source: networking/netprogs/samba3.xml@ 97926ab

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 97926ab was 97926ab, checked in by Bruce Dubbs <bdubbs@…>, 12 years ago

Update to samba-3.6.7

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@10591 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 41.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://ftp.samba.org/pub/samba/stable/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/stable/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "b23be56c15dd52f64eb7ba54c0ea1ed5">
10 <!ENTITY samba3-size "32.5 MB">
11 <!ENTITY samba3-buildsize "460 MB">
12 <!ENTITY samba3-time "2.2 SBU (add about 2.9 SBU to run the test suite)">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 &lfs72_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
49 </listitem>
50 <listitem>
51 <para>Download MD5 sum: &samba3-md5sum;</para>
52 </listitem>
53 <listitem>
54 <para>Download size: &samba3-size;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated disk space required: &samba3-buildsize;</para>
58 </listitem>
59 <listitem>
60 <para>Estimated build time: &samba3-time;</para>
61 </listitem>
62 </itemizedlist>
63
64 <!--<bridgehead renderas="sect3">Additional Downloads</bridgehead>
65 <itemizedlist spacing="compact">
66 <listitem>
67 <para>Required patch: <ulink
68 url="http://us3.samba.org/samba/patches/patches-&samba3-version;/spoolss.diff"/></para>
69 </listitem>
70 </itemizedlist> -->
71
72 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
73
74 <bridgehead renderas="sect4">Required</bridgehead>
75 <para role="required"><xref linkend="libtirpc"/></para>
76
77 <bridgehead renderas="sect4">Optional</bridgehead>
78 <para role="optional"><xref linkend="popt"/>,
79 <xref linkend="linux-pam"/>,
80 <xref linkend="cups"/>,
81 <xref linkend="openldap"/>,
82 <xref linkend="gamin"/>,
83 <xref linkend="acl"/>,
84 <xref linkend="xfs"/>,
85 <xref linkend="mitkrb"/>,
86 <xref linkend="python2"/> (used only in parts of the test suite),
87 <ulink url="http://tdb.samba.org/">tdb</ulink> (version 1.2.1),
88 <xref linkend="libcap2"/>,
89 <ulink url="http://www.nongnu.org/libunwind/">libunwind</ulink>,
90 <!-- <ulink url="http://people.redhat.com/dhowells/keyutils/">keyutils</ulink>
91 (required to build the <command>cifs.upcall</command> program), -->
92 <xref linkend="avahi"/>,
93 <ulink url="http://www.openafs.org/">OpenAFS</ulink>,
94 and <ulink url="http://valgrind.org/">Valgrind</ulink> (optionally
95 used by the test suite)</para>
96
97 <para>You will need to install one of the kerberos packages if you plan
98 on using your system to join a Windows NT domain.</para>
99
100 <bridgehead renderas="sect4">Optional for Samba4 Support</bridgehead>
101 <para role="optional"><xref linkend="gnutls"/> (recommended),
102 <xref linkend="python2"/>, and
103 <xref linkend="sqlite"/></para>
104
105 <para condition="html" role="usernotes">User Notes:
106 <ulink url="&blfs-wiki;/samba3"/></para>
107
108 </sect2>
109
110 <sect2 role="installation">
111 <title>Installation of Samba</title>
112
113 <note>
114 <para>If you wish to run the test suite after the binaries are built,
115 you must add the <option>--enable-socket-wrapper</option> parameter to
116 the <command>configure</command> script below. You may want to run
117 <command>configure</command> with the <option>--help</option> parameter
118 first. There may be other parameters needed to take advantage of
119 optional dependencies.</para>
120 </note>
121
122 <para>Install <application>Samba</application> by running the following
123 commands:</para>
124
125<screen><userinput>cd source3 &amp;&amp;
126
127./configure \
128 --prefix=/usr \
129 --sysconfdir=/etc \
130 --localstatedir=/var \
131 --with-piddir=/run \
132 --with-pammodulesdir=/lib/security \
133 --with-fhs \
134 --enable-nss-wrapper \
135 --enable-socket-wrapper &amp;&amp;
136sed -i "s/-ldl/&amp; -ltirpc -lpthread/" Makefile &amp;&amp;
137make</userinput></screen>
138
139 <para>To test the results, issue: <command>make test</command>. If you have
140 <application>Linux-PAM</application> installed and built the PAM library
141 modules, you can perform a dlopen test by issuing:
142 <command>make test_pam_modules</command>.</para>
143
144 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
145
146<screen role="root"><userinput>make install &amp;&amp;
147
148install -v -m755 ../nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
149ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
150ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
151
152install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
153
154if [ -d /etc/openldap/schema ]; then
155 install -v -m644 ../examples/LDAP/README \
156 /etc/openldap/schema/README.LDAP &amp;&amp;
157 install -v -m644 ../examples/LDAP/samba* \
