source: networking/netprogs/samba3.xml@ ee792ef

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since ee792ef was ee792ef, checked in by Bruce Dubbs <bdubbs@…>, 13 years ago

Update to samba-3.6.1.
Update to stunnel-4.46.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8956 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 44.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://samba.org/samba/ftp/stable/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "5291717be0734e07dc07b6110e162e87">
10 <!ENTITY samba3-size "27.7 MB">
11 <!ENTITY samba3-buildsize "455 MB">
12 <!ENTITY samba3-time "5.1 SBU (including about 2.8 SBU to run the test suite)">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 &lfs70_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
49 </listitem>
50 <listitem>
51 <para>Download MD5 sum: &samba3-md5sum;</para>
52 </listitem>
53 <listitem>
54 <para>Download size: &samba3-size;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated disk space required: &samba3-buildsize;</para>
58 </listitem>
59 <listitem>
60 <para>Estimated build time: &samba3-time;</para>
61 </listitem>
62 </itemizedlist>
63
64 <!--<bridgehead renderas="sect3">Additional Downloads</bridgehead>
65 <itemizedlist spacing="compact">
66 <listitem>
67 <para>Required patch: <ulink
68 url="http://us3.samba.org/samba/patches/patches-&samba3-version;/spoolss.diff"/></para>
69 </listitem>
70 </itemizedlist> -->
71
72 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
73
74 <bridgehead renderas="sect4">Optional</bridgehead>
75 <para role="optional"><xref linkend="popt"/>,
76 <xref linkend="linux-pam"/>,
77 <xref linkend="cups"/>,
78 <xref linkend="openldap"/>,
79 <xref linkend="gamin"/>,
80 <xref linkend="acl"/>,
81 <xref linkend="xfs"/>,
82 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
83 <xref linkend="python"/> (used only in parts of the test suite),
84 <ulink url="http://tdb.samba.org/">tdb</ulink> (version 1.2.1),
85 <xref linkend="libcap2"/>,
86 <ulink url="http://www.nongnu.org/libunwind/">libunwind</ulink>,
87 <!-- <ulink url="http://people.redhat.com/dhowells/keyutils/">keyutils</ulink>
88 (required to build the <command>cifs.upcall</command> program), -->
89 <xref linkend="avahi"/>,
90 <ulink url="http://www.openafs.org/">OpenAFS</ulink>,
91 and <ulink url="http://valgrind.org/">Valgrind</ulink> (optionally
92 used by the test suite)</para>
93
94 <para>You will need to install one of the kerberos packages if you plan
95 on using your system to join a Windows NT domain.</para>
96
97 <bridgehead renderas="sect4">Optional for Samba4 Support</bridgehead>
98 <para role="optional"><xref linkend="gnutls"/> (recommended),
99 <xref linkend="python"/>, and
100 <xref linkend="sqlite"/></para>
101
102 <para condition="html" role="usernotes">User Notes:
103 <ulink url="&blfs-wiki;/samba3"/></para>
104
105 </sect2>
106
107 <sect2 role="installation">
108 <title>Installation of Samba</title>
109
110 <note>
111 <para>If you wish to run the test suite after the binaries are built,
112 you must add the <option>--enable-socket-wrapper</option> parameter to
113 the <command>configure</command> script below. You may want to run
114 <command>configure</command> with the <option>--help</option> parameter
115 first. There may be other parameters needed to take advantage of
116 optional dependencies.</para>
117 </note>
118
119 <para>Install <application>Samba</application> by running the following
120 commands:</para>
121
122<screen><userinput>cd source3 &amp;&amp;
123
124./configure \
125 --prefix=/usr \
126 --sysconfdir=/etc \
127 --localstatedir=/var \
128 --with-piddir=/run \
129 --with-pammodulesdir=/lib/security \
130 --with-fhs \
131 --enable-nss-wrapper \
132 --enable-socket-wrapper &amp;&amp;
133make</userinput></screen>
134
135<!-- - -enable-socket-wrapper for tests -->
136
137 <para>To test the results, issue: <command>make test</command>. If you have
138 <application>Linux-PAM</application> installed and built the PAM library
139 modules, you can perform a dlopen test by issuing:
140 <command>make test_pam_modules</command>.</para>
141
142 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
143
144<screen role="root"><userinput>make install &amp;&amp;
145
146install -v -m755 ../nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
147ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
148ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
149
150install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
151
152if [ -d /etc/openldap/schema ]; then
153 install -v -m644 ../examples/LDAP/README \
154 /etc/openldap/schema/README.LDAP &amp;&amp;
155 install -v -m644 ../examples/LDAP/samba* \
156 /etc/openldap/schema &amp;&amp;
157 install -v -m755 ../examples/LDAP/{convert*,get*,ol*} \
158 /etc/openldap/schema &amp;&amp;
159fi &amp;&amp;
160
161install -v -m755 -d /usr/share/doc/samba-&samba3-version; &amp;&amp;
162install -v -m644 ../docs/*.pdf \
163 /usr/share/doc/samba-&samba3-version; &amp;&amp;
164ln -v -s ../../samba/swat /usr/share/doc/samba-&samba3-version;</userinput></screen>
165
166 </sect2>
