         False,                  /* bForceUnknownAclUser */
 585         False,                  /* bUseSendfile */
 586         False,                  /* bProfileAcls */
 587         False,                  /* bMap_acl_inherit */
 588         False,                  /* bAfs_Share */
 589         False,                  /* bEASupport */
 590         True,                   /* bAclCheckPermissions */
 591         True,                   /* bAclMapFullControl */
 592         False,                  /* bAclGroupControl */
 593         SMB_ROUNDUP_ALLOCATION_SIZE,            /* iallocation_roundup_size */
 594         0,                      /* iAioReadSize */
 595         0,                      /* iAioWriteSize */
 596         MAP_READONLY_YES,       /* iMap_readonly */
 597
 598         NULL,                   /* Parametric options */
 599
 600         ""                      /* dummy */
 601 };
 602
 603 /* local variables */
 604 static service **ServicePtrs = NULL;
 605 static int iNumServices = 0;
 606 static int iServiceIndex = 0;
 607 static TDB_CONTEXT *ServiceHash;
 608 static int *invalid_services = NULL;
 609 static int num_invalid_services = 0;
 610 static BOOL bInGlobalSection = True;
 611 static BOOL bGlobalOnly = False;
 612 static int server_role;
 613 static int default_server_announce;
 614
 615 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
 616
 617 /* prototypes for the special type handlers */
 618 static BOOL handle_include( int snum, const char *pszParmValue, char **ptr);
 619 static BOOL handle_copy( int snum, const char *pszParmValue, char **ptr);
 620 static BOOL handle_netbios_name( int snum, const char *pszParmValue, char **ptr);
 621 static BOOL handle_idmap_uid( int snum, const char *pszParmValue, char **ptr);
 622 static BOOL handle_idmap_gid( int snum, const char *pszParmValue, char **ptr);
 623 static BOOL handle_debug_list( int snum, const char *pszParmValue, char **ptr );
 624 static BOOL handle_workgroup( int snum, const char *pszParmValue, char **ptr );
 625 static BOOL handle_netbios_aliases( int snum, const char *pszParmValue, char **ptr );
 626 static BOOL handle_netbios_scope( int snum, const char *pszParmValue, char **ptr );
 627 static BOOL handle_charset( int snum, const char *pszParmValue, char **ptr );
 628 static BOOL handle_printing( int snum, const char *pszParmValue, char **ptr);
 629
 630 static void set_server_role(void);
 631 static void set_default_server_announce_type(void);
 632 static void set_allowed_client_auth(void);
 633
 634 static const struct enum_list enum_protocol[] = {
 635         {PROTOCOL_NT1, "NT1"},
 636         {PROTOCOL_LANMAN2, "LANMAN2"},
 637         {PROTOCOL_LANMAN1, "LANMAN1"},
 638         {PROTOCOL_CORE, "CORE"},
 639         {PROTOCOL_COREPLUS, "COREPLUS"},
 640         {PROTOCOL_COREPLUS, "CORE+"},
 641         {-1, NULL}
 642 };
 643
 644 static const struct enum_list enum_security[] = {
 645         {SEC_SHARE, "SHARE"},
 646         {SEC_USER, "USER"},
 647         {SEC_SERVER, "SERVER"},
 648         {SEC_DOMAIN, "DOMAIN"},
 649 #ifdef HAVE_ADS
 650         {SEC_ADS, "ADS"},
 651 #endif
 652         {-1, NULL}
 653 };
 654
 655 static const struct enum_list enum_printing[] = {
 656         {PRINT_SYSV, "sysv"},
 657         {PRINT_AIX, "aix"},
 658         {PRINT_HPUX, "hpux"},
 659         {PRINT_BSD, "bsd"},
 660         {PRINT_QNX, "qnx"},
 661         {PRINT_PLP, "plp"},
 662         {PRINT_LPRNG, "lprng"},
 663         {PRINT_CUPS, "cups"},
 664         {PRINT_IPRINT, "iprint"},
 665         {PRINT_LPRNT, "nt"},
 666         {PRINT_LPROS2, "os2"},
 667 #ifdef DEVELOPER
 668         {PRINT_TEST, "test"},
 669         {PRINT_VLP, "vlp"},
 670 #endif /* DEVELOPER */
 671         {-1, NULL}
 672 };
 673
 674 static const struct enum_list enum_ldap_ssl[] = {
 675 #ifdef WITH_LDAP_SAMCONFIG
 676         {LDAP_SSL_ON, "Yes"},
 677         {LDAP_SSL_ON, "yes"},
 678         {LDAP_SSL_ON, "on"},
 679         {LDAP_SSL_ON, "On"},
 680 #endif
 681         {LDAP_SSL_OFF, "no"},
 682         {LDAP_SSL_OFF, "No"},
 683         {LDAP_SSL_OFF, "off"},
 684         {LDAP_SSL_OFF, "Off"},
 685         {LDAP_SSL_START_TLS, "start tls"},
 686         {LDAP_SSL_START_TLS, "Start_tls"},
 687         {-1, NULL}
 688 };
 689
 690 static const struct enum_list enum_ldap_passwd_sync[] = {
 691         {LDAP_PASSWD_SYNC_OFF, "no"},
 692         {LDAP_PASSWD_SYNC_OFF, "No"},
 693         {LDAP_PASSWD_SYNC_OFF, "off"},
 694         {LDAP_PASSWD_SYNC_OFF, "Off"},
 695         {LDAP_PASSWD_SYNC_ON, "Yes"},
 696         {LDAP_PASSWD_SYNC_ON, "yes"},
 697         {LDAP_PASSWD_SYNC_ON, "on"},
 698         {LDAP_PASSWD_SYNC_ON, "On"},
 699         {LDAP_PASSWD_SYNC_ONLY, "Only"},
 700         {LDAP_PASSWD_SYNC_ONLY, "only"},
 701         {-1, NULL}
 702 };
 703
 704 /* Types of machine we can announce as. */
 705 #define ANNOUNCE_AS_NT_SERVER 1
 706 #define ANNOUNCE_AS_WIN95 2
 707 #define ANNOUNCE_AS_WFW 3
 708 #define ANNOUNCE_AS_NT_WORKSTATION 4
 709
 710 static const struct enum_list enum_announce_as[] = {
 711         {ANNOUNCE_AS_NT_SERVER, "NT"},
 712         {ANNOUNCE_AS_NT_SERVER, "NT Server"},
 713         {ANNOUNCE_AS_NT_WORKSTATION, "NT Workstation"},
 714         {ANNOUNCE_AS_WIN95, "win95"},
 715         {ANNOUNCE_AS_WFW, "WfW"},
 716         {-1, NULL}
 717 };
 718
 719 static const struct enum_list enum_map_readonly[] = {
 720         {MAP_READONLY_NO, "no"},
 721         {MAP_READONLY_NO, "false"},
 722         {MAP_READONLY_NO, "0"},
 723         {MAP_READONLY_YES, "yes"},
 724         {MAP_READONLY_YES, "true"},
 725         {MAP_READONLY_YES, "1"},
 726         {MAP_READONLY_PERMISSIONS, "permissions"},
 727         {MAP_READONLY_PERMISSIONS, "perms"},
 728         {-1, NULL}
 729 };
 730
 731 static const struct enum_list enum_case[] = {
 732         {CASE_LOWER, "lower"},
 733         {CASE_UPPER, "upper"},
 734         {-1, NULL}
 735 };
 736
 737 static const struct enum_list enum_bool_auto[] = {
 738         {False, "No"},
 739         {False, "False"},
 740         {False, "0"},
 741         {True, "Yes"},
 742         {True, "True"},
 743         {True, "1"},
 744         {Auto, "Auto"},
 745         {-1, NULL}
 746 };
 747
 748 /* Client-side offline caching policy types */
 749 #define CSC_POLICY_MANUAL 0
 750 #define CSC_POLICY_DOCUMENTS 1
 751 #define CSC_POLICY_PROGRAMS 2
 752 #define CSC_POLICY_DISABLE 3
 753
 754 static const struct enum_list enum_csc_policy[] = {
 755         {CSC_POLICY_MANUAL, "manual"},
 756         {CSC_POLICY_DOCUMENTS, "documents"},
 757         {CSC_POLICY_PROGRAMS, "programs"},
 758         {CSC_POLICY_DISABLE, "disable"},
 759         {-1, NULL}
 760 };
 761
 762 /* SMB signing types. */
 763 static const struct enum_list enum_smb_signing_vals[] = {
 764         {False, "No"},
 765         {False, "False"},
 766         {False, "0"},
 767         {False, "Off"},
 768         {False, "disabled"},
 769         {True, "Yes"},
 770         {True, "True"},
 771         {True, "1"},
 772         {True, "On"},
 773         {True, "enabled"},
 774         {Auto, "auto"},
 775         {Required, "required"},
 776         {Required, "mandatory"},
 777         {Required, "force"},
 778         {Required, "forced"},
 779         {Required, "enforced"},
 780         {-1, NULL}
 781 };
 782
 783 /* ACL compatibility options. */
 784 static const struct enum_list enum_acl_compat_vals[] = {
 785     { ACL_COMPAT_AUTO, "auto" },
 786     { ACL_COMPAT_WINNT, "winnt" },
 787     { ACL_COMPAT_WIN2K, "win2k" },
 788     { -1, NULL}
 789 };
 790
 791 /*
 792    Do you want session setups at user level security with a invalid
 793    password to be rejected or allowed in as guest? WinNT rejects them
 794    but it can be a pain as it means "net view" needs to use a password
 795
 796    You have 3 choices in the setting of map_to_guest:
 797
 798    "Never" means session setups with an invalid password
 799    are rejected. This is the default.
 800
 801    "Bad User" means session setups with an invalid password
 802    are rejected, unless the username does not exist, in which case it
 803    is treated as a guest login
 804
 805    "Bad Password" means session setups with an invalid password
 806    are treated as a guest login
 807
 808    Note that map_to_guest only has an effect in user or server
 809    level security.
 810 */
 811
 812 static const struct enum_list enum_map_to_guest[] = {
 813         {NEVER_MAP_TO_GUEST, "Never"},
 814         {MAP_TO_GUEST_ON_BAD_USER, "Bad User"},
 815         {MAP_TO_GUEST_ON_BAD_PASSWORD, "Bad Password"},
 816         {MAP_TO_GUEST_ON_BAD_UID, "Bad Uid"},
 817         {-1, NULL}
 818 };
 819
 820 /* Note: We do not initialise the defaults union - it is not allowed in ANSI C
 821  *
 822  * The FLAG_HIDE is explicit. Paramters set this way do NOT appear in any edit
 823  * screen in SWAT. This is used to exclude parameters as well as to squash all
 824  * parameters that have been duplicated by pseudonyms.
 825  *
 826  * NOTE: To display a parameter in BASIC view set FLAG_BASIC
 827  *       Any parameter that does NOT have FLAG_ADVANCED will not disply at all
 828  *       Set FLAG_SHARE and FLAG_PRINT to specifically display parameters in
 829  *        respective views.
 830  *
 831  * NOTE2: Handling of duplicated (synonym) paramters:
 832  *      Only the first occurance of a parameter should be enabled by FLAG_BASIC
 833  *      and/or FLAG_ADVANCED. All duplicates following the first mention should be
 834  *      set to FLAG_HIDE. ie: Make you must place the parameter that has the preferred
 835  *      name first, and all synonyms must follow it with the FLAG_HIDE attribute.
 836  */
 837
 838 static struct parm_struct parm_table[] = {
 839         {N_("Base Options"), P_SEP, P_SEPARATOR},
 840
 841         {"dos charset", P_STRING, P_GLOBAL, &Globals.dos_charset, handle_charset, NULL, FLAG_ADVANCED},
 842         {"unix charset", P_STRING, P_GLOBAL, &Globals.unix_charset, handle_charset, NULL, FLAG_ADVANCED},
 843         {"display charset", P_STRING, P_GLOBAL, &Globals.display_charset, handle_charset, NULL, FLAG_ADVANCED},
 844         {"comment", P_STRING, P_LOCAL, &sDefault.comment, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 845         {"path", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 846         {"directory", P_STRING, P_LOCAL, &sDefault.szPath, NULL, NULL, FLAG_HIDE},
 847         {"workgroup", P_USTRING, P_GLOBAL, &Globals.szWorkgroup, handle_workgroup, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 848 #ifdef WITH_ADS
 849         {"realm", P_USTRING, P_GLOBAL, &Globals.szRealm, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 850 #endif
 851         {"netbios name", P_USTRING, P_GLOBAL, &Globals.szNetbiosName, handle_netbios_name, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 852         {"netbios aliases", P_LIST, P_GLOBAL, &Globals.szNetbiosAliases, handle_netbios_aliases,  NULL, FLAG_ADVANCED},
 853         {"netbios scope", P_USTRING, P_GLOBAL, &Globals.szNetbiosScope, handle_netbios_scope,  NULL, FLAG_ADVANCED},
 854         {"server string", P_STRING, P_GLOBAL, &Globals.szServerString, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED },
 855         {"interfaces", P_LIST, P_GLOBAL, &Globals.szInterfaces, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 856         {"bind interfaces only", P_BOOL, P_GLOBAL, &Globals.bBindInterfacesOnly, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 857
 858         {N_("Security Options"), P_SEP, P_SEPARATOR},
 859
 860         {"security", P_ENUM, P_GLOBAL, &Globals.security, NULL, enum_security, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 861         {"auth methods", P_LIST, P_GLOBAL, &Globals.AuthMethods, NULL, NULL, FLAG_ADVANCED},
 862         {"encrypt passwords", P_BOOL, P_GLOBAL, &Globals.bEncryptPasswords, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
 863         {"update encrypted", P_BOOL, P_GLOBAL, &Globals.bUpdateEncrypt, NULL, NULL, FLAG_ADVANCED},
 864         {"client schannel", P_ENUM, P_GLOBAL, &Globals.clientSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 865         {"server schannel", P_ENUM, P_GLOBAL, &Globals.serverSchannel, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
 866         {"allow trusted domains", P_BOOL, P_GLOBAL, &Globals.bAllowTrustedDomains, NULL, NULL, FLAG_ADVANCED},
 867         {"hosts equiv", P_STRING, P_GLOBAL, &Globals.szHostsEquiv, NULL, NULL, FLAG_ADVANCED},
 868         {"map to guest", P_ENUM, P_GLOBAL, &Globals.map_to_guest, NULL, enum_map_to_guest, FLAG_ADVANCED},
 869         {"null passwords", P_BOOL, P_GLOBAL, &Globals.bNullPasswords, NULL, NULL, FLAG_ADVANCED},
 870         {"obey pam restrictions", P_BOOL, P_GLOBAL, &Globals.bObeyPamRestrictions, NULL, NULL, FLAG_ADVANCED},
 871         {"password server", P_STRING, P_GLOBAL, &Globals.szPasswordServer, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 872         {"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, FLAG_ADVANCED},
 873         {"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, FLAG_ADVANCED},
 874         {"passdb backend", P_STRING, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 875         {"algorithmic rid base", P_INTEGER, P_GLOBAL, &Globals.AlgorithmicRidBase, NULL, NULL, FLAG_ADVANCED},
 876         {"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_ADVANCED},
 877         {"root dir", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 878         {"root", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_HIDE},
 879         {"guest account", P_STRING, P_GLOBAL, &Globals.szGuestaccount, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
 880         {"enable privileges", P_BOOL, P_GLOBAL, &Globals.bEnablePrivileges, NULL, NULL, FLAG_ADVANCED},
 881
 882         {"pam password change", P_BOOL, P_GLOBAL, &Globals.bPamPasswordChange, NULL, NULL, FLAG_ADVANCED},
 883         {"passwd program", P_STRING, P_GLOBAL, &Globals.szPasswdProgram, NULL, NULL, FLAG_ADVANCED},
 884         {"passwd chat", P_STRING, P_GLOBAL, &Globals.szPasswdChat, NULL, NULL, FLAG_ADVANCED},
 885         {"passwd chat debug", P_BOOL, P_GLOBAL, &Globals.bPasswdChatDebug, NULL, NULL, FLAG_ADVANCED},
 886         {"passwd chat timeout", P_INTEGER, P_GLOBAL, &Globals.iPasswdChatTimeout, NULL, NULL, FLAG_ADVANCED},
 887         {"check password script", P_STRING, P_GLOBAL, &Globals.szCheckPasswordScript, NULL, NULL, FLAG_ADVANCED},
 888         {"username map", P_STRING, P_GLOBAL, &Globals.szUsernameMap, NULL, NULL, FLAG_ADVANCED},
 889         {"password level", P_INTEGER, P_GLOBAL, &Globals.pwordlevel, NULL, NULL, FLAG_ADVANCED},
 890         {"username level", P_INTEGER, P_GLOBAL, &Globals.unamelevel, NULL, NULL, FLAG_ADVANCED},
 891         {"unix password sync", P_BOOL, P_GLOBAL, &Globals.bUnixPasswdSync, NULL, NULL, FLAG_ADVANCED},
 892         {"restrict anonymous", P_INTEGER, P_GLOBAL, &Globals.restrict_anonymous, NULL, NULL, FLAG_ADVANCED},
 893         {"lanman auth", P_BOOL, P_GLOBAL, &Globals.bLanmanAuth, NULL, NULL, FLAG_ADVANCED},
 894         {"ntlm auth", P_BOOL, P_GLOBAL, &Globals.bNTLMAuth, NULL, NULL, FLAG_ADVANCED},
 895         {"client NTLMv2 auth", P_BOOL, P_GLOBAL, &Globals.bClientNTLMv2Auth, NULL, NULL, FLAG_ADVANCED},
 896         {"client lanman auth", P_BOOL, P_GLOBAL, &Globals.bClientLanManAuth, NULL, NULL, FLAG_ADVANCED},
 897         {"client plaintext auth", P_BOOL, P_GLOBAL, &Globals.bClientPlaintextAuth, NULL, NULL, FLAG_ADVANCED},
 898
 899         {"username", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 900         {"user", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 901         {"users", P_STRING, P_LOCAL, &sDefault.szUsername, NULL, NULL, FLAG_HIDE},
 902
 903         {"invalid users", P_LIST, P_LOCAL, &sDefault.szInvalidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 904         {"valid users", P_LIST, P_LOCAL, &sDefault.szValidUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 905         {"admin users", P_LIST, P_LOCAL, &sDefault.szAdminUsers, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 906         {"read list", P_LIST, P_LOCAL, &sDefault.readlist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 907         {"write list", P_LIST, P_LOCAL, &sDefault.writelist, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 908         {"printer admin", P_LIST, P_LOCAL, &sDefault.printer_admin, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_PRINT | FLAG_DEPRECATED },
 909         {"force user", P_STRING, P_LOCAL, &sDefault.force_user, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 910         {"force group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 911         {"group", P_STRING, P_LOCAL, &sDefault.force_group, NULL, NULL, FLAG_ADVANCED},
 912
 913         {"read only", P_BOOL, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE},
 914         {"write ok", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 915         {"writeable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 916         {"writable", P_BOOLREV, P_LOCAL, &sDefault.bRead_only, NULL, NULL, FLAG_HIDE},
 917
 918         {"acl check permissions", P_BOOL, P_LOCAL, &sDefault.bAclCheckPermissions, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 919         {"acl group control", P_BOOL, P_LOCAL, &sDefault.bAclGroupControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE | FLAG_DEPRECATED },
 920         {"acl map full control", P_BOOL, P_LOCAL, &sDefault.bAclMapFullControl, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 921         {"create mask", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 922         {"create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_mask, NULL, NULL, FLAG_HIDE},
 923         {"force create mode", P_OCTAL, P_LOCAL, &sDefault.iCreate_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 924         {"security mask", P_OCTAL, P_LOCAL, &sDefault.iSecurity_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 925         {"force security mode", P_OCTAL, P_LOCAL, &sDefault.iSecurity_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 926         {"directory mask", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 927         {"directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 928         {"force directory mode", P_OCTAL, P_LOCAL, &sDefault.iDir_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 929         {"directory security mask", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_mask, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 930         {"force directory security mode", P_OCTAL, P_LOCAL, &sDefault.iDir_Security_force_mode, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 931         {"force unknown acl user", P_BOOL, P_LOCAL, &sDefault.bForceUnknownAclUser, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 932         {"inherit permissions", P_BOOL, P_LOCAL, &sDefault.bInheritPerms, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 933         {"inherit acls", P_BOOL, P_LOCAL, &sDefault.bInheritACLS, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 934         {"inherit owner", P_BOOL, P_LOCAL, &sDefault.bInheritOwner, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 935         {"guest only", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
 936         {"only guest", P_BOOL, P_LOCAL, &sDefault.bGuest_only, NULL, NULL, FLAG_HIDE},
 937
 938         {"guest ok", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 939         {"public", P_BOOL, P_LOCAL, &sDefault.bGuest_ok, NULL, NULL, FLAG_HIDE},
 940
 941         {"only user", P_BOOL, P_LOCAL, &sDefault.bOnlyUser, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
 942         {"hosts allow", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 943         {"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_HIDE},
 944         {"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
 945         {"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_HIDE},
 946         {"preload modules", P_LIST, P_GLOBAL, &Globals.szPreloadModules, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 947         {"use kerberos keytab", P_BOOL, P_GLOBAL, &Globals.bUseKerberosKeytab, NULL, NULL, FLAG_ADVANCED},
 948
 949         {N_("Logging Options"), P_SEP, P_SEPARATOR},
 950
 951         {"log level", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_ADVANCED},
 952         {"debuglevel", P_STRING, P_GLOBAL, &Globals.szLogLevel, handle_debug_list, NULL, FLAG_HIDE},
 953         {"syslog", P_INTEGER, P_GLOBAL, &Globals.syslog, NULL, NULL, FLAG_ADVANCED},
 954         {"syslog only", P_BOOL, P_GLOBAL, &Globals.bSyslogOnly, NULL, NULL, FLAG_ADVANCED},
 955         {"log file", P_STRING, P_GLOBAL, &Globals.szLogFile, NULL, NULL, FLAG_ADVANCED},
 956
 957         {"max log size", P_INTEGER, P_GLOBAL, &Globals.max_log_size, NULL, NULL, FLAG_ADVANCED},
 958         {"debug timestamp", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 959         {"timestamp logs", P_BOOL, P_GLOBAL, &Globals.bTimestampLogs, NULL, NULL, FLAG_ADVANCED},
 960         {"debug hires timestamp", P_BOOL, P_GLOBAL, &Globals.bDebugHiresTimestamp, NULL, NULL, FLAG_ADVANCED},
 961         {"debug pid", P_BOOL, P_GLOBAL, &Globals.bDebugPid, NULL, NULL, FLAG_ADVANCED},
 962         {"debug uid", P_BOOL, P_GLOBAL, &Globals.bDebugUid, NULL, NULL, FLAG_ADVANCED},
 963
 964         {N_("Protocol Options"), P_SEP, P_SEPARATOR},
 965
 966         {"allocation roundup size", P_INTEGER, P_LOCAL, &sDefault.iallocation_roundup_size, NULL, NULL, FLAG_ADVANCED},
 967         {"aio read size", P_INTEGER, P_LOCAL, &sDefault.iAioReadSize, NULL, NULL, FLAG_ADVANCED},
 968         {"aio write size", P_INTEGER, P_LOCAL, &sDefault.iAioWriteSize, NULL, NULL, FLAG_ADVANCED},
 969         {"aio write behind", P_STRING, P_LOCAL, &sDefault.szAioWriteBehind, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
 970         {"smb ports", P_STRING, P_GLOBAL, &Globals.smb_ports, NULL, NULL, FLAG_ADVANCED},
 971         {"large readwrite", P_BOOL, P_GLOBAL, &Globals.bLargeReadwrite, NULL, NULL, FLAG_ADVANCED},
 972         {"max protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 973         {"protocol", P_ENUM, P_GLOBAL, &Globals.maxprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 974         {"min protocol", P_ENUM, P_GLOBAL, &Globals.minprotocol, NULL, enum_protocol, FLAG_ADVANCED},
 975         {"read bmpx", P_BOOL, P_GLOBAL, &Globals.bReadbmpx, NULL, NULL, FLAG_ADVANCED},
 976         {"read raw", P_BOOL, P_GLOBAL, &Globals.bReadRaw, NULL, NULL, FLAG_ADVANCED},
 977         {"write raw", P_BOOL, P_GLOBAL, &Globals.bWriteRaw, NULL, NULL, FLAG_ADVANCED},
 978         {"disable netbios", P_BOOL, P_GLOBAL, &Globals.bDisableNetbios, NULL, NULL, FLAG_ADVANCED},
 979         {"reset on zero vc", P_BOOL, P_GLOBAL, &Globals.bResetOnZeroVC, NULL, NULL, FLAG_ADVANCED},
 980
 981         {"acl compatibility", P_STRING, P_GLOBAL, &Globals.szAclCompat, NULL,  enum_acl_compat_vals, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 982         {"defer sharing violations", P_BOOL, P_GLOBAL, &Globals.bDeferSharingViolations, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
 983         {"ea support", P_BOOL, P_LOCAL, &sDefault.bEASupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 984         {"nt acl support", P_BOOL, P_LOCAL, &sDefault.bNTAclSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 985         {"nt pipe support", P_BOOL, P_GLOBAL, &Globals.bNTPipeSupport, NULL, NULL, FLAG_ADVANCED},
 986         {"nt status support", P_BOOL, P_GLOBAL, &Globals.bNTStatusSupport, NULL, NULL, FLAG_ADVANCED},
 987         {"profile acls", P_BOOL, P_LOCAL, &sDefault.bProfileAcls, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
 988
 989         {"announce version", P_STRING, P_GLOBAL, &Globals.szAnnounceVersion, NULL, NULL, FLAG_ADVANCED},
 990         {"announce as", P_ENUM, P_GLOBAL, &Globals.announce_as, NULL, enum_announce_as,  FLAG_ADVANCED},
 991         {"map acl inherit", P_BOOL, P_LOCAL, &sDefault.bMap_acl_inherit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 992         {"afs share", P_BOOL, P_LOCAL, &sDefault.bAfs_Share, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
 993         {"max mux", P_INTEGER, P_GLOBAL, &Globals.max_mux, NULL, NULL, FLAG_ADVANCED},
 994         {"max xmit", P_INTEGER, P_GLOBAL, &Globals.max_xmit, NULL, NULL, FLAG_ADVANCED},
 995
 996         {"name resolve order", P_STRING, P_GLOBAL, &Globals.szNameResolveOrder, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
 997         {"max ttl", P_INTEGER, P_GLOBAL, &Globals.max_ttl, NULL, NULL, FLAG_ADVANCED},
 998         {"max wins ttl", P_INTEGER, P_GLOBAL, &Globals.max_wins_ttl, NULL, NULL, FLAG_ADVANCED},
 999         {"min wins ttl", P_INTEGER, P_GLOBAL, &Globals.min_wins_ttl, NULL, NULL, FLAG_ADVANCED},
1000         {"time server", P_BOOL, P_GLOBAL, &Globals.bTimeServer, NULL, NULL, FLAG_ADVANCED},
1001         {"unix extensions", P_BOOL, P_GLOBAL, &Globals.bUnixExtensions, NULL, NULL, FLAG_ADVANCED},
1002         {"use spnego", P_BOOL, P_GLOBAL, &Globals.bUseSpnego, NULL, NULL, FLAG_ADVANCED},
1003         {"client signing", P_ENUM, P_GLOBAL, &Globals.client_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1004         {"server signing", P_ENUM, P_GLOBAL, &Globals.server_signing, NULL, enum_smb_signing_vals, FLAG_ADVANCED},
1005         {"client use spnego", P_BOOL, P_GLOBAL, &Globals.bClientUseSpnego, NULL, NULL, FLAG_ADVANCED},
1006
1007         {"enable asu support", P_BOOL, P_GLOBAL, &Globals.bASUSupport, NULL, NULL, FLAG_ADVANCED},
1008         {"svcctl list", P_LIST, P_GLOBAL, &Globals.szServicesList, NULL, NULL, FLAG_ADVANCED},
1009
1010         {N_("Tuning Options"), P_SEP, P_SEPARATOR},
1011
1012         {"block size", P_INTEGER, P_LOCAL, &sDefault.iBlock_size, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1013         {"change notify timeout", P_INTEGER, P_GLOBAL, &Globals.change_notify_timeout, NULL, NULL, FLAG_ADVANCED},
1014         {"deadtime", P_INTEGER, P_GLOBAL, &Globals.deadtime, NULL, NULL, FLAG_ADVANCED},
1015         {"getwd cache", P_BOOL, P_GLOBAL, &use_getwd_cache, NULL, NULL, FLAG_ADVANCED},
1016         {"keepalive", P_INTEGER, P_GLOBAL, &keepalive, NULL, NULL, FLAG_ADVANCED},
1017         {"kernel change notify", P_BOOL, P_GLOBAL, &Globals.bKernelChangeNotify, NULL, NULL, FLAG_ADVANCED},
