source: server/major/samba3.xml@ bfb7882

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since bfb7882 was bfb7882, checked in by Tushar Teredesai <tushar@…>, 19 years ago

More typo fixes

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4841 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 37.1 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "ebee37e66a8b5f6fd328967dc09088e8">
10 <!ENTITY samba3-size "15.6 MB">
11 <!ENTITY samba3-buildsize "147 MB">
12 <!ENTITY samba3-time "2.21 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
63
64 <bridgehead renderas="sect4">Optional</bridgehead>
65 <para><xref linkend="popt"/>,
66 <xref linkend="Linux_PAM"/>,
67 <xref linkend="openldap"/>,
68 <xref linkend="cups"/>,
69 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
70 <xref linkend="libxml2"/>,
71 <xref linkend="mysql"/> or <xref linkend="postgresql"/>,
72 <xref linkend="python"/>,
73 <xref linkend="xinetd"/> and
74 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para>
75
76 </sect2>
77
78 <sect2 role="installation">
79 <title>Installation of Samba</title>
80
81 <para>Install <application>Samba</application> by running the following
82 commands:</para>
83
84<screen><userinput>cd source &amp;&amp;
85./configure \
86 --prefix=/usr \
87 --sysconfdir=/etc \
88 --localstatedir=/var \
89 --with-piddir=/var/run \
90 --with-fhs \
91 --with-smbmount &amp;&amp;
92make</userinput></screen>
93
94 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
95
96<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
97make install &amp;&amp;
98mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
99ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
100chmod -v 644 /usr/include/libsmbclient.h &amp;&amp;
101install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
102ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
103ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
104if [ -f nsswitch/pam_winbind.so ]; then
105 install -v -m755 nsswitch/pam_winbind.so /lib/security
106fi &amp;&amp;
107install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
108install -v -m644 ../docs/*.pdf /usr/share/samba</userinput></screen>
109
110 <note>
111 <para>You may want to run <command>configure</command> with the
112 <option>--help</option> parameter. There may be other parameters
113 needed to take advantage of the optional dependencies.</para>
114 </note>
115
116 </sect2>
117
118 <sect2 role="commands">
119 <title>Command Explanations</title>
120
121 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
122 file directory to avoid the default of
123 <filename class="directory">/usr/etc</filename>.</para>
124
125 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
126 data directory to avoid the default of
127 <filename class="directory">/usr/var</filename>.</para>
128
129 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
130 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
131
132 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
133 extra binary for use by the <command>mount</command> command so that
134 mounting remote SMB (Windows) shares becomes no more complex than
135 mounting remote NFS shares.</para>
136
137 <para><option>--with-pam</option>: Use this parameter to link
138 <application>Linux-PAM</application> into the build. This
139 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
140 <application>PAM</application> module. You can find
141 instructions on how to configure and use the module by running
142 <command>man winbindd</command>.</para>
143
144 <para><command>install -v -d /var/cache/samba</command>: This directory is
145 needed for proper operation of the <command>smbd</command> and
146 <command>nmbd</command> daemons.</para>
147
148 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
149 ../libsmbclient.so ...</command>: The
150 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
151 by other packages. This command moves it to a location where other packages
152 can find it.</para>
153
154 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
155 The nss libraries are not installed by default. If you intend to use
