From c8af938a0a7ec15c38076fc11d164f55737318f1 Mon Sep 17 00:00:00 2001
From: Gerald Carter The man pages distributed with SAMBA contain
@@ -638,7 +658,7 @@ CLASS="SECT1"
CLASS="SECT1"
>Step 1: Building the Binaries1.2. Step 1: Building the Binaries To do this, first run the program Step 2: The all important step1.3. Step 2: The all important step At this stage you must fetch yourself a
@@ -754,7 +774,7 @@ CLASS="SECT1"
CLASS="SECT1"
>Step 3: Create the smb configuration file.1.4. Step 3: Create the smb configuration file. There are sample configuration files in the examples
@@ -765,6 +785,12 @@ NAME="AEN57"
>The simplest useful configuration file would be
something like this: [global]
@@ -774,6 +800,9 @@ CLASS="PROGRAMLISTING"
guest ok = no
read only = no
which would allow connections by anyone with an @@ -810,7 +839,7 @@ CLASS="SECT1" CLASS="SECT1" >Step 4: Test your config file with +>1.5. Step 4: Test your config file with testparmStep 5: Starting the smbd and nmbd1.6. Step 5: Starting the smbd and nmbd
You must choose to start smbd and nmbd either @@ -874,7 +903,7 @@ CLASS="SECT2" CLASS="SECT2" >Step 5a: Starting from inetd.conf1.6.1. Step 5a: Starting from inetd.conf
NOTE; The following will be different if @@ -909,11 +938,20 @@ CLASS="FILENAME" > and add two lines something like this:
netbios-ssn stream tcp nowait root /usr/local/samba/bin/smbd smbd netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd |
The exact syntax of Step 5b. Alternative: starting it as a daemon1.6.2. Step 5b. Alternative: starting it as a daemon
To start the server as a daemon you should create @@ -988,12 +1026,21 @@ CLASS="FILENAME" >startsmb.
#!/bin/sh /usr/local/samba/bin/smbd -D /usr/local/samba/bin/nmbd -D |
then make it executable with Step 6: Try listing the shares available on your +>1.7. Step 6: Try listing the shares available on your server
Step 7: Try connecting with the unix client1.8. Step 7: Try connecting with the unix client
What If Things Don't Work?1.10. What If Things Don't Work?
If nothing works and you start to think "who wrote @@ -1211,7 +1258,7 @@ CLASS="SECT2" CLASS="SECT2" >Diagnosing Problems1.10.1. Diagnosing Problems
If you have instalation problems then go to @@ -1227,13 +1274,13 @@ CLASS="SECT2" CLASS="SECT2" >Scope IDs1.10.2. Scope IDs
By default Samba uses a blank scope ID. This means all your windows boxes must also have a blank scope ID. If you really want to use a non-blank scope ID then you will - need to use the -i <scope> option to nmbd, smbd, and + need to use the -i <scope> option to nmbd, smbd, and smbclient. All your PCs will need to have the same setting for this to work. I do not recommend scope IDs.
Choosing the Protocol Level1.10.3. Choosing the Protocol LevelThe SMB protocol has many dialects. Currently @@ -1284,7 +1331,7 @@ CLASS="SECT2" CLASS="SECT2" >Printing from UNIX to a Client PC1.10.4. Printing from UNIX to a Client PC
To use a printer that is available via a smb-based @@ -1302,7 +1349,7 @@ CLASS="SECT2" CLASS="SECT2" >Locking1.10.5. Locking
One area which sometimes causes trouble is locking.
Mapping Usernames1.10.6. Mapping UsernamesIf you have different usernames on the PCs and @@ -1376,7 +1423,7 @@ CLASS="SECT2" CLASS="SECT2" >Other Character Sets1.10.7. Other Character Sets
If you have problems using filenames with accented @@ -1400,7 +1447,7 @@ CLASS="SECT1" CLASS="SECT1" >Introduction2.1. Introduction
With the development of LanManager and Windows NT @@ -1419,7 +1466,7 @@ CLASS="SECT1" CLASS="SECT1" >How does it work?2.2. How does it work?
