diff options
author | Jelmer Vernooij <jelmer@samba.org> | 2003-03-31 21:42:19 +0000 |
---|---|---|
committer | Jelmer Vernooij <jelmer@samba.org> | 2003-03-31 21:42:19 +0000 |
commit | 5130e1468e2028613a9f5369237db25b091fd548 (patch) | |
tree | 2f47b35421dff868470808982eb4227eedb6478c /docs/htmldocs/Samba-HOWTO-Collection.html | |
parent | a219ba5ab23d6d0f52e87f005d1c88e562875e54 (diff) | |
download | samba-5130e1468e2028613a9f5369237db25b091fd548.tar.gz samba-5130e1468e2028613a9f5369237db25b091fd548.tar.bz2 samba-5130e1468e2028613a9f5369237db25b091fd548.zip |
More doc updates:
- Move information about compiling with ADS support to appendix about compiling
- Make DOMAIN_MEMBER NT4-domain only (because current ADS info was incomplete and becoming an ADS domain member is documented more properly in ADS-HOWTO)
(This used to be commit efe3dd876ac61af0abc46539369860216eeca79b)
Diffstat (limited to 'docs/htmldocs/Samba-HOWTO-Collection.html')
-rw-r--r-- | docs/htmldocs/Samba-HOWTO-Collection.html | 1422 |
1 files changed, 697 insertions, 725 deletions
diff --git a/docs/htmldocs/Samba-HOWTO-Collection.html b/docs/htmldocs/Samba-HOWTO-Collection.html index d9125d5aad..ea080fbd79 100644 --- a/docs/htmldocs/Samba-HOWTO-Collection.html +++ b/docs/htmldocs/Samba-HOWTO-Collection.html @@ -353,42 +353,38 @@ HREF="#ADS" ><DL ><DT >8.1. <A -HREF="#AEN1343" ->Installing the required packages for Debian</A +HREF="#AEN1336" +>Setup your <TT +CLASS="FILENAME" +>smb.conf</TT +></A ></DT ><DT >8.2. <A -HREF="#AEN1350" ->Installing the required packages for RedHat</A +HREF="#AEN1347" +>Setup your <TT +CLASS="FILENAME" +>/etc/krb5.conf</TT +></A ></DT ><DT >8.3. <A -HREF="#AEN1360" ->Compile Samba</A -></DT -><DT ->8.4. <A -HREF="#AEN1375" ->Setup your /etc/krb5.conf</A -></DT -><DT ->8.5. <A -HREF="#AEN1385" +HREF="#AEN1358" >Create the computer account</A ></DT ><DT ->8.6. <A -HREF="#AEN1397" +>8.4. <A +HREF="#AEN1370" >Test your server setup</A ></DT ><DT ->8.7. <A -HREF="#AEN1402" +>8.5. <A +HREF="#AEN1375" >Testing with smbclient</A ></DT ><DT ->8.8. <A -HREF="#AEN1405" +>8.6. <A +HREF="#AEN1378" >Notes</A ></DT ></DL @@ -402,17 +398,12 @@ HREF="#DOMAIN-SECURITY" ><DL ><DT >9.1. <A -HREF="#AEN1427" +HREF="#AEN1400" >Joining an NT Domain with Samba 3.0</A ></DT ><DT >9.2. <A -HREF="#AEN1482" ->Samba and Windows 2000 Domains</A -></DT -><DT ->9.3. <A -HREF="#AEN1485" +HREF="#AEN1454" >Why is this better than security = server?</A ></DT ></DL @@ -435,34 +426,34 @@ HREF="#INTEGRATE-MS-NETWORKS" ><DL ><DT >10.1. <A -HREF="#AEN1517" +HREF="#AEN1486" >Agenda</A ></DT ><DT >10.2. <A -HREF="#AEN1539" +HREF="#AEN1508" >Name Resolution in a pure Unix/Linux world</A ></DT ><DT >10.3. <A -HREF="#AEN1602" +HREF="#AEN1571" >Name resolution as used within MS Windows networking</A ></DT ><DT >10.4. <A -HREF="#AEN1647" +HREF="#AEN1616" >How browsing functions and how to deploy stable and dependable browsing using Samba</A ></DT ><DT >10.5. <A -HREF="#AEN1657" +HREF="#AEN1626" >MS Windows security options and how to configure Samba for seemless integration</A ></DT ><DT >10.6. <A -HREF="#AEN1727" +HREF="#AEN1696" >Conclusions</A ></DT ></DL @@ -476,39 +467,39 @@ HREF="#UNIX-PERMISSIONS" ><DL ><DT >11.1. <A -HREF="#AEN1748" +HREF="#AEN1717" >Viewing and changing UNIX permissions using the NT security dialogs</A ></DT ><DT >11.2. <A -HREF="#AEN1752" +HREF="#AEN1721" >How to view file security on a Samba share</A ></DT ><DT >11.3. <A -HREF="#AEN1763" +HREF="#AEN1732" >Viewing file ownership</A ></DT ><DT >11.4. <A -HREF="#AEN1783" +HREF="#AEN1752" >Viewing file or directory permissions</A ></DT ><DT >11.5. <A -HREF="#AEN1819" +HREF="#AEN1788" >Modifying file or directory permissions</A ></DT ><DT >11.6. <A -HREF="#AEN1841" +HREF="#AEN1810" >Interaction with the standard Samba create mask parameters</A ></DT ><DT >11.7. <A -HREF="#AEN1905" +HREF="#AEN1864" >Interaction with the standard Samba file attribute mapping</A ></DT @@ -524,17 +515,17 @@ managed authentication</A ><DL ><DT >12.1. <A -HREF="#AEN1926" +HREF="#AEN1885" >Samba and PAM</A ></DT ><DT >12.2. <A -HREF="#AEN1970" +HREF="#AEN1929" >Distributed Authentication</A ></DT ><DT >12.3. <A -HREF="#AEN1977" +HREF="#AEN1936" >PAM Configuration in smb.conf</A ></DT ></DL @@ -548,7 +539,7 @@ HREF="#MSDFS" ><DL ><DT >13.1. <A -HREF="#AEN1997" +HREF="#AEN1956" >Instructions</A ></DT ></DL @@ -562,22 +553,22 @@ HREF="#PRINTING" ><DL ><DT >14.1. <A -HREF="#AEN2058" +HREF="#AEN2017" >Introduction</A ></DT ><DT >14.2. <A -HREF="#AEN2080" +HREF="#AEN2039" >Configuration</A ></DT ><DT >14.3. <A -HREF="#AEN2188" +HREF="#AEN2147" >The Imprints Toolset</A ></DT ><DT >14.4. <A -HREF="#AEN2231" +HREF="#AEN2190" >Diagnosis</A ></DT ></DL @@ -591,37 +582,37 @@ HREF="#CUPS-PRINTING" ><DL ><DT >15.1. <A -HREF="#AEN2343" +HREF="#AEN2302" >Introduction</A ></DT ><DT >15.2. <A -HREF="#AEN2348" +HREF="#AEN2307" >CUPS - RAW Print Through Mode</A ></DT ><DT >15.3. <A -HREF="#AEN2403" +HREF="#AEN2362" >The CUPS Filter Chains</A ></DT ><DT >15.4. <A -HREF="#AEN2442" +HREF="#AEN2401" >CUPS Print Drivers and Devices</A ></DT ><DT >15.5. <A -HREF="#AEN2519" +HREF="#AEN2478" >Limiting the number of pages users can print</A ></DT ><DT >15.6. <A -HREF="#AEN2608" +HREF="#AEN2567" >Advanced Postscript Printing from MS Windows</A ></DT ><DT >15.7. <A -HREF="#AEN2623" +HREF="#AEN2582" >Auto-Deletion of CUPS spool files</A ></DT ></DL @@ -635,37 +626,37 @@ HREF="#WINBIND" ><DL ><DT >16.1. <A -HREF="#AEN2685" +HREF="#AEN2644" >Abstract</A ></DT ><DT >16.2. <A -HREF="#AEN2689" +HREF="#AEN2648" >Introduction</A ></DT ><DT >16.3. <A -HREF="#AEN2702" +HREF="#AEN2661" >What Winbind Provides</A ></DT ><DT >16.4. <A -HREF="#AEN2713" +HREF="#AEN2672" >How Winbind Works</A ></DT ><DT >16.5. <A -HREF="#AEN2756" +HREF="#AEN2715" >Installation and Configuration</A ></DT ><DT >16.6. <A -HREF="#AEN3013" +HREF="#AEN2972" >Limitations</A ></DT ><DT >16.7. <A -HREF="#AEN3023" +HREF="#AEN2982" >Conclusion</A ></DT ></DL @@ -679,57 +670,57 @@ HREF="#IMPROVED-BROWSING" ><DL ><DT >17.1. <A -HREF="#AEN3033" +HREF="#AEN2992" >Overview of browsing</A ></DT ><DT >17.2. <A -HREF="#AEN3038" +HREF="#AEN2997" >Browsing support in samba</A ></DT ><DT >17.3. <A -HREF="#AEN3046" +HREF="#AEN3005" >Problem resolution</A ></DT ><DT >17.4. <A -HREF="#AEN3055" +HREF="#AEN3014" >Browsing across subnets</A ></DT ><DT >17.5. <A -HREF="#AEN3095" +HREF="#AEN3054" >Setting up a WINS server</A ></DT ><DT >17.6. <A -HREF="#AEN3114" +HREF="#AEN3073" >Setting up Browsing in a WORKGROUP</A ></DT ><DT >17.7. <A -HREF="#AEN3132" +HREF="#AEN3091" >Setting up Browsing in a DOMAIN</A ></DT ><DT >17.8. <A -HREF="#AEN3142" +HREF="#AEN3101" >Forcing samba to be the master</A ></DT ><DT >17.9. <A -HREF="#AEN3151" +HREF="#AEN3110" >Making samba the domain master</A ></DT ><DT >17.10. <A -HREF="#AEN3169" +HREF="#AEN3128" >Note about broadcast addresses</A ></DT ><DT >17.11. <A -HREF="#AEN3172" +HREF="#AEN3131" >Multiple interfaces</A ></DT ></DL @@ -743,17 +734,17 @@ HREF="#VFS" ><DL ><DT >18.1. <A -HREF="#AEN3190" +HREF="#AEN3149" >Introduction and configuration</A ></DT ><DT >18.2. <A -HREF="#AEN3199" +HREF="#AEN3158" >Included modules</A ></DT ><DT >18.3. <A -HREF="#AEN3253" +HREF="#AEN3212" >VFS modules available elsewhere</A ></DT ></DL @@ -772,52 +763,52 @@ HREF="#SPEED" ><DL ><DT >20.1. <A -HREF="#AEN3320" +HREF="#AEN3279" >Comparisons</A ></DT ><DT >20.2. <A -HREF="#AEN3326" +HREF="#AEN3285" >Socket options</A ></DT ><DT >20.3. <A -HREF="#AEN3333" +HREF="#AEN3292" >Read size</A ></DT ><DT >20.4. <A -HREF="#AEN3338" +HREF="#AEN3297" >Max xmit</A ></DT ><DT >20.5. <A -HREF="#AEN3343" +HREF="#AEN3302" >Log level</A ></DT ><DT >20.6. <A -HREF="#AEN3346" +HREF="#AEN3305" >Read raw</A ></DT ><DT >20.7. <A -HREF="#AEN3351" +HREF="#AEN3310" >Write raw</A ></DT ><DT >20.8. <A -HREF="#AEN3355" +HREF="#AEN3314" >Slow Clients</A ></DT ><DT >20.9. <A -HREF="#AEN3359" +HREF="#AEN3318" >Slow Logins</A ></DT ><DT >20.10. <A -HREF="#AEN3362" +HREF="#AEN3321" >Client tuning</A ></DT ></DL @@ -831,17 +822,17 @@ HREF="#GROUPPROFILES" ><DL ><DT >21.1. <A -HREF="#AEN3410" +HREF="#AEN3369" >Windows '9x</A ></DT ><DT >21.2. <A -HREF="#AEN3420" +HREF="#AEN3379" >Windows NT 4</A ></DT ><DT >21.3. <A -HREF="#AEN3458" +HREF="#AEN3417" >Windows 2000/XP</A ></DT ></DL @@ -855,32 +846,32 @@ HREF="#SECURING-SAMBA" ><DL ><DT >22.1. <A -HREF="#AEN3539" +HREF="#AEN3498" >Introduction</A ></DT ><DT >22.2. <A -HREF="#AEN3542" +HREF="#AEN3501" >Using host based protection</A ></DT ><DT >22.3. <A -HREF="#AEN3549" +HREF="#AEN3508" >Using interface protection</A ></DT ><DT >22.4. <A -HREF="#AEN3558" +HREF="#AEN3517" >Using a firewall</A ></DT ><DT >22.5. <A -HREF="#AEN3565" +HREF="#AEN3524" >Using a IPC$ share deny</A ></DT ><DT >22.6. <A -HREF="#AEN3574" +HREF="#AEN3533" >Upgrading Samba</A ></DT ></DL @@ -894,12 +885,12 @@ HREF="#UNICODE" ><DL ><DT >23.1. <A -HREF="#AEN3588" +HREF="#AEN3547" >What are charsets and unicode?