AIX Fast Connect is designed for ease of administration, but it provides a set of customizable parameters to support various configurations. Several of these parameters are dynamically configurable and do not require the server to be stopped and restarted for the changes to become effective.
These parameters are found in the /etc/cifs/cifsConfig file, and can be configured by using the net command with the following syntax:
net config /parameter_name:parameter_value
For usage help, type: net config help.
These parameters are described as follows:
| Parameter | Description | Type | (default,min,max) | S (static) / D (dynamic) 1 |
|---|---|---|---|---|
| accesscheckinglevel | Used to specify how directory searches are checked.
If this option is enabled, access checking is done within the context of each
user's cifsUserProc process. If this option is disabled,
access checking is done by the cifsServer process, based
upon each file's AIXpermission bits.
Note
Enabling this
option may be necessary for some AIX Fast Connect environments where AIX root
user does not have access to all files, such as JFS-ACLs support or SMB-to-NFS
gateway support. However, enabling this option degrades the performance of
the AIX Fast Connect server. |
int | 0, 0, 1 | D |
| acl_inheritance | Enables or disables the inheritance of AIX ACLs from the base path of a file share. Details about this feature can be found in AIX Fast Connect User Management and File Access. | int | (0, 0, 1) | S |
| aix_sharing_omodes | Enables or disables SMB ShareMode locking, using AIX file-locking modes. (Not related to share_level_security.) See also oplockfiles, oplock_unix_lock | int | 0, 0, 1 | S |
| alias_names | List of servername aliases. Use net name to list or update this parameter. Maximum length of each alias is 15 characters. See Specifying NetBIOS Aliases for HACMP support. | String | NULL, n/a, n/a | D |
| autodisconnect | Timeout (in minutes) to disconnect inactive sessions. Value 0 indicates sessions will not timeout. | int | 120, 0, 65535 | D |
backup_passthrough_ authentication_server |
IP address of the backup authentication server | String | NULL, n/a, n/a | S |
| browsinginterval | Sets the frequency (in seconds) that the AIX Fast Connect server will announce itself to the Master Browser on its local network. | int | 60, 30, 900 | D |
| browsemaster | Enables the Browse Master feature, which allows AIX Fast Connect to act as a "Browse Master" for its domain/workgroup (specified by the domainname option). This option is automatically enabled (internally), whenever the Network Logon feature is enabled. | int | 0, 0, 1 | S |
| cache_searches | Global enable/disable of the Search-caching feature. See Search Caching. | int | 0,0,1 | S |
| casepreserve | When set to 1, AIX Fast Connect preserves mixed-case file names when creating new files or directories for PC clients. When set to 0, AIX Fast Connect converts all file names to lowercase when creating files and directories. | int | 1,0,1 | S |
| casesensitive | When set to 1, AIX Fast Connect file name searches are case-sensitive. When set to 0 (the default), AIX Fast Connect file name searches are not case-sensitive. Normally, this parameter should be set to the default because DOS and Windows use case-insensitive filename searches on their local file systems by default. | int | 0,0,1 | S |
| cifs_registry | Enables the DCE User-Registry feature of AIX Fast Connect . This feature allows multiple AIX Fast Connect servers to share a common, centralized User Database stored in the DCE-Registry (rather than multiple, separate Fast Connect user-databases kept in /etc/cifs/cifsPasswd). For details on using the DCE Registry Database, see Appendix D. DCE Registry User Database . | int | 0, 0, 1 | S |
| comment | Server description (for network browsing); maximum of 49 characters. | String | n/a | S |
| dce_admin_keytab | Specifies the file name of the DCE keytab file needed for the DCE-Registry User Database feature. This keytab file must contain at least one entry, for the DCE account specified by the dce_admin_user parameter. | String | null, n/a, n/a | S |
| dce_admin_user | Specifies the DCE user name of the DCE admin user needed for the DCE-Registry User Database feature. This DCE user must have read/write access to the DCE-Registry records for AIX Fast Connect users. Each AIX Fast Connect server has a keytab file to use this DCE account, as specified by the dce_admin_keytab parameter. | |||
| dce_auth | Setting to enable AIX Fast Connect's support features for DCE and DFS. When enabled (set to 1), AIX Fast Connect uses DCE-authentication for all PC client logins and file accesses. Requires AIX Fast Connect is installed after dce.client.*. For details, see DCE/DFS Support . | int | (0,0,1) | S |
| domainname | Server domain (maximum of 15 characters). | String | WORKGROUP, n/a, n/a | S |
| dosattrmapping | DOS attribute mapping. If set to 1, the Archive, System, and Hidden attributes are mapped to User, Group, and Other execute bits. Otherwise, these attributes are not supported. This is only valid for files. | int | (1, 0, 1) | D |
| dosfilenamemapchar | The character used to map long file names to 8.3 DOS filename format. Valid values are tilde (~) and caret (^). Tilde (~) is the default. | char | ~ | S |
| dosfilenamemapping | DOS file-name mapping, If set to 1, long file names are mapped to 8.3 format. Otherwise, no file-name mapping is attempted. See Mapping Long AIX File Names to 8.3 DOS File Names. | int | (1, 0, 1) | S |
