book

Using Samba, 3rd Edition

by Gerald Carter, Jay Ts, Robert Eckstein

January 2007

Intermediate to advanced

450 pages

15h 1m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Using Samba, 3rd Edition
Preface
Audience for This BookHow This Book Is OrganizedConventions Used in This BookUsing Code ExamplesHow to Contact UsSafari® EnabledAcknowledgmentsGerald CarterJay TsRobert EcksteinAll
1. An Introduction to Samba
1.1. What Is Samba?1.2. What Can Samba Do for Me?1.2.1. Sharing Files1.2.2. Sharing a Printer1.2.3. Seeing Things from the Unix Side1.3. The Common Internet File System1.3.1. Understanding NetBIOS1.3.2. Getting a Name1.3.3. Node Types1.3.4. What’s in a Name?1.3.4.1. Resource names and types1.3.4.2. Group names and types1.3.5. Datagrams and Sessions1.4. Connecting to a CIFS File Share1.5. Browsing1.5.1. Browsing Elections1.6. Authentication: Peer-to-Peer Versus Domains1.7. What’s in Samba 3.0?1.7.1. Windows NT Domain Controller Support1.7.2. Active Directory Domain Member Servers1.7.3. Local Nested Groups1.7.4. Unicode and Internationalization1.7.5. User and Group Account Storage Plug-in Modules1.7.6. Stackable Virtual File System (VFS) Modules1.7.7. User Privileges1.7.8. Windows Automatic Driver Downloads1.7.9. But Wait, There’s More1.8. Future Research in Samba 4.01.9. What Can Samba Do?1.10. An Overview of the Samba Distribution1.11. How Can I Get Samba?
2. Installing Samba on a Unix System
2.1. Binary Packages2.2. Compiling from Source2.2.1. Downloading the Source Distribution2.2.2. Read the Documentation2.2.3. Configuring Samba2.2.4. Kerberos and LDAP2.2.5. Unicode and the iconv Library2.3. Compiling and Installing Samba2.3.1. Upgrading Your Installation2.3.2. Reconfiguring Samba2.3.3. Setting Search Paths2.4. Enabling the Samba Web Administration Tool (SWAT)2.5. A Basic Samba Configuration File2.5.1. Encrypted Passwords2.5.2. Using SWAT to Create an smb.conf File2.5.3. Testing the Configuration File2.6. Firewall Configuration2.7. Starting the Samba Daemons2.7.1. Starting the Daemons Manually2.7.2. Automatic Startup2.7.2.1. BSD Unix2.7.2.2. System V Unix and most Linux distributions2.7.2.3. Mac OS X2.7.2.4. Testing automatic startup2.7.3. Starting from inetd/xinetd2.7.4. Testing the Samba Daemons
3. Configuring Windows Clients
3.1. Windows Networking Concepts3.1.1. Networking Components3.1.2. IP Address3.1.3. Name Resolution3.1.3.1. Windows’ LMHOSTS and HOSTS3.2. Windows Setup3.2.1. Networking Components3.2.2. Configuring TCP/IP3.2.2.1. IP address and DNS servers3.2.2.2. WINS server3.2.3. Computer and Workgroup Names3.2.4. Connecting to the Samba Server3.2.5. Creating Local Users on Window Clients3.2.6. Browsing the Samba Server
4. The Samba Configuration File