LanManager encryption is somewhat similar to UNIX @@ -1484,7 +1531,7 @@ CLASS="SECT1" CLASS="SECT1" >Important Notes About Security2.3. Important Notes About Security
The unix and SMB password encryption techniques seem similar @@ -1526,9 +1573,8 @@ ALIGN="LEFT" >
Note that Windows NT 4.0 Service pack 3 changed the default for permissible authentication so that plaintext - passwords are nevernever sent over the wire. The solution to this is either to switch to encrypted passwords with Samba or edit the Windows NT registry to re-enable plaintext @@ -1560,9 +1606,8 @@ CLASS="EMPHASIS" >
Note :Note :All current release of Microsoft SMB/CIFS clients support authentication via the SMB Challenge/Response mechanism described here. Enabling @@ -1578,7 +1623,7 @@ CLASS="SECT2" CLASS="SECT2" >Advantages of SMB Encryption2.3.1. Advantages of SMB Encryption
Advantages of non-encrypted passwords2.3.2. Advantages of non-encrypted passwords2.4. The smbpasswd filecat /etc/passwd | mksmbpasswd.sh - > /usr/local/samba/private/smbpasswdypcat passwd | mksmbpasswd.sh - > /usr/local/samba/private/smbpasswd
username:uid:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: - [Account type]:LCT-<last-change-time>:Long name + [Account type]:LCT-<last-change-time>:Long name |
Although only the sections are significant and are looked at in the Samba code.
It is VITALLYIt is VITALLY important that there by 32 'X' characters between the two ':' characters in the XXX sections - the smbpasswd and Samba code will fail to validate any entries that @@ -1794,10 +1847,19 @@ CLASS="CONSTANT" >For example, to clear the password for user bob, his smbpasswd file entry would look like :
bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U ]:LCT-00000000:Bob's full name:/bobhome:/bobshell |
If you are allowing users to use the smbpasswd command to set @@ -1824,9 +1886,8 @@ CLASS="COMMAND" users a default password to begin with, so you do not have to enable this on your server.
Note : Note : This file should be protected very carefully. Anyone with access to this file can (with enough knowledge of the protocols) gain access to your SMB server. The file is thus more @@ -1841,7 +1902,7 @@ CLASS="SECT1" CLASS="SECT1" >The smbpasswd Command2.5. The smbpasswd Command
The smbpasswd command maintains the two 32 byte password fields @@ -1859,10 +1920,9 @@ CLASS="FILENAME" > (or your main Samba binary directory).
Note that as of Samba 1.9.18p4 this program Note that as of Samba 1.9.18p4 this program MUST NOT - BE INSTALLED setuid root (the new smbpasswd<type old value here - - or hit return if there was no old password><type old value here - + or hit return if there was no old password>
<type new value> +><type new value>
<re-type new value +><re-type new value Setting up Samba to support LanManager Encryption2.6. Setting up Samba to support LanManager EncryptionThis is a very brief description on how to setup samba to @@ -2011,7 +2071,7 @@ CLASS="FILENAME" >smbpasswd password file in the place you specified in the Makefile - (--prefix=<dir>). See the notes under the The smbpasswd File @@ -2035,7 +2095,7 @@ CLASS="SECT1" CLASS="SECT1" >Instructions3.1. Instructions
The Distributed File System (or Dfs) provides a means of @@ -2087,7 +2147,7 @@ CLASS="PARAMETER" to other servers. For example, a symbolic link junction->msdfs:storage1\share1junction->msdfs:storage1\share1 in the share directory acts as the Dfs junction. When Dfs-aware clients attempt to access the junction link, they are redirected @@ -2099,6 +2159,12 @@ CLASS="FILENAME" >Here's an example of setting up a Dfs tree on a Samba server.
