🌐samba
Samba is an open-source software suite that provides file and print services for Windows clients. It's easy to use, secure, and highly customizable.
Samba is an open-source software suite that provides file and print services for Windows clients using the SMB/CIFS protocol. It allows Unix-based systems to share files and printers with Windows-based systems, and vice versa. Samba is a popular tool for network administrators and IT professionals, and is widely used in enterprise environments.
Samba provides a range of features and capabilities that make it a powerful tool for file and print sharing. It supports file sharing across multiple platforms, including Unix, Linux, macOS, and Windows. It also supports a wide range of protocols, including SMB, CIFS, and FTP, and provides support for both IPv4 and IPv6 networks.
One of the key benefits of Samba is its ease of use. It is designed to be simple and intuitive to configure and manage, with a range of tools and utilities that make it easy to set up and maintain file and print services. Additionally, Samba provides a range of security features, including support for encryption and authentication protocols, that help to ensure the privacy and security of shared data.
Samba is also highly customizable, and can be extended with a range of plugins and scripts to provide additional functionality. For example, there are plugins available for integrating Samba with LDAP directories, for providing print services, and for integrating with other network services.
Despite its many strengths, Samba is not without its limitations. It can be challenging to configure in complex network environments, and may require advanced knowledge of networking and security concepts. Additionally, it may not be suitable for all file and print sharing scenarios, particularly those involving high-performance or high-throughput workloads.
In summary, Samba is a powerful and flexible tool for providing file and print services in a mixed-platform environment. Its ease of use, security features, and extensibility make it an essential tool for network administrators and IT professionals. While it may not be suitable for all file and print sharing scenarios, it is a valuable addition to any enterprise or organizational network.
Packages and Binaries:
ctdb
CTDB is a cluster implementation of the TDB database used by Samba and other projects to store temporary data. If an application is already using TDB for temporary data it is very easy to convert that application to be cluster aware and use CTDB instead.
CTDB provides the same types of functions as TDB but in a clustered fashion, providing a TDB-style database that spans multiple physical hosts in a cluster.
Features include:
CTDB provides a TDB that has consistent data and consistent locking across all nodes in a cluster.
CTDB is very fast.
In case of node failures, CTDB will automatically recover and repair all TDB databases that it manages.
CTDB is the core component that provides pCIFS (“parallel CIFS”) with Samba3/4.
CTDB provides HA features such as node monitoring, node failover, and IP takeover.
CTDB provides a reliable messaging transport to allow applications linked with CTDB to communicate to other instances of the application running on different nodes in the cluster.
CTDB has pluggable transport backends. Currently implemented backends are TCP and Infiniband.
CTDB supports a system of application specific management scripts, allowing applications that depend on network or filesystem resources to be managed in a highly available manner on a cluster.
Installed size: 3.67 MB
How to install: sudo apt install ctdb
Dependencies:
iproute2
libbsd0
libc6
libpopt0
libtalloc2
libtdb1
libtevent0
libtirpc3
psmisc
samba-libs
sudo
tdb-tools
time
ctdb
CTDB management utility Clustered TDB
:~# ctdb --help
Usage: [OPTION...]
-d, --debug=STRING debug level
-t, --timelimit=INT timelimit (in seconds)
-n, --node=INT node specification - integer
-Y enable machine readable output
-x, --separator=CHAR specify separator for machine readable output
-X enable machine parsable output with separator |
-v, --verbose enable verbose output
-T, --maxruntime=INT die if runtime exceeds this limit (in seconds)
Help options:
-?, --help Show this help message
--usage Display brief usage messagectdb_diagnostics
Dump diagnostic information about CTDB/Samba installation
:~# ctdb_diagnostics -h
Failed to read nodes file "/etc/ctdb/nodes"
Usage: ctdb_diagnostics [OPTION] ...
options:
-n <nodes> Comma separated list of nodes to operate on
-c Ignore comment lines (starting with '#') in file comparisons
-w Ignore whitespace in file comparisons
--no-ads Do not use commands that assume an Active Directory Serverctdbd
The CTDB cluster daemon
:~# ctdbd --help
Usage: [OPTION...]
-i, --interactive don't fork, log to stderr
Help options:
-?, --help Show this help message
--usage Display brief usage messageltdbtool
Manipulate CTDB’s local TDB files
:~# ltdbtool -h
Usage: ltdbtool [options] <command>
Options:
-s {0|32|64} specify how to determine the ctdb record header size
for the input database:
0: no ctdb header
32: ctdb header size of a 32 bit system (20 bytes)
64: ctdb header size of a 64 bit system (24 bytes)
default: 32 or 64 depending on the system architecture
-S <num> the number of bytes to interpret as ctdb record header
for the input database (beware!)
-o {0|32|64} specify how to determine the ctdb record header size
for the output database
0: no ctdb header
32: ctdb header size of a 32 bit system (20 bytes)
64: ctdb header size of a 64 bit system (24 bytes)
default: 32 or 64 depending on the system architecture
-O <num> the number of bytes to interpret as ctdb record header
for the output database (beware!)
-e Include empty records, defaults to off
-p print header (for the dump command), defaults to off
-h print this help
Commands:
help print this help
dump <db> dump the db to stdout
convert <in_db> <out_db> convert the db
onnode
Run commands on CTDB cluster nodes
:~# onnode --help
/usr/bin/onnode: illegal option -- -
Usage: onnode [OPTION] ... <NODES> <COMMAND> ...
options:
-c Run in current working directory on specified nodes.
-f Specify nodes file, overriding default.
-i Keep standard input open - the default is to close it.
-n Allow nodes to be specified by name.
-p Run command in parallel on specified nodes.
-P Push given files to nodes instead of running commands.
-q Do not print node addresses (overrides -v).
-v Print node address even for a single node.
<NODES> "all", "any", "ok" (or "healthy"), "con" (or "connected") ; or
a node number (0 base); or
a hostname (if -n is specified); or
list (comma separated) of <NODES>; or
range (hyphen separated) of node numbers.ping_pong
Measures the ping-pong byte range lock latency
:~# man ping_pong
PING_PONG(1) CTDB - clustered TDB database PING_PONG(1)
NAME
ping_pong - measures the ping-pong byte range lock latency
SYNOPSIS
ping_pong {-r | -w | -rw} [-m] [-c] {FILENAME} {NUM-LOCKS}
DESCRIPTION
ping_pong measures the byte range lock latency. It is especially useful
on a cluster of nodes sharing a common lock manager as it will give
some indication of the lock manager's performance under stress.
FILENAME is a file on shared storage to use for byte range locking
tests.
NUM-LOCKS is the number of byte range locks, so needs to be (strictly)
greater than the number of nodes in the cluster.
OPTIONS
-r
test read performance
-w
test write performance
-m
use mmap
-c
validate the locks
EXAMPLES
Testing lock coherence
ping_pong test.dat N
Testing lock coherence with lock validation
ping_pong -c test.dat N
Testing IO coherence
ping_pong -rw test.dat N
SEE ALSO
ctdb(7), https://wiki.samba.org/index.php/Ping_pong
AUTHOR
This documentation was written by Mathieu Parent
COPYRIGHT
Copyright (C) 2002 Andrew Tridgell
This program is free software; you can redistribute it and/or modify it
under the terms of the GNU General Public License as published by the
Free Software Foundation; either version 3 of the License, or (at your
option) any later version.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
You should have received a copy of the GNU General Public License along
with this program; if not, see http://www.gnu.org/licenses.
ctdb 02/04/2023 PING_PONG(1)ldb-tools
ldb is a LDAP-like embedded database built on top of TDB.
What ldb does is provide a fast database with an LDAP-like API designed to be used within an application. In some ways it can be seen as a intermediate solution between key-value pair databases and a real LDAP database.
