Official Samba-3 HOWTO and Reference Guide, The

Official Samba-3 HOWTO and Reference Guide, The

by John H. Terpstra, Jelmer R. Vernooij
Released October 2003
Publisher(s): Pearson
ISBN: 9780131453555

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

"The breadth of technical information provided in this book ensures that even the most demanding of administrators will find something they need."
--Andrew Tridgell, President of the Samba Team and the original author of Samba

The practical, authoritative, step-by-step guide to cutting IT costs with Samba-3!

This is the definitive guide to using Samba-3 in production environments. It begins with the immense amount of HOWTO information published by the Samba Team and volunteers around the world . . . but that's just the beginning. The book's Samba Team editors have organized and edited this material around the practical needs of working Windows(R) administrators. UNIX(R)/Linux administrators will find all the answers they need as well.

Whether you're deploying Samba for the first time, integrating Samba into a Windows 200x Active Directory environment, migrating from NT 4 or Samba 2.x, or using Samba in a UNIX/Linux environment, you'll find step-by-step solutions, carefully edited for accuracy, practicality, and clarity. You'll learn all you need to make intelligent deployment decisions, get running fast, and use Samba-3's powerful new features to maximize performance and minimize cost.

Step-by-step installation techniques and proven configurations that work "right out of the box."

  • Essential Samba-3 information that leverages your Windows networking knowledge

  • Detailed coverage of Samba-3's powerful new user/machine account management, network browsing, and mapping capabilities

  • Authoritative explanations of advanced features such as interdomain trusts and loadable VFS file system drivers

  • Clear information on how Samba-3 handles Windows desktop/user policies and profiles

  • Practical techniques for optimizing network printing

  • Specific guidance for migration from Windows NT 4 or Samba 2.x

  • Troubleshooting techniques that draw on the knowledge of the entire Samba community