4.1. Basic Syntax and Rules4.1.1. Configuration File Structure4.1.1.1. Whitespace, delimiters, and capitalization4.1.1.2. Line continuation4.1.1.3. Comments4.1.2. Updating a Live System4.1.3. Variables4.2. Special Sections4.2.1. The [global] Section4.2.2. The [homes] Section4.2.3. The [printers] Section4.3. Configuration File Options4.3.1. config file4.3.2. include4.3.3. copy4.4. Basic Server Configuration4.4.1. Server Configuration Options4.4.1.1. netbios name4.4.1.2. workgroup4.4.1.3. server string4.5. Disk Share Configuration4.5.1. Disk Share Configuration Options4.5.1.1. path4.5.1.2. comment4.5.1.3. volume4.5.1.4. read only, writable4.6. Networking Options with Samba4.6.1. Networking Options4.6.1.1. hosts allow4.6.1.2. hosts deny4.6.1.3. interfaces4.6.1.4. bind interfaces only4.7. Virtual Servers4.7.1. Virtual Server Configuration Options4.7.1.1. netbios aliases4.7.1.2. smb ports4.8. Logging Configuration Options4.8.1. Using syslog4.8.2. Logging Configuration Options4.8.2.1. log file4.8.2.2. log level4.8.2.3. max log size4.8.2.4. debug timestamp4.8.2.5. debug pid, debug uid4.8.2.6. syslog4.8.2.7. syslog only
5. Accounts, Authentication, and Authorization
5.1. Security Modes5.1.1. Guest Access with security = user5.1.2. Passwords and Authentication5.1.2.1. Clear-text passwords5.1.2.2. Pluggable Authentication Modules (PAM)5.1.2.3. NTLMv15.1.2.4. NTLMv25.2. User Management5.2.1. Security Identifiers5.2.2. Account Storage5.2.2.1. passdb backend = smbpasswd5.2.2.2. passdb backend = tdbsam5.2.2.3. passdb backend = ldapsam5.2.3. Username Maps5.2.4. Account Utilities5.2.5. Synchronizing Passwords5.3. Group Mapping5.4. User Privilege Management5.4.1. The net Tool5.5. Controlling Authorization for File Shares
6. Advanced Disk Shares
6.1. Special Share Names6.2. Filesystem Differences6.2.1. Name Mangling and Filename Lengths6.2.2. Case Sensitivity and Preservation6.2.3. Symbolic Links6.2.4. Hiding Files6.2.5. Locks and Leases6.2.6. DOS Attributes6.2.6.1. DOS attributes and Unix permissions bits6.2.6.2. DOS attributes and Unix extended attributes6.2.7. Permissions6.3. Access Control Lists6.3.1. What’s in a POSIX ACL?6.3.2. The nt acl support Parameter6.3.3. Understanding the Explorer Security Tab6.4. Microsoft Distributed File Systems6.5. Virtual File Systems6.6. Executing Server Scripts
7. Printing
7.1. Print Shares7.2. A Usable Print Share7.3. Samba and CUPS7.4. The [printers] Service7.5. Enabling SMB Printer Sharing in OS X7.6. Creating a PDF Printer7.7. Managing Windows Print Drivers7.7.1. Point and Print Prerequisites7.7.2. Installing Print Drivers7.7.3. Assigning Print Drivers and Initializing DeviceModes7.7.4. Testing Point and Print7.8. Printers and Security7.9. Disabling Point and Print7.10. Printing, Queue Lists, and tdb Files7.11. Printing to Windows Printers7.11.1. Sharing Windows Printers7.11.2. Adding a Unix Printer7.11.2.1. BSD printers7.11.2.2. System V printers7.11.2.3. CUPS printers7.12. Printing Parameters
8. Name Resolution and Network Browsing
8.1. Name Resolution8.1.1. WINS Clients and Server Interaction8.1.2. Setting Up Samba As a WINS Server8.1.2.1. Proxying name resolution requests to DNS8.1.2.2. Catching WINS database modifications8.1.3. Setting Up Samba to Use Another WINS Server8.1.3.1. Configuring a WINS proxy8.1.4. The lmhosts File8.1.5. Configuring Name Resolution for the Samba Suite8.1.6. Name-Resolution Configuration Options8.2. Network Browsing8.2.1. Browsing in a Windows Network8.2.2. Browser Elections8.2.3. Server Announcements8.2.4. Configuring Samba for Browsing8.2.5. Samba As the Domain Master Browser8.2.6. Samba Browsing Enhancements8.2.7. Browsing Options

