SAMBA Project Documentation
Total Page:16
File Type:pdf, Size:1020Kb
SAMBA Project Documentation 23rd September 2003 This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is its’ documentation. This release of the documentation represents a major revision or layout as well as contents. The most recent version of this document can be found at http://www.samba.org/ on the ”Documentation” page. Please send updates to Jelmer Vernooij, John H. Terpstra or Gerald (Jerry) Carter. The Samba-Team would like to express sincere thanks to the many people who have with or without their knowledge contributed to this update. The size and scope of this project would not have been possible without significant community contribution. A not insignificant number of ideas for inclusion (if not content itself) has been obtained from a number of Unofficial HOWTOs - to each such author a big ”Thank-you” is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. Legal Notice This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt 3 Attributions Introduction to Samba • David Lechnyr <[email protected]> How to Install and Test SAMBA • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Karl Auer <[email protected]> • Dan Shearer <[email protected]> Fast Start for the Impatient • John H. Terpstra <[email protected]> Server Types and Security Modes • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> Domain Control • John H. Terpstra <[email protected]> • Gerald (Jerry) Carter <[email protected]> • David Bannon <[email protected]> • Guenther Deschner <[email protected]> (LDAP updates) Backup Domain Control • John H. Terpstra <[email protected]> 4 • Volker Lendecke <[email protected]> • Guenther Deschner <[email protected]> (LDAP updates) Domain Membership • John H. Terpstra <[email protected]> • Jeremy Allison <[email protected]> • Gerald (Jerry) Carter <[email protected]> • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> • Guenther Deschner <[email protected]> (LDAP updates) Stand-alone Servers • John H. Terpstra <[email protected]> MS Windows Network Configuration Guide • John H. Terpstra <[email protected]> Network Browsing • John H. Terpstra <[email protected]> • Jelmer R. Vernooij <[email protected]> Account Information Databases • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Gerald (Jerry) Carter <[email protected]> • Jeremy Allison <[email protected]> • Guenther Deschner <[email protected]> (LDAP updates) • Olivier (lem) Lemaire <[email protected]> Group Mapping MS Windows and UNIX • John H. Terpstra <[email protected]> • Jean Fran¸coisMicouleau 5 • Gerald (Jerry) Carter <[email protected]> File, Directory and Share Access Controls • John H. Terpstra <[email protected]> • Jeremy Allison <[email protected]> • Jelmer R. Vernooij <[email protected]> (drawing) File and Record Locking • Jeremy Allison <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Eric Roseme <[email protected]> Securing Samba • Andrew Tridgell <[email protected]> • John H. Terpstra <[email protected]> Interdomain Trust Relationships • John H. Terpstra <[email protected]> • Rafal Szczesniak <[email protected]> • Jelmer R. Vernooij <[email protected]> (drawing) • Stephen Langasek <[email protected]> Hosting a Microsoft Distributed File System tree on Samba • Shirish Kalele <[email protected]> • John H. Terpstra <[email protected]> Classical Printing Support • Kurt Pfeifle <kpfeifl[email protected]> • Gerald (Jerry) Carter <[email protected]> • John H. Terpstra <[email protected]> CUPS Printing Support 6 • Kurt Pfeifle <kpfeifl[email protected]> • Ciprian Vizitiu <[email protected]> (drawings) • Jelmer R. Vernooij <[email protected]> (drawings) Stackable VFS modules • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Tim Potter <[email protected]> • Simo Sorce (original vfs skel README) • Alexander Bokovoy (original vfs netatalk docs) • Stefan Metzmacher (Update for multiple modules) Winbind: Use of Domain Accounts • Tim Potter <[email protected]> • Andrew Tridgell <[email protected]> • Naag Mummaneni <getnag@rediffmail.com> (Notes for Solaris) • John Trostel <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> Advanced Network Management • John H. Terpstra <[email protected]> System and Account Policies • John H. Terpstra <[email protected]> Desktop Profile Management • John H. Terpstra <[email protected]> PAM-Based Distributed Authentication • John H. Terpstra <[email protected]> • Stephen Langasek <[email protected]> 7 Integrating MS Windows Networks with Samba • John H. Terpstra <[email