book

Official Samba-3 HOWTO and Reference Guide, The

by John H. Terpstra, Jelmer R. Vernooij

October 2003

Beginner

736 pages

17h 12m

English

Pearson

Read now

Unlock full access

Copyright
Praise for The Official Samba-3 HOWTO and Reference Guide
Bruce Perens’ Open Source Series
Attribution
Abstract
Foreword
List of Figures
List of Tables
I. General Installation
Preface and Introduction
What Is Samba?Why This Book?Book Structure and Layout

1. How to Install and Test Samba
1.1. Obtaining and Installing Samba1.2. Configuring Samba (smb.conf)1.2.1. Configuration file syntax1.2.2. Example Configuration1.2.2.1. Test Your Config File with testparm1.2.3. SWAT1.3. List Shares Available on the Server1.4. Connect with a UNIX Client1.5. Connect from a Remote SMB Client1.6. What If Things Don’t Work?1.7. Common Errors1.7.1. Large Number of smbd Processes1.7.2. Error Message: open_oplock_ipc1.7.3. “The network name cannot be found”
2. Fast Start: Cure for Impatience
2.1. Features and Benefits2.2. Description of Example Sites2.3. Worked Examples2.3.1. Stand-alone Server2.3.1.1. Annonymous Read-Only Document Server2.3.1.2. Anonymous Read-Write Document Server2.3.1.3. Anonymous Print Server2.3.1.4. Secure Read-Write File and Print Server2.3.2. Domain Member Server2.3.2.1. Example Configuration2.3.3. Domain Controller2.3.3.1. Example: Engineering Office2.3.3.2. A Big OrganizationThe Primary Domain ControllerBackup Domain Controller
II. Server Configuration Basics
3. Server Types and Security Modes
3.1. Features and Benefits3.2. Server Types3.3. Samba Security Modes3.3.1. User Level Security3.3.1.1. Example Configuration3.3.2. Share Level Security3.3.2.1. Example Configuration3.3.3. Domain Security Mode (User Level Security)3.3.3.1. Example Configuration3.3.4. ADS Security Mode (User Level Security)3.3.4.1. Example Configuration3.3.5. Server Security (User Level Security)3.3.5.1. Example Configuration3.4. Password Checking3.5. Common Errors3.5.1. What Makes Samba a Server?3.5.2. What Makes Samba a Domain Controller?3.5.3. What Makes Samba a Domain Member?3.5.4. Constantly Losing Connections to Password Server
4. Domain Control
4.1. Features and Benefits4.2. Basics of Domain Control4.2.1. Domain Controller Types4.2.2. Preparing for Domain Control4.3. Domain Control — Example Configuration4.4. Samba ADS Domain Control4.5. Domain and Network Logon Configuration4.5.1. Domain Network Logon Service4.5.1.1. Example Configuration4.5.1.2. The Special Case of MS Windows XP Home Edition4.5.1.3. The Special Case of Windows 9x/Me4.5.2. Security Mode and Master Browsers4.6. Common Errors4.6.1. “$” Cannot Be Included in Machine Name4.6.2. Joining Domain Fails Because of Existing Machine Account4.6.3. The System Cannot Log You On (C000019B)4.6.4. The Machine Trust Account Is Not Accessible4.6.5. Account Disabled4.6.6. Domain Controller Unavailable4.6.7. Cannot Log onto Domain Member Workstation After Joining Domain
5. Backup Domain Control
5.1. Features and Benefits5.2. Essential Background Information5.2.1. MS Windows NT4-style Domain Control5.2.1.1. Example PDC Configuration5.2.2. LDAP Configuration Notes5.2.3. Active Directory Domain Control5.2.4. What Qualifies a Domain Controller on the Network?5.2.5. How does a Workstation find its Domain Controller?5.2.5.1. NetBIOS Over TCP/IP Enabled5.2.5.2. NetBIOS Over TCP/IP Disabled5.3. Backup Domain Controller Configuration5.3.1. Example Configuration5.4. Common Errors5.4.1. Machine Accounts Keep Expiring5.4.2. Can Samba Be a Backup Domain Controller to an NT4 PDC?5.4.3. How Do I Replicate the smbpasswd File?5.4.4. Can I Do This All with LDAP?
6. Domain Membership
