This specifies a user name that all connections to this service should be made as. This may be useful for sharing files. You should also use it carefully as using it incorrectly can cause security problems.
This user name only gets used once a connection is established. Thus clients still need to connect as a valid user and supply a valid password. Once connected, all file operations will be performed as the "forced user," no matter what username the client connected as.
Default: No forced user.
This specifies a group name that all connections to this service should be made as. This may be useful for sharing files.
Default: No forced group.
There are certain directories on some systems (eg., the /proc tree under Linux) that are either not of interest to clients or are infinitely deep (recursive). This parameter allows you to specify a comma-delimited list of directories that the server should always show as empty.
Note that Samba can be very fussy about the exact format of the Don't descend entries. For example you may need "./proc" instead of just "/proc". Experimentation is the best policy :-)
Default: None (i.e., all directories are OK to descend)
This is a username which will be used for access to services which are specified as Public Access (see above). Whatever privileges this user has will be available to any client connecting to the guest service. Typically this user will exist in the password file, but will not have a valid login. If a username is specified in a given service, the specified username overrides this one.
On some systems the account "nobody" may not be able to print. Use another account in this case. You should test this by trying to log in as your guest user (perhaps by using the "su -" command) and trying to print using lpr.
Note that as of version 1.9 of Samba this option may be set differently for each service.
Default: specified at compile time (usually nobody)
This parameter specifies the name of a file which will contain output created by a Magic script (see above).
Warning: If two clients use the same magic script in the same directory the output file content is undefined.
Default: <magic script name>.out
This option allows the number of simultaneous connections to a service to be limited. If Max connections is greater than 0, then connections will be refused if this number of connections to the service are already open. A value of zero mean an unlimited number of connections may be made.
Record lock files are used to implement this feature. The lock files will be stored in the directory specified by the "lock directory" option.