1018         {"fam change notify", P_BOOL, P_GLOBAL, &Globals.bFamChangeNotify, NULL, NULL, FLAG_ADVANCED},
1019
1020         {"lpq cache time", P_INTEGER, P_GLOBAL, &Globals.lpqcachetime, NULL, NULL, FLAG_ADVANCED},
1021         {"max smbd processes", P_INTEGER, P_GLOBAL, &Globals.iMaxSmbdProcesses, NULL, NULL, FLAG_ADVANCED},
1022         {"max connections", P_INTEGER, P_LOCAL, &sDefault.iMaxConnections, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1023         {"paranoid server security", P_BOOL, P_GLOBAL, &Globals.paranoid_server_security, NULL, NULL, FLAG_ADVANCED},
1024         {"max disk size", P_INTEGER, P_GLOBAL, &Globals.maxdisksize, NULL, NULL, FLAG_ADVANCED},
1025         {"max open files", P_INTEGER, P_GLOBAL, &Globals.max_open_files, NULL, NULL, FLAG_ADVANCED},
1026         {"min print space", P_INTEGER, P_LOCAL, &sDefault.iMinPrintSpace, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1027         {"open files database hash size", P_INTEGER, P_GLOBAL, &Globals.open_files_db_hash_size, NULL, NULL, FLAG_ADVANCED},
1028
1029         {"socket options", P_GSTRING, P_GLOBAL, user_socket_options, NULL, NULL, FLAG_ADVANCED},
1030         {"strict allocate", P_BOOL, P_LOCAL, &sDefault.bStrictAllocate, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1031         {"strict sync", P_BOOL, P_LOCAL, &sDefault.bStrictSync, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1032         {"sync always", P_BOOL, P_LOCAL, &sDefault.bSyncAlways, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1033         {"use mmap", P_BOOL, P_GLOBAL, &Globals.bUseMmap, NULL, NULL, FLAG_ADVANCED},
1034         {"use sendfile", P_BOOL, P_LOCAL, &sDefault.bUseSendfile, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1035         {"hostname lookups", P_BOOL, P_GLOBAL, &Globals.bHostnameLookups, NULL, NULL, FLAG_ADVANCED},
1036         {"write cache size", P_INTEGER, P_LOCAL, &sDefault.iWriteCacheSize, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_DEPRECATED},
1037
1038         {"name cache timeout", P_INTEGER, P_GLOBAL, &Globals.name_cache_timeout, NULL, NULL, FLAG_ADVANCED},
1039
1040         {N_("Printing Options"), P_SEP, P_SEPARATOR},
1041
1042         {"max reported print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxReportedPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1043         {"max print jobs", P_INTEGER, P_LOCAL, &sDefault.iMaxPrintJobs, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1044         {"load printers", P_BOOL, P_GLOBAL, &Globals.bLoadPrinters, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1045         {"printcap cache time", P_INTEGER, P_GLOBAL, &Globals.PrintcapCacheTime, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1046         {"printcap name", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1047         {"printcap", P_STRING, P_GLOBAL, &Globals.szPrintcapname, NULL, NULL, FLAG_HIDE},
1048         {"printable", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1049         {"print ok", P_BOOL, P_LOCAL, &sDefault.bPrint_ok, NULL, NULL, FLAG_HIDE},
1050         {"printing", P_ENUM, P_LOCAL, &sDefault.iPrinting, handle_printing, enum_printing, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1051         {"cups options", P_STRING, P_LOCAL, &sDefault.szCupsOptions, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1052         {"cups server", P_STRING, P_GLOBAL, &Globals.szCupsServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1053         {"iprint server", P_STRING, P_GLOBAL, &Globals.szIPrintServer, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1054         {"print command", P_STRING, P_LOCAL, &sDefault.szPrintcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1055         {"disable spoolss", P_BOOL, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1056         {"enable spoolss", P_BOOLREV, P_GLOBAL, &Globals.bDisableSpoolss, NULL, NULL, FLAG_HIDE},
1057         {"lpq command", P_STRING, P_LOCAL, &sDefault.szLpqcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1058         {"lprm command", P_STRING, P_LOCAL, &sDefault.szLprmcommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1059         {"lppause command", P_STRING, P_LOCAL, &sDefault.szLppausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1060         {"lpresume command", P_STRING, P_LOCAL, &sDefault.szLpresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1061         {"queuepause command", P_STRING, P_LOCAL, &sDefault.szQueuepausecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1062         {"queueresume command", P_STRING, P_LOCAL, &sDefault.szQueueresumecommand, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT | FLAG_GLOBAL},
1063
1064         {"addport command", P_STRING, P_GLOBAL, &Globals.szAddPortCommand, NULL, NULL, FLAG_ADVANCED},
1065         {"enumports command", P_STRING, P_GLOBAL, &Globals.szEnumPortsCommand, NULL, NULL, FLAG_ADVANCED},
1066         {"addprinter command", P_STRING, P_GLOBAL, &Globals.szAddPrinterCommand, NULL, NULL, FLAG_ADVANCED},
1067         {"deleteprinter command", P_STRING, P_GLOBAL, &Globals.szDeletePrinterCommand, NULL, NULL, FLAG_ADVANCED},
1068         {"show add printer wizard", P_BOOL, P_GLOBAL, &Globals.bMsAddPrinterWizard, NULL, NULL, FLAG_ADVANCED},
1069         {"os2 driver map", P_STRING, P_GLOBAL, &Globals.szOs2DriverMap, NULL, NULL, FLAG_ADVANCED},
1070
1071         {"printer name", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1072         {"printer", P_STRING, P_LOCAL, &sDefault.szPrintername, NULL, NULL, FLAG_HIDE},
1073         {"use client driver", P_BOOL, P_LOCAL, &sDefault.bUseClientDriver, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1074         {"default devmode", P_BOOL, P_LOCAL, &sDefault.bDefaultDevmode, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1075         {"force printername", P_BOOL, P_LOCAL, &sDefault.bForcePrintername, NULL, NULL, FLAG_ADVANCED | FLAG_PRINT},
1076
1077         {N_("Filename Handling"), P_SEP, P_SEPARATOR},
1078         {"mangling method", P_STRING, P_GLOBAL, &Globals.szManglingMethod, NULL, NULL, FLAG_ADVANCED},
1079         {"mangle prefix", P_INTEGER, P_GLOBAL, &Globals.mangle_prefix, NULL, NULL, FLAG_ADVANCED},
1080
1081         {"default case", P_ENUM, P_LOCAL, &sDefault.iDefaultCase, NULL, enum_case, FLAG_ADVANCED | FLAG_SHARE},
1082         {"case sensitive", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1083         {"casesignames", P_ENUM, P_LOCAL, &sDefault.iCaseSensitive, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_HIDE},
1084         {"preserve case", P_BOOL, P_LOCAL, &sDefault.bCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1085         {"short preserve case", P_BOOL, P_LOCAL, &sDefault.bShortCasePreserve, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1086         {"mangling char", P_CHAR, P_LOCAL, &sDefault.magic_char, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1087         {"hide dot files", P_BOOL, P_LOCAL, &sDefault.bHideDotFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1088         {"hide special files", P_BOOL, P_LOCAL, &sDefault.bHideSpecialFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1089         {"hide unreadable", P_BOOL, P_LOCAL, &sDefault.bHideUnReadable, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1090         {"hide unwriteable files", P_BOOL, P_LOCAL, &sDefault.bHideUnWriteableFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1091         {"delete veto files", P_BOOL, P_LOCAL, &sDefault.bDeleteVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1092         {"veto files", P_STRING, P_LOCAL, &sDefault.szVetoFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1093         {"hide files", P_STRING, P_LOCAL, &sDefault.szHideFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1094         {"veto oplock files", P_STRING, P_LOCAL, &sDefault.szVetoOplockFiles, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL },
1095         {"map archive", P_BOOL, P_LOCAL, &sDefault.bMap_archive, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1096         {"map hidden", P_BOOL, P_LOCAL, &sDefault.bMap_hidden, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1097         {"map system", P_BOOL, P_LOCAL, &sDefault.bMap_system, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1098         {"map readonly", P_ENUM, P_LOCAL, &sDefault.iMap_readonly, NULL, enum_map_readonly, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1099         {"mangled names", P_BOOL, P_LOCAL, &sDefault.bMangledNames, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1100         {"mangled map", P_STRING, P_LOCAL, &sDefault.szMangledMap, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL | FLAG_DEPRECATED },
1101         {"max stat cache size", P_INTEGER, P_GLOBAL, &Globals.iMaxStatCacheSize, NULL, NULL, FLAG_ADVANCED},
1102         {"stat cache", P_BOOL, P_GLOBAL, &Globals.bStatCache, NULL, NULL, FLAG_ADVANCED},
1103         {"store dos attributes", P_BOOL, P_LOCAL, &sDefault.bStoreDosAttributes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1104         {"dmapi support", P_BOOL, P_LOCAL, &sDefault.bDmapiSupport, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1105
1106
1107         {N_("Domain Options"), P_SEP, P_SEPARATOR},
1108
1109         {"machine password timeout", P_INTEGER, P_GLOBAL, &Globals.machine_password_timeout, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1110
1111         {N_("Logon Options"), P_SEP, P_SEPARATOR},
1112
1113         {"add user script", P_STRING, P_GLOBAL, &Globals.szAddUserScript, NULL, NULL, FLAG_ADVANCED},
1114         {"rename user script", P_STRING, P_GLOBAL, &Globals.szRenameUserScript, NULL, NULL, FLAG_ADVANCED},
1115         {"delete user script", P_STRING, P_GLOBAL, &Globals.szDelUserScript, NULL, NULL, FLAG_ADVANCED},
1116         {"add group script", P_STRING, P_GLOBAL, &Globals.szAddGroupScript, NULL, NULL, FLAG_ADVANCED},
1117         {"delete group script", P_STRING, P_GLOBAL, &Globals.szDelGroupScript, NULL, NULL, FLAG_ADVANCED},
1118         {"add user to group script", P_STRING, P_GLOBAL, &Globals.szAddUserToGroupScript, NULL, NULL, FLAG_ADVANCED},
1119         {"delete user from group script", P_STRING, P_GLOBAL, &Globals.szDelUserFromGroupScript, NULL, NULL, FLAG_ADVANCED},
1120         {"set primary group script", P_STRING, P_GLOBAL, &Globals.szSetPrimaryGroupScript, NULL, NULL, FLAG_ADVANCED},
1121         {"add machine script", P_STRING, P_GLOBAL, &Globals.szAddMachineScript, NULL, NULL, FLAG_ADVANCED},
1122         {"shutdown script", P_STRING, P_GLOBAL, &Globals.szShutdownScript, NULL, NULL, FLAG_ADVANCED},
1123         {"abort shutdown script", P_STRING, P_GLOBAL, &Globals.szAbortShutdownScript, NULL, NULL, FLAG_ADVANCED},
1124         {"username map script", P_STRING, P_GLOBAL, &Globals.szUsernameMapScript, NULL, NULL, FLAG_ADVANCED},
1125
1126         {"logon script", P_STRING, P_GLOBAL, &Globals.szLogonScript, NULL, NULL, FLAG_ADVANCED},
1127         {"logon path", P_STRING, P_GLOBAL, &Globals.szLogonPath, NULL, NULL, FLAG_ADVANCED},
1128         {"logon drive", P_STRING, P_GLOBAL, &Globals.szLogonDrive, NULL, NULL, FLAG_ADVANCED},
1129         {"logon home", P_STRING, P_GLOBAL, &Globals.szLogonHome, NULL, NULL, FLAG_ADVANCED},
1130         {"domain logons", P_BOOL, P_GLOBAL, &Globals.bDomainLogons, NULL, NULL, FLAG_ADVANCED},
1131
1132         {N_("Browse Options"), P_SEP, P_SEPARATOR},
1133
1134         {"os level", P_INTEGER, P_GLOBAL, &Globals.os_level, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1135         {"lm announce", P_ENUM, P_GLOBAL, &Globals.lm_announce, NULL, enum_bool_auto, FLAG_ADVANCED},
1136         {"lm interval", P_INTEGER, P_GLOBAL, &Globals.lm_interval, NULL, NULL, FLAG_ADVANCED},
1137         {"preferred master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1138         {"prefered master", P_ENUM, P_GLOBAL, &Globals.bPreferredMaster, NULL, enum_bool_auto, FLAG_HIDE},
1139         {"local master", P_BOOL, P_GLOBAL, &Globals.bLocalMaster, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED},
1140         {"domain master", P_ENUM, P_GLOBAL, &Globals.bDomainMaster, NULL, enum_bool_auto, FLAG_BASIC | FLAG_ADVANCED},
1141         {"browse list", P_BOOL, P_GLOBAL, &Globals.bBrowseList, NULL, NULL, FLAG_ADVANCED},
1142         {"browseable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1143         {"browsable", P_BOOL, P_LOCAL, &sDefault.bBrowseable, NULL, NULL, FLAG_HIDE},
1144         {"enhanced browsing", P_BOOL, P_GLOBAL, &Globals.enhanced_browsing, NULL, NULL, FLAG_ADVANCED},
1145
1146         {N_("WINS Options"), P_SEP, P_SEPARATOR},
1147
1148         {"dns proxy", P_BOOL, P_GLOBAL, &Globals.bDNSproxy, NULL, NULL, FLAG_ADVANCED},
1149         {"wins proxy", P_BOOL, P_GLOBAL, &Globals.bWINSproxy, NULL, NULL, FLAG_ADVANCED},
1150
1151         {"wins server", P_LIST, P_GLOBAL, &Globals.szWINSservers, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1152         {"wins support", P_BOOL, P_GLOBAL, &Globals.bWINSsupport, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_WIZARD},
1153         {"wins hook", P_STRING, P_GLOBAL, &Globals.szWINSHook, NULL, NULL, FLAG_ADVANCED},
1154         {"wins partners", P_STRING, P_GLOBAL, &Globals.szWINSPartners, NULL, NULL, FLAG_ADVANCED | FLAG_WIZARD},
1155
1156         {N_("Locking Options"), P_SEP, P_SEPARATOR},
1157
1158         {"blocking locks", P_BOOL, P_LOCAL, &sDefault.bBlockingLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1159         {"csc policy", P_ENUM, P_LOCAL, &sDefault.iCSCPolicy, NULL, enum_csc_policy, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1160         {"fake oplocks", P_BOOL, P_LOCAL, &sDefault.bFakeOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1161         {"kernel oplocks", P_BOOL, P_GLOBAL, &Globals.bKernelOplocks, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1162         {"locking", P_BOOL, P_LOCAL, &sDefault.bLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1163         {"lock spin count", P_INTEGER, P_GLOBAL, &Globals.iLockSpinCount, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1164         {"lock spin time", P_INTEGER, P_GLOBAL, &Globals.iLockSpinTime, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1165
1166         {"oplocks", P_BOOL, P_LOCAL, &sDefault.bOpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1167         {"level2 oplocks", P_BOOL, P_LOCAL, &sDefault.bLevel2OpLocks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1168         {"oplock break wait time", P_INTEGER, P_GLOBAL, &Globals.oplock_break_wait_time, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL},
1169         {"oplock contention limit", P_INTEGER, P_LOCAL, &sDefault.iOplockContentionLimit, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1170         {"posix locking", P_BOOL, P_LOCAL, &sDefault.bPosixLocking, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1171         {"strict locking", P_ENUM, P_LOCAL, &sDefault.iStrictLocking, NULL, enum_bool_auto, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1172         {"share modes", P_BOOL, P_LOCAL,  &sDefault.bShareModes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1173
1174         {N_("Ldap Options"), P_SEP, P_SEPARATOR},
1175
1176 #ifdef WITH_LDAP_SAMCONFIG
1177         {"ldap server", P_STRING, P_GLOBAL, &Globals.szLdapServer, NULL, NULL, FLAG_ADVANCED},
1178         {"ldap port", P_INTEGER, P_GLOBAL, &Globals.ldap_port, NULL, NULL, FLAG_ADVANCED},
1179 #endif
1180         {"ldap admin dn", P_STRING, P_GLOBAL, &Globals.szLdapAdminDn, NULL, NULL, FLAG_ADVANCED},
1181         {"ldap delete dn", P_BOOL, P_GLOBAL, &Globals.ldap_delete_dn, NULL, NULL, FLAG_ADVANCED},
1182         {"ldap group suffix", P_STRING, P_GLOBAL, &Globals.szLdapGroupSuffix, NULL, NULL, FLAG_ADVANCED},
1183         {"ldap idmap suffix", P_STRING, P_GLOBAL, &Globals.szLdapIdmapSuffix, NULL, NULL, FLAG_ADVANCED},
1184         {"ldap machine suffix", P_STRING, P_GLOBAL, &Globals.szLdapMachineSuffix, NULL, NULL, FLAG_ADVANCED},
1185         {"ldap passwd sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_ADVANCED},
1186         {"ldap password sync", P_ENUM, P_GLOBAL, &Globals.ldap_passwd_sync, NULL, enum_ldap_passwd_sync, FLAG_HIDE},
1187         {"ldap replication sleep", P_INTEGER, P_GLOBAL, &Globals.ldap_replication_sleep, NULL, NULL, FLAG_ADVANCED},
1188         {"ldap suffix", P_STRING, P_GLOBAL, &Globals.szLdapSuffix, NULL, NULL, FLAG_ADVANCED},
1189         {"ldap ssl", P_ENUM, P_GLOBAL, &Globals.ldap_ssl, NULL, enum_ldap_ssl, FLAG_ADVANCED},
1190         {"ldap timeout", P_INTEGER, P_GLOBAL, &Globals.ldap_timeout, NULL, NULL, FLAG_ADVANCED},
1191         {"ldap page size", P_INTEGER, P_GLOBAL, &Globals.ldap_page_size, NULL, NULL, FLAG_ADVANCED},
1192         {"ldap user suffix", P_STRING, P_GLOBAL, &Globals.szLdapUserSuffix, NULL, NULL, FLAG_ADVANCED},
1193
1194         {N_("Miscellaneous Options"), P_SEP, P_SEPARATOR},
1195         {"add share command", P_STRING, P_GLOBAL, &Globals.szAddShareCommand, NULL, NULL, FLAG_ADVANCED},
1196         {"change share command", P_STRING, P_GLOBAL, &Globals.szChangeShareCommand, NULL, NULL, FLAG_ADVANCED},
1197         {"delete share command", P_STRING, P_GLOBAL, &Globals.szDeleteShareCommand, NULL, NULL, FLAG_ADVANCED},
1198
1199         {N_("EventLog Options"), P_SEP, P_SEPARATOR},
1200         {"eventlog list",  P_LIST, P_GLOBAL, &Globals.szEventLogs, NULL, NULL, FLAG_ADVANCED | FLAG_GLOBAL | FLAG_SHARE},
1201
1202         {"config file", P_STRING, P_GLOBAL, &Globals.szConfigFile, NULL, NULL, FLAG_HIDE},
1203         {"preload", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1204         {"auto services", P_STRING, P_GLOBAL, &Globals.szAutoServices, NULL, NULL, FLAG_ADVANCED},
1205         {"lock directory", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_ADVANCED},
1206         {"lock dir", P_STRING, P_GLOBAL, &Globals.szLockDir, NULL, NULL, FLAG_HIDE},
1207         {"pid directory", P_STRING, P_GLOBAL, &Globals.szPidDir, NULL, NULL, FLAG_ADVANCED},
1208 #ifdef WITH_UTMP
1209         {"utmp directory", P_STRING, P_GLOBAL, &Globals.szUtmpDir, NULL, NULL, FLAG_ADVANCED},
1210         {"wtmp directory", P_STRING, P_GLOBAL, &Globals.szWtmpDir, NULL, NULL, FLAG_ADVANCED},
1211         {"utmp", P_BOOL, P_GLOBAL, &Globals.bUtmp, NULL, NULL, FLAG_ADVANCED},
1212 #endif
1213
1214         {"default service", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1215         {"default", P_STRING, P_GLOBAL, &Globals.szDefaultService, NULL, NULL, FLAG_ADVANCED},
1216         {"message command", P_STRING, P_GLOBAL, &Globals.szMsgCommand, NULL, NULL, FLAG_ADVANCED},
1217         {"dfree cache time", P_INTEGER, P_LOCAL, &sDefault.iDfreeCacheTime, NULL, NULL, FLAG_ADVANCED},
1218         {"dfree command", P_STRING, P_LOCAL, &sDefault.szDfree, NULL, NULL, FLAG_ADVANCED},
1219         {"get quota command", P_STRING, P_GLOBAL, &Globals.szGetQuota, NULL, NULL, FLAG_ADVANCED},
1220         {"set quota command", P_STRING, P_GLOBAL, &Globals.szSetQuota, NULL, NULL, FLAG_ADVANCED},
1221         {"remote announce", P_STRING, P_GLOBAL, &Globals.szRemoteAnnounce, NULL, NULL, FLAG_ADVANCED},
1222         {"remote browse sync", P_STRING, P_GLOBAL, &Globals.szRemoteBrowseSync, NULL, NULL, FLAG_ADVANCED},
1223         {"socket address", P_STRING, P_GLOBAL, &Globals.szSocketAddress, NULL, NULL, FLAG_ADVANCED},
1224         {"homedir map", P_STRING, P_GLOBAL, &Globals.szNISHomeMapName, NULL, NULL, FLAG_ADVANCED},
1225         {"afs username map", P_STRING, P_GLOBAL, &Globals.szAfsUsernameMap, NULL, NULL, FLAG_ADVANCED},
1226         {"afs token lifetime", P_INTEGER, P_GLOBAL, &Globals.iAfsTokenLifetime, NULL, NULL, FLAG_ADVANCED},
1227         {"log nt token command", P_STRING, P_GLOBAL, &Globals.szLogNtTokenCommand, NULL, NULL, FLAG_ADVANCED},
1228         {"time offset", P_INTEGER, P_GLOBAL, &extra_time_offset, NULL, NULL, FLAG_ADVANCED},
1229         {"NIS homedir", P_BOOL, P_GLOBAL, &Globals.bNISHomeMap, NULL, NULL, FLAG_ADVANCED},
1230         {"-valid", P_BOOL, P_LOCAL, &sDefault.valid, NULL, NULL, FLAG_HIDE},
1231
1232         {"copy", P_STRING, P_LOCAL, &sDefault.szCopy, handle_copy, NULL, FLAG_HIDE},
1233         {"include", P_STRING, P_LOCAL, &sDefault.szInclude, handle_include, NULL, FLAG_HIDE},
1234         {"preexec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1235         {"exec", P_STRING, P_LOCAL, &sDefault.szPreExec, NULL, NULL, FLAG_ADVANCED},
1236
1237         {"preexec close", P_BOOL, P_LOCAL, &sDefault.bPreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1238         {"postexec", P_STRING, P_LOCAL, &sDefault.szPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1239         {"root preexec", P_STRING, P_LOCAL, &sDefault.szRootPreExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1240         {"root preexec close", P_BOOL, P_LOCAL, &sDefault.bRootpreexecClose, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1241         {"root postexec", P_STRING, P_LOCAL, &sDefault.szRootPostExec, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1242         {"available", P_BOOL, P_LOCAL, &sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT},
1243         {"usershare max shares", P_INTEGER, P_GLOBAL, &Globals.iUsershareMaxShares, NULL, NULL, FLAG_ADVANCED},
1244         {"usershare owner only", P_BOOL, P_GLOBAL, &Globals.bUsershareOwnerOnly, NULL, NULL, FLAG_ADVANCED},
1245         {"usershare path", P_STRING, P_GLOBAL, &Globals.szUsersharePath, NULL, NULL, FLAG_ADVANCED},
1246         {"usershare prefix allow list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixAllowList, NULL, NULL, FLAG_ADVANCED},
1247         {"usershare prefix deny list", P_LIST, P_GLOBAL, &Globals.szUsersharePrefixDenyList, NULL, NULL, FLAG_ADVANCED},
1248         {"usershare template share", P_STRING, P_GLOBAL, &Globals.szUsershareTemplateShare, NULL, NULL, FLAG_ADVANCED},
1249         {"volume", P_STRING, P_LOCAL, &sDefault.volume, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE },
1250         {"fstype", P_STRING, P_LOCAL, &sDefault.fstype, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1251         {"set directory", P_BOOLREV, P_LOCAL, &sDefault.bNo_set_dir, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1252         {"wide links", P_BOOL, P_LOCAL, &sDefault.bWidelinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1253         {"follow symlinks", P_BOOL, P_LOCAL, &sDefault.bSymlinks, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1254         {"dont descend", P_STRING, P_LOCAL, &sDefault.szDontdescend, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1255         {"magic script", P_STRING, P_LOCAL, &sDefault.szMagicScript, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1256         {"magic output", P_STRING, P_LOCAL, &sDefault.szMagicOutput, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1257         {"delete readonly", P_BOOL, P_LOCAL, &sDefault.bDeleteReadonly, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1258         {"dos filemode", P_BOOL, P_LOCAL, &sDefault.bDosFilemode, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1259         {"dos filetimes", P_BOOL, P_LOCAL, &sDefault.bDosFiletimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1260         {"dos filetime resolution", P_BOOL, P_LOCAL, &sDefault.bDosFiletimeResolution, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1261
1262         {"fake directory create times", P_BOOL, P_LOCAL, &sDefault.bFakeDirCreateTimes, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE | FLAG_GLOBAL},
1263         {"panic action", P_STRING, P_GLOBAL, &Globals.szPanicAction, NULL, NULL, FLAG_ADVANCED},
1264
1265         {N_("VFS module options"), P_SEP, P_SEPARATOR},
1266
1267         {"vfs objects", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1268         {"vfs object", P_LIST, P_LOCAL, &sDefault.szVfsObjects, NULL, NULL, FLAG_HIDE},
1269
1270
1271         {"msdfs root", P_BOOL, P_LOCAL, &sDefault.bMSDfsRoot, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1272         {"msdfs proxy", P_STRING, P_LOCAL, &sDefault.szMSDfsProxy, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE},
1273         {"host msdfs", P_BOOL, P_GLOBAL, &Globals.bHostMSDfs, NULL, NULL, FLAG_ADVANCED},
1274
1275         {N_("Winbind options"), P_SEP, P_SEPARATOR},
1276
1277         {"passdb expand explicit", P_BOOL, P_GLOBAL, &Globals.bPassdbExpandExplicit, NULL, NULL, FLAG_ADVANCED},
1278         {"idmap backend", P_LIST, P_GLOBAL, &Globals.szIdmapBackend, NULL, NULL, FLAG_ADVANCED},
1279         {"idmap uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_ADVANCED},
1280         {"winbind uid", P_STRING, P_GLOBAL, &Globals.szIdmapUID, handle_idmap_uid, NULL, FLAG_HIDE},
1281         {"idmap gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_ADVANCED},
1282         {"winbind gid", P_STRING, P_GLOBAL, &Globals.szIdmapGID, handle_idmap_gid, NULL, FLAG_HIDE},
1283         {"template homedir", P_STRING, P_GLOBAL, &Globals.szTemplateHomedir, NULL, NULL, FLAG_ADVANCED},
1284         {"template shell", P_STRING, P_GLOBAL, &Globals.szTemplateShell, NULL, NULL, FLAG_ADVANCED},
1285         {"winbind separator", P_STRING, P_GLOBAL, &Globals.szWinbindSeparator, NULL, NULL, FLAG_ADVANCED},
1286         {"winbind cache time", P_INTEGER, P_GLOBAL, &Globals.winbind_cache_time, NULL, NULL, FLAG_ADVANCED},
1287         {"winbind enum users", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumUsers, NULL, NULL, FLAG_ADVANCED},
1288         {"winbind enum groups", P_BOOL, P_GLOBAL, &Globals.bWinbindEnumGroups, NULL, NULL, FLAG_ADVANCED},
1289         {"winbind use default domain", P_BOOL, P_GLOBAL, &Globals.bWinbindUseDefaultDomain, NULL, NULL, FLAG_ADVANCED},
1290         {"winbind trusted domains only", P_BOOL, P_GLOBAL, &Globals.bWinbindTrustedDomainsOnly, NULL, NULL, FLAG_ADVANCED},
1291         {"winbind nested groups", P_BOOL, P_GLOBAL, &Globals.bWinbindNestedGroups, NULL, NULL, FLAG_ADVANCED},
1292         {"winbind nss info", P_LIST, P_GLOBAL, &Globals.szWinbindNssInfo, NULL, NULL, FLAG_ADVANCED},
1293         {"winbind refresh tickets", P_BOOL, P_GLOBAL, &Globals.bWinbindRefreshTickets, NULL, NULL, FLAG_ADVANCED},
1294         {"winbind offline logon", P_BOOL, P_GLOBAL, &Globals.bWinbindOfflineLogon, NULL, NULL, FLAG_ADVANCED},
1295
1296         {NULL,  P_BOOL,  P_NONE,  NULL,  NULL,  NULL,  0}
1297 };
1298
1299 /***************************************************************************