6.1. Features and Benefits6.2. MS Windows Workstation/Server Machine Trust Accounts6.2.1. Manual Creation of Machine Trust Accounts6.2.2. Managing Domain Machine Accounts using NT4 Server Manager6.2.3. On-the-Fly Creation of Machine Trust Accounts6.2.4. Making an MS Windows Workstation or Server a Domain Member6.2.4.1. Windows 200x/XP Professional Client6.2.4.2. Windows NT4 Client6.2.4.3. Samba Client6.3. Domain Member Server6.3.1. Joining an NT4-type Domain with Samba-36.3.2. Why Is This Better Than security = server?6.4. Samba ADS Domain Membership6.4.1. Configure smb.conf6.4.2. Configure /etc/krb5.conf6.4.3. Create the Computer Account6.4.3.1. Possible Errors6.4.4. Testing Server Setup6.4.5. Testing with smbclient6.4.6. Notes6.5. Sharing User ID Mappings between Samba Domain Members6.6. Common Errors6.6.1. Cannot Add Machine Back to Domain6.6.2. Adding Machine to Domain Fails6.6.3. I Can’t Join a Windows 2003 PDC
7. Stand-Alone Servers
7.1. Features and Benefits7.2. Background7.3. Example Configuration7.3.1. Reference Documentation Server7.3.2. Central Print Serving7.4. Common Errors
8. MS Windows Network Configuration Guide
8.1. Features and Benefits8.2. Technical Details8.2.1. TCP/IP Configuration8.2.1.1. MS Windows XP Professional8.2.1.2. MS Windows 20008.2.1.3. MS Windows Me8.2.2. Joining a Domain: Windows 2000/XP Professional8.2.3. Domain Logon Configuration: Windows 9x/Me8.3. Common Errors
III. Advanced Configuration
9. Network Browsing
9.1. Features and Benefits9.2. What Is Browsing?9.3. Discussion9.3.1. NetBIOS over TCP/IP9.3.2. TCP/IP without NetBIOS9.3.3. DNS and Active Directory9.4. How Browsing Functions9.4.1. Configuring WORKGROUP Browsing9.4.2. DOMAIN Browsing Configuration9.4.3. Forcing Samba to Be the Master9.4.4. Making Samba the Domain Master9.4.5. Note about Broadcast Addresses9.4.6. Multiple Interfaces9.4.7. Use of the Remote Announce Parameter9.4.8. Use of the Remote Browse Sync Parameter9.5. WINS — The Windows Internetworking Name Server9.5.1. WINS Server Configuration9.5.2. WINS Replication9.5.3. Static WINS Entries9.6. Helpful Hints9.6.1. Windows Networking Protocols9.6.2. Name Resolution Order9.7. Technical Overview of Browsing9.7.1. Browsing Support in Samba9.7.2. Problem Resolution9.7.3. Cross-Subnet Browsing9.7.3.1. Behavior of Cross-Subnet Browsing9.8. Common Errors9.8.1. How Can One Flush the Samba NetBIOS Name Cache without Restarting Samba?9.8.2. Server Resources Can Not Be Listed9.8.3. I get an ’Unable to browse the network’ error9.8.4. Browsing of Shares and Directories is Very Slow
10. Account Information Databases
10.1. Features and Benefits10.1.1. Backward Compatibility Backends10.1.2. New Backends10.2. Technical Information10.2.1. Important Notes About Security10.2.1.1. Advantages of Encrypted Passwords10.2.1.2. Advantages of Non-Encrypted Passwords10.2.2. Mapping User Identifiers between MS Windows and UNIX10.2.3. Mapping Common UIDs/GIDs on Distributed Machines10.3. Account Management Tools10.3.1. The smbpasswd Command10.3.2. The pdbedit Command10.4. Password Backends10.4.1. Plaintext10.4.2. smbpasswd — Encrypted Password Database10.4.3. tdbsam10.4.4. ldapsam10.4.4.1. Supported LDAP Servers10.4.4.2. Schema and Relationship to the RFC 2307 posixAccount10.4.4.3. OpenLDAP Configuration10.4.4.4. Initialize the LDAP Database10.4.4.5. Configuring Samba10.4.4.6. Accounts and Groups Management10.4.4.7. Security and sambaSamAccount10.4.4.8. LDAP Special Attributes for sambaSamAccounts10.4.4.9. Example LDIF Entries for a sambaSamAccount10.4.4.10. Password Synchronization10.4.5. MySQL10.4.5.1. Creating the Database10.4.5.2. Configuring10.4.5.3. Using Plaintext Passwords or Encrypted Password10.4.5.4. Getting Non-Column Data from the Table10.4.6. XML10.5. Common Errors10.5.1. Users Cannot Logon10.5.2. Users Being Added to the Wrong Backend Database10.5.3. Configuration of auth methods
11. Group Mapping — MS Windows and Unix
11.1. Features and Benefits11.2. Discussion11.2.1. Default Users, Groups and Relative Identifiers11.2.2. Example Configuration11.3. Configuration Scripts11.3.1. Sample smb.conf Add Group Script11.3.2. Script to Configure Group Mapping11.4. Common Errors11.4.1. Adding Groups Fails11.4.2. Adding MS Windows Groups to MS Windows Groups Fails11.4.3. Adding Domain Users to the Power Users Group