167
168 <sect2 role="commands">
169 <title>Command Explanations</title>
170
171 <para><option>--enable-merged-build</option>: Use this parameter to build
172 the (alpha) Samba4 components (GnuTLS is recommended).</para>
173
174 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
175 file directory to avoid the default of
176 <filename class="directory">/usr/etc</filename>.</para>
177
178 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
179 data directory to avoid the default of
180 <filename class="directory">/usr/var</filename>.</para>
181
182 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
183 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
184
185 <para><parameter>--enable-nss-wrapper</parameter>: Builds the nss-wrapper
186 library.</para>
187
188 <para><parameter>--enable-socket-wrapper</parameter>: This options is
189 required to run the test suite.</para>
190
191 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
192 The nss libraries are not installed by default. If you intend to use
193 winbindd for Windows NT domain authentication, and/or WINS name resolution,
194 you need these libraries.</para>
195
196 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
197 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
198 These symlinks are required by <application>Glibc</application> to use the
199 NSS libraries.</para>
200
201 <para><command>if [ -d /etc/openldap/schema ]; then ...; fi</command>:
202 These commands are used to see if you have an OpenLDAP installation, and if
203 so, they copy sample Samba schemas to the OpenLDAP
204 <filename class='directory'>schema</filename> directory.</para>
205
206 <para><command>install -v -m644 ../examples/smb.conf.default
207 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
208 file into <filename>/etc/samba</filename>. This sample configuration will
209 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
210 make the appropriate changes for your installation. See the configuration
211 section for minimum values which must be set.</para>
212
213 </sect2>
214
215 <sect2 role="configuration">
216 <title>Configuring Samba</title>
217
218 <sect3 id="samba3-config">
219 <title>Config Files</title>
220
221 <para>/etc/samba/smb.conf</para>
222
223 <indexterm zone="samba3 samba3-config">
224 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
225 </indexterm>
226
227 </sect3>
228<!-- mount.cifs is now in the separate cifs-utils package
229 <sect3>
230 <title>Mounting Shares by Unprivileged Users</title>
231
232 <para>If it is desired for unprivileged users to directly mount (and
233 unmount) CIFS shares, the <command>mount.cifs</command> and
234 <command>umount.cifs</command> commands must be setuid
235 <systemitem class='username'>root</systemitem>. Note that users can
236 only mount CIFS shares on a mount point owned by that user (requires
237 write access also). If desired, change these programs to setuid
238 <systemitem class='username'>root</systemitem> by issuing the following
239 command as the <systemitem class='username'>root</systemitem>
240 user:</para>
241
242<screen role="root"><userinput>chmod -v 4755 /usr/sbin/{,u}mount.cifs</userinput></screen>
243
244 </sect3>
245-->
246 <sect3>
247 <title>Printing to SMB Clients</title>
248
249 <para>If you use <application>CUPS</application> for print services,
250 and you wish to print to a printer attached to an SMB client, you
251 need to create an SMB backend device. To create the device, issue the
252 following command as the <systemitem class="username">root</systemitem>
253 user:</para>
254
255<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
256
257 </sect3>
258
259 <sect3>
260 <title>Configuration Information</title>
261
262 <para>Due to the complexity and the many various uses for
263 <application>Samba</application>, complete configuration for all the
264 package's capabilities is well beyond the scope of the BLFS book. This
265 section provides instructions to configure the
266 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
267 The complete contents of <filename>/etc/samba/smb.conf</filename> will
268 depend on the purpose of <application>Samba</application>
269 installation.</para>
270
271 <note>
272 <para>You may find it easier to copy the configuration parameters shown
273 below into an empty <filename>/etc/samba/smb.conf</filename> file
274 instead of copying and editing the default file as mentioned in the
275 <quote>Command Explanations</quote> section. How you create/edit the
276 <filename>/etc/samba/smb.conf</filename> file will be left up to
277 you. Do ensure the file is only writeable by the
278 <systemitem class="username">root</systemitem> user (mode 644).</para>
279 </note>
280
281 <sect4>
282 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
283
284 <para>Choose this variant if you only want to transfer files using
285 <command>smbclient</command>, mount Windows shares and print to Windows
286 printers, and don't want to share your files and printers to Windows
287 machines.</para>
288
289 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