</A ></DT ><DT >23.2. <A -HREF="#AEN3597" +HREF="#AEN3556" >Samba and charsets</A ></DT ></DL @@ -922,27 +913,27 @@ HREF="#PORTABILITY" ><DL ><DT >24.1. <A -HREF="#AEN3626" +HREF="#AEN3585" >HPUX</A ></DT ><DT >24.2. <A -HREF="#AEN3632" +HREF="#AEN3591" >SCO Unix</A ></DT ><DT >24.3. <A -HREF="#AEN3636" +HREF="#AEN3595" >DNIX</A ></DT ><DT >24.4. <A -HREF="#AEN3665" +HREF="#AEN3624" >RedHat Linux Rembrandt-II</A ></DT ><DT >24.5. <A -HREF="#AEN3671" +HREF="#AEN3630" >AIX</A ></DT ></DL @@ -956,27 +947,27 @@ HREF="#OTHER-CLIENTS" ><DL ><DT >25.1. <A -HREF="#AEN3691" +HREF="#AEN3650" >Macintosh clients?</A ></DT ><DT >25.2. <A -HREF="#AEN3700" +HREF="#AEN3659" >OS2 Client</A ></DT ><DT >25.3. <A -HREF="#AEN3740" +HREF="#AEN3699" >Windows for Workgroups</A ></DT ><DT >25.4. <A -HREF="#AEN3764" +HREF="#AEN3723" >Windows '95/'98</A ></DT ><DT >25.5. <A -HREF="#AEN3780" +HREF="#AEN3739" >Windows 2000 Service Pack 2</A ></DT ></DL @@ -990,22 +981,22 @@ HREF="#COMPILING" ><DL ><DT >26.1. <A -HREF="#AEN3807" +HREF="#AEN3766" >Access Samba source code via CVS</A ></DT ><DT >26.2. <A -HREF="#AEN3850" +HREF="#AEN3809" >Accessing the samba sources via rsync and ftp</A ></DT ><DT >26.3. <A -HREF="#AEN3856" +HREF="#AEN3815" >Building the Binaries</A ></DT ><DT >26.4. <A -HREF="#AEN3884" +HREF="#AEN3872" >Starting the smbd and nmbd</A ></DT ></DL @@ -1019,32 +1010,32 @@ HREF="#BUGREPORT" ><DL ><DT >27.1. <A -HREF="#AEN3946" +HREF="#AEN3934" >Introduction</A ></DT ><DT >27.2. <A -HREF="#AEN3956" +HREF="#AEN3944" >General info</A ></DT ><DT >27.3. <A -HREF="#AEN3962" +HREF="#AEN3950" >Debug levels</A ></DT ><DT >27.4. <A -HREF="#AEN3979" +HREF="#AEN3967" >Internal errors</A ></DT ><DT >27.5. <A -HREF="#AEN3989" +HREF="#AEN3977" >Attaching to a running process</A ></DT ><DT >27.6. <A -HREF="#AEN3992" +HREF="#AEN3980" >Patches</A ></DT ></DL @@ -1058,22 +1049,22 @@ HREF="#DIAGNOSIS" ><DL ><DT >28.1. <A -HREF="#AEN4015" +HREF="#AEN4003" >Introduction</A ></DT ><DT >28.2. <A -HREF="#AEN4020" +HREF="#AEN4008" >Assumptions</A ></DT ><DT >28.3. <A -HREF="#AEN4030" +HREF="#AEN4018" >Tests</A ></DT ><DT >28.4. <A -HREF="#AEN4140" +HREF="#AEN4128" >Still having troubles?</A ></DT ></DL @@ -3878,51 +3869,47 @@ HREF="#ADS" ><DL ><DT >8.1. <A -HREF="#AEN1343" ->Installing the required packages for Debian</A +HREF="#AEN1336" +>Setup your <TT +CLASS="FILENAME" +>smb.conf</TT +></A ></DT ><DT >8.2. <A -HREF="#AEN1350" ->Installing the required packages for RedHat</A +HREF="#AEN1347" +>Setup your <TT +CLASS="FILENAME" +>/etc/krb5.conf</TT +></A ></DT ><DT >8.3. <A -HREF="#AEN1360" ->Compile Samba</A -></DT -><DT ->8.4. <A -HREF="#AEN1375" ->Setup your /etc/krb5.conf</A -></DT -><DT ->8.5. <A -HREF="#AEN1385" +HREF="#AEN1358" >Create the computer account</A ></DT ><DD ><DL ><DT ->8.5.1. <A -HREF="#AEN1389" +>8.3.1. <A +HREF="#AEN1362" >Possible errors</A ></DT ></DL ></DD ><DT ->8.6. <A -HREF="#AEN1397" +>8.4. <A +HREF="#AEN1370" >Test your server setup</A ></DT ><DT ->8.7. <A -HREF="#AEN1402" +>8.5. <A +HREF="#AEN1375" >Testing with smbclient</A ></DT ><DT ->8.8. <A -HREF="#AEN1405" +>8.6. <A +HREF="#AEN1378" >Notes</A ></DT ></DL @@ -3936,17 +3923,12 @@ HREF="#DOMAIN-SECURITY" ><DL ><DT >9.1. <A -HREF="#AEN1427" +HREF="#AEN1400" >Joining an NT Domain with Samba 3.0</A ></DT ><DT >9.2. <A -HREF="#AEN1482" ->Samba and Windows 2000 Domains</A -></DT -><DT ->9.3. <A -HREF="#AEN1485" +HREF="#AEN1454" >Why is this better than security = server?</A ></DT ></DL @@ -7068,132 +7050,19 @@ NAME="ADS" ><P >This is a rough guide to setting up Samba 3.0 with kerberos authentication against a Windows2000 KDC. </P -><P ->Pieces you need before you begin:</P -><P -><P -></P -><TABLE -BORDER="0" -><TBODY -><TR -><TD ->a Windows 2000 server.</TD -></TR -><TR -><TD ->samba 3.0 or higher.</TD -></TR -><TR -><TD ->the MIT kerberos development libraries (either install from the above sources or use a package). The heimdal libraries will not work.</TD -></TR -><TR -><TD ->the OpenLDAP development libraries.</TD -></TR -></TBODY -></TABLE -><P -></P -></P -><DIV -CLASS="SECT1" -><HR><H2 -CLASS="SECT1" -><A -NAME="AEN1343" ->8.1. Installing the required packages for Debian</A -></H2 -><P ->On Debian you need to install the following packages:</P -><P -><P -></P -><TABLE -BORDER="0" -><TBODY -><TR -><TD ->libkrb5-dev</TD -></TR -><TR -><TD ->krb5-user</TD -></TR -></TBODY -></TABLE -><P -></P -></P -></DIV -><DIV -CLASS="SECT1" -><HR><H2 -CLASS="SECT1" -><A -NAME="AEN1350" ->8.2. Installing the required packages for RedHat</A -></H2 -><P ->On RedHat this means you should have at least: </P -><P -><P -></P -><TABLE -BORDER="0" -><TBODY -><TR -><TD ->krb5-workstation (for kinit)</TD -></TR -><TR -><TD ->krb5-libs (for linking with)</TD -></TR -><TR -><TD ->krb5-devel (because you are compiling from source)</TD -></TR -></TBODY -></TABLE -><P -></P -></P -><P ->in addition to the standard development environment.</P -><P ->Note that these are not standard on a RedHat install, and you may need -to get them off CD2.</P -></DIV ><DIV CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1360" ->8.3. Compile Samba</A +NAME="AEN1336" +>8.1. Setup your <TT +CLASS="FILENAME" +>smb.conf</TT +></A ></H2 ><P ->If your kerberos libraries are in a non-standard location then - remember to add the configure option --with-krb5=DIR.</P -><P ->After you run configure make sure that include/config.h it - generates contains - lines like this:</P -><P -><PRE -CLASS="PROGRAMLISTING" ->#define HAVE_KRB5 1 -#define HAVE_LDAP 1</PRE -></P -><P ->If it doesn't then configure did not find your krb5 libraries or - your ldap libraries. Look in config.log to figure out why and fix - it.</P -><P ->Then compile and install Samba as usual. You must use at least the - following 3 options in smb.conf:</P +>You must use at least the following 3 options in smb.conf:</P ><P ><PRE CLASS="PROGRAMLISTING" @@ -7218,17 +7087,19 @@ CLASS="PROGRAMLISTING" >You do *not* need a smbpasswd file, and older clients will be authenticated as if "security = domain", although it won't do any harm and allows you to have local users not in the domain. - I expect that the above - required options will change soon when we get better active - directory integration.</P + I expect that the above required options will change soon when we get better + active directory integration.</P ></DIV ><DIV CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1375" ->8.4. Setup your /etc/krb5.conf</A +NAME="AEN1347" +>8.2. Setup your <TT +CLASS="FILENAME" +>/etc/krb5.conf</TT +></A ></H2 ><P >The minimal configuration for krb5.conf is:</P @@ -7266,8 +7137,8 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1385" ->8.5. Create the computer account</A +NAME="AEN1358" +>8.3. Create the computer account</A ></H2 ><P >As a user that has write permission on the Samba private directory @@ -7281,8 +7152,8 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1389" ->8.5.1. Possible errors</A +NAME="AEN1362" +>8.3.1. Possible errors</A ></H3 ><P ><P @@ -7306,8 +7177,8 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1397" ->8.6. Test your server setup</A +NAME="AEN1370" +>8.4. Test your server setup</A ></H2 ><P >On a Windows 2000 client try <B @@ -7326,8 +7197,8 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1402" ->8.7. Testing with smbclient</A +NAME="AEN1375" +>8.5. Testing with smbclient</A ></H2 ><P >On your Samba server try to login to a Win2000 server or your Samba @@ -7339,12 +7210,12 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1405" ->8.8. Notes</A +NAME="AEN1378" +>8.6. Notes</A ></H2 ><P ->You must change administrator password at least once after DC install, - to create the right encoding types</P +>You must change administrator password at least once after DC +install, to create the right encoding types</P ><P >w2k doesn't seem to create the _kerberos._udp and _ldap._tcp in their defaults DNS setup. Maybe fixed in service packs?