158 /etc/openldap/schema &amp;&amp;
159 install -v -m755 ../examples/LDAP/{convert*,get*,ol*} \
160 /etc/openldap/schema &amp;&amp;
161fi &amp;&amp;
162
163install -v -m755 -d /usr/share/doc/samba-&samba3-version; &amp;&amp;
164install -v -m644 ../docs/*.pdf \
165 /usr/share/doc/samba-&samba3-version; &amp;&amp;
166ln -v -s ../../samba/swat /usr/share/doc/samba-&samba3-version;</userinput></screen>
167
168 </sect2>
169
170 <sect2 role="commands">
171 <title>Command Explanations</title>
172
173 <para><option>--enable-merged-build</option>: Use this parameter to build
174 the (alpha) Samba4 components (GnuTLS is recommended).</para>
175
176 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
177 file directory to avoid the default of
178 <filename class="directory">/usr/etc</filename>.</para>
179
180 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
181 data directory to avoid the default of
182 <filename class="directory">/usr/var</filename>.</para>
183
184 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
185 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
186
187 <para><parameter>--enable-nss-wrapper</parameter>: Builds the nss-wrapper
188 library.</para>
189
190 <para><parameter>--enable-socket-wrapper</parameter>: This options is
191 required to run the test suite.</para>
192
193 <para><command>sed -i "s/-ldl/&amp; -ltirpc -lpthread/" Makefile</command>:
194 This command enables the build to complete when using libtirpc instead of
195 the deprecated GLibC rpc functions.</para>
196
197 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
198 The nss libraries are not installed by default. If you intend to use
199 winbindd for Windows NT domain authentication, and/or WINS name resolution,
200 you need these libraries.</para>
201
202 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
203 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
204 These symlinks are required by <application>Glibc</application> to use the
205 NSS libraries.</para>
206
207 <para><command>if [ -d /etc/openldap/schema ]; then ...; fi</command>:
208 These commands are used to see if you have an OpenLDAP installation, and if
209 so, they copy sample Samba schemas to the OpenLDAP
210 <filename class='directory'>schema</filename> directory.</para>
211
212 <para><command>install -v -m644 ../examples/smb.conf.default
213 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
214 file into <filename>/etc/samba</filename>. This sample configuration will
215 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
216 make the appropriate changes for your installation. See the configuration
217 section for minimum values which must be set.</para>
218
219 </sect2>
220
221 <sect2 role="configuration">
222 <title>Configuring Samba</title>
223
224 <sect3 id="samba3-config">
225 <title>Config Files</title>
226
227 <para>/etc/samba/smb.conf</para>
228
229 <indexterm zone="samba3 samba3-config">
230 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
231 </indexterm>
232
233 </sect3>
234<!-- mount.cifs is now in the separate cifs-utils package
235 <sect3>
236 <title>Mounting Shares by Unprivileged Users</title>
237
238 <para>If it is desired for unprivileged users to directly mount (and
239 unmount) CIFS shares, the <command>mount.cifs</command> and
240 <command>umount.cifs</command> commands must be setuid
241 <systemitem class='username'>root</systemitem>. Note that users can
242 only mount CIFS shares on a mount point owned by that user (requires
243 write access also). If desired, change these programs to setuid
244 <systemitem class='username'>root</systemitem> by issuing the following
245 command as the <systemitem class='username'>root</systemitem>
246 user:</para>
247
248<screen role="root"><userinput>chmod -v 4755 /usr/sbin/{,u}mount.cifs</userinput></screen>
249
250 </sect3>
251-->
252 <sect3>
253 <title>Printing to SMB Clients</title>
254
255 <para>If you use <application>CUPS</application> for print services,
256 and you wish to print to a printer attached to an SMB client, you
257 need to create an SMB backend device. To create the device, issue the
258 following command as the <systemitem class="username">root</systemitem>
259 user:</para>
260
261<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
262
263 </sect3>
264
265 <sect3>
266 <title>Configuration Information</title>
267
268 <para>Due to the complexity and the many various uses for
269 <application>Samba</application>, complete configuration for all the
270 package's capabilities is well beyond the scope of the BLFS book. This
271 section provides instructions to configure the
272 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
273 The complete contents of <filename>/etc/samba/smb.conf</filename> will
274 depend on the purpose of <application>Samba</application>