290 three parameters is sufficient:</para>
291
292<screen role='root'><literal>[global]
293 workgroup = <replaceable>MYGROUP</replaceable>
294 dos charset = <replaceable>cp850</replaceable>
295 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
296
297 <para>The values in this example specify that the computer belongs to a
298 Windows workgroup named
299 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
300 <quote><replaceable>cp850</replaceable></quote> character set on the
301 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
302 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
303 encoding on the disk. Adjust these values appropriately for your
304 installation. The <quote>unix charset</quote> value must be the same as
305 the output of <command>locale charmap</command> when executed with the
306 <envar>LANG</envar> variable set to your preferred locale, otherwise the
307 <command>ls</command> command may not display correct filenames of
308 downloaded files.</para>
309
310 <para>There is no need to run any <application>Samba</application>
311 servers in this scenario, thus you don't need to install the provided
312 bootscripts.</para>
313
314 </sect4>
315
316 <sect4>
317 <title>Scenario 2: Standalone File/Print Server</title>
318
319 <para>Choose this variant if you want to share your files and printers
320 to Windows machines in your workgroup in addition to the capabilities
321 described in Scenario 1.</para>
322
323 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
324 file may be a good template to start from. Also add
325 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
326 to the <quote>[global]</quote> section as described in Scenario 1 in
327 order to prevent filename corruption.</para>
328
329 <para>The following configuration file creates a separate share for each
330 user's home directory and also makes all printers available to Windows
331 machines:</para>
332
333<screen role='root'><literal>[global]
334 workgroup = <replaceable>MYGROUP</replaceable>
335 dos charset = <replaceable>cp850</replaceable>
336 unix charset = <replaceable>ISO-8859-1</replaceable>
337
338[homes]
339 comment = Home Directories
340 browseable = no
341 writable = yes
342
343[printers]
344 comment = All Printers
345 path = /var/spool/samba
346 browseable = no
347 guest ok = no
348 printable = yes</literal></screen>
349
350 <para>Other parameters you may wish to customize in the
351 <quote>[global]</quote> section include:</para>
352
353<screen role='root'><literal> server string =
354 security =
355 hosts allow =
356 load printers =
357 log file =
358 max log size =
359 socket options =
360 local master =</literal></screen>
361
362 <para>Reference the comments in the
363 <filename>/etc/samba/smb.conf.default</filename> file for information
364 regarding these parameters.</para>
365
366 <para>Since the <command>smbd</command> and <command>nmbd</command>
367 daemons are needed in this case, install the <filename>samba</filename>
368 bootscript. Be sure to run <command>smbpasswd</command> (with the
369 <option>-a</option> option to add users) to enable and
370 set passwords for all accounts that need
371 <application>Samba</application> access, or use the SWAT web interface
372 (see below) to do the same. Using the default
373 <application>Samba</application> passdb backend, any user you attempt
374 to add will also be required to exist in the
375 <filename>/etc/passwd</filename> file.</para>
376
377 </sect4>
378
379 <sect4>
380 <title>Advanced Requirements</title>
381
382 <para>More complex scenarios involving domain control or membership are
383 possible if the right flags are passed to the ./configure script when
384 the package is built. Such setups are advanced topics and cannot be
385 adequately covered in BLFS. Many complete books have been written on
386 these topics alone. It should be noted, however, that a
387 <application>Samba</application> BDC cannot be used as a fallback
388 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
389 fallback for a <application>Samba</application> PDC. Also in some
390 domain membership scenarios, the <command>winbindd</command> daemon and
391 the corresponding bootscript are needed.</para>
392
393 <para>There is quite a bit of documentation available which covers many
394 of these advanced configurations. Point your web browser to the links
395 below to view some of the documentation included with the
396 <application>Samba</application> package:</para>
397
398 <itemizedlist spacing='compact'>
399 <listitem>
400 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
401 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
402 </listitem>
403 <listitem>
404 <para>The Official Samba HOWTO and Reference Guide <ulink
405 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
406 </para>
407 </listitem>
408 <listitem>
409 <para>Samba-3 by Example
410 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
411 </para>
412 </listitem>
413 <listitem>
414 <para>The Samba-3 man Pages
415 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
416 </listitem>