This package contains bundled test and utility binaries
Installed size: 195 KB
How to install: sudo apt install ldb-tools
ldbadd
Command-line utility for adding records to an LDB
:~# ldbadd --help
Usage: [OPTION...]
-H, --url=URL database URL
-b, --basedn=DN base DN
-e, --editor=PROGRAM external editor
-s, --scope=SCOPE search scope
-v, --verbose increase verbosity
--trace enable tracing
-i, --interactive input from stdin
-r, --recursive recursive delete
--modules-path=PATH modules path
--num-searches=INT number of test searches
--num-records=INT number of test records
-a, --all (|(objectClass=*)(distinguishedName=*))
--nosync non-synchronous transactions
-S, --sorted sort attributes
-o OPTION ldb_connect option
--controls=STRING controls
--show-binary display binary LDIF
--paged use a paged search
--show-deleted show deleted objects
--show-recycled show recycled objects
--show-deactivated-link show deactivated links
--reveal reveal ldb internals
--relax pass relax control
--cross-ncs search across NC boundaries
--extended-dn show extended DNs
Help options:
-?, --help Show this help message
--usage Display brief usage messageldbdel
Command-line program for deleting LDB records
:~# ldbdel --help
Usage: [OPTION...]
-H, --url=URL database URL
-b, --basedn=DN base DN
-e, --editor=PROGRAM external editor
-s, --scope=SCOPE search scope
-v, --verbose increase verbosity
--trace enable tracing
-i, --interactive input from stdin
-r, --recursive recursive delete
--modules-path=PATH modules path
--num-searches=INT number of test searches
--num-records=INT number of test records
-a, --all (|(objectClass=*)(distinguishedName=*))
--nosync non-synchronous transactions
-S, --sorted sort attributes
-o OPTION ldb_connect option
--controls=STRING controls
--show-binary display binary LDIF
--paged use a paged search
--show-deleted show deleted objects
--show-recycled show recycled objects
--show-deactivated-link show deactivated links
--reveal reveal ldb internals
--relax pass relax control
--cross-ncs search across NC boundaries
--extended-dn show extended DNs
Help options:
-?, --help Show this help message
--usage Display brief usage messageldbedit
Edit LDB databases using your preferred editor
:~# ldbedit --help
Usage: [OPTION...]
-H, --url=URL database URL
-b, --basedn=DN base DN
-e, --editor=PROGRAM external editor
-s, --scope=SCOPE search scope
-v, --verbose increase verbosity
--trace enable tracing
-i, --interactive input from stdin
-r, --recursive recursive delete
--modules-path=PATH modules path
--num-searches=INT number of test searches
--num-records=INT number of test records
-a, --all (|(objectClass=*)(distinguishedName=*))
--nosync non-synchronous transactions
-S, --sorted sort attributes
-o OPTION ldb_connect option
--controls=STRING controls
--show-binary display binary LDIF
--paged use a paged search
--show-deleted show deleted objects
--show-recycled show recycled objects
--show-deactivated-link show deactivated links
--reveal reveal ldb internals
--relax pass relax control
--cross-ncs search across NC boundaries
--extended-dn show extended DNs
Help options:
-?, --help Show this help message
--usage Display brief usage messageldbmodify
Modify records in a LDB database
:~# ldbmodify --help
Usage: [OPTION...]
-H, --url=URL database URL
-b, --basedn=DN base DN
-e, --editor=PROGRAM external editor
-s, --scope=SCOPE search scope
-v, --verbose increase verbosity
--trace enable tracing
-i, --interactive input from stdin
-r, --recursive recursive delete
--modules-path=PATH modules path
--num-searches=INT number of test searches
--num-records=INT number of test records
-a, --all (|(objectClass=*)(distinguishedName=*))
--nosync non-synchronous transactions
-S, --sorted sort attributes
-o OPTION ldb_connect option
--controls=STRING controls
--show-binary display binary LDIF
--paged use a paged search
--show-deleted show deleted objects
--show-recycled show recycled objects
--show-deactivated-link show deactivated links
--reveal reveal ldb internals
--relax pass relax control
--cross-ncs search across NC boundaries
--extended-dn show extended DNs
Help options:
-?, --help Show this help message
--usage Display brief usage messageldbrename
Edit LDB databases using your favorite editor
:~# ldbrename --help
Usage: [OPTION...]
-H, --url=URL database URL
-b, --basedn=DN base DN
-e, --editor=PROGRAM external editor
-s, --scope=SCOPE search scope
-v, --verbose increase verbosity
--trace enable tracing
-i, --interactive input from stdin
-r, --recursive recursive delete
--modules-path=PATH modules path
--num-searches=INT number of test searches
--num-records=INT number of test records
-a, --all (|(objectClass=*)(distinguishedName=*))
--nosync non-synchronous transactions
-S, --sorted sort attributes
-o OPTION ldb_connect option
--controls=STRING controls
--show-binary display binary LDIF
--paged use a paged search
--show-deleted show deleted objects
--show-recycled show recycled objects
--show-deactivated-link show deactivated links
--reveal reveal ldb internals
--relax pass relax control
--cross-ncs search across NC boundaries
--extended-dn show extended DNs
Help options:
-?, --help Show this help message
--usage Display brief usage messageldbsearch
Search for records in a LDB database
:~# ldbsearch --help
Usage: [OPTION...]
-H, --url=URL database URL
-b, --basedn=DN base DN
-e, --editor=PROGRAM external editor
-s, --scope=SCOPE search scope
-v, --verbose increase verbosity
--trace enable tracing
-i, --interactive input from stdin
-r, --recursive recursive delete
--modules-path=PATH modules path
--num-searches=INT number of test searches
--num-records=INT number of test records
-a, --all (|(objectClass=*)(distinguishedName=*))
--nosync non-synchronous transactions
-S, --sorted sort attributes
-o OPTION ldb_connect option
--controls=STRING controls
--show-binary display binary LDIF
--paged use a paged search
--show-deleted show deleted objects
--show-recycled show recycled objects
--show-deactivated-link show deactivated links
--reveal reveal ldb internals
--relax pass relax control
--cross-ncs search across NC boundaries
--extended-dn show extended DNs
Help options:
-?, --help Show this help message
--usage Display brief usage messagelibldb-dev
ldb is a LDAP-like embedded database built on top of TDB.
What ldb does is provide a fast database with an LDAP-like API designed to be used within an application. In some ways it can be seen as a intermediate solution between key-value pair databases and a real LDAP database.
This package contains the development files.
Installed size: 171 KB
How to install: sudo apt install libldb-dev
libldb2
ldb is a LDAP-like embedded database built on top of TDB.
It provides a fast database with an LDAP-like API designed to be used within an application. In some ways it can be seen as a intermediate solution between key-value pair databases and a real LDAP database.
This package contains the shared library file.
Installed size: 614 KB
How to install: sudo apt install libldb2
libnss-winbind
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as an NT4-style domain controller, and can integrate with both NT4 domains and Active Directory realms as a member server.
This package provides nss_winbind, a plugin that integrates with a local winbindd server to provide user/group name lookups to the system; and nss_wins, which provides hostname lookups via both the NBNS and NetBIOS broadcast protocols.
Installed size: 185 KB
How to install: sudo apt install libnss-winbind
libpam-winbind
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as an NT4-style domain controller, and can integrate with both NT4 domains and Active Directory realms as a member server.
This package provides pam_winbind, a plugin that integrates with a local winbindd server to provide Windows domain authentication to the system.
Installed size: 168 KB
How to install: sudo apt install libpam-winbind
libsmbclient
This package provides a shared library that enables client applications to talk to Microsoft Windows and Samba servers using the SMB/CIFS protocol.
Installed size: 232 KB
How to install: sudo apt install libsmbclient
libsmbclient-dev
This package provides the development files (static library and headers) required for building applications against libsmbclient, a library that enables client applications to talk to Microsoft Windows and Samba servers using the SMB/CIFS protocol.
