The Official Samba 3.5.x HOWTO and Reference Guide
���Next

The Official Samba 3.5.x HOWTO and Reference Guide

Edited by

Jelmer R. Vernooij

The Samba Team

Edited by

John H. Terpstra

Samba Team

Edited by

Gerald (Jerry) Carter

Samba Team

Table of Contents

About the Cover Artwork
Attribution
Foreword
Preface
Conventions Used
Introduction
What Is Samba?
Why This Book?
Book Structure and Layout
I. General Installation
1. How to Install and Test SAMBA
Obtaining and Installing Samba
Configuring Samba (smb.conf)
Configuration File Syntax
TDB Database File Information
Starting Samba
Example Configuration
SWAT
List Shares Available on the Server
Connect with a UNIX Client
Connect from a Remote SMB Client
What If Things Don't Work?
Still Stuck?
Common Errors
Large Number of smbd Processes
Error Message: open_oplock_ipc
“The network name cannot be found”
2. Fast Start: Cure for Impatience
Features and Benefits
Description of Example Sites
Worked Examples
Standalone Server
Domain Member Server
Domain Controller
II. Server Configuration Basics
3. Server Types and Security Modes
Features and Benefits
Server Types
Samba Security Modes
User Level Security
Share-Level Security
Domain Security Mode (User-Level Security)
ADS Security Mode (User-Level Security)
Server Security (User Level Security)
Password Checking
Common Errors
What Makes Samba a Server?
What Makes Samba a Domain Controller?
What Makes Samba a Domain Member?
Constantly Losing Connections to Password Server
Stand-alone Server is converted to Domain Controller Now User accounts don't work
4. Domain Control
Features and Benefits
Single Sign-On and Domain Security
Basics of Domain Control
Domain Controller Types
Preparing for Domain Control
Domain Control: Example Configuration
Samba ADS Domain Control
Domain and Network Logon Configuration
Domain Network Logon Service
Security Mode and Master Browsers
Common Errors
“$” Cannot Be Included in Machine Name
Joining Domain Fails Because of Existing Machine Account
The System Cannot Log You On (C000019B)
The Machine Trust Account Is Not Accessible
Account Disabled
Domain Controller Unavailable
Cannot Log onto Domain Member Workstation After Joining Domain
5. Backup Domain Control
Features and Benefits
Essential Background Information
MS Windows NT4-style Domain Control
LDAP Configuration Notes
Active Directory Domain Control
What Qualifies a Domain Controller on the Network?
How Does a Workstation find its Domain Controller?
Backup Domain Controller Configuration
Example Configuration
Common Errors
Machine Accounts Keep Expiring
Can Samba Be a Backup Domain Controller to an NT4 PDC?
How Do I Replicate the smbpasswd File?
Can I Do This All with LDAP?
6. Domain Membership
Features and Benefits
MS Windows Workstation/Server Machine Trust Accounts
Manual Creation of Machine Trust Accounts
Managing Domain Machine Accounts using NT4 Server Manager
On-the-Fly Creation of Machine Trust Accounts
Making an MS Windows Workstation or Server a Domain Member
Domain Member Server
Joining an NT4-type Domain with Samba-3
Why Is This Better Than security = server?
Samba ADS Domain Membership
Configure smb.conf
Configure /etc/krb5.conf
Create the Computer Account
Testing Server Setup
Testing with smbclient
Notes
Sharing User ID Mappings between Samba Domain Members
Common Errors
Cannot Add Machine Back to Domain