12. File, Directory and Share Access Controls
12.1. Features and Benefits12.2. File System Access Controls12.2.1. MS Windows NTFS Comparison with UNIX File Systems12.2.2. Managing Directories12.2.3. File and Directory Access Control12.3. Share Definition Access Controls12.3.1. User and Group-Based Controls12.3.2. File and Directory Permissions-Based Controls12.3.3. Miscellaneous Controls12.4. Access Controls on Shares12.4.1. Share Permissions Management12.4.1.1. Windows NT4 Workstation/Server12.4.1.2. Windows 200x/XP12.5. MS Windows Access Control Lists and UNIX Interoperability12.5.1. Managing UNIX Permissions Using NT Security Dialogs12.5.2. Viewing File Security on a Samba Share12.5.3. Viewing File Ownership12.5.4. Viewing File or Directory Permissions12.5.4.1. File Permissions12.5.4.2. Directory Permissions12.5.5. Modifying File or Directory Permissions12.5.6. Interaction with the Standard Samba “create mask” Parameters12.5.7. Interaction with the Standard Samba File Attribute Mapping12.6. Common Errors12.6.1. Users Cannot Write to a Public Share12.6.2. File Operations Done as root with force user Set12.6.3. MS Word with Samba Changes Owner of File
13. File and Record Locking
13.1. Features and Benefits13.2. Discussion13.2.1. Opportunistic Locking Overview13.2.1.1. Exclusively Accessed Shares13.2.1.2. Multiple-Accessed Shares or Files13.2.1.3. UNIX or NFS Client-Accessed Files13.2.1.4. Slow and/or Unreliable Networks13.2.1.5. Multi-User Databases13.2.1.6. PDM Data Shares13.2.1.7. Beware of Force User13.2.1.8. Advanced Samba Opportunistic Locking Parameters13.2.1.9. Mission-Critical High-Availability13.3. Samba Opportunistic Locking Control13.3.1. Example Configuration13.3.1.1. Disabling Oplocks13.3.1.2. Disabling Kernel Oplocks13.4. MS Windows Opportunistic Locking and Caching Controls13.4.1. Workstation Service Entries13.4.2. Server Service Entries13.5. Persistent Data Corruption13.6. Common Errors13.6.1. locking.tdb Error Messages13.6.2. Problems Saving Files in MS Office on Windows XP13.6.3. Long Delays Deleting Files Over Network with XP SP113.7. Additional Reading
14. Securing Samba
14.1. Introduction14.2. Features and Benefits14.3. Technical Discussion of Protective Measures and Issues14.3.1. Using Host-Based Protection14.3.2. User-Based Protection14.3.3. Using Interface Protection14.3.4. Using a Firewall14.3.5. Using IPC$ Share-Based Denials14.3.6. NTLMv2 Security14.4. Upgrading Samba14.5. Common Errors14.5.1. Smbclient Works on Localhost, but the Network Is Dead14.5.2. Why Can Users Access Home Directories of Other Users?
15. Interdomain Trust Relationships
15.1. Features and Benefits15.2. Trust Relationship Background15.3. Native MS Windows NT4 Trusts Configuration15.3.1. Creating an NT4 Domain Trust15.3.2. Completing an NT4 Domain Trust15.3.3. Inter-Domain Trust Facilities15.4. Configuring Samba NT-Style Domain Trusts15.4.1. Samba as the Trusted Domain15.4.2. Samba as the Trusting Domain15.5. NT4-Style Domain Trusts with Windows 200015.6. Common Errors15.6.1. Browsing of Trusted Domain Fails
16. Hosting a Microsoft Distributed File System Tree
16.1. Features and Benefits16.2. Common Errors16.2.1. MSDFS UNIX Path Is Case-Critical
17. Classical Printing Support
17.1. Features and Benefits17.2. Technical Introduction17.2.1. Client to Samba Print Job Processing17.2.2. Printing Related Configuration Parameters17.3. Simple Print Configuration17.3.1. Verifing Configuration with testparm17.3.2. Rapid Configuration Validation17.4. Extended Printing Configuration17.4.1. Detailed Explanation Settings17.4.1.1. The [global] Section17.4.1.2. The [printers] Section17.4.1.3. Any [my_printer_name] Section17.4.1.4. Print Commands17.4.1.5. Default UNIX System Printing Commands17.4.1.6. Custom Print Commands17.5. Printing Developments Since Samba-2.217.5.1. Point’n’Print Client Drivers on Samba Servers17.5.2. The Obsoleted [printer$] Section17.5.3. Creating the [print$] Share17.5.4. [print$] Section Parameters17.5.5. The [print$] Share Directory17.6. Installing Drivers into [print$]17.6.1. Add Printer Wizard Driver Installation17.6.2. Installing Print Drivers Using rpcclient17.6.2.1. Identifying Driver Files17.6.2.2. Obtaining Driver Files from Windows Client [print$] Shares17.6.2.3. Installing Driver Files into [print$]17.6.2.4. smbclient to Confirm Driver Installation17.6.2.5. Running rpcclient with adddriver17.6.2.6. Checking adddriver Completion17.6.2.7. Check Samba for Driver Recognition17.6.2.8. Specific Driver Name Flexibility17.6.2.9. Running rpcclient with the setdriver17.7. Client Driver Installation Procedure17.7.1. First Client Driver Installation17.7.2. Setting Device Modes on New Printers17.7.3. Additional Client Driver Installation17.7.4. Always Make First Client Connection as root or “printer admin”17.8. Other Gotchas17.8.1. Setting Default Print Options for Client Drivers17.8.2. Supporting Large Numbers of Printers17.8.3. Adding New Printers with the Windows NT APW17.8.4. Error Message: “Cannot connect under a different Name”17.8.5. Take Care When Assembling Driver Files17.8.6. Samba and Printer Ports17.8.7. Avoiding Common Client Driver Misconfiguration17.9. The Imprints Toolset17.9.1. What is Imprints?17.9.2. Creating Printer Driver Packages17.9.3. The Imprints Server17.9.4. The Installation Client17.10. Adding Network Printers without User Interaction17.11. The addprinter Command17.12. Migration of Classical Printing to Samba17.13. Publishing Printer Information in Active Directory or LDAP17.14. Common Errors17.14.1. I Give My Root Password but I Do Not Get Access17.14.2. My Print Jobs Get Spooled into the Spooling Directory, but Then Get Lost
18. Cups Printing Support
18.1. Introduction18.1.1. Features and Benefits18.1.2. Overview18.2. Basic CUPS Support Configuration18.2.1. Linking smbd with libcups.so18.2.2. Simple smb.conf Settings for CUPS18.2.3. More Complex CUPS smb.conf Settings18.3. Advanced Configuration18.3.1. Central Spooling vs. “Peer-to-Peer” Printing18.3.2. Raw Print Serving — Vendor Drivers on Windows Clients18.3.3. Installation of Windows Client Drivers18.3.4. Explicitly Enable “raw” Printing for application/octet-stream18.3.5. Driver Upload Methods18.4. Advanced Intelligent Printing with PostScript Driver Download18.4.1. GDI on Windows – PostScript on UNIX18.4.2. Windows Drivers, GDI and EMF18.4.3. UNIX Printfile Conversion and GUI Basics18.4.4. PostScript and Ghostscript18.4.5. Ghostscript — the Software RIP for Non-PostScript Printers18.4.6. PostScript Printer Description (PPD) Specification18.4.7. Using Windows-Formatted Vendor PPDs18.4.8. CUPS Also Uses PPDs for Non-PostScript Printers18.5. The CUPS Filtering Architecture18.5.1. MIME Types and CUPS Filters18.5.2. MIME Type Conversion Rules18.5.3. Filtering Overview18.5.3.1. Filter requirements18.5.4. Prefilters18.5.5. pstops18.5.6. pstoraster18.5.7. imagetops and imagetoraster18.5.8. rasterto [printers specific]18.5.9. CUPS Backends18.5.10. The Role of cupsomatic/foomatic18.5.11. The Complete Picture18.5.12. mime.convs18.5.13. “Raw” Printing18.5.14. application/octet-stream Printing18.5.15. PostScript Printer Descriptions (PPDs) for Non-PS Printers18.5.16. cupsomatic/foomatic-rip Versus native CUPS Printing18.5.17. Examples for Filtering Chains18.5.18. Sources of CUPS Drivers/PPDs18.5.19. Printing with Interface Scripts18.6. Network Printing (Purely Windows)18.6.1. From Windows Clients to an NT Print Server18.6.2. Driver Execution on the Client18.6.3. Driver Execution on the Server18.7. Network Printing (Windows Clients — UNIX/Samba Print Servers)18.7.1. From Windows Clients to a CUPS/Samba Print Server18.7.2. Samba Receiving Jobfiles and Passing Them to CUPS18.8. Network PostScript RIP18.8.1. PPDs for Non-PS Printers on UNIX18.8.2. PPDs for Non-PS Printers on Windows18.9. Windows Terminal Servers (WTS) as CUPS Clients18.9.1. Printer Drivers Running in “Kernel Mode” Cause Many Problems18.9.2. Workarounds Impose Heavy Limitations18.9.3. CUPS: A “Magical Stone”?18.9.4. PostScript Drivers with No Major Problems — Even in Kernel Mode18.10. Configuring CUPS for Driver Download18.10.1. cupsaddsmb: The Unknown Utility18.10.2. Prepare Your smb.conf for cupsaddsmb18.10.3. CUPS “PostScript Driver for Windows NT/200x/XP”18.10.4. Recognizing Different Driver Files18.10.5. Acquiring the Adobe Driver Files18.10.6. ESP Print Pro PostScript Driver for Windows NT/200x/XP18.10.7. Caveats to be Considered18.10.8. Windows CUPS PostScript Driver Versus Adobe Driver18.10.9. Run cupsaddsmb (Quiet Mode)18.10.10. Run cupsaddsmb with Verbose Output18.10.11. Understanding cupsaddsmb18.10.12. How to Recognize If cupsaddsmb Completed Successfully18.10.13. cupsaddsmb with a Samba PDC18.10.14. cupsaddsmb Flowchart18.10.15. Installing the PostScript Driver on a Client18.10.16. Avoiding Critical PostScript Driver Settings on the Client18.11. Installing PostScript Driver Files Manually Using rpcclient18.11.1. A Check of the rpcclient man Page18.11.2. Understanding the rpcclient man Page18.11.3. Producing an Example by Querying a Windows Box18.11.4. Requirements for adddriver and setdriver to Succeed18.11.5. Manual Driver Installation in 15 Steps18.11.6. Troubleshooting Revisited18.12. The Printing *.tdb Files18.12.1. Trivial Database Files18.12.2. Binary Format18.12.3. Losing *.tdb Files18.12.4. Using tdbbackup18.13. CUPS Print Drivers from Linuxprinting.org18.13.1. foomatic-rip and Foomatic Explained18.13.1.1. 690 “Perfect” Printers18.13.1.2. How the Printing HOWTO Started It All18.13.1.3. Foomatic’s Strange Name18.13.1.4. cupsomatic, pdqomatic, lpdomatic, directomatic18.13.1.5. The Grand Unification Achieved18.13.1.6. Driver Development Outside18.13.1.7. Forums, Downloads, Tutorials, Howtos — also for Mac OS X and Commercial UNIX18.13.1.8. Foomatic Database-Generated PPDs18.13.2. foomatic-rip and Foomatic-PPD Download and Installation18.14. Page Accounting with CUPS18.14.1. Setting Up Quotas18.14.2. Correct and Incorrect Accounting18.14.3. Adobe and CUPS PostScript Drivers for Windows Clients18.14.4. The page_log File Syntax18.14.5. Possible Shortcomings18.14.6. Future Developments18.15. Additional Material18.16. Auto-Deletion or Preservation of CUPS Spool Files18.16.1. CUPS Configuration Settings Explained18.16.2. Pre-Conditions18.16.3. Manual Configuration18.17. Printing from CUPS to Windows Attached Printers18.18. More CUPS-Filtering Chains18.19. Common Errors18.19.1. Windows 9x/ME Client Can’t Install Driver18.19.2. “cupsaddsmb” Keeps Asking for Root Password in Never-ending Loop18.19.3. “cupsaddsmb” Errors18.19.4. Client Can’t Connect to Samba Printer18.19.5. New Account Reconnection from Windows 200x/XP Troubles18.19.6. Avoid Being Connected to the Samba Server as the Wrong User18.19.7. Upgrading to CUPS Drivers from Adobe Drivers18.19.8. Can’t Use “cupsaddsmb” on Samba Server Which Is a PDC18.19.9. Deleted Windows 200x Printer Driver Is Still Shown18.19.10. Windows 200x/XP ”Local Security Policies”18.19.11. Administrator Cannot Install Printers for All Local Users18.19.12. Print Change Notify Functions on NT-clients18.19.13. WinXP-SP118.19.14. Print Options for All Users Can’t Be Set on Windows 200x/XP18.19.15. Most Common Blunders in Driver Settings on Windows Clients18.19.16. cupsaddsmb Does Not Work with Newly Installed Printer18.19.17. Permissions on /var/spool/samba/ Get Reset After Each Reboot18.19.18. Print Queue Called “lp” Mis-handles Print Jobs18.19.19. Location of Adobe PostScript Driver Files for “cupsaddsmb”18.20. Overview of the CUPS Printing Processes
19. Stackable VFS Modules
19.1. Features and Benefits19.2. Discussion19.3. Included Modules19.3.1. audit19.3.2. extd_audit19.3.3. fake_perms19.3.4. recycle19.3.5. netatalk19.4. VFS Modules Available Elsewhere19.4.1. DatabaseFS19.4.2. vscan
20. Winbind: Use of Domain Accounts