156 winbindd for domain auth, and/or WINS name resolution,
157 you need these libraries.</para>
158
159 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
160 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
161 These symlinks are required by glibc to use the NSS
162 libraries.</para>
163
164 <para><command>install -v -m644 ../examples/smb.conf.default
165 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
166 file into <filename>/etc/samba</filename>. This sample configuration will
167 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
168 make the appropriate changes for your installation. See the configuration
169 section for minimum values which must be set.</para>
170
171 </sect2>
172
173 <sect2 role="configuration">
174 <title>Configuring Samba</title>
175
176 <sect3 id="samba3-config">
177 <title>Config Files</title>
178
179 <para>/etc/samba/smb.conf</para>
180
181 <indexterm zone="samba3 samba3-config">
182 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
183 </indexterm>
184
185 </sect3>
186
187 <sect3>
188 <title>Mounting Shares by Unprivileged Users</title>
189
190 <para>If it is desired for unprivileged users to directly mount (and
191 unmount) SMB shares, the <command>smbmnt</command> and
192 <command>smbumount</command> commands must be setuid
193 <systemitem class='username'>root</systemitem>. Note that users can
194 only mount SMB shares on a mount point owned by that user (requires
195 write access also). If desired, change these programs to setuid
196 <systemitem class='username'>root</systemitem> by issuing the following
197 command as the <systemitem class='username'>root</systemitem>
198 user:</para>
199
200<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}</userinput></screen>
201
202 </sect3>
203
204 <sect3>
205 <title>Printing to SMB Clients</title>
206
207 <para>If you use <application>CUPS</application> for print services,
208 and you wish to print to a printer attached to an SMB client, you
209 need to create an SMB backend device. To create the device, issue the
210 following command as the <systemitem class="username">root</systemitem>
211 user:</para>
212
213<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
214
215 </sect3>
216
217 <sect3>
218 <title>Configuration Information</title>
219
220 <para>Due to the complexity and the many various uses for
221 <application>Samba</application>, complete configuration for all the
222 package's capabilities is well beyond the scope of the BLFS book. This
223 section provides instructions to configure the
224 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
225 The complete contents of <filename>/etc/samba/smb.conf</filename> will
226 depend on the purpose of <application>Samba</application>
227 installation.</para>
228
229 <note>
230 <para>You may find it easier to copy the configuration parameters shown
231 below into an empty <filename>/etc/samba/smb.conf</filename> file
232 instead of copying and editing the default file as mentioned in the
233 <quote>Command Explanations</quote> section. How you create/edit the
234 <filename>/etc/samba/smb.conf</filename> file will be left up to
235 you. Do ensure the file is only writeable by the
236 <systemitem class="username">root</systemitem> user (mode 644).</para>
237 </note>
238
239 <sect4>
240 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
241
242 <para>Choose this variant if you only want to transfer files using
243 <command>smbclient</command>, mount Windows shares and print to Windows
244 printers, and don't want to share your files and printers to Windows
245 machines.</para>
246
247 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
248 three parameters is sufficient:</para>
249
250<screen role='root'><literal>[global]
251 workgroup = <replaceable>MYGROUP</replaceable>
252 dos charset = <replaceable>cp850</replaceable>
253 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
254
255 <para>The values in this example specify that the computer belongs to a
256 Windows workgroup named
257 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
258 <quote><replaceable>cp850</replaceable></quote> character set on the