1300  Initialise the sDefault parameter structure for the printer values.
1301 ***************************************************************************/
1302
1303 static void init_printer_values(service *pService)
1304 {
1305         /* choose defaults depending on the type of printing */
1306         switch (pService->iPrinting) {
1307                 case PRINT_BSD:
1308                 case PRINT_AIX:
1309                 case PRINT_LPRNT:
1310                 case PRINT_LPROS2:
1311                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1312                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1313                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1314                         break;
1315
1316                 case PRINT_LPRNG:
1317                 case PRINT_PLP:
1318                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1319                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1320                         string_set(&pService->szPrintcommand, "lpr -r -P'%p' %s");
1321                         string_set(&pService->szQueuepausecommand, "lpc stop '%p'");
1322                         string_set(&pService->szQueueresumecommand, "lpc start '%p'");
1323                         string_set(&pService->szLppausecommand, "lpc hold '%p' %j");
1324                         string_set(&pService->szLpresumecommand, "lpc release '%p' %j");
1325                         break;
1326
1327                 case PRINT_CUPS:
1328                 case PRINT_IPRINT:
1329 #ifdef HAVE_CUPS
1330                         /* set the lpq command to contain the destination printer
1331                            name only.  This is used by cups_queue_get() */
1332                         string_set(&pService->szLpqcommand, "%p");
1333                         string_set(&pService->szLprmcommand, "");
1334                         string_set(&pService->szPrintcommand, "");
1335                         string_set(&pService->szLppausecommand, "");
1336                         string_set(&pService->szLpresumecommand, "");
1337                         string_set(&pService->szQueuepausecommand, "");
1338                         string_set(&pService->szQueueresumecommand, "");
1339 #else
1340                         string_set(&pService->szLpqcommand, "lpq -P'%p'");
1341                         string_set(&pService->szLprmcommand, "lprm -P'%p' %j");
1342                         string_set(&pService->szPrintcommand, "lpr -P'%p' %s; rm %s");
1343                         string_set(&pService->szLppausecommand, "lp -i '%p-%j' -H hold");
1344                         string_set(&pService->szLpresumecommand, "lp -i '%p-%j' -H resume");
1345                         string_set(&pService->szQueuepausecommand, "disable '%p'");
1346                         string_set(&pService->szQueueresumecommand, "enable '%p'");
1347 #endif /* HAVE_CUPS */
1348                         break;
1349
1350                 case PRINT_SYSV:
1351                 case PRINT_HPUX:
1352                         string_set(&pService->szLpqcommand, "lpstat -o%p");
1353                         string_set(&pService->szLprmcommand, "cancel %p-%j");
1354                         string_set(&pService->szPrintcommand, "lp -c -d%p %s; rm %s");
1355                         string_set(&pService->szQueuepausecommand, "disable %p");
1356                         string_set(&pService->szQueueresumecommand, "enable %p");
1357 #ifndef HPUX
1358                         string_set(&pService->szLppausecommand, "lp -i %p-%j -H hold");
1359                         string_set(&pService->szLpresumecommand, "lp -i %p-%j -H resume");
1360 #endif /* HPUX */
1361                         break;
1362
1363                 case PRINT_QNX:
1364                         string_set(&pService->szLpqcommand, "lpq -P%p");
1365                         string_set(&pService->szLprmcommand, "lprm -P%p %j");
1366                         string_set(&pService->szPrintcommand, "lp -r -P%p %s");
1367                         break;
1368
1369 #ifdef DEVELOPER
1370         case PRINT_TEST:
1371         case PRINT_VLP:
1372                 string_set(&pService->szPrintcommand, "vlp print %p %s");
1373                 string_set(&pService->szLpqcommand, "vlp lpq %p");
1374                 string_set(&pService->szLprmcommand, "vlp lprm %p %j");
1375                 string_set(&pService->szLppausecommand, "vlp lppause %p %j");
1376                 string_set(&pService->szLpresumecommand, "vlp lpresum %p %j");
1377                 string_set(&pService->szQueuepausecommand, "vlp queuepause %p");
1378                 string_set(&pService->szQueueresumecommand, "vlp queueresume %p");
1379                 break;
1380 #endif /* DEVELOPER */
1381
1382         }
1383 }
1384
1385 /***************************************************************************
1386  Initialise the global parameter structure.
1387 ***************************************************************************/
1388
1389 static void init_globals(BOOL first_time_only)
1390 {
1391         static BOOL done_init = False;
1392         pstring s;
1393
1394         /* If requested to initialize only once and we've already done it... */
1395         if (first_time_only && done_init) {
1396                 /* ... then we have nothing more to do */
1397                 return;
1398         }
1399
1400         if (!done_init) {
1401                 int i;
1402
1403                 /* The logfile can be set before this is invoked. Free it if so. */
1404                 if (Globals.szLogFile != NULL) {
1405                         string_free(&Globals.szLogFile);
1406                         Globals.szLogFile = NULL;
1407                 }
1408
1409                 memset((void *)&Globals, '\0', sizeof(Globals));
1410
1411                 for (i = 0; parm_table[i].label; i++)
1412                         if ((parm_table[i].type == P_STRING ||
1413                              parm_table[i].type == P_USTRING) &&
1414                             parm_table[i].ptr)
1415                                 string_set((char **)parm_table[i].ptr, "");
1416
1417                 string_set(&sDefault.fstype, FSTYPE_STRING);
1418
1419                 init_printer_values(&sDefault);
1420
1421                 done_init = True;
1422         }
1423
1424
1425         DEBUG(3, ("Initialising global parameters\n"));
1426
1427         string_set(&Globals.szSMBPasswdFile, dyn_SMB_PASSWD_FILE);
1428         string_set(&Globals.szPrivateDir, dyn_PRIVATE_DIR);
1429
1430         /* use the new 'hash2' method by default, with a prefix of 1 */
1431         string_set(&Globals.szManglingMethod, "hash2");
1432         Globals.mangle_prefix = 1;
1433
1434         string_set(&Globals.szGuestaccount, GUEST_ACCOUNT);
1435
1436         /* using UTF8 by default allows us to support all chars */
1437         string_set(&Globals.unix_charset, DEFAULT_UNIX_CHARSET);
1438
1439 #if defined(HAVE_NL_LANGINFO) && defined(CODESET)
1440         /* If the system supports nl_langinfo(), try to grab the value
1441            from the user's locale */
1442         string_set(&Globals.display_charset, "LOCALE");
1443 #else
1444         string_set(&Globals.display_charset, DEFAULT_DISPLAY_CHARSET);
1445 #endif
1446
1447         /* Use codepage 850 as a default for the dos character set */
1448         string_set(&Globals.dos_charset, DEFAULT_DOS_CHARSET);
1449
1450         /*
1451          * Allow the default PASSWD_CHAT to be overridden in local.h.
1452          */
1453         string_set(&Globals.szPasswdChat, DEFAULT_PASSWD_CHAT);
1454
1455         set_global_myname(myhostname());
1456         string_set(&Globals.szNetbiosName,global_myname());
1457
1458         set_global_myworkgroup(WORKGROUP);
1459         string_set(&Globals.szWorkgroup, lp_workgroup());
1460
1461         string_set(&Globals.szPasswdProgram, "");
1462         string_set(&Globals.szPidDir, dyn_PIDDIR);
1463         string_set(&Globals.szLockDir, dyn_LOCKDIR);
1464         string_set(&Globals.szSocketAddress, "0.0.0.0");
1465         pstrcpy(s, "Samba ");
1466         pstrcat(s, SAMBA_VERSION_STRING);
1467         string_set(&Globals.szServerString, s);
1468         slprintf(s, sizeof(s) - 1, "%d.%d", DEFAULT_MAJOR_VERSION,
1469                  DEFAULT_MINOR_VERSION);
1470         string_set(&Globals.szAnnounceVersion, s);
1471 #ifdef DEVELOPER
1472         string_set(&Globals.szPanicAction, "/bin/sleep 999999999");
1473 #endif
1474
1475         pstrcpy(user_socket_options, DEFAULT_SOCKET_OPTIONS);
1476
1477         string_set(&Globals.szLogonDrive, "");
1478         /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
1479         string_set(&Globals.szLogonHome, "\\\\%N\\%U");
1480         string_set(&Globals.szLogonPath, "\\\\%N\\%U\\profile");
1481
1482         string_set(&Globals.szNameResolveOrder, "lmhosts wins host bcast");
1483         string_set(&Globals.szPasswordServer, "*");
1484
1485         Globals.AlgorithmicRidBase = BASE_RID;
1486
1487         Globals.bLoadPrinters = True;
1488         Globals.PrintcapCacheTime = 750;        /* 12.5 minutes */
1489
1490         /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
1491         /* Discovered by 2 days of pain by Don McCall @ HP :-). */
1492         Globals.max_xmit = 0x4104;
1493         Globals.max_mux = 50;   /* This is *needed* for profile support. */
1494         Globals.lpqcachetime = 30;      /* changed to handle large print servers better -- jerry */
1495         Globals.bDisableSpoolss = False;
1496         Globals.iMaxSmbdProcesses = 0;/* no limit specified */
1497         Globals.pwordlevel = 0;
1498         Globals.unamelevel = 0;
1499         Globals.deadtime = 0;
1500         Globals.bLargeReadwrite = True;
1501         Globals.max_log_size = 5000;
1502         Globals.max_open_files = MAX_OPEN_FILES;
1503         Globals.open_files_db_hash_size = SMB_OPEN_DATABASE_TDB_HASH_SIZE;
1504         Globals.maxprotocol = PROTOCOL_NT1;
1505         Globals.minprotocol = PROTOCOL_CORE;
1506         Globals.security = SEC_USER;
1507         Globals.paranoid_server_security = True;
1508         Globals.bEncryptPasswords = True;
1509         Globals.bUpdateEncrypt = False;
1510         Globals.clientSchannel = Auto;
1511         Globals.serverSchannel = Auto;
1512         Globals.bReadRaw = True;
1513         Globals.bWriteRaw = True;
1514         Globals.bReadbmpx = False;
1515         Globals.bNullPasswords = False;
1516         Globals.bObeyPamRestrictions = False;
1517         Globals.syslog = 1;
1518         Globals.bSyslogOnly = False;
1519         Globals.bTimestampLogs = True;
1520         string_set(&Globals.szLogLevel, "0");
1521         Globals.bDebugHiresTimestamp = False;
1522         Globals.bDebugPid = False;
1523         Globals.bDebugUid = False;
1524         Globals.max_ttl = 60 * 60 * 24 * 3;     /* 3 days default. */
1525         Globals.max_wins_ttl = 60 * 60 * 24 * 6;        /* 6 days default. */
1526         Globals.min_wins_ttl = 60 * 60 * 6;     /* 6 hours default. */
1527         Globals.machine_password_timeout = 60 * 60 * 24 * 7;    /* 7 days default. */
1528         Globals.change_notify_timeout = 60;     /* 1 minute default. */
1529         Globals.bKernelChangeNotify = True;     /* On if we have it. */
1530         Globals.bFamChangeNotify = True;        /* On if we have it. */
1531         Globals.lm_announce = 2;        /* = Auto: send only if LM clients found */
1532         Globals.lm_interval = 60;
1533         Globals.announce_as = ANNOUNCE_AS_NT_SERVER;
1534 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
1535         Globals.bNISHomeMap = False;
1536 #ifdef WITH_NISPLUS_HOME
1537         string_set(&Globals.szNISHomeMapName, "auto_home.org_dir");
1538 #else
1539         string_set(&Globals.szNISHomeMapName, "auto.home");
1540 #endif
1541 #endif
1542         Globals.bTimeServer = False;
1543         Globals.bBindInterfacesOnly = False;
1544         Globals.bUnixPasswdSync = False;
1545         Globals.bPamPasswordChange = False;
1546         Globals.bPasswdChatDebug = False;
1547         Globals.iPasswdChatTimeout = 2; /* 2 second default. */
1548         Globals.bNTPipeSupport = True;  /* Do NT pipes by default. */
1549         Globals.bNTStatusSupport = True; /* Use NT status by default. */
1550         Globals.bStatCache = True;      /* use stat cache by default */
1551         Globals.iMaxStatCacheSize = 0;  /* unlimited size in kb by default. */
1552         Globals.restrict_anonymous = 0;
1553         Globals.bClientLanManAuth = True;       /* Do use the LanMan hash if it is available */
1554         Globals.bClientPlaintextAuth = True;    /* Do use a plaintext password if is requested by the server */
1555         Globals.bLanmanAuth = True;     /* Do use the LanMan hash if it is available */
1556         Globals.bNTLMAuth = True;       /* Do use NTLMv1 if it is available (otherwise NTLMv2) */
1557         Globals.bClientNTLMv2Auth = False; /* Client should not use NTLMv2, as we can't tell that the server supports it. */
1558         /* Note, that we will use NTLM2 session security (which is different), if it is available */
1559
1560         Globals.map_to_guest = 0;       /* By Default, "Never" */
1561         Globals.oplock_break_wait_time = 0;     /* By Default, 0 msecs. */
1562         Globals.enhanced_browsing = True;
1563         Globals.iLockSpinCount = 3; /* Try 3 times. */
1564         Globals.iLockSpinTime = 10; /* usec. */
1565 #ifdef MMAP_BLACKLIST
1566         Globals.bUseMmap = False;
1567 #else
1568         Globals.bUseMmap = True;
1569 #endif
1570         Globals.bUnixExtensions = True;
1571         Globals.bResetOnZeroVC = False;
1572
1573         /* hostname lookups can be very expensive and are broken on
1574            a large number of sites (tridge) */
1575         Globals.bHostnameLookups = False;
1576
1577 #ifdef WITH_LDAP_SAMCONFIG
1578         string_set(&Globals.szLdapServer, "localhost");
1579         Globals.ldap_port = 636;
1580         string_set(&Globals.szPassdbBackend, "ldapsam_compat");
1581 #else
1582         string_set(&Globals.szPassdbBackend, "smbpasswd");
1583 #endif /* WITH_LDAP_SAMCONFIG */
1584         string_set(&Globals.szLdapSuffix, "");
1585         string_set(&Globals.szLdapMachineSuffix, "");
1586         string_set(&Globals.szLdapUserSuffix, "");
1587         string_set(&Globals.szLdapGroupSuffix, "");
1588         string_set(&Globals.szLdapIdmapSuffix, "");
1589
1590         string_set(&Globals.szLdapAdminDn, "");
1591         Globals.ldap_ssl = LDAP_SSL_ON;
1592         Globals.ldap_passwd_sync = LDAP_PASSWD_SYNC_OFF;
1593         Globals.ldap_delete_dn = False;
1594         Globals.ldap_replication_sleep = 1000; /* wait 1 sec for replication */
1595         Globals.ldap_timeout = LDAP_CONNECT_DEFAULT_TIMEOUT;
1596         Globals.ldap_page_size = LDAP_PAGE_SIZE;
1597
1598         /* This is what we tell the afs client. in reality we set the token
1599          * to never expire, though, when this runs out the afs client will
1600          * forget the token. Set to 0 to get NEVERDATE.*/
1601         Globals.iAfsTokenLifetime = 604800;
1602
1603 /* these parameters are set to defaults that are more appropriate
1604    for the increasing samba install base:
1605
1606    as a member of the workgroup, that will possibly become a
1607    _local_ master browser (lm = True).  this is opposed to a forced
1608    local master browser startup (pm = True).
1609
1610    doesn't provide WINS server service by default (wsupp = False),
1611    and doesn't provide domain master browser services by default, either.
1612
1613 */
1614
1615         Globals.bMsAddPrinterWizard = True;
1616         Globals.bPreferredMaster = Auto;        /* depending on bDomainMaster */
1617         Globals.os_level = 20;
1618         Globals.bLocalMaster = True;
1619         Globals.bDomainMaster = Auto;   /* depending on bDomainLogons */
1620         Globals.bDomainLogons = False;
1621         Globals.bBrowseList = True;
1622         Globals.bWINSsupport = False;
1623         Globals.bWINSproxy = False;
1624
1625         Globals.bDNSproxy = True;
1626
1627         /* this just means to use them if they exist */
1628         Globals.bKernelOplocks = True;
1629
1630         Globals.bAllowTrustedDomains = True;
1631
1632         string_set(&Globals.szTemplateShell, "/bin/false");
1633         string_set(&Globals.szTemplateHomedir, "/home/%D/%U");
1634         string_set(&Globals.szWinbindSeparator, "\\");
1635         string_set(&Globals.szAclCompat, "");
1636         string_set(&Globals.szCupsServer, "");
1637         string_set(&Globals.szIPrintServer, "");
1638
1639         Globals.winbind_cache_time = 300;       /* 5 minutes */
1640         Globals.bWinbindEnumUsers = False;
1641         Globals.bWinbindEnumGroups = False;
1642         Globals.bWinbindUseDefaultDomain = False;
1643         Globals.bWinbindTrustedDomainsOnly = False;
1644         Globals.bWinbindNestedGroups = True;
1645         Globals.szWinbindNssInfo = str_list_make("template", NULL);
1646         Globals.bWinbindRefreshTickets = False;
1647         Globals.bWinbindOfflineLogon = False;
1648
1649         Globals.bPassdbExpandExplicit = True;
1650
1651         Globals.name_cache_timeout = 660; /* In seconds */
1652
1653         Globals.bUseSpnego = True;
1654         Globals.bClientUseSpnego = True;
1655
1656         Globals.client_signing = Auto;
1657         Globals.server_signing = False;
1658
1659         Globals.bDeferSharingViolations = True;
1660         string_set(&Globals.smb_ports, SMB_PORTS);
1661
1662         Globals.bEnablePrivileges = True;
1663         Globals.bHostMSDfs        = True;
1664         Globals.bASUSupport       = False;
1665
1666         /* User defined shares. */
1667         pstrcpy(s, dyn_LOCKDIR);
1668         pstrcat(s, "/usershares");
1669         string_set(&Globals.szUsersharePath, s);
1670         string_set(&Globals.szUsershareTemplateShare, "");
1671         Globals.iUsershareMaxShares = 0;
1672         /* By default disallow sharing of directories not owned by the sharer. */
1673         Globals.bUsershareOwnerOnly = True;
1674 }
1675
1676 static TALLOC_CTX *lp_talloc;
1677
1678 /******************************************************************* a
1679  Free up temporary memory - called from the main loop.
1680 ********************************************************************/
1681
1682 void lp_TALLOC_FREE(void)
1683 {
1684         if (!lp_talloc)
1685                 return;
1686         TALLOC_FREE(lp_talloc);
1687         lp_talloc = NULL;
1688 }
1689
1690 TALLOC_CTX *tmp_talloc_ctx(void)
1691 {
1692         if (lp_talloc == NULL) {
1693                 lp_talloc = talloc_init(NULL);
1694         }
1695
1696         if (lp_talloc == NULL) {
1697                 smb_panic("Could not create temporary talloc context\n");
1698         }
1699
1700         return lp_talloc;
1701 }
1702
1703 /*******************************************************************
1704  Convenience routine to grab string parameters into temporary memory
1705  and run standard_sub_basic on them. The buffers can be written to by
1706  callers without affecting the source string.
