Linux in a Windows World By Roderick W. Smith Publisher: O'Reilly Pub Date: February 2005 ISBN: 0-596-00758-2 Pages: 494 Table of • Contents • Index • Reviews Reader The latest in O'Reilly's line of bestselling Linux titles, Linux in a Windows • Reviews World is an invaluable companion for any system administrator interested • Errata in integrating Linux into their Windows environment. This book takes an • Academic in-depth look at exactly how Linux can be brought into an organization that's currently based on Microsoft Windows systems. Featuring a litany of insider tips and techniques, Linux in a Windows World dispenses all the practical advice you need to migrate to this revolutionary open source software. Linux in a Windows World By Roderick W. Smith Publisher: O'Reilly Pub Date: February 2005 ISBN: 0-596-00758-2 Pages: 494 Table of • Contents • Index • Reviews Reader • Reviews • Errata • Academic Copyright Dedication Preface Audience Contents of This Book Conventions Used in This Book Using Code Examples Comments and Questions Safari Enabled Acknowledgments Part I: Linux's Place in a Windows Network Chapter 1. Linux's Features Section 1.1. Where Linux Fits in a Network Section 1.2. Linux as a Server Section 1.3. Linux on the Desktop Section 1.4. Comparing Linux and Windows Features Section 1.5. Summary Chapter 2. Linux Deployment Strategies Section 2.1. Linux Server Options Section 2.2. Linux Desktop Migration Section 2.3. Linux and Thin Clients Section 2.4. Summary Part II: Sharing Files and Printers Chapter 3. Basic Samba Configuration Section 3.1. Installing Samba Section 3.2. The Samba Configuration File Format Section 3.3. Identifying the Server Section 3.4. Setting Master Browser Options Section 3.5. Setting Password Options Section 3.6. Summary Chapter 4. File and Printer Shares Section 4.1. Common File Share Options Section 4.2. Printing with CUPS Section 4.3. Creating a Printer Share Section 4.4. Delivering Printer Drivers to Windows Clients Section 4.5. Example Shares Section 4.6. Summary Chapter 5. Managing a NetBIOS Network with Samba Section 5.1. Enabling Domain Controller Functions Section 5.2. Enabling NBNS Functions Section 5.3. Assuming Master Browser Duties Section 5.4. Summary Chapter 6. Linux as an SMB/CIFS Client Section 6.1. Using NetBIOS Name Resolution Section 6.2. Accessing File Shares Section 6.3. Printing to Printer Shares Section 6.4. Configuring GUI Workgroup Browsers Section 6.5. Summary Part III: Centralized Authentication Tools Chapter 7. Using NT Domains for Linux Authentication Section 7.1. The Principles Behind Winbind Section 7.2. Samba Winbind Configuration Section 7.3. PAM and NSS Winbind Options Section 7.4. Winbind in Action Section 7.5. Summary Chapter 8. Using LDAP Section 8.1. The Principles Behind LDAP Section 8.2. Configuring an OpenLDAP Server Section 8.3. Creating a User Directory Section 8.4. Configuring Linux to Use LDAP for Login Authentication Section 8.5. Configuring Windows to Use LDAPfor Login Authentication Section 8.6. Summary Chapter 9. Kerberos Configuration and Use Section 9.1. Kerberos Fundamentals Section 9.2. Linux Kerberos Server Configuration Section 9.3. Kerberos Application Server Configuration Section 9.4. Linux Kerberos Client Configuration Section 9.5. Windows Kerberos Tools Section 9.6. Summary Part IV: Remote Login Tools Chapter 10. Remote Text-Mode Administration and Use Section 10.1. What Can Text-Mode Logins Do? Section 10.2. SSH Server Configuration Section 10.3. Telnet Server Configuration Section 10.4. Windows Remote-Login Tools Section 10.5. Summary Chapter 11. Running GUI Programs Remotely Section 11.1. What Can GUI Logins Do? Section 11.2. Using Remote X Access Section 11.3. Encrypting X by SSH Tunneling Section 11.4. VNC Configuration and Use Section 11.5. Running Windows Programs from Linux Section 11.6. Summary Chapter 12. Linux Thin Client Configurations Section 12.1. The Role of Thin Client Computing Section 12.2. Hardware Requirements Section 12.3. Linux as a Server for Thin Clients Section 12.4. Linux as a Thin Client Section 12.5. Summary Part V: Additional Server Programs Chapter 13. Configuring Mail Servers Section 13.1. Linux Mail Server Options Section 13.2. Configuring Sendmail Section 13.3. Configuring Postfix Section 13.4. Configuring POP and IMAP Servers Section 13.5. Scanning for Spam, Worms, and Viruses Section 13.6. Supplementing a Microsoft Exchange Server Section 13.7. Using Fetchmail Section 13.8. Summary Chapter 14. Network Backups Section 14.1. Backup Strategies Section 14.2. Backing Up the Linux System Section 14.3. Backing Up with Samba Section 14.4. Backing Up with AMANDA Section 