The official Samba-3 howto and referece guide: [expert information, straight from the source: written by members of the Samba team ; detailed explanations of the powerful new internal and external capabilities in Samba-3.0.11 trough 3.0.20+ ; the definitive reference for Samba-3 advanced features: how they work and how to use them ; all you need to get the most out of your Samba installation]

Attribution......Page 2
Contents......Page 1
List of Examples......Page 4
List of Figures......Page 42
List of Tables......Page 48
Foreword......Page 51
Preface......Page 54
Introduction......Page 56
Part I General Installation......Page 62
 Preparing Samba for Configuration......Page 64
   1.2.1 Configuration File Syntax......Page 66
   1.2.2 TDB Database File Information......Page 67
   1.2.3 Starting Samba......Page 68
   1.2.4 Example Configuration......Page 70
    1.2.4.1 Test Your Config File with testparm......Page 71
  1.3 List Shares Available on the Server......Page 72
  1.5 Connect from a Remote SMB Client......Page 73
   1.5.2 Still Stuck?......Page 74
   1.6.2 Error Message: open_oplock_ipc......Page 75
   1.6.3 ``The network name cannot be found''......Page 76
 Chapter 2 Fast Start: Cure for Impatience......Page 78
  2.2 Description of Example Sites......Page 79
    2.3.1.1 Anonymous Read-Only Document Server......Page 80
    2.3.1.3 Anonymous Print Server......Page 83
    2.3.1.4 Secure Read-Write File and Print Server......Page 86
   2.3.2 Domain Member Server......Page 90
    2.3.2.1 Example Configuration......Page 91
   2.3.3 Domain Controller......Page 94
    2.3.3.1 Example: Engineering Office......Page 95
    2.3.3.2 A Big Organization......Page 97
Part II Server Configuration Basics......Page 104
 First Steps in Server Configuration......Page 106
  3.1 Features and Benefits......Page 108
  3.2 Server Types......Page 109
  3.3 Samba Security Modes......Page 110
   3.3.1 User Level Security......Page 111
   3.3.2 Share-Level Security......Page 112
   3.3.3 Domain Security Mode (User-Level Security)......Page 113
    3.3.3.1 Example Configuration......Page 114
   3.3.5 Server Security (User Level Security)......Page 116
    3.3.5.1 Example Configuration......Page 118
  3.4 Password Checking......Page 119
  3.5 Common Errors......Page 120
   3.5.4 Constantly Losing Connections to Password Server......Page 121
 Chapter 4 Domain Control......Page 122
  4.1 Features and Benefits......Page 123
  4.2 Single Sign-On and Domain Security......Page 127
   4.3.1 Domain Controller Types......Page 130
   4.3.2 Preparing for Domain Control......Page 133
  4.4 Domain Control: Example Configuration......Page 136
  4.5 Samba ADS Domain Control......Page 138
    4.6.1.1 Example Configuration......Page 139
    4.6.1.3 The Special Case of Windows 9x/Me......Page 140
   4.6.2 Security Mode and Master Browsers......Page 142
   4.7.1 ``$'' Cannot Be Included in Machine Name......Page 144
   4.7.3 The System Cannot Log You On (C000019B)......Page 145
   4.7.5 Account Disabled......Page 146
   4.7.7 Cannot Log onto Domain Member Workstation After Joining Domain......Page 147
  5.1 Features and Benefits......Page 148
  5.2 Essential Background Information......Page 149
   5.2.1 MS Windows NT4-style Domain Control......Page 150
    5.2.1.1 Example PDC Configuration......Page 152
   5.2.2 LDAP Configuration Notes......Page 153
   5.2.3 Active Directory Domain Control......Page 154
    5.2.5.1 NetBIOS Over TCP/IP Enabled......Page 155
  5.3 Backup Domain Controller Configuration......Page 156
   5.3.1 Example Configuration......Page 158
  5.4 Common Errors......Page 159
   5.4.3 How Do I Replicate the smbpasswd File?......Page 160
   5.4.4 Can I Do This All with LDAP?......Page 161
  6.1 Features and Benefits......Page 162
  6.2 MS Windows Workstation/Server Machine Trust Accounts......Page 163