1707 ********************************************************************/
1708
1709 static char *lp_string(const char *s)
1710 {
1711         char *ret, *tmpstr;
1712
1713         /* The follow debug is useful for tracking down memory problems
1714            especially if you have an inner loop that is calling a lp_*()
1715            function that returns a string.  Perhaps this debug should be
1716            present all the time? */
1717
1718 #if 0
1719         DEBUG(10, ("lp_string(%s)\n", s));
1720 #endif
1721
1722         if (!lp_talloc)
1723                 lp_talloc = talloc_init("lp_talloc");
1724
1725         tmpstr = alloc_sub_basic(get_current_username(), s);
1726         if (trim_char(tmpstr, '\"', '\"')) {
1727                 if (strchr(tmpstr,'\"') != NULL) {
1728                         SAFE_FREE(tmpstr);
1729                         tmpstr = alloc_sub_basic(get_current_username(),s);
1730                 }
1731         }
1732         ret = talloc_strdup(lp_talloc, tmpstr);
1733         SAFE_FREE(tmpstr);
1734
1735         return (ret);
1736 }
1737
1738 /*
1739    In this section all the functions that are used to access the
1740    parameters from the rest of the program are defined
1741 */
1742
1743 #define FN_GLOBAL_STRING(fn_name,ptr) \
1744  char *fn_name(void) {return(lp_string(*(char **)(ptr) ? *(char **)(ptr) : ""));}
1745 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1746  const char *fn_name(void) {return(*(const char **)(ptr) ? *(const char **)(ptr) : "");}
1747 #define FN_GLOBAL_LIST(fn_name,ptr) \
1748  const char **fn_name(void) {return(*(const char ***)(ptr));}
1749 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1750  BOOL fn_name(void) {return(*(BOOL *)(ptr));}
1751 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1752  char fn_name(void) {return(*(char *)(ptr));}
1753 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1754  int fn_name(void) {return(*(int *)(ptr));}
1755
1756 #define FN_LOCAL_STRING(fn_name,val) \
1757  char *fn_name(int i) {return(lp_string((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1758 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1759  const char *fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1760 #define FN_LOCAL_LIST(fn_name,val) \
1761  const char **fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1762 #define FN_LOCAL_BOOL(fn_name,val) \
1763  BOOL fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1764 #define FN_LOCAL_CHAR(fn_name,val) \
1765  char fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1766 #define FN_LOCAL_INTEGER(fn_name,val) \
1767  int fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1768
1769 FN_GLOBAL_STRING(lp_smb_ports, &Globals.smb_ports)
1770 FN_GLOBAL_STRING(lp_dos_charset, &Globals.dos_charset)
1771 FN_GLOBAL_STRING(lp_unix_charset, &Globals.unix_charset)
1772 FN_GLOBAL_STRING(lp_display_charset, &Globals.display_charset)
1773 FN_GLOBAL_STRING(lp_logfile, &Globals.szLogFile)
1774 FN_GLOBAL_STRING(lp_configfile, &Globals.szConfigFile)
1775 FN_GLOBAL_STRING(lp_smb_passwd_file, &Globals.szSMBPasswdFile)
1776 FN_GLOBAL_STRING(lp_private_dir, &Globals.szPrivateDir)
1777 FN_GLOBAL_STRING(lp_serverstring, &Globals.szServerString)
1778 FN_GLOBAL_INTEGER(lp_printcap_cache_time, &Globals.PrintcapCacheTime)
1779 FN_GLOBAL_STRING(lp_addport_cmd, &Globals.szAddPortCommand)
1780 FN_GLOBAL_STRING(lp_enumports_cmd, &Globals.szEnumPortsCommand)
1781 FN_GLOBAL_STRING(lp_addprinter_cmd, &Globals.szAddPrinterCommand)
1782 FN_GLOBAL_STRING(lp_deleteprinter_cmd, &Globals.szDeletePrinterCommand)
1783 FN_GLOBAL_STRING(lp_os2_driver_map, &Globals.szOs2DriverMap)
1784 FN_GLOBAL_STRING(lp_lockdir, &Globals.szLockDir)
1785 FN_GLOBAL_STRING(lp_piddir, &Globals.szPidDir)
1786 FN_GLOBAL_STRING(lp_mangling_method, &Globals.szManglingMethod)
1787 FN_GLOBAL_INTEGER(lp_mangle_prefix, &Globals.mangle_prefix)
1788 FN_GLOBAL_STRING(lp_utmpdir, &Globals.szUtmpDir)
1789 FN_GLOBAL_STRING(lp_wtmpdir, &Globals.szWtmpDir)
1790 FN_GLOBAL_BOOL(lp_utmp, &Globals.bUtmp)
1791 FN_GLOBAL_STRING(lp_rootdir, &Globals.szRootdir)
1792 FN_GLOBAL_STRING(lp_defaultservice, &Globals.szDefaultService)
1793 FN_GLOBAL_STRING(lp_msg_command, &Globals.szMsgCommand)
1794 FN_GLOBAL_STRING(lp_get_quota_command, &Globals.szGetQuota)
1795 FN_GLOBAL_STRING(lp_set_quota_command, &Globals.szSetQuota)
1796 FN_GLOBAL_STRING(lp_hosts_equiv, &Globals.szHostsEquiv)
1797 FN_GLOBAL_STRING(lp_auto_services, &Globals.szAutoServices)
1798 FN_GLOBAL_STRING(lp_passwd_program, &Globals.szPasswdProgram)
1799 FN_GLOBAL_STRING(lp_passwd_chat, &Globals.szPasswdChat)
1800 FN_GLOBAL_STRING(lp_passwordserver, &Globals.szPasswordServer)
1801 FN_GLOBAL_STRING(lp_name_resolve_order, &Globals.szNameResolveOrder)
1802 FN_GLOBAL_STRING(lp_realm, &Globals.szRealm)
1803 FN_GLOBAL_CONST_STRING(lp_afs_username_map, &Globals.szAfsUsernameMap)
1804 FN_GLOBAL_INTEGER(lp_afs_token_lifetime, &Globals.iAfsTokenLifetime)
1805 FN_GLOBAL_STRING(lp_log_nt_token_command, &Globals.szLogNtTokenCommand)
1806 FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
1807 FN_GLOBAL_CONST_STRING(lp_logon_script, &Globals.szLogonScript)
1808 FN_GLOBAL_CONST_STRING(lp_logon_path, &Globals.szLogonPath)
1809 FN_GLOBAL_CONST_STRING(lp_logon_drive, &Globals.szLogonDrive)
1810 FN_GLOBAL_CONST_STRING(lp_logon_home, &Globals.szLogonHome)
1811 FN_GLOBAL_STRING(lp_remote_announce, &Globals.szRemoteAnnounce)
1812 FN_GLOBAL_STRING(lp_remote_browse_sync, &Globals.szRemoteBrowseSync)
1813 FN_GLOBAL_LIST(lp_wins_server_list, &Globals.szWINSservers)
1814 FN_GLOBAL_LIST(lp_interfaces, &Globals.szInterfaces)
1815 FN_GLOBAL_STRING(lp_socket_address, &Globals.szSocketAddress)
1816 FN_GLOBAL_STRING(lp_nis_home_map_name, &Globals.szNISHomeMapName)
1817 static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
1818 FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
1819 FN_GLOBAL_STRING(lp_passdb_backend, &Globals.szPassdbBackend)
1820 FN_GLOBAL_LIST(lp_preload_modules, &Globals.szPreloadModules)
1821 FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
1822 FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
1823 FN_GLOBAL_STRING(lp_renameuser_script, &Globals.szRenameUserScript)
1824 FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
1825
1826 FN_GLOBAL_CONST_STRING(lp_guestaccount, &Globals.szGuestaccount)
1827 FN_GLOBAL_STRING(lp_addgroup_script, &Globals.szAddGroupScript)
1828 FN_GLOBAL_STRING(lp_delgroup_script, &Globals.szDelGroupScript)
1829 FN_GLOBAL_STRING(lp_addusertogroup_script, &Globals.szAddUserToGroupScript)
1830 FN_GLOBAL_STRING(lp_deluserfromgroup_script, &Globals.szDelUserFromGroupScript)
1831 FN_GLOBAL_STRING(lp_setprimarygroup_script, &Globals.szSetPrimaryGroupScript)
1832
1833 FN_GLOBAL_STRING(lp_addmachine_script, &Globals.szAddMachineScript)
1834
1835 FN_GLOBAL_STRING(lp_shutdown_script, &Globals.szShutdownScript)
1836 FN_GLOBAL_STRING(lp_abort_shutdown_script, &Globals.szAbortShutdownScript)
1837 FN_GLOBAL_STRING(lp_username_map_script, &Globals.szUsernameMapScript)
1838
1839 FN_GLOBAL_STRING(lp_check_password_script, &Globals.szCheckPasswordScript)
1840
1841 FN_GLOBAL_STRING(lp_wins_hook, &Globals.szWINSHook)
1842 FN_GLOBAL_STRING(lp_wins_partners, &Globals.szWINSPartners)
1843 FN_GLOBAL_CONST_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
1844 FN_GLOBAL_CONST_STRING(lp_template_shell, &Globals.szTemplateShell)
1845 FN_GLOBAL_CONST_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
1846 FN_GLOBAL_INTEGER(lp_acl_compatibility, &Globals.szAclCompat)
1847 FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
1848 FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
1849 FN_GLOBAL_BOOL(lp_winbind_use_default_domain, &Globals.bWinbindUseDefaultDomain)
1850 FN_GLOBAL_BOOL(lp_winbind_trusted_domains_only, &Globals.bWinbindTrustedDomainsOnly)
1851 FN_GLOBAL_BOOL(lp_winbind_nested_groups, &Globals.bWinbindNestedGroups)
1852 FN_GLOBAL_BOOL(lp_winbind_refresh_tickets, &Globals.bWinbindRefreshTickets)
1853 FN_GLOBAL_BOOL(lp_winbind_offline_logon, &Globals.bWinbindOfflineLogon)
1854
1855 FN_GLOBAL_LIST(lp_idmap_backend, &Globals.szIdmapBackend)
1856 FN_GLOBAL_BOOL(lp_passdb_expand_explicit, &Globals.bPassdbExpandExplicit)
1857
1858 #ifdef WITH_LDAP_SAMCONFIG
1859 FN_GLOBAL_STRING(lp_ldap_server, &Globals.szLdapServer)
1860 FN_GLOBAL_INTEGER(lp_ldap_port, &Globals.ldap_port)
1861 #endif
1862 FN_GLOBAL_STRING(lp_ldap_suffix, &Globals.szLdapSuffix)
1863 FN_GLOBAL_STRING(lp_ldap_admin_dn, &Globals.szLdapAdminDn)
1864 FN_GLOBAL_INTEGER(lp_ldap_ssl, &Globals.ldap_ssl)
1865 FN_GLOBAL_INTEGER(lp_ldap_passwd_sync, &Globals.ldap_passwd_sync)
1866 FN_GLOBAL_BOOL(lp_ldap_delete_dn, &Globals.ldap_delete_dn)
1867 FN_GLOBAL_INTEGER(lp_ldap_replication_sleep, &Globals.ldap_replication_sleep)
1868 FN_GLOBAL_INTEGER(lp_ldap_timeout, &Globals.ldap_timeout)
1869 FN_GLOBAL_INTEGER(lp_ldap_page_size, &Globals.ldap_page_size)
1870 FN_GLOBAL_STRING(lp_add_share_cmd, &Globals.szAddShareCommand)
1871 FN_GLOBAL_STRING(lp_change_share_cmd, &Globals.szChangeShareCommand)
1872 FN_GLOBAL_STRING(lp_delete_share_cmd, &Globals.szDeleteShareCommand)
1873 FN_GLOBAL_STRING(lp_usershare_path, &Globals.szUsersharePath)
1874 FN_GLOBAL_LIST(lp_usershare_prefix_allow_list, &Globals.szUsersharePrefixAllowList)
1875 FN_GLOBAL_LIST(lp_usershare_prefix_deny_list, &Globals.szUsersharePrefixDenyList)
1876
1877 FN_GLOBAL_LIST(lp_eventlog_list, &Globals.szEventLogs)
1878
1879 FN_GLOBAL_BOOL(lp_usershare_owner_only, &Globals.bUsershareOwnerOnly)
1880 FN_GLOBAL_BOOL(lp_disable_netbios, &Globals.bDisableNetbios)
1881 FN_GLOBAL_BOOL(lp_reset_on_zero_vc, &Globals.bResetOnZeroVC)
1882 FN_GLOBAL_BOOL(lp_ms_add_printer_wizard, &Globals.bMsAddPrinterWizard)
1883 FN_GLOBAL_BOOL(lp_dns_proxy, &Globals.bDNSproxy)
1884 FN_GLOBAL_BOOL(lp_wins_support, &Globals.bWINSsupport)
1885 FN_GLOBAL_BOOL(lp_we_are_a_wins_server, &Globals.bWINSsupport)
1886 FN_GLOBAL_BOOL(lp_wins_proxy, &Globals.bWINSproxy)
1887 FN_GLOBAL_BOOL(lp_local_master, &Globals.bLocalMaster)
1888 FN_GLOBAL_BOOL(lp_domain_logons, &Globals.bDomainLogons)
1889 FN_GLOBAL_BOOL(lp_load_printers, &Globals.bLoadPrinters)
1890 FN_GLOBAL_BOOL(lp_readbmpx, &Globals.bReadbmpx)
1891 FN_GLOBAL_BOOL(lp_readraw, &Globals.bReadRaw)
1892 FN_GLOBAL_BOOL(lp_large_readwrite, &Globals.bLargeReadwrite)
1893 FN_GLOBAL_BOOL(lp_writeraw, &Globals.bWriteRaw)
1894 FN_GLOBAL_BOOL(lp_null_passwords, &Globals.bNullPasswords)
1895 FN_GLOBAL_BOOL(lp_obey_pam_restrictions, &Globals.bObeyPamRestrictions)
1896 FN_GLOBAL_BOOL(lp_encrypted_passwords, &Globals.bEncryptPasswords)
1897 FN_GLOBAL_BOOL(lp_update_encrypted, &Globals.bUpdateEncrypt)
1898 FN_GLOBAL_INTEGER(lp_client_schannel, &Globals.clientSchannel)
1899 FN_GLOBAL_INTEGER(lp_server_schannel, &Globals.serverSchannel)
1900 FN_GLOBAL_BOOL(lp_syslog_only, &Globals.bSyslogOnly)
1901 FN_GLOBAL_BOOL(lp_timestamp_logs, &Globals.bTimestampLogs)
1902 FN_GLOBAL_BOOL(lp_debug_hires_timestamp, &Globals.bDebugHiresTimestamp)
1903 FN_GLOBAL_BOOL(lp_debug_pid, &Globals.bDebugPid)
1904 FN_GLOBAL_BOOL(lp_debug_uid, &Globals.bDebugUid)
1905 FN_GLOBAL_BOOL(lp_browse_list, &Globals.bBrowseList)
1906 FN_GLOBAL_BOOL(lp_nis_home_map, &Globals.bNISHomeMap)
1907 static FN_GLOBAL_BOOL(lp_time_server, &Globals.bTimeServer)
1908 FN_GLOBAL_BOOL(lp_bind_interfaces_only, &Globals.bBindInterfacesOnly)
1909 FN_GLOBAL_BOOL(lp_pam_password_change, &Globals.bPamPasswordChange)
1910 FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync)
1911 FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug)
1912 FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout)
1913 FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport)
1914 FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport)
1915 FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache)
1916 FN_GLOBAL_INTEGER(lp_max_stat_cache_size, &Globals.iMaxStatCacheSize)
1917 FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains)
1918 FN_GLOBAL_INTEGER(lp_restrict_anonymous, &Globals.restrict_anonymous)
1919 FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth)
1920 FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth)
1921 FN_GLOBAL_BOOL(lp_client_plaintext_auth, &Globals.bClientPlaintextAuth)
1922 FN_GLOBAL_BOOL(lp_client_lanman_auth, &Globals.bClientLanManAuth)
1923 FN_GLOBAL_BOOL(lp_client_ntlmv2_auth, &Globals.bClientNTLMv2Auth)
1924 FN_GLOBAL_BOOL(lp_host_msdfs, &Globals.bHostMSDfs)
1925 FN_GLOBAL_BOOL(lp_kernel_oplocks, &Globals.bKernelOplocks)
1926 FN_GLOBAL_BOOL(lp_enhanced_browsing, &Globals.enhanced_browsing)
1927 FN_GLOBAL_BOOL(lp_use_mmap, &Globals.bUseMmap)
1928 FN_GLOBAL_BOOL(lp_unix_extensions, &Globals.bUnixExtensions)
1929 FN_GLOBAL_BOOL(lp_use_spnego, &Globals.bUseSpnego)
1930 FN_GLOBAL_BOOL(lp_client_use_spnego, &Globals.bClientUseSpnego)
1931 FN_GLOBAL_BOOL(lp_hostname_lookups, &Globals.bHostnameLookups)
1932 FN_GLOBAL_BOOL(lp_kernel_change_notify, &Globals.bKernelChangeNotify)
1933 FN_GLOBAL_BOOL(lp_fam_change_notify, &Globals.bFamChangeNotify)
1934 FN_GLOBAL_BOOL(lp_use_kerberos_keytab, &Globals.bUseKerberosKeytab)
1935 FN_GLOBAL_BOOL(lp_defer_sharing_violations, &Globals.bDeferSharingViolations)
1936 FN_GLOBAL_BOOL(lp_enable_privileges, &Globals.bEnablePrivileges)
1937 FN_GLOBAL_BOOL(lp_enable_asu_support, &Globals.bASUSupport)
1938 FN_GLOBAL_INTEGER(lp_os_level, &Globals.os_level)
1939 FN_GLOBAL_INTEGER(lp_max_ttl, &Globals.max_ttl)
1940 FN_GLOBAL_INTEGER(lp_max_wins_ttl, &Globals.max_wins_ttl)
1941 FN_GLOBAL_INTEGER(lp_min_wins_ttl, &Globals.min_wins_ttl)
1942 FN_GLOBAL_INTEGER(lp_max_log_size, &Globals.max_log_size)
1943 FN_GLOBAL_INTEGER(lp_max_open_files, &Globals.max_open_files)
1944 FN_GLOBAL_INTEGER(lp_open_files_db_hash_size, &Globals.open_files_db_hash_size)
1945 FN_GLOBAL_INTEGER(lp_maxxmit, &Globals.max_xmit)
1946 FN_GLOBAL_INTEGER(lp_maxmux, &Globals.max_mux)
1947 FN_GLOBAL_INTEGER(lp_passwordlevel, &Globals.pwordlevel)
1948 FN_GLOBAL_INTEGER(lp_usernamelevel, &Globals.unamelevel)
1949 FN_GLOBAL_INTEGER(lp_deadtime, &Globals.deadtime)
1950 FN_GLOBAL_INTEGER(lp_maxprotocol, &Globals.maxprotocol)
1951 FN_GLOBAL_INTEGER(lp_minprotocol, &Globals.minprotocol)
1952 FN_GLOBAL_INTEGER(lp_security, &Globals.security)
1953 FN_GLOBAL_LIST(lp_auth_methods, &Globals.AuthMethods)
1954 FN_GLOBAL_BOOL(lp_paranoid_server_security, &Globals.paranoid_server_security)
1955 FN_GLOBAL_INTEGER(lp_maxdisksize, &Globals.maxdisksize)
1956 FN_GLOBAL_INTEGER(lp_lpqcachetime, &Globals.lpqcachetime)
1957 FN_GLOBAL_INTEGER(lp_max_smbd_processes, &Globals.iMaxSmbdProcesses)
1958 FN_GLOBAL_INTEGER(_lp_disable_spoolss, &Globals.bDisableSpoolss)
1959 FN_GLOBAL_INTEGER(lp_syslog, &Globals.syslog)
1960 static FN_GLOBAL_INTEGER(lp_announce_as, &Globals.announce_as)
1961 FN_GLOBAL_INTEGER(lp_lm_announce, &Globals.lm_announce)
1962 FN_GLOBAL_INTEGER(lp_lm_interval, &Globals.lm_interval)
1963 FN_GLOBAL_INTEGER(lp_machine_password_timeout, &Globals.machine_password_timeout)
1964 FN_GLOBAL_INTEGER(lp_change_notify_timeout, &Globals.change_notify_timeout)
1965 FN_GLOBAL_INTEGER(lp_map_to_guest, &Globals.map_to_guest)
1966 FN_GLOBAL_INTEGER(lp_oplock_break_wait_time, &Globals.oplock_break_wait_time)
1967 FN_GLOBAL_INTEGER(lp_lock_spin_count, &Globals.iLockSpinCount)
1968 FN_GLOBAL_INTEGER(lp_lock_sleep_time, &Globals.iLockSpinTime)
1969 FN_GLOBAL_INTEGER(lp_usershare_max_shares, &Globals.iUsershareMaxShares)
1970
1971 FN_LOCAL_STRING(lp_preexec, szPreExec)
1972 FN_LOCAL_STRING(lp_postexec, szPostExec)
1973 FN_LOCAL_STRING(lp_rootpreexec, szRootPreExec)
1974 FN_LOCAL_STRING(lp_rootpostexec, szRootPostExec)
1975 FN_LOCAL_STRING(lp_servicename, szService)
1976 FN_LOCAL_CONST_STRING(lp_const_servicename, szService)
1977 FN_LOCAL_STRING(lp_pathname, szPath)
1978 FN_LOCAL_STRING(lp_dontdescend, szDontdescend)
1979 FN_LOCAL_STRING(lp_username, szUsername)
1980 FN_LOCAL_LIST(lp_invalid_users, szInvalidUsers)
1981 FN_LOCAL_LIST(lp_valid_users, szValidUsers)
1982 FN_LOCAL_LIST(lp_admin_users, szAdminUsers)
1983 FN_GLOBAL_LIST(lp_svcctl_list, &Globals.szServicesList)
1984 FN_LOCAL_STRING(lp_cups_options, szCupsOptions)
1985 FN_GLOBAL_STRING(lp_cups_server, &Globals.szCupsServer)
1986 FN_GLOBAL_STRING(lp_iprint_server, &Globals.szIPrintServer)
1987 FN_LOCAL_STRING(lp_printcommand, szPrintcommand)
1988 FN_LOCAL_STRING(lp_lpqcommand, szLpqcommand)
1989 FN_LOCAL_STRING(lp_lprmcommand, szLprmcommand)
1990 FN_LOCAL_STRING(lp_lppausecommand, szLppausecommand)
1991 FN_LOCAL_STRING(lp_lpresumecommand, szLpresumecommand)
1992 FN_LOCAL_STRING(lp_queuepausecommand, szQueuepausecommand)
1993 FN_LOCAL_STRING(lp_queueresumecommand, szQueueresumecommand)
1994 static FN_LOCAL_STRING(_lp_printername, szPrintername)
1995 FN_LOCAL_LIST(lp_hostsallow, szHostsallow)
1996 FN_LOCAL_LIST(lp_hostsdeny, szHostsdeny)
1997 FN_LOCAL_STRING(lp_magicscript, szMagicScript)
1998 FN_LOCAL_STRING(lp_magicoutput, szMagicOutput)
1999 FN_LOCAL_STRING(lp_comment, comment)
2000 FN_LOCAL_STRING(lp_force_user, force_user)
2001 FN_LOCAL_STRING(lp_force_group, force_group)
2002 FN_LOCAL_LIST(lp_readlist, readlist)
2003 FN_LOCAL_LIST(lp_writelist, writelist)
2004 FN_LOCAL_LIST(lp_printer_admin, printer_admin)
2005 FN_LOCAL_STRING(lp_fstype, fstype)
2006 FN_LOCAL_LIST(lp_vfs_objects, szVfsObjects)
2007 FN_LOCAL_STRING(lp_msdfs_proxy, szMSDfsProxy)
2008 static FN_LOCAL_STRING(lp_volume, volume)
2009 FN_LOCAL_STRING(lp_mangled_map, szMangledMap)
2010 FN_LOCAL_STRING(lp_veto_files, szVetoFiles)
2011 FN_LOCAL_STRING(lp_hide_files, szHideFiles)
2012 FN_LOCAL_STRING(lp_veto_oplocks, szVetoOplockFiles)
2013 FN_LOCAL_BOOL(lp_msdfs_root, bMSDfsRoot)
2014 FN_LOCAL_STRING(lp_aio_write_behind, szAioWriteBehind)
2015 FN_LOCAL_STRING(lp_dfree_command, szDfree)
2016 FN_LOCAL_BOOL(lp_autoloaded, autoloaded)
2017 FN_LOCAL_BOOL(lp_preexec_close, bPreexecClose)
2018 FN_LOCAL_BOOL(lp_rootpreexec_close, bRootpreexecClose)
2019 FN_LOCAL_INTEGER(lp_casesensitive, iCaseSensitive)
2020 FN_LOCAL_BOOL(lp_preservecase, bCasePreserve)
2021 FN_LOCAL_BOOL(lp_shortpreservecase, bShortCasePreserve)
2022 FN_LOCAL_BOOL(lp_hide_dot_files, bHideDotFiles)
2023 FN_LOCAL_BOOL(lp_hide_special_files, bHideSpecialFiles)
2024 FN_LOCAL_BOOL(lp_hideunreadable, bHideUnReadable)
2025 FN_LOCAL_BOOL(lp_hideunwriteable_files, bHideUnWriteableFiles)
2026 FN_LOCAL_BOOL(lp_browseable, bBrowseable)
2027 FN_LOCAL_BOOL(lp_readonly, bRead_only)
2028 FN_LOCAL_BOOL(lp_no_set_dir, bNo_set_dir)
2029 FN_LOCAL_BOOL(lp_guest_ok, bGuest_ok)
2030 FN_LOCAL_BOOL(lp_guest_only, bGuest_only)
2031 FN_LOCAL_BOOL(lp_print_ok, bPrint_ok)
2032 FN_LOCAL_BOOL(lp_map_hidden, bMap_hidden)
2033 FN_LOCAL_BOOL(lp_map_archive, bMap_archive)
2034 FN_LOCAL_BOOL(lp_store_dos_attributes, bStoreDosAttributes)
2035 FN_LOCAL_BOOL(lp_dmapi_support, bDmapiSupport)
2036 FN_LOCAL_BOOL(lp_locking, bLocking)
2037 FN_LOCAL_INTEGER(lp_strict_locking, iStrictLocking)
2038 FN_LOCAL_BOOL(lp_posix_locking, bPosixLocking)
2039 FN_LOCAL_BOOL(lp_share_modes, bShareModes)
2040 FN_LOCAL_BOOL(lp_oplocks, bOpLocks)
2041 FN_LOCAL_BOOL(lp_level2_oplocks, bLevel2OpLocks)
2042 FN_LOCAL_BOOL(lp_onlyuser, bOnlyUser)
2043 FN_LOCAL_BOOL(lp_manglednames, bMangledNames)
2044 FN_LOCAL_BOOL(lp_widelinks, bWidelinks)
2045 FN_LOCAL_BOOL(lp_symlinks, bSymlinks)
2046 FN_LOCAL_BOOL(lp_syncalways, bSyncAlways)
2047 FN_LOCAL_BOOL(lp_strict_allocate, bStrictAllocate)
2048 FN_LOCAL_BOOL(lp_strict_sync, bStrictSync)
2049 FN_LOCAL_BOOL(lp_map_system, bMap_system)
2050 FN_LOCAL_BOOL(lp_delete_readonly, bDeleteReadonly)
2051 FN_LOCAL_BOOL(lp_fake_oplocks, bFakeOplocks)
2052 FN_LOCAL_BOOL(lp_recursive_veto_delete, bDeleteVetoFiles)
2053 FN_LOCAL_BOOL(lp_dos_filemode, bDosFilemode)
2054 FN_LOCAL_BOOL(lp_dos_filetimes, bDosFiletimes)
2055 FN_LOCAL_BOOL(lp_dos_filetime_resolution, bDosFiletimeResolution)
2056 FN_LOCAL_BOOL(lp_fake_dir_create_times, bFakeDirCreateTimes)
2057 FN_LOCAL_BOOL(lp_blocking_locks, bBlockingLocks)
2058 FN_LOCAL_BOOL(lp_inherit_perms, bInheritPerms)
2059 FN_LOCAL_BOOL(lp_inherit_acls, bInheritACLS)
2060 FN_LOCAL_BOOL(lp_inherit_owner, bInheritOwner)
2061 FN_LOCAL_BOOL(lp_use_client_driver, bUseClientDriver)
2062 FN_LOCAL_BOOL(lp_default_devmode, bDefaultDevmode)
2063 FN_LOCAL_BOOL(lp_force_printername, bForcePrintername)
2064 FN_LOCAL_BOOL(lp_nt_acl_support, bNTAclSupport)
2065 FN_LOCAL_BOOL(lp_force_unknown_acl_user, bForceUnknownAclUser)
2066 FN_LOCAL_BOOL(lp_ea_support, bEASupport)
2067 FN_LOCAL_BOOL(_lp_use_sendfile, bUseSendfile)
2068 FN_LOCAL_BOOL(lp_profile_acls, bProfileAcls)
2069 FN_LOCAL_BOOL(lp_map_acl_inherit, bMap_acl_inherit)
2070 FN_LOCAL_BOOL(lp_afs_share, bAfs_Share)
2071 FN_LOCAL_BOOL(lp_acl_check_permissions, bAclCheckPermissions)
2072 FN_LOCAL_BOOL(lp_acl_group_control, bAclGroupControl)
2073 FN_LOCAL_BOOL(lp_acl_map_full_control, bAclMapFullControl)
2074 FN_LOCAL_INTEGER(lp_create_mask, iCreate_mask)
2075 FN_LOCAL_INTEGER(lp_force_create_mode, iCreate_force_mode)
2076 FN_LOCAL_INTEGER(lp_security_mask, iSecurity_mask)
2077 FN_LOCAL_INTEGER(lp_force_security_mode, iSecurity_force_mode)
2078 FN_LOCAL_INTEGER(lp_dir_mask, iDir_mask)
2079 FN_LOCAL_INTEGER(lp_force_dir_mode, iDir_force_mode)
2080 FN_LOCAL_INTEGER(lp_dir_security_mask, iDir_Security_mask)
2081 FN_LOCAL_INTEGER(lp_force_dir_security_mode, iDir_Security_force_mode)
2082 FN_LOCAL_INTEGER(lp_max_connections, iMaxConnections)
2083 FN_LOCAL_INTEGER(lp_defaultcase, iDefaultCase)
2084 FN_LOCAL_INTEGER(lp_minprintspace, iMinPrintSpace)
2085 FN_LOCAL_INTEGER(lp_printing, iPrinting)
2086 FN_LOCAL_INTEGER(lp_max_reported_jobs, iMaxReportedPrintJobs)
2087 FN_LOCAL_INTEGER(lp_oplock_contention_limit, iOplockContentionLimit)
2088 FN_LOCAL_INTEGER(lp_csc_policy, iCSCPolicy)
2089 FN_LOCAL_INTEGER(lp_write_cache_size, iWriteCacheSize)
2090 FN_LOCAL_INTEGER(lp_block_size, iBlock_size)
2091 FN_LOCAL_INTEGER(lp_dfree_cache_time, iDfreeCacheTime)
2092 FN_LOCAL_INTEGER(lp_allocation_roundup_size, iallocation_roundup_size)
2093 FN_LOCAL_INTEGER(lp_aio_read_size, iAioReadSize)
2094 FN_LOCAL_INTEGER(lp_aio_write_size, iAioWriteSize)
2095 FN_LOCAL_INTEGER(lp_map_readonly, iMap_readonly)
2096 FN_LOCAL_CHAR(lp_magicchar, magic_char)
2097 FN_GLOBAL_INTEGER(lp_winbind_cache_time, &Globals.winbind_cache_time)
2098 FN_GLOBAL_LIST(lp_winbind_nss_info, &Globals.szWinbindNssInfo)
2099 FN_GLOBAL_INTEGER(lp_algorithmic_rid_base, &Globals.AlgorithmicRidBase)
2100 FN_GLOBAL_INTEGER(lp_name_cache_timeout, &Globals.name_cache_timeout)
2101 FN_GLOBAL_INTEGER(lp_client_signing, &Globals.client_signing)
2102 FN_GLOBAL_INTEGER(lp_server_signing, &Globals.server_signing)
2103
2104 /* local prototypes */
2105
2106 static int map_parameter(const char *pszParmName);
2107 static BOOL set_boolean(BOOL *pb, const char *pszParmValue);
2108 static int getservicebyname(const char *pszServiceName,
2109                             service * pserviceDest);
2110 static void copy_service(service * pserviceDest,
2111                          service * pserviceSource, BOOL *pcopymapDest);
2112 static BOOL service_ok(int iService);
2113 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue);
2114 static BOOL do_section(const char *pszSectionName);
2115 static void init_copymap(service * pservice);
2116 static BOOL hash_a_service(const char *name, int number);
2117 static void free_service_byindex(int iService);
2118 static char * canonicalize_servicename(const char *name);
2119
2120 /* This is a helper function for parametrical options support. */
2121 /* It returns a pointer to parametrical option value if it exists or NULL otherwise */
2122 /* Actual parametrical functions are quite simple */
2123 static param_opt_struct *get_parametrics(int snum, const char *type, const char *option)
2124 {
2125         BOOL global_section = False;
2126         char* param_key;
2127         param_opt_struct *data;
2128
2129         if (snum >= iNumServices) return NULL;
2130
2131         if (snum < 0) {
2132                 data = Globals.param_opt;
2133                 global_section = True;
2134         } else {
2135                 data = ServicePtrs[snum]->param_opt;
2136         }
2137
2138         asprintf(&param_key, "%s:%s", type, option);
2139         if (!param_key) {
2140                 DEBUG(0,("asprintf failed!\n"));
2141                 return NULL;
2142         }
2143
2144         while (data) {
2145                 if (strcmp(data->key, param_key) == 0) {
2146                         string_free(&param_key);
2147                         return data;
2148                 }
2149                 data = data->next;
2150         }
2151
2152         if (!global_section) {
2153                 /* Try to fetch the same option but from globals */
2154                 /* but only if we are not already working with Globals */
2155                 data = Globals.param_opt;
2156                 while (data) {
2157                         if (strcmp(data->key, param_key) == 0) {
2158                                 string_free(&param_key);
2159                                 return data;
2160                         }
2161                         data = data->next;
2162                 }
2163         }
2164
2165         string_free(&param_key);
2166
2167         return NULL;
2168 }
2169
2170
2171 #define MISSING_PARAMETER(name) \
2172     DEBUG(0, ("%s(): value is NULL or empty!\n", #name))
2173
2174 /*******************************************************************
2175 convenience routine to return int parameters.