| double_byte_char | This string option allows Unicode character conversions to be specified (primarily to support known differences between Microsoft ms932 Unicode mappings, and IBM cp943 Unicode mappings, for Japanese characters.) This string is specified as a series of single-character conversions, separated by spaces. Each character conversion must be specified as an 8-digit hexadecimal number, preceded by 0x, with the MS-code listed first (hi-order bits), followed by the IBM-code. Up to 16 character conversions can be specified. For more information, see DBCS and Unicode Issues. | String | null, n/a, n/a | S |
| encrypt_passwords | Encrypted passwords. If set to 0, plain text passwords are used. A value of 1 will negotiate with the client. A value of 2 forces encrypted passwords. | int | (1, 0, 2) | S |
| filterbroadcast | Enables the AIX Fast Connect server to detect its own NetBIOS broadcast packets across different IP interfaces. Normally, for performance reasons, incoming broadcast packets are compared only with the IP address of the receiving IP interface. This feature allows incoming broadcast packets to be compared to all local IP interfaces, in case the packet was originally broadcast on one of the other interfaces. This feature is generally only needed for HACMP (multiple interfaces on a single physical LAN), or for AIX servers using ATM interfaces. Enable this feature if net start reports errors such as cannot start server, and /var/cifs/cifsLog contains entries such as NetBIOS name conflict. | int | 0, 0, 1 | S |
| guestlogonsupport | Guest Logon. A value of 1 will enable a guest user to access the server without an AIX Fast Connect password. This user will be connected with credentials defined by the user specified in the guestname parameter. A value of 0 disables this feature. | int | (0, 0, 1) | S |
| guestname | Guest Name (maximum 8 characters). This parameter specifies the user name that guest users will be connected as. The AIX Fast Connect password for this user should be null. | String | null, n/a, n/a | D |
| home_share_enable | Used to disable the HOME share that AIX Fast Connect generates, which gets mapped to an AIX Fast Connect user's home directory on AIX. (If dce_auth=1, that DCE user's DCE home directory is used instead.) This option is enabled by default. | int | 1, 0, 1 | S |
| krb5_auth | Enables the Kerberos-based Authentication feature of AIX Fast Connect. The krb5_service_name parameter must also be specified for this feature to work correctly. For more information, see Kerberos-based Authentication. | int | 0, 0, 1 | D |
| krb5_service_name | Specifies the Service Name of the Kerberos Domain Controller (KDC) to which AIX Fast Connect authenticates Kerberos users, if the Kerberos-based Authentication feature is enabled. | int | null, n/a, n/a | S |
| lm_encryption_level | Parameter to allow use of NT password encryption, when appropriate, instead of LM password encryption. The default is 0, meaning LM encryption only. If set to 1, allows NT encryption if the client supports it. | int | 0,0,1 | S |
| maxconnections2 | Maximum number of open connections allowed to a single resource (fileshare) on the server. (0 implies no limit.) | int | 0, 0, 1000 | D |
| maxopens2 | Maximum number of open files on the server. | int | 0, 0, 1000 | S |
| maxsearches2 | Maximum number of open searches on the server. | int | 0, 0, 1000 | S |
| maxsesssearches | Maximum number of open searches per session. For performance reasons, this number should be kept as small as practicable for your installation. | int | 5,2,1000 | S |
| maxshares | Limits the number of file shares and print shares that can be defined. For performance reasons, keep this number as small as practicable for your site. | int | 16, 1, 4096 | S |
| maxsmbbufsize | Sets the maximum packet size allowed by the AIX Fast Connect server for SMB protocol packets. (Each PC client may negotiate a smaller packet size, if desired.) | int | 65535, 4096, 65535 | S |
| maxusers2 | Maximum number of user sessions (logins) permitted. | int | 0, 0, 1000 | D |
| mmapfiles | When this performance option is enabled, AIX Fast Connect uses memory-mapped file-access (internally) during CIFS read and write operations, allowing more efficient data-transfers. | int | 0, 0, 1 | S |
| multiuserlogin | Enables or disables support for multiple user sessions from a single workstation. This option is needed to support Windows Terminal Server, and similar products. This option is mutually exclusive with the Network Logon feature. This option is also mutually exclusive with NT-Passthrough authentication. | int | 0, 0, 1 | S |
| nbns | If set to 1, server acts as a NetBIOS name server. | int | 1, 0, 1 | S |
| netlogon_path | The AIX pathname for the NETLOGON and IBMLAN$ shares (maximum 1023 characters), to store user startup scripts and policy files. | String | /var/cifs/netlogon,
n/a, n/a |
S |
| networklogon | Network Logon. This option is used to enable or disable the Network Logon feature of AIX Fast Connect. | int | 0, 0, 1 | S |
| nt_dialect | Enables the NT_LM0.12 protocol dialect to be used (which is the default dialect used between Windows 95 and Window NT). If set to 0, then the LANMAN 2.1 dialect will normally be negotiated between AIX Fast Connect and its clients. | int | 1, 0, 1 | S |