417 </itemizedlist>
418
419 </sect4>
420
421 </sect3>
422
423 <sect3 id="samba3-swat-config">
424 <title>Configuring SWAT</title>
425
426 <para>The built in SWAT (<application>Samba</application> Web
427 Administration Tool) utility can be used for basic configuration of
428 the <application>Samba</application> installation, but because it may
429 be inconvenient, undesirable or perhaps even impossible to gain
430 access to the console, BLFS recommends setting up access to SWAT using
431 <application>Stunnel</application>. Without
432 <application>Stunnel</application>, the
433 <systemitem class="username">root</systemitem> password is transmitted
434 in clear text over the wire, and is considered an unacceptable security
435 risk. After considering the security implications of using SWAT without
436 <application>Stunnel</application>, and you still wish to implement SWAT
437 without it, instructions are provided at this end of this section.</para>
438
439 <indexterm zone="samba3 samba3-swat-config">
440 <primary sortas="g-SWAT">SWAT</primary>
441 </indexterm>
442
443 <sect4>
444 <title>Setting up SWAT using Stunnel</title>
445
446 <para>First install, or ensure you have already installed, the
447 <xref linkend="stunnel"/> package.</para>
448
449 <para>Next you must add entries to <filename>/etc/services</filename>
450 and modify the <command>inetd</command>/<command>xinetd</command>
451 configuration.</para>
452
453 <indexterm zone="samba3 samba3-swat-config">
454 <primary sortas="e-etc-services">/etc/services</primary>
455 </indexterm>
456
457 <indexterm zone="samba3 samba3-swat-config">
458 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
459 </indexterm>
460
461 <indexterm zone="samba3 samba3-swat-config">
462 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
463 </indexterm>
464
465 <para>Add swat and swat_tunnel entries to
466 <filename>/etc/services</filename> with the following commands issued
467 as the <systemitem class="username">root</systemitem> user:</para>
468
469<screen role="root"><userinput>echo "swat 904/tcp" &gt;&gt; /etc/services &amp;&amp;
470echo "swat_tunnel 905/tcp" &gt;&gt; /etc/services</userinput></screen>
471
472 <para>If <command>inetd</command> is used, the following command will
473 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
474 user <systemitem class="username">root</systemitem>):</para>
475
476<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
477 &gt;&gt; /etc/inetd.conf</userinput></screen>
478
479 <para>Issue a <command>killall -HUP inetd</command> to reread the
480 changed <filename>inetd.conf</filename> file.</para>
481
482 <para>If you use <command>xinetd</command>, the following command will
483 create the <application>Samba</application> file as
484 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
485 or remove the <quote>only_from</quote> line to include the desired
486 host[s]):</para>
487
488<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
489<literal># Begin /etc/xinetd.d/swat_tunnel
490
491service swat_tunnel
492{
493 port = 905
494 socket_type = stream
495 wait = no
496 only_from = 127.0.0.1
497 user = root
498 server = /usr/sbin/swat
499 log_on_failure += USERID
500}
501
502# End /etc/xinetd.d/swat_tunnel</literal>
503EOF</userinput></screen>
504
505 <indexterm zone="samba3 samba3-swat-config">
506 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
507 </indexterm>
508
509 <para>Issue a <command>killall -HUP xinetd</command> to read the new
510 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
511
512 <para>Next, you must add an entry for the swat service to the
513 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
514 <systemitem class="username">root</systemitem>):</para>
515
516 <indexterm zone="samba3 samba3-swat-config">
517 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
518 </indexterm>
519
520<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
521<literal>[swat]
522accept = 904
523connect = 905
524TIMEOUTclose = 1</literal>
525
526EOF</userinput></screen>
527
528 <para>Restart the <command>stunnel</command> daemon using the following
529 command as the <systemitem class="username">root</systemitem> user:</para>
530
531<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
532
533 <para>SWAT can be launched by pointing your web browser to
534 <uri>https://<replaceable>&lt;CA_DN_field&gt;</replaceable>:904</uri>.
535 Substitute the hostname listed in the DN field of the CA certificate
536 used with <application>Stunnel</application> for
537 <replaceable>&lt;CA_DN_field&gt;</replaceable>.</para>
538
539 </sect4>
540
541 <sect4>
542 <title>Setting up SWAT without Stunnel</title>
543
544 <warning>
545 <para>BLFS does not recommend using these procedures because of the
546 security risk involved. However, in a home network environment and
547 disclosure of the <systemitem class='username'>root</systemitem>
548 password is an acceptable risk, the following
549 instructions are provided for your convenience.</para>
550 </warning>
551
552 <para>Add a swat entry to <filename>/etc/services</filename> with the