20.1. Features and Benefits20.2. Introduction20.3. What Winbind Provides20.3.1. Target Uses20.4. How Winbind Works20.4.1. Microsoft Remote Procedure Calls20.4.2. Microsoft Active Directory Services20.4.3. Name Service Switch20.4.4. Pluggable Authentication Modules20.4.5. User and Group ID Allocation20.4.6. Result Caching20.5. Installation and Configuration20.5.1. Introduction20.5.2. Requirements20.5.3. Testing Things Out20.5.3.1. Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris20.5.3.2. NSS Winbind on AIX20.5.3.3. Configure smb.conf20.5.3.4. Join the Samba Server to the PDC Domain20.5.3.5. Starting and Testing the winbindd Daemon20.5.3.6. Fix the init.d Startup ScriptsLinuxSolarisRestarting20.5.3.7. Configure Winbind and PAMLinux/FreeBSD-specific PAM configurationSolaris-specific configuration20.6. Conclusion20.7. Common Errors20.7.1. NSCD Problem Warning20.7.2. Winbind Is Not Resolving Users and Groups
21. Advanced Network Management
21.1. Features and Benefits21.2. Remote Server Administration21.3. Remote Desktop Management21.3.1. Remote Management from NoMachine.Com21.4. Network Logon Script Magic21.4.1. Adding Printers without User Intervention
22. System and Account Policies
22.1. Features and Benefits22.2. Creating and Managing System Policies22.2.1. Windows 9x/ME Policies22.2.2. Windows NT4-Style Policy Files22.2.2.1. Registry Spoiling22.2.3. MS Windows 200x/XP Professional Policies22.2.3.1. Administration of Windows 200x/XP Policies22.3. Managing Account/User Policies22.4. Management Tools22.4.1. Samba Editreg Toolset22.4.2. Windows NT4/200x22.4.3. Samba PDC22.5. System Startup and Logon Processing Overview22.6. Common Errors22.6.1. Policy Does Not Work
23. Desktop Profile Management
23.1. Features and Benefits23.2. Roaming Profiles23.2.1. Samba Configuration for Profile Handling23.2.1.1. NT4/200x User Profiles23.2.1.2. Windows 9x/Me User Profiles23.2.1.3. Mixed Windows 9x/Me and Windows NT4/200x User Profiles23.2.1.4. Disabling Roaming Profile Support23.2.2. Windows Client Profile Configuration Information23.2.2.1. Windows 9x/Me Profile Setup23.2.2.2. Windows NT4 Workstation23.2.2.3. Windows 2000/XP Professional23.2.3. Sharing Profiles between W9x/Me and NT4/200x/XP Workstations23.2.4. Profile Migration from Windows NT4/200x Server to Samba23.2.4.1. Windows NT4 Profile Management Tools23.2.4.2. Side Bar Notes23.2.4.3. moveuser.exe23.2.4.4. Get SID23.3. Mandatory Profiles23.4. Creating and Managing Group Profiles23.5. Default Profile for Windows Users23.5.1. MS Windows 9x/Me23.5.1.1. User Profile Handling with Windows 9x/Me23.5.2. MS Windows NT4 Workstation23.5.3. MS Windows 200x/XP23.6. Common Errors23.6.1. Configuring Roaming Profiles for a Few Users or Groups23.6.2. Cannot Use Roaming Profiles23.6.3. Changing the Default Profile
24. Pam-Based Distributed Authentication
24.1. Features and Benefits24.2. Technical Discussion24.2.1. PAM Configuration Syntax24.2.1.1. Anatomy of /etc/pam.d Entries24.2.2. Example System Configurations24.2.2.1. PAM: Original Login Config24.2.2.2. PAM: Login Using pam_smbpass24.2.3. smb.conf PAM Configuration24.2.4. Remote CIFS Authentication Using winbindd.so24.2.5. Password Synchronization Using pam_smbpass.so24.2.5.1. Password Synchronization Configuration24.2.5.2. Password Migration Configuration24.2.5.3. Mature Password Configuration24.2.5.4. Kerberos Password Integration Configuration24.3. Common Errors24.3.1. pam_winbind Problem24.3.2. Winbind Is Not Resolving Users and Groups
25. Integrating MS Windows Networks With Samba
25.1. Features and Benefits25.2. Background Information25.3. Name Resolution in a Pure UNIX/Linux World25.3.1. /etc/hosts25.3.2. /etc/resolv.conf25.3.3. /etc/host.conf25.3.4. /etc/nsswitch.conf25.4. Name Resolution as Used within MS Windows Networking25.4.1. The NetBIOS Name Cache25.4.2. The LMHOSTS File25.4.3. HOSTS File25.4.4. DNS Lookup25.4.5. WINS Lookup25.5. Common Errors25.5.1. Pinging Works Only in One Way25.5.2. Very Slow Network Connections25.5.3. Samba Server Name Change Problem
26. Unicode/Charsets