# The smb.conf file: @@ -2110,6 +2176,9 @@ CLASS="PROGRAMLISTING" path = /export/dfsroot msdfs root = yes |
In the /export/dfsroot directory we set up our dfs links to @@ -2183,7 +2252,7 @@ CLASS="SECT2" CLASS="SECT2" >Notes3.1.1. Notes
Introduction4.1. IntroductionBeginning with the 2.2.0 release, Samba supports @@ -2258,12 +2327,12 @@ TARGET="_top" >
Support for the native MS-RPC printing calls such as StartDocPrinter, EnumJobs(), etc... (See - the MSDN documentation - at http://msdn.microsoft.com/ for more information on the Win32 printing API) +>http://msdn.microsoft.com/ + for more information on the Win32 printing API)
In order to support the uploading of printer driver -files, you must first configure a file share named [print$]. -The name of this share is hard coded in Samba's internals so -the name is very important (print$ is the service used by -Windows NT print servers to provide support for printer driver -download).
Warning |
Previous versions of Samba recommended using - a share named [printer$]. This name was taken from the - printer$ service created by Windows 9x clients when a - printer was shared. Windows 9x printer servers always have - a printer$ service which provides read-only access via no - password in order to support printer driver downloads. WARNING!!! Previous versions of Samba +recommended using a share named [printer$]. This name was taken from the +printer$ service created by Windows 9x clients when a +printer was shared. Windows 9x printer servers always have +a printer$ service which provides read-only access via no +password in order to support printer driver downloads.However, the initial implementation allowed for a - parameter named printer driver location - to be used on a per share basis to specify the location of - the driver files associated with that printer. Another - parameter named printer driver provided - a means of defining the printer driver name to be sent to - the client. These parameters, including printer driver - file parameter, are being depreciated and should not - be used in new installations. For more information on this change, - you should refer to the Migration section - Migration section of this document. |
In order to support the uploading of printer driver +files, you must first configure a file share named [print$]. +The name of this share is hard coded in Samba's internals so +the name is very important (print$ is the service used by +Windows NT print servers to provide support for printer driver +download).
You should modify the server's smb.conf file to create the following file share (of course, some of the parameter values, such as 'path' are arbitrary and should be replaced with appropriate values for your site):
[print$] @@ -2369,6 +2431,9 @@ CLASS="PROGRAMLISTING" browseable = yes read only = yes write list = ntadmin |
author's note: The non-issue is that -if all your Windows NT users are guaranteed to be authenticated -by the Samba server (such as a domain member server and the NT +>Author's Note: The non-issue is that if all your Windows NT users are guaranteed to be +authenticated by the Samba server (such as a domain member server and the NT user has already been validated by the Domain Controller in order to logon to the Windows NT console), then guest access is not necessary. Of course, in a workgroup environment where @@ -2420,7 +2487,9 @@ CLASS="COMMAND" > in the [global] section as well. Make sure you understand what this parameter does before using it -though. --jerry]
In order for a Windows NT print server to support the downloading of driver files by multiple client architectures, @@ -2431,6 +2500,12 @@ Samba follows this model as well.
Next create the directory tree below the [print$] share for each architecture you wish to support.[print$]----- @@ -2439,6 +2514,9 @@ CLASS="PROGRAMLISTING" |-W32ALPHA ; "Windows NT Alpha_AXP" |-W32MIPS ; "Windows NT R4000" |-W32PPC ; "Windows NT PowerPC" |
ATTENTION! REQUIRED PERMISSIONS
In order to currently add a new driver to you Samba host, one of two conditions must hold true:
The account used to connect to the Samba host must be a member of the printer adminprinter + admin list.
The initial listing of printers in the Samba host's Printers folder will have no printer driver assigned to them. @@ -2553,13 +2636,14 @@ of course assumes that the printing client has the necessary privileges on the remote host serving the printer. The default permissions assigned by Windows NT to a printer gives the "Print" permissions to the "Everyone" well-known group.
