diff options
Diffstat (limited to 'docs/docbook/projdoc')
22 files changed, 295 insertions, 318 deletions
diff --git a/docs/docbook/projdoc/ADS-HOWTO.sgml b/docs/docbook/projdoc/ADS-HOWTO.sgml index d08833b7fd..5e93c62876 100644 --- a/docs/docbook/projdoc/ADS-HOWTO.sgml +++ b/docs/docbook/projdoc/ADS-HOWTO.sgml @@ -74,12 +74,12 @@ its netbios name. If you don't get this right then you will get a </para> <para> -If all you want is kerberos support in &smbclient; then you can skip -straight to <link linkend="ads-test-smbclient">Test with &smbclient;</link> now. +If all you want is kerberos support in smbclient then you can skip +straight to <link linkend="ads-test-smbclient">Test with smbclient</link> now. <link linkend="ads-create-machine-account">Creating a computer account</link> and <link linkend="ads-test-server">testing your servers</link> is only needed if you want kerberos -support for &smbd; and &winbindd;. +support for smbd and winbindd. </para> </sect1> @@ -120,12 +120,12 @@ server? Does it have an encoding type of DES-CBC-MD5 ? </sect1> <sect1 id="ads-test-smbclient"> -<title>Testing with &smbclient;</title> +<title>Testing with smbclient</title> <para> On your Samba server try to login to a Win2000 server or your Samba -server using &smbclient; and kerberos. Use &smbclient; as usual, but -specify the <parameter>-k</parameter> option to choose kerberos authentication. +server using smbclient and kerberos. Use smbclient as usual, but +specify the -k option to choose kerberos authentication. </para> </sect1> diff --git a/docs/docbook/projdoc/Browsing-Quickguide.sgml b/docs/docbook/projdoc/Browsing-Quickguide.sgml index ed5b9a61af..a2b67983f8 100644 --- a/docs/docbook/projdoc/Browsing-Quickguide.sgml +++ b/docs/docbook/projdoc/Browsing-Quickguide.sgml @@ -44,7 +44,7 @@ implements browse list collation using unicast UDP. <para> Secondly, in those networks where Samba is the only SMB server technology -wherever possible &nmbd; should be configured on one (1) machine as the WINS +wherever possible nmbd should be configured on one (1) machine as the WINS server. This makes it easy to manage the browsing environment. If each network segment is configured with it's own Samba WINS server, then the only way to get cross segment browsing to work is by using the @@ -65,7 +65,7 @@ been committed, but it still needs maturation. <para> Right now samba WINS does not support MS-WINS replication. This means that -when setting up Samba as a WINS server there must only be one &nmbd; configured +when setting up Samba as a WINS server there must only be one nmbd configured as a WINS server on the network. Some sites have used multiple Samba WINS servers for redundancy (one server per subnet) and then used <command>remote browse sync</command> and <command>remote announce</command> @@ -294,12 +294,11 @@ To configure Samba to register with a WINS server just add "wins server = a.b.c.d" to your smb.conf file [globals] section. </para> -<important><para> -Never use both <command>wins support = yes</command> together -with <command>wins server = a.b.c.d</command> -particularly not using it's own IP address. -Specifying both will cause &nmbd; to refuse to start! -</para></important> +<para> +<emphasis>DO NOT EVER</emphasis> use both "wins support = yes" together +with "wins server = a.b.c.d" particularly not using it's own IP address. +Specifying both will cause nmbd to refuse to start! +</para> </sect1> diff --git a/docs/docbook/projdoc/Browsing.sgml b/docs/docbook/projdoc/Browsing.sgml index ca2f6dc57b..2de0f446a6 100644 --- a/docs/docbook/projdoc/Browsing.sgml +++ b/docs/docbook/projdoc/Browsing.sgml @@ -16,7 +16,7 @@ <para> SMB networking provides a mechanism by which clients can access a list -of machines in a network, a so-called <command>browse list</command>. This list +of machines in a network, a so-called "browse list". This list contains machines that are ready to offer file and/or print services to other machines within the network. Thus it does not include machines which aren't currently able to do server tasks. The browse @@ -26,7 +26,7 @@ document. </para> <para> -MS Windows 2000 and later, as with Samba 3 and later, can be +MS Windows 2000 and later, as with Samba-3 and later, can be configured to not use NetBIOS over TCP/IP. When configured this way it is imperative that name resolution (using DNS/LDAP/ADS) be correctly configured and operative. Browsing will NOT work if name resolution @@ -46,8 +46,8 @@ that can NOT be provided by any other means of name resolution. <title>Browsing support in samba</title> <para> -Samba facilitates browsing. The browsing is supported by &nmbd; -and is also controlled by options in the &smb.conf; file. +Samba facilitates browsing. The browsing is supported by nmbd +and is also controlled by options in the smb.conf file (see smb.conf(5)). Samba can act as a local browse master for a workgroup and the ability for samba to support domain logons and scripts is now available. </para> @@ -80,16 +80,15 @@ recommended that you use one and only one Samba server as your WINS server. <para> To get browsing to work you need to run nmbd as usual, but will need -to use the <command>workgroup</command> option in &smb.conf; -to control what workgroup Samba becomes a part of. +to use the "workgroup" option in smb.conf to control what workgroup +Samba becomes a part of. </para> <para> Samba also has a useful option for a Samba server to offer itself for browsing on another subnet. It is recommended that this option is only used for 'unusual' purposes: announcements over the internet, for -example. See <command>remote announce</command> in the -&smb.conf; man page. +example. See "remote announce" in the smb.conf man page. </para> </sect1> @@ -100,19 +99,19 @@ example. See <command>remote announce</command> in the If something doesn't work then hopefully the log.nmb file will help you track down the problem. Try a debug level of 2 or 3 for finding problems. Also note that the current browse list usually gets stored -in text form in a file called <filename>browse.dat</filename>. +in text form in a file called browse.dat. </para> <para> Note that if it doesn't work for you, then you should still be able to -type the server name as <filename>\\SERVER</filename> in filemanager then -hit enter and filemanager should display the list of available shares. +type the server name as \\SERVER in filemanager then hit enter and +filemanager should display the list of available shares. </para> <para> Some people find browsing fails because they don't have the global -<command>guest account</command> set to a valid account. Remember that the -IPC$ connection that lists the shares is done as guest, and thus you must +"guest account" set to a valid account. Remember that the IPC$ +connection that lists the shares is done as guest, and thus you must have a valid guest account. </para> @@ -126,9 +125,18 @@ server resources. </emphasis></para> <para> +Also, a lot of people are getting bitten by the problem of too many +parameters on the command line of nmbd in inetd.conf. This trick is to +not use spaces between the option and the parameter (eg: -d2 instead +of -d 2), and to not use the -B and -N options. New versions of nmbd +are now far more likely to correctly find your broadcast and network +address, so in most cases these aren't needed. +</para> + +<para> The other big problem people have is that their broadcast address, netmask or IP address is wrong (specified with the "interfaces" option -in &smb.conf;) +in smb.conf) </para> </sect1> @@ -160,7 +168,7 @@ Remember, for browsing across subnets to work correctly, all machines, be they Windows 95, Windows NT, or Samba servers must have the IP address of a WINS server given to them by a DHCP server, or by manual configuration (for Win95 and WinNT, this is in the TCP/IP Properties, under Network -settings) for Samba this is in the &smb.conf; file. +settings) for Samba this is in the smb.conf file. </para> <sect2> @@ -412,7 +420,7 @@ If either router R1 or R2 fails the following will occur: <para> Either a Samba machine or a Windows NT Server machine may be set up as a WINS server. To set a Samba machine to be a WINS server you must -add the following option to the &smb.conf; file on the selected machine : +add the following option to the smb.conf file on the selected machine : in the [globals] section add the line </para> @@ -428,13 +436,13 @@ least set the parameter to 'no' on all these machines. </para> <para> -Machines with <command>wins support = yes</command> will keep a list of +Machines with "<command>wins support = yes</command>" will keep a list of all NetBIOS names registered with them, acting as a DNS for NetBIOS names. </para> <para> You should set up only ONE wins server. Do NOT set the -<command>wins support = yes</command> option on more than one Samba +"<command>wins support = yes</command>" option on more than one Samba server. </para> @@ -447,8 +455,8 @@ refuse to document these replication