Installed size: 268 KB
How to install: sudo apt install libsmbclient-dev
libwbclient-dev
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems.
This package provides the development files (static library and headers) required for building applications against libwbclient, a library for client applications that interact via the winbind pipe protocol with a Samba winbind server.
Installed size: 110 KB
How to install: sudo apt install libwbclient-dev
libwbclient0
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems.
This package provides a library for client applications that interact via the winbind pipe protocol with a Samba winbind server.
Installed size: 128 KB
How to install: sudo apt install libwbclient0
python3-ldb
ldb is a LDAP-like embedded database built on top of TDB.
This package contains the Python 3 bindings.
Installed size: 182 KB
How to install: sudo apt install python3-ldb
python3-ldb-dev
ldb is a LDAP-like embedded database built on top of TDB.
It is a fast database with an LDAP-like API designed to be used within an application. In some ways it can be seen as a intermediate solution between key-value pair databases and a real LDAP database.
This package contains the development files for the Python 3 bindings.
Installed size: 60 KB
How to install: sudo apt install python3-ldb-dev
python3-samba
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains Python 3 bindings for most Samba libraries.
Installed size: 21.40 MB
How to install: sudo apt install python3-samba
Dependencies:
libbsd0
libc6
libgnutls30
libldb2
libpython3.11
libtalloc2
libtevent0
python3
python3
python3-ldb
python3-talloc
python3-tdb
samba-libs
registry-tools
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains tools for viewing and manipulating the binary “registry” found on Windows machines, both locally and remote.
Installed size: 153 KB
How to install: sudo apt install registry-tools
regdiff
Diff program for Windows registry files
:~# regdiff --help
Usage: regdiff [OPTION...]
-o, --output=STRING output file to use
-n, --null Diff from NULL
-R, --remote=STRING Connect to remote server
-L, --local Open local registry
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print versionregpatch
Applies registry patches to registry files
:~# regpatch --help
Usage: regpatch [OPTION...]
-R, --remote=STRING connect to specified remote
server
-F, --file=STRING file path
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print versionregshell
Windows registry file browser using readline
:~# regshell --help
Usage: regshell [OPTION...]
-F, --file=STRING open hive file
-R, --remote=STRING connect to specified remote
server
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos=STRING DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print versionregtree
Text-mode registry viewer
:~# regtree --help
Usage: regtree [OPTION...]
-F, --file=STRING file path
-R, --remote=STRING connect to specified remote
server
-f, --fullpath show full paths
-V, --no-values don't show values
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print versionsamba
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as an NT4-style domain controller, and can integrate with both NT4 domains and Active Directory realms as a member server.
This package provides the components necessary to use Samba as a stand-alone file and print server or as an NT4 or Active Directory domain controller. For use in an NT4 domain or Active Directory realm, you will also need the winbind package.
This package is not required for connecting to existing SMB/CIFS servers (see smbclient) or for mounting remote filesystems (see cifs-utils).
Installed size: 3.84 MB
How to install: sudo apt install samba
Dependencies:
init-system-helpers
libbsd0
libc6
libcups2
libgnutls30
libldap-2.5-0
libldb2
libpam-modules
libpam-runtime
libpopt0
libtalloc2
libtasn1-6
libtdb1
libtevent0
passwd
procps
python3
python3-dnspython
python3-samba
samba-common
samba-common-bin
samba-libs
tdb-tools
dumpmscat
eventlogadm
Push records into the Samba event log store
:~# eventlogadm -h
Usage: eventlogadm [OPTION]
-o write <Eventlog Name> Writes records to eventlog from STDIN
-o addsource <EventlogName> <sourcename> <msgfileDLLname> Adds the specified source & DLL eventlog registry entry
-o dump <Eventlog Name> <starting_record> Dump stored eventlog entries on STDOUT
Miscellaneous options:
-s <filename> Use configuration file <filename>.
-d turn debug on
-h display help
Active eventlog names:
--------------------------------------
<None specified>mvxattr
Recursively rename extended attributes
:~# mvxattr --help
Usage: mvxattr -s STRING -d STRING PATH [PATH ...]
-s, --from=STRING xattr source name
-d, --to=STRING xattr destination name
-l, --follow-symlinks follow symlinks, the default is to ignore them
-p, --print print files where the xattr got renamed
-v, --verbose print files as they are checked
-f, --force force overwriting of destination xattr
Help options:
-?, --help Show this help message
--usage Display brief usage messagenmbd
NetBIOS name server to provide NetBIOS over IP naming services to clients
:~# nmbd --help
Usage: nmbd [OPTION...]
-H, --hosts=STRING Load a netbios hosts file
-p, --port=INT Listen on the specified port
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Daemon options:
-D, --daemon Become a daemon (default)
-i, --interactive Run interactive (not a daemon) and log to
stdout
-F, --foreground Run daemon in foreground (for
daemontools, etc.)
--no-process-group Don't create a new process group
Version options:
-V, --version Print versionoLschema2ldif
Converts LDAP schema’s to LDB-compatible LDIF
:~# oLschema2ldif --help
Usage: [OPTION...]
-b, --basedn=DN base DN
-I, --input=inputfile inputfile of OpenLDAP style schema otherwise
STDIN
-O, --output=outputfile outputfile otherwise STDOUT
Help options:
-?, --help Show this help message
--usage Display brief usage message
Version options:
-V, --version Print versionpdbedit
Manage the SAM database (Database of Samba Users)
:~# pdbedit --help
Usage: [OPTION...]
-L, --list list all users
-v, --verbose be verbose
-w, --smbpasswd-style give output in smbpasswd style
-u, --user=USER use username
-N, --account-desc=STRING set account description
-f, --fullname=STRING set full name
-h, --homedir=STRING set home directory
-D, --drive=STRING set home drive
-S, --script=STRING set logon script
-p, --profile=STRING set profile path
-I, --domain=STRING set a users' domain
-U, --user SID=STRING set user SID or RID
-M, --machine SID=STRING set machine SID or RID
-a, --create create user
-r, --modify modify user
-m, --machine account is a machine account
-x, --delete delete user
-b, --backend=STRING use different passdb backend as
default backend
-i, --import=STRING import user accounts from this backend
-e, --export=STRING export user accounts to this backend
-g, --group use -i and -e for groups
-y, --policies use -i and -e to move account policies
between backends
--policies-reset restore default policies
-P, --account-policy=STRING value of an account policy (like
maximum password age)
-C, --value=LONG set the account policy to this value
-c, --account-control=STRING Values of account control
--force-initialized-passwords Force initialization of corrupt
password strings in a passdb backend
-z, --bad-password-count-reset reset bad password count
-Z, --logon-hours-reset reset logon hours
--time-format=STRING The time format for time parameters
-t, --password-from-stdin get password from standard in
-K, --kickoff-time=STRING set the kickoff time
--set-nt-hash=STRING set password from nt-hash
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on
exit
Version options:
-V, --version Print versionprofiles
A utility to report and change SIDs in registry files
:~# profiles --help
Usage: <profilefile>
-c, --change-sid=STRING Provides SID to change
-n, --new-sid=STRING Provides SID to change to
-v, --verbose Verbose output
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print versionsamba
A Windows AD and SMB/CIFS fileserver for UNIX Server to provide AD and SMB/CIFS services to clients
:~# samba --help
Usage: samba: root process [OPTION...]
-M, --model=MODEL Select process model
--maximum-runtime=seconds set maximum runtime of the server
process, till autotermination
-b, --show-build show build info
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Daemon options:
-D, --daemon Become a daemon (default)
-i, --interactive Run interactive (not a daemon) and log to
stdout
-F, --foreground Run daemon in foreground (for
daemontools, etc.)
