--- old/usr/src/man/man4/smb.4	Mon Aug  5 17:17:25 2019
+++ new/usr/src/man/man4/smb.4	Mon Aug  5 17:17:25 2019
@@ -1,10 +1,22 @@
 '\" te
 .\" Copyright (c) 2009, Sun Microsystems, Inc. All Rights Reserved.
-.\" Copyright 2011, Nexenta Systems, Inc. All Rights Reserved.
-.\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License. You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing.
-.\"  See the License for the specific language governing permissions and limitations under the License. When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the
-.\" fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
-.TH SMB 4 "Sep 25, 2009"
+.\" Copyright 2017, Nexenta Systems, Inc. All Rights Reserved.
+.\" The contents of this file are subject to the terms of the
+.\" Common Development and Distribution License (the "License").
+.\" You may not use this file except in compliance with the License.
+.\"
+.\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
+.\" or http://www.opensolaris.org/os/licensing.
+.\" See the License for the specific language governing permissions
+.\" and limitations under the License.
+.\"
+.\" When distributing Covered Code, include this CDDL HEADER in each
+.\" file and include the License file at usr/src/OPENSOLARIS.LICENSE.
+.\" If applicable, add the following below this CDDL HEADER, with the
+.\" fields enclosed by brackets "[]" replaced with your own identifying
+.\" information: Portions Copyright [yyyy] [name of copyright owner]
+.\"
+.TH SMB 4 "Apr 23, 2015"
 .SH NAME
 smb \- configuration properties for Solaris CIFS server
 .SH DESCRIPTION
@@ -47,6 +59,22 @@
 .sp
 .ne 2
 .na
+\fB\fBbypass_traverse_checking\fR\fR
+.ad
+.sp .6
+.RS 4n
+When set, allows the SMB server to bypass ACL "traverse" checks.
+The default value is \fBtrue\fR, for Windows compatibility.
+If this parameter is \fBfalse\fR, ACL checks require that
+"traverse" (directory execute) is granted on every directory
+above the directory the SMB client tries to access.
+Windows shares are normally setup with the higher level
+directories not specifically granting such access.
+.RE
+
+.sp
+.ne 2
+.na
 \fB\fBdisposition\fR\fR
 .ad
 .sp .6
@@ -100,10 +128,34 @@
 .sp
 .ne 2
 .na
-\fB\fBipv6_enabled\fR\fR
+\fB\fBencrypt\fR\fR
 .ad
 .sp .6
 .RS 4n
+Controls SMB3 Encryption. For requests on a particular share, the server's
+behavior is controlled by the stricter of this option and the per-share
+"encrypt" option.
+.sp
+When set to \fBdisabled\fR, the server will not ask clients to encrypt requests.
+When set to \fBenabled\fR, the server will ask clients to encrypt requests,
+but will not require that they do so. Any message that can be encrypted
+will be encrypted.
+When set to \fBrequired\fR, the server will deny access to or disconnect
+any client that does not support encryption or fails to encrypt requests
+that they should.
+.sp
+In other words, the \fBenabled\fR behavior is that any message that CAN
+be encrypted SHOULD be encrypted, while the \fBrequired\fR behavior is that any
+message that CAN be encrypted MUST be encrypted.
+.RE
+
+.sp
+.ne 2
+.na
+\fB\fBipv6_enable\fR\fR
+.ad
+.sp .6
+.RS 4n
 Enables IPv6 Internet protocol support within the CIFS Service. Valid values
 are \fBtrue\fR and \fBfalse\fR. The default value is \fBfalse\fR.
 .RE
@@ -117,7 +169,7 @@
 .RS 4n
 Specifies the number of seconds before an idle SMB connection is dropped by the
 Solaris CIFS server. If set to 0, idle connections are not dropped. Valid
-values are 0 and from 20 seconds and above. The default value is 5400 seconds.
+values are 0 and from 20 seconds and above. The default value is 0.
 .RE
 
 .sp
@@ -129,7 +181,7 @@
 .RS 4n
 Specifies the LAN Manager (LM) authentication level. The LM compatibility level
 controls the type of user authentication to use in workgroup mode or domain
-mode. The default value is 3.
+mode. The default value is 4.
 .sp
 The following describes the behavior at each level.
 .sp
@@ -316,6 +368,18 @@
 .sp
 .ne 2
 .na
+\fB\fBmin_protocol\fR\fR
+.ad
+.sp .6
+.RS 4n
+Specifies the minimum SMB protocol level that the SMB service
+should allow clients to negotiate.  The default value is \fB1\fR.
+Valid settings include: \fB1\fR, \fB2.1\fR, \fB3.0\fR
+.RE
+
+.sp
+.ne 2
+.na
 \fB\fBmax_workers\fR\fR
 .ad
 .sp .6
@@ -333,6 +397,18 @@
 .sp
 .ne 2
 .na
+\fB\fBnetbios_enable\fR\fR
+.ad
+.sp .6
+.RS 4n
+Controls whether NetBIOS services are active, including the NetBIOS
+listener (port 139), NetBIOS datagram service (port 138) and the
+NetBIOS name service (port 137).  The default value is \fBfalse\fR.
+.RE
+
+.sp
+.ne 2
+.na
 \fB\fBnetbios_scope\fR\fR
 .ad
 .sp .6
@@ -347,11 +423,26 @@
 .sp
 .ne 2
 .na
+\fB\fBoplock_enable\fR\fR
+.ad
+.sp .6
+.RS 4n
+Controls whether "oplocks" may be granted by the SMB server.
+The term "oplock" is short for "opportunistic lock", which is
+the legacy name for cache delegations in SMB.
+By default, oplocks are enabled.
+Note that if oplocks are disabled, file I/O perfrormance may be
+severely reduced.
+.RE
+
+.sp
+.ne 2
+.na
 \fB\fBpdc\fR\fR
 .ad
 .sp .6
 .RS 4n
-Specifies the preferred IP address for the domain controller. This property is
+Specifies the host name of the preferred domain controller. This property is
 sometimes used when there are multiple domain controllers to indicate which one
 is preferred. If the specified domain controller responds, it is chosen even if
 the other domain controllers are also available. By default, no value is set.
@@ -360,6 +451,17 @@
 .sp
 .ne 2
 .na
+\fB\fBprint_enable\fR\fR
+.ad
+.sp .6
+.RS 4n
+Controls whether the SMB printing service is active.
+The default value is \fBfalse\fR.
+.RE
+
+.sp
+.ne 2
+.na
 \fB\fBrestrict_anonymous\fR\fR
 .ad
 .sp .6
@@ -398,6 +500,8 @@
 \fBfalse\fR. The default value is \fBfalse\fR.
 .RE
 
+.\" There is also: smb2_enable, but the next commit removes it.
+
 .sp
 .ne 2
 .na