</P @@ -7362,7 +7233,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN1427" +NAME="AEN1400" >9.1. Joining an NT Domain with Samba 3.0</A ></H2 ><P @@ -7411,12 +7282,7 @@ CLASS="PARAMETER" ><B CLASS="COMMAND" >security = domain</B -> or - <B -CLASS="COMMAND" ->security = ads</B -> depending on if the PDC is - NT4 or running Active Directory respectivly.</P +></P ><P >Next change the <A HREF="smb.conf.5.html#WORKGROUP" @@ -7490,7 +7356,7 @@ CLASS="PROMPT" >root# </SAMP ><KBD CLASS="USERINPUT" ->net join -S DOMPDC +>net rpc join -S DOMPDC -U<VAR CLASS="REPLACEABLE" >Administrator%password</VAR @@ -7550,22 +7416,8 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1482" ->9.2. Samba and Windows 2000 Domains</A -></H2 -><P ->Many people have asked regarding the state of Samba's ability to participate in -a Windows 2000 Domain. Samba 3.0 is able to act as a member server of a Windows -2000 domain operating in mixed or native mode. The steps above apply -to both NT4 and Windows 2000.</P -></DIV -><DIV -CLASS="SECT1" -><HR><H2 -CLASS="SECT1" -><A -NAME="AEN1485" ->9.3. Why is this better than security = server?</A +NAME="AEN1454" +>9.2. Why is this better than security = server?</A ></H2 ><P >Currently, domain security in Samba doesn't free you from @@ -7623,13 +7475,27 @@ CLASS="COMMAND" authenticating to a PDC means that as part of the authentication reply, the Samba server gets the user identification information such as the user SID, the list of NT groups the user belongs to, etc. </P +><DIV +CLASS="NOTE" +><P +></P +><TABLE +CLASS="NOTE" +WIDTH="100%" +BORDER="0" +><TR +><TD +WIDTH="25" +ALIGN="CENTER" +VALIGN="TOP" +><IMG +SRC="/usr/share/sgml/docbook/stylesheet/dsssl/modular/images/note.gif" +HSPACE="5" +ALT="Note"></TD +><TD +ALIGN="LEFT" +VALIGN="TOP" ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE:</I -></SPAN > Much of the text of this document was first published in the Web magazine <A HREF="http://www.linuxworld.com" @@ -7642,6 +7508,10 @@ TARGET="_top" >Doing the NIS/NT Samba</A >.</P +></TD +></TR +></TABLE +></DIV ></DIV ></DIV ></DIV @@ -7658,7 +7528,7 @@ CLASS="TITLE" ><DIV CLASS="PARTINTRO" ><A -NAME="AEN1503" +NAME="AEN1472" ></A ><H1 >Introduction</H1 @@ -7682,19 +7552,19 @@ HREF="#INTEGRATE-MS-NETWORKS" ><DL ><DT >10.1. <A -HREF="#AEN1517" +HREF="#AEN1486" >Agenda</A ></DT ><DT >10.2. <A -HREF="#AEN1539" +HREF="#AEN1508" >Name Resolution in a pure Unix/Linux world</A ></DT ><DD ><DL ><DT >10.2.1. <A -HREF="#AEN1555" +HREF="#AEN1524" ><TT CLASS="FILENAME" >/etc/hosts</TT @@ -7702,7 +7572,7 @@ CLASS="FILENAME" ></DT ><DT >10.2.2. <A -HREF="#AEN1571" +HREF="#AEN1540" ><TT CLASS="FILENAME" >/etc/resolv.conf</TT @@ -7710,7 +7580,7 @@ CLASS="FILENAME" ></DT ><DT >10.2.3. <A -HREF="#AEN1582" +HREF="#AEN1551" ><TT CLASS="FILENAME" >/etc/host.conf</TT @@ -7718,7 +7588,7 @@ CLASS="FILENAME" ></DT ><DT >10.2.4. <A -HREF="#AEN1590" +HREF="#AEN1559" ><TT CLASS="FILENAME" >/etc/nsswitch.conf</TT @@ -7728,47 +7598,47 @@ CLASS="FILENAME" ></DD ><DT >10.3. <A -HREF="#AEN1602" +HREF="#AEN1571" >Name resolution as used within MS Windows networking</A ></DT ><DD ><DL ><DT >10.3.1. <A -HREF="#AEN1614" +HREF="#AEN1583" >The NetBIOS Name Cache</A ></DT ><DT >10.3.2. <A -HREF="#AEN1619" +HREF="#AEN1588" >The LMHOSTS file</A ></DT ><DT >10.3.3. <A -HREF="#AEN1627" +HREF="#AEN1596" >HOSTS file</A ></DT ><DT >10.3.4. <A -HREF="#AEN1632" +HREF="#AEN1601" >DNS Lookup</A ></DT ><DT >10.3.5. <A -HREF="#AEN1635" +HREF="#AEN1604" >WINS Lookup</A ></DT ></DL ></DD ><DT >10.4. <A -HREF="#AEN1647" +HREF="#AEN1616" >How browsing functions and how to deploy stable and dependable browsing using Samba</A ></DT ><DT >10.5. <A -HREF="#AEN1657" +HREF="#AEN1626" >MS Windows security options and how to configure Samba for seemless integration</A ></DT @@ -7776,24 +7646,24 @@ Samba for seemless integration</A ><DL ><DT >10.5.1. <A -HREF="#AEN1685" +HREF="#AEN1654" >Use MS Windows NT as an authentication server</A ></DT ><DT >10.5.2. <A -HREF="#AEN1693" +HREF="#AEN1662" >Make Samba a member of an MS Windows NT security domain</A ></DT ><DT >10.5.3. <A -HREF="#AEN1710" +HREF="#AEN1679" >Configure Samba as an authentication server</A ></DT ></DL ></DD ><DT >10.6. <A -HREF="#AEN1727" +HREF="#AEN1696" >Conclusions</A ></DT ></DL @@ -7807,53 +7677,53 @@ HREF="#UNIX-PERMISSIONS" ><DL ><DT >11.1. <A -HREF="#AEN1748" +HREF="#AEN1717" >Viewing and changing UNIX permissions using the NT security dialogs</A ></DT ><DT >11.2. <A -HREF="#AEN1752" +HREF="#AEN1721" >How to view file security on a Samba share</A ></DT ><DT >11.3. <A -HREF="#AEN1763" +HREF="#AEN1732" >Viewing file ownership</A ></DT ><DT >11.4. <A -HREF="#AEN1783" +HREF="#AEN1752" >Viewing file or directory permissions</A ></DT ><DD ><DL ><DT >11.4.1. <A -HREF="#AEN1798" +HREF="#AEN1767" >File Permissions</A ></DT ><DT >11.4.2. <A -HREF="#AEN1812" +HREF="#AEN1781" >Directory Permissions</A ></DT ></DL ></DD ><DT >11.5. <A -HREF="#AEN1819" +HREF="#AEN1788" >Modifying file or directory permissions</A ></DT ><DT >11.6. <A -HREF="#AEN1841" +HREF="#AEN1810" >Interaction with the standard Samba create mask parameters</A ></DT ><DT >11.7. <A -HREF="#AEN1905" +HREF="#AEN1864" >Interaction with the standard Samba file attribute mapping</A ></DT @@ -7869,17 +7739,17 @@ managed authentication</A ><DL ><DT >12.1. <A -HREF="#AEN1926" +HREF="#AEN1885" >Samba and PAM</A ></DT ><DT >12.2. <A -HREF="#AEN1970" +HREF="#AEN1929" >Distributed Authentication</A ></DT ><DT >12.3. <A -HREF="#AEN1977" +HREF="#AEN1936" >PAM Configuration in smb.conf</A ></DT ></DL @@ -7893,14 +7763,14 @@ HREF="#MSDFS" ><DL ><DT >13.1. <A -HREF="#AEN1997" +HREF="#AEN1956" >Instructions</A ></DT ><DD ><DL ><DT >13.1.1. <A -HREF="#AEN2032" +HREF="#AEN1991" >Notes</A ></DT ></DL @@ -7916,122 +7786,122 @@ HREF="#PRINTING" ><DL ><DT >14.1. <A -HREF="#AEN2058" +HREF="#AEN2017" >Introduction</A ></DT ><DT >14.2. <A -HREF="#AEN2080" +HREF="#AEN2039" >Configuration</A ></DT ><DD ><DL ><DT >14.2.1. <A -HREF="#AEN2088" +HREF="#AEN2047" >Creating [print$]</A ></DT ><DT >14.2.2. <A -HREF="#AEN2123" +HREF="#AEN2082" >Setting Drivers for Existing Printers</A ></DT ><DT >14.2.3. <A -HREF="#AEN2139" +HREF="#AEN2098" >Support a large number of printers</A ></DT ><DT >14.2.4. <A -HREF="#AEN2150" +HREF="#AEN2109" >Adding New Printers via the Windows NT APW</A ></DT ><DT >14.2.5. <A -HREF="#AEN2180" +HREF="#AEN2139" >Samba and Printer Ports</A ></DT ></DL ></DD ><DT >14.3. <A -HREF="#AEN2188" +HREF="#AEN2147" >The Imprints Toolset</A ></DT ><DD ><DL ><DT >14.3.1. <A -HREF="#AEN2192" +HREF="#AEN2151" >What is Imprints?</A ></DT ><DT >14.3.2. <A -HREF="#AEN2202" +HREF="#AEN2161" >Creating Printer Driver Packages</A ></DT ><DT >14.3.3. <A -HREF="#AEN2205" +HREF="#AEN2164" >The Imprints server</A ></DT ><DT >14.3.4. <A -HREF="#AEN2209" +HREF="#AEN2168" >The Installation Client</A ></DT ></DL ></DD ><DT >14.4. <A -HREF="#AEN2231" +HREF="#AEN2190" >Diagnosis</A ></DT ><DD ><DL ><DT >14.4.1. <A -HREF="#AEN2233" +HREF="#AEN2192" >Introduction</A ></DT ><DT >14.4.2. <A -HREF="#AEN2249" +HREF="#AEN2208" >Debugging printer problems</A ></DT ><DT >14.4.3. <A -HREF="#AEN2258" +HREF="#AEN2217" >What printers do I have?