275 installation.</para>
276
277 <note>
278 <para>You may find it easier to copy the configuration parameters shown
279 below into an empty <filename>/etc/samba/smb.conf</filename> file
280 instead of copying and editing the default file as mentioned in the
281 <quote>Command Explanations</quote> section. How you create/edit the
282 <filename>/etc/samba/smb.conf</filename> file will be left up to
283 you. Do ensure the file is only writeable by the
284 <systemitem class="username">root</systemitem> user (mode 644).</para>
285 </note>
286
287 <sect4>
288 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
289
290 <para>Choose this variant if you only want to transfer files using
291 <command>smbclient</command>, mount Windows shares and print to Windows
292 printers, and don't want to share your files and printers to Windows
293 machines.</para>
294
295 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
296 three parameters is sufficient:</para>
297
298<screen role='root'><literal>[global]
299 workgroup = <replaceable>MYGROUP</replaceable>
300 dos charset = <replaceable>cp850</replaceable>
301 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
302
303 <para>The values in this example specify that the computer belongs to a
304 Windows workgroup named
305 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
306 <quote><replaceable>cp850</replaceable></quote> character set on the
307 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
308 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
309 encoding on the disk. Adjust these values appropriately for your
310 installation. The <quote>unix charset</quote> value must be the same as
311 the output of <command>locale charmap</command> when executed with the
312 <envar>LANG</envar> variable set to your preferred locale, otherwise the
313 <command>ls</command> command may not display correct filenames of
314 downloaded files.</para>
315
316 <para>There is no need to run any <application>Samba</application>
317 servers in this scenario, thus you don't need to install the provided
318 bootscripts.</para>
319
320 </sect4>
321
322 <sect4>
323 <title>Scenario 2: Standalone File/Print Server</title>
324
325 <para>Choose this variant if you want to share your files and printers
326 to Windows machines in your workgroup in addition to the capabilities
327 described in Scenario 1.</para>
328
329 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
330 file may be a good template to start from. Also add
331 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
332 to the <quote>[global]</quote> section as described in Scenario 1 in
333 order to prevent filename corruption.</para>
334
335 <para>The following configuration file creates a separate share for each
336 user's home directory and also makes all printers available to Windows
337 machines:</para>
338
339<screen role='root'><literal>[global]
340 workgroup = <replaceable>MYGROUP</replaceable>
341 dos charset = <replaceable>cp850</replaceable>
342 unix charset = <replaceable>ISO-8859-1</replaceable>
343
344[homes]
345 comment = Home Directories
346 browseable = no
347 writable = yes
348
349[printers]
350 comment = All Printers
351 path = /var/spool/samba
352 browseable = no
353 guest ok = no
354 printable = yes</literal></screen>
355
356 <para>Other parameters you may wish to customize in the
357 <quote>[global]</quote> section include:</para>
358
359<screen role='root'><literal> server string =
360 security =
361 hosts allow =
362 load printers =
363 log file =
364 max log size =
365 socket options =
366 local master =</literal></screen>
367
368 <para>Reference the comments in the
369 <filename>/etc/samba/smb.conf.default</filename> file for information
370 regarding these parameters.</para>
371
372 <para>Since the <command>smbd</command> and <command>nmbd</command>
373 daemons are needed in this case, install the <filename>samba</filename>
374 bootscript. Be sure to run <command>smbpasswd</command> (with the
375 <option>-a</option> option to add users) to enable and
376 set passwords for all accounts that need
377 <application>Samba</application> access, or use the SWAT web interface
378 (see below) to do the same. Using the default
379 <application>Samba</application> passdb backend, any user you attempt
380 to add will also be required to exist in the
381 <filename>/etc/passwd</filename> file.</para>
382
383 </sect4>
384
385 <sect4>
386 <title>Advanced Requirements</title>
387
388 <para>More complex scenarios involving domain control or membership are
389 possible if the right flags are passed to the ./configure script when
390 the package is built. Such setups are advanced topics and cannot be
391 adequately covered in BLFS. Many complete books have been written on
392 these topics alone. It should be noted, however, that a
