diff options
Diffstat (limited to 'docs/htmldocs/winbind.html')
| -rw-r--r-- | docs/htmldocs/winbind.html | 147 |
1 files changed, 77 insertions, 70 deletions
diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html index cbec6e39a6..016d77cac1 100644 --- a/docs/htmldocs/winbind.html +++ b/docs/htmldocs/winbind.html @@ -9,12 +9,15 @@ CONTENT="Modular DocBook HTML Stylesheet Version 1.77"><LINK REL="HOME" TITLE="SAMBA Project Documentation" HREF="samba-howto-collection.html"><LINK +REL="UP" +TITLE="Optional configuration" +HREF="p1346.html"><LINK REL="PREVIOUS" -TITLE="security = domain in Samba 2.x" -HREF="domain-security.html"><LINK +TITLE="Security levels" +HREF="securitylevels.html"><LINK REL="NEXT" -TITLE="How to Configure Samba 2.2 as a Primary Domain Controller" -HREF="samba-pdc.html"></HEAD +TITLE="Passdb MySQL plugin" +HREF="pdb-mysql.html"></HEAD ><BODY CLASS="CHAPTER" BGCOLOR="#FFFFFF" @@ -42,7 +45,7 @@ WIDTH="10%" ALIGN="left" VALIGN="bottom" ><A -HREF="domain-security.html" +HREF="securitylevels.html" ACCESSKEY="P" >Prev</A ></TD @@ -56,7 +59,7 @@ WIDTH="10%" ALIGN="right" VALIGN="bottom" ><A -HREF="samba-pdc.html" +HREF="pdb-mysql.html" ACCESSKEY="N" >Next</A ></TD @@ -71,15 +74,15 @@ CLASS="CHAPTER" ><A NAME="WINBIND" ></A ->Chapter 10. Unified Logons between Windows NT and UNIX using Winbind</H1 +>Chapter 16. Unified Logons between Windows NT and UNIX using Winbind</H1 ><DIV CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1255" +NAME="AEN2249" ></A ->10.1. Abstract</H1 +>16.1. Abstract</H1 ><P >Integration of UNIX and Microsoft Windows NT through a unified logon has been considered a "holy grail" in heterogeneous @@ -104,9 +107,9 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1259" +NAME="AEN2253" ></A ->10.2. Introduction</H1 +>16.2. Introduction</H1 ><P >It is well known that UNIX and Microsoft Windows NT have different models for representing user and group information and @@ -158,9 +161,9 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1272" +NAME="AEN2266" ></A ->10.3. What Winbind Provides</H1 +>16.3. What Winbind Provides</H1 ><P >Winbind unifies UNIX and Windows NT account management by allowing a UNIX box to become a full member of a NT domain. Once @@ -200,9 +203,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1279" +NAME="AEN2273" ></A ->10.3.1. Target Uses</H2 +>16.3.1. Target Uses</H2 ><P >Winbind is targeted at organizations that have an existing NT based domain infrastructure into which they wish @@ -224,9 +227,9 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1283" +NAME="AEN2277" ></A ->10.4. How Winbind Works</H1 +>16.4. How Winbind Works</H1 ><P >The winbind system is designed around a client/server architecture. A long running <B @@ -244,9 +247,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1288" +NAME="AEN2282" ></A ->10.4.1. Microsoft Remote Procedure Calls</H2 +>16.4.1. Microsoft Remote Procedure Calls</H2 ><P >Over the last two years, efforts have been underway by various Samba Team members to decode various aspects of @@ -270,9 +273,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1292" +NAME="AEN2286" ></A ->10.4.2. Name Service Switch</H2 +>16.4.2. Name Service Switch</H2 ><P >The Name Service Switch, or NSS, is a feature that is present in many UNIX operating systems. It allows system @@ -350,9 +353,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1308" +NAME="AEN2302" ></A ->10.4.3. Pluggable Authentication Modules</H2 +>16.4.3. Pluggable Authentication Modules</H2 ><P >Pluggable Authentication Modules, also known as PAM, is a system for abstracting authentication and authorization @@ -399,9 +402,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1316" +NAME="AEN2310" ></A ->10.4.4. User and Group ID Allocation</H2 +>16.4.4. User and Group ID Allocation</H2 ><P >When a user or group is created under Windows NT is it allocated a numerical relative identifier (RID). This is @@ -425,9 +428,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1320" +NAME="AEN2314" ></A ->10.4.5. Result Caching</H2 +>16.4.5. Result Caching</H2 ><P >An active system can generate a lot of user and group name lookups. To reduce the network cost of these lookups winbind @@ -448,9 +451,9 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1323" +NAME="AEN2317" ></A ->10.5. Installation and Configuration</H1 +>16.5. Installation and Configuration</H1 ><P >Many thanks to John Trostel <A HREF="mailto:jtrostel@snapserver.com" @@ -475,9 +478,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1330" +NAME="AEN2324" ></A ->10.5.1. Introduction</H2 +>16.5.1. Introduction</H2 ><P >This HOWTO describes the procedures used to get winbind up and running on my RedHat 7.1 system. Winbind is capable of providing access @@ -534,9 +537,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1343" +NAME="AEN2337" ></A ->10.5.2. Requirements</H2 +>16.5.2. Requirements</H2 ><P >If you have a samba configuration file that you are currently using... <SPAN @@ -574,7 +577,7 @@ CLASS="FILENAME" > back to the original state they were in if you get frustrated with the way things are going. ;-)</P ><P ->The latest version of SAMBA (version 2.2.2 as of this writing), now +>The latest version of SAMBA (version 3.0 as of this writing), now includes a functioning winbindd daemon. Please refer to the <A HREF="http://samba.org/" @@ -604,9 +607,9 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1357" +NAME="AEN2351" ></A ->10.5.3. Testing Things Out</H2 +>16.5.3. Testing Things Out</H2 ><P >Before starting, it is probably best to kill off all the SAMBA related daemons running on your server. Kill off all <B @@ -649,9 +652,9 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1368" +NAME="AEN2362" ></A ->10.5.3.1. Configure and compile SAMBA</H3 +>16.5.3.1. Configure and compile SAMBA</H3 ><P >The configuration and compilation of SAMBA is pretty straightforward. The first three steps may not be necessary depending upon @@ -715,9 +718,9 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1387" +NAME="AEN2381" ></A ->10.5.3.2. Configure <TT +>16.5.3.2. Configure <TT CLASS="FILENAME" >nsswitch.conf</TT > and the @@ -820,9 +823,9 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1420" +NAME="AEN2414" ></A ->10.5.3.3. Configure smb.conf</H3 +>16.5.3.3. Configure smb.conf</H3 ><P >Several parameters are needed in the smb.conf file to control the behavior of <B @@ -895,9 +898,9 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1436" +NAME="AEN2430" ></A ->10.5.3.4. Join the SAMBA server to the PDC domain</H3 +>16.5.3.4. Join the SAMBA server to the PDC domain</H3 ><P >Enter the following command to make the SAMBA server join the PDC domain, where <TT @@ -919,7 +922,7 @@ CLASS="PROMPT" >root#</TT > <B CLASS="COMMAND" ->/usr/local/samba/bin/net rpc join -s PDC -U Administrator</B +>/usr/local/samba/bin/net rpc join -S PDC -U Administrator</B ></P ><P >The proper response to the command should be: "Joined the domain @@ -941,9 +944,9 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1447" +NAME="AEN2441" ></A ->10.5.3.5. Start up the winbindd daemon and test it!</H3 +>16.5.3.5. Start up the winbindd daemon and test it!</H3 ><P >Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of @@ -1064,17 +1067,17 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1483" +NAME="AEN2477" ></A ->10.5.3.6. Fix the init.d startup scripts</H3 +>16.5.3.6. Fix the init.d startup scripts</H3 ><DIV CLASS="SECT4" ><H4 CLASS="SECT4" ><A -NAME="AEN1485" +NAME="AEN2479" ></A ->10.5.3.6.1. Linux</H4 +>16.5.3.6.1. Linux</H4 ><P >The <B CLASS="COMMAND" @@ -1168,9 +1171,9 @@ CLASS="SECT4" ><H4 CLASS="SECT4" ><A -NAME="AEN1502" +NAME="AEN2496" ></A ->10.5.3.6.2. Solaris</H4 +>16.5.3.6.2. Solaris</H4 ><P >On solaris, you need to modify the <TT @@ -1239,9 +1242,9 @@ CLASS="SECT4" ><H4 CLASS="SECT4" ><A -NAME="AEN1509" +NAME="AEN2503" ></A ->10.5.3.6.3. Restarting</H4 +>16.5.3.6.3. Restarting</H4 ><P >If you restart the <B CLASS="COMMAND" @@ -1263,9 +1266,9 @@ CLASS="SECT3" ><H3 CLASS="SECT3" ><A -NAME="AEN1515" +NAME="AEN2509" ></A ->10.5.3.7. Configure Winbind and PAM</H3 +>16.5.3.7. Configure Winbind and PAM</H3 ><P >If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other @@ -1321,9 +1324,9 @@ CLASS="SECT4" ><H4 CLASS="SECT4" ><A -NAME="AEN1532" +NAME="AEN2526" ></A ->10.5.3.7.1. Linux/FreeBSD-specific PAM configuration</H4 +>16.5.3.7.1. Linux/FreeBSD-specific PAM configuration</H4 ><P >The <TT CLASS="FILENAME" @@ -1450,9 +1453,9 @@ CLASS="SECT4" ><H4 CLASS="SECT4" ><A -NAME="AEN1565" +NAME="AEN2559" ></A ->10.5.3.7.2. Solaris-specific configuration</H4 +>16.5.3.7.2. Solaris-specific configuration</H4 ><P >The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes @@ -1537,9 +1540,9 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1572" +NAME="AEN2566" ></A ->10.6. Limitations</H1 +>16.6. Limitations</H1 ><P >Winbind has a number of limitations in its current released version that we hope to overcome in future @@ -1578,9 +1581,9 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1582" +NAME="AEN2576" ></A ->10.7. Conclusion</H1 +>16.7. Conclusion</H1 ><P >The winbind system, through the use of the Name Service Switch, Pluggable Authentication Modules, and appropriate @@ -1606,7 +1609,7 @@ WIDTH="33%" ALIGN="left" VALIGN="top" ><A -HREF="domain-security.html" +HREF="securitylevels.html" ACCESSKEY="P" >Prev</A ></TD @@ -1624,7 +1627,7 @@ WIDTH="33%" ALIGN="right" VALIGN="top" ><A -HREF="samba-pdc.html" +HREF="pdb-mysql.html" ACCESSKEY="N" >Next</A ></TD @@ -1634,17 +1637,21 @@ ACCESSKEY="N" WIDTH="33%" ALIGN="left" VALIGN="top" ->security = domain in Samba 2.x</TD +>Security levels</TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" -> </TD +><A +HREF="p1346.html" +ACCESSKEY="U" +>Up</A +></TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" ->How to Configure Samba 2.2 as a Primary Domain Controller</TD +>Passdb MySQL plugin</TD ></TR ></TABLE ></DIV |