| oplock_unix_lock | Enables or disables AIX file-locking to be used for opportunistic locks. Enable this option if oplocks are enabled, and AIX applications need to share files with PC-clients. See also oplock_unix_lock_timeout, aix_sharing_omodes, oplockfiles. | int | 0, 0, 1 | S |
| oplock_unix_lock_timeout | Timeout in seconds, for oplock_unix_lock. (Time allowed to obtain AIX file lock.) | int | 0, 0, 1 | S |
| oplockfiles | Global parameter to define whether opportunistic locking is enabled (yes) or disabled (no). Opportunistic locking is a performance feature, allowing clients to lock entire files in non-exclusive mode. Controlled by oplocktimeout. See also sh_options, oplock_unix_lock. | Y/N | yes, no, yes | S |
| oplocktimeout | Timeout in seconds for opportunistic locking. | int | 35, 35, 640 | S |
| os2compatible | OS/2 Compatibility. If set to 0, READONLY means all readable but not writable files. If set to 1, READONLY means all readable files. | int | 1, 0, 1 | D |
passthrough_authentication_ server |
IP address of the passthrough authentication server | String | NULL, n/a, n/a | S |
| primary_wins_ipaddr | IP address of the NBNS (WINS) server. When started, the AIX Fast Connect server will register its NetBIOS name(s) with this NBNS server. See also wins_proxy. | String | null, n/a, n/a | S |
| profiles_path | The AIX path name for the PROFILES share (maximum 1023 characters), which the Network Logon feature uses to store user profiles and home directories. | String | /home,
n/a, n/a |
S |
| profiles_path_type | Determines how user profiles are accessed when the Network
Logon feature is enabled.
|
int | 1, 0, 2 | S |
| readonlydir | Allows AIX Fast Connect directories to be created as read-only. However, with this parameter set, copying a read-only directory to AIX Fast Connect (from a CD-ROM, for example) will fail--the AIX Fast Connect directory will be created as read-only and will not allow additional files to be copied into it. When this option is disabled (default), any request from a client to set a directory to read-only will be ignored. | int | 0, 0, 1 | D |
| remote_password_change | If the Network Logon feature is enabled, this option can be used to enable Windows 95 or Windows 98 clients to remotely change their AIX Fast Connect passwords for Network Logon. (Remote Password-Change is not currently available on AIX Fast Connect for Windows NT or Windows 2000 clients.) In addition, sync_aix_password can be used to simultaneously change the AIX password for an AIX Fast Connect user. For more details, see Changing Passwords Remotely. | int | 0, 0, 1 | S |
| secondary_wins_ipaddr | IP address of secondary WINS address. | String | n/a | S |
| send_file_api | Boolean value to enable an enhanced system call to improve the performance in sending files over the network. | int | (1, 0, 1) | S |
| send_file_cache_size | Cache SendFile Option. If the send_file_api is 1 and the requested SMB read size is less than the value of this parameter, the send_file API caches the file. The default value is zero, which means send_file API will not cache the file. | int | (0, 0, 4194304) | S |
| send_file_size | Cache SendFile maximum size. If the send_file_api is 1 and the requested SMB read size is greater than the value of this parameter, send_file API is used in the SMB operation. | int | (4096, 1, 4194304) | S |
| servername | NetBIOS name of the AIX Fast Connect server (maximum 15 characters). | String | TCP/IP hostname, n/a, n/a | S |
| sh_options | Data field (per share) to allow per-share options to be defined. This field should only be accessed with the net share command. See Specifying Per-Share Options. | int | n/a | S |
| share_level_security | Option to enable or disable share-level security (instead of user-level security). When enabled, share_level_security_username must also be specified. See Share-Level Security. | int | 0,0,1 | S |
| share_level_security_username | AIX user name used for file-access credentials when share_level_security is enabled (maximum 8 characters). Similar to guestname, but used for share-level security mode. | String | NULL, n/a, n/a | S |
| startup_script | The file name of the startup script used when networklogon=1 (maximum 256 characters). Two metatags in this string allow customization of the startup script file name during client logon -- %U is expanded to the client's user name, and %N is expanded to the client's computer name. | String | startup.bat,
n/a, n/a |
S |
| sync_aix_password | Allows the Remote Password-Change feature to change an AIX Fast Connect user's AIX password whenever changing the Network Logon password for that user. This keeps these two passwords synchronized with each other. For more details, see Changing Passwords Remotely. | int | 0, 0, 1 | S |
| tcp_keepalive | Allows AIX Fast Connect to generate TCP/IP keepalive messages to detect disconnected PC client sessions, and to keep Windows 2000 clients from disconnecting an active session containing mapped drives. (Windows 2000 clients will generally disconnect idle sessions after 1 hour.) | int | 1, 0, 1 | S |
| umask | Default permissions mask for files created from client machines. It is an octal number, and should always be prefixed with a zero. | octal | (022, 0, 0777) | D |
| usernamemapping | Option to enable/disable the User Name Mapping feature, configured by net user /map. | int | 0,0,1 | S |
| wins_proxy | Proxy Option. A value of 1 enables the forwarding of NetBIOS name resolution requests to a WINS server specified by the primary_wins_ipaddr parameter. | int | 0,0,1 | S |