    •

    Table of contents

    1. Copyright
    2. Praise for The Official Samba-3 HOWTO and Reference Guide
    3. Bruce Perens’ Open Source Series
    4. Attribution
    5. Abstract
    6. Foreword
    7. List of Figures
    8. List of Tables
    9. I. General Installation
      1. Preface and Introduction
        1. What Is Samba?
        2. Why This Book?
        3. Book Structure and Layout
      2. 1. How to Install and Test Samba
        1. 1.1. Obtaining and Installing Samba
        2. 1.2. Configuring Samba (smb.conf)
          1. 1.2.1. Configuration file syntax
          2. 1.2.2. Example Configuration
            1. 1.2.2.1. Test Your Config File with testparm
          3. 1.2.3. SWAT
        3. 1.3. List Shares Available on the Server
        4. 1.4. Connect with a UNIX Client
        5. 1.5. Connect from a Remote SMB Client
        6. 1.6. What If Things Don’t Work?
        7. 1.7. Common Errors
          1. 1.7.1. Large Number of smbd Processes
          2. 1.7.2. Error Message: open_oplock_ipc
          3. 1.7.3. “The network name cannot be found”
      3. 2. Fast Start: Cure for Impatience
        1. 2.1. Features and Benefits
        2. 2.2. Description of Example Sites
        3. 2.3. Worked Examples
          1. 2.3.1. Stand-alone Server
            1. 2.3.1.1. Annonymous Read-Only Document Server
            2. 2.3.1.2. Anonymous Read-Write Document Server
            3. 2.3.1.3. Anonymous Print Server
            4. 2.3.1.4. Secure Read-Write File and Print Server
          2. 2.3.2. Domain Member Server
            1. 2.3.2.1. Example Configuration
          3. 2.3.3. Domain Controller
            1. 2.3.3.1. Example: Engineering Office
            2. 2.3.3.2. A Big Organization
              1. The Primary Domain Controller
              2. Backup Domain Controller
    10. II. Server Configuration Basics
      1. 3. Server Types and Security Modes
        1. 3.1. Features and Benefits
        2. 3.2. Server Types
        3. 3.3. Samba Security Modes
          1. 3.3.1. User Level Security
            1. 3.3.1.1. Example Configuration
          2. 3.3.2. Share Level Security
            1. 3.3.2.1. Example Configuration
          3. 3.3.3. Domain Security Mode (User Level Security)
            1. 3.3.3.1. Example Configuration
          4. 3.3.4. ADS Security Mode (User Level Security)
            1. 3.3.4.1. Example Configuration
          5. 3.3.5. Server Security (User Level Security)
            1. 3.3.5.1. Example Configuration
        4. 3.4. Password Checking
        5. 3.5. Common Errors
          1. 3.5.1. What Makes Samba a Server?
          2. 3.5.2. What Makes Samba a Domain Controller?
          3. 3.5.3. What Makes Samba a Domain Member?
          4. 3.5.4. Constantly Losing Connections to Password Server
      2. 4. Domain Control
        1. 4.1. Features and Benefits
        2. 4.2. Basics of Domain Control
          1. 4.2.1. Domain Controller Types
          2. 4.2.2. Preparing for Domain Control
        3. 4.3. Domain Control — Example Configuration
        4. 4.4. Samba ADS Domain Control
        5. 4.5. Domain and Network Logon Configuration
          1. 4.5.1. Domain Network Logon Service
            1. 4.5.1.1. Example Configuration
            2. 4.5.1.2. The Special Case of MS Windows XP Home Edition
            3. 4.5.1.3. The Special Case of Windows 9x/Me
          2. 4.5.2. Security Mode and Master Browsers
        6. 4.6. Common Errors
          1. 4.6.1. “$” Cannot Be Included in Machine Name
          2. 4.6.2. Joining Domain Fails Because of Existing Machine Account
          3. 4.6.3. The System Cannot Log You On (C000019B)
          4. 4.6.4. The Machine Trust Account Is Not Accessible
          5. 4.6.5. Account Disabled
          6. 4.6.6. Domain Controller Unavailable
          7. 4.6.7. Cannot Log onto Domain Member Workstation After Joining Domain
      3. 5. Backup Domain Control
        1. 5.1. Features and Benefits
        2. 5.2. Essential Background Information
          1. 5.2.1. MS Windows NT4-style Domain Control
            1. 5.2.1.1. Example PDC Configuration
          2. 5.2.2. LDAP Configuration Notes
          3. 5.2.3. Active Directory Domain Control
          4. 5.2.4. What Qualifies a Domain Controller on the Network?
          5. 5.2.5. How does a Workstation find its Domain Controller?
            1. 5.2.5.1. NetBIOS Over TCP/IP Enabled
            2. 5.2.5.2. NetBIOS Over TCP/IP Disabled
        3. 5.3. Backup Domain Controller Configuration
          1. 5.3.1. Example Configuration
        4. 5.4. Common Errors
          1. 5.4.1. Machine Accounts Keep Expiring
          2. 5.4.2. Can Samba Be a Backup Domain Controller to an NT4 PDC?
          3. 5.4.3. How Do I Replicate the smbpasswd File?
          4. 5.4.4. Can I Do This All with LDAP?
      4. 6. Domain Membership
        1. 6.1. Features and Benefits
        2. 6.2. MS Windows Workstation/Server Machine Trust Accounts
          1. 6.2.1. Manual Creation of Machine Trust Accounts
          2. 6.2.2. Managing Domain Machine Accounts using NT4 Server Manager
          3. 6.2.3. On-the-Fly Creation of Machine Trust Accounts
          4. 6.2.4. Making an MS Windows Workstation or Server a Domain Member
            1. 6.2.4.1. Windows 200x/XP Professional Client
            2. 6.2.4.2. Windows NT4 Client
            3. 6.2.4.3. Samba Client
        3. 6.3. Domain Member Server
          1. 6.3.1. Joining an NT4-type Domain with Samba-3
          2. 6.3.2. Why Is This Better Than security = server?
        4. 6.4. Samba ADS Domain Membership
          1. 6.4.1. Configure smb.conf
          2. 6.4.2. Configure /etc/krb5.conf
          3. 6.4.3. Create the Computer Account
            1. 6.4.3.1. Possible Errors
          4. 6.4.4. Testing Server Setup
          5. 6.4.5. Testing with smbclient
          6. 6.4.6. Notes
        5. 6.5. Sharing User ID Mappings between Samba Domain Members
        6. 6.6. Common Errors
          1. 6.6.1. Cannot Add Machine Back to Domain
          2. 6.6.2. Adding Machine to Domain Fails
          3. 6.6.3. I Can’t Join a Windows 2003 PDC
      5. 7. Stand-Alone Servers
        1. 7.1. Features and Benefits
        2. 7.2. Background
        3. 7.3. Example Configuration
          1. 7.3.1. Reference Documentation Server