   6.2.1 Manual Creation of Machine Trust Accounts......Page 165
   6.2.2 Managing Domain Machine Accounts using NT4 Server Manager......Page 167
   6.2.4 Making an MS Windows Workstation or Server a Domain Member......Page 168
    6.2.4.3 Samba Client......Page 169
   6.3.1 Joining an NT4-type Domain with Samba-3......Page 170
   6.3.2 Why Is This Better Than security = server?......Page 173
   6.4.1 Configure smb.conf......Page 174
   6.4.2 Configure /etc/krb5.conf......Page 175
   6.4.3 Create the Computer Account......Page 178
   6.4.5 Testing with smbclient......Page 179
  6.5 Sharing User ID Mappings between Samba Domain Members......Page 180
   6.6.2 Adding Machine to Domain Fails......Page 181
   6.6.3 I Can't Join a Windows 2003 PDC......Page 182
  7.1 Features and Benefits......Page 184
   7.3.1 Reference Documentation Server......Page 185
   7.3.2 Central Print Serving......Page 186
  7.4 Common Errors......Page 189
  8.2 Technical Details......Page 190
    8.2.1.1 MS Windows XP Professional......Page 191
    8.2.1.2 MS Windows 2000......Page 193
    8.2.1.3 MS Windows Me......Page 195
   8.2.2 Joining a Domain: Windows 2000/XP Professional......Page 198
   8.2.3 Domain Logon Configuration: Windows 9x/Me......Page 200
  8.3 Common Errors......Page 202
Part III Advanced Configuration......Page 210
 Valuable Nuts and Bolts Information......Page 212
  9.1 Features and Benefits......Page 214
  9.2 What Is Browsing?......Page 215
   9.3.1 NetBIOS over TCP/IP......Page 217
   9.3.2 TCP/IP without NetBIOS......Page 219
   9.3.3 DNS and Active Directory......Page 220
  9.4 How Browsing Functions......Page 223
   9.4.1 Configuring Workgroup Browsing......Page 224
   9.4.2 Domain Browsing Configuration......Page 226
   9.4.3 Forcing Samba to Be the Master......Page 227
   9.4.4 Making Samba the Domain Master......Page 228
   9.4.7 Use of the Remote Announce Parameter......Page 229
   9.4.8 Use of the Remote Browse Sync Parameter......Page 230
  9.5 WINS: The Windows Internetworking Name Server......Page 231
   9.5.1 WINS Server Configuration......Page 232
   9.5.3 Static WINS Entries......Page 233
   9.6.1 Windows Networking Protocols......Page 235
   9.6.2 Name Resolution Order......Page 236
   9.7.1 Browsing Support in Samba......Page 237
   9.7.2 Problem Resolution......Page 238
   9.7.3 Cross-Subnet Browsing......Page 239
    9.7.3.1 Behavior of Cross-Subnet Browsing......Page 240
   9.8.2 Server Resources Cannot Be Listed......Page 244
   9.8.4 Browsing of Shares and Directories is Very Slow......Page 245
 Chapter 10 Account Information Databases......Page 248
   10.1.1 Backward Compatibility Account Storage Systems......Page 249
   10.1.2 New Account Storage Systems......Page 250
  10.2 Technical Information......Page 251
   10.2.1 Important Notes About Security......Page 252
    10.2.1.2 Advantages of Non-Encrypted Passwords......Page 255
   10.2.3 Mapping Common UIDs/GIDs on Distributed Machines......Page 256
   10.2.4 Comments Regarding LDAP......Page 257
    10.2.4.1 Caution Regarding LDAP and Samba......Page 258
   10.2.5 LDAP Directories and Windows Computer Accounts......Page 259
   10.3.1 The smbpasswd Tool......Page 260
   10.3.2 The pdbedit Tool......Page 262
    10.3.2.1 User Account Management......Page 263
  10.4 Password Backends......Page 273
   10.4.2 smbpasswd: Encrypted Password Database......Page 274
   10.4.3 tdbsam......Page 275
   10.4.4 ldapsam......Page 276
    10.4.4.2 Schema and Relationship to the RFC 2307 posixAccount......Page 277
    10.4.4.3 OpenLDAP Configuration......Page 278
    10.4.4.4 Initialize the LDAP Database......Page 280
    10.4.4.5 Configuring Samba......Page 282
    10.4.4.7 Security and sambaSamAccount......Page 283
    10.4.4.8 LDAP Special Attributes for sambaSamAccounts......Page 285
