Using Samba, Second Edition Is a Comprehensive Guide to Samba Administration

Total Page:16

File Type:pdf, Size:1020Kb

Using Samba, Second Edition Is a Comprehensive Guide to Samba Administration • Table of Contents • Index • Reviews • Reader Reviews • Errata Using Samba, 2nd Edition By David Collier-Brown, Robert Eckstein, Jay Ts Publisher: O'Reilly Pub Date: February 2003 ISBN: 0-596-00256-4 Pages: 556 Slots: 1 Using Samba, Second Edition is a comprehensive guide to Samba administration. This new edition covers all versions of Samba from 2.0 to 2.2, including selected features from an alpha version of 3.0, as well as the SWAT graphical configuration tool. Updated for Windows 2000, ME, and XP, the book also explores Samba's new role as a primary domain controller and domain member server, its support for the use of Windows NT/2000/XP authentication and filesystem security on the host Unix system, and accessing shared files and printers from Unix clients. • Table of Contents • Index • Reviews • Reader Reviews • Errata Using Samba, 2nd Edition By David Collier-Brown, Robert Eckstein, Jay Ts Publisher: O'Reilly Pub Date: February 2003 ISBN: 0-596-00256-4 Pages: 556 Slots: 1 Copyright Preface Audience for This Book Organization Conventions Used in This Book How to Contact Us Acknowledgments Chapter 1. Learning the Samba Section 1.1. What Is Samba? Section 1.2. What Can Samba Do for Me? Section 1.3. Getting Familiar with an SMB Network Section 1.4. An Introduction to the SMB Protocol Section 1.5. Windows Workgroups and Domains Section 1.6. What's New in Samba 2.2? Section 1.7. What's New in Samba 3.0? Section 1.8. What Can Samba Do? Section 1.9. An Overview of the Samba Distribution Section 1.10. How Can I Get Samba? Chapter 2. Installing Samba on a Unix System Section 2.1. Bundled Versions Section 2.2. Downloading the Samba Distribution Section 2.3. Configuring Samba Section 2.4. Compiling and Installing Samba Section 2.5. Enabling SWAT Section 2.6. A Basic Samba Configuration File Section 2.7. Firewall Configuration Section 2.8. Starting the Samba Daemons Section 2.9. Testing the Samba Daemons Chapter 3. Configuring Windows Clients Section 3.1. Windows Networking Concepts Section 3.2. Setting Up Windows 95/98/Me Computers Section 3.3. Setting Up Windows NT 4.0 Computers Section 3.4. Setting Up Windows 2000 Computers Section 3.5. Setting Up Windows XP Computers Chapter 4. Windows NT Domains Section 4.1. Samba as the Primary Domain Controller Section 4.2. Adding Computer Accounts Section 4.3. Configuring Windows Clients for Domain Logons Section 4.4. Logon Scripts Section 4.5. Roaming Profiles Section 4.6. System Policies Section 4.7. Samba as a Domain Member Server Section 4.8. Windows NT Domain Options Chapter 5. Unix Clients Section 5.1. Sharing Files on Windows 95/98/Me Section 5.2. Sharing Files on Windows NT/2000/XP Section 5.3. smbclient Section 5.4. smbfs Section 5.5. smbsh Section 5.6. smbutil and mount_smbfs Chapter 6. The Samba Configuration File Section 6.1. The Samba Configuration File Section 6.2. Special Sections Section 6.3. Configuration Options Section 6.4. Server Configuration Section 6.5. Disk Share Configuration Section 6.6. Networking Options with Samba Section 6.7. Virtual Servers Section 6.8. Logging Configuration Options Chapter 7. Name Resolution and Browsing Section 7.1. Name Resolution Section 7.2. Browsing Chapter 8. Advanced Disk Shares Section 8.1. Filesystem Differences Section 8.2. File Permissions and Attributes on MS-DOS and Unix Section 8.3. Windows NT/2000/XP ACLs Section 8.4. Name Mangling and Case Section 8.5. Locks and Oplocks Section 8.6. Connection Scripts Section 8.7. Microsoft Distributed Filesystems Section 8.8. Working with NIS Chapter 9. Users and Security Section 9.1. Users and Groups Section 9.2. Controlling Access to Shares Section 9.3. Authentication of Clients Section 9.4. Passwords Section 9.5. Authentication with winbind Chapter 10. Printing Section 10.1. Sending Print Jobs to Samba Section 10.2. Printing to Windows Printers Chapter 11. Additional Samba Information Section 11.1. Time Synchronization Section 11.2. Magic Scripts Section 11.3. Internationalization Section 11.4. Windows Messenger Service Section 11.5. Miscellaneous Options Chapter 12. Troubleshooting Samba Section 12.1. The Tool Box Section 12.2. The Fault Tree Section 12.3. Extra Resources Appendix A. Example