xref: /titanic_50/usr/src/cmd/smbsrv/smbd/server.xml (revision 5f1ef25c7a11451cbd3080dc3ce8e8db4ca996c4)
1da6c28aaSamw<?xml version="1.0"?>
2da6c28aaSamw<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
3da6c28aaSamw<!--
4da6c28aaSamw
5da6c28aaSamwCDDL HEADER START
6da6c28aaSamw
7da6c28aaSamwThe contents of this file are subject to the terms of the
8da6c28aaSamwCommon Development and Distribution License (the "License").
9da6c28aaSamwYou may not use this file except in compliance with the License.
10da6c28aaSamw
11da6c28aaSamwYou can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
12da6c28aaSamwor http://www.opensolaris.org/os/licensing.
13da6c28aaSamwSee the License for the specific language governing permissions
14da6c28aaSamwand limitations under the License.
15da6c28aaSamw
16da6c28aaSamwWhen distributing Covered Code, include this CDDL HEADER in each
17da6c28aaSamwfile and include the License file at usr/src/OPENSOLARIS.LICENSE.
18da6c28aaSamwIf applicable, add the following below this CDDL HEADER, with the
19da6c28aaSamwfields enclosed by brackets "[]" replaced with your own identifying
20da6c28aaSamwinformation: Portions Copyright [yyyy] [name of copyright owner]
21da6c28aaSamw
22da6c28aaSamwCDDL HEADER END
23da6c28aaSamw
24148c5f43SAlan WrightCopyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
25*5f1ef25cSAram HăvărneanuCopyright 2011 Nexenta Systems, Inc.  All rights reserved.
26da6c28aaSamw
27da6c28aaSamwNOTE:  This service manifest is not editable; its contents will
28da6c28aaSamwbe overwritten by package or patch operations, including
29da6c28aaSamwoperating system upgrade.  Make customizations in a different
30da6c28aaSamwfile.
31da6c28aaSamw
32da6c28aaSamw-->
33da6c28aaSamw
34da6c28aaSamw<service_bundle type='manifest' name='SUNWsmbsr:smb-server'>
35da6c28aaSamw
36da6c28aaSamw<!-- 1. Name the service to 'network/smb/server' -->
37da6c28aaSamw<service
38da6c28aaSamw    name='network/smb/server'
39da6c28aaSamw    type='service'
40da6c28aaSamw    version='1'>
41da6c28aaSamw
42da6c28aaSamw	<!-- 2. Create default service instance. -->
43da6c28aaSamw	<create_default_instance enabled='false' />
44da6c28aaSamw
45da6c28aaSamw	<!-- 3. Service has single instance -->
46da6c28aaSamw	<single_instance/>
47da6c28aaSamw
48da6c28aaSamw	<!-- 4. Identify dependencies -->
49da6c28aaSamw
50da6c28aaSamw	<dependency name='network'
51da6c28aaSamw	    grouping='require_any'
52da6c28aaSamw	    restart_on='error'
53da6c28aaSamw	    type='service'>
54da6c28aaSamw		<service_fmri value='svc:/milestone/network'/>
55da6c28aaSamw	</dependency>
56da6c28aaSamw
57da6c28aaSamw	<!-- Must have all local filesystems mounted before we share them -->
58da6c28aaSamw	<dependency name='filesystem-local'
59da6c28aaSamw	    grouping='require_all'
60da6c28aaSamw	    restart_on='error'
61da6c28aaSamw	    type='service'>
62da6c28aaSamw		<service_fmri value='svc:/system/filesystem/local'/>
63da6c28aaSamw	</dependency>
64da6c28aaSamw
65da6c28aaSamw	<!-- Must have idmap service started -->
66da6c28aaSamw	<dependency name='idmap'
67da6c28aaSamw	    grouping='require_all'
681fdeec65Sjoyce mcintosh	    restart_on='none'
69da6c28aaSamw	    type='service'>
70da6c28aaSamw		<service_fmri value='svc:/system/idmap:default'/>
71da6c28aaSamw	</dependency>
72da6c28aaSamw
73ed9aabc7SGordon Ross	<!-- Must have SMB client service started -->
74ed9aabc7SGordon Ross	<dependency name='smb-client'
75ed9aabc7SGordon Ross	    grouping='require_all'
76ed9aabc7SGordon Ross	    restart_on='none'
77ed9aabc7SGordon Ross	    type='service'>
78ed9aabc7SGordon Ross		<service_fmri value='svc:/network/smb/client:default'/>
79ed9aabc7SGordon Ross	</dependency>
80ed9aabc7SGordon Ross
81da6c28aaSamw	<!--
82da6c28aaSamw	    Want to make sure that the network/shares/group service
83da6c28aaSamw	    starts after the smb/server service.  It needs to be
84da6c28aaSamw	    optional in order to not cause failure if smb is
85da6c28aaSamw	    disabled.
