File Formats nsmbrc(4)
NAME
nsmbrc - configuration file for Solaris CIFS client requests
SYNOPSIS
$HOME/.nsmbrc
DESCRIPTION
Global behavior of the Solaris CIFS client is defined by
property values that are stored in the Service Management
Facility (SMF). The .nsmbrc file can be used to customize
the behavior of the Solaris CIFS client on a per-user basis.
Settings in the $HOME/.nsmbrc file are used unless they have
security implications.
An authorized user can use the sharectl command to set glo-
bal values for these properties in SMF. See sharectl(1M).
A regular user can change the global values when granted the
"SMBFS Management" rights profile in the /userattr file.
See userattr(4) and rbac(5).
The SMBFS library first reads from SMF and then the
$HOME/.nsmbrc file when determining which policy to apply to
a particular server, user, or share. $HOME/.nsmbrc entries
take precedence with the exception of the minauth property
value. For minauth, the strongest authentication level
specified is used. Sections are applied so that more
specific sections override less specific sections. Not all
keywords are valid in all sections.
The configuration file is comprised of these four section
types. Each section can include zero or more properties and
associated values. The sections also have a hierarchical
relationship with each other, as shown by the order of the
following list:
o Default section. Specifies the default property
values to be used by all other sections unless
specifically overridden.
The section name appears in the .nsmbrc file as
[default].
o Server section. Specifies the property values to be
used by sections that are related to the named
server. These property values can be specifically
overridden by a related user section or share
SunOS 5.11 Last change: Dec 8 2008 1
File Formats nsmbrc(4)
section.
The section name appears in the .nsmbrc file as
[server-name]. server-name must use uppercase char-
acters to match.
o User section. Specifies the property values to be
used by sections that are related to the named
server and user. These property values can be
specifically overridden by a related share section.
The section name appears in the .nsmbrc as
[server-name:username]. Both server-name and user-
name must use uppercase characters to match.
o Share section. Specifies the property values to be
used by sections that are related to the named
server, user, and share.
The section name appears in the .nsmbrc as
[server-name:username:share-name]. Both server-name
and username must use uppercase characters to
match.
The end of each section is marked either by the start of a
new section or by an end of file (EOF).
The following list describes the properties and states in
which sections they can be set:
addr
Specifies the DNS name or IP address of the CIFS server.
This property can only be set in a server section. If
this property is specified, it must specify a value as
there is no default.
domain
Specifies the Windows domain name to use when authenti-
cating with a server. The default value is WORKGROUP.
This property can only be set in the default and server
sections.
minauth
Is the minimum authentication level required, which can
be one of kerberos, ntlmv2, ntlm, lm, or none. If
SunOS 5.11 Last change: Dec 8 2008 2
File Formats nsmbrc(4)
minauth is set globally and in a user's .nsmbrc file,
the stronger authentication setting are used whether set
by the user or globally. This property can only be set
in the default and server sections. The default value is
ntlm.
nbns
Specifies the DNS name or IP address of the NetBIOS/WINS
name server. This property can only be set by an
administrator by using the sharectl command. This pro-
perty can only be set in the default section. The
default value is empty, nbns="".
nbnsbroadcast
Specifies whether to perform NetBIOS/WINS broadcast
lookups. Broadcast lookups are less secure than unicast
lookups. To prevent broadcast lookups, set the value to
no. This property has no effect if the nbnsenable pro-
perty is set to no or false. This property can only be
set by an administrator by using the sharectl command.
This property can only be set in the default section.
Valid values are yes, true, no, and false. The default
value is yes.
nbnsenable
Specifies whether to perform NetBIOS/WINS name lookups.
To force all lookups to be done through the name service
switch (see nsswitch.conf(4)), set the value to no. This
property can only be set by an administrator by using
the sharectl command. This property can only be set in
the default section. Valid values are yes, true, no, and
false. The default value is yes.
password
Specifies the password to use when authenticating a
server. The password property value is used as long as
the .nsmbrc file can only be read and written by the
owner. This property can be set in the default, server,
user, and share sections.