          2. 7.3.2. Central Print Serving
        4. 7.4. Common Errors
      6. 8. MS Windows Network Configuration Guide
        1. 8.1. Features and Benefits
        2. 8.2. Technical Details
          1. 8.2.1. TCP/IP Configuration
            1. 8.2.1.1. MS Windows XP Professional
            2. 8.2.1.2. MS Windows 2000
            3. 8.2.1.3. MS Windows Me
          2. 8.2.2. Joining a Domain: Windows 2000/XP Professional
          3. 8.2.3. Domain Logon Configuration: Windows 9x/Me
        3. 8.3. Common Errors
    11. III. Advanced Configuration
      1. 9. Network Browsing
        1. 9.1. Features and Benefits
        2. 9.2. What Is Browsing?
        3. 9.3. Discussion
          1. 9.3.1. NetBIOS over TCP/IP
          2. 9.3.2. TCP/IP without NetBIOS
          3. 9.3.3. DNS and Active Directory
        4. 9.4. How Browsing Functions
          1. 9.4.1. Configuring WORKGROUP Browsing
          2. 9.4.2. DOMAIN Browsing Configuration
          3. 9.4.3. Forcing Samba to Be the Master
          4. 9.4.4. Making Samba the Domain Master
          5. 9.4.5. Note about Broadcast Addresses
          6. 9.4.6. Multiple Interfaces
          7. 9.4.7. Use of the Remote Announce Parameter
          8. 9.4.8. Use of the Remote Browse Sync Parameter
        5. 9.5. WINS — The Windows Internetworking Name Server
          1. 9.5.1. WINS Server Configuration
          2. 9.5.2. WINS Replication
          3. 9.5.3. Static WINS Entries
        6. 9.6. Helpful Hints
          1. 9.6.1. Windows Networking Protocols
          2. 9.6.2. Name Resolution Order
        7. 9.7. Technical Overview of Browsing
          1. 9.7.1. Browsing Support in Samba
          2. 9.7.2. Problem Resolution
          3. 9.7.3. Cross-Subnet Browsing
            1. 9.7.3.1. Behavior of Cross-Subnet Browsing
        8. 9.8. Common Errors
          1. 9.8.1. How Can One Flush the Samba NetBIOS Name Cache without Restarting Samba?
          2. 9.8.2. Server Resources Can Not Be Listed
          3. 9.8.3. I get an ’Unable to browse the network’ error
          4. 9.8.4. Browsing of Shares and Directories is Very Slow
      2. 10. Account Information Databases
        1. 10.1. Features and Benefits
          1. 10.1.1. Backward Compatibility Backends
          2. 10.1.2. New Backends
        2. 10.2. Technical Information
          1. 10.2.1. Important Notes About Security
            1. 10.2.1.1. Advantages of Encrypted Passwords
            2. 10.2.1.2. Advantages of Non-Encrypted Passwords
          2. 10.2.2. Mapping User Identifiers between MS Windows and UNIX
          3. 10.2.3. Mapping Common UIDs/GIDs on Distributed Machines
        3. 10.3. Account Management Tools
          1. 10.3.1. The smbpasswd Command
          2. 10.3.2. The pdbedit Command
        4. 10.4. Password Backends
          1. 10.4.1. Plaintext
          2. 10.4.2. smbpasswd — Encrypted Password Database
          3. 10.4.3. tdbsam
          4. 10.4.4. ldapsam
            1. 10.4.4.1. Supported LDAP Servers
            2. 10.4.4.2. Schema and Relationship to the RFC 2307 posixAccount
            3. 10.4.4.3. OpenLDAP Configuration
            4. 10.4.4.4. Initialize the LDAP Database
            5. 10.4.4.5. Configuring Samba
            6. 10.4.4.6. Accounts and Groups Management
            7. 10.4.4.7. Security and sambaSamAccount
            8. 10.4.4.8. LDAP Special Attributes for sambaSamAccounts
            9. 10.4.4.9. Example LDIF Entries for a sambaSamAccount
            10. 10.4.4.10. Password Synchronization
          5. 10.4.5. MySQL
            1. 10.4.5.1. Creating the Database
            2. 10.4.5.2. Configuring
            3. 10.4.5.3. Using Plaintext Passwords or Encrypted Password
            4. 10.4.5.4. Getting Non-Column Data from the Table
          6. 10.4.6. XML
        5. 10.5. Common Errors
          1. 10.5.1. Users Cannot Logon
          2. 10.5.2. Users Being Added to the Wrong Backend Database
          3. 10.5.3. Configuration of auth methods
      3. 11. Group Mapping — MS Windows and Unix
        1. 11.1. Features and Benefits
        2. 11.2. Discussion
          1. 11.2.1. Default Users, Groups and Relative Identifiers
          2. 11.2.2. Example Configuration
        3. 11.3. Configuration Scripts
          1. 11.3.1. Sample smb.conf Add Group Script
          2. 11.3.2. Script to Configure Group Mapping
        4. 11.4. Common Errors
          1. 11.4.1. Adding Groups Fails
          2. 11.4.2. Adding MS Windows Groups to MS Windows Groups Fails
          3. 11.4.3. Adding Domain Users to the Power Users Group
      4. 12. File, Directory and Share Access Controls
        1. 12.1. Features and Benefits
        2. 12.2. File System Access Controls
          1. 12.2.1. MS Windows NTFS Comparison with UNIX File Systems
          2. 12.2.2. Managing Directories
          3. 12.2.3. File and Directory Access Control
        3. 12.3. Share Definition Access Controls
          1. 12.3.1. User and Group-Based Controls
          2. 12.3.2. File and Directory Permissions-Based Controls
          3. 12.3.3. Miscellaneous Controls
        4. 12.4. Access Controls on Shares
          1. 12.4.1. Share Permissions Management
            1. 12.4.1.1. Windows NT4 Workstation/Server
            2. 12.4.1.2. Windows 200x/XP
        5. 12.5. MS Windows Access Control Lists and UNIX Interoperability
          1. 12.5.1. Managing UNIX Permissions Using NT Security Dialogs
          2. 12.5.2. Viewing File Security on a Samba Share
          3. 12.5.3. Viewing File Ownership
          4. 12.5.4. Viewing File or Directory Permissions
            1. 12.5.4.1. File Permissions
            2. 12.5.4.2. Directory Permissions
          5. 12.5.5. Modifying File or Directory Permissions
          6. 12.5.6. Interaction with the Standard Samba “create mask” Parameters
          7. 12.5.7. Interaction with the Standard Samba File Attribute Mapping
        6. 12.6. Common Errors
          1. 12.6.1. Users Cannot Write to a Public Share
          2. 12.6.2. File Operations Done as root with force user Set
          3. 12.6.3. MS Word with Samba Changes Owner of File
      5. 13. File and Record Locking
        1. 13.1. Features and Benefits
        2. 13.2. Discussion
          1. 13.2.1. Opportunistic Locking Overview