    10.4.4.9 Example LDIF Entries for a sambaSamAccount......Page 286
    10.4.4.11 Using OpenLDAP Overlay for Password Syncronization......Page 287
    10.4.5.2 Configuring......Page 288
   10.5.1 Users Cannot Logon......Page 290
   10.5.3 Configuration of auth methods......Page 291
 Chapter 11 Group Mapping: MS Windows and UNIX......Page 296
  11.1 Features and Benefits......Page 297
  11.2 Discussion......Page 299
   11.2.1 Warning: User Private Group Problems......Page 300
   11.2.2 Nested Groups: Adding Windows Domain Groups to Windows Local Groups......Page 301
    11.2.3.1 Applicable Only to Versions Earlier than 3.0.11......Page 303
   11.2.4 Default Users, Groups, and Relative Identifiers......Page 304
   11.2.5 Example Configuration......Page 305
   11.3.1 Sample smb.conf Add Group Script......Page 306
   11.3.2 Script to Configure Group Mapping......Page 307
   11.4.2 Adding Domain Users to the Workstation Power Users Group......Page 308
 Chapter 12 Remote and Local Management: The Net Command......Page 310
  12.2 Administrative Tasks and Methods......Page 311
   12.3.1 Adding, Renaming, or Deletion of Group Accounts......Page 312
    12.3.1.1 Adding or Creating a New Group......Page 313
    12.3.1.2 Mapping Windows Groups to UNIX Groups......Page 315
    12.3.1.4 Rename Group Accounts......Page 317
   12.3.2 Manipulating Group Memberships......Page 318
   12.3.3 Nested Group Support......Page 320
    12.3.3.1 Managing Nest Groups on Workstations from the Samba Server......Page 321
   12.4.1 Adding User Accounts......Page 323
   12.4.2 Deletion of User Accounts......Page 324
   12.4.4 User Mapping......Page 325
  12.5 Administering User Rights and Privileges......Page 326
   12.6.1 Machine Trust Accounts......Page 329
   12.6.2 Interdomain Trusts......Page 332
  12.7 Managing Security Identifiers (SIDS)......Page 335
   12.8.1 Creating, Editing, and Removing Shares......Page 336
   12.8.3 Share, Directory, and File Migration......Page 338
    12.8.3.1 Share Migration......Page 339
    12.8.3.2 File and Directory Migration......Page 340
    12.8.3.3 Share-ACL Migration......Page 342
   12.8.4 Printer Migration......Page 343
  12.10 Session and Connection Management......Page 345
  12.11 Printers and ADS......Page 346
   12.13.1 Creating an IDMAP Database Dump File......Page 347
  12.14 Other Miscellaneous Operations......Page 348
 Chapter 13 Identity Mapping (IDMAP)......Page 350
   13.1.2 Domain Member Server or Domain Member Client......Page 351
   13.1.4 Backup Domain Controller......Page 355
    13.2.1.1 NT4-Style Domains (Includes Samba Domains)......Page 356
    13.2.1.2 ADS Domains......Page 358
   13.2.2 IDMAP_RID with Winbind......Page 359
   13.2.3 IDMAP Storage in LDAP Using Winbind......Page 361
   13.2.4 IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension......Page 366
    13.2.4.2 IDMAP, Active Directory and AD4UNIX......Page 367
 Chapter 14 User Rights and Privileges......Page 368
  14.1 Rights Management Capabilities......Page 369
   14.1.1 Using the ``net rpc rights'' Utility......Page 370
   14.1.2 Description of Privileges......Page 372
   14.1.3 Privileges Suppored by Windows 2000 Domain Controllers......Page 373
  14.2 The Administrator Domain SID......Page 374
   14.3.1 What Rights and Privileges Will Permit Windows Client Administration?......Page 375
 Chapter 15 File, Directory, and Share Access Controls......Page 378
  15.1 Features and Benefits......Page 379
   15.2.1 MS Windows NTFS Comparison with UNIX File Systems......Page 380
   15.2.2 Managing Directories......Page 382
   15.2.3 File and Directory Access Control......Page 383
    15.2.3.1 Protecting Directories and Files from Deletion......Page 385
   15.3.3 Miscellaneous Controls......Page 387
  15.4 Access Controls on Shares......Page 388
