source: server/major/samba3.xml@ 1365d551

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 1365d551 was f4c0a45, checked in by Randy McMurchy <randy@…>, 13 years ago

Updated to Samba-3.5.6, and added commands to copy Samba schema files to the OpenLDAP schema directory

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8736 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 44.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://samba.org/samba/ftp/stable/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "bf6c09ea497a166df8bd672db1d8da8f">
10 <!ENTITY samba3-size "30.8 MB">
11 <!ENTITY samba3-buildsize "451 MB">
12 <!ENTITY samba3-time "5 SBU (additional 1.4 SBU to run the test suite)">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <!--<bridgehead renderas="sect3">Additional Downloads</bridgehead>
63 <itemizedlist spacing="compact">
64 <listitem>
65 <para>Required patch: <ulink
66 url="http://us3.samba.org/samba/patches/patches-&samba3-version;/spoolss.diff"/></para>
67 </listitem>
68 </itemizedlist> -->
69
70 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
71
72 <bridgehead renderas="sect4">Optional</bridgehead>
73 <para role="optional"><xref linkend="popt"/>,
74 <xref linkend="linux-pam"/>,
75 <xref linkend="cups"/>,
76 <xref linkend="openldap"/>,
77 <xref linkend="gamin"/>,
78 <xref linkend="acl"/>,
79 <xref linkend="xfs"/>,
80 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
81 <xref linkend="python"/> (used only in parts of the test suite),
82 <ulink url="http://tdb.samba.org/">tdb</ulink> (version 1.2.1),
83 <ulink url="http://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/">libcap2</ulink>,
84 <ulink url="http://www.nongnu.org/libunwind/">libunwind</ulink>,
85 <ulink url="http://people.redhat.com/dhowells/keyutils/">keyutils</ulink>
86 (required to build the <command>cifs.upcall</command> program),
87 <xref linkend="avahi"/>,
88 <ulink url="http://www.openafs.org/">OpenAFS</ulink>,
89 and <ulink url="http://valgrind.org/">Valgrind</ulink> (optionally
90 used by the test suite)</para>
91
92 <para>You will need to install one of the kerberos packages if you plan
93 on using your system to join a Windows NT domain.</para>
94
95 <bridgehead renderas="sect4">Optional for Samba4 Support</bridgehead>
96 <para role="optional"><xref linkend="gnutls"/> (recommended),
97 <xref linkend="python"/>, and
98 <xref linkend="sqlite"/></para>
99
100 <para condition="html" role="usernotes">User Notes:
101 <ulink url="&blfs-wiki;/samba3"/></para>
102
103 </sect2>
104
105 <sect2 role="installation">
106 <title>Installation of Samba</title>
107
108 <note>
109 <para>If you wish to run the test suite after the binaries are built,
110 you must add the <option>--enable-socket-wrapper</option> parameter to
111 the <command>configure</command> script below. You may want to run
112 <command>configure</command> with the <option>--help</option> parameter
113 first. There may be other parameters needed to take advantage of
114 optional dependencies.</para>
115 </note>
116
117 <para>Install <application>Samba</application> by running the following
118 commands:</para>
119
120<screen><userinput>cd source3 &amp;&amp;
121
122./configure \
123 --prefix=/usr \
124 --sysconfdir=/etc \
125 --localstatedir=/var \
126 --with-piddir=/var/run \
127 --with-pammodulesdir=/lib/security \
128 --with-fhs \
129 --with-automount \
130 --with-cifsumount \
131 --enable-nss-wrapper \
132 --with-pthreads &amp;&amp;
133make</userinput></screen>
134
135 <para>To test the results, issue: <command>make test</command>. If you have
136 <application>Linux-PAM</application> installed and built the PAM library
137 modules, you can perform a dlopen test by issuing:
138 <command>make test_pam_modules</command>.</para>
139
140 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
141
142<screen role="root"><userinput>make install &amp;&amp;
143
144install -v -m755 ../nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
145ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
146ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
147
148install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
149
150if [ -d /etc/openldap/schema ]; then
151 install -v -m644 ../examples/LDAP/README \
152 /etc/openldap/schema/README.LDAP &amp;&amp;
153 install -v -m644 ../examples/LDAP/samba* \
154 /etc/openldap/schema &amp;&amp;
155 install -v -m755 ../examples/LDAP/{convert*,get*,ol*} \
156 /etc/openldap/schema &amp;&amp;
157fi &amp;&amp;
158
159install -v -m755 -d /usr/share/doc/samba-&samba3-version; &amp;&amp;
160install -v -m644 ../docs/*.pdf \
161 /usr/share/doc/samba-&samba3-version; &amp;&amp;
162ln -v -s ../../samba/swat /usr/share/doc/samba-&samba3-version;</userinput></screen>
163
164 </sect2>
165
166 <sect2 role="commands">
167 <title>Command Explanations</title>
168