2176 ********************************************************************/
2177 static int lp_int(const char *s)
2178 {
2179
2180         if (!s || !*s) {
2181                 MISSING_PARAMETER(lp_int);
2182                 return (-1);
2183         }
2184
2185         return atoi(s);
2186 }
2187
2188 /*******************************************************************
2189 convenience routine to return unsigned long parameters.
2190 ********************************************************************/
2191 static unsigned long lp_ulong(const char *s)
2192 {
2193
2194         if (!s || !*s) {
2195                 MISSING_PARAMETER(lp_ulong);
2196                 return (0);
2197         }
2198
2199         return strtoul(s, NULL, 10);
2200 }
2201
2202 /*******************************************************************
2203 convenience routine to return boolean parameters.
2204 ********************************************************************/
2205 static BOOL lp_bool(const char *s)
2206 {
2207         BOOL ret = False;
2208
2209         if (!s || !*s) {
2210                 MISSING_PARAMETER(lp_bool);
2211                 return False;
2212         }
2213
2214         if (!set_boolean(&ret,s)) {
2215                 DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
2216                 return False;
2217         }
2218
2219         return ret;
2220 }
2221
2222 /*******************************************************************
2223 convenience routine to return enum parameters.
2224 ********************************************************************/
2225 static int lp_enum(const char *s,const struct enum_list *_enum)
2226 {
2227         int i;
2228
2229         if (!s || !*s || !_enum) {
2230                 MISSING_PARAMETER(lp_enum);
2231                 return (-1);
2232         }
2233
2234         for (i=0; _enum[i].name; i++) {
2235                 if (strequal(_enum[i].name,s))
2236                         return _enum[i].value;
2237         }
2238
2239         DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
2240         return (-1);
2241 }
2242
2243 #undef MISSING_PARAMETER
2244
2245 /* DO NOT USE lp_parm_string ANYMORE!!!!
2246  * use lp_parm_const_string or lp_parm_talloc_string
2247  *
2248  * lp_parm_string is only used to let old modules find this symbol
2249  */
2250 #undef lp_parm_string
2251  char *lp_parm_string(const char *servicename, const char *type, const char *option)
2252 {
2253         return lp_parm_talloc_string(lp_servicenumber(servicename), type, option, NULL);
2254 }
2255
2256 /* Return parametric option from a given service. Type is a part of option before ':' */
2257 /* Parametric option has following syntax: 'Type: option = value' */
2258 /* the returned value is talloced in lp_talloc */
2259 char *lp_parm_talloc_string(int snum, const char *type, const char *option, const char *def)
2260 {
2261         param_opt_struct *data = get_parametrics(snum, type, option);
2262
2263         if (data == NULL||data->value==NULL) {
2264                 if (def) {
2265                         return lp_string(def);
2266                 } else {
2267                         return NULL;
2268                 }
2269         }
2270
2271         return lp_string(data->value);
2272 }
2273
2274 /* Return parametric option from a given service. Type is a part of option before ':' */
2275 /* Parametric option has following syntax: 'Type: option = value' */
2276 const char *lp_parm_const_string(int snum, const char *type, const char *option, const char *def)
2277 {
2278         param_opt_struct *data = get_parametrics(snum, type, option);
2279
2280         if (data == NULL||data->value==NULL)
2281                 return def;
2282
2283         return data->value;
2284 }
2285
2286 /* Return parametric option from a given service. Type is a part of option before ':' */
2287 /* Parametric option has following syntax: 'Type: option = value' */
2288
2289 const char **lp_parm_string_list(int snum, const char *type, const char *option, const char **def)
2290 {
2291         param_opt_struct *data = get_parametrics(snum, type, option);
2292
2293         if (data == NULL||data->value==NULL)
2294                 return (const char **)def;
2295
2296         if (data->list==NULL) {
2297                 data->list = str_list_make(data->value, NULL);
2298         }
2299
2300         return (const char **)data->list;
2301 }
2302
2303 /* Return parametric option from a given service. Type is a part of option before ':' */
2304 /* Parametric option has following syntax: 'Type: option = value' */
2305
2306 int lp_parm_int(int snum, const char *type, const char *option, int def)
2307 {
2308         param_opt_struct *data = get_parametrics(snum, type, option);
2309
2310         if (data && data->value && *data->value)
2311                 return lp_int(data->value);
2312
2313         return def;
2314 }
2315
2316 /* Return parametric option from a given service. Type is a part of option before ':' */
2317 /* Parametric option has following syntax: 'Type: option = value' */
2318
2319 unsigned long lp_parm_ulong(int snum, const char *type, const char *option, unsigned long def)
2320 {
2321         param_opt_struct *data = get_parametrics(snum, type, option);
2322
2323         if (data && data->value && *data->value)
2324                 return lp_ulong(data->value);
2325
2326         return def;
2327 }
2328
2329 /* Return parametric option from a given service. Type is a part of option before ':' */
2330 /* Parametric option has following syntax: 'Type: option = value' */
2331
2332 BOOL lp_parm_bool(int snum, const char *type, const char *option, BOOL def)
2333 {
2334         param_opt_struct *data = get_parametrics(snum, type, option);
2335
2336         if (data && data->value && *data->value)
2337                 return lp_bool(data->value);
2338
2339         return def;
2340 }
2341
2342 /* Return parametric option from a given service. Type is a part of option before ':' */
2343 /* Parametric option has following syntax: 'Type: option = value' */
2344
2345 int lp_parm_enum(int snum, const char *type, const char *option,
2346                  const struct enum_list *_enum, int def)
2347 {
2348         param_opt_struct *data = get_parametrics(snum, type, option);
2349
2350         if (data && data->value && *data->value && _enum)
2351                 return lp_enum(data->value, _enum);
2352
2353         return def;
2354 }
2355
2356
2357 /***************************************************************************
2358  Initialise a service to the defaults.
2359 ***************************************************************************/
2360
2361 static void init_service(service * pservice)
2362 {
2363         memset((char *)pservice, '\0', sizeof(service));
2364         copy_service(pservice, &sDefault, NULL);
2365 }
2366
2367 /***************************************************************************
2368  Free the dynamically allocated parts of a service struct.
2369 ***************************************************************************/
2370
2371 static void free_service(service *pservice)
2372 {
2373         int i;
2374         param_opt_struct *data, *pdata;
2375         if (!pservice)
2376                 return;
2377
2378         if (pservice->szService)
2379                 DEBUG(5, ("free_service: Freeing service %s\n",
2380                        pservice->szService));
2381
2382         string_free(&pservice->szService);
2383         SAFE_FREE(pservice->copymap);
2384
2385         for (i = 0; parm_table[i].label; i++) {
2386                 if ((parm_table[i].type == P_STRING ||
2387                      parm_table[i].type == P_USTRING) &&
2388                     parm_table[i].p_class == P_LOCAL)
2389                         string_free((char **)
2390                                     (((char *)pservice) +
2391                                      PTR_DIFF(parm_table[i].ptr, &sDefault)));
2392                 else if (parm_table[i].type == P_LIST &&
2393                          parm_table[i].p_class == P_LOCAL)
2394                              str_list_free((char ***)
2395                                             (((char *)pservice) +
2396                                              PTR_DIFF(parm_table[i].ptr, &sDefault)));
2397         }
2398
2399         data = pservice->param_opt;
2400         if (data)
2401                 DEBUG(5,("Freeing parametrics:\n"));
2402         while (data) {
2403                 DEBUG(5,("[%s = %s]\n", data->key, data->value));
2404                 string_free(&data->key);
2405                 string_free(&data->value);
2406                 str_list_free(&data->list);
2407                 pdata = data->next;
2408                 SAFE_FREE(data);
2409                 data = pdata;
2410         }
2411
2412         ZERO_STRUCTP(pservice);
2413 }
2414
2415
2416 /***************************************************************************
2417  remove a service indexed in the ServicePtrs array from the ServiceHash
2418  and free the dynamically allocated parts
2419 ***************************************************************************/
2420
2421 static void free_service_byindex(int idx)
2422 {
2423         if ( !LP_SNUM_OK(idx) )
2424                 return;
2425
2426         ServicePtrs[idx]->valid = False;
2427         invalid_services[num_invalid_services++] = idx;
2428
2429         /* we have to cleanup the hash record */
2430
2431         if (ServicePtrs[idx]->szService) {
2432                 char *canon_name = canonicalize_servicename( ServicePtrs[idx]->szService );
2433
2434                 tdb_delete_bystring(ServiceHash, canon_name );
2435         }
2436
2437         free_service(ServicePtrs[idx]);
2438 }
2439
2440 /***************************************************************************
2441  Add a new service to the services array initialising it with the given
2442  service.
2443 ***************************************************************************/
2444
2445 static int add_a_service(const service *pservice, const char *name)
2446 {
2447         int i;
2448         service tservice;
2449         int num_to_alloc = iNumServices + 1;
2450         param_opt_struct *data, *pdata;
2451
2452         tservice = *pservice;
2453
2454         /* it might already exist */
2455         if (name) {
2456                 i = getservicebyname(name, NULL);
2457                 if (i >= 0) {
2458                         /* Clean all parametric options for service */
2459                         /* They will be added during parsing again */
2460                         data = ServicePtrs[i]->param_opt;
2461                         while (data) {
2462                                 string_free(&data->key);
2463                                 string_free(&data->value);
2464                                 str_list_free(&data->list);
2465                                 pdata = data->next;
2466                                 SAFE_FREE(data);
2467                                 data = pdata;
2468                         }
2469                         ServicePtrs[i]->param_opt = NULL;
2470                         return (i);
2471                 }
2472         }
2473
2474         /* find an invalid one */
2475         i = iNumServices;
2476         if (num_invalid_services > 0) {
2477                 i = invalid_services[--num_invalid_services];
2478         }
2479
2480         /* if not, then create one */
2481         if (i == iNumServices) {
2482                 service **tsp;
2483                 int *tinvalid;
2484
2485                 tsp = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(ServicePtrs, service *, num_to_alloc);
2486                 if (tsp == NULL) {
2487                         DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
2488                         return (-1);
2489                 }
2490                 ServicePtrs = tsp;
2491                 ServicePtrs[iNumServices] = SMB_MALLOC_P(service);
2492                 if (!ServicePtrs[iNumServices]) {
2493                         DEBUG(0,("add_a_service: out of memory!\n"));
2494                         return (-1);
2495                 }
2496                 iNumServices++;
2497
2498                 /* enlarge invalid_services here for now... */
2499                 tinvalid = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(invalid_services, int,
2500                                              num_to_alloc);
2501                 if (tinvalid == NULL) {
2502                         DEBUG(0,("add_a_service: failed to enlarge "
2503                                  "invalid_services!\n"));
2504                         return (-1);
2505                 }
2506                 invalid_services = tinvalid;
2507         } else {
2508                 free_service_byindex(i);
2509         }
2510
2511         ServicePtrs[i]->valid = True;
2512
2513         init_service(ServicePtrs[i]);
2514         copy_service(ServicePtrs[i], &tservice, NULL);
2515         if (name)
2516                 string_set(&ServicePtrs[i]->szService, name);
2517
2518         DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
2519                 i, ServicePtrs[i]->szService));
2520
2521         if (!hash_a_service(ServicePtrs[i]->szService, i)) {
2522                 return (-1);
2523         }
2524
2525         return (i);
2526 }
2527
2528 /***************************************************************************
2529   Convert a string to uppercase and remove whitespaces.
2530 ***************************************************************************/
2531
2532 static char *canonicalize_servicename(const char *src)
2533 {
2534         static fstring canon; /* is fstring large enough? */
2535
2536         if ( !src ) {
2537                 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
2538                 return NULL;
2539         }
2540
2541         fstrcpy( canon, src );
2542         strlower_m( canon );
2543
2544         return canon;
2545 }
2546
2547 /***************************************************************************
2548   Add a name/index pair for the services array to the hash table.
2549 ***************************************************************************/
2550
2551 static BOOL hash_a_service(const char *name, int idx)
2552 {
2553         char *canon_name;
2554
2555         if ( !ServiceHash ) {
2556                 DEBUG(10,("hash_a_service: creating tdb servicehash\n"));
2557                 ServiceHash = tdb_open("servicehash", 1031, TDB_INTERNAL,
2558                                         (O_RDWR|O_CREAT), 0600);
2559                 if ( !ServiceHash ) {
2560                         DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
2561                         return False;
2562                 }
2563         }
2564
2565         DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
2566                 idx, name));
2567
2568         if ( !(canon_name = canonicalize_servicename( name )) )
2569                 return False;
2570
2571         tdb_store_int32(ServiceHash, canon_name, idx);
2572
2573         return True;
2574 }
2575
2576 /***************************************************************************
2577  Add a new home service, with the specified home directory, defaults coming
2578  from service ifrom.
2579 ***************************************************************************/
2580
2581 BOOL lp_add_home(const char *pszHomename, int iDefaultService,
2582                  const char *user, const char *pszHomedir)
2583 {
2584         int i;
2585         pstring newHomedir;
2586
2587         i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
2588
2589         if (i < 0)
2590                 return (False);
2591
2592         if (!(*(ServicePtrs[iDefaultService]->szPath))
2593             || strequal(ServicePtrs[iDefaultService]->szPath, lp_pathname(GLOBAL_SECTION_SNUM))) {
2594                 pstrcpy(newHomedir, pszHomedir);
2595                 string_set(&ServicePtrs[i]->szPath, newHomedir);
2596         }
2597
2598         if (!(*(ServicePtrs[i]->comment))) {
2599                 pstring comment;
2600                 slprintf(comment, sizeof(comment) - 1,
2601                          "Home directory of %s", user);
2602                 string_set(&ServicePtrs[i]->comment, comment);
2603         }
2604
2605         /* set the browseable flag from the global default */
2606
2607         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2608
2609         ServicePtrs[i]->autoloaded = True;
2610
2611         DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename,
2612                user, ServicePtrs[i]->szPath ));
2613
2614         return (True);
2615 }
2616
2617 /***************************************************************************
2618  Add a new service, based on an old one.
2619 ***************************************************************************/
2620
2621 int lp_add_service(const char *pszService, int iDefaultService)
2622 {
2623         return (add_a_service(ServicePtrs[iDefaultService], pszService));
2624 }
2625
2626 /***************************************************************************
2627  Add the IPC service.
2628 ***************************************************************************/
2629
2630 static BOOL lp_add_ipc(const char *ipc_name, BOOL guest_ok)
2631 {
2632         pstring comment;
2633         int i = add_a_service(&sDefault, ipc_name);
2634
2635         if (i < 0)
2636                 return (False);
2637
2638         slprintf(comment, sizeof(comment) - 1,
2639                  "IPC Service (%s)", Globals.szServerString);
2640
2641         string_set(&ServicePtrs[i]->szPath, tmpdir());
2642         string_set(&ServicePtrs[i]->szUsername, "");
2643         string_set(&ServicePtrs[i]->comment, comment);
2644         string_set(&ServicePtrs[i]->fstype, "IPC");
2645         ServicePtrs[i]->iMaxConnections = 0;
2646         ServicePtrs[i]->bAvailable = True;
2647         ServicePtrs[i]->bRead_only = True;
2648         ServicePtrs[i]->bGuest_only = False;
2649         ServicePtrs[i]->bGuest_ok = guest_ok;
2650         ServicePtrs[i]->bPrint_ok = False;
2651         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2652
2653         DEBUG(3, ("adding IPC service\n"));
2654
2655         return (True);
2656 }
2657
2658 /***************************************************************************
2659  Add a new printer service, with defaults coming from service iFrom.
2660 ***************************************************************************/
2661
2662 BOOL lp_add_printer(const char *pszPrintername, int iDefaultService)
2663 {
2664         const char *comment = "From Printcap";
2665         int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
2666
2667         if (i < 0)
2668                 return (False);
2669
2670         /* note that we do NOT default the availability flag to True - */
2671         /* we take it from the default service passed. This allows all */
2672         /* dynamic printers to be disabled by disabling the [printers] */
2673         /* entry (if/when the 'available' keyword is implemented!).    */
2674
2675         /* the printer name is set to the service name. */
2676         string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
2677         string_set(&ServicePtrs[i]->comment, comment);
2678
2679         /* set the browseable flag from the gloabl default */
2680         ServicePtrs[i]->bBrowseable = sDefault.bBrowseable;
2681
2682         /* Printers cannot be read_only. */
2683         ServicePtrs[i]->bRead_only = False;
2684         /* No share modes on printer services. */
2685         ServicePtrs[i]->bShareModes = False;
2686         /* No oplocks on printer services. */
2687         ServicePtrs[i]->bOpLocks = False;
2688         /* Printer services must be printable. */
2689         ServicePtrs[i]->bPrint_ok = True;
2690
2691         DEBUG(3, ("adding printer service %s\n", pszPrintername));
2692
2693         return (True);
2694 }
2695
2696 /***************************************************************************
2697  Map a parameter's string representation to something we can use.
2698  Returns False if the parameter string is not recognised, else TRUE.
2699 ***************************************************************************/
2700
2701 static int map_parameter(const char *pszParmName)
2702 {
2703         int iIndex;
2704
2705         if (*pszParmName == '-')
2706                 return (-1);
2707
2708         for (iIndex = 0; parm_table[iIndex].label; iIndex++)
2709                 if (strwicmp(parm_table[iIndex].label, pszParmName) == 0)
2710                         return (iIndex);
2711
2712         /* Warn only if it isn't parametric option */
2713         if (strchr(pszParmName, ':') == NULL)
2714                 DEBUG(0, ("Unknown parameter encountered: \"%s\"\n", pszParmName));
2715         /* We do return 'fail' for parametric options as well because they are
2716            stored in different storage
2717          */
2718         return (-1);
2719 }
2720
2721 /***************************************************************************
2722  Show all parameter's name, type, [values,] and flags.
2723 ***************************************************************************/
2724
2725 void show_parameter_list(void)
2726 {
2727         int classIndex, parmIndex, enumIndex, flagIndex;
2728         BOOL hadFlag;
2729         const char *section_names[] = { "local", "global", NULL};
2730         const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
2731                 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING", "P_GSTRING",
2732                 "P_UGSTRING", "P_ENUM", "P_SEP"};
2733         unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
2734                 FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
2735                 FLAG_HIDE, FLAG_DOS_STRING};
2736         const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
2737                 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
2738                 "FLAG_DEPRECATED", "FLAG_HIDE", "FLAG_DOS_STRING", NULL};
2739
2740         for ( classIndex=0; section_names[classIndex]; classIndex++) {
2741                 printf("[%s]\n", section_names[classIndex]);
2742                 for (parmIndex = 0; parm_table[parmIndex].label; parmIndex++) {
2743                         if (parm_table[parmIndex].p_class == classIndex) {
2744                                 printf("%s=%s",
2745                                         parm_table[parmIndex].label,
2746                                         type[parm_table[parmIndex].type]);
2747                                 switch (parm_table[parmIndex].type) {
2748                                 case P_ENUM:
2749                                         printf(",");
2750                                         for (enumIndex=0; parm_table[parmIndex].enum_list[enumIndex].name; enumIndex++)
2751                                                 printf("%s%s",
2752                                                         enumIndex ? "|" : "",
2753                                                         parm_table[parmIndex].enum_list[enumIndex].name);
2754                                         break;
2755                                 default:
2756                                         break;
2757                                 }
2758                                 printf(",");
2759                                 hadFlag = False;
2760                                 for ( flagIndex=0; flag_names[flagIndex]; flagIndex++ ) {
2761                                         if (parm_table[parmIndex].flags & flags[flagIndex]) {
2762                                                 printf("%s%s",
2763                                                         hadFlag ? "|" : "",
2764                                                         flag_names[flagIndex]);
2765                                                 hadFlag = True;
2766                                         }
2767                                 }
2768                                 printf("\n");
2769                         }
2770                 }
2771         }
2772 }
2773
2774 /***************************************************************************
2775  Set a boolean variable from the text value stored in the passed string.
2776  Returns True in success, False if the passed string does not correctly
2777  represent a boolean.
2778 ***************************************************************************/
2779
2780 static BOOL set_boolean(BOOL *pb, const char *pszParmValue)
2781 {
2782         BOOL bRetval;
2783
2784         bRetval = True;
2785         if (strwicmp(pszParmValue, "yes") == 0 ||
2786             strwicmp(pszParmValue, "true") == 0 ||
2787             strwicmp(pszParmValue, "1") == 0)
2788                 *pb = True;
2789         else if (strwicmp(pszParmValue, "no") == 0 ||
2790                     strwicmp(pszParmValue, "False") == 0 ||
2791                     strwicmp(pszParmValue, "0") == 0)
2792                 *pb = False;
2793         else {
2794                 DEBUG(0,
2795                       ("ERROR: Badly formed boolean in configuration file: \"%s\".\n",
2796                        pszParmValue));
2797                 bRetval = False;
2798         }
2799         return (bRetval);
2800 }
2801
2802 /***************************************************************************
2803 Find a service by name. Otherwise works like get_service.
2804 ***************************************************************************/
2805
2806 static int getservicebyname(const char *pszServiceName, service * pserviceDest)
2807 {
2808         int iService = -1;
2809         char *canon_name;
2810
2811         if (ServiceHash != NULL) {
2812                 if ( !(canon_name = canonicalize_servicename( pszServiceName )) )
2813                         return -1;
2814
2815                 iService = tdb_fetch_int32(ServiceHash, canon_name );
2816
2817                 if (LP_SNUM_OK(iService)) {
2818                         if (pserviceDest != NULL) {
2819                                 copy_service(pserviceDest, ServicePtrs[iService], NULL);
2820                         }
2821                 } else {
2822                         iService = -1;
2823                 }
2824         }
2825
2826         return (iService);
2827 }
2828
2829 /***************************************************************************
2830  Copy a service structure to another.
2831  If pcopymapDest is NULL then copy all fields
2832 ***************************************************************************/
2833
2834 static void copy_service(service * pserviceDest, service * pserviceSource, BOOL *pcopymapDest)
2835 {
2836         int i;
2837         BOOL bcopyall = (pcopymapDest == NULL);
2838         param_opt_struct *data, *pdata, *paramo;
2839         BOOL not_added;
2840
2841         for (i = 0; parm_table[i].label; i++)
2842                 if (parm_table[i].ptr && parm_table[i].p_class == P_LOCAL &&
2843                     (bcopyall || pcopymapDest[i])) {
2844                         void *def_ptr = parm_table[i].ptr;
2845                         void *src_ptr =
2846                                 ((char *)pserviceSource) + PTR_DIFF(def_ptr,
2847                                                                     &sDefault);
2848                         void *dest_ptr =
2849                                 ((char *)pserviceDest) + PTR_DIFF(def_ptr,
2850                                                                   &sDefault);
2851
2852                         switch (parm_table[i].type) {
2853                                 case P_BOOL:
2854                                 case P_BOOLREV:
2855                                         *(BOOL *)dest_ptr = *(BOOL *)src_ptr;
2856                                         break;
2857
2858                                 case P_INTEGER:
2859                                 case P_ENUM:
2860                                 case P_OCTAL:
2861                                         *(int *)dest_ptr = *(int *)src_ptr;
2862                                         break;
2863
2864                                 case P_CHAR:
2865                                         *(char *)dest_ptr = *(char *)src_ptr;
2866                                         break;
2867
2868                                 case P_STRING:
2869                                         string_set((char **)dest_ptr,
2870                                                    *(char **)src_ptr);
2871                                         break;
2872
2873                                 case P_USTRING:
2874                                         string_set((char **)dest_ptr,
2875                                                    *(char **)src_ptr);
2876                                         strupper_m(*(char **)dest_ptr);
2877                                         break;
2878                                 case P_LIST:
2879                                         str_list_free((char ***)dest_ptr);
2880                                         str_list_copy((char ***)dest_ptr, *(const char ***)src_ptr);
2881                                         break;
2882                                 default:
2883                                         break;
2884                         }
2885                 }
2886
2887         if (bcopyall) {
2888                 init_copymap(pserviceDest);
2889                 if (pserviceSource->copymap)
2890                         memcpy((void *)pserviceDest->copymap,
2891                                (void *)pserviceSource->copymap,
2892                                sizeof(BOOL) * NUMPARAMETERS);
2893         }
2894
2895         data = pserviceSource->param_opt;
2896         while (data) {
2897                 not_added = True;
2898                 pdata = pserviceDest->param_opt;
2899                 /* Traverse destination */
2900                 while (pdata) {
2901                         /* If we already have same option, override it */
2902                         if (strcmp(pdata->key, data->key) == 0) {
2903                                 string_free(&pdata->value);
2904                                 str_list_free(&data->list);
2905                                 pdata->value = SMB_STRDUP(data->value);
2906                                 not_added = False;
2907                                 break;
2908                         }
2909                         pdata = pdata->next;
2910                 }
2911                 if (not_added) {
2912                     paramo = SMB_XMALLOC_P(param_opt_struct);
2913                     paramo->key = SMB_STRDUP(data->key);
2914                     paramo->value = SMB_STRDUP(data->value);
2915                     paramo->list = NULL;
2916                     DLIST_ADD(pserviceDest->param_opt, paramo);
2917                 }
2918                 data = data->next;
2919         }
2920 }
2921
2922 /***************************************************************************
2923 Check a service for consistency. Return False if the service is in any way
2924 incomplete or faulty, else True.