    15.4.1.2 Windows 200x/XP......Page 390
   15.5.2 Viewing File Security on a Samba Share......Page 392
   15.5.4 Viewing File or Directory Permissions......Page 393
    15.5.4.2 Directory Permissions......Page 394
   15.5.5 Modifying File or Directory Permissions......Page 395
   15.5.6 Interaction with the Standard Samba ``create mask'' Parameters......Page 397
   15.5.8 Windows NT/200X ACLs and POSIX ACLs Limitations......Page 399
    15.5.8.1 UNIX POSIX ACL Overview......Page 400
    15.5.8.2 Mapping of Windows File ACLs to UNIX POSIX ACLs......Page 401
   15.6.1 Users Cannot Write to a Public Share......Page 402
   15.6.2 File Operations Done as root with force user Set......Page 404
   15.6.3 MS Word with Samba Changes Owner of File......Page 405
  16.1 Features and Benefits......Page 408
  16.2 Discussion......Page 409
   16.2.1 Opportunistic Locking Overview......Page 410
    16.2.1.3 UNIX or NFS Client-Accessed Files......Page 413
    16.2.1.6 PDM Data Shares......Page 414
    16.2.1.9 Mission-Critical, High-Availability......Page 415
  16.3 Samba Oplocks Control......Page 416
    16.3.1.1 Disabling Oplocks......Page 417
    16.3.1.2 Disabling Kernel Oplocks......Page 418
  16.4 MS Windows Oplocks and Caching Controls......Page 419
   16.4.1 Workstation Service Entries......Page 422
   16.4.2 Server Service Entries......Page 423
  16.6 Common Errors......Page 424
   16.6.3 Long Delays Deleting Files over Network with XP SP1......Page 425
  16.7 Additional Reading......Page 426
  17.2 Features and Benefits......Page 428
   17.3.1 Using Host-Based Protection......Page 429
   17.3.3 Using Interface Protection......Page 430
   17.3.5 Using IPC$ Share-Based Denials......Page 431
   17.3.6 NTLMv2 Security......Page 432
   17.5.2 Why Can Users Access Other Users' Home Directories?......Page 433
 Chapter 18 Interdomain Trust Relationships......Page 436
  18.2 Trust Relationship Background......Page 437
   18.3.1 Creating an NT4 Domain Trust......Page 438
   18.3.3 Interdomain Trust Facilities......Page 439
  18.4 Configuring Samba NT-Style Domain Trusts......Page 440
   18.4.1 Samba as the Trusted Domain......Page 441
   18.4.2 Samba as the Trusting Domain......Page 442
   18.6.1 Browsing of Trusted Domain Fails......Page 443
   18.6.2 Problems with LDAP ldapsam and Older Versions of smbldap-tools......Page 444
  19.1 Features and Benefits......Page 446
  19.2 Common Errors......Page 447
   19.2.1 MSDFS UNIX Path Is Case-Critical......Page 448
  20.1 Features and Benefits......Page 450
  20.2 Technical Introduction......Page 451
   20.2.2 Printing-Related Configuration Parameters......Page 452
  20.3 Simple Print Configuration......Page 453
   20.3.1 Verifying Configuration with testparm......Page 454
   20.3.2 Rapid Configuration Validation......Page 455
   20.4.1 Detailed Explanation Settings......Page 458
    20.4.1.1 The [global] Section......Page 459
    20.4.1.2 The [printers] Section......Page 461
    20.4.1.3 Any [my_printer_name] Section......Page 463
    20.4.1.4 Print Commands......Page 464
    20.4.1.6 Custom Print Commands......Page 465
  20.5 Printing Developments Since Samba-2.2......Page 467
   20.5.2 The Obsoleted [printer$] Section......Page 469
   20.5.4 [print$] Stanza Parameters......Page 470
   20.5.5 The [print$] Share Directory......Page 473
   20.6.1 Add Printer Wizard Driver Installation......Page 474
   20.6.2 Installing Print Drivers Using rpcclient......Page 475
    20.6.2.1 Identifying Driver Files......Page 476
    20.6.2.2 Obtaining Driver Files from Windows Client [print$] Shares......Page 478
    20.6.2.3 Installing Driver Files into [print$]......Page 479
    20.6.2.4 smbclient to Confirm Driver Installation......Page 480
    20.6.2.5 Running rpcclient with adddriver......Page 482