            1. 13.2.1.1. Exclusively Accessed Shares
            2. 13.2.1.2. Multiple-Accessed Shares or Files
            3. 13.2.1.3. UNIX or NFS Client-Accessed Files
            4. 13.2.1.4. Slow and/or Unreliable Networks
            5. 13.2.1.5. Multi-User Databases
            6. 13.2.1.6. PDM Data Shares
            7. 13.2.1.7. Beware of Force User
            8. 13.2.1.8. Advanced Samba Opportunistic Locking Parameters
            9. 13.2.1.9. Mission-Critical High-Availability
        3. 13.3. Samba Opportunistic Locking Control
          1. 13.3.1. Example Configuration
            1. 13.3.1.1. Disabling Oplocks
            2. 13.3.1.2. Disabling Kernel Oplocks
        4. 13.4. MS Windows Opportunistic Locking and Caching Controls
          1. 13.4.1. Workstation Service Entries
          2. 13.4.2. Server Service Entries
        5. 13.5. Persistent Data Corruption
        6. 13.6. Common Errors
          1. 13.6.1. locking.tdb Error Messages
          2. 13.6.2. Problems Saving Files in MS Office on Windows XP
          3. 13.6.3. Long Delays Deleting Files Over Network with XP SP1
        7. 13.7. Additional Reading
      6. 14. Securing Samba
        1. 14.1. Introduction
        2. 14.2. Features and Benefits
        3. 14.3. Technical Discussion of Protective Measures and Issues
          1. 14.3.1. Using Host-Based Protection
          2. 14.3.2. User-Based Protection
          3. 14.3.3. Using Interface Protection
          4. 14.3.4. Using a Firewall
          5. 14.3.5. Using IPC$ Share-Based Denials
          6. 14.3.6. NTLMv2 Security
        4. 14.4. Upgrading Samba
        5. 14.5. Common Errors
          1. 14.5.1. Smbclient Works on Localhost, but the Network Is Dead
          2. 14.5.2. Why Can Users Access Home Directories of Other Users?
      7. 15. Interdomain Trust Relationships
        1. 15.1. Features and Benefits
        2. 15.2. Trust Relationship Background
        3. 15.3. Native MS Windows NT4 Trusts Configuration
          1. 15.3.1. Creating an NT4 Domain Trust
          2. 15.3.2. Completing an NT4 Domain Trust
          3. 15.3.3. Inter-Domain Trust Facilities
        4. 15.4. Configuring Samba NT-Style Domain Trusts
          1. 15.4.1. Samba as the Trusted Domain
          2. 15.4.2. Samba as the Trusting Domain
        5. 15.5. NT4-Style Domain Trusts with Windows 2000
        6. 15.6. Common Errors
          1. 15.6.1. Browsing of Trusted Domain Fails
      8. 16. Hosting a Microsoft Distributed File System Tree
        1. 16.1. Features and Benefits
        2. 16.2. Common Errors
          1. 16.2.1. MSDFS UNIX Path Is Case-Critical
      9. 17. Classical Printing Support
        1. 17.1. Features and Benefits
        2. 17.2. Technical Introduction
          1. 17.2.1. Client to Samba Print Job Processing
          2. 17.2.2. Printing Related Configuration Parameters
        3. 17.3. Simple Print Configuration
          1. 17.3.1. Verifing Configuration with testparm
          2. 17.3.2. Rapid Configuration Validation
        4. 17.4. Extended Printing Configuration
          1. 17.4.1. Detailed Explanation Settings
            1. 17.4.1.1. The [global] Section
            2. 17.4.1.2. The [printers] Section
            3. 17.4.1.3. Any [my_printer_name] Section
            4. 17.4.1.4. Print Commands
            5. 17.4.1.5. Default UNIX System Printing Commands
            6. 17.4.1.6. Custom Print Commands
        5. 17.5. Printing Developments Since Samba-2.2
          1. 17.5.1. Point’n’Print Client Drivers on Samba Servers
          2. 17.5.2. The Obsoleted [printer$] Section
          3. 17.5.3. Creating the [print$] Share
          4. 17.5.4. [print$] Section Parameters
          5. 17.5.5. The [print$] Share Directory
        6. 17.6. Installing Drivers into [print$]
          1. 17.6.1. Add Printer Wizard Driver Installation
          2. 17.6.2. Installing Print Drivers Using rpcclient
            1. 17.6.2.1. Identifying Driver Files
            2. 17.6.2.2. Obtaining Driver Files from Windows Client [print$] Shares
            3. 17.6.2.3. Installing Driver Files into [print$]
            4. 17.6.2.4. smbclient to Confirm Driver Installation
            5. 17.6.2.5. Running rpcclient with adddriver
            6. 17.6.2.6. Checking adddriver Completion
            7. 17.6.2.7. Check Samba for Driver Recognition
            8. 17.6.2.8. Specific Driver Name Flexibility
            9. 17.6.2.9. Running rpcclient with the setdriver
        7. 17.7. Client Driver Installation Procedure
          1. 17.7.1. First Client Driver Installation
          2. 17.7.2. Setting Device Modes on New Printers
          3. 17.7.3. Additional Client Driver Installation
          4. 17.7.4. Always Make First Client Connection as root or “printer admin”
        8. 17.8. Other Gotchas
          1. 17.8.1. Setting Default Print Options for Client Drivers
          2. 17.8.2. Supporting Large Numbers of Printers
          3. 17.8.3. Adding New Printers with the Windows NT APW
          4. 17.8.4. Error Message: “Cannot connect under a different Name”
          5. 17.8.5. Take Care When Assembling Driver Files
          6. 17.8.6. Samba and Printer Ports
          7. 17.8.7. Avoiding Common Client Driver Misconfiguration
        9. 17.9. The Imprints Toolset
          1. 17.9.1. What is Imprints?
          2. 17.9.2. Creating Printer Driver Packages
          3. 17.9.3. The Imprints Server
          4. 17.9.4. The Installation Client
        10. 17.10. Adding Network Printers without User Interaction
        11. 17.11. The addprinter Command
        12. 17.12. Migration of Classical Printing to Samba
        13. 17.13. Publishing Printer Information in Active Directory or LDAP
        14. 17.14. Common Errors
          1. 17.14.1. I Give My Root Password but I Do Not Get Access
          2. 17.14.2. My Print Jobs Get Spooled into the Spooling Directory, but Then Get Lost
      10. 18. Cups Printing Support
        1. 18.1. Introduction
          1. 18.1.1. Features and Benefits
          2. 18.1.2. Overview
        2. 18.2. Basic CUPS Support Configuration
          1. 18.2.1. Linking smbd with libcups.so
          2. 18.2.2. Simple smb.conf Settings for CUPS
          3. 18.2.3. More Complex CUPS smb.conf Settings