Configuration Files Section A.1. Samba in a Workgroup Section A.2. Samba in a Windows NT Domain Appendix B. Samba Configuration Option Quick Reference Section B.1. Configuration File Options abort shutdown script = command add printer command = command add machine script = command add share command = command add user script = command admin users = user list ads server = value algorithmic rid base = number allow hosts = host list allow trusted domains = boolean announce as = value announce version = value auth methods = list auto services = service list available = boolean bind interfaces only = boolean block size = number blocking locks = boolean browsable = boolean browse list = boolean browseable = boolean case sensitive = boolean casesignames = boolean change notify timeout = number change share command = command character set = name client code page = name code page directory = directory coding system = value comment = string config file = filename copy = section name create mask = value create mode = value csc policy = value deadtime = number debug hires timestamp = boolean debug pid = boolean debug timestamp = boolean debug uid = boolean debuglevel = number default = service name default case = value default devmode = boolean default service = share name delete printer command = command delete readonly = boolean delete share command = command delete user script = command delete veto files = boolean deny hosts = host list dfree command = command directory = directory directory mask = value directory mode = value directory security mask = value disable spools = boolean dns proxy = boolean domain admin group = user list domain guest group = user/group list domain logons = boolean domain master = boolean dont descend = list dos filemode = boolean dos filetime resolution = boolean dos filetimes = boolean encrypt passwords = boolean enhanced browsing = boolean enumports command = command exec = command fake directory create times = boolean fake oplocks = boolean follow symlinks = boolean force create mode = value force directory mode = value force directory security mode = value force group = value force security mode = value force unknown acl user = boolean force user = value fstype = string getwd cache = boolean group = value guest account = value guest ok = boolean guest only = boolean hide dot files = boolean hide files = slash-separated list hide local users = boolean hide unreadable = boolean homedir map = name host msdfs = boolean hosts allow = host list hosts deny = host list hosts equiv = filename include = filename inherit acls = boolean inherit permissions = boolean interfaces = interface list invalid users = user list keepalive = number kernel oplocks = boolean lanman auth = boolean large readwrite = boolean ldap admin dn = string ldap filter = string ldap port = number ldap server = value ldap ssl = value ldap suffix = string level2 oplocks = boolean lm announce = value lm interval = number load printers = boolean local master = boolean lock dir = directory lock directory = directory lock spin count = number lock spin time = number locking = boolean log file = filename log level = number logon drive = value logon home = directory logon path = directory logon script = directory lppause command = command lpq cache time = number lpq command = command lpresume command = command lprm command = command machine password timeout = number magic output = filename magic script = filename mangle case = boolean mangled map = map list mangled names = boolean mangled stack = number mangling char = character mangling method = string map archive = boolean map hidden = boolean map system = boolean map to guest = value max connections = number max disk size = number max log size = number max mux = number max open files = number max print jobs = number max protocol = name max smbd processes = number max ttl = number max wins ttl = number max xmit = number message command = command min passwd length = number min password length = number min print space = number min protocol = name min wins ttl = number msdfs root = boolean name resolve order = list netbios aliases = list netbios name = value netbios scope = string nis homedir = boolean non unix account range = numeric range nt acl support = boolean nt pipe support = boolean nt smb support = boolean nt status support = boolean null passwords = boolean obey pam restrictions = boolean