393 <application>Samba</application> BDC cannot be used as a fallback
394 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
395 fallback for a <application>Samba</application> PDC. Also in some
396 domain membership scenarios, the <command>winbindd</command> daemon and
397 the corresponding bootscript are needed.</para>
398
399 <para>There is quite a bit of documentation available which covers many
400 of these advanced configurations. Point your web browser to the links
401 below to view some of the documentation included with the
402 <application>Samba</application> package:</para>
403
404 <itemizedlist spacing='compact'>
405 <listitem>
406 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
407 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
408 </listitem>
409 <listitem>
410 <para>The Official Samba HOWTO and Reference Guide <ulink
411 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
412 </para>
413 </listitem>
414 <listitem>
415 <para>Samba-3 by Example
416 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
417 </para>
418 </listitem>
419 <listitem>
420 <para>The Samba-3 man Pages
421 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
422 </listitem>
423 </itemizedlist>
424
425 </sect4>
426
427 <sect4 id="samba3-init">
428 <title>Boot Script</title>
429
430 <para>For your convenience, boot scripts have been provided for
431 <application>Samba</application>. There are two included in the
432 <xref linkend="bootscripts"/> package. The first,
433 <filename>samba</filename>, will start the <command>smbd</command>
434 and <command>nmbd</command> daemons needed to provide SMB/CIFS
435 services. The second script, <filename>winbind</filename>, starts
436 the <command>winbindd</command> daemon, used for providing Windows
437 domain services to Linux clients.</para>
438
439 <indexterm zone="samba3 samba3-init">
440 <primary sortas="f-samba">samba</primary>
441 </indexterm>
442
443 <indexterm zone="samba3 samba3-init">
444 <primary sortas="f-winbind">winbind</primary>
445 </indexterm>
446
447 <para>The default <application>Samba</application> installation uses the
448 <systemitem class='username'>nobody</systemitem> user for guest access
449 to the server. This can be overridden by setting the
450 <option>guest account =</option> parameter in the
451 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
452 <option>guest account =</option> parameter, ensure this user exists in
453 the <filename>/etc/passwd</filename> file. To use the default user,
454 issue the following commands as the
455 <systemitem class='username'>root</systemitem> user:</para>
456
457<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
458useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
459 -s /bin/false -u 99 nobody</userinput></screen>
460
461 <para>Install the <filename>samba</filename> script with the following
462 command issued as the <systemitem class="username">root</systemitem>
463 user:</para>
464
465<screen role="root"><userinput>make install-samba</userinput></screen>
466
467 <para>If you also need the <filename>winbindd</filename>
468 script to resolve names from Windows clients, run:</para>
469
470<screen role="root"><userinput>make install-winbindd</userinput></screen>
471
472 </sect4>
473
474 </sect3>
475
476 <sect3 id="samba3-swat-config">
477 <title>Configuring SWAT</title>
478
479 <para>The SWAT (<application>Samba</application> Web Administration Tool)
480 utility can be used for configuration of the
481 <application>Samba</application> installation.</para>
482
483 <indexterm zone="samba3 samba3-swat-config">
484 <primary sortas="g-configuring-SWAT">Configuring SWAT</primary>
485 </indexterm>
486<!--
487 <sect4>
488 <title>Setting up SWAT using inetd</title>
489
490 <indexterm zone="samba3 samba3-swat-config">
491 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
492 </indexterm>
493
494 <indexterm zone="samba3 samba3-swat-config">
495 <primary sortas="e-etc-services">/etc/services</primary>
496 </indexterm>
497
498 <warning>
499 <para>BLFS does not recommend using these procedures because of the
500 security risk involved. However, in a home network environment and
501 disclosure of the <systemitem class='username'>root</systemitem>
502 password is an acceptable risk, the following
503 instructions are provided for your convenience.</para>
504 </warning>
505
506 <para>First you must add an entry to <filename>/etc/services</filename>
507 and modify the <command>inetd</command> configuration. Add this entry
508 with the following command issued as the <systemitem
509 class="username">root</systemitem> user:</para>
510
511<screen role="root"><userinput>echo "swat 905/tcp" &gt;&gt; /etc/services</userinput></screen>
512
513 <para>Now add this entry to the <filename>/etc/inetd.conf</filename>