protocols Samba cannot currently participate in these replications. It is possible in the future that a Samba->Samba WINS replication protocol may be defined, in which case more than one Samba machine could be set up as a WINS server -but currently only one Samba server should have the -<command>wins support = yes</command> parameter set. +but currently only one Samba server should have the "wins support = yes" +parameter set. </para> <para> @@ -459,7 +467,7 @@ the Samba machine IP address in the "Primary WINS Server" field of the "Control Panel->Network->Protocols->TCP->WINS Server" dialogs in Windows 95 or Windows NT. To tell a Samba server the IP address of the WINS server add the following line to the [global] section of -all &smb.conf; files : +all smb.conf files : </para> <para> @@ -472,10 +480,10 @@ machine or its IP address. </para> <para> -Note that this line MUST NOT BE SET in the &smb.conf; file of the Samba +Note that this line MUST NOT BE SET in the smb.conf file of the Samba server acting as the WINS server itself. If you set both the -<command>wins support = yes</command> option and the -<command>wins server = <name></command> option then +"<command>wins support = yes</command>" option and the +"<command>wins server = <name></command>" option then nmbd will fail to start. </para> @@ -510,7 +518,7 @@ cross subnet browsing possible for a workgroup. In an WORKGROUP environment the domain master browser must be a Samba server, and there must only be one domain master browser per workgroup name. To set up a Samba server as a domain master browser, -set the following option in the [global] section of the &smb.conf; file : +set the following option in the [global] section of the smb.conf file : </para> <para> @@ -520,7 +528,7 @@ set the following option in the [global] section of the &smb.conf; file : <para> The domain master browser should also preferrably be the local master browser for its own subnet. In order to achieve this set the following -options in the [global] section of the &smb.conf; file : +options in the [global] section of the smb.conf file : </para> <para> @@ -545,7 +553,7 @@ able to do this, as will Windows 9x machines (although these tend to get rebooted more often, so it's not such a good idea to use these). To make a Samba server a local master browser set the following options in the [global] section of the -&smb.conf; file : +smb.conf file : </para> <para> @@ -564,18 +572,17 @@ master browser. </para> <para> -The <command>local master</command> parameter allows Samba to act as a -local master browser. The <command>preferred master</command> causes nmbd -to force a browser election on startup and the <command>os level</command> -parameter sets Samba high enough so that it should win any browser elections. +The "local master" parameter allows Samba to act as a local master +browser. The "preferred master" causes nmbd to force a browser +election on startup and the "os level" parameter sets Samba high +enough so that it should win any browser elections. </para> <para> If you have an NT machine on the subnet that you wish to be the local master browser then you can disable Samba from becoming a local master browser by setting the following -options in the <command>[global]</command> section of the -&smb.conf; file : +options in the [global] section of the smb.conf file : </para> <para> @@ -598,16 +605,15 @@ you must not set up a Samba server as a domain master browser. By default, a Windows NT Primary Domain Controller for a Domain name is also the Domain master browser for that name, and many things will break if a Samba server registers the Domain master -browser NetBIOS name (<replaceable>DOMAIN</replaceable><1B>) -with WINS instead of the PDC. +browser NetBIOS name (DOMAIN<1B>) with WINS instead of the PDC. </para> <para> For subnets other than the one containing the Windows NT PDC you may set up Samba servers as local master browsers as described. To make a Samba server a local master browser set -the following options in the <command>[global]</command> section -of the &smb.conf; file : +the following options in the [global] section of the smb.conf +file : </para> <para> @@ -621,11 +627,10 @@ os level = 65 <para> If you wish to have a Samba server fight the election with machines -on the same subnet you may set the <command>os level</command> parameter -to lower levels. By doing this you can tune the order of machines that +on the same subnet you may set the "os level" parameter to lower +levels. By doing this you can tune the order of machines that will become local master browsers if they are running. For -more details on this see the section <link linkend="browse-force-master"> -Forcing samba to be the master browser</link> +more details on this see the section "FORCING SAMBA TO BE THE MASTER" below. </para> @@ -634,8 +639,7 @@ If you have Windows NT machines that are members of the domain on all subnets, and you are sure they will always be running then you can disable Samba from taking part in browser elections and ever becoming a local master browser by setting following options -in the <command>[global]</command> section of the &smb.conf; -file : +in the [global] section of the smb.conf file : </para> <para> @@ -649,26 +653,26 @@ file : </sect1> -<sect1 id="browse-force-master"> +<sect1> <title>Forcing samba to be the master</title> <para> -Who becomes the <command>master browser</command> is determined by an election -process using broadcasts. Each election packet contains a number of parameters +Who becomes the "master browser" is determined by an election process +using broadcasts. Each election packet contains a number of parameters which determine what precedence (bias) a host should have in the election. By default Samba uses a very low precedence and thus loses elections to just about anyone else. </para> <para> -If you want Samba to win elections then just set the <command>os level</command> global -option in &smb.conf; to a higher number. It defaults to 0. Using 34 +If you want Samba to win elections then just set the "os level" global +option in smb.conf to a higher number. It defaults to 0. Using 34 would make it win all elections over every other system (except other samba systems!) </para> <para> -A <command>os level</command> of 2 would make it beat WfWg and Win95, but not MS Windows +A "os level" of 2 would make it beat WfWg and Win95, but not MS Windows NT/2K Server. A MS Windows NT/2K Server domain controller uses level 32. </para> @@ -676,18 +680,18 @@ NT/2K Server. A MS Windows NT/2K Server domain controller uses level 32. <para> If you want samba to force an election on startup, then set the -<command>preferred master</command> global option in &smb.conf; to "yes". Samba will +"preferred master" global option in smb.conf to "yes". Samba will then have a slight advantage over other potential master browsers that are not preferred master browsers. Use this parameter with care, as if you have two hosts (whether they are windows 95 or NT or -samba) on the same local subnet both set with <command>preferred master</command> to +samba) on the same local subnet both set with "preferred master" to "yes", then periodically and continually they will force an election in order to become the local master browser. </para> <para> -If you want samba to be a <command>domain master browser</command>, then it is -recommended that you also set <command>preferred master</command> to "yes", because +If you want samba to be a "domain master browser", then it is +recommended that you also set "preferred master" to "yes", because samba will not become a domain master browser for the whole of your LAN or WAN if it is not also a local master browser on its own broadcast isolated subnet. @@ -711,8 +715,8 @@ the current domain master browser fail. <para> The domain master is responsible for collating the browse lists of multiple subnets so that browsing can occur between subnets. You can -make samba act as the domain master by setting <command>domain master = yes</command> -in &smb.conf;. By default it will not be a domain master. +make samba act as the domain master by setting "domain master = yes" +in smb.conf. By default it will not be a domain master. </para> <para> @@ -729,8 +733,8 @@ browse lists. <para> If you want samba to be the domain master then I suggest you also set -the <command>os level</command> high enough to make sure it wins elections, and set -<command>preferred master</command> to "yes", to get samba to force an election on +the "os level" high enough to make sure it wins elections, and set +"preferred master" to "yes", to get samba to force an election on startup. </para> @@ -800,8 +804,8 @@ that browsing and name lookups won't work. <para> Samba now supports machines with multiple network interfaces. If you -have multiple interfaces then you will need to use the <command>interfaces</command> -option in &smb.conf; to configure them. +have multiple interfaces then you will need to use the "interfaces" +option in smb.conf to configure them. See smb.conf(5) for details. </para> </sect1> </chapter> diff --git a/docs/docbook/projdoc/Bugs.sgml b/docs/docbook/projdoc/Bugs.sgml index d3525f5f95..4e4f7b9084 100644 --- a/docs/docbook/projdoc/Bugs.sgml +++ b/docs/docbook/projdoc/Bugs.sgml @@ -87,7 +87,7 @@ detail, but may use too much disk space. <para> To set the debug level use <command>log level =</command> in your -&smb.conf;. You may also find it useful to set the log +<filename>smb.conf</filename>. You may also find it useful to set the log level higher for just one machine and keep separate logs for each machine. To do this use: </para> @@ -100,19 +100,19 @@ include = /usr/local/samba/lib/smb.conf.