One issue that has arisen during the development @@ -2578,6 +2662,12 @@ setdriver command
@@ -2613,20 +2703,165 @@ CLASS="PROMPT" >rpcclient pogo -U root%bleaK.er \ > > -c "setdriver hp-print \"HP LaserJet 4000 Series PS\"" Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3] Successfully set hp-print to driver HP LaserJet 4000 Series PS. |
By default, Samba offers all printer shares defined in smb.conf +in the "Printers..." folder. Also existing in this folder is the Windows NT +Add Printer Wizard icon. The APW will be show only if
The connected user is able to successfully + execute an OpenPrinterEx(\\server) with administrative + priviledges (i.e. root or printer admin. +
show + add printer wizard = yes (the default). +
In order to be able to use the APW to successfully add a printer to a Samba +server, the addprinter +command must have a defined value. The program +hook must successfully add the printer to the system (i.e. +/etc/printcap or appropriate files) and +smb.conf if necessary.
When using the APW from a client, if the named printer share does +not exist, smbd will execute the add printer +program and reparse to the smb.conf +to attempt to locate the new printer share. If the share is still not defined, +an error of "Access Denied" is returned to the client. Note that the +add printer program is executed undet the context +of the connected user, not necessarily a root account.
There is a complementing deleteprinter +command for removing entries from the "Printers..." +folder.
Windows NT/2000 print servers associate a port with each printer. These normally +take the form of LPT1:, COM1:, FILE:, etc... Samba must also support the +concept of ports associated with a printer. By default, only one printer port, +named "Samba Printer Port", exists on a system. Samba does not really a port in +order to print, rather it is a requirement of Windows clients.
Note that Samba does not support the concept of "Printer Pooling" internally +either. This is when a logical printer is assigned to multiple ports as +a form of load balancing or fail over.
If you require that multiple ports be defined for some reason, +smb.conf possesses a enumports +command which can be used to define an external program +that generates a listing of ports on a system.
The Imprints tool set provides a UNIX equivalent of the @@ -2643,8 +2878,8 @@ CLASS="SECT2" >
Imprints is a collection of tools for supporting the goals @@ -2675,8 +2910,8 @@ CLASS="SECT2" >
The process of creating printer driver packages is beyond @@ -2691,8 +2926,8 @@ CLASS="SECT2" >
The Imprints server is really a database server that @@ -2701,9 +2936,8 @@ NAME="AEN544" downloading of the package. Each package is digitally signed via GnuPG which can be used to verify that package downloaded is actually the one referred in the Imprints database. It is - notnot recommended that this security check be disabled.
More information regarding the Imprints installation client @@ -2754,20 +2988,28 @@ CLASS="COMMAND" >rpcclient.
- foreach (supported architecture for a given driver) - { - 1. rpcclient: Get the appropriate upload directory - on the remote server - 2. smbclient: Upload the driver files - 3. rpcclient: Issues an AddPrinterDriver() MS-RPC - } +foreach (supported architecture for a given driver) +{ + 1. rpcclient: Get the appropriate upload directory + on the remote server + 2. smbclient: Upload the driver files + 3. rpcclient: Issues an AddPrinterDriver() MS-RPC +} - 4. rpcclient: Issue an AddPrinterEx() MS-RPC to actually - create the printer - |
One of the problems encountered when implementing @@ -2807,8 +3049,8 @@ CLASS="SECT1" >
If you want to migrate an existing printers.def file into the new setup, the current only +>printers.def + file into the new setup, the current only solution is to use the Windows NT APW to install the NT drivers - and the 9x drivers. This can be scripted using smbclient and - rpcclient. See the smbclient + and rpcclient. See the + Imprints installation client at Imprints installation client for an example. +>http://imprints.sourceforge.net/ + for an example.
In order for a Samba-2 server to join an NT domain, @@ -2952,9 +3203,8 @@ NAME="AEN617" NT domain on the PDC using Server Manager for Domains. This creates the machine account in the domain (PDC) SAM. Note that you should add the Samba server as a "Windows NT Workstation or Server", - NOTNOT as a Primary or backup domain controller.
Assume you have a Samba-2 server with a NetBIOS name of @@ -3031,13 +3281,13 @@ CLASS="FILENAME" ><NT DOMAIN NAME><NT DOMAIN NAME>.<Samba - Server Name><Samba + Server Name>.mac
Many people have asked regarding the state of Samba's ability to participate in @@ -3196,8 +3446,8 @@ CLASS="SECT1" >
Currently, domain security in Samba doesn't free you from @@ -3262,9 +3512,8 @@ CLASS="COMMAND" user is authenticated, making a Samba server truly plug and play in an NT domain environment. Watch for this code soon.