553 following command issued as the
554 <systemitem class='username'>root</systemitem> user:</para>
555
556<screen role='root'><userinput>echo "swat 904/tcp" &gt;&gt; /etc/services</userinput></screen>
557
558 <para>If <command>inetd</command> is used, the following command
559 issued as the <systemitem class='username'>root</systemitem> user will
560 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
561
562<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
563 &gt;&gt; /etc/inetd.conf</userinput></screen>
564
565 <para>Issue a <command>killall -HUP inetd</command> to reread the
566 changed <filename>inetd.conf</filename> file.</para>
567
568 <para>If <command>xinetd</command> is used, the following command
569 issued as the <systemitem class='username'>root</systemitem> user
570 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
571
572<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
573<literal># Begin /etc/xinetd.d/swat
574
575service swat
576{
577 port = 904
578 socket_type = stream
579 wait = no
580 only_from = 127.0.0.1
581 user = root
582 server = /usr/sbin/swat
583 log_on_failure += USERID
584}
585
586# End /etc/xinetd.d/swat</literal>
587EOF</userinput></screen>
588
589 <para>Issue a <command>killall -HUP xinetd</command> to read the
590 new <filename>/etc/xinetd.d/swat</filename> file.</para>
591
592 <para>SWAT can be launched by pointing your web browser to
593 http://localhost:904.</para>
594
595 </sect4>
596
597 </sect3>
598
599 <sect3>
600 <title/>
601
602 <note>
603 <para>If you linked <application>Linux-PAM</application> into the
604 <application>Samba</application> build, you'll need to create an
605 <filename>/etc/pam.d/samba</filename> file.</para>
606 </note>
607
608 <indexterm zone="samba3 samba3-swat-config">
609 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
610 </indexterm>
611
612 </sect3>
613
614 <sect3 id="samba3-init">
615 <title>Boot Script</title>
616
617 <para>For your convenience, boot scripts have been provided for
618 <application>Samba</application>. There are two included in the
619 <xref linkend="bootscripts"/> package. The first,
620 <filename>samba</filename>, will start the <command>smbd</command>
621 and <command>nmbd</command> daemons needed to provide SMB/CIFS
622 services. The second script, <filename>winbind</filename>, starts
623 the <command>winbindd</command> daemon, used for providing Windows
624 domain services to Linux clients.</para>
625
626 <indexterm zone="samba3 samba3-init">
627 <primary sortas="f-samba">samba</primary>
628 </indexterm>
629
630 <indexterm zone="samba3 samba3-init">
631 <primary sortas="f-winbind">winbind</primary>
632 </indexterm>
633
634 <para>The default <application>Samba</application> installation uses the
635 <systemitem class='username'>nobody</systemitem> user for guest access
636 to the server. This can be overridden by setting the
637 <option>guest account =</option> parameter in the
638 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
639 <option>guest account =</option> parameter, ensure this user exists in
640 the <filename>/etc/passwd</filename> file. To use the default user,
641 issue the following commands as the
642 <systemitem class='username'>root</systemitem> user:</para>
643
644<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
645useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
646 -s /bin/false -u 99 nobody</userinput></screen>
647
648 <para>Install the <filename>samba</filename> script with the following
649 command issued as the <systemitem class="username">root</systemitem>
650 user:</para>
651
652<screen role="root"><userinput>make install-samba</userinput></screen>
653
654 <para>If you also need the <filename>winbind</filename>
655 script:</para>
656
657<screen role="root"><userinput>make install-winbind</userinput></screen>
658
659 </sect3>
660
661 </sect2>
662
663 <sect2 role="content">
664 <title>Contents</title>
665
666 <segmentedlist>
667 <segtitle>Installed Programs</segtitle>
668 <segtitle>Installed Libraries</segtitle>
669 <segtitle>Installed Directories</segtitle>
670
671 <seglistitem>
672 <seg>cifs.upcall, eventlogadm, findsmb, ldbadd, ldbdel, ldbedit,
673 ldbmodify, ldbrename, ldbsearch, mount.cifs, net, nmbd,
674 nmblookup, ntlm_auth, pdbedit, profiles, rpcclient, sharesec, smbcacls,
675 smbclient, smbcontrol, smbcquotas, smbd, smbget, smbpasswd, smbspool,
676 smbstatus, smbtar, smbtree, swat, testparm, umount.cifs, wbinfo,
677 winbindd, and (if not using system TDB) tdbbackup, tdbdump, and
678 tdbtool</seg>
679 <seg>libnss_winbind.so, libnss_wins.so, libnetapi.so, libsmbclient.so,
680 libsmbsharemodes.so, libtalloc.so, libwbclient.so, the pam_winbind.so
681 and pam_smbpass.so PAM libraries, and assorted character set,
682 filesystem and support modules.</seg>
683 <seg>/etc/samba, /usr/lib/samba, /usr/share/doc/samba-&samba3-version;,
684 /usr/share/samba, /var/lib/samba and (if configured) /var/log/samba</seg>
685 </seglistitem>
686 </segmentedlist>
687
688 <variablelist>
689 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
690 <?dbfo list-presentation="list"?>