%m <para> then create a file -<filename>/usr/local/samba/lib/smb.conf.<replaceable>machine</replaceable></filename> where -<replaceable>machine</replaceable> is the name of the client you wish to debug. In that file -put any &smb.conf; commands you want, for example +<filename>/usr/local/samba/lib/smb.conf.machine</filename> where +"machine" is the name of the client you wish to debug. In that file +put any smb.conf commands you want, for example <command>log level=</command> may be useful. This also allows you to experiment with different security systems, protocol levels etc on just one machine. </para> <para> -The &smb.conf; entry <command>log level =</command> +The <filename>smb.conf</filename> entry <command>log level =</command> is synonymous with the entry <command>debuglevel =</command> that has been used in older versions of Samba and is being retained for backwards -compatibility of &smb.conf; files. +compatibility of smb.conf files. </para> <para> @@ -132,7 +132,7 @@ large volume of log data. If you get a "INTERNAL ERROR" message in your log files it means that Samba got an unexpected signal while running. It is probably a segmentation fault and almost certainly means a bug in Samba (unless -you have faulty hardware or system software). +you have faulty hardware or system software) </para> <para> @@ -148,7 +148,7 @@ possible. Please make this reasonably detailed. </para> <para> -You may also find that a core file appeared in a <filename>corefiles</filename> +You may also find that a core file appeared in a "corefiles" subdirectory of the directory where you keep your samba log files. This file is the most useful tool for tracking down the bug. To use it you do this: @@ -158,13 +158,13 @@ use it you do this: <para> adding appropriate paths to smbd and core so gdb can find them. If you -don't have gdb then try <userinput>dbx</userinput>. Then within the debugger use the -command <userinput>where</userinput> to give a stack trace of where the problem +don't have gdb then try "dbx". Then within the debugger use the +command "where" to give a stack trace of where the problem occurred. Include this in your mail. </para> <para> -If you known any assembly language then do a <userinput>disass</userinput> of the routine +If you known any assembly language then do a "disass" of the routine where the problem occurred (if its in a library routine then disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you @@ -180,8 +180,8 @@ useful. Unfortunately some unixes (in particular some recent linux kernels) refuse to dump a core file if the task has changed uid (which smbd does often). To debug with this sort of system you could try to attach -to the running process using <userinput>gdb smbd <replaceable>PID</replaceable></userinput> where you get <replaceable>PID</replaceable> from -<application>smbstatus</application>. Then use <userinput>c</userinput> to continue and try to cause the core dump +to the running process using "gdb smbd PID" where you get PID from +smbstatus. Then use "c" to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you where it occurred. </para> @@ -193,8 +193,8 @@ where it occurred. <para> The best sort of bug report is one that includes a fix! If you send us -patches please use <userinput>diff -u</userinput> format if your version of -diff supports it, otherwise use <userinput>diff -c4</userinput>. Make sure +patches please use <command>diff -u</command> format if your version of +diff supports it, otherwise use <command>diff -c4</command>. Make sure your do the diff against a clean version of the source and let me know exactly what version you used. </para> diff --git a/docs/docbook/projdoc/CUPS-printing.sgml b/docs/docbook/projdoc/CUPS-printing.sgml index fd954cc1c5..eb59695b04 100644 --- a/docs/docbook/projdoc/CUPS-printing.sgml +++ b/docs/docbook/projdoc/CUPS-printing.sgml @@ -50,10 +50,10 @@ new features, which make it different from other, more traditional printing syst </sect1> <sect1> -<title>Configuring &smb.conf; for CUPS</title> +<title>Configuring <filename>smb.conf</filename> for CUPS</title> <para> -Printing with CUPS in the most basic &smb.conf; +Printing with CUPS in the most basic <filename>smb.conf</filename> setup in Samba-3 only needs two settings: <command>printing = cups</command> and <command>printcap = cups</command>. While CUPS itself doesn't need a printcap anymore, the <filename>cupsd.conf</filename> configuration file knows two directives @@ -87,7 +87,7 @@ present on other OS platforms, or its function may be embodied by a different co The line "libcups.so.2 => /usr/lib/libcups.so.2 (0x40123000)" shows there is CUPS support compiled into this version of Samba. If this is the case, and <command>printing = cups</command> is set, then any -otherwise manually set print command in &smb.conf; is ignored. +otherwise manually set print command in smb.conf is ignored. </para> </sect1> @@ -122,7 +122,7 @@ operation. <para> Firstly, to enable CUPS based printing from Samba the following options must be -enabled in your &smb.conf; file [globals] section: +enabled in your smb.conf file [globals] section: <itemizedlist> <listitem><para>printing = CUPS</para></listitem> @@ -130,7 +130,7 @@ enabled in your &smb.conf; file [globals] section: <listitem><para>printcap = CUPS</para></listitem> </itemizedlist> -When these parameters are specified the print directives in &smb.conf; (as well as in +When these parameters are specified the print directives in smb.conf (as well as in samba itself) will be ignored because samba will directly interface with CUPS through it's application program interface (API) - so long as Samba has been compiled with CUPS library (libcups) support. If samba has NOT been compiled with CUPS support then @@ -402,7 +402,7 @@ promising... <para> The <command>cupsadsmb</command> utility (shipped with all current CUPS versions) makes the sharing of any (or all) installed CUPS printers very -easy. Prior to using it, you need the following settings in &smb.conf;: +easy. Prior to using it, you need the following settings in smb.conf: </para> <para><programlisting>[global] @@ -1661,8 +1661,8 @@ on the avarage and peak printing load the server should be able to handle. <para> Samba print files pass thru two "spool" directories. One the incoming directory -managed by Samba, (set eg: in the <command>path = /var/spool/samba</command> directive in the [printers] -section of &smb.conf;). Second is the spool directory of your UNIX print subsystem. +managed by Samba, (set eg: in the "path = /var/spool/samba" directive in the [printers] +section of "smb.conf"). Second is the spool directory of your UNIX print subsystem. For CUPS it is normally "/var/spool/cups/", as set by the cupsd.conf directive "RequestRoot /var/spool/cups". </para> @@ -1724,15 +1724,15 @@ For everything to work as announced, you need to have three things: <simplelist> <member> - a Samba-&smbd; which is compiled against "libcups" (Check on Linux by running <userinput>ldd `which smbd`</userinput>) + a Samba-smbd which is compiled against "libcups" (Check on Linux by running "ldd `which smbd`") </member> <member> - a Samba-&smb.conf; setting of <command>printing = cups</command> + a Samba-smb.conf setting of "printing = cups" </member> <member> - another Samba-&smb.conf; setting of <command>printcap = cups</command> + another Samba-smb.conf setting of "printcap = cups" </member> </simplelist> diff --git a/docs/docbook/projdoc/Compiling.sgml b/docs/docbook/projdoc/Compiling.sgml index 868ed52b74..a5ff783244 100644 --- a/docs/docbook/projdoc/Compiling.sgml +++ b/docs/docbook/projdoc/Compiling.sgml @@ -107,7 +107,7 @@ on this system just substitute the correct package name </para> <para> - <userinput>cvs -d :pserver:cvs@samba.org:/cvsroot login</userinput> + <command>cvs -d :pserver:cvs@samba.org:/cvsroot login</command> </para> <para> @@ -122,7 +122,7 @@ on this system just substitute the correct package name </para> <para> - <userinput>cvs -d :pserver:cvs@samba.org:/cvsroot co samba</userinput> + <command>cvs -d :pserver:cvs@samba.org:/cvsroot co samba</command> </para> <para> @@ -135,11 +135,11 @@ on this system just substitute the correct package name CVS branches other HEAD can be obtained by using the <parameter>-r</parameter> and defining