86da6c28aaSamw	-->
87da6c28aaSamw	<dependent name='groups'
88da6c28aaSamw	    grouping="optional_all"
89da6c28aaSamw	    restart_on='error' >
90da6c28aaSamw		    <service_fmri value='svc:/network/shares/group'/>
91da6c28aaSamw	</dependent>
92da6c28aaSamw
93da6c28aaSamw	<!-- 5. Identify start/stop/refresh methods -->
94da6c28aaSamw	<exec_method
95da6c28aaSamw		type='method'
96da6c28aaSamw		name='start'
97da6c28aaSamw		exec='/usr/lib/smbsrv/smbd %m'
98da6c28aaSamw		timeout_seconds='60' >
99da6c28aaSamw		<method_context>
100da6c28aaSamw			<method_credential
101da6c28aaSamw				user='root'
102da6c28aaSamw				group='sys'
10329bd2886SAlan Wright				privileges='all' />
104da6c28aaSamw		</method_context>
105da6c28aaSamw	</exec_method>
106da6c28aaSamw
107da6c28aaSamw	<exec_method
108da6c28aaSamw		type='method'
109da6c28aaSamw		name='stop'
110da6c28aaSamw		exec=':kill'
111da6c28aaSamw		timeout_seconds='60' />
112da6c28aaSamw
113da6c28aaSamw	<exec_method
114da6c28aaSamw		type='method'
115da6c28aaSamw		name='refresh'
116da6c28aaSamw		exec=':kill -HUP'
117da6c28aaSamw		timeout_seconds='60' />
118da6c28aaSamw
119da6c28aaSamw	<property_group name='general' type='framework'>
120da6c28aaSamw		<!-- To Start/Stop/Refresh the service -->
121da6c28aaSamw		<propval name='action_authorization' type='astring'
122da6c28aaSamw			value='solaris.smf.manage.smb' />
123da6c28aaSamw		<propval name='value_authorization' type='astring'
124da6c28aaSamw			value='solaris.smf.manage.smb' />
125da6c28aaSamw	</property_group>
126da6c28aaSamw
127eb1a3463STruong Nguyen	<property_group name='firewall_context' type='com.sun,fw_definition'>
128eb1a3463STruong Nguyen		<propval name='ipf_method' type='astring'
129eb1a3463STruong Nguyen		    value='/lib/svc/method/svc-smbd ipfilter' />
130eb1a3463STruong Nguyen	</property_group>
131eb1a3463STruong Nguyen
132eb1a3463STruong Nguyen	<property_group name='firewall_config' type='com.sun,fw_configuration'>
133eb1a3463STruong Nguyen		<propval name='policy' type='astring' value='use_global' />
134eb1a3463STruong Nguyen		<propval name='apply_to' type='astring' value='' />
135eb1a3463STruong Nguyen		<propval name='exceptions' type='astring' value='' />
136eb1a3463STruong Nguyen		<propval name='value_authorization' type='astring'
137eb1a3463STruong Nguyen			value='solaris.smf.value.firewall.config' />
138eb1a3463STruong Nguyen	</property_group>
139eb1a3463STruong Nguyen
140da6c28aaSamw	<property_group name='read' type='application'>
141da6c28aaSamw		<!-- To read protected parameters -->
142da6c28aaSamw		<propval name='read_authorization' type='astring'
143da6c28aaSamw			value='solaris.smf.read.smb' />
144da6c28aaSamw		<propval name='value_authorization' type='astring'
145da6c28aaSamw			value='solaris.smf.value.smb' />
146da6c28aaSamw		<propval name='machine_passwd' type='astring' value='' />
147da6c28aaSamw	</property_group>
148da6c28aaSamw
149da6c28aaSamw	<!-- SMB service-specific general configuration defaults -->
150da6c28aaSamw	<property_group name='smbd' type='application'>
151da6c28aaSamw		<stability value='Evolving' />
