SAMBA Project Documentation

SAMBA Team

Edited by

John H Terpstra

Jelmer Vernooij

Gerald (Jerry) Carter

This book is a collection of HOWTOs added to Samba documentation over the years. I try to ensure that all are current, but sometimes the is a larger job than one person can maintain. The most recent version of this document can be found at http://www.samba.org/ on the "Documentation" page. Please send updates to jerry@samba.org or jelmer@samba.org.

This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt


Table of Contents
I. General installation
1. How to Install and Test SAMBA
1.1. Obtaining and installing samba
1.2. Configuring samba
1.3. Try listing the shares available on your server
1.4. Try connecting with the unix client
1.5. Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client
1.6. What If Things Don't Work?
2. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide
2.1. Discussion
2.2. How browsing functions and how to deploy stable and dependable browsing using Samba
2.3. Use of the Remote Announce parameter
2.4. Use of the Remote Browse Sync parameter
2.5. Use of WINS
2.6. Do NOT use more than one (1) protocol on MS Windows machines
2.7. Name Resolution Order
3. User information database
3.1. Introduction
3.2. Important Notes About Security
3.3. The smbpasswd Command
3.4. Plain text
3.5. TDB
3.6. LDAP
3.7. MySQL
3.8. XML
II. Type of installation
4. Nomenclature of Server Types
4.1. Stand Alone Server
4.2. Domain Member Server
4.3. Domain Controller
5. Samba as Stand-Alone Server
5.1. User and Share security level
6. Samba as an NT4 or Win2k Primary Domain Controller
6.1. Prerequisite Reading
6.2. Background
6.3. Configuring the Samba Domain Controller
6.4. Creating Machine Trust Accounts and Joining Clients to the Domain
6.5. Common Problems and Errors
6.6. What other help can I get?
6.7. Domain Control for Windows 9x/ME
7. Samba Backup Domain Controller to Samba Domain Control
7.1. Prerequisite Reading
7.2. Background
7.3. What qualifies a Domain Controller on the network?
7.4. Can Samba be a Backup Domain Controller to an NT PDC?
7.5. How do I set up a Samba BDC?
8. Samba as a ADS domain member
8.1. Setup your smb.conf
8.2. Setup your /etc/krb5.conf
8.3. Create the computer account
8.4. Test your server setup
8.5. Testing with smbclient
8.6. Notes
9. Samba as a NT4 or Win2k domain member
9.1. Joining an NT Domain with Samba 3.0
9.2. Why is this better than security = server?
III. Advanced Configuration
10. UNIX Permission Bits and Windows NT Access Control Lists
10.1. Viewing and changing UNIX permissions using the NT security dialogs
10.2. How to view file security on a Samba share
10.3. Viewing file ownership
10.4. Viewing file or directory permissions
10.5. Modifying file or directory permissions
10.6. Interaction with the standard Samba create mask parameters
10.7. Interaction with the standard Samba file attribute mapping
11. Configuring Group Mapping
12. Printing Support
12.1. Introduction
12.2. Configuration
12.3. The Imprints Toolset
12.4. Diagnosis
13. CUPS Printing Support
13.1. Introduction
13.2. Configuring smb.conf for CUPS
13.3. CUPS - RAW Print Through Mode
13.4. CUPS as a network PostScript RIP -- CUPS drivers working on server, Adobe PostScript driver with CUPS-PPDs downloaded to clients
13.5. Windows Terminal Servers (WTS) as CUPS clients
13.6. Setting up CUPS for driver download
13.7. Sources of CUPS drivers / PPDs
13.8. The CUPS Filter Chains
13.9. CUPS Print Drivers and Devices
13.10. Limiting the number of pages users can print
13.11. Advanced Postscript Printing from MS Windows
13.12. Auto-Deletion of CUPS spool files
14. Unified Logons between Windows NT and UNIX using Winbind
14.1. Abstract
14.2. Introduction
14.3. What Winbind Provides
14.4. How Winbind Works
14.5. Installation and Configuration
14.6. Limitations
14.7. Conclusion
15. Advanced Network Manangement
15.1. Configuring Samba Share Access Controls
15.2. Remote Server Administration
15.3. Network Logon Script Magic
16. System and Account Policies
16.1. Creating and Managing System Policies
16.2. Managing Account/User Policies
17. Desktop Profile Management
17.1. Roaming Profiles
17.2. Mandatory profiles
17.3. Creating/Managing Group Profiles
17.4. Default Profile for Windows Users
18. PAM Configuration for Centrally Managed Authentication
18.1. Samba and PAM
18.2. Distributed Authentication
18.3. PAM Configuration in smb.conf
19. Stackable VFS modules
19.1. Introduction and configuration
19.2. Included modules
19.3. VFS modules available elsewhere
20. Hosting a Microsoft Distributed File System tree on Samba
20.1. Instructions
21. Integrating MS Windows networks with Samba
21.1. Name Resolution in a pure Unix/Linux world
21.2. Name resolution as used within MS Windows networking
22. Improved browsing in samba
22.1. Overview of browsing
22.2. Browsing support in samba
22.3. Problem resolution
22.4. Browsing across subnets
22.5. Setting up a WINS server
22.6. Setting up Browsing in a WORKGROUP
22.7. Setting up Browsing in a DOMAIN
22.8. Forcing samba to be the master
22.9. Making samba the domain master
22.10. Note about broadcast addresses
22.11. Multiple interfaces
23. Securing Samba
23.1. Introduction
23.2. Using host based protection
23.3. Using interface protection
23.4. Using a firewall
23.5. Using a IPC$ share deny
23.6. Upgrading Samba
24. Unicode/Charsets
24.1. What are charsets and unicode?
24.2. Samba and charsets
IV. Appendixes
25. SWAT - The Samba Web Admininistration Tool
25.1. SWAT Features and Benefits
26. Migration from NT4 PDC to Samba-3 PDC
26.1. Planning and Getting Started
26.2. Managing Samba-3 Domain Control
27. Samba performance issues
27.1. Comparisons
27.2. Socket options
27.3. Read size
27.4. Max xmit
27.5. Log level
27.6. Read raw
27.7. Write raw
27.8. Slow Clients
27.9. Slow Logins
27.10. Client tuning
28. Portability
28.1. HPUX
28.2. SCO Unix
28.3. DNIX
28.4. RedHat Linux Rembrandt-II
28.5. AIX
29. Samba and other CIFS clients
29.1. Macintosh clients?
29.2. OS2 Client
29.3. Windows for Workgroups
29.4. Windows '95/'98
29.5. Windows 2000 Service Pack 2
29.6. Windows NT 3.1
30. How to compile SAMBA
30.1. Access Samba source code via CVS
30.2. Accessing the samba sources via rsync and ftp
30.3. Building the Binaries
30.4. Starting the smbd and nmbd
31. Reporting Bugs
31.1. Introduction
31.2. General info
31.3. Debug levels
31.4. Internal errors
31.5. Attaching to a running process
31.6. Patches
32. The samba checklist
32.1. Introduction
32.2. Assumptions
32.3. The tests
32.4. Still having troubles?