--no-process-group Don't create a new process group
Version options:
-V, --version Print versionsamba-gpupdate
Apply group policy
:~# samba-gpupdate -h
Usage: samba-gpupdate [options]
Options:
-h, --help show this help message and exit
-X, --unapply Unapply Group Policy
--target=TARGET {Computer | User}
--force Reapplies all policy settings
--rsop Print the Resultant Set of Policy
Samba Common Options:
-s FILE, --configfile=FILE
Configuration file
-d DEBUGLEVEL, --debuglevel=DEBUGLEVEL
debug level
--option=OPTION set smb.conf option from command line
--realm=REALM set the realm name
Version Options:
-V, --version Display version number
Credentials Options:
--simple-bind-dn=DN
DN to use for a simple bind
--password=PASSWORD
Password
-U USERNAME, --username=USERNAME
Username
-W WORKGROUP, --workgroup=WORKGROUP
Workgroup
-N, --no-pass Don't ask for a password
--ipaddress=IPADDRESS
IP address of server
-P, --machine-pass Use stored machine account password
--use-kerberos=desired|required|off
Use Kerberos authentication
--use-krb5-ccache=KRB5CCNAME
Kerberos Credentials cache
-k KERBEROS, --kerberos=KERBEROS
DEPRECATED: Migrate to --use-kerberossamba_dnsupdate
:~# samba_dnsupdate -h
Usage: samba_dnsupdate [options]
Options:
-h, --help show this help message and exit
--verbose
--use-samba-tool Use samba-tool to make updates over RPC, rather than
over DNS
--use-nsupdate Use nsupdate command to make updates over DNS
(default, if kinit successful)
--all-names
--all-interfaces
--current-ip=CURRENT_IP
IP address to update DNS to match (helpful if behind
NAT, valid multiple times, defaults to values from
interfaces=)
--rpc-server-ip=RPC_SERVER_IP
IP address of server to use with samba-tool (defaults
to first --current-ip)
--use-file=USE_FILE Use a file, rather than real DNS calls
--update-list=UPDATE_LIST
Add DNS names from the given file
--update-cache=UPDATE_CACHE
Cache database of already registered records
--fail-immediately Exit on first failure
--no-credentials don't try and get credentials
--no-substitutions don't try and expands variables in file specified by
--update-list
Samba Common Options:
-s FILE, --configfile=FILE
Configuration file
-d DEBUGLEVEL, --debuglevel=DEBUGLEVEL
debug level
--option=OPTION set smb.conf option from command line
--realm=REALM set the realm name
Version Options:
-V, --version Display version numbersamba_downgrade_db
Samba tool for downgrading AD databases
:~# samba_downgrade_db -h
Usage: samba_downgrade_db
Options:
-h, --help show this help message and exit
-H URL, --URL=URL LDB URL for database
Version Options:
-V, --version Display version numbersamba_spnupdate
:~# samba_spnupdate -h
Usage: samba_spnupdate
Options:
-h, --help show this help message and exit
--verbose
Samba Common Options:
-s FILE, --configfile=FILE
Configuration file
-d DEBUGLEVEL, --debuglevel=DEBUGLEVEL
debug level
--option=OPTION set smb.conf option from command line
--realm=REALM set the realm name
Version Options:
-V, --version Display version number
Credentials Options:
--simple-bind-dn=DN
DN to use for a simple bind
--password=PASSWORD
Password
-U USERNAME, --username=USERNAME
Username
-W WORKGROUP, --workgroup=WORKGROUP
Workgroup
-N, --no-pass Don't ask for a password
--ipaddress=IPADDRESS
IP address of server
-P, --machine-pass Use stored machine account password
--use-kerberos=desired|required|off
Use Kerberos authentication
--use-krb5-ccache=KRB5CCNAME
Kerberos Credentials cache
-k KERBEROS, --kerberos=KERBEROS
DEPRECATED: Migrate to --use-kerberossamba_upgradedns
:~# samba_upgradedns -h
Usage: samba_upgradedns [options]
Options:
-h, --help show this help message and exit
--dns-backend=<BIND9_DLZ|SAMBA_INTERNAL>
The DNS server backend, default SAMBA_INTERNAL
--migrate=<yes|no> Migrate existing zone data, default yes
--verbose Be verbose
Version Options:
-V, --version Display version number
Samba Common Options:
-s FILE, --configfile=FILE
Configuration file
-d DEBUGLEVEL, --debuglevel=DEBUGLEVEL
debug level
--option=OPTION set smb.conf option from command line
--realm=REALM set the realm name
Credentials Options:
--simple-bind-dn=DN
DN to use for a simple bind
--password=PASSWORD
Password
-U USERNAME, --username=USERNAME
Username
-W WORKGROUP, --workgroup=WORKGROUP
Workgroup
-N, --no-pass Don't ask for a password
--ipaddress=IPADDRESS
IP address of server
-P, --machine-pass Use stored machine account password
--use-kerberos=desired|required|off
Use Kerberos authentication
--use-krb5-ccache=KRB5CCNAME
Kerberos Credentials cache
-k KERBEROS, --kerberos=KERBEROS
DEPRECATED: Migrate to --use-kerberossharesec
Set or get share ACLs
:~# sharesec --help
Usage: sharesec sharename
-r, --remove=ACL Remove ACEs
-m, --modify=ACL Modify existing ACEs
-a, --add=ACL Add ACEs
-R, --replace=ACLS Overwrite share permission ACL
-D, --delete Delete the entire security descriptor
-S, --setsddl=STRING Set the SD in sddl format
--viewsddl View the SD in sddl format
-v, --view View current share permissions
--view-all View all current share permissions
-M, --machine-sid Initialize the machine SID
-F, --force Force storing the ACL
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print versionsmbcontrol
Send messages to smbd, nmbd or winbindd processes
:~# smbcontrol -h
Invalid option
Usage: smbcontrol [OPTION...] <destination> <message-type> <parameters>
-t, --timeout=TIMEOUT Set timeout value in seconds
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print version
Usage: smbcontrol [OPTION...] <destination> <message-type> <parameters>
-t, --timeout=TIMEOUT Set timeout value in seconds
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print version
<destination> is one of "nmbd", "smbd", "winbindd" or a process ID
<message-type> is one of:
debug Set debuglevel
idmap Manipulate idmap cache
force-election Force a browse election
ping Elicit a response
profile
inject Inject a fatal signal into a running smbd
stacktrace Display a stack trace of a daemon
profilelevel
debuglevel Display current debuglevels
printnotify Send a print notify message
close-share Forcibly disconnect a share
close-denied-share Forcibly disconnect users from shares disallowed now
kill-client-ip Forcibly disconnect a client with a specific IP address
ip-dropped Tell winbind that an IP got dropped
pool-usage Display talloc memory usage
rpc-dump-status Display rpc status
ringbuf-log Display ringbuf log
dmalloc-mark
dmalloc-log-changed
shutdown Shut down daemon
drvupgrade Notify a printer driver has changed
reload-config Force smbd or winbindd to reload config file
reload-printers Force smbd to reload printers
nodestatus Ask nmbd to do a node status request
online Ask winbind to go into online state
offline Ask winbind to go into offline state
onlinestatus Request winbind online status
validate-cache Validate winbind's credential cache
dump-domain-list Dump winbind domain list
disconnect-dc
notify-cleanup
num-children Print number of smbd child processes
msg-cleanup
noop Do nothing
sleep Cause the target process to sleep
smbd
Server to provide SMB/CIFS services to clients
:~# smbd --help
Usage: smbd [OPTION...]
-b, --build-options Print build options
-p, --port=STRING Listen on the specified ports
-P, --profiling-level=PROFILE_LEVEL Set profiling level
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on
exit
Daemon options:
-D, --daemon Become a daemon (default)
-i, --interactive Run interactive (not a daemon) and
log to stdout
-F, --foreground Run daemon in foreground (for
daemontools, etc.)
--no-process-group Don't create a new process group
Version options:
-V, --version Print versionsmbstatus
Report on current Samba connections
:~# smbstatus --help
Usage: [OPTION...]