691 <?dbhtml list-presentation="table"?>
692
693 <varlistentry id="cifs.upcall">
694 <term><command>cifs.upcall</command></term>
695 <listitem>
696 <para>is a userspace upcall helper for Common Internet File Systems
697 (CIFS)</para>
698 <indexterm zone="samba3 cifs.upcall">
699 <primary sortas="b-cifs.upcall">cifs.upcall</primary>
700 </indexterm>
701 </listitem>
702 </varlistentry>
703
704 <varlistentry id="eventlogadm">
705 <term><command>eventlogadm</command></term>
706 <listitem>
707 <para>is used to write records to eventlogs from STDIN, add the
708 specified source and DLL eventlog registry entries and display the
709 active eventlog names (from <filename>smb.conf</filename>).</para>
710 <indexterm zone="samba3 eventlogadm">
711 <primary sortas="b-eventlogadm">eventlogadm</primary>
712 </indexterm>
713 </listitem>
714 </varlistentry>
715
716 <varlistentry id="findsmb">
717 <term><command>findsmb</command></term>
718 <listitem>
719 <para>lists information about machines that respond to
720 SMB name queries on a subnet.</para>
721 <indexterm zone="samba3 findsmb">
722 <primary sortas="b-findsmb">findsmb</primary>
723 </indexterm>
724 </listitem>
725 </varlistentry>
726
727 <varlistentry id="ldbadd">
728 <term><command>ldbadd</command></term>
729 <listitem>
730 <para>is a command-line utility for adding records to an LDB
731 database.</para>
732 <indexterm zone="samba3 ldbadd">
733 <primary sortas="b-ldbadd">ldbadd</primary>
734 </indexterm>
735 </listitem>
736 </varlistentry>
737
738 <varlistentry id="ldbdel">
739 <term><command>ldbdel</command></term>
740 <listitem>
741 <para>is a command-line program for deleting LDB database
742 records.</para>
743 <indexterm zone="samba3 ldbdel">
744 <primary sortas="b-ldbdel">ldbdel</primary>
745 </indexterm>
746 </listitem>
747 </varlistentry>
748
749 <varlistentry id="ldbedit">
750 <term><command>ldbedit</command></term>
751 <listitem>
752 <para>allows you to edit LDB databases using your preferred
753 editor.</para>
754 <indexterm zone="samba3 ldbedit">
755 <primary sortas="b-ldbedit">ldbedit</primary>
756 </indexterm>
757 </listitem>
758 </varlistentry>
759
760 <varlistentry id="ldbmodify">
761 <term><command>ldbmodify</command></term>
762 <listitem>
763 <para>allows you to modify records in an LDB database.</para>
764 <indexterm zone="samba3 ldbmodify">
765 <primary sortas="b-ldbmodify">ldbmodify</primary>
766 </indexterm>
767 </listitem>
768 </varlistentry>
769
770 <varlistentry id="ldbrename">
771 <term><command>ldbrename</command></term>
772 <listitem>
773 <para>allows you to edit LDB databases using your preferred
774 editor.</para>
775 <indexterm zone="samba3 ldbrename">
776 <primary sortas="b-ldbrename">ldbrename</primary>
777 </indexterm>
778 </listitem>
779 </varlistentry>
780
781 <varlistentry id="ldbsearch">
782 <term><command>ldbsearch</command></term>
783 <listitem>
784 <para>searches an LDB database for records matching a specified
785 expression.</para>
786 <indexterm zone="samba3 ldbsearch">
787 <primary sortas="b-ldbsearch">ldbsearch</primary>
788 </indexterm>
789 </listitem>
790 </varlistentry>
791
792 <varlistentry id="mount.cifs">
793 <term><command>mount.cifs</command></term>
794 <listitem>
795 <para>mounts a Linux CIFS filesystem. It is usually invoked
796 indirectly by the <command>mount</command> command when using the
797 <option>-t cifs</option> option.</para>
798 <indexterm zone="samba3 mount.cifs">
799 <primary sortas="b-mount.cifs">mount.cifs</primary>
800 </indexterm>
801 </listitem>
802 </varlistentry>
803
804 <varlistentry id="net">
805 <term><command>net</command></term>
806 <listitem>
807 <para>is a tool for administration of
808 <application>Samba</application> and remote CIFS servers, similar
809 to the <command>net</command> utility for DOS/Windows.</para>
810 <indexterm zone="samba3 net">
811 <primary sortas="b-net">net</primary>
812 </indexterm>
813 </listitem>
814 </varlistentry>
815
816 <varlistentry id="nmbd">
817 <term><command>nmbd</command></term>
818 <listitem>
819 <para>is the <application>Samba</application>
820 NetBIOS name server.</para>
821 <indexterm zone="samba3 nmbd">
822 <primary sortas="b-nmbd">nmbd</primary>
823 </indexterm>
824 </listitem>
825 </varlistentry>
826
827 <varlistentry id="nmblookup">
828 <term><command>nmblookup</command></term>
829 <listitem>
830 <para>is used to query NetBIOS names and map
831 them to IP addresses.</para>
832 <indexterm zone="samba3 nmblookup">
833 <primary sortas="b-nmblookup">nmblookup</primary>
834 </indexterm>
835 </listitem>
836 </varlistentry>
837
838 <varlistentry id="ntlm_auth">
839 <term><command>ntlm_auth</command></term>
840 <listitem>
841 <para>is a tool to allow external access to Winbind's
842 NTLM authentication function.</para>
843 <indexterm zone="samba3 ntlm_auth">
844 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
845 </indexterm>
846 </listitem>
847 </varlistentry>
848
849 <varlistentry id="pdbedit">
850 <term><command>pdbedit</command></term>
851 <listitem>
852 <para>is a tool used to manage the SAM database.</para>