259 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
260 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
261 encoding on the disk. Adjust these values appropriately for your
262 installation. The <quote>unix charset</quote> value must be the same as
263 the output of <command>locale charmap</command> when executed with the
264 <envar>LANG</envar> variable set to your preferred locale, otherwise the
265 <command>ls</command> command may not display correct filenames of
266 downloaded files.</para>
267
268 <para>There is no need to run any <application>Samba</application>
269 servers in this scenario, thus you don't need to install the provided
270 bootscripts.</para>
271
272 </sect4>
273
274 <sect4>
275 <title>Scenario 2: Standalone File/Print Server</title>
276
277 <para>Choose this variant if you want to share your files and printers
278 to Windows machines in your workgroup in addition to the capabilities
279 described in Scenario 1.</para>
280
281 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
282 file may be a good template to start from. Also add
283 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
284 to the <quote>[global]</quote> section as described in Scenario 1 in
285 order to prevent filename corruption.</para>
286
287 <para>The following configuration file creates a separate share for each
288 user's home directory and also makes all printers available to Windows
289 machines:</para>
290
291<screen role='root'><literal>[global]
292 workgroup = <replaceable>MYGROUP</replaceable>
293 dos charset = <replaceable>cp850</replaceable>
294 unix charset = <replaceable>ISO-8859-1</replaceable>
295
296[homes]
297 comment = Home Directories
298 browseable = no
299 writable = yes
300
301[printers]
302 comment = All Printers
303 path = /var/spool/samba
304 browseable = no
305 guest ok = no
306 printable = yes</literal></screen>
307
308 <para>Other parameters you may wish to customize in the
309 <quote>[global]</quote> section include:</para>
310
311<screen role='root'><literal> server string =
312 security =
313 hosts allow =
314 load printers =
315 log file =
316 max log size =
317 socket options =
318 local master =</literal></screen>
319
320 <para>Reference the comments in the
321 <filename>/etc/samba/smb.conf.default</filename> file for information
322 regarding these parameters.</para>
323
324 <para>Since the <command>smbd</command> and <command>nmbd</command>
325 daemons are needed in this case, install the <filename>samba</filename>
326 bootscript. Be sure to run <command>smbpasswd</command> (with the
327 <option>-a</option> option to add users) to enable and
328 set passwords for all accounts that need
329 <application>Samba</application> access, or use the SWAT web interface
330 (see below) to do the same. Using the default
331 <application>Samba</application> passdb backend, any user you attempt
332 to add will also be required to exist in the
333 <filename>/etc/passwd</filename> file.</para>
334
335 </sect4>
336
337 <sect4>
338 <title>Advanced Requirements</title>
339
340 <para>More complex scenarios involving domain control or membership are
341 possible if the right flags are passed to the ./configure script when
342 the package is built. Such setups are advanced topics and cannot be
343 adequately covered in BLFS. Many complete books have been written on
344 these topics alone. It should be noted, however, that a
345 <application>Samba</application> BDC cannot be used as a fallback
346 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
347 fallback for a <application>Samba</application> PDC. Also in some
348 domain membership scenarios, the <command>winbindd</command> daemon and
349 the corresponding bootscript are needed.</para>
350
351 <para>There is quite a bit of documentation available which covers many
352 of these advanced configurations. Point your web browser to the links
353 below to view some of the documentation included with the
354 <application>Samba</application> package:</para>
355
356 <itemizedlist spacing='compact'>
357 <listitem>
358 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
359 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