2925 ***************************************************************************/
2926
2927 static BOOL service_ok(int iService)
2928 {
2929         BOOL bRetval;
2930
2931         bRetval = True;
2932         if (ServicePtrs[iService]->szService[0] == '\0') {
2933                 DEBUG(0, ("The following message indicates an internal error:\n"));
2934                 DEBUG(0, ("No service name in service entry.\n"));
2935                 bRetval = False;
2936         }
2937
2938         /* The [printers] entry MUST be printable. I'm all for flexibility, but */
2939         /* I can't see why you'd want a non-printable printer service...        */
2940         if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
2941                 if (!ServicePtrs[iService]->bPrint_ok) {
2942                         DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
2943                                ServicePtrs[iService]->szService));
2944                         ServicePtrs[iService]->bPrint_ok = True;
2945                 }
2946                 /* [printers] service must also be non-browsable. */
2947                 if (ServicePtrs[iService]->bBrowseable)
2948                         ServicePtrs[iService]->bBrowseable = False;
2949         }
2950
2951         if (ServicePtrs[iService]->szPath[0] == '\0' &&
2952             strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0 &&
2953             ServicePtrs[iService]->szMSDfsProxy[0] == '\0'
2954             ) {
2955                 DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
2956                         ServicePtrs[iService]->szService));
2957                 ServicePtrs[iService]->bAvailable = False;
2958         }
2959
2960         /* If a service is flagged unavailable, log the fact at level 0. */
2961         if (!ServicePtrs[iService]->bAvailable)
2962                 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
2963                           ServicePtrs[iService]->szService));
2964
2965         return (bRetval);
2966 }
2967
2968 static struct file_lists {
2969         struct file_lists *next;
2970         char *name;
2971         char *subfname;
2972         time_t modtime;
2973 } *file_lists = NULL;
2974
2975 /*******************************************************************
2976  Keep a linked list of all config files so we know when one has changed
2977  it's date and needs to be reloaded.
2978 ********************************************************************/
2979
2980 static void add_to_file_list(const char *fname, const char *subfname)
2981 {
2982         struct file_lists *f = file_lists;
2983
2984         while (f) {
2985                 if (f->name && !strcmp(f->name, fname))
2986                         break;
2987                 f = f->next;
2988         }
2989
2990         if (!f) {
2991                 f = SMB_MALLOC_P(struct file_lists);
2992                 if (!f)
2993                         return;
2994                 f->next = file_lists;
2995                 f->name = SMB_STRDUP(fname);
2996                 if (!f->name) {
2997                         SAFE_FREE(f);
2998                         return;
2999                 }
3000                 f->subfname = SMB_STRDUP(subfname);
3001                 if (!f->subfname) {
3002                         SAFE_FREE(f);
3003                         return;
3004                 }
3005                 file_lists = f;
3006                 f->modtime = file_modtime(subfname);
3007         } else {
3008                 time_t t = file_modtime(subfname);
3009                 if (t)
3010                         f->modtime = t;
3011         }
3012 }
3013
3014 /*******************************************************************
3015  Check if a config file has changed date.
3016 ********************************************************************/
3017
3018 BOOL lp_file_list_changed(void)
3019 {
3020         struct file_lists *f = file_lists;
3021
3022         DEBUG(6, ("lp_file_list_changed()\n"));
3023
3024         while (f) {
3025                 pstring n2;
3026                 time_t mod_time;
3027
3028                 pstrcpy(n2, f->name);
3029                 standard_sub_basic( get_current_username(), n2, sizeof(n2) );
3030
3031                 DEBUGADD(6, ("file %s -> %s  last mod_time: %s\n",
3032                              f->name, n2, ctime(&f->modtime)));
3033
3034                 mod_time = file_modtime(n2);
3035
3036                 if (mod_time && ((f->modtime != mod_time) || (f->subfname == NULL) || (strcmp(n2, f->subfname) != 0))) {
3037                         DEBUGADD(6,
3038                                  ("file %s modified: %s\n", n2,
3039                                   ctime(&mod_time)));
3040                         f->modtime = mod_time;
3041                         SAFE_FREE(f->subfname);
3042                         f->subfname = SMB_STRDUP(n2);
3043                         return (True);
3044                 }
3045                 f = f->next;
3046         }
3047         return (False);
3048 }
3049
3050 /***************************************************************************
3051  Run standard_sub_basic on netbios name... needed because global_myname
3052  is not accessed through any lp_ macro.
3053  Note: We must *NOT* use string_set() here as ptr points to global_myname.
3054 ***************************************************************************/
3055
3056 static BOOL handle_netbios_name(int snum, const char *pszParmValue, char **ptr)
3057 {
3058         BOOL ret;
3059         pstring netbios_name;
3060
3061         pstrcpy(netbios_name, pszParmValue);
3062
3063         standard_sub_basic(get_current_username(), netbios_name,sizeof(netbios_name));
3064
3065         ret = set_global_myname(netbios_name);
3066         string_set(&Globals.szNetbiosName,global_myname());
3067
3068         DEBUG(4, ("handle_netbios_name: set global_myname to: %s\n",
3069                global_myname()));
3070
3071         return ret;
3072 }
3073
3074 static BOOL handle_charset(int snum, const char *pszParmValue, char **ptr)
3075 {
3076         if (strcmp(*ptr, pszParmValue) != 0) {
3077                 string_set(ptr, pszParmValue);
3078                 init_iconv();
3079         }
3080         return True;
3081 }
3082
3083
3084
3085 static BOOL handle_workgroup(int snum, const char *pszParmValue, char **ptr)
3086 {
3087         BOOL ret;
3088
3089         ret = set_global_myworkgroup(pszParmValue);
3090         string_set(&Globals.szWorkgroup,lp_workgroup());
3091
3092         return ret;
3093 }
3094
3095 static BOOL handle_netbios_scope(int snum, const char *pszParmValue, char **ptr)
3096 {
3097         BOOL ret;
3098
3099         ret = set_global_scope(pszParmValue);
3100         string_set(&Globals.szNetbiosScope,global_scope());
3101
3102         return ret;
3103 }
3104
3105 static BOOL handle_netbios_aliases(int snum, const char *pszParmValue, char **ptr)
3106 {
3107         str_list_free(&Globals.szNetbiosAliases);
3108         Globals.szNetbiosAliases = str_list_make(pszParmValue, NULL);
3109         return set_netbios_aliases((const char **)Globals.szNetbiosAliases);
3110 }
3111
3112 /***************************************************************************
3113  Handle the include operation.
3114 ***************************************************************************/
3115
3116 static BOOL handle_include(int snum, const char *pszParmValue, char **ptr)
3117 {
3118         pstring fname;
3119         pstrcpy(fname, pszParmValue);
3120
3121         standard_sub_basic(get_current_username(), fname,sizeof(fname));
3122
3123         add_to_file_list(pszParmValue, fname);
3124
3125         string_set(ptr, fname);
3126
3127         if (file_exist(fname, NULL))
3128                 return (pm_process(fname, do_section, do_parameter));
3129
3130         DEBUG(2, ("Can't find include file %s\n", fname));
3131
3132         return (False);
3133 }
3134
3135 /***************************************************************************
3136  Handle the interpretation of the copy parameter.
3137 ***************************************************************************/
3138
3139 static BOOL handle_copy(int snum, const char *pszParmValue, char **ptr)
3140 {
3141         BOOL bRetval;
3142         int iTemp;
3143         service serviceTemp;
3144
3145         string_set(ptr, pszParmValue);
3146
3147         init_service(&serviceTemp);
3148
3149         bRetval = False;
3150
3151         DEBUG(3, ("Copying service from service %s\n", pszParmValue));
3152
3153         if ((iTemp = getservicebyname(pszParmValue, &serviceTemp)) >= 0) {
3154                 if (iTemp == iServiceIndex) {
3155                         DEBUG(0, ("Can't copy service %s - unable to copy self!\n", pszParmValue));
3156                 } else {
3157                         copy_service(ServicePtrs[iServiceIndex],
3158                                      &serviceTemp,
3159                                      ServicePtrs[iServiceIndex]->copymap);
3160                         bRetval = True;
3161                 }
3162         } else {
3163                 DEBUG(0, ("Unable to copy service - source not found: %s\n", pszParmValue));
3164                 bRetval = False;
3165         }
3166
3167         free_service(&serviceTemp);
3168         return (bRetval);
3169 }
3170
3171 /***************************************************************************
3172  Handle idmap/non unix account uid and gid allocation parameters.  The format of these
3173  parameters is:
3174
3175  [global]
3176
3177         idmap uid = 1000-1999
3178         idmap gid = 700-899
3179
3180  We only do simple parsing checks here.  The strings are parsed into useful
3181  structures in the idmap daemon code.
3182
3183 ***************************************************************************/
3184
3185 /* Some lp_ routines to return idmap [ug]id information */
3186
3187 static uid_t idmap_uid_low, idmap_uid_high;
3188 static gid_t idmap_gid_low, idmap_gid_high;
3189
3190 BOOL lp_idmap_uid(uid_t *low, uid_t *high)
3191 {
3192         if (idmap_uid_low == 0 || idmap_uid_high == 0)
3193                 return False;
3194
3195         if (low)
3196                 *low = idmap_uid_low;
3197
3198         if (high)
3199                 *high = idmap_uid_high;
3200
3201         return True;
3202 }
3203
3204 BOOL lp_idmap_gid(gid_t *low, gid_t *high)
3205 {
3206         if (idmap_gid_low == 0 || idmap_gid_high == 0)
3207                 return False;
3208
3209         if (low)
3210                 *low = idmap_gid_low;
3211
3212         if (high)
3213                 *high = idmap_gid_high;
3214
3215         return True;
3216 }
3217
3218 /* Do some simple checks on "idmap [ug]id" parameter values */
3219
3220 static BOOL handle_idmap_uid(int snum, const char *pszParmValue, char **ptr)
3221 {
3222         uint32 low, high;
3223
3224         if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3225                 return False;
3226
3227         /* Parse OK */
3228
3229         string_set(ptr, pszParmValue);
3230
3231         idmap_uid_low = low;
3232         idmap_uid_high = high;
3233
3234         return True;
3235 }
3236
3237 static BOOL handle_idmap_gid(int snum, const char *pszParmValue, char **ptr)
3238 {
3239         uint32 low, high;
3240
3241         if (sscanf(pszParmValue, "%u - %u", &low, &high) != 2 || high < low)
3242                 return False;
3243
3244         /* Parse OK */
3245
3246         string_set(ptr, pszParmValue);
3247
3248         idmap_gid_low = low;
3249         idmap_gid_high = high;
3250
3251         return True;
3252 }
3253
3254 /***************************************************************************
3255  Handle the DEBUG level list.
3256 ***************************************************************************/
3257
3258 static BOOL handle_debug_list( int snum, const char *pszParmValueIn, char **ptr )
3259 {
3260         pstring pszParmValue;
3261
3262         pstrcpy(pszParmValue, pszParmValueIn);
3263         string_set(ptr, pszParmValueIn);
3264         return debug_parse_levels( pszParmValue );
3265 }
3266
3267 /***************************************************************************
3268  Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
3269 ***************************************************************************/
3270
3271 static char* append_ldap_suffix( const char *str )
3272 {
3273         char *suffix_string;
3274
3275
3276         if (!lp_talloc)
3277                 lp_talloc = talloc_init("lp_talloc");
3278
3279         suffix_string = talloc_asprintf( lp_talloc, "%s,%s", str, Globals.szLdapSuffix );
3280         if ( !suffix_string ) {
3281                 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
3282                 return NULL;
3283         }
3284
3285         return suffix_string;
3286 }
3287
3288 char *lp_ldap_machine_suffix(void)
3289 {
3290         if (Globals.szLdapMachineSuffix[0])
3291                 return append_ldap_suffix(Globals.szLdapMachineSuffix);
3292
3293         return lp_string(Globals.szLdapSuffix);
3294 }
3295
3296 char *lp_ldap_user_suffix(void)
3297 {
3298         if (Globals.szLdapUserSuffix[0])
3299                 return append_ldap_suffix(Globals.szLdapUserSuffix);
3300
3301         return lp_string(Globals.szLdapSuffix);
3302 }
3303
3304 char *lp_ldap_group_suffix(void)
3305 {
3306         if (Globals.szLdapGroupSuffix[0])
3307                 return append_ldap_suffix(Globals.szLdapGroupSuffix);
3308
3309         return lp_string(Globals.szLdapSuffix);
3310 }
3311
3312 char *lp_ldap_idmap_suffix(void)
3313 {
3314         if (Globals.szLdapIdmapSuffix[0])
3315                 return append_ldap_suffix(Globals.szLdapIdmapSuffix);
3316
3317         return lp_string(Globals.szLdapSuffix);
3318 }
3319
3320 /****************************************************************************
3321  set the value for a P_ENUM
3322  ***************************************************************************/
3323
3324 static void lp_set_enum_parm( struct parm_struct *parm, const char *pszParmValue,
3325                               int *ptr )
3326 {
3327         int i;
3328
3329         for (i = 0; parm->enum_list[i].name; i++) {
3330                 if ( strequal(pszParmValue, parm->enum_list[i].name)) {
3331                         *ptr = parm->enum_list[i].value;
3332                         break;
3333                 }
3334         }
3335 }
3336
3337 /***************************************************************************
3338 ***************************************************************************/
3339
3340 static BOOL handle_printing(int snum, const char *pszParmValue, char **ptr)
3341 {
3342         static int parm_num = -1;
3343         service *s;
3344
3345         if ( parm_num == -1 )
3346                 parm_num = map_parameter( "printing" );
3347
3348         lp_set_enum_parm( &parm_table[parm_num], pszParmValue, (int*)ptr );
3349
3350         if ( snum < 0 )
3351                 s = &sDefault;
3352         else
3353                 s = ServicePtrs[snum];
3354
3355         init_printer_values( s );
3356
3357         return True;
3358 }
3359
3360
3361 /***************************************************************************
3362  Initialise a copymap.
3363 ***************************************************************************/
3364
3365 static void init_copymap(service * pservice)
3366 {
3367         int i;
3368         SAFE_FREE(pservice->copymap);
3369         pservice->copymap = SMB_MALLOC_ARRAY(BOOL,NUMPARAMETERS);
3370         if (!pservice->copymap)
3371                 DEBUG(0,
3372                       ("Couldn't allocate copymap!! (size %d)\n",
3373                        (int)NUMPARAMETERS));
3374         else
3375                 for (i = 0; i < NUMPARAMETERS; i++)
3376                         pservice->copymap[i] = True;
3377 }
3378
3379 /***************************************************************************
3380  Return the local pointer to a parameter given the service number and the
3381  pointer into the default structure.
3382 ***************************************************************************/
3383
3384 void *lp_local_ptr(int snum, void *ptr)
3385 {
3386         return (void *)(((char *)ServicePtrs[snum]) + PTR_DIFF(ptr, &sDefault));
3387 }
3388
3389 /***************************************************************************
3390  Process a parameter for a particular service number. If snum < 0
3391  then assume we are in the globals.
3392 ***************************************************************************/
3393
3394 BOOL lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
3395 {
3396         int parmnum, i, slen;
3397         void *parm_ptr = NULL;  /* where we are going to store the result */
3398         void *def_ptr = NULL;
3399         pstring param_key;
3400         char *sep;
3401         param_opt_struct *paramo, *data;
3402         BOOL not_added;
3403
3404         parmnum = map_parameter(pszParmName);
3405
3406         if (parmnum < 0) {
3407                 if ((sep=strchr(pszParmName, ':')) != NULL) {
3408                         *sep = '\0';
3409                         ZERO_STRUCT(param_key);
3410                         pstr_sprintf(param_key, "%s:", pszParmName);
3411                         slen = strlen(param_key);
3412                         pstrcat(param_key, sep+1);
3413                         trim_char(param_key+slen, ' ', ' ');
3414                         not_added = True;
3415                         data = (snum < 0) ? Globals.param_opt :
3416                                 ServicePtrs[snum]->param_opt;
3417                         /* Traverse destination */
3418                         while (data) {
3419                                 /* If we already have same option, override it */
3420                                 if (strcmp(data->key, param_key) == 0) {
3421                                         string_free(&data->value);
3422                                         str_list_free(&data->list);
3423                                         data->value = SMB_STRDUP(pszParmValue);
3424                                         not_added = False;
3425                                         break;
3426                                 }
3427                                 data = data->next;
3428                         }
3429                         if (not_added) {
3430                                 paramo = SMB_XMALLOC_P(param_opt_struct);
3431                                 paramo->key = SMB_STRDUP(param_key);
3432                                 paramo->value = SMB_STRDUP(pszParmValue);
3433                                 paramo->list = NULL;
3434                                 if (snum < 0) {
3435                                         DLIST_ADD(Globals.param_opt, paramo);
3436                                 } else {
3437                                         DLIST_ADD(ServicePtrs[snum]->param_opt, paramo);
3438                                 }
3439                         }
3440
3441                         *sep = ':';
3442                         return (True);
3443                 }
3444                 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName));
3445                 return (True);
3446         }
3447
3448         if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
3449                 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
3450                           pszParmName));
3451         }
3452
3453         def_ptr = parm_table[parmnum].ptr;
3454
3455         /* we might point at a service, the default service or a global */
3456         if (snum < 0) {
3457                 parm_ptr = def_ptr;
3458         } else {
3459                 if (parm_table[parmnum].p_class == P_GLOBAL) {
3460                         DEBUG(0,
3461                               ("Global parameter %s found in service section!\n",
3462                                pszParmName));
3463                         return (True);
3464                 }
3465                 parm_ptr =
3466                         ((char *)ServicePtrs[snum]) + PTR_DIFF(def_ptr,
3467                                                             &sDefault);
3468         }
3469
3470         if (snum >= 0) {
3471                 if (!ServicePtrs[snum]->copymap)
3472                         init_copymap(ServicePtrs[snum]);
3473
3474                 /* this handles the aliases - set the copymap for other entries with
3475                    the same data pointer */
3476                 for (i = 0; parm_table[i].label; i++)
3477                         if (parm_table[i].ptr == parm_table[parmnum].ptr)
3478                                 ServicePtrs[snum]->copymap[i] = False;
3479         }
3480
3481         /* if it is a special case then go ahead */
3482         if (parm_table[parmnum].special) {
3483                 parm_table[parmnum].special(snum, pszParmValue, (char **)parm_ptr);
3484                 return (True);
3485         }
3486
3487         /* now switch on the type of variable it is */
3488         switch (parm_table[parmnum].type)
3489         {
3490                 case P_BOOL:
3491                         *(BOOL *)parm_ptr = lp_bool(pszParmValue);
3492                         break;
3493
3494                 case P_BOOLREV:
3495                         *(BOOL *)parm_ptr = !lp_bool(pszParmValue);
3496                         break;
3497
3498                 case P_INTEGER:
3499                         *(int *)parm_ptr = lp_int(pszParmValue);
3500                         break;
3501
3502                 case P_CHAR:
3503                         *(char *)parm_ptr = *pszParmValue;
3504                         break;
3505
3506                 case P_OCTAL:
3507                         i = sscanf(pszParmValue, "%o", (int *)parm_ptr);
3508                         if ( i != 1 ) {
3509                             DEBUG ( 0, ("Invalid octal number %s\n", pszParmName ));
3510                         }
3511                         break;
3512
3513                 case P_LIST:
3514                         str_list_free((char ***)parm_ptr);
3515                         *(char ***)parm_ptr = str_list_make(pszParmValue, NULL);
3516                         break;
3517
3518                 case P_STRING:
3519                         string_set((char **)parm_ptr, pszParmValue);
3520                         break;
3521
3522                 case P_USTRING:
3523                         string_set((char **)parm_ptr, pszParmValue);
3524                         strupper_m(*(char **)parm_ptr);
3525                         break;
3526
3527                 case P_GSTRING:
3528                         pstrcpy((char *)parm_ptr, pszParmValue);
3529                         break;
3530
3531                 case P_UGSTRING:
3532                         pstrcpy((char *)parm_ptr, pszParmValue);
3533                         strupper_m((char *)parm_ptr);
3534                         break;
3535
3536                 case P_ENUM:
3537                         lp_set_enum_parm( &parm_table[parmnum], pszParmValue, (int*)parm_ptr );
3538                         break;
3539                 case P_SEP:
3540                         break;
3541         }
3542
3543         return (True);
3544 }
3545
3546 /***************************************************************************
3547  Process a parameter.
3548 ***************************************************************************/
3549
3550 static BOOL do_parameter(const char *pszParmName, const char *pszParmValue)
3551 {
3552         if (!bInGlobalSection && bGlobalOnly)
3553                 return (True);
3554
3555         DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
3556
3557         return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
3558                                 pszParmName, pszParmValue));
3559 }
3560
3561 /***************************************************************************
3562  Print a parameter of the specified type.
3563 ***************************************************************************/
3564
3565 static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
3566 {
3567         int i;
3568         switch (p->type)
3569         {
3570                 case P_ENUM:
3571                         for (i = 0; p->enum_list[i].name; i++) {
3572                                 if (*(int *)ptr == p->enum_list[i].value) {
3573                                         fprintf(f, "%s",
3574                                                 p->enum_list[i].name);
3575                                         break;
3576                                 }
3577                         }
3578                         break;
3579
3580                 case P_BOOL:
3581                         fprintf(f, "%s", BOOLSTR(*(BOOL *)ptr));
3582                         break;
3583
3584                 case P_BOOLREV:
3585                         fprintf(f, "%s", BOOLSTR(!*(BOOL *)ptr));
3586                         break;
3587
3588                 case P_INTEGER:
3589                         fprintf(f, "%d", *(int *)ptr);
3590                         break;
3591
3592                 case P_CHAR:
3593                         fprintf(f, "%c", *(char *)ptr);
3594                         break;
3595
3596                 case P_OCTAL:
3597                         fprintf(f, "%s", octal_string(*(int *)ptr));
3598                         break;
3599
3600                 case P_LIST:
3601                         if ((char ***)ptr && *(char ***)ptr) {
3602                                 char **list = *(char ***)ptr;
3603
3604                                 for (; *list; list++) {
3605                                         /* surround strings with whitespace in double quotes */
3606                                         if ( strchr_m( *list, ' ' ) )
3607                                                 fprintf(f, "\"%s\"%s", *list, ((*(list+1))?", ":""));
3608                                         else
3609                                                 fprintf(f, "%s%s", *list, ((*(list+1))?", ":""));
3610                                 }
3611                         }
3612                         break;
3613
3614                 case P_GSTRING:
3615                 case P_UGSTRING:
3616                         if ((char *)ptr) {
3617                                 fprintf(f, "%s", (char *)ptr);
3618                         }
3619                         break;
3620
3621                 case P_STRING:
3622                 case P_USTRING:
3623                         if (*(char **)ptr) {
3624                                 fprintf(f, "%s", *(char **)ptr);
3625                         }
3626                         break;
3627                 case P_SEP:
3628                         break;
3629         }
3630 }
3631
3632 /***************************************************************************
3633  Check if two parameters are equal.
3634 ***************************************************************************/
3635
3636 static BOOL equal_parameter(parm_type type, void *ptr1, void *ptr2)
3637 {
3638         switch (type) {
3639                 case P_BOOL:
3640                 case P_BOOLREV:
3641                         return (*((BOOL *)ptr1) == *((BOOL *)ptr2));
3642
3643                 case P_INTEGER:
3644                 case P_ENUM:
3645                 case P_OCTAL:
3646                         return (*((int *)ptr1) == *((int *)ptr2));
3647
3648                 case P_CHAR:
3649                         return (*((char *)ptr1) == *((char *)ptr2));
3650
3651                 case P_LIST:
3652                         return str_list_compare(*(char ***)ptr1, *(char ***)ptr2);
3653
3654                 case P_GSTRING:
3655                 case P_UGSTRING:
3656                 {
3657                         char *p1 = (char *)ptr1, *p2 = (char *)ptr2;
3658                         if (p1 && !*p1)
3659                                 p1 = NULL;
3660                         if (p2 && !*p2)
3661                                 p2 = NULL;
3662                         return (p1 == p2 || strequal(p1, p2));
3663                 }
3664                 case P_STRING:
3665                 case P_USTRING:
3666                 {
3667                         char *p1 = *(char **)ptr1, *p2 = *(char **)ptr2;
3668                         if (p1 && !*p1)
3669                                 p1 = NULL;
3670                         if (p2 && !*p2)
3671                                 p2 = NULL;
3672                         return (p1 == p2 || strequal(p1, p2));
3673                 }
3674                 case P_SEP:
3675                         break;
3676         }
3677         return (False);
3678 }
3679
3680 /***************************************************************************
3681  Initialize any local varients in the sDefault table.
3682 ***************************************************************************/
3683
3684 void init_locals(void)
3685 {
3686         /* None as yet. */
3687 }
3688
3689 /***************************************************************************
3690  Process a new section (service). At this stage all sections are services.
3691  Later we'll have special sections that permit server parameters to be set.
3692  Returns True on success, False on failure.
3693 ***************************************************************************/
3694
3695 static BOOL do_section(const char *pszSectionName)
3696 {
3697         BOOL bRetval;
3698         BOOL isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
3699                          (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
3700         bRetval = False;
3701
3702         /* if we were in a global section then do the local inits */
3703         if (bInGlobalSection && !isglobal)
3704                 init_locals();
3705
3706         /* if we've just struck a global section, note the fact. */
3707         bInGlobalSection = isglobal;
3708
3709         /* check for multiple global sections */
3710         if (bInGlobalSection) {
3711                 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName));
3712                 return (True);
3713         }
3714
3715         if (!bInGlobalSection && bGlobalOnly)
3716                 return (True);
3717
3718         /* if we have a current service, tidy it up before moving on */
3719         bRetval = True;
3720
3721         if (iServiceIndex >= 0)
3722                 bRetval = service_ok(iServiceIndex);
3723
3724         /* if all is still well, move to the next record in the services array */
3725         if (bRetval) {
3726                 /* We put this here to avoid an odd message order if messages are */
3727                 /* issued by the post-processing of a previous section. */
3728                 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName));
3729
3730                 if ((iServiceIndex = add_a_service(&sDefault, pszSectionName))
3731                     < 0) {
3732                         DEBUG(0, ("Failed to add a new service\n"));
3733                         return (False);
3734                 }
3735         }
3736
3737         return (bRetval);
3738 }
3739
3740
3741 /***************************************************************************
3742  Determine if a partcular base parameter is currentl set to the default value.
3743 ***************************************************************************/
3744
3745 static BOOL is_default(int i)
3746 {
3747         if (!defaults_saved)
3748                 return False;
3749         switch (parm_table[i].type) {
3750                 case P_LIST:
3751                         return str_list_compare (parm_table[i].def.lvalue,
3752                                                 *(char ***)parm_table[i].ptr);
3753                 case P_STRING:
3754                 case P_USTRING:
3755                         return strequal(parm_table[i].def.svalue,
3756                                         *(char **)parm_table[i].ptr);
3757                 case P_GSTRING:
3758                 case P_UGSTRING:
3759                         return strequal(parm_table[i].def.svalue,
3760                                         (char *)parm_table[i].ptr);
3761                 case P_BOOL:
3762                 case P_BOOLREV:
3763                         return parm_table[i].def.bvalue ==
3764                                 *(BOOL *)parm_table[i].ptr;
3765                 case P_CHAR:
3766                         return parm_table[i].def.cvalue ==
3767                                 *(char *)parm_table[i].ptr;
3768                 case P_INTEGER:
3769                 case P_OCTAL:
3770                 case P_ENUM:
3771                         return parm_table[i].def.ivalue ==
3772                                 *(int *)parm_table[i].ptr;
3773                 case P_SEP:
3774                         break;
3775         }
3776         return False;
3777 }
3778
3779 /***************************************************************************
