From 01f0236f58775e2bf60250caf2b9740bd9f988ea Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Sun, 30 Mar 2003 11:22:22 +0000 Subject: - Regenerate docs - Document 'preload modules' (This used to be commit 57407401d0f261d4b8e42fdc64479afef10211c3) --- docs/htmldocs/winbind.html | 180 +++++++++++++++++++++++++++------------------ 1 file changed, 107 insertions(+), 73 deletions(-) (limited to 'docs/htmldocs/winbind.html') diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html index 991876796e..4d97d66b18 100644 --- a/docs/htmldocs/winbind.html +++ b/docs/htmldocs/winbind.html @@ -13,8 +13,8 @@ REL="UP" TITLE="Optional configuration" HREF="optional.html">PrevChapter 14. Unified Logons between Windows NT and UNIX using WinbindChapter 16. Unified Logons between Windows NT and UNIX using Winbind

14.1. Abstract16.1. Abstract

Integration of UNIX and Microsoft Windows NT through @@ -107,8 +107,8 @@ CLASS="SECT1" >

14.2. Introduction16.2. Introduction

It is well known that UNIX and Microsoft Windows NT have @@ -161,8 +161,8 @@ CLASS="SECT1" >

14.3. What Winbind Provides16.3. What Winbind Provides

Winbind unifies UNIX and Windows NT account management by @@ -203,8 +203,8 @@ CLASS="SECT2" >

14.3.1. Target Uses16.3.1. Target Uses

Winbind is targeted at organizations that have an @@ -227,8 +227,8 @@ CLASS="SECT1" >

14.4. How Winbind Works16.4. How Winbind Works

The winbind system is designed around a client/server @@ -247,8 +247,8 @@ CLASS="SECT2" >

14.4.1. Microsoft Remote Procedure Calls16.4.1. Microsoft Remote Procedure Calls

Over the last few years, efforts have been underway @@ -273,8 +273,8 @@ CLASS="SECT2" >

14.4.2. Microsoft Active Directory Services16.4.2. Microsoft Active Directory Services

Since late 2001, Samba has gained the ability to @@ -292,8 +292,8 @@ CLASS="SECT2" >

14.4.3. Name Service Switch16.4.3. Name Service Switch

The Name Service Switch, or NSS, is a feature that is @@ -372,8 +372,8 @@ CLASS="SECT2" >

14.4.4. Pluggable Authentication Modules16.4.4. Pluggable Authentication Modules

Pluggable Authentication Modules, also known as PAM, @@ -421,8 +421,8 @@ CLASS="SECT2" >

14.4.5. User and Group ID Allocation16.4.5. User and Group ID Allocation

When a user or group is created under Windows NT @@ -447,8 +447,8 @@ CLASS="SECT2" >

14.4.6. Result Caching16.4.6. Result Caching

An active system can generate a lot of user and group @@ -470,8 +470,8 @@ CLASS="SECT1" >

14.5. Installation and Configuration16.5. Installation and Configuration

Many thanks to John Trostel This HOWTO describes how to get winbind services up and running to control access and authenticate users on your Linux box using the winbind services which come with SAMBA 2.2.2.

There is also some Solaris specific information in -docs/textdocs/Solaris-Winbind-HOWTO.txt. -Future revisions of this document will incorporate that -information.

14.5.1. Introduction16.5.1. Introduction

This HOWTO describes the procedures used to get winbind up and @@ -556,8 +548,8 @@ CLASS="SECT2" >

14.5.2. Requirements16.5.2. Requirements

If you have a samba configuration file that you are currently @@ -626,8 +618,8 @@ CLASS="SECT2" >

14.5.3. Testing Things Out16.5.3. Testing Things Out

Before starting, it is probably best to kill off all the SAMBA @@ -671,8 +663,8 @@ CLASS="SECT3" >

14.5.3.1. Configure and compile SAMBA16.5.3.1. Configure and compile SAMBA

The configuration and compilation of SAMBA is pretty straightforward. @@ -737,8 +729,8 @@ CLASS="SECT3" >

14.5.3.2. Configure 16.5.3.2. Configure nsswitch.conf and the @@ -842,8 +834,8 @@ CLASS="SECT3" >

14.5.3.3. Configure smb.conf16.5.3.3. Configure smb.conf

Several parameters are needed in the smb.conf file to control @@ -917,8 +909,8 @@ CLASS="SECT3" >

14.5.3.4. Join the SAMBA server to the PDC domain16.5.3.4. Join the SAMBA server to the PDC domain

Enter the following command to make the SAMBA server join the @@ -955,8 +947,8 @@ CLASS="SECT3" >

14.5.3.5. Start up the winbindd daemon and test it!16.5.3.5. Start up the winbindd daemon and test it!

Eventually, you will want to modify your smb startup script to @@ -973,6 +965,21 @@ CLASS="COMMAND" >/usr/local/samba/bin/winbindd

Winbindd can now also run in 'dual daemon mode'. This will make it +run as 2 processes. The first will answer all requests from the cache, +thus making responses to clients faster. The other will +update the cache for the query that the first has just responded. +Advantage of this is that responses stay accurate and are faster. +You can enable dual daemon mode by adding '-B' to the commandline:

root# /usr/local/samba/bin/winbindd -B

I'm always paranoid and like to make sure the daemon is really running...

14.5.3.6. Fix the init.d startup scripts16.5.3.6. Fix the init.d startup scripts

14.5.3.6.1. Linux16.5.3.6.1. Linux

The

If you would like to run winbindd in dual daemon mode, replace +the line +

        daemon /usr/local/samba/bin/winbindd
+ +in the example above with: + +
        daemon /usr/local/samba/bin/winbindd -B
.

The 'stop' function has a corresponding entry to shut down the -services and look s like this:

14.5.3.6.2. Solaris16.5.3.6.2. Solaris
On solaris, you need to modify the 
@@ -1245,14 +1266,27 @@ echo Starting Winbind Daemon
    ;;
 esac

Again, if you would like to run samba in dual daemon mode, replace +

   /usr/local/samba/bin/winbindd
+ +in the script above with: + +
   /usr/local/samba/bin/winbindd -B

14.5.3.6.3. Restarting16.5.3.6.3. Restarting

If you restart the

14.5.3.7. Configure Winbind and PAM16.5.3.7. Configure Winbind and PAM

If you have made it this far, you know that winbindd and samba are working @@ -1333,8 +1367,8 @@ CLASS="SECT4" >

14.5.3.7.1. Linux/FreeBSD-specific PAM configuration16.5.3.7.1. Linux/FreeBSD-specific PAM configuration

The

14.5.3.7.2. Solaris-specific configuration16.5.3.7.2. Solaris-specific configuration

The /etc/pam.conf needs to be changed. I changed this file so that my Domain @@ -1549,8 +1583,8 @@ CLASS="SECT1" >

14.6. Limitations16.6. Limitations

Winbind has a number of limitations in its current @@ -1591,8 +1625,8 @@ CLASS="SECT1" >

14.7. Conclusion16.7. Conclusion

The winbind system, through the use of the Name Service @@ -1619,7 +1653,7 @@ WIDTH="33%" ALIGN="left" VALIGN="top" >PrevPrinting SupportCUPS Printing Support