    20.6.2.6 Checking adddriver Completion......Page 483
    20.6.2.7 Check Samba for Driver Recognition......Page 484
    20.6.2.8 Specific Driver Name Flexibility......Page 485
    20.6.2.9 Running rpcclient with setdriver......Page 486
   20.7.1 First Client Driver Installation......Page 487
   20.7.2 Setting Device Modes on New Printers......Page 488
   20.7.3 Additional Client Driver Installation......Page 490
   20.7.4 Always Make First Client Connection as root or ``printer admin''......Page 491
   20.8.1 Setting Default Print Options for Client Drivers......Page 492
   20.8.2 Supporting Large Numbers of Printers......Page 494
   20.8.3 Adding New Printers with the Windows NT APW......Page 496
   20.8.4 Error Message: ``Cannot connect under a different Name''......Page 498
   20.8.5 Take Care When Assembling Driver Files......Page 499
   20.8.6 Samba and Printer Ports......Page 502
   20.9.1 What Is Imprints?......Page 503
   20.9.4 The Installation Client......Page 504
  20.10 Adding Network Printers without User Interaction......Page 505
  20.11 The addprinter Command......Page 507
  20.12 Migration of Classical Printing to Samba......Page 508
   20.14.2 My Print Jobs Get Spooled into the Spooling Directory, but Then Get Lost......Page 509
   21.1.2 Overview......Page 512
   21.2.1 Linking smbd with libcups.so......Page 513
   21.2.2 Simple smb.conf Settings for CUPS......Page 514
   21.2.3 More Complex CUPS smb.conf Settings......Page 515
  21.3 Advanced Configuration......Page 516
   21.3.2 Raw Print Serving: Vendor Drivers on Windows Clients......Page 517
   21.3.3 Installation of Windows Client Drivers......Page 518
   21.3.4 Explicitly Enable ``raw'' Printing for application/octet-stream......Page 519
   21.3.5 Driver Upload Methods......Page 520
   21.4.1 GDI on Windows, PostScript on UNIX......Page 521
   21.4.3 UNIX Printfile Conversion and GUI Basics......Page 522
   21.4.4 PostScript and Ghostscript......Page 524
   21.4.5 Ghostscript: The Software RIP for Non-PostScript Printers......Page 525
   21.4.6 PostScript Printer Description (PPD) Specification......Page 526
   21.4.7 Using Windows-Formatted Vendor PPDs......Page 527
   21.4.8 CUPS Also Uses PPDs for Non-PostScript Printers......Page 528
  21.5 The CUPS Filtering Architecture......Page 529
   21.5.1 MIME Types and CUPS Filters......Page 530
   21.5.2 MIME Type Conversion Rules......Page 531
    21.5.3.1 Filter Requirements......Page 532
   21.5.5 pstops......Page 533
   21.5.6 pstoraster......Page 534
   21.5.8 rasterto [printers specific]......Page 536
   21.5.9 CUPS Backends......Page 537
   21.5.10 The Role of cupsomatic/foomatic......Page 540
   21.5.12 mime.convs......Page 541
   21.5.14 application/octet-stream Printing......Page 542
   21.5.16 cupsomatic/foomatic-rip Versus Native CUPS Printing......Page 544
   21.5.17 Examples for Filtering Chains......Page 546
   21.5.18 Sources of CUPS Drivers/PPDs......Page 548
   21.5.19 Printing with Interface Scripts......Page 549
   21.6.2 Driver Execution on the Client......Page 550
   21.6.3 Driver Execution on the Server......Page 551
   21.7.1 From Windows Clients to a CUPS/Samba Print Server......Page 552
   21.7.2 Samba Receiving Job-Files and Passing Them to CUPS......Page 553
   21.8.1 PPDs for Non-PS Printers on UNIX......Page 554
   21.9.1 Printer Drivers Running in ``Kernel Mode'' Cause Many Problems......Page 555
   21.9.4 PostScript Drivers with No Major Problems, Even in Kernel Mode......Page 556
   21.10.1 cupsaddsmb: The Unknown Utility......Page 557
   21.10.3 CUPS ``PostScript Driver for Windows NT/200x/XP''......Page 558
   21.10.4 Recognizing Different Driver Files......Page 560
   21.10.6 ESP Print Pro PostScript Driver for Windows NT/200x/XP......Page 561
   21.10.7 Caveats to Be Considered......Page 562