152da6c28aaSamw		<propval name='value_authorization' type='astring'
153da6c28aaSamw			value='solaris.smf.value.smb' />
154da6c28aaSamw		<propval name='oplock_enable' type='boolean'
155eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States			value='true' override='true'/>
156da6c28aaSamw		<propval name='autohome_map' type='astring'
157da6c28aaSamw			value='/etc' override='true'/>
158da6c28aaSamw		<propval name='domain_sid' type='astring'
159da6c28aaSamw			value='' override='true'/>
160da6c28aaSamw		<propval name='domain_member' type='boolean'
161da6c28aaSamw			value='false' override='true'/>
162da6c28aaSamw		<propval name='domain_name' type='astring'
163da6c28aaSamw			value='WORKGROUP' override='true'/>
1648d7e4166Sjose borrego		<propval name='fqdn' type='astring'
1658d7e4166Sjose borrego			value='' override='true'/>
1668d7e4166Sjose borrego		<propval name='forest' type='astring'
1678d7e4166Sjose borrego			value='' override='true'/>
1688d7e4166Sjose borrego		<propval name='domain_guid' type='astring'
1698d7e4166Sjose borrego			value='' override='true'/>
170da6c28aaSamw		<propval name='pdc' type='astring'
171da6c28aaSamw			value='' override='true'/>
172da6c28aaSamw		<propval name='wins_server_1' type='astring'
173da6c28aaSamw			value='' override='true'/>
174da6c28aaSamw		<propval name='wins_server_2' type='astring'
175da6c28aaSamw			value='' override='true'/>
176da6c28aaSamw		<propval name='wins_exclude' type='astring'
177da6c28aaSamw			value='' override='true'/>
178da6c28aaSamw		<propval name='max_workers' type='integer'
1792c2961f8Sjose borrego			value='1024' override='true'/>
180da6c28aaSamw		<propval name='max_connections' type='integer'
1814163af6aSjose borrego			value='100000' override='true'/>
182da6c28aaSamw		<propval name='keep_alive' type='integer'
183da6c28aaSamw			value='5400' override='true'/>
184da6c28aaSamw		<propval name='restrict_anonymous' type='boolean'
185da6c28aaSamw			value='false' override='true'/>
186da6c28aaSamw		<propval name='signing_enabled' type='boolean'
187da6c28aaSamw			value='false' override='true'/>
188da6c28aaSamw		<propval name='signing_required' type='boolean'
189da6c28aaSamw			value='false' override='true'/>
190da6c28aaSamw		<propval name='signing_check' type='boolean'
191da6c28aaSamw			value='false' override='true'/>
192da6c28aaSamw		<propval name='sync_enable' type='boolean'
193da6c28aaSamw			value='false' override='true'/>
194da6c28aaSamw		<propval name='security' type='astring'
195da6c28aaSamw			value='workgroup' override='true'/>
196da6c28aaSamw		<propval name='netbios_scope' type='astring'
197da6c28aaSamw			value='' override='true'/>
198da6c28aaSamw		<propval name='system_comment' type='astring'
199da6c28aaSamw			value='' override='true'/>
200da6c28aaSamw		<propval name='lmauth_level' type='integer'
201da6c28aaSamw			value='4' override='true'/>
202da6c28aaSamw		<propval name='ads_site' type='astring'
203da6c28aaSamw			value='' override='true'/>
204da6c28aaSamw		<propval name='ddns_enable' type='boolean'
205da6c28aaSamw			value='false' override='true'/>