NOTE:NOTE: Much of the text of this document
was first published in the Web magazine Author's Note :Author's Note : This document
is a combination of David Bannon's Samba 2.2 PDC HOWTO
and the Samba NT Domain FAQ. Both documents are superceeded by this one. The first step in creating a working Samba PDC is to
@@ -3425,6 +3673,12 @@ linked with the actual smb.conf description. Here is an example smb.conf for acting as a PDC: There are a couple of points to emphasize in the above
@@ -3619,8 +3876,8 @@ CLASS="SECT1"
> /etc/passwd entry like this : If you are manually creating the machine accounts, it is necessary
@@ -3719,10 +3985,9 @@ CLASS="REPLACEABLE"
> is the machine's netbios
name. If you manually create a machine account, immediately join
-the client to the domain. An open account like this
can allow intruders to gain access to user account information
in your domain. In Samba 2.2.0, only the root accountIn Samba 2.2.0, only the root account can be used to create
machine accounts on the fly like this. Therefore, it is required
-to create an entry in smbpasswd for rootroot.
-The password SHOULDSHOULD be set to s different
password that the associated I cannot include a '$' in a machine name.I cannot include a '$' in a machine name. A 'machine name' in (typically) I get told "You already have a connection to the Domain...."
-when creating a machine account. This happens if you try to create a machine account from the
@@ -3810,18 +4079,16 @@ is the same name as the domain you are joining (bad idea) you will
get this message. Change the workgroup name to something else, it
does not matter what, reboot, and try again. I get told "Cannot join domain, the credentials supplied
-conflict with an existing set.." This is the same basic problem as mentioned above, "You already
have a connection..." "The system can not log you on (C000019B)....""The system can not log you on (C000019B)...." I joined the domain successfully but after upgrading
@@ -3843,10 +4110,9 @@ versions 2.0.7, TNG and the HEAD branch code (not recommended). The
only way to correct the problem is to restore the original domain
SID or remove the domain client from the domain and rejoin. "The machine account for this computer either does not
-exist or is not accessible." When I try to join the domain I get the message "The machine account
@@ -3877,8 +4143,8 @@ CLASS="SECT1"
> Much of the information necessary to implement System Policies and
@@ -3893,9 +4159,8 @@ Profiles and Policies in Windows NT 4.0 Here are some additional details: What about Windows NT Policy Editor ?What about Windows NT Policy Editor ? To create or edit poledit.exe which
-is included with NT Server but not NT Workstationnot NT Workstation.
There is a Policy Editor on a NTws
-but it is not suitable for creating Domain PoliciesDomain Policies.
Further, although the Windows 95
Policy Editor can be installed on an NT Workstation/Server, it will not
@@ -3951,9 +4214,8 @@ be extracted as well. It is also possible to downloaded the policy template
files for Office97 and get a copy of the policy editor. Another possible
location is with the Zero Administration Kit available for download from Microsoft. Can Win95 do Policies ?Can Win95 do Policies ? Install the group policy handler for Win9x to pick up group
@@ -3973,9 +4235,8 @@ to be done on every Win9x machine that uses group policies.... How do I get 'User Manager' and 'Server Manager'How do I get 'User Manager' and 'Server Manager' Since I don't need to buy an NT Server CD now, how do I get
@@ -4020,8 +4281,8 @@ CLASS="SECT1"
> There are many sources of information available in the form
@@ -4029,10 +4290,9 @@ of mailing lists, RFC's and documentation. The docs that come
with the samba distribution contain very good explanations of
general SMB topics such as browsing. What are some diagnostics tools I can use to debug the domain logon
-process and where can I find them? One of the best diagnostic tools for debugging problems is Samba itself.
@@ -4099,10 +4359,9 @@ TARGET="_top"
formatted files.
