vfs_snapper (8)

Leading comments

    Title: vfs_snapper
   Author: [see the "AUTHOR" section]
Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
     Date: 09/21/2017
   Manual: System Administration tools
   Source: Samba 4.6
 Language: English

NAME

SYNOPSIS

vfs objects = snapper

DESCRIPTION

This VFS module is part of the samba(8) suite.

The vfs_snapper VFS module exposes snapshots managed by snapper for use by Samba. This provides the ability for remote SMB clients to access shadow-copies via Windows Explorer using the "previous versions" dialog.

Snapshots can also be created and remove remotely, using the File Server Remote VSS Protocol (FSRVP). Snapshot creation and deletion requests are forwarded to snapper via DBus.

This module is stackable.

CONFIGURATION

The underlying share path must have a corresponding snapper configuration file. The snapshot directory tree must allow access for relavent users.

                [share]
                m[blue]vfs objects = snapperm[]
        

For remote snapshot creation and deletion, Samba's FSRVP server must be configured in the [global] section:

                [global]
                m[blue]rpc_daemon:fssd = forkm[]
                m[blue]registry shares = yesm[]
                m[blue]include = registrym[]
        

PERMISSIONS

Snapper stores snapshots under a .snapshots subdirectory. This directory must permit traversal for any users wishing to access snapshots via the Windows Explorer previous versions dialog. By default, traversal is forbidden for all non-root users. Additionally, users must be granted permission to list snapshots managed by snapper, via snapper's ALLOW_USERS or ALLOW_GROUPS options. Snapper can grant these users and groups .snapshots traversal access automatically via the SYNC_ACL option.

Remote snapshot creation and deletion is only permitted by Samba for Active Directory administrators, backup operators, or users explicitly granted SeBackupPrivilege. Snapper must also permit creation and deletion for the appropriate user, via snapper's ALLOW_USERS or ALLOW_GROUPS options.

The DiskShadow.exe FSRVP client initially authenticates as the Active Directory computer account. This account must therefore be granted the same permissions as the user account issuing the snapshot creation and deletion requests.

VERSION

This man page is correct for version 4.3.0 of the Samba suite.

AUTHOR

The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.