-p, --processes Show processes only
-v, --verbose Be verbose
-L, --locks Show locks only
-S, --shares Show shares only
-N, --notify Show notifies
-u, --user=STRING Switch to user
-b, --brief Be brief
-P, --profile Do profiling
-R, --profile-rates Show call rates
-B, --byterange Include byte range locks
-n, --numeric Numeric uid/gid
-j, --json JSON output
-f, --fast Skip checks if processes still exist
--resolve-uids Try to resolve UIDs to usernames
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print versionSamba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems.
This package contains control files to run an Active Directory Domain Controller (AD DC). For now, this is just a metapackage pulling in all the required dependencies.
Installed size: 46 KB
How to install: sudo apt install samba-ad-dc
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems.
This package contains files to setup an Active Directory Domain Controller (AD DC).
Installed size: 13.39 MB
How to install: sudo apt install samba-ad-provision
samba-common
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems.
This package contains common files used by all parts of Samba.
Installed size: 209 KB
How to install: sudo apt install samba-common
samba-common-bin
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains the common files that are used by both the server (provided in the samba package) and the client (provided in the samba-clients package).
Installed size: 4.34 MB
How to install: sudo apt install samba-common-bin
Dependencies:
libbsd0
libc6
libcups2
libgnutls30
libjansson4
libldap-2.5-0
libncurses6
libpopt0
libreadline8
libtalloc2
libtdb1
libtevent0
libtinfo6
libwbclient0
python3
python3-samba
samba-common
samba-libs
dbwrap_tool
Low level TDB/CTDB manipulation tool using the dbwrap interface
:~# dbwrap_tool --help
Usage: [OPTION...]
--non-persistent treat the database as non-persistent
(CAVEAT: This mode might wipe your
database!)
--persistent treat the database as persistent
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print versionnet
Tool for administration of Samba and remote CIFS servers.
:~# net -h
Usage:
Use 'net help rpc' to get more extensive information about 'net rpc' commands.
Use 'net help rap' to get more extensive information about 'net rap' commands.
Use 'net help ads' to get more extensive information about 'net ads' commands.
Use 'net help file' to get more information about 'net file' commands.
Use 'net help share' to get more information about 'net share' commands.
Use 'net help session' to get more information about 'net session' commands.
Use 'net help server' to get more information about 'net server' commands.
Use 'net help domain' to get more information about 'net domain' commands.
Use 'net help printq' to get more information about 'net printq' commands.
Use 'net help user' to get more information about 'net user' commands.
Use 'net help group' to get more information about 'net group' commands.
Use 'net help groupmap' to get more information about 'net groupmap' commands.
Use 'net help sam' to get more information about 'net sam' commands.
Use 'net help validate' to get more information about 'net validate' commands.
Use 'net help groupmember' to get more information about 'net groupmember' commands.
Use 'net help admin' to get more information about 'net admin' commands.
Use 'net help service' to get more information about 'net service' commands.
Use 'net help password' to get more information about 'net password' commands.
Use 'net help primarytrust' to get more extensive information about 'net primarytrust' commands.
Use 'net help changetrustpw' to get more information about 'net changetrustpw'.
net [options] changesecretpw
Change the ADS domain member machine account password in secrets.tdb.
Do NOT use this function unless you know what it does.
Requires the -f flag to work.
net -U user[%%password] [-W domain] setauthuser
Set the auth user, password (and optionally domain
Will prompt for password if not given.
net setauthuser delete
Delete the existing auth user settings.
net getauthuser
Get the current winbind auth user settings.
Use 'net help time' to get more information about 'net time' commands.
Use 'net help lookup' to get more information about 'net lookup' commands.
Use 'net help g_lock' to get more information about 'net g_lock' commands.
Use 'net help join' to get more information about 'net join'.
Use 'net help offlinejoin' to get more information about 'net offlinejoin'.
Use 'net help dom' to get more information about 'net dom' commands.
Use 'net help cache' to get more information about 'net cache' commands.
net getlocalsid
net setlocalsid S-1-5-21-x-y-z
net setdomainsid S-1-5-21-x-y-z
net getdomainsid
net maxrid
Use 'net help idmap to get more information about 'net idmap' commands.
Use 'net help status' to get more information about 'net status' commands.
Use 'net help usershare to get more information about 'net usershare' commands.
Use 'net help usersidlist' to get more information about 'net usersidlist'.
Use 'net help conf' to get more information about 'net conf' commands.
Use 'net help registry' to get more information about 'net registry' commands.
Use 'net help eventlog' to get more information about 'net eventlog' commands.
Use 'net help printing' to get more information about 'net printing' commands.
Use 'net help serverid' to get more information about 'net serverid' commands.
Use 'net help notify' to get more information about 'net notify' commands.
Use 'net help tdb' to get more information about 'net tdb' commands.
Use 'net help vfs' to get more information about 'net vfs' commands.
Use 'net help help' to list usage information for 'net' commands.nmblookup
NetBIOS over TCP/IP client used to lookup NetBIOS names
:~# nmblookup --help
Usage: <NODE> ...
-B, --broadcast=BROADCAST-ADDRESS Specify address to use for
broadcasts
-f, --flags List the NMB flags returned
-U, --unicast=STRING Specify address to use for unicast
-M, --master-browser Search for a master browser
--recursion Set recursion desired in package
-S, --status Lookup node status as well
-T, --translate Translate IP addresses into names
-r, --root-port Use root port 137 (Win95 only
replies to this)
-A, --lookup-by-ip Do a node status on <name> as an
IP Address
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command
line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak reporting
on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution services
only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Version options:
-V, --version Print versionsamba-regedit
Ncurses based tool to manage the Samba registry
:~# samba-regedit --help
Usage: samba-regedit [OPTION...]
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print versionsamba-tool
Main Samba administration tool.
:~# samba-tool -h
Usage: samba-tool <subcommand>
Main samba administration tool.
Options:
-h, --help show this help message and exit
Version Options:
-V, --version Display version number
Available subcommands:
computer - Computer management.
contact - Contact management.
dbcheck - Check local AD database for errors.
delegation - Delegation management.
dns - Domain Name Service (DNS) management.
domain - Domain management.
drs - Directory Replication Services (DRS) management.
dsacl - DS ACLs manipulation.
forest - Forest management.
fsmo - Flexible Single Master Operations (FSMO) roles management.
gpo - Group Policy Object (GPO) management.
group - Group management.
ldapcmp - Compare two ldap databases.
ntacl - NT ACLs manipulation.
ou - Organizational Units (OU) management.
processes - List processes (to aid debugging on systems without setproctitle).
rodc - Read-Only Domain Controller (RODC) management.
schema - Schema querying and management.
sites - Sites management.
spn - Service Principal Name (SPN) management.
testparm - Syntax check the configuration file.
time - Retrieve the time on a server.
user - User management.
visualize - Produces graphical representations of Samba network state.