360 </listitem>
361 <listitem>
362 <para>The Official Samba HOWTO and Reference Guide <ulink
363 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
364 </para>
365 </listitem>
366 <listitem>
367 <para>Samba-3 by Example
368 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
369 </para>
370 </listitem>
371 <listitem>
372 <para>The Samba-3 man Pages
373 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
374 </listitem>
375 </itemizedlist>
376
377 </sect4>
378
379 </sect3>
380
381 <sect3 id="samba3-swat-config">
382 <title>Configuring SWAT</title>
383
384 <para>The built in SWAT (<application>Samba</application> Web
385 Administration Tool) utility can be used for basic configuration of
386 the <application>Samba</application> installation, but because it may
387 be inconvenient, undesirable or perhaps even impossible to gain
388 access to the console, BLFS recommends setting up access to SWAT using
389 <application>Stunnel</application>. Without
390 <application>Stunnel</application>, the
391 <systemitem class="username">root</systemitem> password is transmitted
392 in clear text over the wire, and is considered an unacceptable security
393 risk. After considering the security implications of using SWAT without
394 <application>Stunnel</application>, and you still wish to implement SWAT
395 without it, instructions are provided at this end of this section.</para>
396
397 <indexterm zone="samba3 samba3-swat-config">
398 <primary sortas="g-SWAT">SWAT</primary>
399 </indexterm>
400
401 <sect4>
402 <title>Setting up SWAT using Stunnel</title>
403
404 <para>First install, or ensure you have already installed, the
405 <xref linkend="stunnel"/> package.</para>
406
407 <para>Next you must add entries to <filename>/etc/services</filename>
408 and modify the <command>inetd</command>/<command>xinetd</command>
409 configuration.</para>
410
411 <indexterm zone="samba3 samba3-swat-config">
412 <primary sortas="e-etc-services">/etc/services</primary>
413 </indexterm>
414
415 <indexterm zone="samba3 samba3-swat-config">
416 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
417 </indexterm>
418
419 <indexterm zone="samba3 samba3-swat-config">
420 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
421 </indexterm>
422
423 <para>Add swat and swat_tunnel entries to
424 <filename>/etc/services</filename> with the following commands issued
425 as the <systemitem class="username">root</systemitem> user:</para>
426
427<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
428echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
429
430 <para>If <command>inetd</command> is used, the following command will
431 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
432 user <systemitem class="username">root</systemitem>):</para>
433
434<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
435 &gt;&gt; /etc/inetd.conf</userinput></screen>
436
437 <para>Issue a <command>killall -HUP inetd</command> to reread the
438 changed <filename>inetd.conf</filename> file.</para>
439
440 <para>If you use <command>xinetd</command>, the following command will
441 create the <application>Samba</application> file as
442 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
443 or remove the <quote>only_from</quote> line to include the desired
444 host[s]):</para>
445
446<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
447<literal># Begin /etc/xinetd.d/swat_tunnel
448
449service swat_tunnel
450{
451 port = 902
452 socket_type = stream
453 wait = no
454 only_from = 127.0.0.1
455 user = root
456 server = /usr/sbin/swat
457 log_on_failure += USERID
458}
459
460# End /etc/xinetd.d/swat_tunnel</literal>
461EOF</userinput></screen>
462
463 <indexterm zone="samba3 samba3-swat-config">
464 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
465 </indexterm>
466
467 <para>Issue a <command>killall -HUP xinetd</command> to read the new
468 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
469
470 <para>Next, you must add an entry for the swat service to the
471 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
472 <systemitem class="username">root</systemitem>):</para>
473
474 <indexterm zone="samba3 samba3-swat-config">