        3. 18.3. Advanced Configuration
          1. 18.3.1. Central Spooling vs. “Peer-to-Peer” Printing
          2. 18.3.2. Raw Print Serving — Vendor Drivers on Windows Clients
          3. 18.3.3. Installation of Windows Client Drivers
          4. 18.3.4. Explicitly Enable “raw” Printing for application/octet-stream
          5. 18.3.5. Driver Upload Methods
        4. 18.4. Advanced Intelligent Printing with PostScript Driver Download
          1. 18.4.1. GDI on Windows – PostScript on UNIX
          2. 18.4.2. Windows Drivers, GDI and EMF
          3. 18.4.3. UNIX Printfile Conversion and GUI Basics
          4. 18.4.4. PostScript and Ghostscript
          5. 18.4.5. Ghostscript — the Software RIP for Non-PostScript Printers
          6. 18.4.6. PostScript Printer Description (PPD) Specification
          7. 18.4.7. Using Windows-Formatted Vendor PPDs
          8. 18.4.8. CUPS Also Uses PPDs for Non-PostScript Printers
        5. 18.5. The CUPS Filtering Architecture
          1. 18.5.1. MIME Types and CUPS Filters
          2. 18.5.2. MIME Type Conversion Rules
          3. 18.5.3. Filtering Overview
            1. 18.5.3.1. Filter requirements
          4. 18.5.4. Prefilters
          5. 18.5.5. pstops
          6. 18.5.6. pstoraster
          7. 18.5.7. imagetops and imagetoraster
          8. 18.5.8. rasterto [printers specific]
          9. 18.5.9. CUPS Backends
          10. 18.5.10. The Role of cupsomatic/foomatic
          11. 18.5.11. The Complete Picture
          12. 18.5.12. mime.convs
          13. 18.5.13. “Raw” Printing
          14. 18.5.14. application/octet-stream Printing
          15. 18.5.15. PostScript Printer Descriptions (PPDs) for Non-PS Printers
          16. 18.5.16. cupsomatic/foomatic-rip Versus native CUPS Printing
          17. 18.5.17. Examples for Filtering Chains
          18. 18.5.18. Sources of CUPS Drivers/PPDs
          19. 18.5.19. Printing with Interface Scripts
        6. 18.6. Network Printing (Purely Windows)
          1. 18.6.1. From Windows Clients to an NT Print Server
          2. 18.6.2. Driver Execution on the Client
          3. 18.6.3. Driver Execution on the Server
        7. 18.7. Network Printing (Windows Clients — UNIX/Samba Print Servers)
          1. 18.7.1. From Windows Clients to a CUPS/Samba Print Server
          2. 18.7.2. Samba Receiving Jobfiles and Passing Them to CUPS
        8. 18.8. Network PostScript RIP
          1. 18.8.1. PPDs for Non-PS Printers on UNIX
          2. 18.8.2. PPDs for Non-PS Printers on Windows
        9. 18.9. Windows Terminal Servers (WTS) as CUPS Clients
          1. 18.9.1. Printer Drivers Running in “Kernel Mode” Cause Many Problems
          2. 18.9.2. Workarounds Impose Heavy Limitations
          3. 18.9.3. CUPS: A “Magical Stone”?
          4. 18.9.4. PostScript Drivers with No Major Problems — Even in Kernel Mode
        10. 18.10. Configuring CUPS for Driver Download
          1. 18.10.1. cupsaddsmb: The Unknown Utility
          2. 18.10.2. Prepare Your smb.conf for cupsaddsmb
          3. 18.10.3. CUPS “PostScript Driver for Windows NT/200x/XP”
          4. 18.10.4. Recognizing Different Driver Files
          5. 18.10.5. Acquiring the Adobe Driver Files
          6. 18.10.6. ESP Print Pro PostScript Driver for Windows NT/200x/XP
          7. 18.10.7. Caveats to be Considered
          8. 18.10.8. Windows CUPS PostScript Driver Versus Adobe Driver
          9. 18.10.9. Run cupsaddsmb (Quiet Mode)
          10. 18.10.10. Run cupsaddsmb with Verbose Output
          11. 18.10.11. Understanding cupsaddsmb
          12. 18.10.12. How to Recognize If cupsaddsmb Completed Successfully
          13. 18.10.13. cupsaddsmb with a Samba PDC
          14. 18.10.14. cupsaddsmb Flowchart
          15. 18.10.15. Installing the PostScript Driver on a Client
          16. 18.10.16. Avoiding Critical PostScript Driver Settings on the Client
        11. 18.11. Installing PostScript Driver Files Manually Using rpcclient
          1. 18.11.1. A Check of the rpcclient man Page
          2. 18.11.2. Understanding the rpcclient man Page
          3. 18.11.3. Producing an Example by Querying a Windows Box
          4. 18.11.4. Requirements for adddriver and setdriver to Succeed
          5. 18.11.5. Manual Driver Installation in 15 Steps
          6. 18.11.6. Troubleshooting Revisited
        12. 18.12. The Printing *.tdb Files
          1. 18.12.1. Trivial Database Files
          2. 18.12.2. Binary Format
          3. 18.12.3. Losing *.tdb Files
          4. 18.12.4. Using tdbbackup
        13. 18.13. CUPS Print Drivers from Linuxprinting.org
          1. 18.13.1. foomatic-rip and Foomatic Explained
            1. 18.13.1.1. 690 “Perfect” Printers
            2. 18.13.1.2. How the Printing HOWTO Started It All
            3. 18.13.1.3. Foomatic’s Strange Name
            4. 18.13.1.4. cupsomatic, pdqomatic, lpdomatic, directomatic
            5. 18.13.1.5. The Grand Unification Achieved
            6. 18.13.1.6. Driver Development Outside
            7. 18.13.1.7. Forums, Downloads, Tutorials, Howtos — also for Mac OS X and Commercial UNIX
            8. 18.13.1.8. Foomatic Database-Generated PPDs
          2. 18.13.2. foomatic-rip and Foomatic-PPD Download and Installation
        14. 18.14. Page Accounting with CUPS
          1. 18.14.1. Setting Up Quotas
          2. 18.14.2. Correct and Incorrect Accounting
          3. 18.14.3. Adobe and CUPS PostScript Drivers for Windows Clients
          4. 18.14.4. The page_log File Syntax
          5. 18.14.5. Possible Shortcomings
          6. 18.14.6. Future Developments
        15. 18.15. Additional Material
        16. 18.16. Auto-Deletion or Preservation of CUPS Spool Files
          1. 18.16.1. CUPS Configuration Settings Explained
          2. 18.16.2. Pre-Conditions
          3. 18.16.3. Manual Configuration
        17. 18.17. Printing from CUPS to Windows Attached Printers
        18. 18.18. More CUPS-Filtering Chains
        19. 18.19. Common Errors
          1. 18.19.1. Windows 9x/ME Client Can’t Install Driver
          2. 18.19.2. “cupsaddsmb” Keeps Asking for Root Password in Never-ending Loop
          3. 18.19.3. “cupsaddsmb” Errors
          4. 18.19.4. Client Can’t Connect to Samba Printer
          5. 18.19.5. New Account Reconnection from Windows 200x/XP Troubles
