Part III. Advanced Configuration
Prev   Next

Advanced Configuration

Valuable Nuts and Bolts Information

Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features.

Table of Contents

9. Samba / MS Windows Network Browsing Guide
What is Browsing?
Discussion
How Browsing Functions
Setting up WORKGROUP Browsing
Setting up DOMAIN Browsing
Forcing samba to be the master
Making samba the domain master
Note about broadcast addresses
Multiple interfaces
Use of the Remote Announce parameter
Use of the Remote Browse Sync parameter
WINS - The Windows Internetworking Name Server
Setting up a WINS server
WINS Replication
Static WINS Entries
Helpful Hints
Windows Networking Protocols
Name Resolution Order
Technical Overview of browsing
Browsing support in samba
Problem resolution
Browsing across subnets
10. User information database
Introduction
Important Notes About Security
Advantages of SMB Encryption
Advantages of non-encrypted passwords
The smbpasswd Command
Plain text
TDB
LDAP
Introduction
Encrypted Password Database
Supported LDAP Servers
Schema and Relationship to the RFC 2307 posixAccount
Configuring Samba with LDAP
Accounts and Groups management
Security and sambaAccount
LDAP specials attributes for sambaAccounts
Example LDIF Entries for a sambaAccount
MySQL
Creating the database
Configuring
Using plaintext passwords or encrypted password
Getting non-column data from the table
XML
11. UNIX Permission Bits and Windows NT Access Control Lists
Viewing and changing UNIX permissions using the NT security dialogs
How to view file security on a Samba share
Viewing file ownership
Viewing file or directory permissions
File Permissions
Directory Permissions
Modifying file or directory permissions
Interaction with the standard Samba create mask parameters
Interaction with the standard Samba file attribute mapping
12. Configuring Group Mapping
13. Printing Support
Introduction
Configuration
Creating [print$]
Setting Drivers for Existing Printers
Support a large number of printers
Adding New Printers via the Windows NT APW
Samba and Printer Ports
The Imprints Toolset
What is Imprints?
Creating Printer Driver Packages
The Imprints server
The Installation Client
Diagnosis
Introduction
Debugging printer problems
What printers do I have?
Setting up printcap and print servers
Job sent, no output
Job sent, strange output
Raw PostScript printed
Advanced Printing
Real debugging
14. CUPS Printing Support
Introduction
Configuring smb.conf for CUPS
CUPS - RAW Print Through Mode
CUPS as a network PostScript RIP
Windows Terminal Servers (WTS) as CUPS clients
Setting up CUPS for driver download
Sources of CUPS drivers / PPDs
cupsaddsmb
The CUPS Filter Chains
CUPS Print Drivers and Devices
Further printing steps
Limiting the number of pages users can print
Advanced Postscript Printing from MS Windows
Auto-Deletion of CUPS spool files
15. Unified Logons between Windows NT and UNIX using Winbind
Abstract
Introduction
What Winbind Provides
Target Uses
How Winbind Works
Microsoft Remote Procedure Calls
Microsoft Active Directory Services
Name Service Switch
Pluggable Authentication Modules
User and Group ID Allocation
Result Caching
Installation and Configuration
Introduction
Requirements
Testing Things Out
Limitations
Conclusion
16. Advanced Network Manangement
Configuring Samba Share Access Controls
Share Permissions Management
Remote Server Administration
Network Logon Script Magic
Adding printers without user intervention
17. System and Account Policies
Creating and Managing System Policies
Windows 9x/Me Policies
Windows NT4 Style Policy Files
MS Windows 200x / XP Professional Policies
Managing Account/User Policies
With Windows NT4/200x
With a Samba PDC
System Startup and Logon Processing Overview
18. Desktop Profile Management
Roaming Profiles
Samba Configuration for Profile Handling
Windows Client Profile Configuration Information
Sharing Profiles between W9x/Me and NT4/200x/XP workstations
Profile Migration from Windows NT4/200x Server to Samba
Mandatory profiles
Creating/Managing Group Profiles
Default Profile for Windows Users
MS Windows 9x/Me
MS Windows NT4 Workstation
MS Windows 200x/XP
19. Interdomain Trust Relationships
Trust Relationship Background
Native MS Windows NT4 Trusts Configuration
NT4 as the Trusting Domain (ie. creating the trusted account)
NT4 as the Trusted Domain (ie. creating trusted account's password)
Configuring Samba NT-style Domain Trusts
Samba-3 as the Trusting Domain
Samba-3 as the Trusted Domain
20. PAM Configuration for Centrally Managed Authentication
Samba and PAM
PAM Configuration in smb.conf
Password Synchronisation using pam_smbpass.so
Distributed Authentication
21. Stackable VFS modules
Introduction and configuration
Included modules
audit
extd_audit
recycle
netatalk
VFS modules available elsewhere
DatabaseFS
vscan
22. Hosting a Microsoft Distributed File System tree on Samba
Instructions
Notes
23. Integrating MS Windows networks with Samba
Name Resolution in a pure Unix/Linux world
/etc/hosts
/etc/resolv.conf
/etc/host.conf
/etc/nsswitch.conf
Name resolution as used within MS Windows networking
The NetBIOS Name Cache
The LMHOSTS file
HOSTS file
DNS Lookup
WINS Lookup
24. Securing Samba
Introduction
Using host based protection
Using interface protection
Using a firewall
Using a IPC$ share deny
NTLMv2 Security
Upgrading Samba
25. Unicode/Charsets
What are charsets and unicode?
Samba and charsets
Conversion from old names
Japanese charsets
26. File and Record Locking
Discussion
Samba Opportunistic Locking Control
MS Windows Opportunistic Locking and Caching Controls
Workstation Service Entries
Server Service Entries
Persistent Data Corruption
Additional Reading
Prev Up Next
Chapter 8. Samba as a NT4 or Win2k domain member Home Chapter 9. Samba / MS Windows Network Browsing Guide