26.1. Features and Benefits26.2. What Are Charsets and Unicode?26.3. Samba and Charsets26.4. Conversion from Old Names26.5. Common Errors26.5.1. CP850.so Can’t Be Found
27. Backup Techniques
27.1. Features and Benefits27.2. Discussion of Backup Solutions27.2.1. BackupPC27.2.2. Rsync27.2.3. Amanda27.2.4. BOBS: Browseable Online Backup System
28. High Availability
28.1. Features and Benefits28.2. Technical Discussion28.2.1. The Ultimate Goal28.2.2. Why Is This So Hard?28.2.2.1. The Front-End Challenge28.2.2.2. De-multiplexing SMB Requests28.2.2.3. The Distributed File System Challenge28.2.2.4. Restrictive Contraints on Distributed File Systems28.2.2.5. Server Pool Communications28.2.2.6. Server Pool Communications Demands28.2.2.7. Required Modifications to Samba28.2.3. A Simple Solution28.2.4. High Availability Server Products28.2.5. MS-DFS: The Poor Man’s Cluster28.2.6. Conclusions
IV. Migration and Updating
29. Upgrading From Samba-2.X to Samba-3.0.0
29.1. Quick Migration Guide29.2. New Features in Samba-329.3. Configuration Parameter Changes29.3.1. Removed Parameters29.3.2. New Parameters29.3.3. Modified Parameters (Changes in Behavior):29.4. New Functionality29.4.1. Databases29.4.2. Changes in Behavior29.4.3. Passdb Backends and Authentication29.4.4. LDAP29.4.4.1. New Schema29.4.4.2. New Suffix for Searching29.4.4.3. IdMap LDAP Support
30. Migration From NT4 PDC to Samba-3 PDC
30.1. Planning and Getting Started30.1.1. Objectives30.1.1.1. Domain Layout30.1.1.2. Server Share and Directory Layout30.1.1.3. Logon Scripts30.1.1.4. Profile Migration/Creation30.1.1.5. User and Group Accounts30.1.2. Steps in Migration Process30.2. Migration Options30.2.1. Planning for Success30.2.2. Samba-3 Implementation Choices
31. SWAT — The Samba Web Administration Tool
31.1. Features and Benefits31.2. Guidelines and Technical Tips31.2.1. Validate SWAT Installation31.2.1.1. Locating the swat File31.2.1.2. Locating the SWAT Support Files31.2.2. Enabling SWAT for Use31.2.3. Securing SWAT through SSL31.2.4. Enabling SWAT Internationalization Support31.3. Overview and Quick Tour31.3.1. The SWAT Home Page31.3.2. Global Settings31.3.3. Share Settings31.3.4. Printers Settings31.3.5. The SWAT Wizard31.3.6. The Status Page31.3.7. The View Page31.3.8. The Password Change Page31.4. SWAT View Page Displays Incorrectly
V. Troubleshooting
32. The Samba Checklist
32.1. Introduction32.2. Assumptions32.3. The Tests
33. Analyzing and Solving Samba Problems
33.1. Diagnostics Tools33.1.1. Debugging with Samba Itself33.1.2. Tcpdump33.1.3. Ethereal33.1.4. The Windows Network Monitor33.1.4.1. Installing Network Monitor on an NT Workstation33.1.4.2. Installing Network Monitor on Windows 9x/Me33.2. Useful URLs33.3. Getting Mailing List Help33.4. How to Get Off the Mailing Lists
34. Reporting Bugs
34.1. Introduction34.2. General Information34.3. Debug Levels34.4. Internal Errors34.5. Attaching to a Running Process34.6. Patches
VI. Appendixes
35. How to Compile Samba
35.1. Access Samba Source Code via CVS35.1.1. Introduction35.1.2. CVS Access to samba.org35.1.2.1. Access via CVSweb35.1.2.2. Access via CVS35.2. Accessing the Samba Sources via rsync and ftp35.3. Verifying Samba’s PGP Signature35.4. Building the Binaries35.4.1. Compiling Samba with Active Directory Support35.4.1.1. Installing the Required Packages for Debian35.4.1.2. Installing the Required Packages for Red Hat Linux35.4.1.3. SuSE Linux Package Requirements35.5. Starting the smbd and nmbd35.5.1. Starting from inetd.conf35.5.2. Alternative: Starting smbd as a Daemon
36. Portability
36.1. HPUX36.2. SCO UNIX36.3. DNIX36.4. Red Hat Linux36.5. AIX36.5.1. Sequential Read Ahead36.6. Solaris36.6.1. Locking Improvements36.6.2. Winbind on Solaris 9
37. Samba and Other CIFS Clients
37.1. Macintosh Clients37.2. OS2 Client37.2.1. Configuring OS/2 Warp Connect or OS/2 Warp 437.2.2. Configuring Other Versions of OS/237.2.3. Printer Driver Download for OS/2 Clients37.3. Windows for Workgroups37.3.1. Latest TCP/IP Stack from Microsoft37.3.2. Delete .pwl Files After Password Change37.3.3. Configuring Windows for Workgroups Password Handling37.3.4. Password Case Sensitivity37.3.5. Use TCP/IP as Default Protocol37.3.6. Speed Improvement37.4. Windows 95/9837.4.1. Speed Improvement37.5. Windows 2000 Service Pack 237.6. Windows NT 3.1