          6. 18.19.6. Avoid Being Connected to the Samba Server as the Wrong User
          7. 18.19.7. Upgrading to CUPS Drivers from Adobe Drivers
          8. 18.19.8. Can’t Use “cupsaddsmb” on Samba Server Which Is a PDC
          9. 18.19.9. Deleted Windows 200x Printer Driver Is Still Shown
          10. 18.19.10. Windows 200x/XP ”Local Security Policies”
          11. 18.19.11. Administrator Cannot Install Printers for All Local Users
          12. 18.19.12. Print Change Notify Functions on NT-clients
          13. 18.19.13. WinXP-SP1
          14. 18.19.14. Print Options for All Users Can’t Be Set on Windows 200x/XP
          15. 18.19.15. Most Common Blunders in Driver Settings on Windows Clients
          16. 18.19.16. cupsaddsmb Does Not Work with Newly Installed Printer
          17. 18.19.17. Permissions on /var/spool/samba/ Get Reset After Each Reboot
          18. 18.19.18. Print Queue Called “lp” Mis-handles Print Jobs
          19. 18.19.19. Location of Adobe PostScript Driver Files for “cupsaddsmb”
        20. 18.20. Overview of the CUPS Printing Processes
      11. 19. Stackable VFS Modules
        1. 19.1. Features and Benefits
        2. 19.2. Discussion
        3. 19.3. Included Modules
          1. 19.3.1. audit
          2. 19.3.2. extd_audit
          3. 19.3.3. fake_perms
          4. 19.3.4. recycle
          5. 19.3.5. netatalk
        4. 19.4. VFS Modules Available Elsewhere
          1. 19.4.1. DatabaseFS
          2. 19.4.2. vscan
      12. 20. Winbind: Use of Domain Accounts
        1. 20.1. Features and Benefits
        2. 20.2. Introduction
        3. 20.3. What Winbind Provides
          1. 20.3.1. Target Uses
        4. 20.4. How Winbind Works
          1. 20.4.1. Microsoft Remote Procedure Calls
          2. 20.4.2. Microsoft Active Directory Services
          3. 20.4.3. Name Service Switch
          4. 20.4.4. Pluggable Authentication Modules
          5. 20.4.5. User and Group ID Allocation
          6. 20.4.6. Result Caching
        5. 20.5. Installation and Configuration
          1. 20.5.1. Introduction
          2. 20.5.2. Requirements
          3. 20.5.3. Testing Things Out
            1. 20.5.3.1. Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
            2. 20.5.3.2. NSS Winbind on AIX
            3. 20.5.3.3. Configure smb.conf
            4. 20.5.3.4. Join the Samba Server to the PDC Domain
            5. 20.5.3.5. Starting and Testing the winbindd Daemon
            6. 20.5.3.6. Fix the init.d Startup Scripts
              1. Linux
              2. Solaris
              3. Restarting
            7. 20.5.3.7. Configure Winbind and PAM
              1. Linux/FreeBSD-specific PAM configuration
              2. Solaris-specific configuration
        6. 20.6. Conclusion
        7. 20.7. Common Errors
          1. 20.7.1. NSCD Problem Warning
          2. 20.7.2. Winbind Is Not Resolving Users and Groups
      13. 21. Advanced Network Management
        1. 21.1. Features and Benefits
        2. 21.2. Remote Server Administration
        3. 21.3. Remote Desktop Management
          1. 21.3.1. Remote Management from NoMachine.Com
        4. 21.4. Network Logon Script Magic
          1. 21.4.1. Adding Printers without User Intervention
      14. 22. System and Account Policies
        1. 22.1. Features and Benefits
        2. 22.2. Creating and Managing System Policies
          1. 22.2.1. Windows 9x/ME Policies
          2. 22.2.2. Windows NT4-Style Policy Files
            1. 22.2.2.1. Registry Spoiling
          3. 22.2.3. MS Windows 200x/XP Professional Policies
            1. 22.2.3.1. Administration of Windows 200x/XP Policies
        3. 22.3. Managing Account/User Policies
        4. 22.4. Management Tools
          1. 22.4.1. Samba Editreg Toolset
          2. 22.4.2. Windows NT4/200x
          3. 22.4.3. Samba PDC
        5. 22.5. System Startup and Logon Processing Overview
        6. 22.6. Common Errors
          1. 22.6.1. Policy Does Not Work
      15. 23. Desktop Profile Management
        1. 23.1. Features and Benefits
        2. 23.2. Roaming Profiles
          1. 23.2.1. Samba Configuration for Profile Handling
            1. 23.2.1.1. NT4/200x User Profiles
            2. 23.2.1.2. Windows 9x/Me User Profiles
            3. 23.2.1.3. Mixed Windows 9x/Me and Windows NT4/200x User Profiles
            4. 23.2.1.4. Disabling Roaming Profile Support
          2. 23.2.2. Windows Client Profile Configuration Information
            1. 23.2.2.1. Windows 9x/Me Profile Setup
            2. 23.2.2.2. Windows NT4 Workstation
            3. 23.2.2.3. Windows 2000/XP Professional
          3. 23.2.3. Sharing Profiles between W9x/Me and NT4/200x/XP Workstations
          4. 23.2.4. Profile Migration from Windows NT4/200x Server to Samba
            1. 23.2.4.1. Windows NT4 Profile Management Tools
            2. 23.2.4.2. Side Bar Notes
            3. 23.2.4.3. moveuser.exe
            4. 23.2.4.4. Get SID
        3. 23.3. Mandatory Profiles
        4. 23.4. Creating and Managing Group Profiles
        5. 23.5. Default Profile for Windows Users
          1. 23.5.1. MS Windows 9x/Me
            1. 23.5.1.1. User Profile Handling with Windows 9x/Me
          2. 23.5.2. MS Windows NT4 Workstation
          3. 23.5.3. MS Windows 200x/XP
        6. 23.6. Common Errors
          1. 23.6.1. Configuring Roaming Profiles for a Few Users or Groups
          2. 23.6.2. Cannot Use Roaming Profiles
          3. 23.6.3. Changing the Default Profile
      16. 24. Pam-Based Distributed Authentication
        1. 24.1. Features and Benefits
        2. 24.2. Technical Discussion
          1. 24.2.1. PAM Configuration Syntax
            1. 24.2.1.1. Anatomy of /etc/pam.d Entries
          2. 24.2.2. Example System Configurations
            1. 24.2.2.1. PAM: Original Login Config
            2. 24.2.2.2. PAM: Login Using pam_smbpass
          3. 24.2.3. smb.conf PAM Configuration
          4. 24.2.4. Remote CIFS Authentication Using winbindd.so
          5. 24.2.5. Password Synchronization Using pam_smbpass.so
            1. 24.2.5.1. Password Synchronization Configuration
            2. 24.2.5.2. Password Migration Configuration
            3. 24.2.5.3. Mature Password Configuration