   21.10.8 Windows CUPS PostScript Driver Versus Adobe Driver......Page 565
   21.10.10 Run cupsaddsmb with Verbose Output......Page 566
   21.10.11 Understanding cupsaddsmb......Page 568
   21.10.12 How to Recognize If cupsaddsmb Completed Successfully......Page 569
   21.10.13 cupsaddsmb with a Samba PDC......Page 570
   21.10.14 cupsaddsmb Flowchart......Page 571
   21.10.16 Avoiding Critical PostScript Driver Settings on the Client......Page 572
  21.11 Installing PostScript Driver Files Manually Using rpcclient......Page 573
   21.11.1 A Check of the rpcclient man Page......Page 574
   21.11.3 Producing an Example by Querying a Windows Box......Page 575
   21.11.4 Requirements for adddriver and setdriver to Succeed......Page 576
   21.11.5 Manual Driver Installation in 15 Steps......Page 577
   21.11.6 Troubleshooting Revisited......Page 584
   21.12.2 Binary Format......Page 585
   21.12.4 Using tdbbackup......Page 586
  21.13 CUPS Print Drivers from Linuxprinting.org......Page 587
   21.13.1 foomatic-rip and Foomatic Explained......Page 588
    21.13.1.3 Foomatic's Strange Name......Page 589
    21.13.1.4 cupsomatic, pdqomatic, lpdomatic, directomatic......Page 590
    21.13.1.5 The Grand Unification Achieved......Page 591
    21.13.1.6 Driver Development Outside......Page 592
    21.13.1.8 Foomatic Database-Generated PPDs......Page 593
   21.13.2 foomatic-rip and Foomatic PPD Download and Installation......Page 594
  21.14 Page Accounting with CUPS......Page 597
   21.14.2 Correct and Incorrect Accounting......Page 598
   21.14.4 The page_log File Syntax......Page 599
   21.14.5 Possible Shortcomings......Page 600
  21.15 Additional Material......Page 601
   21.16.1 CUPS Configuration Settings Explained......Page 603
   21.16.3 Manual Configuration......Page 604
  21.17 Printing from CUPS to Windows-Attached Printers......Page 605
   21.19.1 Windows 9x/Me Client Can't Install Driver......Page 607
   21.19.5 Client Can't Connect to Samba Printer......Page 608
   21.19.8 Upgrading to CUPS Drivers from Adobe Drivers......Page 609
   21.19.13 Print Change, Notify Functions on NT Clients......Page 610
   21.19.15 Print Options for All Users Can't Be Set on Windows 200x/XP......Page 611
   21.19.17 cupsaddsmb Does Not Work with Newly Installed Printer......Page 612
  21.20 Overview of the CUPS Printing Processes......Page 613
  22.2 Discussion......Page 616
   22.3.1 audit......Page 617
   22.3.2 default_quota......Page 618
    22.3.3.1 Configuration of Auditing......Page 620
   22.3.5 recycle......Page 621
   22.3.6 netatalk......Page 622
   22.3.7 shadow_copy......Page 623
    22.3.7.1 Shadow Copy Setup......Page 624
   22.4.1 DatabaseFS......Page 627
   22.4.2 vscan......Page 628
  23.1 Features and Benefits......Page 630
  23.3 What Winbind Provides......Page 632
   23.3.2 Handling of Foreign SIDs......Page 633
   23.4.1 Microsoft Remote Procedure Calls......Page 634
   23.4.3 Name Service Switch......Page 635
   23.4.4 Pluggable Authentication Modules......Page 636
   23.4.6 Result Caching......Page 637
   23.5.2 Requirements......Page 638
    23.5.3.1 Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris......Page 639
    23.5.3.2 NSS Winbind on AIX......Page 641
    23.5.3.4 Join the Samba Server to the PDC Domain......Page 642
    23.5.3.5 Starting and Testing the winbindd Daemon......Page 643
    23.5.3.6 Fix the init.d Startup Scripts......Page 646
    23.5.3.7 Configure Winbind and PAM......Page 649
   23.7.1 NSCD Problem Warning......Page 654
   23.7.2 Winbind Is Not Resolving Users and Groups......Page 655
  24.2 Remote Server Administration......Page 658
   24.3.1 Remote Management from NoMachine.Com......Page 659
  24.4 Network Logon Script Magic......Page 661
   24.4.2 Limiting Logon Connections......Page 664
  25.1 Features and Benefits......Page 666