only guest = boolean only user = boolean oplock break wait time = number oplock contention limit = number oplocks = boolean os level = number os2 driver map = filename pam password change = boolean panic action = command passdb backend = list passwd chat = string passwd chat debug = boolean passwd program = command password level = number password server = list path = directory pid directory = directory posix locking = boolean postexec = command postscript = boolean preexec = command preexec close = boolean preferred master = boolean prefered master = boolean preload = service list preserve case = boolean printable = boolean printcap name = filename print command = command printer = name printer admin = user list printer driver = name printer driver file = filename printer driver location = directory printer name = name printing = value print ok = boolean private directory = directory protocol = name public = boolean queuepause command = command queueresume command = command
Recommended publications
  • Creating Ipsec and SSL/TLS Tunnels in Linux What's New
    FACEBOOK | WEBGOAT | TOR | DNS | SLEUTHKIT | PACKETFENCE LINUX JOURNAL ™ UU Getting the Most Out of GCC UU Securing Open-Source Phones SECURITY UU How to Store Passwords Safely UU New Column: Hack and / Since 1994: The Original Magazine of the Linux Community JANUARY 2008 | ISSUE 165 Facebook | WebGoat | Tor | DNS | Sleuthkit | PacketFence | GCC Qtopia SXE VPNs | DNS Sleuthkit PacketFence | Tor | WebGoat Facebook SECURITY UU Learn the Path to a More Secure System UU Use Autopsy and Sleuthkit to Analyse Security Breaches UU Discover Dangerous Flaws in Your DNS Infrastructure JANUARY www.linuxjournal.com 2008 Creating IPsec and SSL/TLS $5.99US $6.99CAN 01 ISSUE + Tunnels in Linux 165 What’s New with Eric Raymond? 0 74470 03102 4 lj023:lj018.qxd 11/12/2007 5:36 PM Page 1 The Straight Talk People SM SINCE 1991 ABERDEEN TRUE QUAD-CORE SERVERS. UP TO 16 INDIVIDUAL CORES. ABERDEEN STONEHAVEN A135 ABERDEEN STONEHAVEN A151 ABERDEEN STONEHAVEN A284 Four Quad-Cores 1U 3TB Quad Quad-Core HPC Server 1U 4TB Dual Quad-Core Server 2U 8TB Dual Quad-Core Server • Up to four Quad-Core AMD Opteron™ 8000 Series processors • Up to two Quad-Core AMD Opteron 2000 Series processors • Up to two Quad-Core AMD Opteron 2000 Series processors • nVIDIA nForce Pro Chipset with 64-Bit Support • nVIDIA nForce Pro Chipset with 64-Bit Support • nVIDIA nForce Pro Chipset with 64-Bit Support • Up to 64GB 667MHz ECC Registered DDR2 SDRAM • Up to 32GB 667MHz ECC Registered DDR2 SDRAM • Up to 64GB 667MHz ECC Registered DDR2 SDRAM • Up to 3 x 1TB (3TB Total) Hot-Swap SATA Hard
    [Show full text]
  • Copyright, Culture and the Internet Professor Michael Geist Canada Research Chair in Internet and E-Commerce Law University of Ottawa, Faculty of Law
    The Canadian Copy-Fight: Copyright, Culture and the Internet Professor Michael Geist Canada Research Chair in Internet and E-commerce Law University of Ottawa, Faculty of Law Presentation at the OPCUG 2007-05-09 Michael Allen Geist (born 1968) is a Canadian academic who is recognized as an international expert in Internet and copyright issues. He holds a Canada Research Chair in Internet and E-Commerce Law at the University of Ottawa. Geist was educated at the University of Western Ontario, Osgoode Hall Law School, Cambridge University and the Columbia Law School. His weekly columns on new technology and its legal ramifications appear in the Toronto Star and the Ottawa Citizen, among other newspapers, and help bring these complex issues to the understanding of Canadians across the country. He is widely quoted in the national and international media on Internet law issues, and appears regularly before Parliamentary committees to testify on these subjects. He has received numerous awards for his work including Canarie’s IWAY Public Leadership Award for his contribution to the development of the Internet in Canada. He served on Canada's National Task Force on Spam and is the founder of the Canadian Internet Policy and Public Interest Clinic, Canada's leading public interest technology law clinic. He is also a board member of the Canadian Internet Registration Authority, which manages the dot-ca domain. In 2006, he announced that he would not run for re-election to the board. Dr. Geist was named one of Canada’s Top 40 Under 40 in 2002 On August 18, 2006, Dr.
