summaryrefslogtreecommitdiff
path: root/docs/htmldocs/improved-browsing.html
diff options
context:
space:
mode:
authorJelmer Vernooij <jelmer@samba.org>2003-04-06 18:42:44 +0000
committerJelmer Vernooij <jelmer@samba.org>2003-04-06 18:42:44 +0000
commit27aef6855f1543547b8190f06fd264d1b52a558d (patch)
tree713532d44e88c19a9c414765388ced3b24c79ff9 /docs/htmldocs/improved-browsing.html
parent71a53d0e4d29d275c438cf8a43562d1082f1d805 (diff)
downloadsamba-27aef6855f1543547b8190f06fd264d1b52a558d.tar.gz
samba-27aef6855f1543547b8190f06fd264d1b52a558d.tar.bz2
samba-27aef6855f1543547b8190f06fd264d1b52a558d.zip
Regenerate docs
(This used to be commit 5a2aaa3d5b039776314067aee953921e7865dc4d)
Diffstat (limited to 'docs/htmldocs/improved-browsing.html')
-rw-r--r--docs/htmldocs/improved-browsing.html299
1 files changed, 214 insertions, 85 deletions
diff --git a/docs/htmldocs/improved-browsing.html b/docs/htmldocs/improved-browsing.html
index c6b70ddc0c..5fa18c113c 100644
--- a/docs/htmldocs/improved-browsing.html
+++ b/docs/htmldocs/improved-browsing.html
@@ -16,8 +16,8 @@ REL="PREVIOUS"
TITLE="Integrating MS Windows networks with Samba"
HREF="integrate-ms-networks.html"><LINK
REL="NEXT"
-TITLE="Hosting a Microsoft Distributed File System tree on Samba"
-HREF="msdfs.html"></HEAD
+TITLE="Securing Samba"
+HREF="securing-samba.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
@@ -59,7 +59,7 @@ WIDTH="10%"
ALIGN="right"
VALIGN="bottom"
><A
-HREF="msdfs.html"
+HREF="securing-samba.html"
ACCESSKEY="N"
>Next</A
></TD
@@ -74,18 +74,21 @@ CLASS="CHAPTER"
><A
NAME="IMPROVED-BROWSING"
></A
->Chapter 18. Improved browsing in samba</H1
+>Chapter 22. Improved browsing in samba</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3047"
->18.1. Overview of browsing</A
+NAME="AEN3695"
+>22.1. Overview of browsing</A
></H1
><P
>SMB networking provides a mechanism by which clients can access a list
-of machines in a network, a so-called "browse list". This list
+of machines in a network, a so-called <B
+CLASS="COMMAND"
+>browse list</B
+>. This list
contains machines that are ready to offer file and/or print services
to other machines within the network. Thus it does not include
machines which aren't currently able to do server tasks. The browse
@@ -93,7 +96,7 @@ list is heavily used by all SMB clients. Configuration of SMB
browsing has been problematic for some Samba users, hence this
document.</P
><P
->MS Windows 2000 and later, as with Samba-3 and later, can be
+>MS Windows 2000 and later, as with Samba 3 and later, can be
configured to not use NetBIOS over TCP/IP. When configured this way
it is imperative that name resolution (using DNS/LDAP/ADS) be correctly
configured and operative. Browsing will NOT work if name resolution
@@ -109,8 +112,8 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3052"
->18.2. Browsing support in samba</A
+NAME="AEN3701"
+>22.2. Browsing support in samba</A
></H1
><P
>Samba facilitates browsing. The browsing is supported by nmbd
@@ -129,45 +132,91 @@ workgroup that has the same name as an NT Domain: on each wide area
network, you must only ever have one domain master browser per workgroup,
regardless of whether it is NT, Samba or any other type of domain master
that is providing this service.</P
+><DIV
+CLASS="NOTE"
+><P
+></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/usr/share/sgml/docbook/stylesheet/dsssl/modular/images/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->[Note that nmbd can be configured as a WINS server, but it is not
+>Nmbd can be configured as a WINS server, but it is not
necessary to specifically use samba as your WINS server. MS Windows
NT4, Server or Advanced Server 2000 or 2003 can be configured as
your WINS server. In a mixed NT/2000/2003 server and samba environment on
a Wide Area Network, it is recommended that you use the Microsoft
WINS server capabilities. In a samba-only environment, it is
recommended that you use one and only one Samba server as your WINS server.</P
+></TD
+></TR
+></TABLE
+></DIV
><P
>To get browsing to work you need to run nmbd as usual, but will need
-to use the "workgroup" option in smb.conf to control what workgroup
-Samba becomes a part of.</P
+to use the <B
+CLASS="COMMAND"
+>workgroup</B
+> option in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>
+to control what workgroup Samba becomes a part of.</P
><P
>Samba also has a useful option for a Samba server to offer itself for
browsing on another subnet. It is recommended that this option is only
used for 'unusual' purposes: announcements over the internet, for