  25.2 Creating and Managing System Policies......Page 667
   25.2.2 Windows NT4-Style Policy Files......Page 668
   25.2.3 MS Windows 200x/XP Professional Policies......Page 669
    25.2.3.1 Administration of Windows 200x/XP Policies......Page 670
    25.2.3.2 Custom System Policy Templates......Page 671
  25.3 Managing Account/User Policies......Page 672
   25.4.1 Samba Editreg Toolset......Page 673
  25.5 System Startup and Logon Processing Overview......Page 674
   25.6.1 Policy Does Not Work......Page 675
  26.2 Roaming Profiles......Page 676
    26.2.1.1 NT4/200x User Profiles......Page 677
    26.2.1.3 Mixed Windows Windows 9x/Me and NT4/200x User Profiles......Page 678
    26.2.1.4 Disabling Roaming Profile Support......Page 679
    26.2.2.1 Windows 9x/Me Profile Setup......Page 680
    26.2.2.3 Windows 2000/XP Professional......Page 683
   26.2.5 Profile Migration from Windows NT4/200x Server to Samba......Page 686
    26.2.5.2 Side Bar Notes......Page 687
  26.3 Mandatory Profiles......Page 688
  26.4 Creating and Managing Group Profiles......Page 689
    26.5.1.1 User Profile Handling with Windows 9x/Me......Page 690
   26.5.2 MS Windows NT4 Workstation......Page 691
   26.5.3 MS Windows 200x/XP......Page 694
   26.6.2 Cannot Use Roaming Profiles......Page 697
   26.6.3 Changing the Default Profile......Page 699
   26.6.4 Debugging Roaming Profiles and NT4-style Domain Policies......Page 700
  27.1 Features and Benefits......Page 702
   27.2.1 PAM Configuration Syntax......Page 704
    27.2.1.1 Anatomy of /etc/pam.d Entries......Page 705
   27.2.2 Example System Configurations......Page 710
    27.2.2.2 PAM: Login Using pam_smbpass......Page 711
   27.2.3 smb.conf PAM Configuration......Page 713
   27.2.4 Remote CIFS Authentication Using winbindd.so......Page 714
    27.2.5.1 Password Synchronization Configuration......Page 715
    27.2.5.2 Password Migration Configuration......Page 716
    27.2.5.4 Kerberos Password Integration Configuration......Page 717
   27.3.1 pam_winbind Problem......Page 718
   27.3.2 Winbind Is Not Resolving Users and Groups......Page 719
  28.1 Features and Benefits......Page 722
  28.3 Name Resolution in a Pure UNIX/Linux World......Page 723
   28.3.1 /etc/hosts......Page 724
   28.3.3 /etc/host.conf......Page 725
   28.3.4 /etc/nsswitch.conf......Page 726
  28.4 Name Resolution as Used within MS Windows Networking......Page 727
   28.4.2 The LMHOSTS File......Page 729
   28.4.4 DNS Lookup......Page 731
  28.5 Common Errors......Page 732
   28.5.3 Samba Server Name-Change Problem......Page 733
  29.2 What Are Charsets and Unicode?......Page 736
  29.3 Samba and Charsets......Page 737
  29.5 Japanese Charsets......Page 738
   29.5.1 Basic Parameter Setting......Page 739
   29.5.2 Individual Implementations......Page 742
   29.5.3 Migration from Samba-2.2 Series......Page 743
   29.6.1 CP850.so Can't Be Found......Page 744
  30.2 Discussion of Backup Solutions......Page 746
   30.2.2 Rsync......Page 747
   30.2.4 BOBS: Browseable Online Backup System......Page 748
  31.1 Features and Benefits......Page 750
   31.2.2 Why Is This So Hard?......Page 751
    31.2.2.2 Demultiplexing SMB Requests......Page 752
    31.2.2.4 Restrictive Constraints on Distributed File Systems......Page 753
    31.2.2.7 Required Modifications to Samba......Page 754
   31.2.4 High-Availability Server Products......Page 755
   31.2.6 Conclusions......Page 756
 Chapter 32 Handling Large Directories......Page 758
 Chapter 33 Advanced Configuration Techniques......Page 760
   33.1.1 Multiple Server Hosting......Page 761
   33.1.2 Multiple Virtual Server Personalities......Page 762
   33.1.3 Multiple Virtual Server Hosting......Page 764
Part IV Migration and Updating......Page 768
  34.1 Quick Migration Guide......Page 770