            4. 24.2.5.4. Kerberos Password Integration Configuration
        3. 24.3. Common Errors
          1. 24.3.1. pam_winbind Problem
          2. 24.3.2. Winbind Is Not Resolving Users and Groups
      17. 25. Integrating MS Windows Networks With Samba
        1. 25.1. Features and Benefits
        2. 25.2. Background Information
        3. 25.3. Name Resolution in a Pure UNIX/Linux World
          1. 25.3.1. /etc/hosts
          2. 25.3.2. /etc/resolv.conf
          3. 25.3.3. /etc/host.conf
          4. 25.3.4. /etc/nsswitch.conf
        4. 25.4. Name Resolution as Used within MS Windows Networking
          1. 25.4.1. The NetBIOS Name Cache
          2. 25.4.2. The LMHOSTS File
          3. 25.4.3. HOSTS File
          4. 25.4.4. DNS Lookup
          5. 25.4.5. WINS Lookup
        5. 25.5. Common Errors
          1. 25.5.1. Pinging Works Only in One Way
          2. 25.5.2. Very Slow Network Connections
          3. 25.5.3. Samba Server Name Change Problem
      18. 26. Unicode/Charsets
        1. 26.1. Features and Benefits
        2. 26.2. What Are Charsets and Unicode?
        3. 26.3. Samba and Charsets
        4. 26.4. Conversion from Old Names
        5. 26.5. Common Errors
          1. 26.5.1. CP850.so Can’t Be Found
      19. 27. Backup Techniques
        1. 27.1. Features and Benefits
        2. 27.2. Discussion of Backup Solutions
          1. 27.2.1. BackupPC
          2. 27.2.2. Rsync
          3. 27.2.3. Amanda
          4. 27.2.4. BOBS: Browseable Online Backup System
      20. 28. High Availability
        1. 28.1. Features and Benefits
        2. 28.2. Technical Discussion
          1. 28.2.1. The Ultimate Goal
          2. 28.2.2. Why Is This So Hard?
            1. 28.2.2.1. The Front-End Challenge
            2. 28.2.2.2. De-multiplexing SMB Requests
            3. 28.2.2.3. The Distributed File System Challenge
            4. 28.2.2.4. Restrictive Contraints on Distributed File Systems
            5. 28.2.2.5. Server Pool Communications
            6. 28.2.2.6. Server Pool Communications Demands
            7. 28.2.2.7. Required Modifications to Samba
          3. 28.2.3. A Simple Solution
          4. 28.2.4. High Availability Server Products
          5. 28.2.5. MS-DFS: The Poor Man’s Cluster
          6. 28.2.6. Conclusions
    12. IV. Migration and Updating
      1. 29. Upgrading From Samba-2.X to Samba-3.0.0
        1. 29.1. Quick Migration Guide
        2. 29.2. New Features in Samba-3
        3. 29.3. Configuration Parameter Changes
          1. 29.3.1. Removed Parameters
          2. 29.3.2. New Parameters
          3. 29.3.3. Modified Parameters (Changes in Behavior):
        4. 29.4. New Functionality
          1. 29.4.1. Databases
          2. 29.4.2. Changes in Behavior
          3. 29.4.3. Passdb Backends and Authentication
          4. 29.4.4. LDAP
            1. 29.4.4.1. New Schema
            2. 29.4.4.2. New Suffix for Searching
            3. 29.4.4.3. IdMap LDAP Support
      2. 30. Migration From NT4 PDC to Samba-3 PDC
        1. 30.1. Planning and Getting Started
          1. 30.1.1. Objectives
            1. 30.1.1.1. Domain Layout
            2. 30.1.1.2. Server Share and Directory Layout
            3. 30.1.1.3. Logon Scripts
            4. 30.1.1.4. Profile Migration/Creation
            5. 30.1.1.5. User and Group Accounts
          2. 30.1.2. Steps in Migration Process
        2. 30.2. Migration Options
          1. 30.2.1. Planning for Success
          2. 30.2.2. Samba-3 Implementation Choices
      3. 31. SWAT — The Samba Web Administration Tool
        1. 31.1. Features and Benefits
        2. 31.2. Guidelines and Technical Tips
          1. 31.2.1. Validate SWAT Installation
            1. 31.2.1.1. Locating the swat File
            2. 31.2.1.2. Locating the SWAT Support Files
          2. 31.2.2. Enabling SWAT for Use
          3. 31.2.3. Securing SWAT through SSL
          4. 31.2.4. Enabling SWAT Internationalization Support
        3. 31.3. Overview and Quick Tour
          1. 31.3.1. The SWAT Home Page
          2. 31.3.2. Global Settings
          3. 31.3.3. Share Settings
          4. 31.3.4. Printers Settings
          5. 31.3.5. The SWAT Wizard
          6. 31.3.6. The Status Page
          7. 31.3.7. The View Page
          8. 31.3.8. The Password Change Page
        4. 31.4. SWAT View Page Displays Incorrectly
    13. V. Troubleshooting
      1. 32. The Samba Checklist
        1. 32.1. Introduction
        2. 32.2. Assumptions
        3. 32.3. The Tests
      2. 33. Analyzing and Solving Samba Problems
        1. 33.1. Diagnostics Tools
          1. 33.1.1. Debugging with Samba Itself
          2. 33.1.2. Tcpdump
          3. 33.1.3. Ethereal
          4. 33.1.4. The Windows Network Monitor
            1. 33.1.4.1. Installing Network Monitor on an NT Workstation
            2. 33.1.4.2. Installing Network Monitor on Windows 9x/Me
        2. 33.2. Useful URLs
        3. 33.3. Getting Mailing List Help
        4. 33.4. How to Get Off the Mailing Lists
      3. 34. Reporting Bugs
        1. 34.1. Introduction
        2. 34.2. General Information
        3. 34.3. Debug Levels
        4. 34.4. Internal Errors
        5. 34.5. Attaching to a Running Process
        6. 34.6. Patches
    14. VI. Appendixes
      1. 35. How to Compile Samba
        1. 35.1. Access Samba Source Code via CVS
          1. 35.1.1. Introduction
          2. 35.1.2. CVS Access to samba.org
            1. 35.1.2.1. Access via CVSweb
            2. 35.1.2.2. Access via CVS
        2. 35.2. Accessing the Samba Sources via rsync and ftp
        3. 35.3. Verifying Samba’s PGP Signature
        4. 35.4. Building the Binaries
          1. 35.4.1. Compiling Samba with Active Directory Support
            1. 35.4.1.1. Installing the Required Packages for Debian
            2. 35.4.1.2. Installing the Required Packages for Red Hat Linux
            3. 35.4.1.3. SuSE Linux Package Requirements
        5. 35.5. Starting the smbd and nmbd
          1. 35.5.1. Starting from inetd.conf
          2. 35.5.2. Alternative: Starting smbd as a Daemon
      2. 36. Portability
        1. 36.1. HPUX
        2. 36.2. SCO UNIX
        3. 36.3. DNIX
        4. 36.4. Red Hat Linux
        5. 36.5. AIX
          1. 36.5.1. Sequential Read Ahead
        6. 36.6. Solaris