    [Show full text]
  • Linux Journal | June 2016
    RUN A FULL VERSION OF R ON ANDROID ™ WATCH: ISSUE OVERVIEW V JUNE 2016 | ISSUE 266 http://www.linuxjournal.com Since 1994: The Original Magazine of the Linux Community Automate Certificate Maintenance with LET’S ENCRYPT How to + BUILD Organize a Raspberry Your Pi Camera Qubes GETTING STARTED VMs with nginx LJ266-June2016.indd 1 5/18/16 12:58 PM NEW! Ceph: Linux on Open-Source Power SDS Author: Practical books Author: Ted Schmidt Ted Schmidt Sponsor: Sponsor: HelpSystems for the most technical SUSE people on the planet. SSH: a Self-Audit: Modern Checking Lock for Assumptions Your Server? at the Door GEEK GUIDES Author: Author: Federico Kereki Greg Bledsoe Sponsor: Sponsor: Fox Technologies HelpSystems Agile Improve Product Business Development Processes with Author: an Enterprise Ted Schmidt Job Scheduler Sponsor: IBM Author: Mike Diehl Sponsor: Skybot Download books for free with a Finding Your DIY simple one-time registration. Way: Mapping Commerce Site Your Network Author: to Improve Reuven M. Lerner http://geekguide.linuxjournal.com Manageability Sponsor: GeoTrust Author: Bill Childers Sponsor: InterMapper LJ266-June2016.indd 2 5/18/16 12:58 PM NEW! Ceph: Linux on Open-Source Power SDS Author: Practical books Author: Ted Schmidt Ted Schmidt Sponsor: Sponsor: HelpSystems for the most technical SUSE people on the planet. SSH: a Self-Audit: Modern Checking Lock for Assumptions Your Server? at the Door GEEK GUIDES Author: Author: Federico Kereki Greg Bledsoe Sponsor: Sponsor: Fox Technologies HelpSystems Agile Improve Product Business Development Processes with Author: an Enterprise Ted Schmidt Job Scheduler Sponsor: IBM Author: Mike Diehl Sponsor: Skybot Download books for free with a Finding Your DIY simple one-time registration.
    [Show full text]
  • We the Media
    We the Media Grassroots Journalism by the People, for the People by Dan Gillmor Copyright © 2004 Dan Gillmor. All rights reserved. Printed in the United States of America. Published by O'Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O'Reilly Media books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (safari.oreilly.com). For more information, contact our corporate/institutional sales department: (800) 998-9938 or [email protected]. Editor: Allen Noren Production Editor: Mary Brady Cover Designer: Emma Colby Interior Designer: Melanie Wang Printing History: July 2004: First Edition. The O'Reilly logo is a registered trademark of O'Reilly Media, Inc. We the Media and related trade dress are trademarks of O'Reilly Media, Inc. Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and O'Reilly Media, Inc. was aware of a trademark claim, the designations have been printed in caps or initial caps. While every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein. This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 2.0 License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc- sa/2.0/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA. ISBN: 0-596-00733-7 [C] Contents Introduction ix 1.