3780 Display the contents of the global structure.
3781 ***************************************************************************/
3782
3783 static void dump_globals(FILE *f)
3784 {
3785         int i;
3786         param_opt_struct *data;
3787
3788         fprintf(f, "[global]\n");
3789
3790         for (i = 0; parm_table[i].label; i++)
3791                 if (parm_table[i].p_class == P_GLOBAL &&
3792                     parm_table[i].ptr &&
3793                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr))) {
3794                         if (defaults_saved && is_default(i))
3795                                 continue;
3796                         fprintf(f, "\t%s = ", parm_table[i].label);
3797                         print_parameter(&parm_table[i], parm_table[i].ptr, f);
3798                         fprintf(f, "\n");
3799         }
3800         if (Globals.param_opt != NULL) {
3801                 data = Globals.param_opt;
3802                 while(data) {
3803                         fprintf(f, "\t%s = %s\n", data->key, data->value);
3804                         data = data->next;
3805                 }
3806         }
3807
3808 }
3809
3810 /***************************************************************************
3811  Return True if a local parameter is currently set to the global default.
3812 ***************************************************************************/
3813
3814 BOOL lp_is_default(int snum, struct parm_struct *parm)
3815 {
3816         int pdiff = PTR_DIFF(parm->ptr, &sDefault);
3817
3818         return equal_parameter(parm->type,
3819                                ((char *)ServicePtrs[snum]) + pdiff,
3820                                ((char *)&sDefault) + pdiff);
3821 }
3822
3823 /***************************************************************************
3824  Display the contents of a single services record.
3825 ***************************************************************************/
3826
3827 static void dump_a_service(service * pService, FILE * f)
3828 {
3829         int i;
3830         param_opt_struct *data;
3831
3832         if (pService != &sDefault)
3833                 fprintf(f, "[%s]\n", pService->szService);
3834
3835         for (i = 0; parm_table[i].label; i++) {
3836
3837                 if (parm_table[i].p_class == P_LOCAL &&
3838                     parm_table[i].ptr &&
3839                     (*parm_table[i].label != '-') &&
3840                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3841                 {
3842
3843                         int pdiff = PTR_DIFF(parm_table[i].ptr, &sDefault);
3844
3845                         if (pService == &sDefault) {
3846                                 if (defaults_saved && is_default(i))
3847                                         continue;
3848                         } else {
3849                                 if (equal_parameter(parm_table[i].type,
3850                                                     ((char *)pService) +
3851                                                     pdiff,
3852                                                     ((char *)&sDefault) +
3853                                                     pdiff))
3854                                         continue;
3855                         }
3856
3857                         fprintf(f, "\t%s = ", parm_table[i].label);
3858                         print_parameter(&parm_table[i],
3859                                         ((char *)pService) + pdiff, f);
3860                         fprintf(f, "\n");
3861                 }
3862         }
3863
3864                 if (pService->param_opt != NULL) {
3865                         data = pService->param_opt;
3866                         while(data) {
3867                                 fprintf(f, "\t%s = %s\n", data->key, data->value);
3868                                 data = data->next;
3869                         }
3870                 }
3871 }
3872
3873 /***************************************************************************
3874  Display the contents of a parameter of a single services record.
3875 ***************************************************************************/
3876
3877 BOOL dump_a_parameter(int snum, char *parm_name, FILE * f, BOOL isGlobal)
3878 {
3879         service * pService = ServicePtrs[snum];
3880         int i;
3881         BOOL result = False;
3882         parm_class p_class;
3883         unsigned flag = 0;
3884         fstring local_parm_name;
3885         char *parm_opt;
3886         const char *parm_opt_value;
3887
3888         /* check for parametrical option */
3889         fstrcpy( local_parm_name, parm_name);
3890         parm_opt = strchr( local_parm_name, ':');
3891
3892         if (parm_opt) {
3893                 *parm_opt = '\0';
3894                 parm_opt++;
3895                 if (strlen(parm_opt)) {
3896                         parm_opt_value = lp_parm_const_string( snum,
3897                                 local_parm_name, parm_opt, NULL);
3898                         if (parm_opt_value) {
3899                                 printf( "%s\n", parm_opt_value);
3900                                 result = True;
3901                         }
3902                 }
3903                 return result;
3904         }
3905
3906         /* check for a key and print the value */
3907         if (isGlobal) {
3908                 p_class = P_GLOBAL;
3909                 flag = FLAG_GLOBAL;
3910         } else
3911                 p_class = P_LOCAL;
3912
3913         for (i = 0; parm_table[i].label; i++) {
3914                 if (strwicmp(parm_table[i].label, parm_name) == 0 &&
3915                     (parm_table[i].p_class == p_class || parm_table[i].flags & flag) &&
3916                     parm_table[i].ptr &&
3917                     (*parm_table[i].label != '-') &&
3918                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3919                 {
3920                         void *ptr;
3921
3922                         if (isGlobal)
3923                                 ptr = parm_table[i].ptr;
3924                         else
3925                                 ptr = ((char *)pService) +
3926                                         PTR_DIFF(parm_table[i].ptr, &sDefault);
3927
3928                         print_parameter(&parm_table[i],
3929                                         ptr, f);
3930                         fprintf(f, "\n");
3931                         result = True;
3932                         break;
3933                 }
3934         }
3935
3936         return result;
3937 }
3938
3939 /***************************************************************************
3940  Return info about the next service  in a service. snum==GLOBAL_SECTION_SNUM gives the globals.
3941  Return NULL when out of parameters.
3942 ***************************************************************************/
3943
3944 struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
3945 {
3946         if (snum < 0) {
3947                 /* do the globals */
3948                 for (; parm_table[*i].label; (*i)++) {
3949                         if (parm_table[*i].p_class == P_SEPARATOR)
3950                                 return &parm_table[(*i)++];
3951
3952                         if (!parm_table[*i].ptr
3953                             || (*parm_table[*i].label == '-'))
3954                                 continue;
3955
3956                         if ((*i) > 0
3957                             && (parm_table[*i].ptr ==
3958                                 parm_table[(*i) - 1].ptr))
3959                                 continue;
3960
3961                         return &parm_table[(*i)++];
3962                 }
3963         } else {
3964                 service *pService = ServicePtrs[snum];
3965
3966                 for (; parm_table[*i].label; (*i)++) {
3967                         if (parm_table[*i].p_class == P_SEPARATOR)
3968                                 return &parm_table[(*i)++];
3969
3970                         if (parm_table[*i].p_class == P_LOCAL &&
3971                             parm_table[*i].ptr &&
3972                             (*parm_table[*i].label != '-') &&
3973                             ((*i) == 0 ||
3974                              (parm_table[*i].ptr !=
3975                               parm_table[(*i) - 1].ptr)))
3976                         {
3977                                 int pdiff =
3978                                         PTR_DIFF(parm_table[*i].ptr,
3979                                                  &sDefault);
3980
3981                                 if (allparameters ||
3982                                     !equal_parameter(parm_table[*i].type,
3983                                                      ((char *)pService) +
3984                                                      pdiff,
3985                                                      ((char *)&sDefault) +
3986                                                      pdiff))
3987                                 {
3988                                         return &parm_table[(*i)++];
3989                                 }
3990                         }
3991                 }
3992         }
3993
3994         return NULL;
3995 }
3996
3997
3998 #if 0
3999 /***************************************************************************
4000  Display the contents of a single copy structure.
4001 ***************************************************************************/
4002 static void dump_copy_map(BOOL *pcopymap)
4003 {
4004         int i;
4005         if (!pcopymap)
4006                 return;
4007
4008         printf("\n\tNon-Copied parameters:\n");
4009
4010         for (i = 0; parm_table[i].label; i++)
4011                 if (parm_table[i].p_class == P_LOCAL &&
4012                     parm_table[i].ptr && !pcopymap[i] &&
4013                     (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
4014                 {
4015                         printf("\t\t%s\n", parm_table[i].label);
4016                 }
4017 }
4018 #endif
4019
4020 /***************************************************************************
4021  Return TRUE if the passed service number is within range.
4022 ***************************************************************************/
4023
4024 BOOL lp_snum_ok(int iService)
4025 {
4026         return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
4027 }
4028
4029 /***************************************************************************
4030  Auto-load some home services.
4031 ***************************************************************************/
4032
4033 static void lp_add_auto_services(char *str)
4034 {
4035         char *s;
4036         char *p;
4037         int homes;
4038
4039         if (!str)
4040                 return;
4041
4042         s = SMB_STRDUP(str);
4043         if (!s)
4044                 return;
4045
4046         homes = lp_servicenumber(HOMES_NAME);
4047
4048         for (p = strtok(s, LIST_SEP); p; p = strtok(NULL, LIST_SEP)) {
4049                 char *home = get_user_home_dir(p);
4050
4051                 if (lp_servicenumber(p) >= 0)
4052                         continue;
4053
4054                 if (home && homes >= 0)
4055                         lp_add_home(p, homes, p, home);
4056         }
4057         SAFE_FREE(s);
4058 }
4059
4060 /***************************************************************************
4061  Auto-load one printer.
4062 ***************************************************************************/
4063
4064 void lp_add_one_printer(char *name, char *comment)
4065 {
4066         int printers = lp_servicenumber(PRINTERS_NAME);
4067         int i;
4068
4069         if (lp_servicenumber(name) < 0) {
4070                 lp_add_printer(name, printers);
4071                 if ((i = lp_servicenumber(name)) >= 0) {
4072                         string_set(&ServicePtrs[i]->comment, comment);
4073                         ServicePtrs[i]->autoloaded = True;
4074                 }
4075         }
4076 }
4077
4078 /***************************************************************************
4079  Have we loaded a services file yet?
4080 ***************************************************************************/
4081
4082 BOOL lp_loaded(void)
4083 {
4084         return (bLoaded);
4085 }
4086
4087 /***************************************************************************
4088  Unload unused services.
4089 ***************************************************************************/
4090
4091 void lp_killunused(BOOL (*snumused) (int))
4092 {
4093         int i;
4094         for (i = 0; i < iNumServices; i++) {
4095                 if (!VALID(i))
4096                         continue;
4097
4098                 /* don't kill autoloaded or usershare services */
4099                 if ( ServicePtrs[i]->autoloaded ||
4100                                 ServicePtrs[i]->usershare == USERSHARE_VALID) {
4101                         continue;
4102                 }
4103
4104                 if (!snumused || !snumused(i)) {
4105                         free_service_byindex(i);
4106                 }
4107         }
4108 }
4109
4110 /***************************************************************************
4111  Unload a service.
4112 ***************************************************************************/
4113
4114 void lp_killservice(int iServiceIn)
4115 {
4116         if (VALID(iServiceIn)) {
4117                 free_service_byindex(iServiceIn);
4118         }
4119 }
4120
4121 /***************************************************************************
4122  Save the curent values of all global and sDefault parameters into the
4123  defaults union. This allows swat and testparm to show only the
4124  changed (ie. non-default) parameters.
4125 ***************************************************************************/
4126
4127 static void lp_save_defaults(void)
4128 {
4129         int i;
4130         for (i = 0; parm_table[i].label; i++) {
4131                 if (i > 0 && parm_table[i].ptr == parm_table[i - 1].ptr)
4132                         continue;
4133                 switch (parm_table[i].type) {
4134                         case P_LIST:
4135                                 str_list_copy(&(parm_table[i].def.lvalue),
4136                                             *(const char ***)parm_table[i].ptr);
4137                                 break;
4138                         case P_STRING:
4139                         case P_USTRING:
4140                                 if (parm_table[i].ptr) {
4141                                         parm_table[i].def.svalue = SMB_STRDUP(*(char **)parm_table[i].ptr);
4142                                 } else {
4143                                         parm_table[i].def.svalue = NULL;
4144                                 }
4145                                 break;
4146                         case P_GSTRING:
4147                         case P_UGSTRING:
4148                                 if (parm_table[i].ptr) {
4149                                         parm_table[i].def.svalue = SMB_STRDUP((char *)parm_table[i].ptr);
4150                                 } else {
4151                                         parm_table[i].def.svalue = NULL;
4152                                 }
4153                                 break;
4154                         case P_BOOL:
4155                         case P_BOOLREV:
4156                                 parm_table[i].def.bvalue =
4157                                         *(BOOL *)parm_table[i].ptr;
4158                                 break;
4159                         case P_CHAR:
4160                                 parm_table[i].def.cvalue =
4161                                         *(char *)parm_table[i].ptr;
4162                                 break;
4163                         case P_INTEGER:
4164                         case P_OCTAL:
4165                         case P_ENUM:
4166                                 parm_table[i].def.ivalue =
4167                                         *(int *)parm_table[i].ptr;
4168                                 break;
4169                         case P_SEP:
4170                                 break;
4171                 }
4172         }
4173         defaults_saved = True;
4174 }
4175
4176 /*******************************************************************
4177  Set the server type we will announce as via nmbd.
4178 ********************************************************************/
4179
4180 static const struct srv_role_tab {
4181         uint32 role;
4182         const char *role_str;
4183 } srv_role_tab [] = {
4184         { ROLE_STANDALONE, "ROLE_STANDALONE" },
4185         { ROLE_DOMAIN_MEMBER, "ROLE_DOMAIN_MEMBER" },
4186         { ROLE_DOMAIN_BDC, "ROLE_DOMAIN_BDC" },
4187         { ROLE_DOMAIN_PDC, "ROLE_DOMAIN_PDC" },
4188         { 0, NULL }
4189 };
4190
4191 const char* server_role_str(uint32 role)
4192 {
4193         int i = 0;
4194         for (i=0; srv_role_tab[i].role_str; i++) {
4195                 if (role == srv_role_tab[i].role) {
4196                         return srv_role_tab[i].role_str;
4197                 }
4198         }
4199         return NULL;
4200 }
4201
4202 static void set_server_role(void)
4203 {
4204         server_role = ROLE_STANDALONE;
4205
4206         switch (lp_security()) {
4207                 case SEC_SHARE:
4208                         if (lp_domain_logons())
4209                                 DEBUG(0, ("Server's Role (logon server) conflicts with share-level security\n"));
4210                         break;
4211                 case SEC_SERVER:
4212                         if (lp_domain_logons())
4213                                 DEBUG(0, ("Server's Role (logon server) conflicts with server-level security\n"));
4214                         server_role = ROLE_DOMAIN_MEMBER;
4215                         break;
4216                 case SEC_DOMAIN:
4217                         if (lp_domain_logons()) {
4218                                 DEBUG(1, ("Server's Role (logon server) NOT ADVISED with domain-level security\n"));
4219                                 server_role = ROLE_DOMAIN_BDC;
4220                                 break;
4221                         }
4222                         server_role = ROLE_DOMAIN_MEMBER;
4223                         break;
4224                 case SEC_ADS:
4225                         if (lp_domain_logons()) {
4226                                 server_role = ROLE_DOMAIN_PDC;
4227                                 break;
4228                         }
4229                         server_role = ROLE_DOMAIN_MEMBER;
4230                         break;
4231                 case SEC_USER:
4232                         if (lp_domain_logons()) {
4233
4234                                 if (Globals.bDomainMaster) /* auto or yes */
4235                                         server_role = ROLE_DOMAIN_PDC;
4236                                 else
4237                                         server_role = ROLE_DOMAIN_BDC;
4238                         }
4239                         break;
4240                 default:
4241                         DEBUG(0, ("Server's Role undefined due to unknown security mode\n"));
4242                         break;
4243         }
4244
4245         DEBUG(10, ("set_server_role: role = %s\n", server_role_str(server_role)));
4246 }
4247
4248 /***********************************************************
4249  If we should send plaintext/LANMAN passwords in the clinet
4250 ************************************************************/
4251
4252 static void set_allowed_client_auth(void)
4253 {
4254         if (Globals.bClientNTLMv2Auth) {
4255                 Globals.bClientLanManAuth = False;
4256         }
4257         if (!Globals.bClientLanManAuth) {
4258                 Globals.bClientPlaintextAuth = False;
4259         }
4260 }
4261
4262 /***************************************************************************
4263  JRA.
4264  The following code allows smbd to read a user defined share file.
4265  Yes, this is my intent. Yes, I'm comfortable with that...
4266
4267  THE FOLLOWING IS SECURITY CRITICAL CODE.
4268
4269  It washes your clothes, it cleans your house, it guards you while you sleep...
4270  Do not f%^k with it....
4271 ***************************************************************************/
4272
4273 #define MAX_USERSHARE_FILE_SIZE (10*1024)
4274
4275 /***************************************************************************
4276  Check allowed stat state of a usershare file.
4277  Ensure we print out who is dicking with us so the admin can
4278  get their sorry ass fired.
4279 ***************************************************************************/
4280
4281 static BOOL check_usershare_stat(const char *fname, SMB_STRUCT_STAT *psbuf)
4282 {
4283         if (!S_ISREG(psbuf->st_mode)) {
4284                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4285                         "not a regular file\n",
4286                         fname, (unsigned int)psbuf->st_uid ));
4287                 return False;
4288         }
4289
4290         /* Ensure this doesn't have the other write bit set. */
4291         if (psbuf->st_mode & S_IWOTH) {
4292                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
4293                         "public write. Refusing to allow as a usershare file.\n",
4294                         fname, (unsigned int)psbuf->st_uid ));
4295                 return False;
4296         }
4297
4298         /* Should be 10k or less. */
4299         if (psbuf->st_size > MAX_USERSHARE_FILE_SIZE) {
4300                 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4301                         "too large (%u) to be a user share file.\n",
4302                         fname, (unsigned int)psbuf->st_uid,
4303                         (unsigned int)psbuf->st_size ));
4304                 return False;
4305         }
4306
4307         return True;
4308 }
4309
4310 /***************************************************************************
4311  Parse the contents of a usershare file.
4312 ***************************************************************************/
4313
4314 enum usershare_err parse_usershare_file(TALLOC_CTX *ctx,
4315                         SMB_STRUCT_STAT *psbuf,
4316                         const char *servicename,
4317                         int snum,
4318                         char **lines,
4319                         int numlines,
4320                         pstring sharepath,
4321                         pstring comment,
4322                         SEC_DESC **ppsd)
4323 {
4324         const char **prefixallowlist = lp_usershare_prefix_allow_list();
4325         const char **prefixdenylist = lp_usershare_prefix_deny_list();
4326         SMB_STRUCT_DIR *dp;
4327         SMB_STRUCT_STAT sbuf;
4328
4329         if (numlines < 4) {
4330                 return USERSHARE_MALFORMED_FILE;
4331         }
4332
4333         if (!strequal(lines[0], "#VERSION 1")) {
4334                 return USERSHARE_BAD_VERSION;
4335         }
4336
4337         if (!strnequal(lines[1], "path=", 5)) {
4338                 return USERSHARE_MALFORMED_PATH;
4339         }
4340
4341         pstrcpy(sharepath, &lines[1][5]);
4342         trim_string(sharepath, " ", " ");
4343
4344         if (!strnequal(lines[2], "comment=", 8)) {
4345                 return USERSHARE_MALFORMED_COMMENT_DEF;
4346         }
4347
4348         pstrcpy(comment, &lines[2][8]);
4349         trim_string(comment, " ", " ");
4350         trim_char(comment, '"', '"');
4351
4352         if (!strnequal(lines[3], "usershare_acl=", 14)) {
4353                 return USERSHARE_MALFORMED_ACL_DEF;
4354         }
4355
4356         if (!parse_usershare_acl(ctx, &lines[3][14], ppsd)) {
4357                 return USERSHARE_ACL_ERR;
4358         }
4359
4360         if (snum != -1 && strequal(sharepath, ServicePtrs[snum]->szPath)) {
4361                 /* Path didn't change, no checks needed. */
4362                 return USERSHARE_OK;
4363         }
4364
4365         /* The path *must* be absolute. */
4366         if (sharepath[0] != '/') {
4367                 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
4368                         servicename, sharepath));
4369                 return USERSHARE_PATH_NOT_ABSOLUTE;
4370         }
4371
4372         /* If there is a usershare prefix deny list ensure one of these paths
4373            doesn't match the start of the user given path. */
4374         if (prefixdenylist) {
4375                 int i;
4376                 for ( i=0; prefixdenylist[i]; i++ ) {
4377                         DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
4378                                 servicename, i, prefixdenylist[i], sharepath ));
4379                         if (memcmp( sharepath, prefixdenylist[i], strlen(prefixdenylist[i])) == 0) {
4380                                 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
4381                                         "usershare prefix deny list entries.\n",
4382                                         servicename, sharepath));
4383                                 return USERSHARE_PATH_IS_DENIED;
4384                         }
4385                 }
4386         }
4387
4388         /* If there is a usershare prefix allow list ensure one of these paths
4389            does match the start of the user given path. */
4390
4391         if (prefixallowlist) {
4392                 int i;
4393                 for ( i=0; prefixallowlist[i]; i++ ) {
4394                         DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
4395                                 servicename, i, prefixallowlist[i], sharepath ));
4396                         if (memcmp( sharepath, prefixallowlist[i], strlen(prefixallowlist[i])) == 0) {
4397                                 break;
4398                         }
4399                 }
4400                 if (prefixallowlist[i] == NULL) {
4401                         DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
4402                                 "usershare prefix allow list entries.\n",
4403                                 servicename, sharepath));
4404                         return USERSHARE_PATH_NOT_ALLOWED;
4405                 }
4406         }
4407
4408         /* Ensure this is pointing to a directory. */
4409         dp = sys_opendir(sharepath);
4410
4411         if (!dp) {
4412                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4413                         servicename, sharepath));
4414                 return USERSHARE_PATH_NOT_DIRECTORY;
4415         }
4416
4417         /* Ensure the owner of the usershare file has permission to share
4418            this directory. */
4419
4420         if (sys_stat(sharepath, &sbuf) == -1) {
4421                 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
4422                         servicename, sharepath, strerror(errno) ));
4423                 sys_closedir(dp);
4424                 return USERSHARE_POSIX_ERR;
4425         }
4426
4427         sys_closedir(dp);
4428
4429         if (!S_ISDIR(sbuf.st_mode)) {
4430                 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4431                         servicename, sharepath ));
4432                 return USERSHARE_PATH_NOT_DIRECTORY;
4433         }
4434
4435         /* Check if sharing is restricted to owner-only. */
4436         /* psbuf is the stat of the usershare definition file,
4437            sbuf is the stat of the target directory to be shared. */
4438
4439         if (lp_usershare_owner_only()) {
4440                 /* root can share anything. */
4441                 if ((psbuf->st_uid != 0) && (sbuf.st_uid != psbuf->st_uid)) {
4442                         return USERSHARE_PATH_NOT_ALLOWED;
4443                 }
4444         }
4445
4446         return USERSHARE_OK;
4447 }
4448
4449 /***************************************************************************
4450  Deal with a usershare file.
4451  Returns:
4452         >= 0 - snum
4453         -1 - Bad name, invalid contents.
4454            - service name already existed and not a usershare, problem
4455             with permissions to share directory etc.
4456 ***************************************************************************/
4457
4458 static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template)
4459 {
4460         SMB_STRUCT_STAT sbuf;
4461         SMB_STRUCT_STAT lsbuf;
4462         pstring fname;
4463         pstring sharepath;
4464         pstring comment;
4465         fstring service_name;
4466         char **lines = NULL;
4467         int numlines = 0;
4468         int fd = -1;
4469         int iService = -1;
4470         TALLOC_CTX *ctx = NULL;
4471         SEC_DESC *psd = NULL;
4472
4473         /* Ensure share name doesn't contain invalid characters. */
4474         if (!validate_net_name(file_name, INVALID_SHARENAME_CHARS, strlen(file_name))) {
4475                 DEBUG(0,("process_usershare_file: share name %s contains "
4476                         "invalid characters (any of %s)\n",
4477                         file_name, INVALID_SHARENAME_CHARS ));
4478                 return -1;
4479         }
4480
4481         fstrcpy(service_name, file_name);
4482
4483         pstrcpy(fname, dir_name);
4484         pstrcat(fname, "/");
4485         pstrcat(fname, file_name);
4486
4487         /* Minimize the race condition by doing an lstat before we
4488            open and fstat. Ensure this isn't a symlink link. */
4489
4490         if (sys_lstat(fname, &lsbuf) != 0) {
4491                 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
4492                         fname, strerror(errno) ));
4493                 return -1;
4494         }
4495
4496         /* This must be a regular file, not a symlink, directory or
4497            other strange filetype. */
4498         if (!check_usershare_stat(fname, &lsbuf)) {
4499                 return -1;
4500         }
4501
4502         /* See if there is already a servicenum for this name. */
4503         /* tdb_fetch_int32 returns -1 if not found. */
4504         iService = (int)tdb_fetch_int32(ServiceHash, canonicalize_servicename(service_name) );
4505
4506         if (iService != -1 && ServicePtrs[iService]->usershare_last_mod == lsbuf.st_mtime) {
4507                 /* Nothing changed - Mark valid and return. */
4508                 DEBUG(10,("process_usershare_file: service %s not changed.\n",
4509                         service_name ));
4510                 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4511                 return iService;
4512         }
4513
4514         /* Try and open the file read only - no symlinks allowed. */
4515 #ifdef O_NOFOLLOW
4516         fd = sys_open(fname, O_RDONLY|O_NOFOLLOW, 0);
4517 #else
4518         fd = sys_open(fname, O_RDONLY, 0);
4519 #endif
4520
4521         if (fd == -1) {
4522                 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
4523                         fname, strerror(errno) ));
4524                 return -1;
4525         }
4526
4527         /* Now fstat to be *SURE* it's a regular file. */
4528         if (sys_fstat(fd, &sbuf) != 0) {
4529                 close(fd);
4530                 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
4531                         fname, strerror(errno) ));
4532                 return -1;
4533         }
4534
4535         /* Is it the same dev/inode as was lstated ? */
4536         if (lsbuf.st_dev != sbuf.st_dev || lsbuf.st_ino != sbuf.st_ino) {
4537                 close(fd);
4538                 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
4539                         "Symlink spoofing going on ?\n", fname ));
4540                 return -1;
4541         }
4542
4543         /* This must be a regular file, not a symlink, directory or
4544            other strange filetype. */
4545         if (!check_usershare_stat(fname, &sbuf)) {
4546                 return -1;
4547         }
4548
4549         lines = fd_lines_load(fd, &numlines, MAX_USERSHARE_FILE_SIZE);
4550
4551         close(fd);
4552         if (lines == NULL) {
4553                 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
4554                         fname, (unsigned int)sbuf.st_uid ));
4555                 return -1;
4556         }
4557
4558         /* Should we allow printers to be shared... ? */
4559         ctx = talloc_init("usershare_sd_xctx");
4560         if (!ctx) {
4561                 SAFE_FREE(lines);
4562                 return 1;
4563         }
4564
4565         if (parse_usershare_file(ctx, &sbuf, service_name, iService, lines, numlines, sharepath, comment, &psd) != USERSHARE_OK) {
4566                 talloc_destroy(ctx);
4567                 SAFE_FREE(lines);
4568                 return -1;
4569         }
4570
4571         SAFE_FREE(lines);
4572
4573         /* Everything ok - add the service possibly using a template. */
4574         if (iService < 0) {
4575                 const service *sp = &sDefault;
4576                 if (snum_template != -1) {
4577                         sp = ServicePtrs[snum_template];
4578                 }
4579
4580                 if ((iService = add_a_service(sp, service_name)) < 0) {
4581                         DEBUG(0, ("process_usershare_file: Failed to add "
4582                                 "new service %s\n", service_name));
4583                         talloc_destroy(ctx);
4584                         return -1;
4585                 }
4586
4587                 /* Read only is controlled by usershare ACL below. */
4588                 ServicePtrs[iService]->bRead_only = False;
4589         }
4590
4591         /* Write the ACL of the new/modified share. */
4592         if (!set_share_security(ctx, service_name, psd)) {
4593                  DEBUG(0, ("process_usershare_file: Failed to set share "
4594                         "security for user share %s\n",
4595                         service_name ));
4596                 lp_remove_service(iService);
4597                 talloc_destroy(ctx);
4598                 return -1;
4599         }
4600
4601         talloc_destroy(ctx);
4602
4603         /* If from a template it may be marked invalid. */
4604         ServicePtrs[iService]->valid = True;
4605
4606         /* Set the service as a valid usershare. */
4607         ServicePtrs[iService]->usershare = USERSHARE_VALID;
4608
4609         /* And note when it was loaded. */
4610         ServicePtrs[iService]->usershare_last_mod = sbuf.st_mtime;
4611         string_set(&ServicePtrs[iService]->szPath, sharepath);
4612         string_set(&ServicePtrs[iService]->comment, comment);
4613
4614         return iService;
4615 }
4616
4617 /***************************************************************************
4618  Checks if a usershare entry has been modified since last load.
4619 ***************************************************************************/
4620
4621 static BOOL usershare_exists(int iService, time_t *last_mod)
4622 {
4623         SMB_STRUCT_STAT lsbuf;
4624         const char *usersharepath = Globals.szUsersharePath;
4625         pstring fname;
4626
4627         pstrcpy(fname, usersharepath);
4628         pstrcat(fname, "/");
4629         pstrcat(fname, ServicePtrs[iService]->szService);
4630
4631         if (sys_lstat(fname, &lsbuf) != 0) {
4632                 return False;
4633         }
4634
4635         if (!S_ISREG(lsbuf.st_mode)) {
4636                 return False;
4637         }
4638
4639         *last_mod = lsbuf.st_mtime;
4640         return True;
4641 }
4642
4643 /***************************************************************************
4644  Load a usershare service by name. Returns a valid servicenumber or -1.
4645 ***************************************************************************/
4646
4647 int load_usershare_service(const char *servicename)
4648 {
4649         SMB_STRUCT_STAT sbuf;
4650         const char *usersharepath = Globals.szUsersharePath;
4651         int max_user_shares = Globals.iUsershareMaxShares;
4652         int snum_template = -1;
4653
4654         if (*usersharepath == 0 ||  max_user_shares == 0) {
4655                 return -1;
4656         }
4657
4658         if (sys_stat(usersharepath, &sbuf) != 0) {
4659                 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
4660                         usersharepath, strerror(errno) ));
4661                 return -1;
4662         }
4663
4664         if (!S_ISDIR(sbuf.st_mode)) {
4665                 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
4666                         usersharepath ));
4667                 return -1;
4668         }
4669
4670         /*
4671          * This directory must be owned by root, and have the 't' bit set.