For more help on a specific subcommand, please type: samba-tool <subcommand> (-h|--help)
samba_kcc
:~# samba_kcc -h
Usage: samba_kcc [options]
Options:
-h, --help show this help message and exit
--readonly compute topology but do not update database
--debug debug output
--verify verify that assorted invariants are kept
--list-verify-tests list what verification actions are available and do
nothing else
--dot-file-dir=DOT_FILE_DIR
Write Graphviz .dot files to this directory
--seed=SEED random number seed
--importldif=<file> import topology ldif file
--exportldif=<file> export topology ldif file
-H <URL>, --URL=<URL>
LDB URL for database or target server
--tmpdb=<file> schemaless database file to create for ldif import
--now=<date> assume current time is this ('YYYYmmddHHMMSS[tz]',
default: system time)
--forced-local-dsa=<DSA>
run calculations assuming the DSA is this DN
--attempt-live-connections
Attempt to connect to other DSAs to test links
--list-valid-dsas Print a list of DSA dnstrs that could be used in
--forced-local-dsa
--test-all-reps-from Create and verify a graph of reps-from for every DSA
--forget-local-links pretend not to know the existing local topology
--forget-intersite-links
pretend not to know the existing intersite topology
Samba Common Options:
-s FILE, --configfile=FILE
Configuration file
-d DEBUGLEVEL, --debuglevel=DEBUGLEVEL
debug level
--option=OPTION set smb.conf option from command line
--realm=REALM set the realm name
Credentials Options:
--simple-bind-dn=DN
DN to use for a simple bind
--password=PASSWORD
Password
-U USERNAME, --username=USERNAME
Username
-W WORKGROUP, --workgroup=WORKGROUP
Workgroup
-N, --no-pass Don't ask for a password
--ipaddress=IPADDRESS
IP address of server
-P, --machine-pass Use stored machine account password
--use-kerberos=desired|required|off
Use Kerberos authentication
--use-krb5-ccache=KRB5CCNAME
Kerberos Credentials cache
-k KERBEROS, --kerberos=KERBEROS
DEPRECATED: Migrate to --use-kerberos
Version Options:
-V, --version Display version numbersmbpasswd
The Samba encrypted password file Change a user’s SMB password
:~# smbpasswd -h
When run by root:
smbpasswd [options] [username]
otherwise:
smbpasswd [options]
options:
-L local mode (must be first option)
-h print this usage message
-s use stdin for password prompt
-c smb.conf file Use the given path to the smb.conf file
-D LEVEL debug level
-r MACHINE remote machine
-U USER remote username (e.g. SAM/user)
extra options when run by root or in local mode:
-a add user
-d disable user
-e enable user
-i interdomain trust account
-m machine trust account
-n set no password
-W use stdin ldap admin password
-w PASSWORD ldap admin password
-x delete user
-R ORDER name resolve ordertestparm
Check an smb.conf configuration file for internal correctness
:~# testparm --help
Usage: testparm [OPTION...] <config-file> [host-name] [host-ip]
-s, --suppress-prompt Suppress prompt for enter
-v, --verbose Show default options too
-l, --skip-logic-checks Skip the global checks
--show-all-parameters Show the parameters, type, possible values
--parameter-name=STRING Limit testparm to a named parameter
--section-name=STRING Limit testparm to a named section
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common debug options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
Options:
--option=name=value Set smb.conf option from command line
Version options:
-V, --version Print versionsamba-dev
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains include files shared by the various Samba-based libraries.
Installed size: 1.75 MB
How to install: sudo apt install samba-dev
Dependencies:
libc6-dev
libldb-dev
libpopt-dev
libtalloc-dev
libtdb-dev
libtevent-dev
libwbclient-dev
samba-libs
samba-dsdb-modules
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains LDB plugins which add support for various Active Directory features to the LDB library.
Installed size: 1.51 MB
How to install: sudo apt install samba-dsdb-modules
samba-libs
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains the shared libraries.
Installed size: 24.01 MB
How to install: sudo apt install samba-libs
Dependencies:
libacl1
libavahi-client3
libavahi-common3
libbsd0
libc6
libcap2
libgnutls30
libicu72
libjansson4
libldap-2.5-0
libldb2
libpam0g
libpopt0
libsystemd0
libtalloc2
libtdb1
libtevent0
libtirpc3
libwbclient0
zlib1g
samba-testsuite
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package contains programs for testing the reliability and speed of SMB servers, Samba in particular.
Installed size: 9.68 MB
How to install: sudo apt install samba-testsuite
Dependencies:
libbsd0
libc6
libgnutls30
libldb2
libpopt0
libreadline8
libsmbclient
libtalloc2
libtdb1
libtevent0
libwbclient0
python3-samba
samba-common-bin
samba-libs
winbind
gentest
Run random generic SMB operations against two SMB servers and show the differences in behavior
:~# gentest --help
Usage: <unc1> <unc2>
--smb2 use SMB2 protocol
--seed=INT Seed to use for randomizer
--num-ops=INT num ops
--oplocks use oplocks
--showall display all operations
--analyse do backtrack analysis
--analysealways analysis always
--analysecontinuous analysis continuous
--ignore=STRING ignore from file
--preset use preset seeds
--fast use fast reconnect
--unclist=STRING unclist
--seedsfile=STRING seed file
--user1=[DOMAIN/]USERNAME[%PASSWORD] Set first network username
--user2=[DOMAIN/]USERNAME[%PASSWORD] Set second network username
--maskindexing mask out the indexed file attrib
--noeas don't use extended attributes
--noacls don't use ACLs
--skip-cleanup don't delete files at start
--valid generate only valid fields
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print version
Deprecated legacy options:
-k, --kerberos=STRING DEPRECATED: Migrate to
--use-kerberoslocktest
Find differences in locking between two SMB servers
:~# locktest --help
Usage: <unc1> <unc2>
--seed=INT Seed to use for randomizer
--num-ops=INT num ops
--lockrange=INT locking range
--lockbase=INT locking base
--minlength=INT min lock length
--hidefails hide unlock fails
--oplocks use oplocks
--showall display all operations
--analyse do backtrack analysis
--zerozero do zero/zero lock
--exacterrors use exact error codes
--unclist=STRING unclist
--user1=[DOMAIN/]USERNAME[%PASSWORD] Set first network username
--user2=[DOMAIN/]USERNAME[%PASSWORD] Set second network username
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print version
Deprecated legacy options:
-k, --kerberos=STRING DEPRECATED: Migrate to
--use-kerberosmasktest
Find differences in wildcard matching between Samba’s implementation and that of a remote server.
:~# masktest --help
Usage: <unc>
--seed=INT Seed to use for randomizer
--num-ops=INT num ops
--maxlength=INT maximum length
--dieonerror die on errors
--showall display all operations
--oldlist use old list call
--maskchars=STRING mask characters
--filechars=STRING file characters
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print version
Deprecated legacy options:
-k, --kerberos=STRING DEPRECATED: Migrate to
--use-kerberosndrdump
DCE/RPC Packet Parser and Dumper
:~# ndrdump --help
Usage: ndrdump <pipe|uuid> <format> <in|out|struct> [<filename>]
-c, --context-file=CTX-FILE In-filename to parse first
--validate try to validate the data
--dump-data dump the hex data
--load-dso=STRING load from shared object file
--ndr64 Assume NDR64 data
--quiet Don't actually dump anything
--base64-input Read the input file in as a base64 string
--hex-input Read the input file in as a hex dump
--input=INPUT Provide the input on the command line
(use with --base64-input)
--print-after-parse-failure Try to print structures that fail to
parse (used to develop parsers,
segfaults are likely).
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Version options:
-V, --version Print versionsmbtorture
Run a series of tests against a SMB server
:~# smbtorture --help
smbtorture 4.17.5-Debian
Usage: <binding>|<unc> TEST1 TEST2 ...
--fullname use full name for the test
--format=STRING Output format (one of: simple,
subunit)
-p, --smb-ports=STRING SMB ports
--basedir=BASEDIR base directory
--seed=INT Seed to use for randomizer
--num-progs=INT num progs
--num-ops=INT num ops
--entries=INT entries
--loadfile=STRING NBench load file to use
--list-suites List available testsuites and
exit
--list List available tests in
specified suites and exit
--unclist=STRING unclist
-t, --timelimit=INT Set time limit (in seconds)
-f, --failures=INT failures
-D, --parse-dns=STRING parse-dns
-X, --dangerous run dangerous tests (eg. wiping
out password database)
--load-module=SOFILE load tests from DSO file
--shell Run shell
-T, --target=STRING samba3|samba4|other
-a, --async run async tests
--num-async=INT number of simultaneous async
requests
--maximum-runtime=seconds set maximum time for smbtorture
to live
--extra-user=STRING extra user credentials
--load-list=STRING load a test id list from a text
file
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print version
Deprecated legacy options:
-k, --kerberos=STRING DEPRECATED: Migrate to
--use-kerberossamba-vfs-modules
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
Virtual FileSystem modules are stacked shared libraries extending the functionality of Samba. Some examples are:
vfs_acl_xattr: Save NTFS-ACLs in Extended Attributes
vfs_audit: record selected Samba VFS operations in the system log
vfs_readonly: Make a Samba share read only for a specified time period
vfs_recycle: Give the same effect as the Recycle Bin on Windows computers
vfs_shadow_copy2: Expose snapshots to Windows clients as shadow copies
vfs_worm: Disallow writes for older file
Note: The runtime dependencies of vfs_ceph, vfs_glusterfs and vfs_snapper are moved to Recommends.