-example. See "remote announce" in the smb.conf man page. </P
+example. See <B
+CLASS="COMMAND"
+>remote announce</B
+> in the
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+> man page. </P
></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3060"
->18.3. Problem resolution</A
+NAME="AEN3714"
+>22.3. Problem resolution</A
></H1
><P
>If something doesn't work then hopefully the log.nmb file will help
you track down the problem. Try a debug level of 2 or 3 for finding
problems. Also note that the current browse list usually gets stored
-in text form in a file called browse.dat.</P
+in text form in a file called <TT
+CLASS="FILENAME"
+>browse.dat</TT
+>.</P
><P
>Note that if it doesn't work for you, then you should still be able to
-type the server name as \\SERVER in filemanager then hit enter and
-filemanager should display the list of available shares.</P
+type the server name as <TT
+CLASS="FILENAME"
+>\\SERVER</TT
+> in filemanager then
+hit enter and filemanager should display the list of available shares.</P
><P
>Some people find browsing fails because they don't have the global
-"guest account" set to a valid account. Remember that the IPC$
-connection that lists the shares is done as guest, and thus you must
+<B
+CLASS="COMMAND"
+>guest account</B
+> set to a valid account. Remember that the
+IPC$ connection that lists the shares is done as guest, and thus you must
have a valid guest account.</P
><P
><SPAN
@@ -183,13 +232,6 @@ server resources.</I
></SPAN
></P
><P
->Also, a lot of people are getting bitten by the problem of too many
-parameters on the command line of nmbd in inetd.conf. This trick is to
-not use spaces between the option and the parameter (eg: -d2 instead
-of -d 2), and to not use the -B and -N options. New versions of nmbd
-are now far more likely to correctly find your broadcast and network
-address, so in most cases these aren't needed.</P
-><P
>The other big problem people have is that their broadcast address,
netmask or IP address is wrong (specified with the "interfaces" option
in smb.conf)</P
@@ -199,8 +241,8 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3069"
->18.4. Browsing across subnets</A
+NAME="AEN3725"
+>22.4. Browsing across subnets</A
></H1
><P
>Since the release of Samba 1.9.17(alpha1) Samba has been
@@ -230,8 +272,8 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN3074"
->18.4.1. How does cross subnet browsing work ?</A
+NAME="AEN3730"
+>22.4.1. How does cross subnet browsing work ?</A
></H2
><P
>Cross subnet browsing is a complicated dance, containing multiple
@@ -441,8 +483,8 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3109"
->18.5. Setting up a WINS server</A
+NAME="AEN3765"
+>22.5. Setting up a WINS server</A
></H1
><P
>Either a Samba machine or a Windows NT Server machine may be set up
@@ -460,17 +502,17 @@ yes. If you have any older versions of Samba on your network it is
strongly suggested you upgrade to a recent version, or at the very
least set the parameter to 'no' on all these machines.</P
><P
->Machines with "<B
+>Machines with <B
CLASS="COMMAND"
>wins support = yes</B
->" will keep a list of
+> will keep a list of
all NetBIOS names registered with them, acting as a DNS for NetBIOS names.</P
><P
>You should set up only ONE wins server. Do NOT set the
-"<B
+<B
CLASS="COMMAND"
>wins support = yes</B
->" option on more than one Samba
+> option on more than one Samba
server.</P
><P
>To set up a Windows NT Server as a WINS server you need to set up
@@ -481,8 +523,11 @@ refuse to document these replication protocols Samba cannot currently
participate in these replications. It is possible in the future that
a Samba-&#62;Samba WINS replication protocol may be defined, in which
case more than one Samba machine could be set up as a WINS server
-but currently only one Samba server should have the "wins support = yes"
-parameter set.</P
+but currently only one Samba server should have the
+<B
+CLASS="COMMAND"
+>wins support = yes</B
+> parameter set.</P
><P
>After the WINS server has been configured you must ensure that all
machines participating on the network are configured with the address
@@ -503,14 +548,14 @@ machine or its IP address.</P
><P
>Note that this line MUST NOT BE SET in the smb.conf file of the Samba
server acting as the WINS server itself. If you set both the
-"<B
+<B
CLASS="COMMAND"
>wins support = yes</B
->" option and the
-"<B
+> option and the
+<B
CLASS="COMMAND"
>wins server = &#60;name&#62;</B
->" option then
+> option then
nmbd will fail to start.</P
><P
>There are two possible scenarios for setting up cross subnet browsing.