475 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
476 </indexterm>
477
478<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
479<literal>[swat]
480accept = 901
481connect = 902</literal>
482
483EOF</userinput></screen>
484
485 <para>Restart the <command>stunnel</command> daemon using the following
486 command as the <systemitem class="username">root</systemitem> user:</para>
487
488<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
489
490 <para>SWAT can be launched by pointing your web browser to
491 <uri>https://<replaceable>[CA_DN_field]</replaceable>:901</uri>.
492 Substitute the hostname listed in the DN field of the CA certificate
493 used with <application>Stunnel</application> for
494 <replaceable>[CA_DN_field]</replaceable>.</para>
495
496 </sect4>
497
498 <sect4>
499 <title>Setting up SWAT without Stunnel</title>
500
501 <warning>
502 <para>BLFS does not recommend using these procedures because of the
503 security risk involved. However, in a home network environment and
504 disclosure of the <systemitem class='username'>root</systemitem>
505 password is an acceptable risk, the following
506 instructions are provided for your convenience.</para>
507 </warning>
508
509 <para>Add a swat entry to <filename>/etc/services</filename> with the
510 following command issued as the
511 <systemitem class='username'>root</systemitem> user:</para>
512
513<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
514
515 <para>If <command>inetd</command> is used, the following command
516 issued as the <systemitem class='username'>root</systemitem> user will
517 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
518
519<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
520 &gt;&gt; /etc/inetd.conf</userinput></screen>
521
522 <para>Issue a <command>killall -HUP inetd</command> to reread the
523 changed <filename>inetd.conf</filename> file.</para>
524
525 <para>If <command>xinetd</command> is used, the following command
526 issued as the <systemitem class='username'>root</systemitem> user
527 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
528
529<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
530<literal># Begin /etc/xinetd.d/swat
531
532service swat
533{
534 port = 901
535 socket_type = stream
536 wait = no
537 only_from = 127.0.0.1
538 user = root
539 server = /usr/sbin/swat
540 log_on_failure += USERID
541}
542
543# End /etc/xinetd.d/swat</literal>
544EOF</userinput></screen>
545
546 <para>Issue a <command>killall -HUP xinetd</command> to read the
547 new <filename>/etc/xinetd.d/swat</filename> file.</para>
548
549 <para>SWAT can be launched by pointing your web browser to
550 http://localhost:901.</para>
551
552 </sect4>
553
554 </sect3>
555
556 <sect3>
557 <title/>
558
559 <note>
560 <para>If you linked <application>Linux-PAM</application> into the
561 <application>Samba</application> build, you'll need to create an
562 <filename>/etc/pam.d/samba</filename> file.</para>
563 </note>
564
565 <indexterm zone="samba3 samba3-swat-config">
566 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
567 </indexterm>
568
569 </sect3>
570
571 <sect3 id="samba3-init">
572 <title>Boot Script</title>
573
574 <para>For your convenience, boot scripts have been provided for
575 <application>Samba</application>. There are two included in the
576 <xref linkend="intro-important-bootscripts"/> package. The first,
577 <filename>samba</filename>, will start the <command>smbd</command>
578 and <command>nmbd</command> daemons needed to provide SMB/CIFS
579 services. The second script, <filename>winbind</filename>, starts
580 the <command>winbindd</command> daemon, used for providing Windows
581 domain services to Linux clients.</para>
582
583 <indexterm zone="samba3 samba3-init">
584 <primary sortas="f-samba">samba</primary>
585 </indexterm>
586
587 <indexterm zone="samba3 samba3-init">
588 <primary sortas="f-winbind">winbind</primary>
589 </indexterm>
590
591 <para>The default <application>Samba</application> installation uses the
592 <systemitem class='username'>nobody</systemitem> user for guest access
593 to the server. This can be overridden by setting the