Installed size: 1.75 MB
How to install: sudo apt install samba-vfs-modules
smbclient
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix systems.
This package contains command-line utilities for accessing Microsoft Windows and Samba servers, including smbclient, smbtar, and smbspool. Utilities for mounting shares locally are found in the package cifs-utils.
Installed size: 1.92 MB
How to install: sudo apt install smbclient
Dependencies:
libarchive13
libbsd0
libc6
libgnutls30
libpopt0
libreadline8
libsmbclient
libtalloc2
libtevent0
samba-common
samba-libs
cifsdd
Convert and copy a file over SMB
:~# cifsdd --help
Usage: cifsdd [OPTION...]
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos=STRING DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print version
CIFS dd options:
bs=SIZE force ibs and obs to SIZE bytes
ibs=SIZE read SIZE bytes at a time
obs=SIZE write SIZE bytes at a time
count=COUNT copy COUNT input blocks
seek=COUNT skip COUNT blocks at start of output
skip=COUNT skip COUNT blocks at start of input
if=FILE read input from FILE
of=FILE write output to FILE
direct=BOOLEAN use direct I/O if non-zero
sync=BOOLEAN use synchronous writes if non-zero
oplock=BOOLEAN take oplocks on the input and output files
FILE can be a local filename or a UNC path of the form //server/share/path.
mdsearch
Run Spotlight searches against an SMB server
:~# mdsearch --help
Usage: mdsearch [OPTIONS] <server> <share> <query>
-p, --path=STRING Server-relative search path
-L, --live live query
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print versionrpcclient
Tool for executing client side MS-RPC functions
:~# rpcclient --help
Usage: rpcclient [OPTION...] BINDING-STRING|HOST
Options:
-c, --command=COMMANDS Execute semicolon separated cmds
-I, --dest-ip=IP Specify destination IP address
-p, --port=PORT Specify port number
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print versionsmbcacls
Set or get ACLs on an NT file or directory names
:~# smbcacls --help
Usage: smbcacls //server1/share1 filename
ACLs look like: 'ACL:user:[ALLOWED|DENIED]/flags/permissions'
-D, --delete=ACL Delete an acl
-M, --modify=ACL Modify an acl
-a, --add=ACL Add an acl
-S, --set=ACLS Set acls
-C, --chown=USERNAME Change ownership of a file
-G, --chgrp=GROUPNAME Change group ownership of a file
-I, --inherit=STRING Inherit allow|remove|copy
--propagate-inheritance Supports propagation of
inheritable ACE(s) when used in
conjunction with add, delete,
set or modify
--numeric Don't resolve sids or masks to
names
--sddl Output and input acls in sddl
format
--query-security-info=INT The security-info flags for
queries
--set-security-info=INT The security-info flags for
modifications
-t, --test-args Test arguments
--domain-sid=SID Domain SID for sddl
-x, --maximum-access Query maximum permissions
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print versionsmbclient
Ftp-like client to access SMB/CIFS resources on servers
:~# smbclient --help
Usage: smbclient [OPTIONS] service <password>
-M, --message=HOST Send message
-I, --ip-address=IP Use this IP to connect to
-E, --stderr Write messages to stderr
instead of stdout
-L, --list=HOST Get a list of shares available
on a host
-T, --tar=<c|x>IXFvgbNan Command line tar
-D, --directory=DIR Start from directory
-c, --command=STRING Execute semicolon separated
commands
-b, --send-buffer=BYTES Changes the transmit/send buffer
-t, --timeout=SECONDS Changes the per-operation
timeout
-p, --port=PORT Port to connect to
-g, --grepable Produce grepable output
-q, --quiet Suppress help message
-B, --browse Browse SMB servers using DNS
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Connection options:
-R, --name-resolve=NAME-RESOLVE-ORDER Use these name resolution
services only
-O, --socket-options=SOCKETOPTIONS socket options to use
-m, --max-protocol=MAXPROTOCOL Set max protocol level
-n, --netbiosname=NETBIOSNAME Primary netbios name
--netbios-scope=SCOPE Use this Netbios scope
-W, --workgroup=WORKGROUP Set the workgroup name
--realm=REALM Set the realm name
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print versionsmbcquotas
Set or get QUOTAs of NTFS 5 shares
kali:~# smbcquotas --help
Usage: smbcquotas //server1/share1
-u, --quota-user=USER Show quotas for user
-L, --list List user quotas
-F, --fs Show filesystem quotas
-S, --set=SETSTRING Set acls
SETSTRING:
UQLIM:<username>/<softlimit>/<hardlimit> for user quotas
FSQLIM:<softlimit>/<hardlimit> for filesystem defaults
FSQFLAGS:QUOTA_ENABLED/DENY_DISK/LOG_SOFTLIMIT/LOG_HARD_LIMIT
-n, --numeric Don't resolve sids or limits to
names
-v, --verbose be verbose
-t, --test-args Test arguments
-m, --max-protocol=LEVEL Set the max protocol level
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Deprecated legacy options:
-k, --kerberos DEPRECATED: Migrate to
--use-kerberos
Version options:
-V, --version Print versionsmbget
Wget-like utility for download files over SMB
:~# smbget --help
Usage: smbget [OPTION...]
-w, --workgroup=STRING Workgroup to use (optional)
-U, --user=STRING Username to use
-a, --guest Work as user guest
-n, --nonprompt Don't ask anything (non-interactive)
-d, --debuglevel=INT Debuglevel to use
-e, --encrypt Encrypt SMB transport
-r, --resume Automatically resume aborted files
-u, --update Download only when remote file is newer than
local file or local file is missing
-R, --recursive Recursively download files
-b, --blocksize=INT Change number of bytes in a block
-o, --outputfile=STRING Write downloaded data to specified file
-O, --stdout Write data to stdout
-D, --dots Show dots as progress indication
-q, --quiet Be quiet
-v, --verbose Be verbose
-f, --rcfile=STRING Use specified rc file
Help options:
-?, --help Show this help message
--usage Display brief usage messagesmbspool
Send a print file to an SMB printer
:~# smbspool -h
Usage: smbspool [DEVICE_URI] job-id user title copies options [file]
The DEVICE_URI environment variable can also contain the
destination printer:
smb://[username:][workgroup/]server[:port]/printersmbtar
Shell script for backing up SMB/CIFS shares directly to UNIX tape drives
:~# smbtar -h
Illegal option -h
Usage: smbtar [<options>] [<include/exclude files>]
Function: backup/restore a Windows PC directories to a local tape file
Options: (Description) (Default)
-r Restore from tape file to PC Save from PC to tapefile
-i Incremental mode Full backup mode
-a Reset archive bit mode Don't reset archive bit
-v Verbose mode: echo command Don't echo anything
-s <server> Specify PC Server
-p <password> Specify PC Password
-x <share> Specify PC Share backup
-X Exclude mode Include
-N <newer> File for date comparison
-b <blocksize> Specify tape's blocksize
-d <dir> Specify a directory in share \
-l <log> Specify a Samba Log Level 2
-u <user> Specify User Name root
-t <tape> Specify Tape device tar.out
Invalid switch specified - abort.smbtree
A text based smb network browser
:~# smbtree --help
Usage: [OPTION...]