206faa1795aSjb150015		<propval name='kpasswd_server' type='astring'
207faa1795aSjb150015			value='' override='true'/>
208faa1795aSjb150015		<propval name='kpasswd_domain' type='astring'
209faa1795aSjb150015			value='' override='true'/>
210faa1795aSjb150015		<propval name='kpasswd_seqnum' type='integer'
211faa1795aSjb150015			value='0' override='true'/>
212faa1795aSjb150015		<propval name='netlogon_seqnum' type='integer'
213faa1795aSjb150015			value='0' override='true'/>
2147f667e74Sjose borrego		<propval name='ipv6_enable' type='boolean'
2157f667e74Sjose borrego			value='false' override='true'/>
2169fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States		<propval name='sv_version' type='astring'
2179fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States			value='5.0' override='true'/>
218148c5f43SAlan Wright		<propval name='dfs_stdroot_num' type='integer'
219148c5f43SAlan Wright			value='0' override='true'/>
220*5f1ef25cSAram Hăvărneanu		<propval name='traverse_mounts' type='boolean'
221*5f1ef25cSAram Hăvărneanu			value='true' override='true'/>
222da6c28aaSamw	</property_group>
223da6c28aaSamw
22429bd2886SAlan Wright	<!-- SMB service-specific shares exec configuration defaults -->
22529bd2886SAlan Wright	<property_group name='exec' type='application'>
22629bd2886SAlan Wright		<stability value='Evolving' />
22729bd2886SAlan Wright		<propval name='map' type='astring'
22829bd2886SAlan Wright			value='' override='true'/>
22929bd2886SAlan Wright		<propval name='unmap' type='astring'
23029bd2886SAlan Wright			value='' override='true'/>
23129bd2886SAlan Wright		<propval name='disposition' type='astring'
23229bd2886SAlan Wright			value='' override='true'/>
23329bd2886SAlan Wright	</property_group>
23429bd2886SAlan Wright
235da6c28aaSamw	<!-- 6. Identify faults to be ignored. -->
236da6c28aaSamw	<!-- 7. Identify service model. Default service model is 'contract' -->
237da6c28aaSamw	<!-- 8. Identify dependents.
238da6c28aaSamw		For Solaris NAS, we may want to have the smbd service start,
239da6c28aaSamw		before it reaches the svc:/milestone/multi-user-server
240da6c28aaSamw		milestone.
241da6c28aaSamw		<dependent
242da6c28aaSamw			name='smb-server_multi-user-server'
243da6c28aaSamw			grouping='optional_all'
244da6c28aaSamw			restart_on='none'>
245da6c28aaSamw			<service_fmri value=
246da6c28aaSamw			    'svc:/milestone/multi-user-server'/>
247da6c28aaSamw		</dependent>
248da6c28aaSamw	-->
249da6c28aaSamw	<!-- 9. Insert service milestones. None. -->
250da6c28aaSamw
251da6c28aaSamw	<stability value='Evolving' />
252da6c28aaSamw
253da6c28aaSamw	<!-- 10. Create Service Template information -->
254da6c28aaSamw	<template>
255da6c28aaSamw		<common_name>
256da6c28aaSamw			<loctext xml:lang='C'> smbd daemon</loctext>
257da6c28aaSamw		</common_name>
258da6c28aaSamw		<documentation>
259da6c28aaSamw			<manpage title='smbd' section='1M'
260da6c28aaSamw				manpath='/usr/share/man' />
261da6c28aaSamw		</documentation>
262da6c28aaSamw	</template>
263da6c28aaSamw
264da6c28aaSamw</service>
265da6c28aaSamw
266da6c28aaSamw</service_bundle>
267