514 file, again as the <systemitem class="username">root</systemitem>
515 user:</para>
516
517<screen role="root"><userinput>echo "swat stream tcp nowait.5 root /usr/sbin/swat swat &gt;&gt; /etc/inetd.conf</userinput></screen>
518
519 <para>Issue a <command>killall -HUP inetd</command> to reread the
520 changed <filename>inetd.conf</filename> file.</para>
521
522 <para>SWAT can be launched by pointing your web browser to
523 http://localhost:905.</para>
524
525 </sect4>
526-->
527 <sect4>
528 <title>Setting up SWAT using xinetd</title>
529
530 <indexterm zone="samba3 samba3-swat-config">
531 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
532 </indexterm>
533
534 <para>If not already done, add an entry to <filename>/etc/services</filename> file
535 as the <systemitem class="username">root</systemitem> user:</para>
536
537<screen role="root"><userinput>echo "swat 905/tcp" &gt;&gt; /etc/services</userinput></screen>
538
539 <para>Create the <application>Samba</application> <xref
540 linkend='xinetd'/> file as <filename>/etc/xinetd.d/swat</filename>.</para>
541
542 <warning>
543 <para>You may modify or remove the <quote>only_from</quote> line
544 below to include other host(s). BLFS does not recommend doing this
545 because of the security risk involved. However, in a home network
546 environment, disclosure of the <systemitem
547 class='username'>root</systemitem> password may be an acceptable
548 risk.</para>
549 </warning>
550
551<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
552<literal># Begin /etc/xinetd.d/swat
553
554service swat
555{
556 port = 905
557 socket_type = stream
558 wait = no
559 instances = 5
560 only_from = 127.0.0.1
561 user = root
562 server = /usr/sbin/swat
563 log_on_failure += USERID
564}
565
566# End /etc/xinetd.d/swat</literal>
567EOF</userinput></screen>
568
569 <para>Issue a <command>killall -HUP xinetd</command> to read the new
570 <filename>/etc/xinetd.d/swat</filename> file.</para>
571
572 <note>
573 <para>If you linked <application>Linux-PAM</application> into the
574 <application>Samba</application> build, you'll need to create an
575 <filename>/etc/pam.d/samba</filename> file.</para>
576 </note>
577
578 <para>SWAT can now be launched by pointing your web browser to
579 http://localhost:905.</para>
580
581 </sect4>
582
583 <sect4>
584 <title>Setting up SWAT using stunnel</title>
585
586 <para>A better way to set up SWAT for network access is through
587 <xref linkend='stunnel'/>. For convenience, a boot scripts has
588 been provided for SWAT via stunnel. First, create the stunnel
589 configuration file:</para>
590
591 <indexterm zone="samba3 samba3-swat-config">
592 <primary sortas="e-etc-stunnel-swat.conf">/etc/stunnel/swat.conf</primary>
593 </indexterm>
594
595<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/swat.conf &lt;&lt; "EOF"
596<literal>; File: /etc/stunnel/swat.conf
597
598pid = /run/stunnel-swat.pid
599setuid = root
600setgid = root
601cert = /etc/stunnel/stunnel.pem
602
603[swat]
604accept = swat
605exec = /usr/sbin/swat
606</literal>
607EOF</userinput></screen>
608
609 <para>Next, install the swat bootscript:</para>
610
611<screen role="root"><userinput>make install-swat</userinput></screen>
612
613 <para>After starting the SWAT boot script the tool can be accessed by
614 pointing your web browser to https://localhost:905. Note:
615 <emphasis>https</emphasis>. If access to the tool needs to be
616 further restricted, then <xref linkend='iptables'/> can be
617 used.</para>
618
619 </sect4>
620
621 </sect3>
622
623 <sect3>
624 <title/>
625
626
627 <indexterm zone="samba3 samba3-swat-config">
628 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
629 </indexterm>
630
631 </sect3>
632
633
634 </sect2>
635
636 <sect2 role="content">
637 <title>Contents</title>
638
639 <segmentedlist>
640 <segtitle>Installed Programs</segtitle>
641 <segtitle>Installed Libraries</segtitle>
642 <segtitle>Installed Directories</segtitle>
643
644 <seglistitem>
645 <seg>cifs.upcall, eventlogadm, findsmb, ldbadd, ldbdel, ldbedit,
646 ldbmodify, ldbrename, ldbsearch, net, nmbd,
647 nmblookup, ntlm_auth, pdbedit, profiles, rpcclient, sharesec, smbcacls,
648 smbclient, smbcontrol, smbcquotas, smbd, smbget, smbpasswd, smbspool,
649 smbstatus, smbtar, smbtree, swat, testparm, wbinfo,
650 winbindd, and (if not using system TDB) tdbbackup, tdbdump, and
651 tdbtool</seg>
652 <seg>libnss_winbind.so, libnss_wins.so, libnetapi.so, libsmbclient.so,
653 libsmbsharemodes.so, libtalloc.so, libwbclient.so, the pam_winbind.so
654 and pam_smbpass.so PAM libraries, and assorted character set,
655 filesystem and support modules.</seg>
656 <seg>/etc/samba, /usr/lib/samba, /usr/share/doc/samba-&samba3-version;,
657 /usr/share/samba, /var/lib/samba and (if configured) /var/log/samba</seg>
658 </seglistitem>
659 </segmentedlist>
660
661 <variablelist>
