SAMBA Project Documentation
Total Page:16
File Type:pdf, Size:1020Kb
SAMBA Project Documentation 29th August 2003 This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is its’ documentation. This release of the documentation represents a major revision or layout as well as contents. The most recent version of this document can be found at http://www.samba.org/ on the ”Documentation” page. Please send updates to Jelmer Vernooij, John H. Terpstra or Gerald (Jerry) Carter. The Samba-Team would like to express sincere thanks to the many people who have with or without their knowledge contributed to this update. The size and scope of this project would not have been possible without significant community contribution. A not insignificant number of ideas for inclusion (if not content itself) has been obtained from a number of Unofficial HOWTOs - to each such author a big ”Thank-you” is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. Legal Notice This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt 3 Attributions Introduction to Samba • David Lechnyr <[email protected]> How to Install and Test SAMBA • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Karl Auer Fast Start for the Impatient • John H. Terpstra <[email protected]> Server Types and Security Modes • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> Domain Control • John H. Terpstra <[email protected]> • Gerald (Jerry) Carter <[email protected]> • David Bannon <[email protected]> Backup Domain Control • John H. Terpstra <[email protected]> • Volker Lendecke <[email protected]> Domain Membership 4 • John H. Terpstra <[email protected]> • Jeremy Allison <[email protected]> • Gerald (Jerry) Carter <[email protected]> • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> Stand-Alone Servers • John H. Terpstra <[email protected]> MS Windows Network Configuration Guide • John H. Terpstra <[email protected]> Samba / MS Windows Network Browsing Guide • John H. Terpstra <[email protected]> • Jelmer R. Vernooij <[email protected]> Account Information Databases • Jelmer R. Vernooij <[email protected]> • Gerald (Jerry) Carter <[email protected]> • Jeremy Allison <[email protected]> • John H. Terpstra <[email protected]> • Olivier (lem) Lemaire <[email protected]> Mapping MS Windows and UNIX Groups • Jean Fran¸coisMicouleau • Gerald (Jerry) Carter <[email protected]> • John H. Terpstra <[email protected]> File, Directory and Share Access Controls • John H. Terpstra <[email protected]> • Jeremy Allison <[email protected]> • Jelmer R. Vernooij <[email protected]> (drawing) 5 File and Record Locking • Jeremy Allison <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Eric Roseme <[email protected]> Securing Samba • Andrew Tridgell <[email protected]> • John H. Terpstra <[email protected]> Interdomain Trust Relationships • John H. Terpstra <[email protected]> • Rafal Szczesniak <[email protected]> • Jelmer R. Vernooij <[email protected]> (drawing) • Stephen Langasek <[email protected]> Hosting a Microsoft Distributed File System tree on Samba • Shirish Kalele <[email protected]> Classical Printing Support • Kurt Pfeifle <kpfeifl[email protected]> • Gerald (Jerry) Carter <[email protected]> CUPS Printing Support in Samba 3.0 • Kurt Pfeifle <kpfeifl[email protected]> • Ciprian Vizitiu <[email protected]> (drawings) • Jelmer R. Vernooij <[email protected]> (drawings) Stackable VFS modules • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Tim Potter 6 • Simo Sorce (original vfs skel README) • Alexander Bokovoy (original vfs netatalk docs) • Stefan Metzmacher (Update for multiple modules) Advanced Network Management • John H. Terpstra <[email protected]> System and Account Policies • John H. Terpstra <[email protected]> Desktop Profile Management • John H. Terpstra <[email protected]> PAM based Distributed Authentication • John H. Terpstra <[email protected]> • Stephen Langasek <[email protected]> Integrating MS Windows networks with Samba • John H. Terpstra <[email protected]> Unicode/Charsets • Jelmer R. Vernooij <[email protected]> • TAKAHASHI Motonobu <[email protected]> Samba Backup Techniques • John H. Terpstra <[email protected]> High Availability Options • John H. Terpstra <[email protected]> Upgrading from Samba-2.x to Samba-3.0.0 • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> • Gerald (Jerry) Carter <[email protected]> Migration from NT4 PDC to Samba-3 PDC 7 • John H. Terpstra <[email protected]> SWAT - The Samba Web Administration Tool • John H. Terpstra <[email protected]> The Samba checklist • Andrew Tridgell <[email protected]> • Jelmer R. Vernooij <[email protected]> Analysing and solving samba problems • Gerald (Jerry) Carter <[email protected]> • Jelmer R. Vernooij <[email protected]> • David Bannon <[email protected]> Reporting Bugs • Jelmer R. Vernooij <[email protected]> • Andrew Tridgell <[email protected]> How to compile Samba • Jelmer R. Vernooij <[email protected]> • Andrew Tridgell <[email protected]> Portability • Jelmer R. Vernooij <[email protected]> Samba and other CIFS clients • Jelmer R. Vernooij <[email protected]> • Jim McDonough <[email protected]> (OS/2) Samba Performance Tuning • Paul Cochrane <[email protected]> • Jelmer R. Vernooij <[email protected]> • John H. Terpstra <[email protected]> DNS and DHCP Configuration Guide 8 • John H. Terpstra <[email protected]> Further Resources • Jelmer R. Vernooij <[email protected]> 9 Contents I. General Installation 26 1. Introduction to Samba 27 1.1. Background . 27 1.2. Terminology . 28 1.3. Related Projects . 29 1.4. SMB Methodology . 29 1.5. Epilogue . 30 1.6. Miscellaneous . 30 2. How to Install and Test SAMBA 31 2.1. Obtaining and installing samba . 31 2.2. Configuring samba (smb.conf) . 31 2.2.1. Example Configuration . 31 2.2.1.1. Test your config file with testparm . 32 2.2.2. SWAT . 32 2.3. Try listing the shares available on your server . 32 2.4. Try connecting with the unix client . 33 2.5. Try connecting from another SMB client . 33 2.6. What If Things Don’t Work? . 33 2.7. Common Errors . 33 2.7.1. Large number of smbd processes . 34 2.7.2. ”open oplock ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested” . 34 2.7.3. ”The network name cannot be found” . 34 3. Fast Start for the Impatient 35 3.1. Note . 35 II. Server Configuration Basics 36 4. Server Types and Security Modes 37 4.1. Features and Benefits . 37 4.2. Server Types . 38 4.3. Samba Security Modes . 38 4.3.1. User Level Security . 39 4.3.1.1. Example Configuration . 39 4.3.2. Share Level Security . 39 4.3.2.1. Example Configuration . 40 4.3.3. Domain Security Mode (User Level Security) . 40 4.3.3.1. Example Configuration . 40 10 Contents 4.3.4. ADS Security Mode (User Level Security) . 41 4.3.4.1. Example Configuration . 41 4.3.5. Server Security (User Level Security) . 42 4.3.5.1. Example Configuration . 43 4.4. Password checking . 43 4.5. Common Errors . 44 4.5.1. What makes Samba a SERVER? . 45 4.5.2. What makes Samba a Domain Controller? . 45 4.5.3. What makes Samba a Domain Member? . 45 4.5.4. Constantly Losing Connections to Password Server . 45 5. Domain Control 46 5.1. Features and Benefits . 47 5.2. Basics of Domain Control . 48 5.2.1. Domain Controller Types . 48 5.2.2. Preparing for Domain Control . 50 5.3. Domain Control - Example Configuration . 52 5.4. Samba ADS Domain Control . 54 5.5. Domain and Network Logon Configuration . 54 5.5.1. Domain Network Logon Service . 54 5.5.1.1. Example Configuration . 55 5.5.1.2. The Special Case of MS Windows XP Home Edition . 55 5.5.1.3. The Special Case of Windows 9x / Me . 55 5.5.2. Security Mode and Master Browsers . 57 5.6. Common Errors . 58 5.6.1. ’$’ cannot be included in machine name . 58 5.6.2. Joining domain fails because of existing machine account . 58 5.6.3. The system can not log you on (C000019B).... 58 5.6.4. The machine trust account not accessible . 59 5.6.5. Account disabled . 59 5.6.6. Domain Controller Unavailable . 59 5.6.7. Can not log onto domain member workstation after joining domain . 60 6. Backup Domain Control 62 6.1. Features And Benefits . 62 6.2. Essential Background Information . 63 6.2.1. MS Windows NT4 Style Domain Control . 63 6.2.1.1. Example PDC Configuration . 65 6.2.2. Active Directory Domain Control . 65 6.2.3. What qualifies a Domain Controller on the network? . 65 6.2.4. How does a Workstation find its domain controller? . 65 6.3. Backup Domain Controller Configuration . 66 6.3.1. Example Configuration . 66 6.4. Common Errors . 67 6.4.1. Machine Accounts keep expiring, what can I do? . 67 6.4.2. Can Samba be a Backup Domain Controller to an NT4 PDC? . 67 6.4.3. How do I replicate the smbpasswd file? . 68 6.4.4. Can I do this all with LDAP? . 68 11 Contents 7. Domain Membership 69 7.1. Features and Benefits . 69 7.2. MS Windows Workstation/Server Machine Trust Accounts . 70 7.2.1. Manual Creation of Machine Trust Accounts . 71 7.2.2. Using NT4 Server Manager to Add Machine Accounts to the Domain . 72 7.2.3. ”On-the-Fly” Creation of Machine Trust Accounts .