From 4f5791ebd03eaec1c7da0865a383175b05102712 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sun, 5 May 2024 19:47:29 +0200
Subject: Adding upstream version 2:4.17.12+dfsg.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 docs-xml/smbdotconf/protocol/easupport.xml | 43 ++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 docs-xml/smbdotconf/protocol/easupport.xml

(limited to 'docs-xml/smbdotconf/protocol/easupport.xml')

diff --git a/docs-xml/smbdotconf/protocol/easupport.xml b/docs-xml/smbdotconf/protocol/easupport.xml
new file mode 100644
index 0000000..0ff9d32
--- /dev/null
+++ b/docs-xml/smbdotconf/protocol/easupport.xml
@@ -0,0 +1,43 @@
+<samba:parameter name="ea support"
+                 context="S"
+                 type="boolean"
+                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+    <para>This boolean parameter controls whether <citerefentry><refentrytitle>smbd</refentrytitle>                                       
+    <manvolnum>8</manvolnum></citerefentry> will allow clients to attempt to access extended
+    attributes on a share. In order to enable this parameter on a setup with default VFS modules:
+    </para>
+    <itemizedlist>
+	<listitem><para>Samba must have been built with extended attributes support.
+	</para></listitem>
+	<listitem><para>The underlying filesystem exposed by the share must support extended
+	attributes (e.g. the getfattr<manvolnum>1</manvolnum> / setfattr<manvolnum>1</manvolnum>
+	utilities must work).
+	</para></listitem>
+	<listitem><para>Access to extended user attributes must be allowed by the underlying
+        filesystem (e.g. when mounted with a system-dependent option like user_xattr on Linux).
+	</para></listitem>
+    </itemizedlist>
+    <para>
+    This option exposes the "user" attribute namespace from the underlying filesystem to
+    clients. In order to match Windows conventions, the namespace prefix ("user.") is
+    stripped from the attribute name on the client side. The handling of further attribute
+    namespaces (like "security", "system", or "trusted") is not affected by this option.
+    </para>
+    <para>
+    Note that the SMB protocol allows setting attributes whose value is 64K bytes long,
+    and that on NTFS, the maximum storage space for extended attributes per file is 64K.
+    On most UNIX systems (Solaris and ZFS file system being the exception), the limits
+    are much lower - typically 4K. Worse, the same 4K space is often used to store
+    system metadata such as POSIX ACLs, or Samba's NT ACLs. Giving clients
+    access to this tight space via extended attribute support could consume all
+    of it by unsuspecting client applications, which would prevent changing
+    system metadata due to lack of space.
+
+    The default has changed to yes in Samba release 4.9.0 and above to allow better Windows
+    fileserver compatibility in a default install.
+    </para>
+</description>
+
+<value type="default">yes</value>
+</samba:parameter>
-- 
cgit v1.2.3