662 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
663 <?dbfo list-presentation="list"?>
664 <?dbhtml list-presentation="table"?>
665
666 <varlistentry id="cifs.upcall">
667 <term><command>cifs.upcall</command></term>
668 <listitem>
669 <para>is a userspace upcall helper for Common Internet File Systems
670 (CIFS)</para>
671 <indexterm zone="samba3 cifs.upcall">
672 <primary sortas="b-cifs.upcall">cifs.upcall</primary>
673 </indexterm>
674 </listitem>
675 </varlistentry>
676
677 <varlistentry id="eventlogadm">
678 <term><command>eventlogadm</command></term>
679 <listitem>
680 <para>is used to write records to eventlogs from STDIN, add the
681 specified source and DLL eventlog registry entries and display the
682 active eventlog names (from <filename>smb.conf</filename>).</para>
683 <indexterm zone="samba3 eventlogadm">
684 <primary sortas="b-eventlogadm">eventlogadm</primary>
685 </indexterm>
686 </listitem>
687 </varlistentry>
688
689 <varlistentry id="findsmb">
690 <term><command>findsmb</command></term>
691 <listitem>
692 <para>lists information about machines that respond to
693 SMB name queries on a subnet.</para>
694 <indexterm zone="samba3 findsmb">
695 <primary sortas="b-findsmb">findsmb</primary>
696 </indexterm>
697 </listitem>
698 </varlistentry>
699
700 <varlistentry id="ldbadd">
701 <term><command>ldbadd</command></term>
702 <listitem>
703 <para>is a command-line utility for adding records to an LDB
704 database.</para>
705 <indexterm zone="samba3 ldbadd">
706 <primary sortas="b-ldbadd">ldbadd</primary>
707 </indexterm>
708 </listitem>
709 </varlistentry>
710
711 <varlistentry id="ldbdel">
712 <term><command>ldbdel</command></term>
713 <listitem>
714 <para>is a command-line program for deleting LDB database
715 records.</para>
716 <indexterm zone="samba3 ldbdel">
717 <primary sortas="b-ldbdel">ldbdel</primary>
718 </indexterm>
719 </listitem>
720 </varlistentry>
721
722 <varlistentry id="ldbedit">
723 <term><command>ldbedit</command></term>
724 <listitem>
725 <para>allows you to edit LDB databases using your preferred
726 editor.</para>
727 <indexterm zone="samba3 ldbedit">
728 <primary sortas="b-ldbedit">ldbedit</primary>
729 </indexterm>
730 </listitem>
731 </varlistentry>
732
733 <varlistentry id="ldbmodify">
734 <term><command>ldbmodify</command></term>
735 <listitem>
736 <para>allows you to modify records in an LDB database.</para>
737 <indexterm zone="samba3 ldbmodify">
738 <primary sortas="b-ldbmodify">ldbmodify</primary>
739 </indexterm>
740 </listitem>
741 </varlistentry>
742
743 <varlistentry id="ldbrename">
744 <term><command>ldbrename</command></term>
745 <listitem>
746 <para>allows you to edit LDB databases using your preferred
747 editor.</para>
748 <indexterm zone="samba3 ldbrename">
749 <primary sortas="b-ldbrename">ldbrename</primary>
750 </indexterm>
751 </listitem>
752 </varlistentry>
753
754 <varlistentry id="ldbsearch">
755 <term><command>ldbsearch</command></term>
756 <listitem>
757 <para>searches an LDB database for records matching a specified
758 expression.</para>
759 <indexterm zone="samba3 ldbsearch">
760 <primary sortas="b-ldbsearch">ldbsearch</primary>
761 </indexterm>
762 </listitem>
763 </varlistentry>
764
765 <varlistentry id="net">
766 <term><command>net</command></term>
767 <listitem>
768 <para>is a tool for administration of
769 <application>Samba</application> and remote CIFS servers, similar
770 to the <command>net</command> utility for DOS/Windows.</para>
771 <indexterm zone="samba3 net">
772 <primary sortas="b-net">net</primary>
773 </indexterm>
774 </listitem>
775 </varlistentry>
776
777 <varlistentry id="nmbd">
778 <term><command>nmbd</command></term>
779 <listitem>
780 <para>is the <application>Samba</application>
781 NetBIOS name server.</para>
782 <indexterm zone="samba3 nmbd">
783 <primary sortas="b-nmbd">nmbd</primary>
784 </indexterm>
785 </listitem>
786 </varlistentry>
787
788 <varlistentry id="nmblookup">
789 <term><command>nmblookup</command></term>
790 <listitem>
791 <para>is used to query NetBIOS names and map
792 them to IP addresses.</para>
793 <indexterm zone="samba3 nmblookup">
794 <primary sortas="b-nmblookup">nmblookup</primary>
795 </indexterm>
796 </listitem>
797 </varlistentry>
798
799 <varlistentry id="ntlm_auth">
800 <term><command>ntlm_auth</command></term>
801 <listitem>
802 <para>is a tool to allow external access to Winbind's
803 NTLM authentication function.</para>
804 <indexterm zone="samba3 ntlm_auth">
805 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
806 </indexterm>
807 </listitem>
808 </varlistentry>
809
810 <varlistentry id="pdbedit">
811 <term><command>pdbedit</command></term>
812 <listitem>
813 <para>is a tool used to manage the SAM database.</para>
814 <indexterm zone="samba3 pdbedit">
815 <primary sortas="b-pdbedit">pdbedit</primary>