    [Show full text]
  • Unleashing Web 2.0: from Concepts to Creativity
    Unleashing Web 2.0 From Concepts to Creativity Prelims-P374034.indd i 6/20/07 4:22:52 PM This page intentionally left blank Unleashing Web 2.0 From Concepts to Creativity Gottfried Vossen Stephan Hagemann AMSTERDAM • BOSTON • HEIDELBERG • LONDON NEW YORK • OXFORD • PARIS • SAN DIEGO SAN FRANCISCO • SINGAPORE • SYDNEY • TOKYO MORGAN KAUFMANN PUBLISHERS IS AN IMPRINT OF ELSEVIER Prelims-P374034.indd iii 6/20/07 4:22:53 PM Publisher: Denise E. M. Penrose Executive Editor: Diane Cerra Publishing Services Manager: George Morrison Project Manager: Mónica González de Mendoza Assistant Editor: Mary E. James Production Assistant: Lianne Hong Cover Design: Joanne Blank Cover Artist: Laura Vossen Composition: Charon Tec Interior printer: Sheridan Books, Inc. Cover printer: Phoenix Color Corporation Morgan Kaufmann Publishers is an imprint of Elsevier. 30 Corporate Drive, Suite 400, Burlington, MA 01803, USA This book is printed on acid-free paper. © 2007 by Elsevier, Inc. All rights reserved. Designations used by companies to distinguish their products are often claimed as trademarks or registered trademarks. In all instances in which Morgan Kaufmann Publishers is aware of a claim, the product names appear in initial capital or all capital letters. Readers, however, should contact the appropriate companies for more complete information regarding trademarks and registration. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means—electronic, mechanical, photocopying, scanning, or otherwise— without prior written permission of the publisher. Permissions may be sought directly from Elsevier’s Science & Technology Rights Department in Oxford, UK: phone: (+44) 1865 843830, fax: (+44) 1865 853333, E-mail: permissions@elsevier.
    [Show full text]
  • Linuxvilag-20.Pdf 11726KB 89 2012-05-28 10:15:46
    Töprengõ Hogy hová jutottunk...! estvérlapunk, a Linux Journal alatt kellett behozniuk a nyugat (lega- gekre fittyet hányva elérték a céljukat, most ünnepli a századik számát. lább) négyéves elõnyét, csekély külsõ és egy-két év múlva majd minden Mi ugyan csak a huszadik lap- támogatás mellett, vagy éppenséggel vállalatnál boldogan bólintanak, ha a Tzártát izguljuk végig, és nem tekinthe- az árral szemben úszva. Ez pedig látvá- munkatárs Linux alatt kíván dolgozni. tünk vissza nyolcéves múltra, mégis úgy nyos sikerrel járt. Ma már szerencsére De addig is még sok dolgunk van! Itt érzem, osztozhatunk az ünneplésben. nincs olyan épeszû közép- vagy nagy- van például nagy vesszõparipám, a Akárhogy is nézzük, nagyon sokat vállalat, ahol ne használnának linuxos magyarítás, a honosítás. változott a számítástechnika ez alatt a gépeket, sõt egyre több szervezet is nyolc év alatt. Hogy mennyire így van büszkén hirdeti, hogy náluk a szabad Szépen magyarul… ez, akkor tûnik szembe, amikor „rövid rendszerek viszik el a pálmát. Azért, Bizonyára mindenki tudja, aki pár © Kiskapu Kft. Minden jog fenntartva összefoglalót” szeretnénk készíteni errõl hogy ez megvalósulhatott, nagyon lapszámunkat átfutotta, hogy nálunk az idõszakról. Erre vállalkoztak az LJ nagy köszönet illeti az egyetemi és fõis- is komoly viták alakulnak ki egy-egy munkatársai is, és akárhogy igyekeztek kolai oktatókat, akik nem elégszenek szó használatával kapcsolatban. Szeren- is megragadni a száz legfontosabb meg a „szokásos” tananyaggal, hanem csére nagyon sok kifejezés értelmezése pillanatot (a hétoldalnyi összesítõt lásd folyamatosan újítják, bõvítik azt. Mert és használata már letisztult, de mindig a 20. oldalon), érezhetõ, hogy bizony a Linux remek segédeszköz a számítás- vannak „elsietett” fordítások, utólag sok mindent ki kellett hagyniuk.