853 <indexterm zone="samba3 pdbedit">
854 <primary sortas="b-pdbedit">pdbedit</primary>
855 </indexterm>
856 </listitem>
857 </varlistentry>
858
859 <varlistentry id="profiles">
860 <term><command>profiles</command></term>
861 <listitem>
862 <para>is a utility that reports and changes SIDs in Windows
863 registry files. It currently only supports Windows NT.</para>
864 <indexterm zone="samba3 profiles">
865 <primary sortas="b-profiles">profiles</primary>
866 </indexterm>
867 </listitem>
868 </varlistentry>
869
870 <varlistentry id="rpcclient">
871 <term><command>rpcclient</command></term>
872 <listitem>
873 <para>is used to execute MS-RPC client side functions.</para>
874 <indexterm zone="samba3 rpcclient">
875 <primary sortas="b-rpcclient">rpcclient</primary>
876 </indexterm>
877 </listitem>
878 </varlistentry>
879
880 <varlistentry id="sharesec">
881 <term><command>sharesec</command></term>
882 <listitem>
883 <para>manipulates share ACL permissions on SMB file shares.</para>
884 <indexterm zone="samba3 sharesec">
885 <primary sortas="b-sharesec">sharesec</primary>
886 </indexterm>
887 </listitem>
888 </varlistentry>
889
890 <varlistentry id="smbcacls">
891 <term><command>smbcacls</command></term>
892 <listitem>
893 <para>is used to manipulate Windows NT access control lists.</para>
894 <indexterm zone="samba3 smbcacls">
895 <primary sortas="b-smbcacls">smbcacls</primary>
896 </indexterm>
897 </listitem>
898 </varlistentry>
899
900 <varlistentry id="smbclient">
901 <term><command>smbclient</command></term>
902 <listitem>
903 <para>is a SMB/CIFS access utility, similar to FTP.</para>
904 <indexterm zone="samba3 smbclient">
905 <primary sortas="b-smbclient">smbclient</primary>
906 </indexterm>
907 </listitem>
908 </varlistentry>
909
910 <varlistentry id="smbcontrol">
911 <term><command>smbcontrol</command></term>
912 <listitem>
913 <para>is used to control running <command>smbd</command>,
914 <command>nmbd</command> and <command>winbindd</command>
915 daemons.</para>
916 <indexterm zone="samba3 smbcontrol">
917 <primary sortas="b-smbcontrol">smbcontrol</primary>
918 </indexterm>
919 </listitem>
920 </varlistentry>
921
922 <varlistentry id="smbcquotas">
923 <term><command>smbcquotas</command></term>
924 <listitem>
925 <para>is used to manipulate Windows NT quotas on
926 SMB file shares.</para>
927 <indexterm zone="samba3 smbcquotas">
928 <primary sortas="b-smbcquotas">smbcquotas</primary>
929 </indexterm>
930 </listitem>
931 </varlistentry>
932
933 <varlistentry id="smbd">
934 <term><command>smbd</command></term>
935 <listitem>
936 <para>is the main <application>Samba</application> daemon which
937 provides SMB/CIFS services to clients.</para>
938 <indexterm zone="samba3 smbd">
939 <primary sortas="b-smbd">smbd</primary>
940 </indexterm>
941 </listitem>
942 </varlistentry>
943
944 <varlistentry id="smbget">
945 <term><command>smbget</command></term>
946 <listitem>
947 <para>is a simple utility with <command>wget</command>-like
948 semantics, that can download files from SMB servers. You can specify
949 the files you would like to download on the command-line.</para>
950 <indexterm zone="samba3 smbget">
951 <primary sortas="b-smbget">smbget</primary>
952 </indexterm>
953 </listitem>
954 </varlistentry>
955
956 <varlistentry id="smbpasswd">
957 <term><command>smbpasswd</command></term>
958 <listitem>
959 <para>changes a user's <application>Samba</application>
960 password.</para>
961 <indexterm zone="samba3 smbpasswd">
962 <primary sortas="b-smbpasswd">smbpasswd</primary>
963 </indexterm>
964 </listitem>
965 </varlistentry>
966
967 <varlistentry id="smbspool">
968 <term><command>smbspool</command></term>
969 <listitem>
970 <para>sends a print job to an SMB printer.</para>
971 <indexterm zone="samba3 smbspool">
972 <primary sortas="b-smbspool">smbspool</primary>
973 </indexterm>
974 </listitem>
975 </varlistentry>
976
977 <varlistentry id="smbstatus">
978 <term><command>smbstatus</command></term>
979 <listitem>
980 <para>reports current <application>Samba</application>
981 connections.</para>
982 <indexterm zone="samba3 smbstatus">
983 <primary sortas="b-smbstatus">smbstatus</primary>
984 </indexterm>
985 </listitem>
986 </varlistentry>
987
988 <varlistentry id="smbtar">
989 <term><command>smbtar</command></term>
990 <listitem>
991 <para>is a shell script used for backing up SMB/CIFS shares
992 directly to Linux tape drives or a file.</para>
993 <indexterm zone="samba3 smbtar">
994 <primary sortas="b-smbtar">smbtar</primary>
995 </indexterm>
996 </listitem>
997 </varlistentry>
998
999 <varlistentry id="smbtree">
1000 <term><command>smbtree</command></term>
1001 <listitem>
1002 <para>is a text-based SMB network browser.</para>
1003 <indexterm zone="samba3 smbtree">
1004 <primary sortas="b-smbtree">smbtree</primary>
1005 </indexterm>
1006 </listitem>
1007 </varlistentry>
1008
1009 <varlistentry id="swat">
1010 <term><command>swat</command></term>
1011 <listitem>
1012 <para>is the <application>Samba</application> Web Administration
1013 Tool.</para>
1014 <indexterm zone="samba3 swat">
1015 <primary sortas="b-swat">swat</primary>