  34.2 New Features in Samba-3......Page 771
   34.3.1 Removed Parameters......Page 772
   34.3.2 New Parameters......Page 773
   34.3.3 Modified Parameters (Changes in Behavior)......Page 777
   34.4.2 Changes in Behavior......Page 778
   34.4.3 Passdb Backends and Authentication......Page 779
    34.4.4.1 New Schema......Page 780
    34.4.4.2 New Suffix for Searching......Page 781
    34.4.4.3 IdMap LDAP Support......Page 782
   35.1.1 Objectives......Page 784
    35.1.1.1 Domain Layout......Page 786
    35.1.1.3 Logon Scripts......Page 787
   35.1.2 Steps in Migration Process......Page 788
  35.2 Migration Options......Page 789
   35.2.2 Samba-3 Implementation Choices......Page 790
  36.1 Features and Benefits......Page 794
   36.2.1 Validate SWAT Installation......Page 795
    36.2.1.2 Locating the SWAT Support Files......Page 796
   36.2.2 Enabling SWAT for Use......Page 798
   36.2.4 Enabling SWAT Internationalization Support......Page 800
   36.3.1 The SWAT Home Page......Page 801
   36.3.2 Global Settings......Page 802
   36.3.5 The SWAT Wizard......Page 803
   36.3.8 The Password Change Page......Page 804
Part V Troubleshooting......Page 806
  37.2 Assumptions......Page 808
  37.3 The Tests......Page 809
   38.1.1 Debugging with Samba Itself......Page 818
   38.1.4 The Windows Network Monitor......Page 819
    38.1.4.1 Installing Network Monitor on an NT Workstation......Page 820
  38.3 Getting Mailing List Help......Page 822
  38.4 How to Get Off the Mailing Lists......Page 824
  39.2 General Information......Page 826
  39.3 Debug Levels......Page 827
  39.4 Internal Errors......Page 828
  39.5 Attaching to a Running Process......Page 829
  39.6 Patches......Page 830
Part VI Reference Section......Page 832
   40.1.2 Subversion Access to samba.org......Page 834
    40.1.2.2 Access via Subversion......Page 835
  40.3 Verifying Samba's PGP Signature......Page 836
  40.4 Building the Binaries......Page 837
    40.4.1.2 Installing the Required Packages for Red Hat Linux......Page 839
   40.5.1 Starting from inetd.conf......Page 840
   40.5.2 Alternative: Starting smbd as a Daemon......Page 842
    40.5.2.1 Starting Samba for Red Hat Linux......Page 843
    40.5.2.2 Starting Samba for Novell SUSE Linux......Page 844
  41.1 HPUX......Page 846
  41.3 DNIX......Page 847
   41.6.1 Locking Improvements......Page 849
   41.6.2 Winbind on Solaris 9......Page 850
  42.1 Macintosh Clients......Page 852
   42.2.2 Configuring Other Versions of OS/2......Page 853
   42.3.1 Latest TCP/IP Stack from Microsoft......Page 854
   42.3.4 Password Case Sensitivity......Page 855
  42.4 Windows 95/98......Page 856
  42.5 Windows 2000 Service Pack 2......Page 857
  42.6 Windows NT 3.1......Page 858
  43.2 Socket Options......Page 860
  43.3 Read Size......Page 861
  43.7 Write Raw......Page 862
  43.10 Samba Performance Problem Due to Changing Linux Kernel......Page 863
  43.12 Samba Performance is Very Slow......Page 864
  44.1 Introduction......Page 866
   44.2.1 Generating the Certificate Authority......Page 867
   44.2.2 Generating the Server Certificate......Page 869
   44.2.3 Installing the Certificates......Page 871
  44.3 Testing......Page 872
  44.4 Troubleshooting......Page 874
 Chapter 45 Samba Support......Page 876
  45.1 Free Support......Page 877
  45.2 Commercial Support......Page 878
  46.1 Features and Benefits......Page 880
  46.2 Example Configuration......Page 881
   46.2.1 Dynamic DNS......Page 882
   46.2.2 DHCP Server......Page 886
  A.1 Preamble......Page 888
   A.2.1 Section 0......Page 889
   A.2.3 Section 2......Page 890
   A.2.4 Section 3......Page 891
   A.2.5 Section 4......Page 892
   A.2.8 Section 7......Page 893
   A.2.11 Section 10......Page 894
   A.2.13 Section 12......Page 895
 Glossary......Page 896
 SUBJECT INDEX......Page 898