a tag name. A list of branch tag names can be found on the "Development" page of the samba web site. A common request is to obtain the - latest 2.2 release code. This could be done by using the following userinput. + latest 2.2 release code. This could be done by using the following command. </para> <para> - <userinput>cvs -d :pserver:cvs@samba.org:/cvsroot co -r SAMBA_2_2 samba</userinput> + <command>cvs -d :pserver:cvs@samba.org:/cvsroot co -r SAMBA_2_2 samba</command> </para> </listitem> @@ -150,7 +150,7 @@ on this system just substitute the correct package name </para> <para> - <userinput>cvs update -d -P</userinput> + <command>cvs update -d -P</command> </para> </listitem> </orderedlist> @@ -180,8 +180,8 @@ on this system just substitute the correct package name <sect1> <title>Building the Binaries</title> - <para>To do this, first run the program <userinput>./configure - </userinput> in the source directory. This should automatically + <para>To do this, first run the program <command>./configure + </command> in the source directory. This should automatically configure Samba for your operating system. If you have unusual needs then you may wish to run</para> @@ -282,18 +282,18 @@ on this system just substitute the correct package name <title>Starting the smbd and nmbd</title> <para>You must choose to start smbd and nmbd either - as daemons or from <application>inetd</application>Don't try + as daemons or from <command>inetd</command>. Don't try to do both! Either you can put them in <filename> inetd.conf</filename> and have them started on demand - by <application>inetd</application>, or you can start them as + by <command>inetd</command>, or you can start them as daemons either from the command line or in <filename> /etc/rc.local</filename>. See the man pages for details on the command line options. Take particular care to read the bit about what user you need to be in order to start Samba. In many cases you must be root.</para> - <para>The main advantage of starting <application>smbd</application> - and <application>nmbd</application> using the recommended daemon method + <para>The main advantage of starting <command>smbd</command> + and <command>nmbd</command> using the recommended daemon method is that they will respond slightly more quickly to an initial connection request.</para> @@ -325,28 +325,28 @@ on this system just substitute the correct package name varies between unixes. Look at the other entries in inetd.conf for a guide.</para> - <note><para>Some unixes already have entries like netbios_ns + <para>NOTE: Some unixes already have entries like netbios_ns (note the underscore) in <filename>/etc/services</filename>. You must either edit <filename>/etc/services</filename> or - <filename>/etc/inetd.conf</filename> to make them consistent.</para></note> + <filename>/etc/inetd.conf</filename> to make them consistent.</para> - <note><para>On many systems you may need to use the - <command>interfaces</command> option in &smb.conf; to specify the IP address - and netmask of your interfaces. Run <application>ifconfig</application> + <para>NOTE: On many systems you may need to use the + "interfaces" option in smb.conf to specify the IP address + and netmask of your interfaces. Run <command>ifconfig</command> as root if you don't know what the broadcast is for your - net. &nmbd; tries to determine it at run - time, but fails on some unixes. - </para></note> + net. <command>nmbd</command> tries to determine it at run + time, but fails on some unixes. See the section on "testing nmbd" + for a method of finding if you need to do this.</para> - <warning><para>Many unixes only accept around 5 + <para>!!!WARNING!!! Many unixes only accept around 5 parameters on the command line in <filename>inetd.conf</filename>. This means you shouldn't use spaces between the options and arguments, or you should use a script, and start the script - from <command>inetd</command>.</para></warning> + from <command>inetd</command>.</para> <para>Restart <command>inetd</command>, perhaps just send - it a HUP. If you have installed an earlier version of <application> - nmbd</application> then you may need to kill nmbd as well.</para> + it a HUP. If you have installed an earlier version of <command> + nmbd</command> then you may need to kill nmbd as well.</para> </sect2> <sect2> @@ -372,9 +372,9 @@ on this system just substitute the correct package name <para>To kill it send a kill signal to the processes <command>nmbd</command> and <command>smbd</command>.</para> - <note><para>If you use the SVR4 style init system then + <para>NOTE: If you use the SVR4 style init system then you may like to look at the <filename>examples/svr4-startup</filename> - script to make Samba fit into that system.</para></note> + script to make Samba fit into that system.</para> </sect2> </sect1> </chapter> diff --git a/docs/docbook/projdoc/DOMAIN_MEMBER.sgml b/docs/docbook/projdoc/DOMAIN_MEMBER.sgml index dc5b7d6e8c..1a97e6f5a8 100644 --- a/docs/docbook/projdoc/DOMAIN_MEMBER.sgml +++ b/docs/docbook/projdoc/DOMAIN_MEMBER.sgml @@ -20,12 +20,12 @@ with NetBIOS names <constant>DOMBDC1</constant> and <constant>DOMBDC2 </constant>.</para> - <para>Firstly, you must edit your &smb.conf; file to tell Samba it should - now use domain security.</para> + <para>Firstly, you must edit your <ulink url="smb.conf.5.html"><filename>smb.conf(5)</filename> + </ulink> file to tell Samba it should now use domain security.</para> <para>Change (or add) your <ulink url="smb.conf.5.html#SECURITY"> <parameter>security =</parameter></ulink> line in the [global] section - of your &smb.conf; to read:</para> + of your smb.conf to read:</para> <para><command>security = domain</command></para> diff --git a/docs/docbook/projdoc/Diagnosis.sgml b/docs/docbook/projdoc/Diagnosis.sgml index d175eb15ba..2a771c23d1 100644 --- a/docs/docbook/projdoc/Diagnosis.sgml +++ b/docs/docbook/projdoc/Diagnosis.sgml @@ -45,9 +45,8 @@ The procedure is similar for other types of clients. <para> It is also assumed you know the name of an available share in your -&smb.conf;. I will assume this share is called <replaceable>tmp</replaceable>. -You can add a <replaceable>tmp</replaceable> share like by adding the -following to &smb.conf;: +smb.conf. I will assume this share is called "tmp". You can add a +"tmp" share like by adding the following to smb.conf: </para> <para><programlisting> @@ -60,21 +59,22 @@ following to &smb.conf;: </programlisting> </para> -<note><para> -These tests assume version 3.0 or later of the samba suite. Some commands shown did not exist in earlier versions. -</para></note> +<para> +THESE TESTS ASSUME VERSION 3.0.0 OR LATER OF THE SAMBA SUITE. SOME +COMMANDS SHOWN DID NOT EXIST IN EARLIER VERSIONS +</para> <para> Please pay attention to the error messages you receive. If any error message reports that your server is being unfriendly you should first check that you -IP name resolution is correctly set up. eg: Make sure your <filename>/etc/resolv.conf</filename> +IP name resolution is correctly set up. eg: Make sure your /etc/resolv.conf file points to name servers that really do exist. </para> <para> Also, if you do not have DNS server access for name resolution please check -that the settings for your &smb.conf; file results in <command>dns proxy = no</command>. The -best way to check this is with <userinput>testparm smb.conf</userinput>. +that the settings for your smb.conf file results in "dns proxy = no". The +best way to check this is with "testparm smb.conf" </para> </sect1> @@ -86,21 +86,20 @@ best way to check this is with <userinput>testparm smb.conf</userinput>. <step performance="required"> <para> -In the directory in which you store your &smb.conf; file, run the command -<userinput>testparm smb.conf</userinput>. If it reports any errors then your &smb.conf; +In the directory in which you store your smb.conf file, run the command +"testparm smb.conf". If it reports any errors then your smb.conf configuration file is faulty. </para> -<note><para> -Your &smb.conf; file may be located in: <filename>/etc/samba</filename> -Or in: <filename>/usr/local/samba/lib</filename> -</para></note> +<para> +Note: Your smb.conf file may be located in: <filename>/etc/samba</filename> + Or in: <filename>/usr/local/samba/lib</filename> +</para> </step> <step performance="required"> <para> -Run the command <userinput>ping BIGSERVER</userinput> from the PC and -<userinput>ping ACLIENT</userinput> from +Run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from the unix box. If you don't get a valid response then your TCP/IP software is not correctly installed. </para> @@ -112,8 +111,7 @@ run ping. <para> If you get a message saying "host not found" or similar then your DNS -software or <filename>/etc/hosts</filename> file is not correctly setup. -It is possible to +software or /etc/hosts file is not correctly setup. It is possible to run samba without DNS entries for the server and client, but I assume you do have correct entries for