    [Show full text]
  • State of the Art in Scientific Knowledge Creation, Dissemination, Evaluation and Maintenance
    DISI - Via Sommarive, 14 - 38123 POVO, Trento - Italy http://disi.unitn.it STATE OF THE ART IN SCIENTIFIC KNOWLEDGE CREATION, DISSEMINATION, EVALUATION AND MAINTENANCE Maintainer/Editor-in- Aliaksandr Birukou chief Core authors Marcos Baez, Aliaksandr Birukou, Ronald Chenu, Matus Medo, Nardine Osman, Diego Ponte, Jordi Sabater-mir, Luc Schneider, Matteo Turrini, Giuseppe Veltri, Joseph Rushton Wakeling, Hao Xu Maintainers/Editors Aliaksandr Birukou, Ronald Chenu, Jim Law, Nar- dine Osman, Diego Ponte, Azzurra Ragone, Luc Schneider, Matteo Turrini LiquidPub research Fabio Casati, Roberto Casati, Ralf Gerstner, Fausto group leaders Giunchiglia, Maurizio Marchese, Gloria Origgi, Alessandro Rossi, Carles Sierra, Yi-Cheng Zhang LiquidPub project Fabio Casati leader December 2009 Technical Report # DISI-09-067 D1.1 State of the Art Lead partner: UNITN; Contributing partners: IIIA-CSIC, CNRS, UNIFR, SPRINGER Grant agreement no. LiquidPub/2009/D1.1/v2.0 Project acronym EU FET OPEN: FP7-ICT-2007-C Version v2.0 Date December 18, 2009 State Solid Distribution Public Disclaimer The information in this document is subject to change without notice. Company or product names mentioned in this document may be trademarks or registered trademarks of their respective companies. This document is part of a research project funded by the European Community as project number 213360 acronym LiquidPublica- tion under THEME 3: FP7-ICT-2007-C FET OPEN. The full list of participants is available at http://project.liquidpub. org/partners-and-contributors/liquidpub-teams. Abstract This report presents an overview of the State of the Art in topics related to the on-going research in the Liquid Publications Project. The Liquid Publications Project (LiquidPub) aims to bring fundamental changes to the processes by which scientific knowledge is created, disseminated, evaluated and maintained.
    [Show full text]
  • Using Samba, 2Nd Edition Table of Contents
    file:///D|/Linux/Samba/using_samba_2ed/toc.html Using Samba, 2nd Edition By Jay Ts, Robert Eckstein, and David Collier- Brown 2nd Edition, February 2003 O'Reilly & Associates, ISBN: 0-596-00256-4 www.oreilly.com/catalog/samba2/ Table of Contents Preface 1. Learning the Samba What Is Samba? What Can Samba Do for Me? Getting Familiar with an SMB Network An Introduction to the SMB Protocol Windows Workgroups and Domains What's New in Samba 2.2? What's New in Samba 3.0? What Can Samba Do? An Overview of the Samba Distribution How Can I Get Samba? 2. Installing Samba on a Unix System Bundled Versions Downloading the Samba Distribution Configuring Samba Compiling and Installing Samba Enabling SWAT A Basic Samba Configuration File Firewall Configuration Starting the Samba Daemons Testing the Samba Daemons 3. Configuring Windows Clients file:///D|/Linux/Samba/using_samba_2ed/toc.html (1 of 4) [26/9/2003 12:10:16] file:///D|/Linux/Samba/using_samba_2ed/toc.html Windows Networking Concepts Setting Up Windows 95/98/Me Computers Setting Up Windows NT 4.0 Computers Setting Up Windows 2000 Computers Setting Up Windows XP Computers 4. Windows NT Domains Samba as the Primary Domain Controller Adding Computer Accounts Configuring Windows Clients for Domain Logons Logon Scripts Roaming Profiles System Policies Samba as a Domain Member Server Windows NT Domain Options 5. Unix Clients Sharing Files on Windows 95/98/Me Sharing Files on Windows NT/2000/XP smbclient smbfs smbsh smbutil and mount_smbfs 6. The Samba Configuration File The Samba Configuration File Special Sections Configuration Options Server Configuration Disk Share Configuration Networking Options with Samba Virtual Servers Logging Configuration Options 7.
    [Show full text]