summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/protocol/easupport.xml
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-05 17:47:29 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-05 17:47:29 +0000
commit4f5791ebd03eaec1c7da0865a383175b05102712 (patch)
tree8ce7b00f7a76baa386372422adebbe64510812d4 /docs-xml/smbdotconf/protocol/easupport.xml
parentInitial commit. (diff)
downloadsamba-4f5791ebd03eaec1c7da0865a383175b05102712.tar.xz
samba-4f5791ebd03eaec1c7da0865a383175b05102712.zip
Adding upstream version 2:4.17.12+dfsg.upstream/2%4.17.12+dfsgupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'docs-xml/smbdotconf/protocol/easupport.xml')
-rw-r--r--docs-xml/smbdotconf/protocol/easupport.xml43
1 files changed, 43 insertions, 0 deletions
diff --git a/docs-xml/smbdotconf/protocol/easupport.xml b/docs-xml/smbdotconf/protocol/easupport.xml
new file mode 100644
index 0000000..0ff9d32
--- /dev/null
+++ b/docs-xml/smbdotconf/protocol/easupport.xml
@@ -0,0 +1,43 @@
+<samba:parameter name="ea support"
+ context="S"
+ type="boolean"
+ xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+ <para>This boolean parameter controls whether <citerefentry><refentrytitle>smbd</refentrytitle>
+ <manvolnum>8</manvolnum></citerefentry> will allow clients to attempt to access extended
+ attributes on a share. In order to enable this parameter on a setup with default VFS modules:
+ </para>
+ <itemizedlist>
+ <listitem><para>Samba must have been built with extended attributes support.
+ </para></listitem>
+ <listitem><para>The underlying filesystem exposed by the share must support extended
+ attributes (e.g. the getfattr<manvolnum>1</manvolnum> / setfattr<manvolnum>1</manvolnum>
+ utilities must work).
+ </para></listitem>
+ <listitem><para>Access to extended user attributes must be allowed by the underlying
+ filesystem (e.g. when mounted with a system-dependent option like user_xattr on Linux).
+ </para></listitem>
+ </itemizedlist>
+ <para>
+ This option exposes the "user" attribute namespace from the underlying filesystem to
+ clients. In order to match Windows conventions, the namespace prefix ("user.") is
+ stripped from the attribute name on the client side. The handling of further attribute
+ namespaces (like "security", "system", or "trusted") is not affected by this option.
+ </para>
+ <para>
+ Note that the SMB protocol allows setting attributes whose value is 64K bytes long,
+ and that on NTFS, the maximum storage space for extended attributes per file is 64K.
+ On most UNIX systems (Solaris and ZFS file system being the exception), the limits
+ are much lower - typically 4K. Worse, the same 4K space is often used to store
+ system metadata such as POSIX ACLs, or Samba's NT ACLs. Giving clients
+ access to this tight space via extended attribute support could consume all
+ of it by unsuspecting client applications, which would prevent changing
+ system metadata due to lack of space.
+
+ The default has changed to yes in Samba release 4.9.0 and above to allow better Windows
+ fileserver compatibility in a default install.
+ </para>
+</description>
+
+<value type="default">yes</value>
+</samba:parameter>