the remainder of these tests. </para> @@ -122,23 +120,23 @@ you do have correct entries for the remainder of these tests. Another reason why ping might fail is if your host is running firewall software. You will need to relax the rules to let in the workstation in question, perhaps by allowing access from another subnet (on Linux -this is done via the <application>ipfwadm</application> program.) +this is done via the ipfwadm program.) </para> </step> <step performance="required"> <para> -Run the command <userinput>smbclient -L BIGSERVER</userinput> on the unix box. You +Run the command "smbclient -L BIGSERVER" on the unix box. You should get a list of available shares back. </para> <para> If you get a error message containing the string "Bad password" then -you probably have either an incorrect <command>hosts allow</command>, -<command>hosts deny</command> or <command>valid users</command> line in your -&smb.conf;, or your guest account is not -valid. Check what your guest account is using &testparm; and -temporarily remove any <command>hosts allow</command>, <command>hosts deny</command>, <command>valid users</command> or <command>invalid users</command> lines. +you probably have either an incorrect "hosts allow", "hosts deny" or +"valid users" line in your smb.conf, or your guest account is not +valid. Check what your guest account is using "testparm" and +temporarily remove any "hosts allow", "hosts deny", "valid users" or +"invalid users" lines. </para> <para> @@ -146,15 +144,15 @@ If you get a "connection refused" response then the smbd server may not be running. If you installed it in inetd.conf then you probably edited that file incorrectly. If you installed it as a daemon then check that it is running, and check that the netbios-ssn port is in a LISTEN -state using <userinput>netstat -a</userinput>. +state using "netstat -a". </para> <para> If you get a "session request failed" then the server refused the connection. If it says "Your server software is being unfriendly" then -its probably because you have invalid command line parameters to &smbd;, -or a similar fatal problem with the initial startup of &smbd;. Also -check your config file (&smb.conf;) for syntax errors with &testparm; +its probably because you have invalid command line parameters to smbd, +or a similar fatal problem with the initial startup of smbd. Also +check your config file (smb.conf) for syntax errors with "testparm" and that the various directories where samba keeps its log and lock files exist. </para> @@ -162,7 +160,7 @@ files exist. <para> There are a number of reasons for which smbd may refuse or decline a session request. The most common of these involve one or more of -the following &smb.conf; file entries: +the following smb.conf file entries: </para> <para><programlisting> @@ -183,27 +181,26 @@ To solve this problem change these lines to: </programlisting></para> <para> -Do NOT use the <command>bind interfaces only</command> parameter where you -may wish to -use the samba password change facility, or where &smbclient; may need to +Do NOT use the "bind interfaces only" parameter where you may wish to +use the samba password change facility, or where smbclient may need to access local service for name resolution or for local resource -connections. (Note: the <command>bind interfaces only</command> parameter deficiency +connections. (Note: the "bind interfaces only" parameter deficiency where it will not allow connections to the loopback address will be fixed soon). </para> <para> Another common cause of these two errors is having something already running -on port 139, such as Samba (ie: smbd is running from <application>inetd</application> already) or -something like Digital's Pathworks. Check your <filename>inetd.conf</filename> file before trying -to start &smbd; as a daemon, it can avoid a lot of frustration! +on port 139, such as Samba (ie: smbd is running from inetd already) or +something like Digital's Pathworks. Check your inetd.conf file before trying +to start smbd as a daemon, it can avoid a lot of frustration! </para> <para> -And yet another possible cause for failure of this test is when the subnet mask +And yet another possible cause for failure of TEST 3 is when the subnet mask and / or broadcast address settings are incorrect. Please check that the network interface IP Address / Broadcast Address / Subnet Mask settings are -correct and that Samba has correctly noted these in the <filename>log.nmb</filename> file. +correct and that Samba has correctly noted these in the log.nmb file. </para> </step> @@ -211,12 +208,12 @@ correct and that Samba has correctly noted these in the <filename>log.nmb</filen <step performance="required"> <para> -Run the command <userinput>nmblookup -B BIGSERVER __SAMBA__</userinput>. You should get the +Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the IP address of your Samba server back. </para> <para> -If you don't then nmbd is incorrectly installed. Check your <filename>inetd.conf</filename> +If you don't then nmbd is incorrectly installed. Check your inetd.conf if you run it from there, or that the daemon is running and listening to udp port 137. </para> @@ -232,7 +229,7 @@ inetd. <step performance="required"> -<para>run the command <userinput>nmblookup -B ACLIENT '*'</userinput></para> +<para>run the command <command>nmblookup -B ACLIENT '*'</command></para> <para> You should get the PCs IP address back. If you don't then the client @@ -250,7 +247,7 @@ client in the above test. <step performance="required"> <para> -Run the command <userinput>nmblookup -d 2 '*'</userinput> +Run the command <command>nmblookup -d 2 '*'</command> </para> <para> @@ -266,13 +263,13 @@ hosts. If this doesn't give a similar result to the previous test then nmblookup isn't correctly getting your broadcast address through its automatic mechanism. In this case you should experiment use the -<command>interfaces</command> option in &smb.conf; to manually configure your IP +"interfaces" option in smb.conf to manually configure your IP address, broadcast and netmask. </para> <para> If your PC and server aren't on the same subnet then you will need to -use the <parameter>-B</parameter> option to set the broadcast address to the that of the PCs +use the -B option to set the broadcast address to the that of the PCs subnet. </para> @@ -286,24 +283,24 @@ not correct. (Refer to TEST 3 notes above). <step performance="required"> <para> -Run the command <userinput>smbclient //BIGSERVER/TMP</userinput>. You should +Run the command <command>smbclient //BIGSERVER/TMP</command>. You should then be prompted for a password. You should use the password of the account you are logged into the unix box with. If you want to test with -another account then add the <parameter>-U <replaceable>accountname</replaceable></parameter> option to the end of +another account then add the -U >accountname< option to the end of the command line. eg: -<userinput>smbclient //bigserver/tmp -Ujohndoe</userinput> +<command>smbclient //bigserver/tmp -Ujohndoe</command> </para> -<note><para> -It is possible to specify the password along with the username +<para> +Note: It is possible to specify the password along with the username as follows: -<userinput>smbclient //bigserver/tmp -Ujohndoe%secret</userinput> -</para></note> +<command>smbclient //bigserver/tmp -Ujohndoe%secret</command> +</para> <para> -Once you enter the password you should get the <prompt>smb></prompt> prompt. If you +Once you enter the password you should get the "smb>" prompt. If you don't then look at the error message. If it says "invalid network -name" then the service "tmp" is not correctly setup in your &smb.conf;. +name" then the service "tmp" is not correctly setup in your smb.conf. </para> <para> @@ -314,26 +311,26 @@ If it says "bad password" then the likely causes are: <listitem> <para> you have shadow passords (or some other password system) but didn't - compile in support for them in &smbd; + compile in support for them in smbd </para> </listitem> <listitem> <para> - your <command>valid users</command> configuration is incorrect + your "valid users" configuration is incorrect </para> </listitem> <listitem> <para> - you have a mixed case password and you haven't enabled the <command>password - level</command> option at a high enough level + you have a mixed case password and you haven't enabled the "password + level" option at a high enough level </para> </listitem> <listitem> <para> - the <command>path =</command> line in &smb.conf; is incorrect. Check it with &testparm; + the "path =" line in smb.conf is incorrect. Check it with testparm </para> </listitem> @@ -348,7 +345,7 @@ If it says "bad password" then the likely causes are: <para> Once connected you should be able to use the commands <command>dir</command> <command>get</command> <command>put</command> etc. -Type <command>help <replaceable>command</replaceable></command> for instructions. You should +Type <command>help >command<</command> for