protected]> Unicode/Charsets • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • TAKAHASHI Motonobu <[email protected]> Samba Backup Techniques • John H. Terpstra <[email protected]> High Availability Options • John H. Terpstra <[email protected]> Upgrading from Samba-2.x to Samba-3.0.0 • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Gerald (Jerry) Carter <[email protected]> Migration from NT4 PDC to Samba-3 PDC • John H. Terpstra <[email protected]> SWAT The Samba Web Administration Tool • John H. Terpstra <[email protected]> The Samba Checklist • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> • Dan Shearer <[email protected]> Analyzing and Solving Samba Problems • Gerald (Jerry) Carter <[email protected]> • Jelmer R. Vernooij <[email protected]> • David Bannon <[email protected]> 8 • Dan Shearer <[email protected]> Reporting Bugs • John H. Terpstra <[email protected]> • Jelmer R. Vernooij <[email protected]> • Andrew Tridgell <[email protected]> How to Compile Samba • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Andrew Tridgell <[email protected]> Portability • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> Samba and Other CIFS Clients • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Dan Shearer <[email protected]> • Jim McDonough <[email protected]> (OS/2) Samba Performance Tuning • Paul Cochrane <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> DNS and DHCP Configuration Guide • John H. Terpstra <[email protected]> Further Resources • Jelmer R. Vernooij <[email protected]> 9 Contents I. General Installation 11 1. Introduction to Samba 12 1.1. Background . 12 1.2. Terminology . 13 1.3. Related Projects . 14 1.4. SMB Methodology . 14 1.5. Epilogue . 15 1.6. Miscellaneous . 15 2. How to Install and Test SAMBA 16 2.1. Obtaining and Installing Samba . 16 2.2. Configuring Samba (smb.conf) . 16 2.2.1. Configuration file syntax . 16 2.2.2. Example Configuration . 16 2.2.2.1. Test Your Config File with testparm . 17 2.2.3. SWAT . 18 2.3. List Shares Available on the Server . 18 2.4. Connect with a UNIX Client . 18 2.5. Connect from a Remote SMB Client . 19 2.6. What If Things Don’t Work? . 19 2.7. Common Errors . 19 2.7.1. Large Number of smbd Processes . 20 2.7.2. Error Message: open oplock ipc........................ 20 2.7.3. “The network name cannot be found” . 20 3. Fast Start for the Impatient 21 3.1. Note . 21 II. Server Configuration Basics 22 4. Server Types and Security Modes 23 4.1. Features and Benefits . 23 4.2. Server Types . 24 4.3. Samba Security Modes . 24 4.3.1. User Level Security . 25 4.3.1.1. Example Configuration . 25 4.3.2. Share Level Security . 25 4.3.2.1. Example Configuration . 26 4.3.3. Domain Security Mode (User Level Security) . 26 4.3.3.1. Example Configuration . 26 10 Contents 4.3.4. ADS Security Mode (User Level Security) . 27 4.3.4.1. Example Configuration . 27 4.3.5. Server Security (User Level Security) . 28 4.3.5.1. Example Configuration . 29 4.4. Password Checking . 29 4.5. Common Errors . 30 4.5.1. What Makes Samba a Server? . 31 4.5.2. What Makes Samba a Domain Controller? . 31 4.5.3. What Makes Samba a Domain Member? . 31 4.5.4. Constantly Losing Connections to Password Server . 31 5. Domain Control 32 5.1. Features and Benefits . 33 5.2. Basics of Domain Control . 35 5.2.1. Domain Controller Types . 35 5.2.2. Preparing for Domain Control . 37 5.3. Domain Control — Example Configuration . 39 5.4. Samba ADS Domain Control . 41 5.5. Domain and Network Logon Configuration . 41 5.5.1. Domain Network Logon Service . 41 5.5.1.1. Example Configuration . 41 5.5.1.2. The Special Case of MS Windows XP Home Edition . 42 5.5.1.3. The Special Case of Windows 9x/Me . 42 5.5.2. Security Mode and Master Browsers . 44 5.6. Common Errors . 44 5.6.1. “$” Cannot Be Included in Machine Name . 44 5.6.2. Joining Domain Fails Because of Existing Machine Account . 45 5.6.3. The System Cannot Log You On (C000019B) . 45 5.6.4. The Machine Trust Account Is Not Accessible . 46 5.6.5. Account Disabled . 46 5.6.6. Domain Controller Unavailable . 46 5.6.7. Cannot Log onto Domain Member Workstation After Joining Domain . 47 6. Backup Domain Control 48 6.1. Features and Benefits . 48 6.2. Essential Background Information . 49 6.2.1. MS Windows NT4-style Domain Control . 49 6.2.1.1. Example PDC Configuration . 51 6.2.2. LDAP Configuration Notes . 51 6.2.3. Active Directory Domain Control . 52 6.2.4. What Qualifies a Domain Controller on the Network? . 52 6.2.5. How does a Workstation find its Domain Controller? .