SAMBA Project Documentation

SAMBA Team

Edited by

John H Terpstra

Jelmer Vernooij

Gerald (Jerry) Carter

This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is it's documentation. The most recent version of this document can be found at http://www.samba.org/ on the "Documentation" page. Please send updates to jerry@samba.org or jelmer@samba.org.

This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt


Table of Contents
I. General installation
1. How to Install and Test SAMBA
1.1. Obtaining and installing samba
1.2. Configuring samba
1.3. Try listing the shares available on your server
1.4. Try connecting with the unix client
1.5. Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client
1.6. What If Things Don't Work?
2. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide
2.1. Discussion
2.2. How browsing functions and how to deploy stable and dependable browsing using Samba
2.3. Use of the Remote Announce parameter
2.4. Use of the Remote Browse Sync parameter
2.5. Use of WINS
2.6. Do NOT use more than one (1) protocol on MS Windows machines
2.7. Name Resolution Order
3. User information database
3.1. Introduction
3.2. Important Notes About Security
3.3. The smbpasswd Command
3.4. Plain text
3.5. TDB
3.6. LDAP
3.7. MySQL
3.8. XML
II. Type of installation
4. Nomenclature of Server Types
4.1. Stand Alone Server
4.2. Domain Member Server
4.3. Domain Controller
5. Samba as Stand-Alone Server
5.1. User and Share security level
6. Samba as an NT4 or Win2k Primary Domain Controller
6.1. Prerequisite Reading
6.2. Background
6.3. Configuring the Samba Domain Controller
6.4. Creating Machine Trust Accounts and Joining Clients to the Domain
6.5. Common Problems and Errors
6.6. What other help can I get?
6.7. Domain Control for Windows 9x/ME
7. Samba Backup Domain Controller to Samba Domain Control
7.1. Prerequisite Reading
7.2. Background
7.3. What qualifies a Domain Controller on the network?
7.4. Can Samba be a Backup Domain Controller to an NT PDC?
7.5. How do I set up a Samba BDC?
8. Samba as a ADS domain member
8.1. Setup your smb.conf
8.2. Setup your /etc/krb5.conf
8.3. Create the computer account
8.4. Test your server setup
8.5. Testing with smbclient
8.6. Notes
9. Samba as a NT4 or Win2k domain member
9.1. Joining an NT Domain with Samba 3.0
9.2. Why is this better than security = server?
III. Advanced Configuration
10. UNIX Permission Bits and Windows NT Access Control Lists
10.1. Viewing and changing UNIX permissions using the NT security dialogs
10.2. How to view file security on a Samba share
10.3. Viewing file ownership
10.4. Viewing file or directory permissions
10.5. Modifying file or directory permissions
10.6. Interaction with the standard Samba create mask parameters
10.7. Interaction with the standard Samba file attribute mapping
11. Configuring Group Mapping
12. Printing Support
12.1. Introduction
12.2. Configuration
12.3. The Imprints Toolset
12.4. Diagnosis
13. CUPS Printing Support
13.1. Introduction
13.2. Configuring smb.conf for CUPS
13.3. CUPS - RAW Print Through Mode
13.4. CUPS as a network PostScript RIP -- CUPS drivers working on server, Adobe PostScript driver with CUPS-PPDs downloaded to clients
13.5. Windows Terminal Servers (WTS) as CUPS clients
13.6. Setting up CUPS for driver download
13.7. Sources of CUPS drivers / PPDs
13.8. The CUPS Filter Chains
13.9. CUPS Print Drivers and Devices
13.10. Limiting the number of pages users can print
13.11. Advanced Postscript Printing from MS Windows
13.12. Auto-Deletion of CUPS spool files
14. Unified Logons between Windows NT and UNIX using Winbind
14.1. Abstract
14.2. Introduction
14.3. What Winbind Provides
14.4. How Winbind Works
14.5. Installation and Configuration
14.6. Limitations
14.7. Conclusion
15. Advanced Network Manangement
15.1. Configuring Samba Share Access Controls
15.2. Remote Server Administration
15.3. Network Logon Script Magic
16. System and Account Policies
16.1. Creating and Managing System Policies
16.2. Managing Account/User Policies
17. Desktop Profile Management
17.1. Roaming Profiles
17.2. Mandatory profiles
17.3. Creating/Managing Group Profiles
17.4. Default Profile for Windows Users
18. Interdomain Trust Relationships
18.1. Trust Relationship Background
18.2. MS Windows NT4 Trust Configuration
18.3. Configuring Samba Domain Trusts
19. PAM Configuration for Centrally Managed Authentication
19.1. Samba and PAM
19.2. Distributed Authentication
19.3. PAM Configuration in smb.conf
20. Stackable VFS modules
20.1. Introduction and configuration
20.2. Included modules
20.3. VFS modules available elsewhere
21. Hosting a Microsoft Distributed File System tree on Samba
21.1. Instructions
22. Integrating MS Windows networks with Samba
22.1. Name Resolution in a pure Unix/Linux world
22.2. Name resolution as used within MS Windows networking
23. Improved browsing in samba
23.1. Overview of browsing
23.2. Browsing support in samba
23.3. Problem resolution
23.4. Browsing across subnets
23.5. Setting up a WINS server
23.6. Setting up Browsing in a WORKGROUP
23.7. Setting up Browsing in a DOMAIN
23.8. Forcing samba to be the master
23.9. Making samba the domain master
23.10. Note about broadcast addresses
23.11. Multiple interfaces
24. Securing Samba
24.1. Introduction
24.2. Using host based protection
24.3. Using interface protection
24.4. Using a firewall
24.5. Using a IPC$ share deny
24.6. Upgrading Samba
25. Unicode/Charsets
25.1. What are charsets and unicode?
25.2. Samba and charsets
IV. Appendixes
26. SWAT - The Samba Web Admininistration Tool
26.1. SWAT Features and Benefits
27. Migration from NT4 PDC to Samba-3 PDC
27.1. Planning and Getting Started
27.2. Managing Samba-3 Domain Control
28. Samba performance issues
28.1. Comparisons
28.2. Socket options
28.3. Read size
28.4. Max xmit
28.5. Log level
28.6. Read raw
28.7. Write raw
28.8. Slow Clients
28.9. Slow Logins
28.10. Client tuning
29. Portability
29.1. HPUX
29.2. SCO Unix
29.3. DNIX
29.4. RedHat Linux Rembrandt-II
29.5. AIX
29.6. Solaris
30. Samba and other CIFS clients
30.1. Macintosh clients?
30.2. OS2 Client
30.3. Windows for Workgroups
30.4. Windows '95/'98
30.5. Windows 2000 Service Pack 2
30.6. Windows NT 3.1
31. How to compile SAMBA
31.1. Access Samba source code via CVS
31.2. Accessing the samba sources via rsync and ftp
31.3. Building the Binaries
31.4. Starting the smbd and nmbd
32. Reporting Bugs
32.1. Introduction
32.2. General info
32.3. Debug levels
32.4. Internal errors
32.5. Attaching to a running process
32.6. Patches
33. The samba checklist
33.1. Introduction
33.2. Assumptions
33.3. The tests
33.4. Still having troubles?