How do I install 'Network Monitor' on an NT Workstation
-or a Windows 9x box? Installing netmon on an NT workstation requires a couple
@@ -4203,8 +4462,8 @@ CLASS="SECT2"
> The Development The Development document
on the Samba mirrors might mention your problem. If so,
it might mean that the developers are working on it. How do I get help from the mailing lists ?How do I get help from the mailing lists ? You might include partialYou might include partial
log files written at a debug level set to as much as 20.
Please don't send the entire log but enough to give the context of the
@@ -4377,9 +4633,8 @@ CLASS="EMPHASIS"
> How do I get off the mailing lists ?How do I get off the mailing lists ? To have your name removed from a samba mailing list, go to the
@@ -4412,16 +4667,15 @@ CLASS="SECT1"
> This appendix was originally authored by John H Terpstra of the Samba Team
and is included here for posterity. NOTE :NOTE :
The term "Domain Controller" and those related to it refer to one specific
method of authentication that can underly an SMB domain. Domain Controllers
@@ -4514,7 +4768,7 @@ within its registry. Integration of UNIX and Microsoft Windows NT through
a unified logon has been considered a "holy grail" in heterogeneous
- computing environments for a long time. We present winbind
- , a component of the Samba suite of programs as a
solution to the unied logon problem. Winbind uses a UNIX implementation
of Microsoft RPC calls, Pluggable Authentication Modules, and the Name
@@ -4545,8 +4798,8 @@ CLASS="SECT1"
> It is well known that UNIX and Microsoft Windows NT have
@@ -4599,8 +4852,8 @@ CLASS="SECT1"
> Winbind unifies UNIX and Windows NT account management by
@@ -4641,8 +4894,8 @@ CLASS="SECT2"
> Winbind is targeted at organizations that have an
@@ -4665,8 +4918,8 @@ CLASS="SECT1"
> The winbind system is designed around a client/server
@@ -4685,8 +4938,8 @@ CLASS="SECT2"
> Over the last two years, efforts have been underway
@@ -4711,8 +4964,8 @@ CLASS="SECT2"
> The Name Service Switch, or NSS, is a feature that is
@@ -4790,8 +5043,8 @@ CLASS="SECT2"
> Pluggable Authentication Modules, also known as PAM,
@@ -4839,8 +5092,8 @@ CLASS="SECT2"
> When a user or group is created under Windows NT
@@ -4865,8 +5118,8 @@ CLASS="SECT2"
> An active system can generate a lot of user and group
@@ -4888,8 +5141,8 @@ CLASS="SECT1"
> The easiest way to install winbind is by using the packages
@@ -4919,8 +5172,8 @@ CLASS="SECT1"
> Winbind has a number of limitations in its current
@@ -4967,8 +5220,8 @@ CLASS="SECT1"
> The winbind system, through the use of the Name Service
@@ -4983,7 +5236,7 @@ NAME="AEN1138"
CLASS="CHAPTER"
> In Samba 2.0.4 and above the default value of the
parameter From an NT 4.0 client, single-click with the right
mouse button on any file or directory in a Samba mounted
drive letter or UNC path. When the menu pops-up, click
- on the PropertiesProperties entry at the bottom of
the menu. This brings up the normal file properties dialog
box, but with Samba 2.0.4 this will have a new tab along the top
- marked SecuritySecurity. Click on this tab and you
- will see three buttons, PermissionsPermissions,
- Auditing, and OwnershipAuditing, and Ownership.
- The AuditingAuditing button will cause either
an error message Clicking on the rootroot
user. As clicking on this button causes NT to attempt to change
the ownership of a file to the current user logged into the NT
@@ -5158,10 +5404,9 @@ CLASS="EMPHASIS"
and allow a user with Administrator privillage connected
to a Samba 2.0.4 server as root to change the ownership of
files on both a local NTFS filesystem or remote mounted NTFS
- or Samba drive. This is available as part of the Seclib
- NT security library written by Jeremy Allison of
the Samba Team, available from the main Samba ftp site. The third button is the The standard UNIX user/group/world triple and
@@ -5294,8 +5539,8 @@ CLASS="SECT2"
> Directories on an NT NTFS file system have two
@@ -5326,8 +5571,8 @@ CLASS="SECT1"
> Modifying file and directory permissions is as simple
@@ -5424,8 +5669,8 @@ CLASS="SECT1"
> security mask
- mask may be treated as a set of bits the user is notnot
allowed to change, and one bits are those the user is allowed to change.