          1. 36.6.1. Locking Improvements
          2. 36.6.2. Winbind on Solaris 9
      3. 37. Samba and Other CIFS Clients
        1. 37.1. Macintosh Clients
        2. 37.2. OS2 Client
          1. 37.2.1. Configuring OS/2 Warp Connect or OS/2 Warp 4
          2. 37.2.2. Configuring Other Versions of OS/2
          3. 37.2.3. Printer Driver Download for OS/2 Clients
        3. 37.3. Windows for Workgroups
          1. 37.3.1. Latest TCP/IP Stack from Microsoft
          2. 37.3.2. Delete .pwl Files After Password Change
          3. 37.3.3. Configuring Windows for Workgroups Password Handling
          4. 37.3.4. Password Case Sensitivity
          5. 37.3.5. Use TCP/IP as Default Protocol
          6. 37.3.6. Speed Improvement
        4. 37.4. Windows 95/98
          1. 37.4.1. Speed Improvement
        5. 37.5. Windows 2000 Service Pack 2
        6. 37.6. Windows NT 3.1
      4. 38. Samba Performance Tuning
        1. 38.1. Comparisons
        2. 38.2. Socket Options
        3. 38.3. Read Size
        4. 38.4. Max Xmit
        5. 38.5. Log Level
        6. 38.6. Read Raw
        7. 38.7. Write Raw
        8. 38.8. Slow Logins
        9. 38.9. Client Tuning
        10. 38.10. Samba Performance Problem Due to Changing Linux Kernel
        11. 38.11. Corrupt tdb Files
        12. 38.12. Samba Performance is Very Slow
      5. 39. DNS and DHCP Configuration Guide
        1. 39.1. Features and Benefits
        2. 39.2. Example Configuration
          1. 39.2.1. Dynamic DNS
          2. 39.2.2. DHCP Server
      6. A. Manual Pages
        1. A.1. smb.conf
          1. Synopsis
          2. File Format
          3. Section Descriptions
          4. Special Sections
            1. The [global] section
            2. The [homes] section
            3. The [printers] section
          5. Parameters
          6. Variable Substitutions
          7. Name Mangling
          8. Note About Username/Password Validation
          9. Explanation of Each Parameter
          10. Warnings
          11. See Also
        2. A.2. nmblookup
          1. Synopsis
          2. Description
          3. Options
          4. Examples
          5. See Also
        3. A.3. rpcclient
          1. Synopsis
          2. Description
          3. Options
          4. Commands
            1. LSARPC
            2. LSARPC-DS
            3. REG
            4. SRVSVC
            5. SAMR
            6. Spoolss
          5. Netlogon
          6. General Commands
          7. Bugs
        4. A.4. smbcacls
          1. Synopsis
          2. Description
          3. Options
          4. ACL Format
          5. Exit Status
        5. A.5. smbclient
          1. Synopsis
          2. Description
          3. Options
          4. OPERATIONS
          5. NOTES
          6. Environment Variables
          7. Installation
          8. Diagnostics
        6. A.6. net
          1. Synopsis
          2. Description
          3. Options
          4. Commands
            1. Changesecretpw
            2. Time
            3. [RPC|ADS] Join [TYPE] [-U username[%password]] [options]
            4. [RPC] Oldjoin [options]
            5. [RPC|ADS] User
            6. [RPC|ADS] Group
            7. [RAP|RPC] Share
            8. [RPC|RAP] File
            9. [RAP|RPC] File User
            10. Session
            11. RAP DOMAIN
            12. RAP PRINTQ
            13. RAP GROUPMEMBER
            14. RAP SERVICE
            15. LOOKUP
            16. CACHE
            17. GETLOCALSID [DOMAIN]
            18. SETLOCALSID S-1-5-21-x-y-z
            19. GROUPMAP
            20. MAXRID
            21. RPC INFO
            22. [RPC|ADS] TESTJOIN
            23. [RPC|ADS] CHANGETRUSTPW
            24. RPC TRUSTDOM
            25. RPC ABORTSHUTDOWN
            26. SHUTDOWN [-t timeout] [-r] [-f] [-C message]
            27. SAMDUMP
            28. VAMPIRE
            29. GETSID
            30. ADS LEAVE
            31. ADS STATUS
            32. ADS PRINTER
            33. ADS Search EXPRESSION ATTRIBUTES...
            34. ADS DN DN (attributes)
            35. WORKGROUP
            36. HELP [COMMAND]
        7. A.7. nmbd
          1. Synopsis
          2. Description
          3. OPTIONS
          4. Files
          5. Signals
          6. See Also
        8. A.8. pdbedit
          1. Synopsis
          2. Description
          3. Options
          4. Notes
          5. See Also
        9. A.9. smbcquotas
          1. Synopsis
          2. Description
          3. Options
          4. Quota_Set_Comand
          5. Exit Status
        10. A.10. smbd
          1. Synopsis
          2. Description
          3. Options
          4. Files
          5. Limitations
          6. Environment Variables
          7. PAM Interaction
          8. Diagnostics
          9. Signals
          10. See Also
        11. A.11. smbpasswd
          1. Synopsis
          2. Description
          3. File Format
          4. See Also
        12. A.12. smbpasswd
          1. Synopsis
          2. Description
          3. Options
          4. Notes
          5. See Also
        13. A.13. smbstatus
          1. Synopsis
          2. Description
          3. Options
          4. See Also
        14. A.14. smbtree
          1. Synopsis
          2. Description
          3. Options
        15. A.15. testparm
          1. Synopsis
          2. Description
          3. Options
          4. Files
          5. Diagnostics
          6. See Also
        16. A.16. wbinfo
          1. Synopsis
          2. Description
          3. Options
          4. Exit Status
          5. See Also
        17. A.17. winbindd
          1. Synopsis
          2. Description
          3. Options
          4. Name And Id Resolution
          5. Configuration
          6. Example Setup
          7. Notes
          8. Signals
          9. Files
          10. See Also
      7. B. The GNU General Public License
        1. Preamble
        2. Terms and Conditions for Copying, Distribution and Modification
        3. No Warranty
        4. End of Terms and Conditions
      8. Glossary

    Product information

    • Title: Official Samba-3 HOWTO and Reference Guide, The
    • Author(s): John H. Terpstra, Jelmer R. Vernooij
    • Release date: October 2003
    • Publisher(s): Pearson
    • ISBN: 9780131453555