594 <option>guest account =</option> parameter in the
595 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
596 <option>guest account =</option> parameter, ensure this user exists in
597 the <filename>/etc/passwd</filename> file. To use the default user,
598 issue the following commands as the
599 <systemitem class='username'>root</systemitem> user:</para>
600
601<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
602useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
603 -s /bin/false -u 99 nobody</userinput></screen>
604
605 <para>Install the <filename>samba</filename> script with the following
606 command issued as the <systemitem class="username">root</systemitem>
607 user:</para>
608
609<screen role="root"><userinput>make install-samba</userinput></screen>
610
611 <para>If you also need the <filename>winbind</filename>
612 script:</para>
613
614<screen role="root"><userinput>make install-winbind</userinput></screen>
615
616 </sect3>
617
618 </sect2>
619
620 <sect2 role="content">
621 <title>Contents</title>
622
623 <segmentedlist>
624 <segtitle>Installed Programs</segtitle>
625 <segtitle>Installed Libraries</segtitle>
626 <segtitle>Installed Directories</segtitle>
627
628 <seglistitem>
629 <seg>findsmb, mount.smbfs, net, nmbd, nmblookup, ntlm_auth, pdbedit,
630 profiles, rpcclient, smbcacls, smbclient, smbcontrol, smbcquotas, smbd,
631 smbmnt, smbmount, smbpasswd, smbspool, smbstatus, smbtar, smbtree,
632 smbumount, swat, tdbbackup, tdbdump, tdbtool, testparm, testprns,
633 wbinfo, and winbindd</seg>
634 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, the
635 pam_winbind.so PAM library and assorted character set,
636 filesystem and support modules.</seg>
637 <seg>/etc/samba, /usr/lib/samba, /usr/share/samba, /var/cache/samba,
638 and /var/lib/samba</seg>
639 </seglistitem>
640 </segmentedlist>
641
642 <variablelist>
643 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
644 <?dbfo list-presentation="list"?>
645 <?dbhtml list-presentation="table"?>
646
647 <varlistentry id="findsmb">
648 <term><command>findsmb</command></term>
649 <listitem>
650 <para>lists information about machines that respond to
651 SMB name queries on a subnet.</para>
652 <indexterm zone="samba3 findsmb">
653 <primary sortas="b-findsmb">findsmb</primary>
654 </indexterm>
655 </listitem>
656 </varlistentry>
657
658 <varlistentry id="mount.smbfs">
659 <term><command>mount.smbfs</command></term>
660 <listitem>
661 <para>is a symlink to <command>smbmount</command> which provides
662 <command>/bin/mount</command> with a way to mount remote Windows
663 (or <application>Samba</application>) fileshares.</para>
664 <indexterm zone="samba3 mount.smbfs">
665 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
666 </indexterm>
667 </listitem>
668 </varlistentry>
669
670 <varlistentry id="net">
671 <term><command>net</command></term>
672 <listitem>
673 <para>is a tool for administration of
674 <application>Samba</application> and remote CIFS servers, similar
675 to the <command>net</command> utility for DOS/Windows.</para>
676 <indexterm zone="samba3 net">
677 <primary sortas="b-net">net</primary>
678 </indexterm>
679 </listitem>
680 </varlistentry>
681
682 <varlistentry id="nmbd">
683 <term><command>nmbd</command></term>
684 <listitem>
685 <para>is the <application>Samba</application>
686 NetBIOS name server.</para>
687 <indexterm zone="samba3 nmbd">
688 <primary sortas="b-nmbd">nmbd</primary>
689 </indexterm>
690 </listitem>
691 </varlistentry>
692
693 <varlistentry id="nmblookup">
694 <term><command>nmblookup</command></term>
695 <listitem>
696 <para>is used to query NetBIOS names and map
697 them to IP addresses.</para>
698 <indexterm zone="samba3 nmblookup">
699 <primary sortas="b-nmblookup">nmblookup</primary>
700 </indexterm>
701 </listitem>
702 </varlistentry>
703
704 <varlistentry id="ntlm_auth">
705 <term><command>ntlm_auth</command></term>
706 <listitem>
707 <para>is a tool to allow external access to Winbind's
708 NTLM authentication function.</para>
709 <indexterm zone="samba3 ntlm_auth">
710 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
711 </indexterm>
712 </listitem>
