X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=netatalk.git;a=blobdiff_plain;f=config%2FAppleVolumes.default.tmpl;h=5aa9a0c801e2d1c993981fd2a1a97f91e0a6a64a;hp=884c40633526f3fc7e010e87dd7d76f597723ec6;hb=b3b7ad966fdf171d9b962bc0a5018712b8fe94e3;hpb=dd1fc0d4f1f90c0461dd63a12a042a1416850d8c diff --git a/config/AppleVolumes.default.tmpl b/config/AppleVolumes.default.tmpl index 884c4063..5aa9a0c8 100644 --- a/config/AppleVolumes.default.tmpl +++ b/config/AppleVolumes.default.tmpl @@ -1,17 +1,21 @@ # This file looks empty when viewed with "vi". In fact, there is one # '~', so users with no AppleVolumes file in their home directory get # their home directory by default. -# + +# # volume format: # :DEFAULT: [all of the default options except volume name] # path [name] [casefold:x] [options:z,l,j] \ # [allow:a,@b,c,d] [deny:a,@b,c,d] [dbpath:path] [password:p] \ -# [rwlist:a,@b,c,d] [rolist:a,@b,c,d] [limitsize:value in bytes]\ -# [preexec:cmd] [root_preexec:cmd] [postexec:cmd] [root_postexec:cmd] -# +# [rwlist:a,@b,c,d] [rolist:a,@b,c,d] [limitsize:value in bytes] \ +# [preexec:cmd] [root_preexec:cmd] [postexec:cmd] [root_postexec:cmd] \ +# [allowed_hosts:IPv4 address[/IPv4 netmask bits]] \ +# [denied_hosts:IPv4 address[/IPv4 netmask bits]] \ +# ... more, see below ... +# +# name: volume name. it can't include the ':' character # -# name: volume name. it can't include the ':' character and is limited -# to 27 characters in length. + # # variable substitutions: # you can use variables for both and now. here are the @@ -33,6 +37,8 @@ # $v -> volume name (either ADEID_NAME or basename of path) # $z -> zone (may not exist) # $$ -> $ +# + # # casefold options [syntax: casefold:option]: # tolower -> lowercases names in both directions @@ -43,23 +49,72 @@ # allow/deny/rwlist/rolist format [syntax: allow:user1,@group]: # user1,@group,user2 -> allows/denies access from listed users/groups # rwlist/rolist control whether or not the -# volume is ro for those users. +# volume is ro for those users. +# allowed_hosts -> Only listed hosts and networks are allowed, +# all others are rejected. Example: +# allowed_hosts:10.1.0.0/16,10.2.1.100 +# denied_hosts -> Listed hosts and nets are rejected, +# all others are allowed. Example: +# denied_hosts: 192.168.100/24,10.1.1.1 # preexec -> command to be run when the volume is mounted, # ignore for user defined volumes # root_preexec -> command to be run as root when the volume is mounted, # ignore for user defined volumes -# postexec -> command to be run when the volume is closed, +# postexec -> command to be run when the volume is closed, # ignore for user defined volumes -# root_postexec -> command to be run as root when the volume is closed, +# root_postexec -> command to be run as root when the volume is closed, # ignore for user defined volumes +# veto -> hide files and directories,where the path matches +# one of the "/" delimited vetoed names. Matches are +# partial, e.g. path is /abc/def/file and veto:/abc/ +# will hide the file. +# adouble -> specify the format of the metadata files. +# default is "v2". netatalk 1.x used "v1". +# "osx" cannot be treated normally any longer. + + # # codepage options [syntax: options:charsetname] -# volcharset -> specifies the charset to be used as the volume codepage -# e.g. "UTF8", "UTF8-MAC", "ISO-8859-15" -# maccharset -> specifies the charset to be used as the mac client codepage -# e.g. "MAC_ROMAN", "MAC_CYRILLIC" +# volcharset -> specifies the charset to be used +# as the volume codepage +# e.g. "UTF8", "UTF8-MAC", "ISO-8859-15" +# maccharset -> specifies the charset to be used +# as the mac client codepage +# e.g. "MAC_ROMAN", "MAC_CYRILLIC" +# +# perm -> default permission value +# OR with the client requested perm +# dperm -> default permission value for directories +# OR with the client requested perm +# fperm -> default permission value for files +# OR with the client requested perm +# umask -> set perm mask +# dbpath:path -> store the database stuff in the following path. +# cnidserver:server[:port] +# -> Query this servername or IP address +# (default:localhost) and port (default: 4700) +# for CNIDs. Only used with CNID backend "dbd". +# This option here overrides any setting from +# afpd.conf:cnidserver. +# password:password -> set a volume password (8 characters max) +# cnidscheme:scheme -> set the cnid scheme for the volume, +# default is [:DEFAULT_CNID_SCHEME:] +# available schemes: [:COMPILED_BACKENDS:] +# ea -> none|auto|sys|ad +# Specify how Extended Attributes are stores. default +# is auto. +# auto: try "sys" (by setting an EA on the shared +# directory itself), fallback to "ad". Requires +# writable volume for performing the test. +# Note: options:ro overwrites "auto" with "none." +# sys: Use filesystem EAs +# ad: Use files in AppleDouble directories +# none: No EA support +# + # # miscellaneous options [syntax: options:option1,option2]: +# tm -> enable TimeMachine support # prodos -> make compatible with appleII clients. # crlf -> enable crlf translation for TEXT files. # noadouble -> don't create .AppleDouble unless a resource @@ -67,21 +122,21 @@ # ro -> mount the volume as read-only. # mswindows -> enforce filename restrictions imposed by MS # Windows. this will also invoke a default -# codepage (iso8859-1) if one isn't already -# specified. -# nohex -> don't do :hex translations for anything -# except dot files. specify usedots as well if -# you want that turned off. note: this option -# makes the / character illegal. +# codepage (iso8859-1) if one isn't already +# specified. +# nohex -> don't do :hex translations for anything +# except dot files. specify usedots as well if +# you want that turned off. note: this option +# makes the / character illegal. # usedots -> don't do :hex translation for dot files. note: when # this option gets set, certain file names -# become illegal. these are .Parent and -# anything that starts with .Apple. +# become illegal. these are .Parent and +# anything that starts with .Apple. # invisibledots -> don't do :hex translation for dot files. note: when # this option gets set, certain file names -# become illegal. these are .Parent and -# anything that starts with .Apple. also, dot -# files created on the unix side are marked invisible. +# become illegal. these are .Parent and +# anything that starts with .Apple. also, dot +# files created on the unix side are marked invisible. # limitsize -> limit disk size reporting to 2GB. this is # here for older macintoshes using newer # appleshare clients. yucko. @@ -93,20 +148,34 @@ # volume being mounted. # nostat -> don't stat volume path when enumerating volumes list # upriv -> use unix privilege. -# perm -> default permission value OR with the client requested perm -# dperm -> default permission value for directories OR with the client -# requested perm -# fperm -> default permission value for filesOR with the client -# requested perm - -# -# -# dbpath:path -> store the database stuff in the following path. -# password:password -> set a volume password (8 characters max) -# cnidscheme:scheme -> set the cnid scheme for the volume, default is [:DEFAULT_CNID_SCHEME:] -# available schemes: [:COMPILED_BACKENDS:] +# illegalseq -> encode illegal sequence in filename asis, +# ex "\217-", which is not a valid SHIFT-JIS char, +# is encoded as U\217 - +# acls -> Enable ACLs on this volume. Requires a NFSv4 ACLs +# compatible filesystem (e.g. ZFS) and an ACL API +# compatible to *Solaris. In other words: this requires +# Solaris, Opensolaris or a derived distribution. +# nocnidcache -> Don't store and read CNID to/from AppleDouble file. +# This should not be used as it also prevents a CNID +# database rebuild with `dbd`! +# caseinsensitive -> The underlying FS is case insensitive (only +# test with JFS in OS2 mode) +# dropbox -> Allows a volume to be declared as being a "dropbox." +# Note that netatalk must be compiled with dropkludge +# support for this to function. Warning: This option +# is deprecated and might not work as expected. +# dropkludge -> same as "dropbox" +# nodev -> always use 0 for device number, helps when the +# device number is not constant across a reboot, +# cluster, ... # + +# The line below sets some DEFAULTS, starting with Netatalk 2.1. +:DEFAULTS: options:upriv,usedots + # The "~" below indicates that Home directories are visible by default. # If you do not wish to have people accessing their Home directories, # please put a pound sign in front of the tilde or delete it. ~ + +# End of File