816 </indexterm>
817 </listitem>
818 </varlistentry>
819
820 <varlistentry id="profiles">
821 <term><command>profiles</command></term>
822 <listitem>
823 <para>is a utility that reports and changes SIDs in Windows
824 registry files. It currently only supports Windows NT.</para>
825 <indexterm zone="samba3 profiles">
826 <primary sortas="b-profiles">profiles</primary>
827 </indexterm>
828 </listitem>
829 </varlistentry>
830
831 <varlistentry id="rpcclient">
832 <term><command>rpcclient</command></term>
833 <listitem>
834 <para>is used to execute MS-RPC client side functions.</para>
835 <indexterm zone="samba3 rpcclient">
836 <primary sortas="b-rpcclient">rpcclient</primary>
837 </indexterm>
838 </listitem>
839 </varlistentry>
840
841 <varlistentry id="sharesec">
842 <term><command>sharesec</command></term>
843 <listitem>
844 <para>manipulates share ACL permissions on SMB file shares.</para>
845 <indexterm zone="samba3 sharesec">
846 <primary sortas="b-sharesec">sharesec</primary>
847 </indexterm>
848 </listitem>
849 </varlistentry>
850
851 <varlistentry id="smbcacls">
852 <term><command>smbcacls</command></term>
853 <listitem>
854 <para>is used to manipulate Windows NT access control lists.</para>
855 <indexterm zone="samba3 smbcacls">
856 <primary sortas="b-smbcacls">smbcacls</primary>
857 </indexterm>
858 </listitem>
859 </varlistentry>
860
861 <varlistentry id="smbclient">
862 <term><command>smbclient</command></term>
863 <listitem>
864 <para>is a SMB/CIFS access utility, similar to FTP.</para>
865 <indexterm zone="samba3 smbclient">
866 <primary sortas="b-smbclient">smbclient</primary>
867 </indexterm>
868 </listitem>
869 </varlistentry>
870
871 <varlistentry id="smbcontrol">
872 <term><command>smbcontrol</command></term>
873 <listitem>
874 <para>is used to control running <command>smbd</command>,
875 <command>nmbd</command> and <command>winbindd</command>
876 daemons.</para>
877 <indexterm zone="samba3 smbcontrol">
878 <primary sortas="b-smbcontrol">smbcontrol</primary>
879 </indexterm>
880 </listitem>
881 </varlistentry>
882
883 <varlistentry id="smbcquotas">
884 <term><command>smbcquotas</command></term>
885 <listitem>
886 <para>is used to manipulate Windows NT quotas on
887 SMB file shares.</para>
888 <indexterm zone="samba3 smbcquotas">
889 <primary sortas="b-smbcquotas">smbcquotas</primary>
890 </indexterm>
891 </listitem>
892 </varlistentry>
893
894 <varlistentry id="smbd">
895 <term><command>smbd</command></term>
896 <listitem>
897 <para>is the main <application>Samba</application> daemon which
898 provides SMB/CIFS services to clients.</para>
899 <indexterm zone="samba3 smbd">
900 <primary sortas="b-smbd">smbd</primary>
901 </indexterm>
902 </listitem>
903 </varlistentry>
904
905 <varlistentry id="smbget">
906 <term><command>smbget</command></term>
907 <listitem>
908 <para>is a simple utility with <command>wget</command>-like
909 semantics, that can download files from SMB servers. You can specify
910 the files you would like to download on the command-line.</para>
911 <indexterm zone="samba3 smbget">
912 <primary sortas="b-smbget">smbget</primary>
913 </indexterm>
914 </listitem>
915 </varlistentry>
916
917 <varlistentry id="smbpasswd">
918 <term><command>smbpasswd</command></term>
919 <listitem>
920 <para>changes a user's <application>Samba</application>
921 password.</para>
922 <indexterm zone="samba3 smbpasswd">
923 <primary sortas="b-smbpasswd">smbpasswd</primary>
924 </indexterm>
925 </listitem>
926 </varlistentry>
927
928 <varlistentry id="smbspool">
929 <term><command>smbspool</command></term>
930 <listitem>
931 <para>sends a print job to an SMB printer.</para>
932 <indexterm zone="samba3 smbspool">
933 <primary sortas="b-smbspool">smbspool</primary>
934 </indexterm>
935 </listitem>
936 </varlistentry>
937
938 <varlistentry id="smbstatus">
939 <term><command>smbstatus</command></term>
940 <listitem>
941 <para>reports current <application>Samba</application>
942 connections.</para>
943 <indexterm zone="samba3 smbstatus">
944 <primary sortas="b-smbstatus">smbstatus</primary>
945 </indexterm>
946 </listitem>
947 </varlistentry>
948
949 <varlistentry id="smbtar">
950 <term><command>smbtar</command></term>
951 <listitem>
952 <para>is a shell script used for backing up SMB/CIFS shares
953 directly to Linux tape drives or a file.</para>
954 <indexterm zone="samba3 smbtar">
955 <primary sortas="b-smbtar">smbtar</primary>
956 </indexterm>
957 </listitem>
958 </varlistentry>
959
960 <varlistentry id="smbtree">
961 <term><command>smbtree</command></term>
962 <listitem>
963 <para>is a text-based SMB network browser.</para>
964 <indexterm zone="samba3 smbtree">
965 <primary sortas="b-smbtree">smbtree</primary>
966 </indexterm>
967 </listitem>
968 </varlistentry>
969
970 <varlistentry id="swat">