14.5. Summary Chapter 15. Managing a Network with Linux Section 15.1. Delivering IP Addresses with DHCP Section 15.2. Delivering Names with DNS Section 15.3. Keeping Clocks Synchronized with NTP Section 15.4. Summary Part VI: Appendixes Appendix A. Configuring PAM Section A.1. PAM Principles Section A.2. The PAM Configuration File Format Section A.3. PAM Modules Section A.4. Sample PAM Configurations Section A.5. Summary Appendix B. Linux on the Desktop Section B.1. Linux Desktop Applications for All Occasions Section B.2. Configuring Applications and Environments Section B.3. Running Windows Programs in Linux Section B.4. File and Filesystem Compatibility Section B.5. Font Handling Section B.6. Summary Colophon Index Copyright © 2005 O'Reilly Media, Inc. All rights reserved. Printed in the United States of America. Published by O'Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O'Reilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (http://safari.oreilly.com). For more information, contact our corporate/institutional sales department: (800) 998-9938 or [email protected]. Nutshell Handbook, the Nutshell Handbook logo, and the O'Reilly logo are registered trademarks of O'Reilly Media, Inc. The Linux series designations, Linux in a Windows World, images of the American West, and related trade dress are trademarks of O'Reilly Media, Inc. Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and O'Reilly Media, Inc. was aware of a trademark claim, the designations have been printed in caps or initial caps. While every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein. Dedication This book is for Theo. May his Apatosaurs, Dilophosaurs, and Gigantosaurs forever be his friends. Preface Hardly a day goes by when Linux doesn't make the news. Judging by the buzz, you might think that Linux is poised for world dominationthe stated goal for Linux in a now-famous quip by its creator, Linus Torvalds. In truth, Linux still faces numerous challenges before it can dominate the computing world, much less the world at large. One of these challenges is the huge installed base of Microsoft Windows systems. As a practical matter, Linux must coexist with these systems. Indeed, the challenge of coexisting with Windows can be viewed as an opportunity: Linux can be integrated into a Windows network, providing a reliable and low-cost platform on which to run vital services for Windows systems, or even serving as a workstation on an otherwise Windows-dominated network. This book is dedicated to describing this opportunity for Linux. If you're reading this Preface, chances are you work with a Windows-dominated network but know something about Linux and wonder how you can best use Linux to improve your Windows network. In broad strokes, you can replace Windows servers, supplement Windows servers with Linux servers, use Linux to implement new services you don't currently run, deploy Linux-based thin clients, or migrate some or all of your Windows desktop systems to Linux. This book provides guidance about how to accomplish these tasks, with an emphasis on Linux in the role of network server operating system (OS). This book will help you reduce costs and improve reliability by describing how several common Linux programs and protocolsSamba, OpenLDAP, VNC, BIND, and so oncan be integrated into a Windows network. This book provides enough information to get any of these programs up and running, provided you've already got a working Linux system. Of course, a book of this size can't cover every detail; if you need to do very complex things, you'll need to consult other books or documentation. The relevant chapters provide pointers. Audience I've written this book with an administrator of a Windows network in mind, but with the assumption that you know the basics of Linux system administration. You might be uncertain of the details as to where Linux might fit into your network or how to get started configuring particular Linux server programs. That's where this book can help: it introduces the most cost-effective ways to add Linux to your network and describes the basics of how to get started configuring specific servers. If you're not already familiar with basic Linux system administration, you should consult a book on the topic, such as Running Linux (O'Reilly) or Linux System Administration (Sybex). Such books will help you with tasks ranging from installing Linux to recompiling your kernel. You should be familiar with networking basics. Although I sometimes provide brief overviews of important prerequisite knowledge, this book doesn't dwell on the details of the TCP/IP stack or how best to lay out a network.