169 <para><option>--enable-merged-build</option>: Use this parameter to build
170 the (alpha) Samba4 components (GnuTLS is recommended).</para>
171
172 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
173 file directory to avoid the default of
174 <filename class="directory">/usr/etc</filename>.</para>
175
176 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
177 data directory to avoid the default of
178 <filename class="directory">/usr/var</filename>.</para>
179
180 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
181 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
182
183 <para><parameter>--with-automount</parameter>: Includes automounting
184 support.</para>
185
186 <para><parameter>--with-cifsumount</parameter>: Builds the
187 <command>umount.cifs</command> program.</para>
188
189 <para><parameter>--enable-nss-wrapper</parameter>: Builds the nss-wrapper
190 library.</para>
191
192 <para><parameter>--with-pthreads</parameter>: Adds threading support.</para>
193
194 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
195 The nss libraries are not installed by default. If you intend to use
196 winbindd for Windows NT domain authentication, and/or WINS name resolution,
197 you need these libraries.</para>
198
199 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
200 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
201 These symlinks are required by <application>Glibc</application> to use the
202 NSS libraries.</para>
203
204 <para><command>if [ -d /etc/openldap/schema ]; then ...; fi</command>:
205 These commands are used to see if you have an OpenLDAP installation, and if
206 so, they copy sample Samba schemas to the OpenLDAP
207 <filename class='directory'>schema</filename> directory.</para>
208
209 <para><command>install -v -m644 ../examples/smb.conf.default
210 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
211 file into <filename>/etc/samba</filename>. This sample configuration will
212 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
213 make the appropriate changes for your installation. See the configuration
214 section for minimum values which must be set.</para>
215
216 </sect2>
217
218 <sect2 role="configuration">
219 <title>Configuring Samba</title>
220
221 <sect3 id="samba3-config">
222 <title>Config Files</title>
223
224 <para>/etc/samba/smb.conf</para>
225
226 <indexterm zone="samba3 samba3-config">
227 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
228 </indexterm>
229
230 </sect3>
231
232 <sect3>
233 <title>Mounting Shares by Unprivileged Users</title>
234
235 <para>If it is desired for unprivileged users to directly mount (and
236 unmount) CIFS shares, the <command>mount.cifs</command> and
237 <command>umount.cifs</command> commands must be setuid
238 <systemitem class='username'>root</systemitem>. Note that users can
239 only mount CIFS shares on a mount point owned by that user (requires
240 write access also). If desired, change these programs to setuid
241 <systemitem class='username'>root</systemitem> by issuing the following
242 command as the <systemitem class='username'>root</systemitem>
243 user:</para>
244
245<screen role="root"><userinput>chmod -v 4755 /usr/sbin/{,u}mount.cifs</userinput></screen>
246
247 </sect3>
248
249 <sect3>
250 <title>Printing to SMB Clients</title>
251
252 <para>If you use <application>CUPS</application> for print services,
253 and you wish to print to a printer attached to an SMB client, you
254 need to create an SMB backend device. To create the device, issue the
255 following command as the <systemitem class="username">root</systemitem>
256 user:</para>
257
258<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
259
260 </sect3>
261
262 <sect3>
263 <title>Configuration Information</title>
264
265 <para>Due to the complexity and the many various uses for
266 <application>Samba</application>, complete configuration for all the
267 package's capabilities is well beyond the scope of the BLFS book. This
268 section provides instructions to configure the
269 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
270 The complete contents of <filename>/etc/samba/smb.conf</filename> will
271 depend on the purpose of <application>Samba</application>
272 installation.</para>
273
274 <note>
275 <para>You may find it easier to copy the configuration parameters shown
276 below into an empty <filename>/etc/samba/smb.conf</filename> file
277 instead of copying and editing the default file as mentioned in the
278 <quote>Command Explanations</quote> section. How you create/edit the
279 <filename>/etc/samba/smb.conf</filename> file will be left up to
280 you. Do ensure the file is only writeable by the
281 <systemitem class="username">root</systemitem> user (mode 644).</para>
282 </note>
283
284 <sect4>
285 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
286
287 <para>Choose this variant if you only want to transfer files using