971 <term><command>swat</command></term>
972 <listitem>
973 <para>is the <application>Samba</application> Web Administration
974 Tool.</para>
975 <indexterm zone="samba3 swat">
976 <primary sortas="b-swat">swat</primary>
977 </indexterm>
978 </listitem>
979 </varlistentry>
980
981 <varlistentry id="tdbbackup">
982 <term><command>tdbbackup</command></term>
983 <listitem>
984 <para>is a tool for backing up or validating the integrity of
985 <application>Samba</application> <filename>.tdb</filename>
986 files.</para>
987 <indexterm zone="samba3 tdbbackup">
988 <primary sortas="b-tdbbackup">tdbbackup</primary>
989 </indexterm>
990 </listitem>
991 </varlistentry>
992
993 <varlistentry id="tdbdump">
994 <term><command>tdbdump</command></term>
995 <listitem>
996 <para> is a tool used to print the contents of a
997 <application>Samba</application> <filename>.tdb</filename>
998 file.</para>
999 <indexterm zone="samba3 tdbdump">
1000 <primary sortas="b-tdbdump">tdbdump</primary>
1001 </indexterm>
1002 </listitem>
1003 </varlistentry>
1004
1005 <varlistentry id="tdbtool">
1006 <term><command>tdbtool</command></term>
1007 <listitem>
1008 <para>is a tool which allows simple database manipulation from the
1009 command line.</para>
1010 <indexterm zone="samba3 tdbtool">
1011 <primary sortas="b-tdbtool">tdbtool</primary>
1012 </indexterm>
1013 </listitem>
1014 </varlistentry>
1015
1016 <varlistentry id="testparm">
1017 <term><command>testparm</command></term>
1018 <listitem>
1019 <para>checks an <filename>smb.conf</filename> file for proper
1020 syntax.</para>
1021 <indexterm zone="samba3 testparm">
1022 <primary sortas="b-testparm">testparm</primary>
1023 </indexterm>
1024 </listitem>
1025 </varlistentry>
1026
1027 <varlistentry id="wbinfo">
1028 <term><command>wbinfo</command></term>
1029 <listitem>
1030 <para>queries a running <command>winbindd</command> daemon.</para>
1031 <indexterm zone="samba3 wbinfo">
1032 <primary sortas="b-wbinfo">wbinfo</primary>
1033 </indexterm>
1034 </listitem>
1035 </varlistentry>
1036
1037 <varlistentry id="winbindd">
1038 <term><command>winbindd</command></term>
1039 <listitem>
1040 <para>resolves names from Windows NT servers.</para>
1041 <indexterm zone="samba3 winbindd">
1042 <primary sortas="b-winbindd">winbindd</primary>
1043 </indexterm>
1044 </listitem>
1045 </varlistentry>
1046
1047 <varlistentry id="libnss_winbind">
1048 <term><filename class='libraryfile'>libnss_winbind.so</filename></term>
1049 <listitem>
1050 <para>provides Name Service Switch API functions for resolving names
1051 from NT servers.</para>
1052 <indexterm zone="samba3 libnss_winbind">
1053 <primary sortas="c-libnss_winbind">libnss_winbind.so</primary>
1054 </indexterm>
1055 </listitem>
1056 </varlistentry>
1057
1058 <varlistentry id="libnss_wins">
1059 <term><filename class='libraryfile'>libnss_wins.so</filename></term>
1060 <listitem>
1061 <para>provides API functions for Samba's implementation of the
1062 Windows Internet Naming Service.</para>
1063 <indexterm zone="samba3 libnss_wins">
1064 <primary sortas="c-libnss_wins">libnss_wins.so</primary>
1065 </indexterm>
1066 </listitem>
1067 </varlistentry>
1068
1069 <varlistentry id="libnetapi">
1070 <term><filename class='libraryfile'>libnetapi.so</filename></term>
1071 <listitem>
1072 <para>provides the API functions for the administration tools used
1073 for Samba and remote CIFS servers.</para>
1074 <indexterm zone="samba3 libnetapi">
1075 <primary sortas="c-libnetapi">libnetapi.so</primary>
1076 </indexterm>
1077 </listitem>
1078 </varlistentry>
1079
1080 <varlistentry id="libsmbclient">
1081 <term><filename class='libraryfile'>libsmbclient.so</filename></term>
1082 <listitem>
1083 <para>provides the API functions for the Samba SMB client tools.</para>
1084 <indexterm zone="samba3 libsmbclient">
1085 <primary sortas="c-libsmbclient">libsmbclient.so</primary>
1086 </indexterm>
1087 </listitem>
1088 </varlistentry>
1089
1090 <varlistentry id="libsmbsharemodes">
1091 <term><filename class='libraryfile'>libsmbsharemodes.so</filename></term>
1092 <listitem>
1093 <para>provides API functions for accessing SMB share modes
1094 (locks etc.)</para>
1095 <indexterm zone="samba3 libsmbsharemodes">
1096 <primary sortas="c-libsmbsharemodes">libsmbsharemodes.so</primary>
1097 </indexterm>
1098 </listitem>
1099 </varlistentry>
1100
1101 <varlistentry id="libwbclient">
1102 <term><filename class='libraryfile'>libwbclient.so</filename></term>
1103 <listitem>
1104 <para>provides API functions for Windows domain client services.</para>
1105 <indexterm zone="samba3 libwbclient">
1106 <primary sortas="c-libwbclient">libwbclient.so</primary>
1107 </indexterm>
1108 </listitem>
1109 </varlistentry>
1110
1111 </variablelist>
1112
1113 </sect2>
1114
1115</sect1>
Note: See TracBrowser for help on using the repository browser.