38. Samba Performance Tuning
38.1. Comparisons38.2. Socket Options38.3. Read Size38.4. Max Xmit38.5. Log Level38.6. Read Raw38.7. Write Raw38.8. Slow Logins38.9. Client Tuning38.10. Samba Performance Problem Due to Changing Linux Kernel38.11. Corrupt tdb Files38.12. Samba Performance is Very Slow
39. DNS and DHCP Configuration Guide
39.1. Features and Benefits39.2. Example Configuration39.2.1. Dynamic DNS39.2.2. DHCP Server
A. Manual Pages
A.1. smb.confSynopsisFile FormatSection DescriptionsSpecial SectionsThe [global] sectionThe [homes] sectionThe [printers] sectionParametersVariable SubstitutionsName ManglingNote About Username/Password ValidationExplanation of Each ParameterWarningsSee AlsoA.2. nmblookupSynopsisDescriptionOptionsExamplesSee AlsoA.3. rpcclientSynopsisDescriptionOptionsCommandsLSARPCLSARPC-DSREGSRVSVCSAMRSpoolssNetlogonGeneral CommandsBugsA.4. smbcaclsSynopsisDescriptionOptionsACL FormatExit StatusA.5. smbclientSynopsisDescriptionOptionsOPERATIONSNOTESEnvironment VariablesInstallationDiagnosticsA.6. netSynopsisDescriptionOptionsCommandsChangesecretpwTime[RPC|ADS] Join [TYPE] [-U username[%password]] [options][RPC] Oldjoin [options][RPC|ADS] User[RPC|ADS] Group[RAP|RPC] Share[RPC|RAP] File[RAP|RPC] File UserSessionRAP DOMAINRAP PRINTQRAP GROUPMEMBERRAP SERVICELOOKUPCACHEGETLOCALSID [DOMAIN]SETLOCALSID S-1-5-21-x-y-zGROUPMAPMAXRIDRPC INFO[RPC|ADS] TESTJOIN[RPC|ADS] CHANGETRUSTPWRPC TRUSTDOMRPC ABORTSHUTDOWNSHUTDOWN [-t timeout] [-r] [-f] [-C message]SAMDUMPVAMPIREGETSIDADS LEAVEADS STATUSADS PRINTERADS Search EXPRESSION ATTRIBUTES...ADS DN DN (attributes)WORKGROUPHELP [COMMAND]A.7. nmbdSynopsisDescriptionOPTIONSFilesSignalsSee AlsoA.8. pdbeditSynopsisDescriptionOptionsNotesSee AlsoA.9. smbcquotasSynopsisDescriptionOptionsQuota_Set_ComandExit StatusA.10. smbdSynopsisDescriptionOptionsFilesLimitationsEnvironment VariablesPAM InteractionDiagnosticsSignalsSee AlsoA.11. smbpasswdSynopsisDescriptionFile FormatSee AlsoA.12. smbpasswdSynopsisDescriptionOptionsNotesSee AlsoA.13. smbstatusSynopsisDescriptionOptionsSee AlsoA.14. smbtreeSynopsisDescriptionOptionsA.15. testparmSynopsisDescriptionOptionsFilesDiagnosticsSee AlsoA.16. wbinfoSynopsisDescriptionOptionsExit StatusSee AlsoA.17. winbinddSynopsisDescriptionOptionsName And Id ResolutionConfigurationExample SetupNotesSignalsFilesSee Also
B. The GNU General Public License
PreambleTerms and Conditions for Copying, Distribution and ModificationNo WarrantyEnd of Terms and Conditions
Glossary

Content preview from Official Samba-3 HOWTO and Reference Guide, The

List of Tables

5.1	Domain Backend Account Distribution Options
6.1	Assumptions
9.1	Browse Subnet Example 1
9.2	Browse Subnet Example 2
9.3	Browse Subnet Example 3
9.4	Browse Subnet Example 4
10.1	Attributes in the sambaSamAccount objectclass (LDAP) — Part A
10.2	Attributes in the sambaSamAccount objectclass (LDAP) — Part B
10.3	Possible ldap passwd sync values
10.4	Basic smb.conf options for MySQL passdb backend
10.5	MySQL field names for MySQL passdb backend
11.1	Well-Known User Default RIDs
12.1	Managing Directories with UNIX and Windows
12.2	User and Group Based Controls
12.3	File and Directory Permission Based Controls
12.4	Other Controls
17.1	Default Printing Settings
18.1	PPDs shipped with CUPS
19.1	Extended Auditing Log Information
23.1	User Shell Folder Registry Keys Default ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Official Samba-3 HOWTO and Reference Guide, The, Second Edition

Publisher Resources

ISBN: 0131453556Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Official Samba-3 HOWTO and Reference Guide, The

by John H. Terpstra, Jelmer R. Vernooij

List of Tables

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.