</A ></DT ><DT >14.4.4. <A -HREF="#AEN2266" +HREF="#AEN2225" >Setting up printcap and print servers</A ></DT ><DT >14.4.5. <A -HREF="#AEN2294" +HREF="#AEN2253" >Job sent, no output</A ></DT ><DT >14.4.6. <A -HREF="#AEN2305" +HREF="#AEN2264" >Job sent, strange output</A ></DT ><DT >14.4.7. <A -HREF="#AEN2317" +HREF="#AEN2276" >Raw PostScript printed</A ></DT ><DT >14.4.8. <A -HREF="#AEN2320" +HREF="#AEN2279" >Advanced Printing</A ></DT ><DT >14.4.9. <A -HREF="#AEN2323" +HREF="#AEN2282" >Real debugging</A ></DT ></DL @@ -8047,46 +7917,46 @@ HREF="#CUPS-PRINTING" ><DL ><DT >15.1. <A -HREF="#AEN2343" +HREF="#AEN2302" >Introduction</A ></DT ><DT >15.2. <A -HREF="#AEN2348" +HREF="#AEN2307" >CUPS - RAW Print Through Mode</A ></DT ><DT >15.3. <A -HREF="#AEN2403" +HREF="#AEN2362" >The CUPS Filter Chains</A ></DT ><DT >15.4. <A -HREF="#AEN2442" +HREF="#AEN2401" >CUPS Print Drivers and Devices</A ></DT ><DD ><DL ><DT >15.4.1. <A -HREF="#AEN2449" +HREF="#AEN2408" >Further printing steps</A ></DT ></DL ></DD ><DT >15.5. <A -HREF="#AEN2519" +HREF="#AEN2478" >Limiting the number of pages users can print</A ></DT ><DT >15.6. <A -HREF="#AEN2608" +HREF="#AEN2567" >Advanced Postscript Printing from MS Windows</A ></DT ><DT >15.7. <A -HREF="#AEN2623" +HREF="#AEN2582" >Auto-Deletion of CUPS spool files</A ></DT ></DL @@ -8100,99 +7970,99 @@ HREF="#WINBIND" ><DL ><DT >16.1. <A -HREF="#AEN2685" +HREF="#AEN2644" >Abstract</A ></DT ><DT >16.2. <A -HREF="#AEN2689" +HREF="#AEN2648" >Introduction</A ></DT ><DT >16.3. <A -HREF="#AEN2702" +HREF="#AEN2661" >What Winbind Provides</A ></DT ><DD ><DL ><DT >16.3.1. <A -HREF="#AEN2709" +HREF="#AEN2668" >Target Uses</A ></DT ></DL ></DD ><DT >16.4. <A -HREF="#AEN2713" +HREF="#AEN2672" >How Winbind Works</A ></DT ><DD ><DL ><DT >16.4.1. <A -HREF="#AEN2718" +HREF="#AEN2677" >Microsoft Remote Procedure Calls</A ></DT ><DT >16.4.2. <A -HREF="#AEN2722" +HREF="#AEN2681" >Microsoft Active Directory Services</A ></DT ><DT >16.4.3. <A -HREF="#AEN2725" +HREF="#AEN2684" >Name Service Switch</A ></DT ><DT >16.4.4. <A -HREF="#AEN2741" +HREF="#AEN2700" >Pluggable Authentication Modules</A ></DT ><DT >16.4.5. <A -HREF="#AEN2749" +HREF="#AEN2708" >User and Group ID Allocation</A ></DT ><DT >16.4.6. <A -HREF="#AEN2753" +HREF="#AEN2712" >Result Caching</A ></DT ></DL ></DD ><DT >16.5. <A -HREF="#AEN2756" +HREF="#AEN2715" >Installation and Configuration</A ></DT ><DD ><DL ><DT >16.5.1. <A -HREF="#AEN2761" +HREF="#AEN2720" >Introduction</A ></DT ><DT >16.5.2. <A -HREF="#AEN2774" +HREF="#AEN2733" >Requirements</A ></DT ><DT >16.5.3. <A -HREF="#AEN2788" +HREF="#AEN2747" >Testing Things Out</A ></DT ></DL ></DD ><DT >16.6. <A -HREF="#AEN3013" +HREF="#AEN2972" >Limitations</A ></DT ><DT >16.7. <A -HREF="#AEN3023" +HREF="#AEN2982" >Conclusion</A ></DT ></DL @@ -8206,66 +8076,66 @@ HREF="#IMPROVED-BROWSING" ><DL ><DT >17.1. <A -HREF="#AEN3033" +HREF="#AEN2992" >Overview of browsing</A ></DT ><DT >17.2. <A -HREF="#AEN3038" +HREF="#AEN2997" >Browsing support in samba</A ></DT ><DT >17.3. <A -HREF="#AEN3046" +HREF="#AEN3005" >Problem resolution</A ></DT ><DT >17.4. <A -HREF="#AEN3055" +HREF="#AEN3014" >Browsing across subnets</A ></DT ><DD ><DL ><DT >17.4.1. <A -HREF="#AEN3060" +HREF="#AEN3019" >How does cross subnet browsing work ?</A ></DT ></DL ></DD ><DT >17.5. <A -HREF="#AEN3095" +HREF="#AEN3054" >Setting up a WINS server</A ></DT ><DT >17.6. <A -HREF="#AEN3114" +HREF="#AEN3073" >Setting up Browsing in a WORKGROUP</A ></DT ><DT >17.7. <A -HREF="#AEN3132" +HREF="#AEN3091" >Setting up Browsing in a DOMAIN</A ></DT ><DT >17.8. <A -HREF="#AEN3142" +HREF="#AEN3101" >Forcing samba to be the master</A ></DT ><DT >17.9. <A -HREF="#AEN3151" +HREF="#AEN3110" >Making samba the domain master</A ></DT ><DT >17.10. <A -HREF="#AEN3169" +HREF="#AEN3128" >Note about broadcast addresses</A ></DT ><DT >17.11. <A -HREF="#AEN3172" +HREF="#AEN3131" >Multiple interfaces</A ></DT ></DL @@ -8279,48 +8149,48 @@ HREF="#VFS" ><DL ><DT >18.1. <A -HREF="#AEN3190" +HREF="#AEN3149" >Introduction and configuration</A ></DT ><DT >18.2. <A -HREF="#AEN3199" +HREF="#AEN3158" >Included modules</A ></DT ><DD ><DL ><DT >18.2.1. <A -HREF="#AEN3201" +HREF="#AEN3160" >audit</A ></DT ><DT >18.2.2. <A -HREF="#AEN3209" +HREF="#AEN3168" >recycle</A ></DT ><DT >18.2.3. <A -HREF="#AEN3246" +HREF="#AEN3205" >netatalk</A ></DT ></DL ></DD ><DT >18.3. <A -HREF="#AEN3253" +HREF="#AEN3212" >VFS modules available elsewhere</A ></DT ><DD ><DL ><DT >18.3.1. <A -HREF="#AEN3257" +HREF="#AEN3216" >DatabaseFS</A ></DT ><DT >18.3.2. <A -HREF="#AEN3265" +HREF="#AEN3224" >vscan</A ></DT ></DL @@ -8341,52 +8211,52 @@ HREF="#SPEED" ><DL ><DT >20.1. <A -HREF="#AEN3320" +HREF="#AEN3279" >Comparisons</A ></DT ><DT >20.2. <A -HREF="#AEN3326" +HREF="#AEN3285" >Socket options</A ></DT ><DT >20.3. <A -HREF="#AEN3333" +HREF="#AEN3292" >Read size</A ></DT ><DT >20.4. <A -HREF="#AEN3338" +HREF="#AEN3297" >Max xmit</A ></DT ><DT >20.5. <A -HREF="#AEN3343" +HREF="#AEN3302" >Log level</A ></DT ><DT >20.6. <A -HREF="#AEN3346" +HREF="#AEN3305" >Read raw</A ></DT ><DT >20.7. <A -HREF="#AEN3351" +HREF="#AEN3310" >Write raw</A ></DT ><DT >20.8. <A -HREF="#AEN3355" +HREF="#AEN3314" >Slow Clients</A ></DT ><DT >20.9. <A -HREF="#AEN3359" +HREF="#AEN3318" >Slow Logins</A ></DT ><DT >20.10. <A -HREF="#AEN3362" +HREF="#AEN3321" >Client tuning</A ></DT ></DL @@ -8400,41 +8270,41 @@ HREF="#GROUPPROFILES" ><DL ><DT >21.1. <A -HREF="#AEN3410" +HREF="#AEN3369" >Windows '9x</A ></DT ><DT >21.2. <A -HREF="#AEN3420" +HREF="#AEN3379" >Windows NT 4</A ></DT ><DD ><DL ><DT >21.2.1. <A -HREF="#AEN3443" +HREF="#AEN3402" >Side bar Notes</A ></DT ><DT >21.2.2. <A -HREF="#AEN3447" +HREF="#AEN3406" >Mandatory profiles</A ></DT ><DT >21.2.3. <A -HREF="#AEN3450" +HREF="#AEN3409" >moveuser.exe</A ></DT ><DT >21.2.4. <A -HREF="#AEN3453" +HREF="#AEN3412" >Get SID</A ></DT ></DL ></DD ><DT >21.3. <A -HREF="#AEN3458" +HREF="#AEN3417" >Windows 2000/XP</A ></DT ></DL @@ -8448,32 +8318,32 @@ HREF="#SECURING-SAMBA" ><DL ><DT >22.1. <A -HREF="#AEN3539" +HREF="#AEN3498" >Introduction</A ></DT ><DT >22.2. <A -HREF="#AEN3542" +HREF="#AEN3501" >Using host based protection</A ></DT ><DT >22.3. <A -HREF="#AEN3549" +HREF="#AEN3508" >Using interface protection</A ></DT ><DT >22.4. <A -HREF="#AEN3558" +HREF="#AEN3517" >Using a firewall</A ></DT ><DT >22.5. <A -HREF="#AEN3565" +HREF="#AEN3524" >Using a IPC$ share deny</A ></DT ><DT >22.6. <A -HREF="#AEN3574" +HREF="#AEN3533" >Upgrading Samba</A ></DT ></DL @@ -8487,12 +8357,12 @@ HREF="#UNICODE" ><DL ><DT >23.1. <A -HREF="#AEN3588" +HREF="#AEN3547" >What are charsets and unicode?</A ></DT ><DT >23.2. <A -HREF="#AEN3597" +HREF="#AEN3556" >Samba and charsets</A ></DT ></DL @@ -8512,7 +8382,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN1517" +NAME="AEN1486" >10.1. Agenda</A ></H2 ><P @@ -8579,7 +8449,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1539" +NAME="AEN1508" >10.2. Name Resolution in a pure Unix/Linux world</A ></H2 ><P @@ -8621,7 +8491,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1555" +NAME="AEN1524" >10.2.1. <TT CLASS="FILENAME" >/etc/hosts</TT @@ -8702,7 +8572,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1571" +NAME="AEN1540" >10.2.2. <TT CLASS="FILENAME" >/etc/resolv.conf</TT @@ -8740,7 +8610,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1582" +NAME="AEN1551" >10.2.3. <TT CLASS="FILENAME" >/etc/host.conf</TT @@ -8769,7 +8639,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1590" +NAME="AEN1559" >10.2.4. <TT CLASS="FILENAME" >/etc/nsswitch.conf</TT @@ -8838,7 +8708,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1602" +NAME="AEN1571" >10.3. Name resolution as used within MS Windows networking</A ></H2 ><P @@ -8923,7 +8793,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1614" +NAME="AEN1583" >10.3.1. The NetBIOS Name Cache</A ></H3 ><P @@ -8950,7 +8820,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1619" +NAME="AEN1588" >10.3.2. The LMHOSTS file</A ></H3 ><P @@ -9053,7 +8923,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1627" +NAME="AEN1596" >10.3.3. HOSTS file</A ></H3 ><P @@ -9075,7 +8945,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1632" +NAME="AEN1601" >10.3.4. DNS Lookup</A ></H3 ><P @@ -9095,7 +8965,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1635" +NAME="AEN1604" >10.3.5. WINS Lookup</A ></H3 ><P @@ -9136,7 +9006,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1647" +NAME="AEN1616" >10.4. How browsing functions and how to deploy stable and dependable browsing using Samba</A ></H2 @@ -9203,7 +9073,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1657" +NAME="AEN1626" >10.5. MS Windows security options and how to configure Samba for seemless integration</A ></H2 @@ -9330,7 +9200,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1685" +NAME="AEN1654" >10.5.1. Use MS Windows NT as an authentication server</A ></H3 ><P @@ -9366,7 +9236,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1693" +NAME="AEN1662" >10.5.2. Make Samba a member of an MS Windows NT security domain</A ></H3 ><P @@ -9429,7 +9299,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1710" +NAME="AEN1679" >10.5.3. Configure Samba as an authentication server</A ></H3 ><P @@ -9466,7 +9336,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN1717" +NAME="AEN1686" >10.5.3.1. Users</A ></H4 ><P @@ -9489,7 +9359,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN1722" +NAME="AEN1691" >10.5.3.2. MS Windows NT Machine Accounts</A ></H4 ><P @@ -9510,7 +9380,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1727" +NAME="AEN1696" >10.6. Conclusions</A ></H2 ><P @@ -9554,14 +9424,13 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN1748" +NAME="AEN1717" >11.1. Viewing and changing UNIX permissions using the NT security dialogs</A ></H2 ><P ->New in the Samba 2.0.4 release is the ability for Windows - NT clients to use their native security settings dialog box to - view and modify the underlying UNIX permissions.