-D, --domains List only domains (workgroups)
of tree
-S, --servers List domains(workgroups) and
servers of tree
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard
output
-s, --configfile=CONFIGFILE Use alternative configuration
file
--option=name=value Set smb.conf option from
command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on
exit
--leak-report-full enable full talloc leak
reporting on exit
Credential options:
-U, --user=[DOMAIN/]USERNAME[%PASSWORD] Set the network username
-N, --no-pass Don't ask for a password
--password=STRING Password
--pw-nt-hash The supplied password is the NT
hash
-A, --authentication-file=FILE Get the credentials from a file
-P, --machine-pass Use stored machine account
password
--simple-bind-dn=DN DN to use for a simple bind
--use-kerberos=desired|required|off Use Kerberos authentication
--use-krb5-ccache=CCACHE Credentials cache location for
Kerberos
--use-winbind-ccache Use the winbind ccache for
authentication
--client-protection=sign|encrypt|off Configure used protection for
client connections
Version options:
-V, --version Print versionwinbind
Samba is an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file sharing with Microsoft Windows, OS X, and other Unix systems. Samba can also function as a domain controller or member server in both NT4-style and Active Directory domains.
This package provides winbindd, a daemon which integrates authentication and directory service (user/group lookup) mechanisms from a Windows domain on a Linux system.
Winbind based user/group lookups via /etc/nsswitch.conf can be enabled via the libnss-winbind package. Winbind based Windows domain authentication can be enabled via the libpam-winbind package.
Installed size: 1.55 MB
How to install: sudo apt install winbind
Dependencies:
init-system-helpers
libbsd0
libc6
libgnutls30
libldap-2.5-0
libpopt0
libtalloc2
libtdb1
libtevent0
libwbclient0
passwd
samba-common
samba-common-bin
samba-libs
ntlm_auth
Tool to allow external access to Winbind’s NTLM authentication function
:~# ntlm_auth --help
Usage: [OPTION...]
--helper-protocol=helper protocol to use operate as a stdio-based
helper
--username=STRING username
--domain=STRING domain name
--workstation=STRING workstation
--challenge=STRING challenge (HEX encoded)
--lm-response=STRING LM Response to the
challenge (HEX encoded)
--nt-response=STRING NT or NTLMv2 Response to
the challenge (HEX encoded)
--password=STRING User's plaintext password
--request-lm-key Retrieve LM session key
(or, with --diagnostics,
expect LM support)
--request-nt-key Retrieve User (NT) session
key
--use-cached-creds Use cached credentials if
no password is given
--allow-mschapv2 Explicitly allow MSCHAPv2
--offline-logon Use cached passwords when
DC is offline
--diagnostics Perform diagnostics on the
authentication chain
--require-membership-of=STRING Require that a user be a
member of this group
(either name or SID) for
authentication to succeed
--pam-winbind-conf=STRING Require that request must
set
WBFLAG_PAM_CONTACT_TRUSTDOM
when krb5 auth is required
--target-service=STRING Target service (eg http)
--target-hostname=STRING Target hostname
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common debug options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to
standard output
Config file:
--configfile=CONFIGFILE Use alternative
configuration file
Options:
--option=name=value Set smb.conf option from
command line
Version options:
-V, --version Print versionwbinfo
Query information from winbind daemon
:~# wbinfo --help
Usage: wbinfo [OPTION...]
-u, --domain-users Lists all domain users
-g, --domain-groups Lists all domain groups
-N, --WINS-by-name=NETBIOS-NAME Converts NetBIOS name to
IP
-I, --WINS-by-ip=IP Converts IP address to
NetBIOS name
-n, --name-to-sid=NAME Converts name to sid
-s, --sid-to-name=SID Converts sid to name
--sid-to-fullname=SID Converts sid to fullname
-R, --lookup-rids=RIDs Converts RIDs to names
--lookup-sids=Sid-List Converts SIDs to types
and names
-U, --uid-to-sid=UID Converts uid to sid
-G, --gid-to-sid=GID Converts gid to sid
-S, --sid-to-uid=SID Converts sid to uid
-Y, --sid-to-gid=SID Converts sid to gid
--allocate-uid Get a new UID out of idmap
--allocate-gid Get a new GID out of idmap
--set-uid-mapping=UID,SID Create or modify uid to
sid mapping in idmap
--set-gid-mapping=GID,SID Create or modify gid to
sid mapping in idmap
--remove-uid-mapping=UID,SID Remove uid to sid mapping
in idmap
--remove-gid-mapping=GID,SID Remove gid to sid mapping
in idmap
--sids-to-unix-ids=Sid-List Translate SIDs to Unix IDs
--unix-ids-to-sids=ID-List (u<num> g<num>) Translate Unix IDs to SIDs
-t, --check-secret Check shared secret
-c, --change-secret Change shared secret
-P, --ping-dc Check the NETLOGON
connection
-m, --trusted-domains List trusted domains
--all-domains List all domains (trusted
and own domain)
--own-domain List own domain
--sequence Deprecated command, see
--online-status
--online-status Show whether domains
maintain an active
connection
-D, --domain-info=STRING Show most of the info we
have about the domain
-i, --user-info=USER Get user info
--uid-info=UID Get user info from uid
--group-info=GROUP Get group info
--user-sidinfo=SID Get user info from sid
--gid-info=GID Get group info from gid
-r, --user-groups=USER Get user groups
--user-domgroups=SID Get user domain groups
--sid-aliases=SID Get sid aliases
--user-sids=SID Get user group sids for
user SID
-a, --authenticate=user%password authenticate user
--pam-logon=user%password do a pam logon equivalent
--logoff log off user
--logoff-user=STRING username to log off
--logoff-uid=INT uid to log off
--set-auth-user=user%password Store user and password
used by winbindd (root
only)
--ccache-save=user%password Store user and password
for ccache operation
--getdcname=domainname Get a DC name for a
foreign domain
--dsgetdcname=domainname Find a DC for a domain
--dc-info=domainname Find the currently known
DCs
--get-auth-user Retrieve user and
password used by winbindd
(root only)
-p, --ping Ping winbindd to see if
it is alive
--domain=domain Define to the domain to
restrict operation
-K, --krb5auth=user%password authenticate user using
Kerberos
--krb5ccname=krb5ccname authenticate user using
Kerberos and specific
credential cache type
--separator Get the active winbind
separator
--verbose Print additional
information per command
--change-user-password=STRING Change the password for a
user
--ntlmv1 Use NTLMv1 cryptography
for user authentication
--ntlmv2 Use NTLMv2 cryptography
for user authentication
--lanman Use lanman cryptography
for user authentication
Help options:
-?, --help Show this help message
--usage Display brief usage
message
Version options:
-V, --version Print versionwinbindd
Name Service Switch daemon for resolving names from NT servers
:~# winbindd --help
Usage: winbindd [OPTION...]
-n, --no-caching Disable caching
Help options:
-?, --help Show this help message
--usage Display brief usage message
Common Samba options:
-d, --debuglevel=DEBUGLEVEL Set debug level
--debug-stdout Send debug output to standard output
-s, --configfile=CONFIGFILE Use alternative configuration file
--option=name=value Set smb.conf option from command line
-l, --log-basename=LOGFILEBASE Basename for log/debug files
--leak-report enable talloc leak reporting on exit
--leak-report-full enable full talloc leak reporting on exit
Daemon options:
-D, --daemon Become a daemon (default)
-i, --interactive Run interactive (not a daemon) and log to
stdout
-F, --foreground Run daemon in foreground (for
daemontools, etc.)
--no-process-group Don't create a new process group
Version options:
-V, --version Print versionUpdated on: 2023-Mar-08
Last updated