288 <command>smbclient</command>, mount Windows shares and print to Windows
289 printers, and don't want to share your files and printers to Windows
290 machines.</para>
291
292 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
293 three parameters is sufficient:</para>
294
295<screen role='root'><literal>[global]
296 workgroup = <replaceable>MYGROUP</replaceable>
297 dos charset = <replaceable>cp850</replaceable>
298 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
299
300 <para>The values in this example specify that the computer belongs to a
301 Windows workgroup named
302 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
303 <quote><replaceable>cp850</replaceable></quote> character set on the
304 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
305 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
306 encoding on the disk. Adjust these values appropriately for your
307 installation. The <quote>unix charset</quote> value must be the same as
308 the output of <command>locale charmap</command> when executed with the
309 <envar>LANG</envar> variable set to your preferred locale, otherwise the
310 <command>ls</command> command may not display correct filenames of
311 downloaded files.</para>
312
313 <para>There is no need to run any <application>Samba</application>
314 servers in this scenario, thus you don't need to install the provided
315 bootscripts.</para>
316
317 </sect4>
318
319 <sect4>
320 <title>Scenario 2: Standalone File/Print Server</title>
321
322 <para>Choose this variant if you want to share your files and printers
323 to Windows machines in your workgroup in addition to the capabilities
324 described in Scenario 1.</para>
325
326 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
327 file may be a good template to start from. Also add
328 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
329 to the <quote>[global]</quote> section as described in Scenario 1 in
330 order to prevent filename corruption.</para>
331
332 <para>The following configuration file creates a separate share for each
333 user's home directory and also makes all printers available to Windows
334 machines:</para>
335
336<screen role='root'><literal>[global]
337 workgroup = <replaceable>MYGROUP</replaceable>
338 dos charset = <replaceable>cp850</replaceable>
339 unix charset = <replaceable>ISO-8859-1</replaceable>
340
341[homes]
342 comment = Home Directories
343 browseable = no
344 writable = yes
345
346[printers]
347 comment = All Printers
348 path = /var/spool/samba
349 browseable = no
350 guest ok = no
351 printable = yes</literal></screen>
352
353 <para>Other parameters you may wish to customize in the
354 <quote>[global]</quote> section include:</para>
355
356<screen role='root'><literal> server string =
357 security =
358 hosts allow =
359 load printers =
360 log file =
361 max log size =
362 socket options =
363 local master =</literal></screen>
364
365 <para>Reference the comments in the
366 <filename>/etc/samba/smb.conf.default</filename> file for information
367 regarding these parameters.</para>
368
369 <para>Since the <command>smbd</command> and <command>nmbd</command>
370 daemons are needed in this case, install the <filename>samba</filename>
371 bootscript. Be sure to run <command>smbpasswd</command> (with the
372 <option>-a</option> option to add users) to enable and
373 set passwords for all accounts that need
374 <application>Samba</application> access, or use the SWAT web interface
375 (see below) to do the same. Using the default
376 <application>Samba</application> passdb backend, any user you attempt
377 to add will also be required to exist in the
378 <filename>/etc/passwd</filename> file.</para>
379
380 </sect4>
381
382 <sect4>
383 <title>Advanced Requirements</title>
384
385 <para>More complex scenarios involving domain control or membership are
386 possible if the right flags are passed to the ./configure script when
387 the package is built. Such setups are advanced topics and cannot be
388 adequately covered in BLFS. Many complete books have been written on
389 these topics alone. It should be noted, however, that a
390 <application>Samba</application> BDC cannot be used as a fallback
391 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
392 fallback for a <application>Samba</application> PDC. Also in some
393 domain membership scenarios, the <command>winbindd</command> daemon and
394 the corresponding bootscript are needed.</para>
395
396 <para>There is quite a bit of documentation available which covers many
397 of these advanced configurations. Point your web browser to the links
398 below to view some of the documentation included with the
399 <application>Samba</application> package:</para>
400
401 <itemizedlist spacing='compact'>
402 <listitem>
403 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