@@ -524,8 +569,8 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3128"
->18.6. Setting up Browsing in a WORKGROUP</A
+NAME="AEN3785"
+>22.6. Setting up Browsing in a WORKGROUP</A
></H1
><P
>To set up cross subnet browsing on a network containing machines
@@ -586,15 +631,31 @@ os level = 65</PRE
or they will war with each other over which is to be the local
master browser.</P
><P
->The "local master" parameter allows Samba to act as a local master
-browser. The "preferred master" causes nmbd to force a browser
-election on startup and the "os level" parameter sets Samba high
-enough so that it should win any browser elections.</P
+>The <B
+CLASS="COMMAND"
+>local master</B
+> parameter allows Samba to act as a
+local master browser. The <B
+CLASS="COMMAND"
+>preferred master</B
+> causes nmbd
+to force a browser election on startup and the <B
+CLASS="COMMAND"
+>os level</B
+>
+parameter sets Samba high enough so that it should win any browser elections.</P
><P
>If you have an NT machine on the subnet that you wish to
be the local master browser then you can disable Samba from
becoming a local master browser by setting the following
-options in the [global] section of the smb.conf file :</P
+options in the <B
+CLASS="COMMAND"
+>[global]</B
+> section of the
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+> file :</P
><P
><PRE
CLASS="PROGRAMLISTING"
@@ -609,8 +670,8 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3146"
->18.7. Setting up Browsing in a DOMAIN</A
+NAME="AEN3808"
+>22.7. Setting up Browsing in a DOMAIN</A
></H1
><P
>If you are adding Samba servers to a Windows NT Domain then
@@ -618,13 +679,23 @@ you must not set up a Samba server as a domain master browser.
By default, a Windows NT Primary Domain Controller for a Domain
name is also the Domain master browser for that name, and many
things will break if a Samba server registers the Domain master
-browser NetBIOS name (DOMAIN&#60;1B&#62;) with WINS instead of the PDC.</P
+browser NetBIOS name (<VAR
+CLASS="REPLACEABLE"
+>DOMAIN</VAR
+>&#60;1B&#62;)
+with WINS instead of the PDC.</P
><P
>For subnets other than the one containing the Windows NT PDC
you may set up Samba servers as local master browsers as
described. To make a Samba server a local master browser set
-the following options in the [global] section of the smb.conf
-file :</P
+the following options in the <B
+CLASS="COMMAND"
+>[global]</B
+> section
+of the <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> file :</P
><P
><PRE
CLASS="PROGRAMLISTING"
@@ -635,17 +706,30 @@ os level = 65</PRE
></P
><P
>If you wish to have a Samba server fight the election with machines
-on the same subnet you may set the "os level" parameter to lower
-levels. By doing this you can tune the order of machines that
+on the same subnet you may set the <B
+CLASS="COMMAND"
+>os level</B
+> parameter
+to lower levels. By doing this you can tune the order of machines that
will become local master browsers if they are running. For
-more details on this see the section "FORCING SAMBA TO BE THE MASTER"
+more details on this see the section <A
+HREF="improved-browsing.html#BROWSE-FORCE-MASTER"
+>Forcing samba to be the master browser</A
+>
below.</P
><P
>If you have Windows NT machines that are members of the domain
on all subnets, and you are sure they will always be running then
you can disable Samba from taking part in browser elections and
ever becoming a local master browser by setting following options
-in the [global] section of the smb.conf file :</P
+in the <B
+CLASS="COMMAND"
+>[global]</B
+> section of the <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>
+file :</P
><P
><B
CLASS="COMMAND"
@@ -660,37 +744,64 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3156"
->18.8. Forcing samba to be the master</A
+NAME="BROWSE-FORCE-MASTER"
+>22.8. Forcing samba to be the master</A
></H1
><P
->Who becomes the "master browser" is determined by an election process
-using broadcasts. Each election packet contains a number of parameters
+>Who becomes the <B
+CLASS="COMMAND"
+>master browser</B
+> is determined by an election
+process using broadcasts. Each election packet contains a number of parameters
which determine what precedence (bias) a host should have in the
election. By default Samba uses a very low precedence and thus loses
elections to just about anyone else.</P
><P
->If you want Samba to win elections then just set the "os level" global