before you install the client. Also, don't use the
@@ -5864,8 +6117,8 @@ CLASS="SECT2"
> <nt driver name> = <os2 driver
- name>.<device name>, e.g.:
+><nt driver name> = <os2 driver
+ name>.<device name>, e.g.:
HP LaserJet 5L = LASERJET.HP LaserJet 5L You can have multiple drivers mapped in this file.Chapter 6. How to Configure Samba 2.2.x as a Primary Domain Controller
Background6.1. Background
Configuring the Samba Domain Controller6.2. Configuring the Samba Domain Controller
[global]
@@ -3566,6 +3820,9 @@ HREF="smb.conf.5.html#DIRECTORYMASK"
TARGET="_top"
>directory mask = 0700
Creating Machine Trust Accounts and Joining Clients
+NAME="AEN833"
+>6.3. Creating Machine Trust Accounts and Joining Clients
to the Domain
doppy$:x:505:501:NTMachine:/dev/null:/bin/false
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
Common Problems and Errors6.4. Common Problems and Errors
System Policies and Profiles6.5. System Policies and Profiles
What other help can I get ?6.6. What other help can I get ?
URLs and similar6.6.1. URLs and similar
Mailing Lists6.6.2. Mailing Lists
DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba6.7. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba
Chapter 7. Unifed Logons between Windows NT and UNIX using Winbind
Abstract7.1. Abstract
Introduction7.2. Introduction
What Winbind Provides7.3. What Winbind Provides
Target Uses7.3.1. Target Uses
How Winbind Works7.4. How Winbind Works
Microsoft Remote Procedure Calls7.4.1. Microsoft Remote Procedure Calls
Name Service Switch7.4.2. Name Service Switch
Pluggable Authentication Modules7.4.3. Pluggable Authentication Modules
User and Group ID Allocation7.4.4. User and Group ID Allocation
Result Caching7.4.5. Result Caching
Installation and Configuration7.5. Installation and Configuration
Limitations7.6. Limitations
Conclusion7.7. Conclusion
Chapter 8. UNIX Permission Bits and WIndows NT Access Control Lists
Viewing and changing UNIX permissions using the NT
+NAME="AEN1192"
+>8.1. Viewing and changing UNIX permissions using the NT
security dialogs
How to view file security on a Samba share8.2. How to view file security on a Samba share
Viewing file ownership8.3. Viewing file ownership
Viewing file or directory permissions8.4. Viewing file or directory permissions
File Permissions8.4.1. File Permissions
Directory Permissions8.4.2. Directory Permissions
Modifying file or directory permissions8.5. Modifying file or directory permissions
Interaction with the standard Samba create mask
+NAME="AEN1290"
+>8.6. Interaction with the standard Samba create mask
parameters
Interaction with the standard Samba file attribute
+NAME="AEN1354"
+>8.7. Interaction with the standard Samba file attribute
mapping
Chapter 9. OS2 Client HOWTO
FAQs9.1. FAQs
How can I configure OS/2 Warp Connect or
+NAME="AEN1377"
+>9.1.1. How can I configure OS/2 Warp Connect or
OS/2 Warp 4 as a client for Samba?
How can I configure OS/2 Warp 3 (not Connect),
+NAME="AEN1392"
+>9.1.2. How can I configure OS/2 Warp 3 (not Connect),
OS/2 1.2, 1.3 or 2.x for Samba?
20=setup.exe
20=netwksta.sys
20=netvdd.sys
Are there any other issues when OS/2 (any version)
+NAME="AEN1401"
+>9.1.3. Are there any other issues when OS/2 (any version)
is used as a client?
How do I get printer driver download working
+NAME="AEN1405"
+>9.1.4. How do I get printer driver download working
for OS/2 clients?