instructions. You should especially check that the amount of free disk space shown is correct when you type <command>dir</command>. </para> @@ -358,7 +355,7 @@ when you type <command>dir</command>. <step performance="required"> <para> -On the PC type the command <userinput>net view \\BIGSERVER</userinput>. You will +On the PC type the command <command>net view \\BIGSERVER</command>. You will need to do this from within a "dos prompt" window. You should get back a list of available shares on the server. </para> @@ -372,11 +369,11 @@ to choose one of them): <orderedlist> <listitem><para> - fixup the &nmbd; installation + fixup the nmbd installation </para></listitem> <listitem><para> - add the IP address of BIGSERVER to the <command>wins server</command> box in the + add the IP address of BIGSERVER to the "wins server" box in the advanced tcp/ip setup on the PC. </para></listitem> @@ -392,8 +389,8 @@ to choose one of them): <para> If you get a "invalid network name" or "bad password error" then the -same fixes apply as they did for the <userinput>smbclient -L</userinput> test above. In -particular, make sure your <command>hosts allow</command> line is correct (see the man +same fixes apply as they did for the "smbclient -L" test above. In +particular, make sure your "hosts allow" line is correct (see the man pages) </para> @@ -409,7 +406,7 @@ name and password. If you get "specified computer is not receiving requests" or similar it probably means that the host is not contactable via tcp services. Check to see if the host is running tcp wrappers, and if so add an entry in -the <filename>hosts.allow</filename> file for your client (or subnet, etc.) +the hosts.allow file for your client (or subnet, etc.) </para> </step> @@ -417,25 +414,24 @@ the <filename>hosts.allow</filename> file for your client (or subnet, etc.) <step performance="required"> <para> -Run the command <userinput>net use x: \\BIGSERVER\TMP</userinput>. You should +Run the command <command>net use x: \\BIGSERVER\TMP</command>. You should be prompted for a password then you should get a "command completed successfully" message. If not then your PC software is incorrectly -installed or your smb.conf is incorrect. make sure your <command>hosts allow</command> -and other config lines in &smb.conf; are correct. +installed or your smb.conf is incorrect. make sure your "hosts allow" +and other config lines in smb.conf are correct. </para> <para> It's also possible that the server can't work out what user name to -connect you as. To see if this is the problem add the line <command>user = -<replaceable>username</replaceable></command> to the <command>[tmp]</command> section of -&smb.conf; where <replaceable>username</replaceable> is the +connect you as. To see if this is the problem add the line "user = +USERNAME" to the [tmp] section of smb.conf where "USERNAME" is the username corresponding to the password you typed. If you find this fixes things you may need the username mapping option. </para> <para> It might also be the case that your client only sends encrypted passwords -and you have <command>encrypt passwords = no</command> in &smb.conf; +and you have <command>encrypt passwords = no</command> in <filename>smb.conf</filename>. Turn it back on to fix. </para> @@ -444,8 +440,8 @@ Turn it back on to fix. <step performance="required"> <para> -Run the command <userinput>nmblookup -M <replaceable>testgroup</replaceable></userinput> where -<replaceable>testgroup</replaceable> is the name of the workgroup that your Samba server and +Run the command <command>nmblookup -M TESTGROUP</command> where +TESTGROUP is the name of the workgroup that your Samba server and Windows PCs belong to. You should get back the IP address of the master browser for that workgroup. </para> @@ -453,7 +449,7 @@ master browser for that workgroup. <para> If you don't then the election process has failed. Wait a minute to see if it is just being slow then try again. If it still fails after -that then look at the browsing options you have set in &smb.conf;. Make +that then look at the browsing options you have set in smb.conf. Make sure you have <command>preferred master = yes</command> to ensure that an election is held at startup. </para> @@ -472,8 +468,8 @@ is refusing to browse a server that has no encrypted password capability and is in user level security mode. In this case either set <command>security = server</command> AND <command>password server = Windows_NT_Machine</command> in your -&smb.conf; file, or make sure <command>encrypted passwords</command> is -set to "yes". +smb.conf file, or enable encrypted passwords AFTER compiling in support +for encrypted passwords (refer to the Makefile). </para> </step> @@ -492,6 +488,10 @@ out the samba web page at <ulink url="http://samba.org/samba">http://samba.org/samba/</ulink> </para> +<para> +Also look at the other docs in the Samba package! +</para> + </sect1> </chapter> diff --git a/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml b/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml index e037da4aeb..8aea87fe24 100644 --- a/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml +++ b/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml @@ -11,12 +11,12 @@ <para> Starting with Samba 3.0 alpha 2, a new group mapping function is available. The current method (likely to change) to manage the groups is a new command called -&smbgroupedit;. +<command>smbgroupedit</command>. </para> <para> The first immediate reason to use the group mapping on a PDC, is that -the <command>domain admin group</command> of &smb.conf; is +the <command>domain admin group</command> of <filename>smb.conf</filename> is now gone. This parameter was used to give the listed users local admin rights on their workstations. It was some magic stuff that simply worked but didn't scale very well for complex setups. @@ -71,7 +71,7 @@ give access to a certain directory to some users who are member of a group on your samba PDC. Flag that group as a domain group by running: </para> -<para><userinput>smbgroupedit -a unixgroup -td</userinput></para> +<para><command>smbgroupedit -a unixgroup -td</command></para> <para>You can list the various groups in the mapping database like this</para> <para><userinput>smbgroupedit -v</userinput></para> diff --git a/docs/docbook/projdoc/Integrating-with-Windows.sgml b/docs/docbook/projdoc/Integrating-with-Windows.sgml index f6ac0be5a4..b48fc3b305 100644 --- a/docs/docbook/projdoc/Integrating-with-Windows.sgml +++ b/docs/docbook/projdoc/Integrating-with-Windows.sgml @@ -517,7 +517,7 @@ if the TCP/IP setup has been given at least one WINS Server IP Address. <para> To configure Samba to be a WINS server the following parameter needs -to be added to the &smb.conf; file: +to be added to the <filename>smb.conf</filename> file: </para> <para><programlisting> @@ -526,7 +526,7 @@ to be added to the &smb.conf; file: <para> To configure Samba to use a WINS server the following parameters are -needed in the &smb.conf; file: +needed in the smb.conf file: </para> <para><programlisting> diff --git a/docs/docbook/projdoc/NT_Security.sgml b/docs/docbook/projdoc/NT_Security.sgml index 9bff25337c..65072ef4ff 100644 --- a/docs/docbook/projdoc/NT_Security.sgml +++ b/docs/docbook/projdoc/NT_Security.sgml @@ -297,7 +297,8 @@ <para>If you want to set up a share that allows users full control in modifying the permission bits on their files and directories and doesn't force any particular bits to be set 'on', then set the following - parameters in the &smb.conf; file in that share specific section :</para> + parameters in the <ulink url="smb.conf.5.html"><filename>smb.conf(5) + </filename></ulink> file in that share specific section :</para> <para><parameter>security mask = 0777</parameter></para> <para><parameter>force security mode = 0</parameter></para> diff --git a/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml b/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml index ac9385f3de..e13a81eac5 100644 --- a/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml +++ b/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml @@ -37,7 +37,7 @@ or by editing individual files that are located in <filename>/etc/pam.d</filenam is located other than default then the path may be specified as: <programlisting> - auth required /other_path/pam_strange_module.so + eg: "auth required /other_path/pam_strange_module.so" </programlisting> </para> </note> diff --git a/docs/docbook/projdoc/Portability.sgml b/docs/docbook/projdoc/Portability.sgml index 39ed37585f..61a694e130 100644 --- a/docs/docbook/projdoc/Portability.sgml +++ b/docs/docbook/projdoc/Portability.sgml @@ -180,42 +180,9 @@ Corrective Action: Delete the entry after the word loopback <title>Sequential Read Ahead</title> <!