From 3c7822bac97ce4646f1b2c8419d1dae773c02c1d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?G=C3=BCnther=20Deschner?= <gd@samba.org>
Date: Tue, 17 Sep 2013 12:47:58 +0200
Subject: [PATCH] docs: point out side-effects of global "valid users" setting.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
---
 docs-xml/smbdotconf/security/validusers.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

Index: samba-3.6.22/docs-xml/smbdotconf/security/validusers.xml
===================================================================
--- samba-3.6.22.orig/docs-xml/smbdotconf/security/validusers.xml
+++ samba-3.6.22/docs-xml/smbdotconf/security/validusers.xml
@@ -19,6 +19,16 @@
     The current servicename is substituted for <parameter moreinfo="none">%S</parameter>. 
     This is useful in the [homes] section.
     </para>
+
+    <para><emphasis>Note: </emphasis>When used in the [global] section this
+    parameter may have unwanted side effects. For example: If samba is configured as a MASTER BROWSER (see
+    <parameter moreinfo="none">local master</parameter>,
+    <parameter moreinfo="none">os level</parameter>,
+    <parameter moreinfo="none">domain master</parameter>,
+    <parameter moreinfo="none">preferred master</parameter>) this option
+    will prevent workstations from being able to browse the network.
+    </para>
+
 </description>
 
 <related>invalid users</related>
Index: samba-3.6.22/docs/manpages/smb.conf.5
===================================================================
--- samba-3.6.22.orig/docs/manpages/smb.conf.5
+++ samba-3.6.22/docs/manpages/smb.conf.5
@@ -10311,6 +10311,12 @@ list then access is denied for that user
 The current servicename is substituted for
 \fI%S\fR\&. This is useful in the [homes] section\&.
 .sp
+\fINote: \fRWhen used in the [global] section this parameter may have unwanted side effects\&. For example: If samba is configured as a MASTER BROWSER (see
+\fIlocal master\fR,
+\fIos level\fR,
+\fIdomain master\fR,
+\fIpreferred master\fR) this option will prevent workstations from being able to browse the network\&.
+.sp
 Default:
 \fI\fIvalid users\fR\fR\fI = \fR\fI # No valid users list (anyone can login) \fR\fI \fR
 .sp