</P +>Windows NT clients can use their native security settings + dialog box to view and modify the underlying UNIX permissions.</P ><P >Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and @@ -9573,11 +9442,11 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1752" +NAME="AEN1721" >11.2. How to view file security on a Samba share</A ></H2 ><P ->From an NT 4.0 client, single-click with the right +>From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba mounted drive letter or UNC path. When the menu pops-up, click on the <SPAN @@ -9587,15 +9456,14 @@ CLASS="EMPHASIS" >Properties</I ></SPAN > entry at the bottom of - the menu. This brings up the normal file properties dialog - box, but with Samba 2.0.4 this will have a new tab along the top - marked <SPAN + the menu. This brings up the file properties dialog + box. Click on the tab <SPAN CLASS="emphasis" ><I CLASS="EMPHASIS" >Security</I ></SPAN ->. Click on this tab and you +> and you will see three buttons, <SPAN CLASS="emphasis" ><I @@ -9643,7 +9511,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1763" +NAME="AEN1732" >11.3. Viewing file ownership</A ></H2 ><P @@ -9712,7 +9580,7 @@ CLASS="EMPHASIS" ><P >There is an NT chown command that will work with Samba and allow a user with Administrator privilege connected - to a Samba 2.0.4 server as root to change the ownership of + to a Samba server as root to change the ownership of files on both a local NTFS filesystem or remote mounted NTFS or Samba drive. This is available as part of the <SPAN CLASS="emphasis" @@ -9729,7 +9597,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1783" +NAME="AEN1752" >11.4. Viewing file or directory permissions</A ></H2 ><P @@ -9783,7 +9651,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1798" +NAME="AEN1767" >11.4.1. File Permissions</A ></H3 ><P @@ -9845,7 +9713,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN1812" +NAME="AEN1781" >11.4.2. Directory Permissions</A ></H3 ><P @@ -9877,7 +9745,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1819" +NAME="AEN1788" >11.5. Modifying file or directory permissions</A ></H2 ><P @@ -9909,7 +9777,7 @@ CLASS="COMMAND" CLASS="COMMAND" >"Add"</B > - button will not return a list of users in Samba 2.0.4 (it will give + button will not return a list of users in Samba (it will give an error message of <B CLASS="COMMAND" >"The remote procedure call failed @@ -9973,13 +9841,14 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1841" +NAME="AEN1810" >11.6. Interaction with the standard Samba create mask parameters</A ></H2 ><P ->Note that with Samba 2.0.5 there are four new parameters - to control this interaction. These are :</P +>There are four parameters + to control interaction with the standard Samba create mask parameters. + These are :</P ><P ><VAR CLASS="PARAMETER" @@ -10042,9 +9911,8 @@ CLASS="PARAMETER" >create mask </VAR ></A -> parameter to provide compatibility with Samba 2.0.4 - where this permission change facility was introduced. To allow a user to - modify all the user/group/world permissions on a file, set this parameter +> parameter. To allow a user to modify all the + user/group/world permissions on a file, set this parameter to 0777.</P ><P >Next Samba checks the changed permissions for a file against @@ -10075,8 +9943,7 @@ CLASS="PARAMETER" >force create mode</VAR ></A -> parameter to provide compatibility - with Samba 2.0.4 where the permission change facility was introduced. +> parameter. To allow a user to modify all the user/group/world permissions on a file with no restrictions set this parameter to 000.</P ><P @@ -10124,9 +9991,7 @@ CLASS="PARAMETER" the <VAR CLASS="PARAMETER" >force directory mode</VAR -> parameter to provide - compatibility with Samba 2.0.4 where the permission change facility - was introduced.</P +> parameter. </P ><P >In this way Samba enforces the permission restrictions that an administrator can set on a Samba share, whilst still allowing users @@ -10164,37 +10029,13 @@ CLASS="PARAMETER" CLASS="PARAMETER" >force directory security mode = 0</VAR ></P -><P ->As described, in Samba 2.0.4 the parameters :</P -><P -><VAR -CLASS="PARAMETER" ->create mask</VAR -></P -><P -><VAR -CLASS="PARAMETER" ->force create mode</VAR -></P -><P -><VAR -CLASS="PARAMETER" ->directory mask</VAR -></P -><P -><VAR -CLASS="PARAMETER" ->force directory mode</VAR -></P -><P ->were used instead of the parameters discussed here.</P ></DIV ><DIV CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1905" +NAME="AEN1864" >11.7. Interaction with the standard Samba file attribute mapping</A ></H2 @@ -10250,7 +10091,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN1926" +NAME="AEN1885" >12.1. Samba and PAM</A ></H2 ><P @@ -10464,7 +10305,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1970" +NAME="AEN1929" >12.2. Distributed Authentication</A ></H2 ><P @@ -10497,7 +10338,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN1977" +NAME="AEN1936" >12.3. PAM Configuration in smb.conf</A ></H2 ><P @@ -10545,7 +10386,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN1997" +NAME="AEN1956" >13.1. Instructions</A ></H2 ><P @@ -10677,7 +10518,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2032" +NAME="AEN1991" >13.1.1. Notes</A ></H3 ><P @@ -10718,7 +10559,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN2058" +NAME="AEN2017" >14.1. Introduction</A ></H2 ><P @@ -10801,7 +10642,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2080" +NAME="AEN2039" >14.2. Configuration</A ></H2 ><DIV @@ -10863,7 +10704,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2088" +NAME="AEN2047" >14.2.1. Creating [print$]</A ></H3 ><P @@ -11080,7 +10921,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2123" +NAME="AEN2082" >14.2.2. Setting Drivers for Existing Printers</A ></H3 ><P @@ -11152,7 +10993,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2139" +NAME="AEN2098" >14.2.3. Support a large number of printers</A ></H3 ><P @@ -11218,7 +11059,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2150" +NAME="AEN2109" >14.2.4. Adding New Printers via the Windows NT APW</A ></H3 ><P @@ -11373,7 +11214,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2180" +NAME="AEN2139" >14.2.5. Samba and Printer Ports</A ></H3 ><P @@ -11408,7 +11249,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2188" +NAME="AEN2147" >14.3. The Imprints Toolset</A ></H2 ><P @@ -11426,7 +11267,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2192" +NAME="AEN2151" >14.3.1. What is Imprints?</A ></H3 ><P @@ -11458,7 +11299,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2202" +NAME="AEN2161" >14.3.2. Creating Printer Driver Packages</A ></H3 ><P @@ -11474,7 +11315,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2205" +NAME="AEN2164" >14.3.3. The Imprints server</A ></H3 ><P @@ -11498,7 +11339,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2209" +NAME="AEN2168" >14.3.4. The Installation Client</A ></H3 ><P @@ -11592,7 +11433,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2231" +NAME="AEN2190" >14.4. Diagnosis</A ></H2 ><DIV @@ -11600,7 +11441,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN2233" +NAME="AEN2192" >14.4.1. Introduction</A ></H3 ><P @@ -11675,7 +11516,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2249" +NAME="AEN2208" >14.4.2. Debugging printer problems</A ></H3 ><P @@ -11732,7 +11573,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2258" +NAME="AEN2217" >14.4.3. What printers do I have?