713 </varlistentry>
714
715 <varlistentry id="pdbedit">
716 <term><command>pdbedit</command></term>
717 <listitem>
718 <para>is a tool used to manage the SAM database.</para>
719 <indexterm zone="samba3 pdbedit">
720 <primary sortas="b-pdbedit">pdbedit</primary>
721 </indexterm>
722 </listitem>
723 </varlistentry>
724
725 <varlistentry id="profiles">
726 <term><command>profiles</command></term>
727 <listitem>
728 <para>is a utility that reports and changes SIDs in Windows
729 registry files. It currently only supports Windows NT.</para>
730 <indexterm zone="samba3 profiles">
731 <primary sortas="b-profiles">profiles</primary>
732 </indexterm>
733 </listitem>
734 </varlistentry>
735
736 <varlistentry id="rpcclient">
737 <term><command>rpcclient</command></term>
738 <listitem>
739 <para>is used to execute MS-RPC client side functions.</para>
740 <indexterm zone="samba3 rpcclient">
741 <primary sortas="b-rpcclient">rpcclient</primary>
742 </indexterm>
743 </listitem>
744 </varlistentry>
745
746 <varlistentry id="smbcacls">
747 <term><command>smbcacls</command></term>
748 <listitem>
749 <para>is used to manipulate Windows NT access control lists.</para>
750 <indexterm zone="samba3 smbcacls">
751 <primary sortas="b-smbcacls">smbcacls</primary>
752 </indexterm>
753 </listitem>
754 </varlistentry>
755
756 <varlistentry id="smbclient">
757 <term><command>smbclient</command></term>
758 <listitem>
759 <para>is a SMB/CIFS access utility, similar to FTP.</para>
760 <indexterm zone="samba3 smbclient">
761 <primary sortas="b-smbclient">smbclient</primary>
762 </indexterm>
763 </listitem>
764 </varlistentry>
765
766 <varlistentry id="smbcontrol">
767 <term><command>smbcontrol</command></term>
768 <listitem>
769 <para>is used to control running <command>smbd</command>,
770 <command>nmbd</command> and <command>winbindd</command>
771 daemons.</para>
772 <indexterm zone="samba3 smbcontrol">
773 <primary sortas="b-smbcontrol">smbcontrol</primary>
774 </indexterm>
775 </listitem>
776 </varlistentry>
777
778 <varlistentry id="smbcquotas">
779 <term><command>smbcquotas</command></term>
780 <listitem>
781 <para>is used to manipulate Windows NT quotas on
782 SMB file shares.</para>
783 <indexterm zone="samba3 smbcquotas">
784 <primary sortas="b-smbcquotas">smbcquotas</primary>
785 </indexterm>
786 </listitem>
787 </varlistentry>
788
789 <varlistentry id="smbd">
790 <term><command>smbd</command></term>
791 <listitem>
792 <para>is the main <application>Samba</application> daemon which
793 provides SMB/CIFS services to clients.</para>
794 <indexterm zone="samba3 smbd">
795 <primary sortas="b-smbd">smbd</primary>
796 </indexterm>
797 </listitem>
798 </varlistentry>
799
800 <varlistentry id="smbmnt">
801 <term><command>smbmnt</command></term>
802 <listitem>
803 <para>is a helper application used by the
804 <command>smbmount</command> program to do the actual mounting of
805 SMB shares. It can be installed setuid
806 <systemitem class='username'>root</systemitem> if you want
807 unprivileged users to be able to mount their SMB shares.</para>
808 <indexterm zone="samba3 smbmnt">
809 <primary sortas="b-smbmnt">smbmnt</primary>
810 </indexterm>
811 </listitem>
812 </varlistentry>
813
814 <varlistentry id="smbmount">
815 <term><command>smbmount</command></term>
816 <listitem>
817 <para>is usually invoked as <command>mount.smbfs</command> by the
818 <command>mount</command> command when using the
819 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
820 filesystem.</para>
821 <indexterm zone="samba3 smbmount">
822 <primary sortas="b-smbmount">smbmount</primary>
823 </indexterm>
824 </listitem>
825 </varlistentry>
826
827 <varlistentry id="smbpasswd">
828 <term><command>smbpasswd</command></term>
829 <listitem>
830 <para>changes a user's <application>Samba</application>
831 password.</para>
832 <indexterm zone="samba3 smbpasswd">
833 <primary sortas="b-smbpasswd">smbpasswd</primary>
834 </indexterm>
835 </listitem>
836 </varlistentry>
837
838 <varlistentry id="smbspool">
839 <term><command>smbspool</command></term>
840 <listitem>
841 <para>sends a print job to an SMB printer.</para>
842 <indexterm zone="samba3 smbspool">