4672          * It also must not be writable by "other".
4673          */
4674
4675 #ifdef S_ISVTX
4676         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4677 #else
4678         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4679 #endif
4680                 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
4681                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
4682                         usersharepath ));
4683                 return -1;
4684         }
4685
4686         /* Ensure the template share exists if it's set. */
4687         if (Globals.szUsershareTemplateShare[0]) {
4688                 /* We can't use lp_servicenumber here as we are recommending that
4689                    template shares have -valid=False set. */
4690                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4691                         if (ServicePtrs[snum_template]->szService &&
4692                                         strequal(ServicePtrs[snum_template]->szService,
4693                                                 Globals.szUsershareTemplateShare)) {
4694                                 break;
4695                         }
4696                 }
4697
4698                 if (snum_template == -1) {
4699                         DEBUG(0,("load_usershare_service: usershare template share %s "
4700                                 "does not exist.\n",
4701                                 Globals.szUsershareTemplateShare ));
4702                         return -1;
4703                 }
4704         }
4705
4706         return process_usershare_file(usersharepath, servicename, snum_template);
4707 }
4708
4709 /***************************************************************************
4710  Load all user defined shares from the user share directory.
4711  We only do this if we're enumerating the share list.
4712  This is the function that can delete usershares that have
4713  been removed.
4714 ***************************************************************************/
4715
4716 int load_usershare_shares(void)
4717 {
4718         SMB_STRUCT_DIR *dp;
4719         SMB_STRUCT_STAT sbuf;
4720         SMB_STRUCT_DIRENT *de;
4721         int num_usershares = 0;
4722         int max_user_shares = Globals.iUsershareMaxShares;
4723         unsigned int num_dir_entries, num_bad_dir_entries, num_tmp_dir_entries;
4724         unsigned int allowed_bad_entries = ((2*max_user_shares)/10);
4725         unsigned int allowed_tmp_entries = ((2*max_user_shares)/10);
4726         int iService;
4727         int snum_template = -1;
4728         const char *usersharepath = Globals.szUsersharePath;
4729         int ret = lp_numservices();
4730
4731         if (max_user_shares == 0 || *usersharepath == '\0') {
4732                 return lp_numservices();
4733         }
4734
4735         if (sys_stat(usersharepath, &sbuf) != 0) {
4736                 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
4737                         usersharepath, strerror(errno) ));
4738                 return ret;
4739         }
4740
4741         /*
4742          * This directory must be owned by root, and have the 't' bit set.
4743          * It also must not be writable by "other".
4744          */
4745
4746 #ifdef S_ISVTX
4747         if (sbuf.st_uid != 0 || !(sbuf.st_mode & S_ISVTX) || (sbuf.st_mode & S_IWOTH)) {
4748 #else
4749         if (sbuf.st_uid != 0 || (sbuf.st_mode & S_IWOTH)) {
4750 #endif
4751                 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
4752                         "or does not have the sticky bit 't' set or is writable by anyone.\n",
4753                         usersharepath ));
4754                 return ret;
4755         }
4756
4757         /* Ensure the template share exists if it's set. */
4758         if (Globals.szUsershareTemplateShare[0]) {
4759                 /* We can't use lp_servicenumber here as we are recommending that
4760                    template shares have -valid=False set. */
4761                 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4762                         if (ServicePtrs[snum_template]->szService &&
4763                                         strequal(ServicePtrs[snum_template]->szService,
4764                                                 Globals.szUsershareTemplateShare)) {
4765                                 break;
4766                         }
4767                 }
4768
4769                 if (snum_template == -1) {
4770                         DEBUG(0,("load_usershare_shares: usershare template share %s "
4771                                 "does not exist.\n",
4772                                 Globals.szUsershareTemplateShare ));
4773                         return ret;
4774                 }
4775         }
4776
4777         /* Mark all existing usershares as pending delete. */
4778         for (iService = iNumServices - 1; iService >= 0; iService--) {
4779                 if (VALID(iService) && ServicePtrs[iService]->usershare) {
4780                         ServicePtrs[iService]->usershare = USERSHARE_PENDING_DELETE;
4781                 }
4782         }
4783
4784         dp = sys_opendir(usersharepath);
4785         if (!dp) {
4786                 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
4787                         usersharepath, strerror(errno) ));
4788                 return ret;
4789         }
4790
4791         for (num_dir_entries = 0, num_bad_dir_entries = 0, num_tmp_dir_entries = 0;
4792                         (de = sys_readdir(dp));
4793                         num_dir_entries++ ) {
4794                 int r;
4795                 const char *n = de->d_name;
4796
4797                 /* Ignore . and .. */
4798                 if (*n == '.') {
4799                         if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
4800                                 continue;
4801                         }
4802                 }
4803
4804                 if (n[0] == ':') {
4805                         /* Temporary file used when creating a share. */
4806                         num_tmp_dir_entries++;
4807                 }
4808
4809                 /* Allow 20% tmp entries. */
4810                 if (num_tmp_dir_entries > allowed_tmp_entries) {
4811                         DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
4812                                 "in directory %s\n",
4813                                 num_tmp_dir_entries, usersharepath));
4814                         break;
4815                 }
4816
4817                 r = process_usershare_file(usersharepath, n, snum_template);
4818                 if (r == 0) {
4819                         /* Update the services count. */
4820                         num_usershares++;
4821                         if (num_usershares >= max_user_shares) {
4822                                 DEBUG(0,("load_usershare_shares: max user shares reached "
4823                                         "on file %s in directory %s\n",
4824                                         n, usersharepath ));
4825                                 break;
4826                         }
4827                 } else if (r == -1) {
4828                         num_bad_dir_entries++;
4829                 }
4830
4831                 /* Allow 20% bad entries. */
4832                 if (num_bad_dir_entries > allowed_bad_entries) {
4833                         DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
4834                                 "in directory %s\n",
4835                                 num_bad_dir_entries, usersharepath));
4836                         break;
4837                 }
4838
4839                 /* Allow 20% bad entries. */
4840                 if (num_dir_entries > max_user_shares + allowed_bad_entries) {
4841                         DEBUG(0,("load_usershare_shares: too many total entries (%u) "
4842                         "in directory %s\n",
4843                         num_dir_entries, usersharepath));
4844                         break;
4845                 }
4846         }
4847
4848         sys_closedir(dp);
4849
4850         /* Sweep through and delete any non-refreshed usershares that are
4851            not currently in use. */
4852         for (iService = iNumServices - 1; iService >= 0; iService--) {
4853                 if (VALID(iService) && (ServicePtrs[iService]->usershare == USERSHARE_PENDING_DELETE)) {
4854                         if (conn_snum_used(iService)) {
4855                                 continue;
4856                         }
4857                         /* Remove from the share ACL db. */
4858                         DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
4859                                 lp_servicename(iService) ));
4860                         delete_share_security(iService);
4861                         free_service_byindex(iService);
4862                 }
4863         }
4864
4865         return lp_numservices();
4866 }
4867
4868 /********************************************************
4869  Destroy global resources allocated in this file
4870 ********************************************************/
4871
4872 void gfree_loadparm(void)
4873 {
4874         struct file_lists *f;
4875         struct file_lists *next;
4876         int i;
4877
4878         lp_TALLOC_FREE();
4879
4880         /* Free the file lists */
4881
4882         f = file_lists;
4883         while( f ) {
4884                 next = f->next;
4885                 SAFE_FREE( f->name );
4886                 SAFE_FREE( f->subfname );
4887                 SAFE_FREE( f );
4888                 f = next;
4889         }
4890
4891         /* Free resources allocated to services */
4892
4893         for ( i = 0; i < iNumServices; i++ ) {
4894                 if ( VALID(i) ) {
4895                         free_service_byindex(i);
4896                 }
4897         }
4898
4899         SAFE_FREE( ServicePtrs );
4900         iNumServices = 0;
4901
4902         /* Now release all resources allocated to global
4903            parameters and the default service */
4904
4905         for (i = 0; parm_table[i].label; i++)
4906         {
4907                 if ( parm_table[i].type == P_STRING
4908                         || parm_table[i].type == P_USTRING )
4909                 {
4910                         string_free( (char**)parm_table[i].ptr );
4911                 }
4912                 else if (parm_table[i].type == P_LIST) {
4913                         str_list_free( (char***)parm_table[i].ptr );
4914                 }
4915         }
4916 }
4917
4918 /***************************************************************************
4919  Load the services array from the services file. Return True on success,
4920  False on failure.
4921 ***************************************************************************/
4922
4923 BOOL lp_load(const char *pszFname,
4924              BOOL global_only,
4925              BOOL save_defaults,
4926              BOOL add_ipc,
4927              BOOL initialize_globals)
4928 {
4929         pstring n2;
4930         BOOL bRetval;
4931         param_opt_struct *data, *pdata;
4932
4933         pstrcpy(n2, pszFname);
4934
4935         standard_sub_basic( get_current_username(), n2,sizeof(n2) );
4936
4937         add_to_file_list(pszFname, n2);
4938
4939         bRetval = False;
4940
4941         DEBUG(3, ("lp_load: refreshing parameters\n"));
4942
4943         bInGlobalSection = True;
4944         bGlobalOnly = global_only;
4945
4946         init_globals(! initialize_globals);
4947         debug_init();
4948
4949         if (save_defaults) {
4950                 init_locals();
4951                 lp_save_defaults();
4952         }
4953
4954         if (Globals.param_opt != NULL) {
4955                 data = Globals.param_opt;
4956                 while (data) {
4957                         string_free(&data->key);
4958                         string_free(&data->value);
4959                         str_list_free(&data->list);
4960                         pdata = data->next;
4961                         SAFE_FREE(data);
4962                         data = pdata;
4963                 }
4964                 Globals.param_opt = NULL;
4965         }
4966
4967         /* We get sections first, so have to start 'behind' to make up */
4968         iServiceIndex = -1;
4969         bRetval = pm_process(n2, do_section, do_parameter);
4970
4971         /* finish up the last section */
4972         DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
4973         if (bRetval)
4974                 if (iServiceIndex >= 0)
4975                         bRetval = service_ok(iServiceIndex);
4976
4977         lp_add_auto_services(lp_auto_services());
4978
4979         if (add_ipc) {
4980                 /* When 'restrict anonymous = 2' guest connections to ipc$
4981                    are denied */
4982                 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
4983                 if ( lp_enable_asu_support() )
4984                         lp_add_ipc("ADMIN$", False);
4985         }
4986
4987         set_server_role();
4988         set_default_server_announce_type();
4989         set_allowed_client_auth();
4990
4991         bLoaded = True;
4992
4993         /* Now we check bWINSsupport and set szWINSserver to 127.0.0.1 */
4994         /* if bWINSsupport is true and we are in the client            */
4995         if (in_client && Globals.bWINSsupport) {
4996                 lp_do_parameter(GLOBAL_SECTION_SNUM, "wins server", "127.0.0.1");
4997         }
4998
4999         init_iconv();
5000
5001         return (bRetval);
5002 }
5003
5004 /***************************************************************************
5005  Reset the max number of services.
5006 ***************************************************************************/
5007
5008 void lp_resetnumservices(void)
5009 {
5010         iNumServices = 0;
5011 }
5012
5013 /***************************************************************************
5014  Return the max number of services.
5015 ***************************************************************************/
5016
5017 int lp_numservices(void)
5018 {
5019         return (iNumServices);
5020 }
5021
5022 /***************************************************************************
5023 Display the contents of the services array in human-readable form.
5024 ***************************************************************************/
5025
5026 void lp_dump(FILE *f, BOOL show_defaults, int maxtoprint)
5027 {
5028         int iService;
5029
5030         if (show_defaults)
5031                 defaults_saved = False;
5032
5033         dump_globals(f);
5034
5035         dump_a_service(&sDefault, f);
5036
5037         for (iService = 0; iService < maxtoprint; iService++) {
5038                 fprintf(f,"\n");
5039                 lp_dump_one(f, show_defaults, iService);
5040         }
5041 }
5042
5043 /***************************************************************************
5044 Display the contents of one service in human-readable form.
5045 ***************************************************************************/
5046
5047 void lp_dump_one(FILE * f, BOOL show_defaults, int snum)
5048 {
5049         if (VALID(snum)) {
5050                 if (ServicePtrs[snum]->szService[0] == '\0')
5051                         return;
5052                 dump_a_service(ServicePtrs[snum], f);
5053         }
5054 }
5055
5056 /***************************************************************************
5057 Return the number of the service with the given name, or -1 if it doesn't
5058 exist. Note that this is a DIFFERENT ANIMAL from the internal function
5059 getservicebyname()! This works ONLY if all services have been loaded, and
5060 does not copy the found service.
5061 ***************************************************************************/
5062
5063 int lp_servicenumber(const char *pszServiceName)
5064 {
5065         int iService;
5066         fstring serviceName;
5067
5068         if (!pszServiceName) {
5069                 return GLOBAL_SECTION_SNUM;
5070         }
5071
5072         for (iService = iNumServices - 1; iService >= 0; iService--) {
5073                 if (VALID(iService) && ServicePtrs[iService]->szService) {
5074                         /*
5075                          * The substitution here is used to support %U is
5076                          * service names
5077                          */
5078                         fstrcpy(serviceName, ServicePtrs[iService]->szService);
5079                         standard_sub_basic(get_current_username(), serviceName,sizeof(serviceName));
5080                         if (strequal(serviceName, pszServiceName)) {
5081                                 break;
5082                         }
5083                 }
5084         }
5085
5086         if (iService >= 0 && ServicePtrs[iService]->usershare == USERSHARE_VALID) {
5087                 time_t last_mod;
5088
5089                 if (!usershare_exists(iService, &last_mod)) {
5090                         /* Remove the share security tdb entry for it. */
5091                         delete_share_security(iService);
5092                         /* Remove it from the array. */
5093                         free_service_byindex(iService);
5094                         /* Doesn't exist anymore. */
5095                         return GLOBAL_SECTION_SNUM;
5096                 }
5097
5098                 /* Has it been modified ? If so delete and reload. */
5099                 if (ServicePtrs[iService]->usershare_last_mod < last_mod) {
5100                         /* Remove it from the array. */
5101                         free_service_byindex(iService);
5102                         /* and now reload it. */
5103                         iService = load_usershare_service(pszServiceName);
5104                 }
5105         }
5106
5107         if (iService < 0) {
5108                 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
5109                 return GLOBAL_SECTION_SNUM;
5110         }
5111
5112         return (iService);
5113 }
5114
5115 /*******************************************************************
5116  A useful volume label function.
5117 ********************************************************************/
5118
5119 char *volume_label(int snum)
5120 {
5121         char *ret = lp_volume(snum);
5122         if (!*ret)
5123                 return lp_servicename(snum);
5124         return (ret);
5125 }
5126
5127
5128 /*******************************************************************
5129  Set the server type we will announce as via nmbd.
5130 ********************************************************************/
5131
5132 static void set_default_server_announce_type(void)
5133 {
5134         default_server_announce = 0;
5135         default_server_announce |= SV_TYPE_WORKSTATION;
5136         default_server_announce |= SV_TYPE_SERVER;
5137         default_server_announce |= SV_TYPE_SERVER_UNIX;
5138
5139         /* note that the flag should be set only if we have a
5140            printer service but nmbd doesn't actually load the
5141            services so we can't tell   --jerry */
5142
5143         default_server_announce |= SV_TYPE_PRINTQ_SERVER;
5144
5145         switch (lp_announce_as()) {
5146                 case ANNOUNCE_AS_NT_SERVER:
5147                         default_server_announce |= SV_TYPE_SERVER_NT;
5148                         /* fall through... */
5149                 case ANNOUNCE_AS_NT_WORKSTATION:
5150                         default_server_announce |= SV_TYPE_NT;
5151                         break;
5152                 case ANNOUNCE_AS_WIN95:
5153                         default_server_announce |= SV_TYPE_WIN95_PLUS;
5154                         break;
5155                 case ANNOUNCE_AS_WFW:
5156                         default_server_announce |= SV_TYPE_WFW;
5157                         break;
5158                 default:
5159                         break;
5160         }
5161
5162         switch (lp_server_role()) {
5163                 case ROLE_DOMAIN_MEMBER:
5164                         default_server_announce |= SV_TYPE_DOMAIN_MEMBER;
5165                         break;
5166                 case ROLE_DOMAIN_PDC:
5167                         default_server_announce |= SV_TYPE_DOMAIN_CTRL;
5168                         break;
5169                 case ROLE_DOMAIN_BDC:
5170                         default_server_announce |= SV_TYPE_DOMAIN_BAKCTRL;
5171                         break;
5172                 case ROLE_STANDALONE:
5173                 default:
5174                         break;
5175         }
5176         if (lp_time_server())
5177                 default_server_announce |= SV_TYPE_TIME_SOURCE;
5178
5179         if (lp_host_msdfs())
5180                 default_server_announce |= SV_TYPE_DFS_SERVER;
5181 }
5182
5183 /***********************************************************
5184  returns role of Samba server
5185 ************************************************************/
5186
5187 int lp_server_role(void)
5188 {
5189         return server_role;
5190 }
5191
5192 /***********************************************************
5193  If we are PDC then prefer us as DMB
5194 ************************************************************/
5195
5196 BOOL lp_domain_master(void)
5197 {
5198         if (Globals.bDomainMaster == Auto)
5199                 return (lp_server_role() == ROLE_DOMAIN_PDC);
5200
5201         return Globals.bDomainMaster;
5202 }
5203
5204 /***********************************************************
5205  If we are DMB then prefer us as LMB
5206 ************************************************************/
5207
5208 BOOL lp_preferred_master(void)
5209 {
5210         if (Globals.bPreferredMaster == Auto)
5211                 return (lp_local_master() && lp_domain_master());
5212
5213         return Globals.bPreferredMaster;
5214 }
5215
5216 /*******************************************************************
5217  Remove a service.
5218 ********************************************************************/
5219
5220 void lp_remove_service(int snum)
5221 {
5222         ServicePtrs[snum]->valid = False;
5223         invalid_services[num_invalid_services++] = snum;
5224 }
5225
5226 /*******************************************************************
5227  Copy a service.
5228 ********************************************************************/
5229
5230 void lp_copy_service(int snum, const char *new_name)
5231 {
5232         do_section(new_name);
5233         if (snum >= 0) {
5234                 snum = lp_servicenumber(new_name);
5235                 if (snum >= 0)
5236                         lp_do_parameter(snum, "copy", lp_servicename(snum));
5237         }
5238 }
5239
5240
5241 /*******************************************************************
5242  Get the default server type we will announce as via nmbd.
5243 ********************************************************************/
5244
5245 int lp_default_server_announce(void)
5246 {
5247         return default_server_announce;
5248 }
5249
5250 /*******************************************************************
5251  Split the announce version into major and minor numbers.
5252 ********************************************************************/
5253
5254 int lp_major_announce_version(void)
5255 {
5256         static BOOL got_major = False;
5257         static int major_version = DEFAULT_MAJOR_VERSION;
5258         char *vers;
5259         char *p;
5260
5261         if (got_major)
5262                 return major_version;
5263
5264         got_major = True;
5265         if ((vers = lp_announce_version()) == NULL)
5266                 return major_version;
5267
5268         if ((p = strchr_m(vers, '.')) == 0)
5269                 return major_version;
5270
5271         *p = '\0';
5272         major_version = atoi(vers);
5273         return major_version;
5274 }
5275
5276 int lp_minor_announce_version(void)
5277 {
5278         static BOOL got_minor = False;
5279         static int minor_version = DEFAULT_MINOR_VERSION;
5280         char *vers;
5281         char *p;
5282
5283         if (got_minor)
5284                 return minor_version;
5285
5286         got_minor = True;
5287         if ((vers = lp_announce_version()) == NULL)
5288                 return minor_version;
5289
5290         if ((p = strchr_m(vers, '.')) == 0)
5291                 return minor_version;
5292
5293         p++;
5294         minor_version = atoi(p);
5295         return minor_version;
5296 }
5297
5298 /***********************************************************
5299  Set the global name resolution order (used in smbclient).
5300 ************************************************************/
5301
5302 void lp_set_name_resolve_order(const char *new_order)
5303 {
5304         string_set(&Globals.szNameResolveOrder, new_order);
5305 }
5306
5307 const char *lp_printername(int snum)
5308 {
5309         const char *ret = _lp_printername(snum);
5310         if (ret == NULL || (ret != NULL && *ret == '\0'))
5311                 ret = lp_const_servicename(snum);
5312
5313         return ret;
5314 }
5315
5316
5317 /***********************************************************
5318  Allow daemons such as winbindd to fix their logfile name.
5319 ************************************************************/
5320
5321 void lp_set_logfile(const char *name)
5322 {
5323         string_set(&Globals.szLogFile, name);
5324         pstrcpy(debugf, name);
5325 }
5326
5327 /*******************************************************************
5328  Return the max print jobs per queue.
5329 ********************************************************************/
5330
5331 int lp_maxprintjobs(int snum)
5332 {
5333         int maxjobs = LP_SNUM_OK(snum) ? ServicePtrs[snum]->iMaxPrintJobs : sDefault.iMaxPrintJobs;
5334         if (maxjobs <= 0 || maxjobs >= PRINT_MAX_JOBID)
5335                 maxjobs = PRINT_MAX_JOBID - 1;
5336
5337         return maxjobs;
5338 }
5339
5340 const char *lp_printcapname(void)
5341 {
5342         if ((Globals.szPrintcapname != NULL) &&
5343             (Globals.szPrintcapname[0] != '\0'))
5344                 return Globals.szPrintcapname;
5345
5346         if (sDefault.iPrinting == PRINT_CUPS) {
5347 #ifdef HAVE_CUPS
5348                 return "cups";
5349 #else
5350                 return "lpstat";
5351 #endif
5352         }
5353
5354         if (sDefault.iPrinting == PRINT_BSD)
5355                 return "/etc/printcap";
5356
5357         return PRINTCAP_NAME;
5358 }
5359
5360 /*******************************************************************
5361  Ensure we don't use sendfile if server smb signing is active.
5362 ********************************************************************/
5363
5364 static uint32 spoolss_state;
5365
5366 BOOL lp_disable_spoolss( void )
5367 {
5368         if ( spoolss_state == SVCCTL_STATE_UNKNOWN )
5369                 spoolss_state = _lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5370
5371         return spoolss_state == SVCCTL_STOPPED ? True : False;
5372 }
5373
5374 void lp_set_spoolss_state( uint32 state )
5375 {
5376         SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
5377
5378         spoolss_state = state;
5379 }
5380
5381 uint32 lp_get_spoolss_state( void )
5382 {
5383         return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5384 }
5385
5386 /*******************************************************************
5387  Ensure we don't use sendfile if server smb signing is active.
5388 ********************************************************************/
5389
5390 BOOL lp_use_sendfile(int snum)
5391 {
5392         /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
5393         if (Protocol < PROTOCOL_NT1) {
5394                 return False;
5395         }
5396         return (_lp_use_sendfile(snum) && (get_remote_arch() != RA_WIN95) && !srv_is_signing_active());
5397 }
5398
5399 /*******************************************************************
5400  Turn off sendfile if we find the underlying OS doesn't support it.
5401 ********************************************************************/
5402
5403 void set_use_sendfile(int snum, BOOL val)
5404 {
5405         if (LP_SNUM_OK(snum))
5406                 ServicePtrs[snum]->bUseSendfile = val;
5407         else
5408                 sDefault.bUseSendfile = val;
5409 }
5410
5411 /*******************************************************************
5412  Turn off storing DOS attributes if this share doesn't support it.
5413 ********************************************************************/
5414
5415 void set_store_dos_attributes(int snum, BOOL val)
5416 {
5417         if (!LP_SNUM_OK(snum))
5418                 return;
5419         ServicePtrs[(snum)]->bStoreDosAttributes = val;
5420 }
5421
5422 void lp_set_mangling_method(const char *new_method)
5423 {
5424         string_set(&Globals.szManglingMethod, new_method);
5425 }
5426
5427 /*******************************************************************
5428  Global state for POSIX pathname processing.
5429 ********************************************************************/
5430
5431 static BOOL posix_pathnames;
5432
5433 BOOL lp_posix_pathnames(void)
5434 {
5435         return posix_pathnames;
5436 }
5437
5438 /*******************************************************************
5439  Change everything needed to ensure POSIX pathname processing (currently
5440  not much).
5441 ********************************************************************/
5442
5443 void lp_set_posix_pathnames(void)
5444 {
5445         posix_pathnames = True;
5446 }
5447
5448 /*******************************************************************
5449  Global state for POSIX lock processing - CIFS unix extensions.
5450 ********************************************************************/
5451
5452 static enum brl_flavour posix_cifsx_locktype; /* By default 0 == WINDOWS_LOCK */
5453
5454 enum brl_flavour lp_posix_cifsu_locktype(void)
5455 {
5456         return posix_cifsx_locktype;
5457 }
5458
5459 /*******************************************************************
5460 ********************************************************************/
5461
5462 void lp_set_posix_cifsx_locktype(enum brl_flavour val)
5463 {
5464         posix_cifsx_locktype = val;
5465 }