404 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
405 </listitem>
406 <listitem>
407 <para>The Official Samba HOWTO and Reference Guide <ulink
408 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
409 </para>
410 </listitem>
411 <listitem>
412 <para>Samba-3 by Example
413 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
414 </para>
415 </listitem>
416 <listitem>
417 <para>The Samba-3 man Pages
418 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
419 </listitem>
420 </itemizedlist>
421
422 </sect4>
423
424 </sect3>
425
426 <sect3 id="samba3-swat-config">
427 <title>Configuring SWAT</title>
428
429 <para>The built in SWAT (<application>Samba</application> Web
430 Administration Tool) utility can be used for basic configuration of
431 the <application>Samba</application> installation, but because it may
432 be inconvenient, undesirable or perhaps even impossible to gain
433 access to the console, BLFS recommends setting up access to SWAT using
434 <application>Stunnel</application>. Without
435 <application>Stunnel</application>, the
436 <systemitem class="username">root</systemitem> password is transmitted
437 in clear text over the wire, and is considered an unacceptable security
438 risk. After considering the security implications of using SWAT without
439 <application>Stunnel</application>, and you still wish to implement SWAT
440 without it, instructions are provided at this end of this section.</para>
441
442 <indexterm zone="samba3 samba3-swat-config">
443 <primary sortas="g-SWAT">SWAT</primary>
444 </indexterm>
445
446 <sect4>
447 <title>Setting up SWAT using Stunnel</title>
448
449 <para>First install, or ensure you have already installed, the
450 <xref linkend="stunnel"/> package.</para>
451
452 <para>Next you must add entries to <filename>/etc/services</filename>
453 and modify the <command>inetd</command>/<command>xinetd</command>
454 configuration.</para>
455
456 <indexterm zone="samba3 samba3-swat-config">
457 <primary sortas="e-etc-services">/etc/services</primary>
458 </indexterm>
459
460 <indexterm zone="samba3 samba3-swat-config">
461 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
462 </indexterm>
463
464 <indexterm zone="samba3 samba3-swat-config">
465 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
466 </indexterm>
467
468 <para>Add swat and swat_tunnel entries to
469 <filename>/etc/services</filename> with the following commands issued
470 as the <systemitem class="username">root</systemitem> user:</para>
471
472<screen role="root"><userinput>echo "swat 904/tcp" &gt;&gt; /etc/services &amp;&amp;
473echo "swat_tunnel 905/tcp" &gt;&gt; /etc/services</userinput></screen>
474
475 <para>If <command>inetd</command> is used, the following command will
476 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
477 user <systemitem class="username">root</systemitem>):</para>
478
479<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
480 &gt;&gt; /etc/inetd.conf</userinput></screen>
481
482 <para>Issue a <command>killall -HUP inetd</command> to reread the
483 changed <filename>inetd.conf</filename> file.</para>
484
485 <para>If you use <command>xinetd</command>, the following command will
486 create the <application>Samba</application> file as
487 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
488 or remove the <quote>only_from</quote> line to include the desired
489 host[s]):</para>
490
491<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
492<literal># Begin /etc/xinetd.d/swat_tunnel
493
494service swat_tunnel
495{
496 port = 905
497 socket_type = stream
498 wait = no
499 only_from = 127.0.0.1
500 user = root
501 server = /usr/sbin/swat
502 log_on_failure += USERID
503}
504
505# End /etc/xinetd.d/swat_tunnel</literal>
506EOF</userinput></screen>
507
508 <indexterm zone="samba3 samba3-swat-config">
509 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
510 </indexterm>
511
512 <para>Issue a <command>killall -HUP xinetd</command> to read the new
513 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
514
515 <para>Next, you must add an entry for the swat service to the
516 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
517 <systemitem class="username">root</systemitem>):</para>
518
519 <indexterm zone="samba3 samba3-swat-config">
520 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
521 </indexterm>
522
523<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
524<literal>[swat]
525accept = 904
526connect = 905
527TIMEOUTclose = 1</literal>
528
529EOF</userinput></screen>
530
531 <para>Restart the <command>stunnel</command> daemon using the following
532 command as the <systemitem class="username">root</systemitem> user:</para>
533
534<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
535
536 <para>SWAT can be launched by pointing your web browser to
537 <uri>https://<replaceable>&lt;CA_DN_field&gt;</replaceable>:904</uri>.