843 <primary sortas="b-smbspool">smbspool</primary>
844 </indexterm>
845 </listitem>
846 </varlistentry>
847
848 <varlistentry id="smbstatus">
849 <term><command>smbstatus</command></term>
850 <listitem>
851 <para>reports current <application>Samba</application>
852 connections.</para>
853 <indexterm zone="samba3 smbstatus">
854 <primary sortas="b-smbstatus">smbstatus</primary>
855 </indexterm>
856 </listitem>
857 </varlistentry>
858
859 <varlistentry id="smbtar">
860 <term><command>smbtar</command></term>
861 <listitem>
862 <para>is a shell script used for backing up SMB/CIFS shares
863 directly to Linux tape drives or a file.</para>
864 <indexterm zone="samba3 smbtar">
865 <primary sortas="b-smbtar">smbtar</primary>
866 </indexterm>
867 </listitem>
868 </varlistentry>
869
870 <varlistentry id="smbtree">
871 <term><command>smbtree</command></term>
872 <listitem>
873 <para>is a text-based SMB network browser.</para>
874 <indexterm zone="samba3 smbtree">
875 <primary sortas="b-smbtree">smbtree</primary>
876 </indexterm>
877 </listitem>
878 </varlistentry>
879
880 <varlistentry id="smbumount">
881 <term><command>smbumount</command></term>
882 <listitem>
883 <para>is used by unprivileged users to unmount SMB filesystems,
884 provided that it is setuid root.</para>
885 <indexterm zone="samba3 smbumount">
886 <primary sortas="b-smbumount">smbumount</primary>
887 </indexterm>
888 </listitem>
889 </varlistentry>
890
891 <varlistentry id="swat">
892 <term><command>swat</command></term>
893 <listitem>
894 <para>is the <application>Samba</application> Web Administration
895 Tool.</para>
896 <indexterm zone="samba3 swat">
897 <primary sortas="b-swat">swat</primary>
898 </indexterm>
899 </listitem>
900 </varlistentry>
901
902 <varlistentry id="tdbbackup">
903 <term><command>tdbbackup</command></term>
904 <listitem>
905 <para>is a tool for backing up or validating the integrity of
906 <application>Samba</application> <filename>.tdb</filename>
907 files.</para>
908 <indexterm zone="samba3 tdbbackup">
909 <primary sortas="b-tdbbackup">tdbbackup</primary>
910 </indexterm>
911 </listitem>
912 </varlistentry>
913
914 <varlistentry id="tdbdump">
915 <term><command>tdbdump</command></term>
916 <listitem>
917 <para> is a tool used to print the contents of a
918 <application>Samba</application> <filename>.tdb</filename>
919 file.</para>
920 <indexterm zone="samba3 tdbdump">
921 <primary sortas="b-tdbdump">tdbdump</primary>
922 </indexterm>
923 </listitem>
924 </varlistentry>
925
926 <varlistentry id="tdbtool">
927 <term><command>tdbtool</command></term>
928 <listitem>
929 <para>is a tool which allows simple database manipulation from the
930 command line.</para>
931 <indexterm zone="samba3 tdbtool">
932 <primary sortas="b-tdbtool">tdbtool</primary>
933 </indexterm>
934 </listitem>
935 </varlistentry>
936
937 <varlistentry id="testparm">
938 <term><command>testparm</command></term>
939 <listitem>
940 <para>checks an <filename>smb.conf</filename> file for proper
941 syntax.</para>
942 <indexterm zone="samba3 testparm">
943 <primary sortas="b-testparm">testparm</primary>
944 </indexterm>
945 </listitem>
946 </varlistentry>
947
948 <varlistentry id="testprns">
949 <term><command>testprns</command></term>
950 <listitem>
951 <para>tests printer names.</para>
952 <indexterm zone="samba3 testprns">
953 <primary sortas="b-testprns">testprns</primary>
954 </indexterm>
955 </listitem>
956 </varlistentry>
957
958 <varlistentry id="wbinfo">
959 <term><command>wbinfo</command></term>
960 <listitem>
961 <para>queries a running <command>winbindd</command> daemon.</para>
962 <indexterm zone="samba3 wbinfo">
963 <primary sortas="b-wbinfo">wbinfo</primary>
964 </indexterm>
965 </listitem>
966 </varlistentry>
967
968 <varlistentry id="winbindd">
969 <term><command>winbindd</command></term>
970 <listitem>
971 <para>resolves names from Windows NT servers.</para>
972 <indexterm zone="samba3 winbindd">
973 <primary sortas="b-winbindd">winbindd</primary>
974 </indexterm>
975 </listitem>
976 </varlistentry>
977
978 </variablelist>
979
980 </sect2>
981
982</sect1>
Note: See TracBrowser for help on using the repository browser.