-option in smb.conf to a higher number. It defaults to 0. Using 34
+>If you want Samba to win elections then just set the <B
+CLASS="COMMAND"
+>os level</B
+> global
+option in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> to a higher number. It defaults to 0. Using 34
would make it win all elections over every other system (except other
samba systems!)</P
><P
->A "os level" of 2 would make it beat WfWg and Win95, but not MS Windows
+>A <B
+CLASS="COMMAND"
+>os level</B
+> of 2 would make it beat WfWg and Win95, but not MS Windows
NT/2K Server. A MS Windows NT/2K Server domain controller uses level 32.</P
><P
>The maximum os level is 255</P
><P
>If you want samba to force an election on startup, then set the
-"preferred master" global option in smb.conf to "yes". Samba will
+<B
+CLASS="COMMAND"
+>preferred master</B
+> global option in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> to "yes". Samba will
then have a slight advantage over other potential master browsers
that are not preferred master browsers. Use this parameter with
care, as if you have two hosts (whether they are windows 95 or NT or
-samba) on the same local subnet both set with "preferred master" to
+samba) on the same local subnet both set with <B
+CLASS="COMMAND"
+>preferred master</B
+> to
"yes", then periodically and continually they will force an election
in order to become the local master browser.</P
><P
->If you want samba to be a "domain master browser", then it is
-recommended that you also set "preferred master" to "yes", because
+>If you want samba to be a <B
+CLASS="COMMAND"
+>domain master browser</B
+>, then it is
+recommended that you also set <B
+CLASS="COMMAND"
+>preferred master</B
+> to "yes", because
samba will not become a domain master browser for the whole of your
LAN or WAN if it is not also a local master browser on its own
broadcast isolated subnet.</P
@@ -708,14 +819,20 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3165"
->18.9. Making samba the domain master</A
+NAME="AEN3843"
+>22.9. Making samba the domain master</A
></H1
><P
>The domain master is responsible for collating the browse lists of
multiple subnets so that browsing can occur between subnets. You can
-make samba act as the domain master by setting "domain master = yes"
-in smb.conf. By default it will not be a domain master.</P
+make samba act as the domain master by setting <B
+CLASS="COMMAND"
+>domain master = yes</B
+>
+in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>. By default it will not be a domain master.</P
><P
>Note that you should NOT set Samba to be the domain master for a
workgroup that has the same name as an NT Domain.</P
@@ -726,8 +843,14 @@ master browsers on other subnets and then contact them to synchronise
browse lists.</P
><P
>If you want samba to be the domain master then I suggest you also set
-the "os level" high enough to make sure it wins elections, and set
-"preferred master" to "yes", to get samba to force an election on
+the <B
+CLASS="COMMAND"
+>os level</B
+> high enough to make sure it wins elections, and set
+<B
+CLASS="COMMAND"
+>preferred master</B
+> to "yes", to get samba to force an election on
startup.</P
><P
>Note that all your servers (including samba) and clients should be
@@ -781,8 +904,8 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3183"
->18.10. Note about broadcast addresses</A
+NAME="AEN3865"
+>22.10. Note about broadcast addresses</A
></H1
><P
>If your network uses a "0" based broadcast address (for example if it
@@ -795,13 +918,19 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3186"
->18.11. Multiple interfaces</A
+NAME="AEN3868"
+>22.11. Multiple interfaces</A
></H1
><P
>Samba now supports machines with multiple network interfaces. If you
-have multiple interfaces then you will need to use the "interfaces"
-option in smb.conf to configure them. See smb.conf(5) for details.</P
+have multiple interfaces then you will need to use the <B
+CLASS="COMMAND"
+>interfaces</B
+>
+option in smb.conf to configure them. See <TT
+CLASS="FILENAME"
+>smb.conf(5)</TT
+> for details.</P
></DIV
></DIV
><DIV
@@ -838,7 +967,7 @@ WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
-HREF="msdfs.html"
+HREF="securing-samba.html"
ACCESSKEY="N"
>Next</A
></TD
@@ -862,7 +991,7 @@ ACCESSKEY="U"
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Hosting a Microsoft Distributed File System tree on Samba</TD
+>Securing Samba</TD
></TR
></TABLE
></DIV