</A ></H3 ><P @@ -11761,7 +11602,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2266" +NAME="AEN2225" >14.4.4. Setting up printcap and print servers</A ></H3 ><P @@ -11845,7 +11686,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2294" +NAME="AEN2253" >14.4.5. Job sent, no output</A ></H3 ><P @@ -11890,7 +11731,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2305" +NAME="AEN2264" >14.4.6. Job sent, strange output</A ></H3 ><P @@ -11936,7 +11777,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2317" +NAME="AEN2276" >14.4.7. Raw PostScript printed</A ></H3 ><P @@ -11951,7 +11792,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2320" +NAME="AEN2279" >14.4.8. Advanced Printing</A ></H3 ><P @@ -11967,7 +11808,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2323" +NAME="AEN2282" >14.4.9. Real debugging</A ></H3 ><P @@ -11988,7 +11829,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN2343" +NAME="AEN2302" >15.1. Introduction</A ></H2 ><P @@ -12016,7 +11857,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2348" +NAME="AEN2307" >15.2. CUPS - RAW Print Through Mode</A ></H2 ><P @@ -12302,7 +12143,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2403" +NAME="AEN2362" >15.3. The CUPS Filter Chains</A ></H2 ><P @@ -12750,7 +12591,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2442" +NAME="AEN2401" >15.4. CUPS Print Drivers and Devices</A ></H2 ><P @@ -12780,7 +12621,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2449" +NAME="AEN2408" >15.4.1. Further printing steps</A ></H3 ><P @@ -13104,7 +12945,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2519" +NAME="AEN2478" >15.5. Limiting the number of pages users can print</A ></H2 ><P @@ -13627,7 +13468,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2608" +NAME="AEN2567" >15.6. Advanced Postscript Printing from MS Windows</A ></H2 ><P @@ -13718,7 +13559,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2623" +NAME="AEN2582" >15.7. Auto-Deletion of CUPS spool files</A ></H2 ><P @@ -13854,7 +13695,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN2685" +NAME="AEN2644" >16.1. Abstract</A ></H2 ><P @@ -13881,7 +13722,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2689" +NAME="AEN2648" >16.2. Introduction</A ></H2 ><P @@ -13935,7 +13776,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2702" +NAME="AEN2661" >16.3. What Winbind Provides</A ></H2 ><P @@ -13977,7 +13818,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2709" +NAME="AEN2668" >16.3.1. Target Uses</A ></H3 ><P @@ -14001,7 +13842,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2713" +NAME="AEN2672" >16.4. How Winbind Works</A ></H2 ><P @@ -14021,7 +13862,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2718" +NAME="AEN2677" >16.4.1. Microsoft Remote Procedure Calls</A ></H3 ><P @@ -14047,7 +13888,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2722" +NAME="AEN2681" >16.4.2. Microsoft Active Directory Services</A ></H3 ><P @@ -14066,7 +13907,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2725" +NAME="AEN2684" >16.4.3. Name Service Switch</A ></H3 ><P @@ -14146,7 +13987,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2741" +NAME="AEN2700" >16.4.4. Pluggable Authentication Modules</A ></H3 ><P @@ -14195,7 +14036,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2749" +NAME="AEN2708" >16.4.5. User and Group ID Allocation</A ></H3 ><P @@ -14221,7 +14062,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2753" +NAME="AEN2712" >16.4.6. Result Caching</A ></H3 ><P @@ -14244,7 +14085,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN2756" +NAME="AEN2715" >16.5. Installation and Configuration</A ></H2 ><P @@ -14263,7 +14104,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2761" +NAME="AEN2720" >16.5.1. Introduction</A ></H3 ><P @@ -14322,7 +14163,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2774" +NAME="AEN2733" >16.5.2. Requirements</A ></H3 ><P @@ -14392,7 +14233,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN2788" +NAME="AEN2747" >16.5.3. Testing Things Out</A ></H3 ><P @@ -14437,7 +14278,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2799" +NAME="AEN2758" >16.5.3.1. Configure and compile SAMBA</A ></H4 ><P @@ -14503,7 +14344,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2818" +NAME="AEN2777" >16.5.3.2. Configure <TT CLASS="FILENAME" >nsswitch.conf</TT @@ -14608,7 +14449,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2851" +NAME="AEN2810" >16.5.3.3. Configure smb.conf</A ></H4 ><P @@ -14683,7 +14524,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2867" +NAME="AEN2826" >16.5.3.4. Join the SAMBA server to the PDC domain</A ></H4 ><P @@ -14721,7 +14562,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2878" +NAME="AEN2837" >16.5.3.5. Start up the winbindd daemon and test it!</A ></H4 ><P @@ -14857,7 +14698,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2918" +NAME="AEN2877" >16.5.3.6. Fix the init.d startup scripts</A ></H4 ><DIV @@ -14865,7 +14706,7 @@ CLASS="SECT4" ><H5 CLASS="SECT4" ><A -NAME="AEN2920" +NAME="AEN2879" >16.5.3.6.1. Linux</A ></H5 ><P @@ -14975,7 +14816,7 @@ CLASS="SECT4" ><HR><H5 CLASS="SECT4" ><A -NAME="AEN2940" +NAME="AEN2899" >16.5.3.6.2. Solaris</A ></H5 ><P @@ -15059,7 +14900,7 @@ CLASS="SECT4" ><HR><H5 CLASS="SECT4" ><A -NAME="AEN2950" +NAME="AEN2909" >16.5.3.6.3. Restarting</A ></H5 ><P @@ -15083,7 +14924,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN2956" +NAME="AEN2915" >16.5.3.7. Configure Winbind and PAM</A ></H4 ><P @@ -15141,7 +14982,7 @@ CLASS="SECT4" ><HR><H5 CLASS="SECT4" ><A -NAME="AEN2973" +NAME="AEN2932" >16.5.3.7.1. Linux/FreeBSD-specific PAM configuration</A ></H5 ><P @@ -15270,7 +15111,7 @@ CLASS="SECT4" ><HR><H5 CLASS="SECT4" ><A -NAME="AEN3006" +NAME="AEN2965" >16.5.3.7.2. Solaris-specific configuration</A ></H5 ><P @@ -15357,7 +15198,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3013" +NAME="AEN2972" >16.6. Limitations</A ></H2 ><P @@ -15399,7 +15240,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3023" +NAME="AEN2982" >16.7. Conclusion</A ></H2 ><P @@ -15423,7 +15264,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3033" +NAME="AEN2992" >17.1. Overview of browsing</A ></H2 ><P @@ -15452,7 +15293,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3038" +NAME="AEN2997" >17.2. Browsing support in samba</A ></H2 ><P @@ -15495,7 +15336,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3046" +NAME="AEN3005" >17.3. Problem resolution</A ></H2 ><P @@ -15542,7 +15383,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3055" +NAME="AEN3014" >17.4. Browsing across subnets</A ></H2 ><P @@ -15573,7 +15414,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3060" +NAME="AEN3019" >17.4.1. How does cross subnet browsing work ?</A ></H3 ><P @@ -15784,7 +15625,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3095" +NAME="AEN3054" >17.5. Setting up a WINS server</A ></H2 ><P @@ -15867,7 +15708,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3114" +NAME="AEN3073" >17.6. Setting up Browsing in a WORKGROUP</A ></H2 ><P @@ -15952,7 +15793,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3132" +NAME="AEN3091" >17.7. Setting up Browsing in a DOMAIN</A ></H2 ><P @@ -16003,7 +15844,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3142" +NAME="AEN3101" >17.8. Forcing samba to be the master</A ></H2 ><P @@ -16051,7 +15892,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3151" +NAME="AEN3110" >17.9. Making samba the domain master</A ></H2 ><P @@ -16124,7 +15965,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3169" +NAME="AEN3128" >17.10. Note about broadcast addresses</A ></H2 ><P @@ -16138,7 +15979,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3172" +NAME="AEN3131" >17.11. Multiple interfaces</A ></H2 ><P @@ -16159,7 +16000,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3190" +NAME="AEN3149" >18.1. Introduction and configuration</A ></H2 ><P @@ -16200,7 +16041,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3199" +NAME="AEN3158" >18.2. Included modules</A ></H2 ><DIV @@ -16208,7 +16049,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN3201" +NAME="AEN3160" >18.2.1. audit</A ></H3 ><P @@ -16246,7 +16087,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3209" +NAME="AEN3168" >18.2.2. recycle</A ></H3 ><P @@ -16317,7 +16158,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3246" +NAME="AEN3205" >18.2.3. netatalk</A ></H3 ><P @@ -16350,7 +16191,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3253" +NAME="AEN3212" >18.3. VFS modules available elsewhere</A ></H2 ><P @@ -16366,7 +16207,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3257" +NAME="AEN3216" >18.3.1. DatabaseFS</A ></H3 ><P @@ -16400,7 +16241,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3265" +NAME="AEN3224" >18.3.2. vscan</A ></H3 ><P @@ -16531,7 +16372,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3320" +NAME="AEN3279" >20.1. Comparisons</A ></H2 ><P @@ -16562,7 +16403,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3326" +NAME="AEN3285" >20.2. Socket options</A ></H2 ><P @@ -16590,7 +16431,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3333" +NAME="AEN3292" >20.3. Read size</A ></H2 ><P @@ -16616,7 +16457,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3338" +NAME="AEN3297" >20.4. Max xmit</A ></H2 ><P @@ -16639,7 +16480,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3343" +NAME="AEN3302" >20.5. Log level</A ></H2 ><P @@ -16653,7 +16494,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3346" +NAME="AEN3305" >20.6. Read raw</A ></H2 ><P @@ -16675,7 +16516,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3351" +NAME="AEN3310" >20.7. Write raw</A ></H2 ><P @@ -16692,7 +16533,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3355" +NAME="AEN3314" >20.8. Slow Clients</A ></H2 ><P @@ -16709,7 +16550,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3359" +NAME="AEN3318" >20.9. Slow Logins</A ></H2 ><P @@ -16722,7 +16563,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3362" +NAME="AEN3321" >20.10. Client tuning</A ></H2 ><P @@ -16836,7 +16677,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3410" +NAME="AEN3369" >21.1. Windows '9x</A ></H2 ><P @@ -16879,7 +16720,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3420" +NAME="AEN3379" >21.2. Windows NT 4</A ></H2 ><P @@ -16960,7 +16801,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3443" +NAME="AEN3402" >21.2.1. Side bar Notes</A ></H3 ><P @@ -16976,7 +16817,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3447" +NAME="AEN3406" >21.2.2. Mandatory profiles</A ></H3 ><P @@ -16989,7 +16830,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3450" +NAME="AEN3409" >21.2.3. moveuser.exe</A ></H3 ><P @@ -17002,7 +16843,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3453" +NAME="AEN3412" >21.2.4. Get SID</A ></H3 ><P @@ -17025,7 +16866,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3458" +NAME="AEN3417" >21.3. Windows 2000/XP</A ></H2 ><P @@ -17269,7 +17110,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3539" +NAME="AEN3498" >22.1. Introduction</A ></H2 ><P @@ -17282,7 +17123,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3542" +NAME="AEN3501" >22.2. Using host based protection</A ></H2 ><P @@ -17314,7 +17155,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3549" +NAME="AEN3508" >22.3. Using interface protection</A ></H2 ><P @@ -17350,7 +17191,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3558" +NAME="AEN3517" >22.4. Using a firewall</A ></H2 ><P @@ -17380,7 +17221,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3565" +NAME="AEN3524" >22.5. Using a IPC$ share deny</A ></H2 ><P @@ -17419,7 +17260,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3574" +NAME="AEN3533" >22.6. Upgrading Samba</A ></H2 ><P @@ -17441,7 +17282,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3588" +NAME="AEN3547" >23.1. What are charsets and unicode?</A ></H2 ><P @@ -17491,7 +17332,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3597" +NAME="AEN3556" >23.2. Samba and charsets</A ></H2 ><P @@ -17575,34 +17416,34 @@ HREF="#PORTABILITY" ><DL ><DT >24.1. <A -HREF="#AEN3626" +HREF="#AEN3585" >HPUX</A ></DT ><DT >24.2. <A -HREF="#AEN3632" +HREF="#AEN3591" >SCO Unix</A ></DT ><DT >24.3. <A -HREF="#AEN3636" +HREF="#AEN3595" >DNIX</A ></DT ><DT >24.4. <A -HREF="#AEN3665" +HREF="#AEN3624" >RedHat Linux Rembrandt-II</A ></DT ><DT >24.5. <A -HREF="#AEN3671" +HREF="#AEN3630" >AIX</A ></DT ><DD ><DL ><DT >24.5.1. <A -HREF="#AEN3673" +HREF="#AEN3632" >Sequential Read Ahead</A ></DT ></DL @@ -17618,37 +17459,37 @@ HREF="#OTHER-CLIENTS" ><DL ><DT >25.1. <A -HREF="#AEN3691" +HREF="#AEN3650" >Macintosh clients?</A ></DT ><DT >25.2. <A -HREF="#AEN3700" +HREF="#AEN3659" >OS2 Client</A ></DT ><DD ><DL ><DT >25.2.1. <A -HREF="#AEN3702" +HREF="#AEN3661" >How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?</A ></DT ><DT >25.2.2. <A -HREF="#AEN3717" +HREF="#AEN3676" >How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?</A ></DT ><DT >25.2.3. <A -HREF="#AEN3726" +HREF="#AEN3685" >Are there any other issues when OS/2 (any version) is used as a client?</A ></DT ><DT >25.2.4. <A -HREF="#AEN3730" +HREF="#AEN3689" >How do I get printer driver download working for OS/2 clients?</A ></DT @@ -17656,46 +17497,46 @@ HREF="#AEN3730" ></DD ><DT >25.3. <A -HREF="#AEN3740" +HREF="#AEN3699" >Windows for Workgroups</A ></DT ><DD ><DL ><DT >25.3.1. <A -HREF="#AEN3742" +HREF="#AEN3701" >Use latest TCP/IP stack from Microsoft</A ></DT ><DT >25.3.2. <A -HREF="#AEN3747" +HREF="#AEN3706" >Delete .pwl files after password change</A ></DT ><DT >25.3.3. <A -HREF="#AEN3752" +HREF="#AEN3711" >Configure WfW password handling</A ></DT ><DT >25.3.4. <A -HREF="#AEN3756" +HREF="#AEN3715" >Case handling of passwords</A ></DT ><DT >25.3.5. <A -HREF="#AEN3761" +HREF="#AEN3720" >Use TCP/IP as default protocol</A ></DT ></DL ></DD ><DT >25.4. <A -HREF="#AEN3764" +HREF="#AEN3723" >Windows '95/'98</A ></DT ><DT >25.5. <A -HREF="#AEN3780" +HREF="#AEN3739" >Windows 2000 Service Pack 2</A ></DT ></DL @@ -17709,48 +17550,57 @@ HREF="#COMPILING" ><DL ><DT >26.1. <A -HREF="#AEN3807" +HREF="#AEN3766" >Access Samba source code via CVS</A ></DT ><DD ><DL ><DT >26.1.1. <A -HREF="#AEN3809" +HREF="#AEN3768" >Introduction</A ></DT ><DT >26.1.2. <A -HREF="#AEN3814" +HREF="#AEN3773" >CVS Access to samba.org</A ></DT ></DL ></DD ><DT >26.2. <A -HREF="#AEN3850" +HREF="#AEN3809" >Accessing the samba sources via rsync and ftp</A ></DT ><DT >26.3. <A -HREF="#AEN3856" +HREF="#AEN3815" >Building the Binaries</A ></DT +><DD +><DL +><DT +>26.3.1. <A +HREF="#AEN3843" +>Compiling samba with Active Directory support</A +></DT +></DL +></DD ><DT >26.4. <A -HREF="#AEN3884" +HREF="#AEN3872" >Starting the smbd and nmbd</A ></DT ><DD ><DL ><DT >26.4.1. <A -HREF="#AEN3894" +HREF="#AEN3882" >Starting from inetd.conf</A ></DT ><DT >26.4.2. <A -HREF="#AEN3923" +HREF="#AEN3911" >Alternative: starting it as a daemon</A ></DT ></DL @@ -17766,32 +17616,32 @@ HREF="#BUGREPORT" ><DL ><DT >27.1. <A -HREF="#AEN3946" +HREF="#AEN3934" >Introduction</A ></DT ><DT >27.2. <A -HREF="#AEN3956" +HREF="#AEN3944" >General info</A ></DT ><DT >27.3. <A -HREF="#AEN3962" +HREF="#AEN3950" >Debug levels</A ></DT ><DT >27.4. <A -HREF="#AEN3979" +HREF="#AEN3967" >Internal errors</A ></DT ><DT >27.5. <A -HREF="#AEN3989" +HREF="#AEN3977" >Attaching to a running process</A ></DT ><DT >27.6. <A -HREF="#AEN3992" +HREF="#AEN3980" >Patches</A ></DT ></DL @@ -17805,81 +17655,81 @@ HREF="#DIAGNOSIS" ><DL ><DT >28.1. <A -HREF="#AEN4015" +HREF="#AEN4003" >Introduction</A ></DT ><DT >28.2. <A -HREF="#AEN4020" +HREF="#AEN4008" >Assumptions</A ></DT ><DT >28.3. <A -HREF="#AEN4030" +HREF="#AEN4018" >Tests</A ></DT ><DD ><DL ><DT >28.3.1. <A -HREF="#AEN4032" +HREF="#AEN4020" >Test 1</A ></DT ><DT >28.3.2. <A -HREF="#AEN4038" +HREF="#AEN4026" >Test 2</A ></DT ><DT >28.3.3. <A -HREF="#AEN4044" +HREF="#AEN4032" >Test 3</A ></DT ><DT >28.3.4. <A -HREF="#AEN4059" +HREF="#AEN4047" >Test 4</A ></DT ><DT >28.3.5. <A -HREF="#AEN4064" +HREF="#AEN4052" >Test 5</A ></DT ><DT >28.3.6. <A -HREF="#AEN4070" +HREF="#AEN4058" >Test 6</A ></DT ><DT >28.3.7. <A -HREF="#AEN4078" +HREF="#AEN4066" >Test 7</A ></DT ><DT >28.3.8. <A -HREF="#AEN4104" +HREF="#AEN4092" >Test 8</A ></DT ><DT >28.3.9. <A -HREF="#AEN4121" +HREF="#AEN4109" >Test 9</A ></DT ><DT >28.3.10. <A -HREF="#AEN4129" +HREF="#AEN4117" >Test 10</A ></DT ><DT >28.3.11. <A -HREF="#AEN4135" +HREF="#AEN4123" >Test 11</A ></DT ></DL ></DD ><DT >28.4. <A -HREF="#AEN4140" +HREF="#AEN4128" >Still having troubles?</A ></DT ></DL @@ -17903,7 +17753,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3626" +NAME="AEN3585" >24.1. HPUX</A ></H2 ><P @@ -17933,7 +17783,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3632" +NAME="AEN3591" >24.2. SCO Unix</A ></H2 ><P @@ -17950,7 +17800,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3636" +NAME="AEN3595" >24.3. DNIX</A ></H2 ><P @@ -18057,7 +17907,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3665" +NAME="AEN3624" >24.4. RedHat Linux Rembrandt-II</A ></H2 ><P @@ -18081,7 +17931,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3671" +NAME="AEN3630" >24.5. AIX</A ></H2 ><DIV @@ -18089,7 +17939,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN3673" +NAME="AEN3632" >24.5.1. Sequential Read Ahead</A ></H3 ><P @@ -18112,7 +17962,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3691" +NAME="AEN3650" >25.1. Macintosh clients?