-- From an email by William Jojo <jojowil@hvcc.edu> --> <para> -Disabling Sequential Read Ahead using <userinput>vmtune -r 0</userinput> improves +Disabling Sequential Read Ahead using "vmtune -r 0" improves samba performance significally. </para> </sect2> </sect1> - -<sect1> -<title>Solaris</title> - -<para>Some people have been experiencing problems with F_SETLKW64/fcntl -when running samba on solaris. The built in file locking mechanism was -not scalable. Performance would degrade to the point where processes would -get into loops of trying to lock a file. It woul try a lock, then fail, -then try again. The lock attempt was failing before the grant was -occurring. So the visible manifestation of this would be a handful of -processes stealing all of the CPU, and when they were trussed they would -be stuck if F_SETLKW64 loops. -</para> - -<para> -Sun released patches for Solaris 2.6, 8, and 9. The patch for Solaris 7 -has not been released yet. -</para> - -<para> -The patch revision for 2.6 is 105181-34 -for 8 is 108528-19 -and for 9 is 112233-04 -</para> - -<para> -After the install of these patches it is recommended to reconfigure -and rebuild samba. -</para> - -<para>Thanks to Joe Meslovich for reporting</para> -</sect1> - </chapter> diff --git a/docs/docbook/projdoc/ProfileMgmt.sgml b/docs/docbook/projdoc/ProfileMgmt.sgml index 13ec698384..94bc60b464 100644 --- a/docs/docbook/projdoc/ProfileMgmt.sgml +++ b/docs/docbook/projdoc/ProfileMgmt.sgml @@ -11,7 +11,8 @@ <warning> <para> -Roaming profiles support is different for Win9x / Me and Windows NT4/200x. +<emphasis>NOTE!</emphasis> Roaming profiles support is different for Win9x / Me +and Windows NT4/200x. </para> </warning> @@ -51,14 +52,15 @@ following (for example): <para> <programlisting> logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath -</programlisting> This is typically implemented like: -<programlisting> logon path = \\%L\Profiles\%u + + where: + %L translates to the name of the Samba server + %u translates to the user name </programlisting> -where %L translates to the name of the Samba server and %u translates to the user name </para> <para> @@ -72,7 +74,7 @@ symantics of %L and %N, as well as %U and %u. <note> <para> MS Windows NT/2K clients at times do not disconnect a connection to a server -between logons. It is recommended to NOT use the <command>homes</command> +between logons. It is recommended to NOT use the <emphasis>homes</emphasis> meta-service name as part of the profile share path. </para> </note> @@ -83,14 +85,14 @@ meta-service name as part of the profile share path. <para> To support Windows 9x / Me clients, you must use the "logon home" parameter. Samba has -now been fixed so that <userinput>net use /home</userinput> now works as well, and it, too, relies -on the <command>logon home</command< parameter. +now been fixed so that "net use /home" now works as well, and it, too, relies +on the "logon home" parameter. </para> <para> By using the logon home parameter, you are restricted to putting Win9x / Me profiles in the user's home directory. But wait! There is a trick you -can use. If you set the following in the <command>[global]</command> section of your &smb.conf; file: +can use. If you set the following in the [global] section of your smb.conf file: </para> <para><programlisting> logon home = \\%L\%U\.profiles @@ -98,14 +100,14 @@ can use. If you set the following in the <command>[global]</command> section of <para> then your Windows 9x / Me clients will dutifully put their clients in a subdirectory -of your home directory called <filename>.profiles</filename> (thus making them hidden). +of your home directory called .profiles (thus making them hidden). </para> <para> -Not only that, but <userinput>net use/home</userinput> will also work, because of a feature in +Not only that, but 'net use/home' will also work, because of a feature in Windows 9x / Me. It removes any directory stuff off the end of the home directory area and only uses the server and share portion. That is, it looks like you -specified \\%L\%U for <command>logon home</command>. +specified \\%L\%U for "logon home". </para> </sect3> @@ -114,7 +116,7 @@ specified \\%L\%U for <command>logon home</command>. <para> You can support profiles for both Win9X and WinNT clients by setting both the -<command>logon home</command> and <command>logon path</command> parameters. For example: +"logon home" and "logon path" parameters. For example: </para> <para><programlisting> diff --git a/docs/docbook/projdoc/Samba-PDC-HOWTO.sgml b/docs/docbook/projdoc/Samba-PDC-HOWTO.sgml index a0927ec888..451ab02762 100644 --- a/docs/docbook/projdoc/Samba-PDC-HOWTO.sgml +++ b/docs/docbook/projdoc/Samba-PDC-HOWTO.sgml @@ -315,7 +315,7 @@ for this including: file allows the creation of arbitrary user and machine accounts without requiring that account to be added to the system (/etc/passwd) file. It too requires the specification of the "non unix account range" option - in the [globals] section of the &smb.conf; file. + in the [globals] section of the smb.conf file. </para></listitem> <listitem><para> @@ -329,9 +329,6 @@ for this including: </para></listitem> </itemizedlist> -<para>Read the chapter about the <link linkend="passdb">User Database</link> -for details.</para> - <para> A Samba PDC, however, stores each machine trust account in two parts, as follows: @@ -421,7 +418,7 @@ as shown here: </para> <para> -<prompt>root# </prompt><userinput>smbpasswd -a -m <replaceable>machine_name</replaceable></userinput> +<prompt>root# </prompt><command>smbpasswd -a -m <replaceable>machine_name</replaceable></command> </para> <para> diff --git a/docs/docbook/projdoc/UNIX_INSTALL.sgml b/docs/docbook/projdoc/UNIX_INSTALL.sgml index 6deb0c915e..df038510af 100644 --- a/docs/docbook/projdoc/UNIX_INSTALL.sgml +++ b/docs/docbook/projdoc/UNIX_INSTALL.sgml @@ -14,11 +14,11 @@ <para>Binary packages of samba are included in almost any Linux or Unix distribution. There are also some packages available at - <ulink url="http://samba.org/">the samba homepage</ulink>. + <ulink url="http://samba.org/">the samba homepage</ulink> </para> <para>If you need to compile samba from source, check the - <link linkend="compiling">appropriate appendix chapter</link>.</para> + appropriate appendix chapter.</para> </sect1> <sect1> @@ -32,7 +32,7 @@ is included with samba.</para> <sect2> - <title>Editing the <filename>smb.conf</filename> file</title> + <title>Editing the smb.conf file</title> <para>There are sample configuration files in the examples subdirectory in the distribution. I suggest you read them @@ -43,33 +43,36 @@ something like this:</para> <para><programlisting> -[global] - workgroup = MYGROUP + [global] + workgroup = MYGROUP -[homes] - guest ok = no - read only = no + [homes] + guest ok = no + read only = no </programlisting></para> <para>which would allow connections by anyone with an account on the server, using either their login name or - "<command>homes</command>" as the service name. (Note that I also set the + "homes" as the service name. (Note that I also set the workgroup that Samba is part of. See BROWSING.txt for details)</para> - <para>Make sure you put the <filename>smb.conf</filename> file in the same place + <para>Note that <command>make install</command> will not install + a <filename>smb.conf</filename> file. You need to create it + yourself. </para> + + <para>Make sure you put the smb.conf file in the same place you specified in the<filename>Makefile</filename> (the default is to look for it in <filename>/usr/local/samba/lib/</filename>).</para> <para>For more information about security settings for the - <command>[homes]</command> share please refer to the chapter - <link linkend="securing-samba">Securing Samba</link>.</para> + [homes] share please refer to the document UNIX_SECURITY.txt.</para> <sect3> <title>Test your config file with <command>testparm</command></title> <para>It's important that you test the validity of your - <filename>smb.conf</filename> file using the <application>testparm</application> program. + <filename>smb.conf</filename> file using the testparm program. If testparm runs OK then it will list the loaded services. If not it will give an error message.</para> @@ -130,17 +133,16 @@ //yourhostname/aservice</replaceable></userinput></para> <para>Typically the <replaceable>yourhostname</replaceable> - would be the name of the host where you installed &smbd;. - The <replaceable>aservice</replaceable> is - any service you have defined in the &smb.conf; - file. Try your user name if you just have a <command>[homes]</command> - section - in &smb.conf;.</para> + would be the name of the host where you installed <command> + smbd</command>. The <replaceable>aservice</replaceable> is + any service you have defined in the <filename>smb.conf</filename> + file. Try your user name if you just have a [homes] section + in <filename>smb.conf</filename>.