1016 </indexterm>
1017 </listitem>
1018 </varlistentry>
1019
1020 <varlistentry id="tdbbackup">
1021 <term><command>tdbbackup</command></term>
1022 <listitem>
1023 <para>is a tool for backing up or validating the integrity of
1024 <application>Samba</application> <filename>.tdb</filename>
1025 files.</para>
1026 <indexterm zone="samba3 tdbbackup">
1027 <primary sortas="b-tdbbackup">tdbbackup</primary>
1028 </indexterm>
1029 </listitem>
1030 </varlistentry>
1031
1032 <varlistentry id="tdbdump">
1033 <term><command>tdbdump</command></term>
1034 <listitem>
1035 <para> is a tool used to print the contents of a
1036 <application>Samba</application> <filename>.tdb</filename>
1037 file.</para>
1038 <indexterm zone="samba3 tdbdump">
1039 <primary sortas="b-tdbdump">tdbdump</primary>
1040 </indexterm>
1041 </listitem>
1042 </varlistentry>
1043
1044 <varlistentry id="tdbtool">
1045 <term><command>tdbtool</command></term>
1046 <listitem>
1047 <para>is a tool which allows simple database manipulation from the
1048 command line.</para>
1049 <indexterm zone="samba3 tdbtool">
1050 <primary sortas="b-tdbtool">tdbtool</primary>
1051 </indexterm>
1052 </listitem>
1053 </varlistentry>
1054
1055 <varlistentry id="testparm">
1056 <term><command>testparm</command></term>
1057 <listitem>
1058 <para>checks an <filename>smb.conf</filename> file for proper
1059 syntax.</para>
1060 <indexterm zone="samba3 testparm">
1061 <primary sortas="b-testparm">testparm</primary>
1062 </indexterm>
1063 </listitem>
1064 </varlistentry>
1065
1066 <varlistentry id="umount.cifs">
1067 <term><command>umount.cifs</command></term>
1068 <listitem>
1069 <para>is used by normal, non-<systemitem
1070 class="username">root</systemitem> users, to
1071 <command>unmount</command> their own Common Internet File System
1072 (CIFS) mounts.</para>
1073 <indexterm zone="samba3 umount.cifs">
1074 <primary sortas="b-umount.cifs">umount.cifs</primary>
1075 </indexterm>
1076 </listitem>
1077 </varlistentry>
1078
1079 <varlistentry id="wbinfo">
1080 <term><command>wbinfo</command></term>
1081 <listitem>
1082 <para>queries a running <command>winbindd</command> daemon.</para>
1083 <indexterm zone="samba3 wbinfo">
1084 <primary sortas="b-wbinfo">wbinfo</primary>
1085 </indexterm>
1086 </listitem>
1087 </varlistentry>
1088
1089 <varlistentry id="winbindd">
1090 <term><command>winbindd</command></term>
1091 <listitem>
1092 <para>resolves names from Windows NT servers.</para>
1093 <indexterm zone="samba3 winbindd">
1094 <primary sortas="b-winbindd">winbindd</primary>
1095 </indexterm>
1096 </listitem>
1097 </varlistentry>
1098
1099 <varlistentry id="libnss_winbind">
1100 <term><filename class='libraryfile'>libnss_winbind.so</filename></term>
1101 <listitem>
1102 <para>provides Name Service Switch API functions for resolving names
1103 from NT servers.</para>
1104 <indexterm zone="samba3 libnss_winbind">
1105 <primary sortas="c-libnss_winbind">libnss_winbind.so</primary>
1106 </indexterm>
1107 </listitem>
1108 </varlistentry>
1109
1110 <varlistentry id="libnss_wins">
1111 <term><filename class='libraryfile'>libnss_wins.so</filename></term>
1112 <listitem>
1113 <para>provides API functions for Samba's implementation of the
1114 Windows Internet Naming Service.</para>
1115 <indexterm zone="samba3 libnss_wins">
1116 <primary sortas="c-libnss_wins">libnss_wins.so</primary>
1117 </indexterm>
1118 </listitem>
1119 </varlistentry>
1120
1121 <varlistentry id="libnetapi">
1122 <term><filename class='libraryfile'>libnetapi.so</filename></term>
1123 <listitem>
1124 <para>provides the API functions for the administration tools used
1125 for Samba and remote CIFS servers.</para>
1126 <indexterm zone="samba3 libnetapi">
1127 <primary sortas="c-libnetapi">libnetapi.so</primary>
1128 </indexterm>
1129 </listitem>
1130 </varlistentry>
1131
1132 <varlistentry id="libsmbclient">
1133 <term><filename class='libraryfile'>libsmbclient.so</filename></term>
1134 <listitem>
1135 <para>provides the API functions for the Samba SMB client tools.</para>
1136 <indexterm zone="samba3 libsmbclient">
1137 <primary sortas="c-libsmbclient">libsmbclient.so</primary>
1138 </indexterm>
1139 </listitem>
1140 </varlistentry>
1141
1142 <varlistentry id="libsmbsharemodes">
1143 <term><filename class='libraryfile'>libsmbsharemodes.so</filename></term>
1144 <listitem>
1145 <para>provides API functions for accessing SMB share modes
1146 (locks etc.)</para>
1147 <indexterm zone="samba3 libsmbsharemodes">
1148 <primary sortas="c-libsmbsharemodes">libsmbsharemodes.so</primary>
1149 </indexterm>
1150 </listitem>
1151 </varlistentry>
1152
1153 <varlistentry id="libwbclient">
1154 <term><filename class='libraryfile'>libwbclient.so</filename></term>
1155 <listitem>
1156 <para>provides API functions for Windows domain client services.</para>
1157 <indexterm zone="samba3 libwbclient">
1158 <primary sortas="c-libwbclient">libwbclient.so</primary>
1159 </indexterm>
1160 </listitem>
1161 </varlistentry>
1162
1163 </variablelist>
1164
1165 </sect2>
1166
1167</sect1>
Note: See TracBrowser for help on using the repository browser.