From cd668ed8edc6152dcc0c40cac81ad0b298801311 Mon Sep 17 00:00:00 2001 From: John Terpstra Date: Fri, 6 Jan 2006 18:32:33 +0000 Subject: Removing mention of the winbind enable local accounts parameter. (This used to be commit baf4de7bc39c4adb55d05b13acc610cca14b8a87) --- docs/Samba3-ByExample/SBE-AddingUNIXClients.xml | 74 ------------------------ docs/Samba3-ByExample/SBE-SecureOfficeServer.xml | 20 ++++--- docs/Samba3-ByExample/SBE-SimpleOfficeServer.xml | 4 +- 3 files changed, 13 insertions(+), 85 deletions(-) (limited to 'docs') diff --git a/docs/Samba3-ByExample/SBE-AddingUNIXClients.xml b/docs/Samba3-ByExample/SBE-AddingUNIXClients.xml index 1c4f453b98..a20703af39 100644 --- a/docs/Samba3-ByExample/SBE-AddingUNIXClients.xml +++ b/docs/Samba3-ByExample/SBE-AddingUNIXClients.xml @@ -1035,7 +1035,6 @@ Joined domain MEGANET2. /usr/sbin/useradd -m '%u' /usr/sbin/useradd -M '%u' /usr/sbin/groupadd '%g' -Yes /var/log/samba/%m 0 139 @@ -2627,79 +2626,6 @@ session sufficient /lib/security/$ISA/pam_winbind.so use_first_pass - - - - - winbind enable local accounts - - /etc/passwd - - options list - - ACL - - share - - In my &smb.conf; file, I enabled the parameter winbind enable local accounts - on all domain member servers, but it does not work. The accounts I put in - /etc/passwd do not show up in the options list when I try to set an - ACL on a share. What have I done wrong? - - - - - - - local users - - local groups - - UNIX account - - getpwnam() - - getgrgid() - - Identity resolution - - failure - - Domain - - The manual page for this &smb.conf; file parameter clearly says, This parameter - controls whether or not winbindd will act as a stand-in replacement for the various - account management hooks in smb.conf (for example, add user script). If enabled, winbindd - will support the creation of local users and groups as another source of UNIX account - information available via getpwnam() or getgrgid(), etc.... By default this - parameter is already enabled; therefore, the action you are seeing is a result of a failure - of identity resolution in the domain. - - - - Domain logons - - Identity resolution - - Domain - user - - Domain - group - - UID - - GID - - These are the accounts that are available for Windows network domain logons. Providing - identity resolution has been correctly configured on the domain controllers as well as - on domain member servers. The domain user and group identities automatically map - to a valid local UID and GID pair. - - - - - diff --git a/docs/Samba3-ByExample/SBE-SecureOfficeServer.xml b/docs/Samba3-ByExample/SBE-SecureOfficeServer.xml index 88b3758714..75c57db01d 100644 --- a/docs/Samba3-ByExample/SBE-SecureOfficeServer.xml +++ b/docs/Samba3-ByExample/SBE-SecureOfficeServer.xml @@ -1077,12 +1077,12 @@ Added user username. file systempermissions Create the top-level file storage directories for data and applications as follows: -&rootprompt; mkdir -p /data/{accounts,finsvcs} +&rootprompt; mkdir -p /data/{accounts,finsrvcs} &rootprompt; mkdir -p /apps &rootprompt; chown -R root:root /data &rootprompt; chown -R root:root /apps -&rootprompt; chown -R bjordan:accounts /data/accounts -&rootprompt; chown -R bjordan:finsvcs /data/finsvcs +&rootprompt; chown -R bjordan:acctsdep /data/accounts +&rootprompt; chown -R bjordan:finsrvcs /data/finsrvcs &rootprompt; chmod -R ug+rwxs,o-rwx /data &rootprompt; chmod -R ug+rwx,o+rx-w /apps @@ -1106,6 +1106,8 @@ Added user username. &rootprompt; chown -R root:root /var/spool/samba &rootprompt; chown -R root:root /var/lib/samba &rootprompt; chmod a+rwxt /var/spool/samba +&rootprompt; chmod 2775 /var/lib/samba/profiles +&rootprompt; chgrp users /var/lib/samba/profiles For each user account that is created on the system, the following commands should be executed: @@ -1578,10 +1580,10 @@ hosts: files dns wins requests only when configured to do so. Ensure that your print queues are set to accept incoming jobs by executing the following commands: -&rootprompt; /usr/bin/accept qmsa -&rootprompt; /usr/bin/accept hplj6a -&rootprompt; /usr/bin/accept qmsf -&rootprompt; /usr/bin/accept hplj6f +&rootprompt; /usr/sbin/accept qmsa +&rootprompt; /usr/sbin/accept hplj6a +&rootprompt; /usr/sbin/accept qmsf +&rootprompt; /usr/sbin/accept hplj6f @@ -1656,7 +1658,7 @@ application/octet-stream automatically at every system reboot. For example, chkconfig -&rootprompt; chkconfig dhpc on +&rootprompt; chkconfig dhpcd on &rootprompt; chkconfig named on &rootprompt; chkconfig cups on &rootprompt; chkconfig smb on @@ -1671,7 +1673,7 @@ application/octet-stream Execute each of the following in the sequence shown: -&rootprompt; /etc/rc.d/init.d/dhcp restart +&rootprompt; /etc/rc.d/init.d/dhcpd restart &rootprompt; /etc/rc.d/init.d/named restart &rootprompt; /etc/rc.d/init.d/cups restart &rootprompt; /etc/rc.d/init.d/smb restart diff --git a/docs/Samba3-ByExample/SBE-SimpleOfficeServer.xml b/docs/Samba3-ByExample/SBE-SimpleOfficeServer.xml index d45a3f02a4..1585084e0f 100644 --- a/docs/Samba3-ByExample/SBE-SimpleOfficeServer.xml +++ b/docs/Samba3-ByExample/SBE-SimpleOfficeServer.xml @@ -1161,7 +1161,7 @@ Added user "LoginID" &rootprompt; mkdir -p /data &rootprompt; chown alan /data -&rootprompt; for i in james suzy ursula peter dale eric jeannie russell +&rootprompt; for i in james suzy ujen peter dale eric jeannie russ > do > mkdir -p /data/$i > chown $i /data/$i @@ -1259,7 +1259,7 @@ application/octet-stream Make certain to check the ownership and permissions on all files. If in doubt, execute the following: &rootprompt; chown alan /data -&rootprompt; for i in james suzy ursula peter dale eric jeannie russell +&rootprompt; for i in james suzy ujen peter dale eric jeannie russ > do > chown $i /data/$i > done -- cgit