</para> - <para>For example if your unix host is <replaceable>bambi</replaceable> - and your login name is <replaceable>fred</replaceable> you would type:</para> + <para>For example if your unix host is bambi and your login + name is fred you would type:</para> - <para><prompt>$ </prompt><userinput>smbclient //<replaceable>bambi</replaceable>/<replaceable>fred</replaceable> + <para><prompt>$ </prompt><userinput>smbclient //bambi/fred </userinput></para> </sect1> @@ -155,18 +157,21 @@ <para>Try printing. eg:</para> + + <para><prompt>C:\WINDOWS\> </prompt><userinput>net use lpt1: \\servername\spoolservice</userinput></para> <para><prompt>C:\WINDOWS\> </prompt><userinput>print filename </userinput></para> + + <para>Celebrate, or send me a bug report!</para> </sect1> <sect1> <title>What If Things Don't Work?</title> - <para>Then you might read the file chapter - <link linkend="diagnosis">Diagnosis</link> and the + <para>Then you might read the file HOWTO chapter Diagnosis and the FAQ. If you are still stuck then try the mailing list or newsgroup (look in the README for details). Samba has been successfully installed at thousands of sites worldwide, so maybe diff --git a/docs/docbook/projdoc/passdb.sgml b/docs/docbook/projdoc/passdb.sgml index d7b54a38e8..362cf97064 100644 --- a/docs/docbook/projdoc/passdb.sgml +++ b/docs/docbook/projdoc/passdb.sgml @@ -114,22 +114,23 @@ <member>Windows 200x Server/Advanced Server</member> <member>Windows XP Professional</member> </simplelist> - </warning> - <note><para>All current release of - Microsoft SMB/CIFS clients support authentication via the - SMB Challenge/Response mechanism described here. Enabling - clear text authentication does not disable the ability - of the client to participate in encrypted authentication.</para></note> - - <para>MS Windows clients will cache the encrypted password alone. - Even when plain text passwords are re-enabled, through the appropriate - registry change, the plain text password is NEVER cached. This means that - in the event that a network connections should become disconnected (broken) - only the cached (encrypted) password will be sent to the resource server - to affect a auto-reconnect. If the resource server does not support encrypted - passwords the auto-reconnect will fail. <emphasis>USE OF ENCRYPTED PASSWORDS - IS STRONGLY ADVISED.</emphasis></para> + <para><emphasis>Note :</emphasis>All current release of + Microsoft SMB/CIFS clients support authentication via the + SMB Challenge/Response mechanism described here. Enabling + clear text authentication does not disable the ability + of the client to participate in encrypted authentication.</para> + + + <para>MS Windows clients will cache the encrypted password alone. + Even when plain text passwords are re-enabled, through the appropriate + registry change, the plain text password is NEVER cached. This means that + in the event that a network connections should become disconnected (broken) + only the cached (encrypted) password will be sent to the resource server + to affect a auto-reconnect. If the resource server does not support encrypted + passwords the auto-reconnect will fail. <emphasis>USE OF ENCRYPTED PASSWORDS + IS STRONGLY ADVISED.</emphasis></para> + </warning> <sect2> <title>Advantages of SMB Encryption</title> diff --git a/docs/docbook/projdoc/samba-doc.sgml b/docs/docbook/projdoc/samba-doc.sgml index 6ed6e1a717..9c3861b8c3 100644 --- a/docs/docbook/projdoc/samba-doc.sgml +++ b/docs/docbook/projdoc/samba-doc.sgml @@ -32,7 +32,6 @@ <!ENTITY ProfileMgmt SYSTEM "ProfileMgmt.sgml"> <!ENTITY NT4Migration SYSTEM "NT4Migration.sgml"> <!ENTITY SWAT SYSTEM "SWAT.sgml"> -<!ENTITY Trusts SYSTEM "InterdomainTrusts.sgml"> ]> <book id="Samba-HOWTO-Collection"> @@ -47,13 +46,13 @@ <editor>&person.jelmer;</editor> <editor>&person.jerry;</editor> - <pubdate>Sunday 6 April</pubdate> + <pubdate>Friday 4 April</pubdate> <abstract> <para> This book is a collection of HOWTOs added to Samba documentation over the years. -Samba is always under development, and so is it's documentation. -The most recent version of this document +I try to ensure that all are current, but sometimes the is a larger job +than one person can maintain. The most recent version of this document can be found at <ulink url="http://www.samba.org/">http://www.samba.org/</ulink> on the "Documentation" page. Please send updates to <ulink url="mailto:jerry@samba.org">jerry@samba.org</ulink> or @@ -107,7 +106,8 @@ for various environments. <title>Advanced Configuration</title> <partintro> <title>Introduction</title> -<para>Samba has several features that you might want or might not want to use. The chapters in this part each cover one specific feature.</para> +<para>Samba has several features that you might want or might not want to use. The chapters in this +part each cover one specific feature.</para> </partintro> &NT-Security; &GROUP-MAPPING-HOWTO; @@ -117,7 +117,6 @@ for various environments. &AdvancedNetworkAdmin; &PolicyMgmt; &ProfileMgmt; -&Trusts; &Samba-PAM; &VFS; &MS-Dfs-Setup; diff --git a/docs/docbook/projdoc/securing-samba.sgml b/docs/docbook/projdoc/securing-samba.sgml index 88e216ac58..03d0c3d9e7 100644 --- a/docs/docbook/projdoc/securing-samba.sgml +++ b/docs/docbook/projdoc/securing-samba.sgml @@ -29,8 +29,8 @@ especially vulnerable. </para> <para> -One of the simplest fixes in this case is to use the <command>hosts allow</command> and -<command>hosts deny</command> options in the Samba &smb.conf; configuration file to only +One of the simplest fixes in this case is to use the 'hosts allow' and +'hosts deny' options in the Samba smb.conf configuration file to only allow access to your server from a specific range of hosts. An example might be: </para> @@ -167,7 +167,7 @@ methods listed above for some reason. <title>Upgrading Samba</title> <para> -Please check regularly on <ulink url="http://www.samba.org/">http://www.samba.org/</ulink> for updates and +Please check regularly on http://www.samba.org/ for updates and important announcements. Occasionally security releases are made and it is highly recommended to upgrade Samba when a security vulnerability is discovered. diff --git a/docs/docbook/projdoc/security_level.sgml b/docs/docbook/projdoc/security_level.sgml index 99f21aec5d..1c4c3f61ca 100644 --- a/docs/docbook/projdoc/security_level.sgml +++ b/docs/docbook/projdoc/security_level.sgml @@ -83,7 +83,7 @@ level security. They normally send a valid username but no password. Samba records this username in a list of "possible usernames". When the client then does a "tree connection" it also adds to this list the name of the share they try to connect to (useful for -home directories) and any users listed in the <command>user =</command> &smb.conf; +home directories) and any users listed in the "user =" smb.conf line. The password is then checked in turn against these "possible usernames". If a match is found then the client is authenticated as that user. @@ -221,7 +221,7 @@ for support of encrypted passwords: <title>Use MS Windows NT as an authentication server</title> <para> -This method involves the additions of the following parameters in the &smb.conf; file: +This method involves the additions of the following parameters in the smb.conf file: </para> <para><programlisting> @@ -270,7 +270,7 @@ all authentication requests to be passed through to the domain controllers. <title>Samba as a member of an MS Windows NT security domain</title> <para> -This method involves additon of the following paramters in the &smb.conf; file: +This method involves additon of the following paramters in the smb.conf file: </para> <para><programlisting> @@ -281,7 +281,7 @@ This method involves additon of the following paramters in the &smb.conf; file: </programlisting></para> <para> -The use of the "*" argument to <command>password server</command> will cause samba to locate the +The use of the "*" argument to "password server" will cause samba to locate the domain controller in a way analogous to the way this is done within MS Windows NT. This is the default behaviour. </para> diff --git a/docs/docbook/projdoc/unicode.sgml b/docs/docbook/projdoc/unicode.sgml index d44e8ea291..705a389e41 100644 --- a/docs/docbook/projdoc/unicode.sgml +++ b/docs/docbook/projdoc/unicode.sgml @@ -58,7 +58,7 @@ samba knows of three kinds of character sets: <term>unix charset</term> <listitem><para> This is the charset used internally by your operating system. - The default is <constant>ASCII</constant>, which is fine for most + The default is <emphasis>ASCII</emphasis>, which is fine for most systems. </para></listitem> </varlistentry> @@ -81,5 +81,7 @@ samba knows of three kinds of character sets: </varlistentry> </variablelist> +<para> + </sect1> </chapter> diff --git a/docs/docbook/projdoc/upgrading-to-3.0.sgml b/docs/docbook/projdoc/upgrading-to-3.0.sgml index 3dc4816664..ec4b29386a 100644 --- a/docs/docbook/projdoc/upgrading-to-3.0.sgml +++ b/docs/docbook/projdoc/upgrading-to-3.0.sgml @@ -12,7 +12,7 @@ <para>You might experience problems with special characters when communicating with old DOS clients. Codepage support has changed in samba 3.0. Read the chapter -<link linkend="unicode">Unicode support</link> for details. +Unicode support for details. </para> </sect1> |