</A ></H2 ><P @@ -18158,7 +18008,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3700" +NAME="AEN3659" >25.2. OS2 Client</A ></H2 ><DIV @@ -18166,7 +18016,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN3702" +NAME="AEN3661" >25.2.1. How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?</A ></H3 @@ -18225,7 +18075,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3717" +NAME="AEN3676" >25.2.2. How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?</A ></H3 @@ -18269,7 +18119,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3726" +NAME="AEN3685" >25.2.3. Are there any other issues when OS/2 (any version) is used as a client?</A ></H3 @@ -18291,7 +18141,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3730" +NAME="AEN3689" >25.2.4. How do I get printer driver download working for OS/2 clients?</A ></H3 @@ -18338,7 +18188,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3740" +NAME="AEN3699" >25.3. Windows for Workgroups</A ></H2 ><DIV @@ -18346,7 +18196,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN3742" +NAME="AEN3701" >25.3.1. Use latest TCP/IP stack from Microsoft</A ></H3 ><P @@ -18368,7 +18218,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3747" +NAME="AEN3706" >25.3.2. Delete .pwl files after password change</A ></H3 ><P @@ -18388,7 +18238,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3752" +NAME="AEN3711" >25.3.3. Configure WfW password handling</A ></H3 ><P @@ -18407,7 +18257,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3756" +NAME="AEN3715" >25.3.4. Case handling of passwords</A ></H3 ><P @@ -18425,7 +18275,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3761" +NAME="AEN3720" >25.3.5. Use TCP/IP as default protocol</A ></H3 ><P @@ -18441,7 +18291,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3764" +NAME="AEN3723" >25.4. Windows '95/'98</A ></H2 ><P @@ -18489,7 +18339,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3780" +NAME="AEN3739" >25.5. Windows 2000 Service Pack 2</A ></H2 ><P @@ -18586,7 +18436,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3807" +NAME="AEN3766" >26.1. Access Samba source code via CVS</A ></H2 ><DIV @@ -18594,7 +18444,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN3809" +NAME="AEN3768" >26.1.1. Introduction</A ></H3 ><P @@ -18616,7 +18466,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3814" +NAME="AEN3773" >26.1.2. CVS Access to samba.org</A ></H3 ><P @@ -18629,7 +18479,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN3817" +NAME="AEN3776" >26.1.2.1. Access via CVSweb</A ></H4 ><P @@ -18650,7 +18500,7 @@ CLASS="SECT3" ><HR><H4 CLASS="SECT3" ><A -NAME="AEN3822" +NAME="AEN3781" >26.1.2.2. Access via cvs</A ></H4 ><P @@ -18755,7 +18605,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3850" +NAME="AEN3809" >26.2. Accessing the samba sources via rsync and ftp</A ></H2 ><P @@ -18783,7 +18633,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3856" +NAME="AEN3815" >26.3. Building the Binaries</A ></H2 ><P @@ -18864,13 +18714,135 @@ CLASS="USERINPUT" ></P ><P >if you find this version a disaster!</P +><DIV +CLASS="SECT2" +><HR><H3 +CLASS="SECT2" +><A +NAME="AEN3843" +>26.3.1. Compiling samba with Active Directory support</A +></H3 +><P +>In order to compile samba with ADS support, you need to have installed + on your system: + <P +></P +><TABLE +BORDER="0" +><TBODY +><TR +><TD +>the MIT kerberos development libraries (either install from the sources or use a package). The heimdal libraries will not work.</TD +></TR +><TR +><TD +>the OpenLDAP development libraries.</TD +></TR +></TBODY +></TABLE +><P +></P +> + + </P +><P +>If your kerberos libraries are in a non-standard location then + remember to add the configure option --with-krb5=DIR.</P +><P +>After you run configure make sure that <TT +CLASS="FILENAME" +>include/config.h</TT +> it generates contains lines like this:</P +><P +><PRE +CLASS="PROGRAMLISTING" +>#define HAVE_KRB5 1 +#define HAVE_LDAP 1 + </PRE +></P +><P +>If it doesn't then configure did not find your krb5 libraries or + your ldap libraries. Look in config.log to figure out why and fix + it.</P +><DIV +CLASS="SECT3" +><HR><H4 +CLASS="SECT3" +><A +NAME="AEN3855" +>26.3.1.1. Installing the required packages for Debian</A +></H4 +><P +>On Debian you need to install the following packages:</P +><P +> <P +></P +><TABLE +BORDER="0" +><TBODY +><TR +><TD +>libkrb5-dev</TD +></TR +><TR +><TD +>krb5-user</TD +></TR +></TBODY +></TABLE +><P +></P +> + </P +></DIV +><DIV +CLASS="SECT3" +><HR><H4 +CLASS="SECT3" +><A +NAME="AEN3862" +>26.3.1.2. Installing the required packages for RedHat</A +></H4 +><P +>On RedHat this means you should have at least: </P +><P +> <P +></P +><TABLE +BORDER="0" +><TBODY +><TR +><TD +>krb5-workstation (for kinit)</TD +></TR +><TR +><TD +>krb5-libs (for linking with)</TD +></TR +><TR +><TD +>krb5-devel (because you are compiling from source)</TD +></TR +></TBODY +></TABLE +><P +></P +> + </P +><P +>in addition to the standard development environment.</P +><P +>Note that these are not standard on a RedHat install, and you may need + to get them off CD2.</P +></DIV +></DIV ></DIV ><DIV CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3884" +NAME="AEN3872" >26.4. Starting the smbd and nmbd</A ></H2 ><P @@ -18910,7 +18882,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3894" +NAME="AEN3882" >26.4.1. Starting from inetd.conf</A ></H3 ><P @@ -19010,7 +18982,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN3923" +NAME="AEN3911" >26.4.2. Alternative: starting it as a daemon</A ></H3 ><P @@ -19075,7 +19047,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN3946" +NAME="AEN3934" >27.1. Introduction</A ></H2 ><P @@ -19120,7 +19092,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3956" +NAME="AEN3944" >27.2. General info</A ></H2 ><P @@ -19145,7 +19117,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3962" +NAME="AEN3950" >27.3. Debug levels</A ></H2 ><P @@ -19215,7 +19187,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3979" +NAME="AEN3967" >27.4. Internal errors</A ></H2 ><P @@ -19259,7 +19231,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3989" +NAME="AEN3977" >27.5. Attaching to a running process</A ></H2 ><P @@ -19276,7 +19248,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN3992" +NAME="AEN3980" >27.6. Patches</A ></H2 ><P @@ -19305,7 +19277,7 @@ CLASS="SECT1" ><H2 CLASS="SECT1" ><A -NAME="AEN4015" +NAME="AEN4003" >28.1. Introduction</A ></H2 ><P @@ -19327,7 +19299,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN4020" +NAME="AEN4008" >28.2. Assumptions</A ></H2 ><P @@ -19365,7 +19337,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN4030" +NAME="AEN4018" >28.3. Tests</A ></H2 ><DIV @@ -19373,7 +19345,7 @@ CLASS="SECT2" ><H3 CLASS="SECT2" ><A -NAME="AEN4032" +NAME="AEN4020" >28.3.1. Test 1</A ></H3 ><P @@ -19395,7 +19367,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4038" +NAME="AEN4026" >28.3.2. Test 2</A ></H3 ><P @@ -19421,7 +19393,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4044" +NAME="AEN4032" >28.3.3. Test 3</A ></H3 ><P @@ -19492,7 +19464,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4059" +NAME="AEN4047" >28.3.4. Test 4</A ></H3 ><P @@ -19513,7 +19485,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4064" +NAME="AEN4052" >28.3.5. Test 5</A ></H3 ><P @@ -19534,7 +19506,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4070" +NAME="AEN4058" >28.3.6. Test 6</A ></H3 ><P @@ -19568,7 +19540,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4078" +NAME="AEN4066" >28.3.7. Test 7</A ></H3 ><P @@ -19657,7 +19629,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4104" +NAME="AEN4092" >28.3.8. Test 8</A ></H3 ><P @@ -19717,7 +19689,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4121" +NAME="AEN4109" >28.3.9. Test 9</A ></H3 ><P @@ -19751,7 +19723,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4129" +NAME="AEN4117" >28.3.10. Test 10</A ></H3 ><P @@ -19777,7 +19749,7 @@ CLASS="SECT2" ><HR><H3 CLASS="SECT2" ><A -NAME="AEN4135" +NAME="AEN4123" >28.3.11. Test 11</A ></H3 ><P @@ -19805,7 +19777,7 @@ CLASS="SECT1" ><HR><H2 CLASS="SECT1" ><A -NAME="AEN4140" +NAME="AEN4128" >28.4. Still having troubles?</A ></H2 ><P |