9. Domain Controllers
9.1. Samba Domains: NT 4.0 or Active Directory?9.2. Configuring a Samba PDC9.2.1. Setting Up Domain Joins9.2.1.1. Domain Admins9.2.1.2. Required privileges9.2.1.3. Joining a Windows client9.2.2. Managing Users and Groups9.2.3. User Profiles9.2.4. System Policies9.3. Configuring a Samba BDC9.4. passdb Recommendations9.5. Migrating an NT 4.0 Domain to Samba9.6. Domain Trusts9.7. Remote Server Management9.7.1. File Shares9.7.2. Services9.7.3. Eventlogs9.7.4. Performance Monitor
10. Domain Member Servers
10.1. Joining a Domain10.2. Domain and ADS Security Modes10.2.1. security = domain10.2.2. security = ads10.2.2.1. Basic Samba settings10.2.2.2. Time synchronization10.2.2.3. Encryption types10.2.2.4. Realm/domain and KDC lookups10.2.2.4.1. Using DNS for KDCs lookups10.2.2.4.2. Manually configuring KDCs lookups10.2.2.5. Final steps10.2.2.6. Integrating Kerberized Unix services10.2.3. Locating a Domain Controller10.3. Matching Domain Users to Local Accounts10.4. Winbind10.4.1. idmap Backends10.4.1.1. idmap backend = ldap10.4.1.2. idmap backend = rid10.4.1.3. idmap backend = ad10.5. Additional Winbind Features10.5.1. PAM and Domains10.5.2. Local Nested Groups
11. Unix Clients
11.1. The Linux CIFS Filesystem11.1.1. Installation11.1.2. Mounting a SMB/CIFS File Share11.1.3. Allowing Normal User CIFS Mounts11.1.4. CIFS Extensions for Unix Clients11.2. FreeBSD’s smbfs11.2.1. smbutil11.2.2. mount_smbfs11.3. Mac OS X11.4. smbclient11.4.1. Listing Shares and Workgroups11.4.2. An Interactive smbclient Session11.4.3. Backups with smbclient11.4.4. Programming with smbclient11.5. Remote Administration with net11.5.1. net rpc11.5.1.1. Shares11.5.1.2. Services11.5.2. net ads
12. Troubleshooting Samba
12.1. The Tool Box12.2. Samba Logs12.2.1. Log Level12.2.2. Activating and Deactivating Logging12.2.3. Logging by Individual Client Systems or Users12.3. Unix Utilities12.3.1. Tracing System Calls12.3.2. Network Packet Captures12.3.2.1. Using Wireshark12.4. The Fault Tree12.4.1. How to Use the Fault Tree12.4.2. Troubleshooting Low-Level IP12.4.2.1. Testing the networking software with ping12.4.2.2. Testing local name services with ping12.4.2.3. Testing the networking hardware with ping12.4.2.4. Testing connections with ping12.4.3. Troubleshooting Server Daemons12.4.3.1. Tracking daemon startup12.4.3.2. Looking for daemons bound to ports12.4.3.3. Checking smbd with telnet12.4.3.4. Testing daemons with testparm12.4.4. Troubleshooting SMB Connections12.4.4.1. A minimal smb.conf file12.4.4.2. Testing locally with smbclient12.4.4.3. Testing connections with smbclient12.4.4.4. Testing connections with net use12.5. Troubleshooting Browsing12.5.1. Testing the Server with nmblookup12.5.2. Testing the Client with nmblookup12.5.3. Testing the Network with nmblookup12.5.4. Testing Browsing with smbclient12.5.5. Testing Client Browsing with net view12.5.6. Browsing the Server from the Client12.6. Troubleshooting Name Services12.6.1. Identifying What’s in Use12.6.2. Cannot Look Up Hostnames12.6.3. Long and Short Hostnames12.6.4. Unusual Delays12.6.5. Localhost issues12.7. Troubleshooting Network Addresses12.7.1. Netmasks12.7.2. Broadcast Addresses12.7.3. Network Address Ranges12.7.4. Finding Your Network Address12.8. Troubleshooting NetBIOS Names12.9. Extra Resources12.9.1. Documentation and FAQs12.9.2. Samba Mailing Lists, Newsgroups, and IRC12.9.3. Filing a Bug Report
A. Summary of Samba Daemons and Commands
A.1. SMB URI SyntaxA.2. Samba DaemonsA.3. Samba Client ProgramsA.3.1. Common OptionsA.3.1.1. General optionsA.3.1.2. Authentication optionsA.3.1.3. Connection options
B. Downloading Samba with Subversion
C. Configure Options
C.1. Install Directory and Library OptionsC.2. Developer OptionsC.3. Authentication OptionsC.4. File Serving FeaturesC.5. Printing OptionsC.6. Clients and Libraries
Index
About the Authors
Colophon
Copyright

Content preview from Using Samba, 3rd Edition

Using Samba, 3rd Edition

Gerald Carter

Jay Ts

Robert Eckstein

Beijing • Cambridge • Farnham • Köln • Sebastopol • Tokyo

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 0596007698Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Using Samba, 3rd Edition

by Gerald Carter, Jay Ts, Robert Eckstein