HP CIFS Server Administrator's Guide Version A.03.01.04 (5900-2303), April 2012

NOTE: The difference between the access based share enum (S) parameter and
the access based enumeration parameter is that in access based share enum
(S) only the share permissions are evaluated and security descriptors are not used in computing
enumeration access rights.
• cache directory (G)
This parameter specifies the directory where the TBD files containing non-persistent data are
stored. The default setting of this parameter is cache directory =
/var/opt/samba/locks.
• client ntlmv2 auth (G)
This parameter determines if smbclient(8) authenticates servers using the NTLMv2 encrypted
password requests. If you enable this parameter, only NTLMv2 and LMv2 responses are
authenticated and NTLMv1 client lanman auth and client plaintext auth
authentication is disabled. If you disable this parameter, then an NTLM response is sent by
the client. The default setting for this parameter is client ntlmv2 auth = no.
NOTE: Web sites that follow the Best Practice security polices enable only NTLMv2 responses.
• client ldap sasl wrapping (G)
This parameter defines whether the LDAP traffic is signed or sealed. The values for this
parameter are plain, sign, and seal.
The client ldap sasl wrapping (G) parameter is useful when Domain Controllers
are enforcing the usage of signed LDAP connections. You can control the LDAP sign and
seal with the "HKLM\System\CurrentControlSet\Services\ NTDS\Parameters\
LDAPServerIntegrity" registry key on a Windows server. The default setting for this
parameter is client ldap sasl wrapping = plain.
NOTE: For HP CIFS Server, the krb5 library is used as a MIT version library. The default
plain value does not affect the krb5 clock skew errors.
• cups connection timeout (G)
NOTE: This parameter is available only when printing value is set to cups.
This parameter specifies the time is seconds that smbd must wait when trying to connect to
the CUPS server. The connection fails after the set time. The default setting for this parameter
is cups connection timeout = 30.
• debug class (G)
When this boolean parameter is enabled, it displays the debug class (DBGC_CLASS)
in the debug header. The default setting for this parameter is debug class = no.
• dedicated keytab file (G)
This parameter specifies the path of the Kerberos keytab file when the kerberos method
is set to dedicated keytab. The default setting for this parameter is dedicated keytab
file = [/usr/local/etc/krb5.keytab].
• init logon delayed hosts (G)
This parameter specifies the host names, addresses, and networks for which the samlogon
must be delayed. Use the init logon delay parameter to set the delay time. The default
setting for this parameter is init logon delayed hosts = [150.203.5.
myhost.mynet.de ].
152 HP-UX configuration for HP CIFS