If you assign the hashed password from the smbutil crypt
command to the password property, be sure to escape the
special characters in the password.
SunOS 5.11 Last change: Dec 8 2008 3
File Formats nsmbrc(4)
signing
Specifies whether communications are digitally signed by
SMB security signatures for the Solaris CIFS client.
This property can only be set in the default and server
sections. Valid values are disabled, enabled, and
required. The default value is disabled.
When set to disabled, the client permits the use of SMB
security signatures only if the server requires signing.
In such an instance, the Solaris CIFS client ignores
local property values.
When set to enabled, the client permits, but does not
require, the use of SMB security signatures.
When set to required, the client requires the use of SMB
security signatures. So, if SMB security signatures are
disabled on a CIFS server and a client has signing
required, the client cannot connect to that server.
timeout
Specifies the CIFS request timeout. By default, the
timeout is 15 seconds. This property can only be set in
the default, server, and share sections.
user
Specifies the user name to use when authenticating a
server. The default value is the Solaris account name of
the user performing the authentication. This property
can only be set in the default and server sections.
workgroup
Is supported for compatibility purposes and is a synonym
for the domain property. Use the domain property
instead.
EXAMPLES
The examples in this section show how to use the .nsmbrc
file and the smbutil command to configure the ex.com
environment.
The ex.com environment is described by means of these sec-
tions and settings:
SunOS 5.11 Last change: Dec 8 2008 4
File Formats nsmbrc(4)
o The default section describes the default domain,
which is called MYDOMAIN, and sets a default user
of MYUSER. These default settings are inherited by
other sections unless property values are overrid-
den.
o FSERVER is a server section that defines a server
called fserv.ex.com. It is part of the SALES
domain.
o RSERVER is a server section that defines a server
called rserv.ex.com that belongs to a new domain
called REMGROUP.
Example 1 Using the $HOME/.nsmbrc Configuration File
The following example shows how a user can configure the
ex.com environment by creating the .nsmbrc file.
All lines that begin with the # character are comments and
are not parsed.
# Configuration file for ex.com
# Specify the Windows account name to use everywhere.
[default]
domain=MYDOMAIN
user=MYUSER
# The 'FSERVER' is server in our domain.
[FSERVER]
addr=fserv.ex.com
# The 'RSERVER' is a server in another domain.
[RSERVER]
domain=REMGROUP
addr=rserv.ex.com
Example 2 Using the sharectl Command
The following example shows how an authorized user can use
sharectl commands to configure global settings for the
ex.com environment in SMF.
# sharectl set -p section=default -p domain=MYDOMAIN \
-p user=MYUSER smbfs
SunOS 5.11 Last change: Dec 8 2008 5
File Formats nsmbrc(4)
# sharectl set -p section=FSERVER -p addr=fserv.ex.com smbfs
# sharectl set -p section=RSERVER -p domain=REMGROUP \
-p addr=rserv.ex.com smbfs
Example 3 Using the sharectl Command to Show Current Set-
tings
The following example shows how an authorized user can use
the sharectl get command to view the global settings for
smbfs in SMF. The values shown are those set by the previous
example.
# sharectl get smbfs
[default]
domain=MYDOMAIN
user=MYUSER
[FSERVER]
addr=fserv.ex.com
[RSERVER]
domain=REMGROUP
addr=rserv.ex.com
FILES
$HOME/.nsmbrc
User-settable mount point configuration file to store
the description for each connection.
ATRIBUTES
See attributes(5) for descriptions of the following attri-
butes:
SunOS 5.11 Last change: Dec 8 2008 6
File Formats nsmbrc(4)
ATRIBUTE TYPE ATRIBUTE VALUE
Availability SUNWsmbfscu
Interface Stability Committed
SEE ALSO
smbutil(1), mountsmbfs(1M), sharectl(1M), nsswitch.conf(4),
userattr(4), attributes(5), rbac(5), smbfs(7FS)
NOTES
By default, passwords stored in the .nsmbrc file are ignored
unless only the file owner has read and write permission.
SunOS 5.11 Last change: Dec 8 2008 7
|