538 Substitute the hostname listed in the DN field of the CA certificate
539 used with <application>Stunnel</application> for
540 <replaceable>&lt;CA_DN_field&gt;</replaceable>.</para>
541
542 </sect4>
543
544 <sect4>
545 <title>Setting up SWAT without Stunnel</title>
546
547 <warning>
548 <para>BLFS does not recommend using these procedures because of the
549 security risk involved. However, in a home network environment and
550 disclosure of the <systemitem class='username'>root</systemitem>
551 password is an acceptable risk, the following
552 instructions are provided for your convenience.</para>
553 </warning>
554
555 <para>Add a swat entry to <filename>/etc/services</filename> with the
556 following command issued as the
557 <systemitem class='username'>root</systemitem> user:</para>
558
559<screen role='root'><userinput>echo "swat 904/tcp" &gt;&gt; /etc/services</userinput></screen>
560
561 <para>If <command>inetd</command> is used, the following command
562 issued as the <systemitem class='username'>root</systemitem> user will
563 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
564
565<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
566 &gt;&gt; /etc/inetd.conf</userinput></screen>
567
568 <para>Issue a <command>killall -HUP inetd</command> to reread the
569 changed <filename>inetd.conf</filename> file.</para>
570
571 <para>If <command>xinetd</command> is used, the following command
572 issued as the <systemitem class='username'>root</systemitem> user
573 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
574
575<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
576<literal># Begin /etc/xinetd.d/swat
577
578service swat
579{
580 port = 904
581 socket_type = stream
582 wait = no
583 only_from = 127.0.0.1
584 user = root
585 server = /usr/sbin/swat
586 log_on_failure += USERID
587}
588
589# End /etc/xinetd.d/swat</literal>
590EOF</userinput></screen>
591
592 <para>Issue a <command>killall -HUP xinetd</command> to read the
593 new <filename>/etc/xinetd.d/swat</filename> file.</para>
594
595 <para>SWAT can be launched by pointing your web browser to
596 http://localhost:904.</para>
597
598 </sect4>
599
600 </sect3>
601
602 <sect3>
603 <title/>
604
605 <note>
606 <para>If you linked <application>Linux-PAM</application> into the
607 <application>Samba</application> build, you'll need to create an
608 <filename>/etc/pam.d/samba</filename> file.</para>
609 </note>
610
611 <indexterm zone="samba3 samba3-swat-config">
612 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
613 </indexterm>
614
615 </sect3>
616
617 <sect3 id="samba3-init">
618 <title>Boot Script</title>
619
620 <para>For your convenience, boot scripts have been provided for
621 <application>Samba</application>. There are two included in the
622 <xref linkend="bootscripts"/> package. The first,
623 <filename>samba</filename>, will start the <command>smbd</command>
624 and <command>nmbd</command> daemons needed to provide SMB/CIFS
625 services. The second script, <filename>winbind</filename>, starts
626 the <command>winbindd</command> daemon, used for providing Windows
627 domain services to Linux clients.</para>
628
629 <indexterm zone="samba3 samba3-init">
630 <primary sortas="f-samba">samba</primary>
631 </indexterm>
632
633 <indexterm zone="samba3 samba3-init">
634 <primary sortas="f-winbind">winbind</primary>
635 </indexterm>
636
637 <para>The default <application>Samba</application> installation uses the
638 <systemitem class='username'>nobody</systemitem> user for guest access
639 to the server. This can be overridden by setting the
640 <option>guest account =</option> parameter in the
641 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
642 <option>guest account =</option> parameter, ensure this user exists in
643 the <filename>/etc/passwd</filename> file. To use the default user,
644 issue the following commands as the
645 <systemitem class='username'>root</systemitem> user:</para>
646
647<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
648useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
649 -s /bin/false -u 99 nobody</userinput></screen>
650
651 <para>Install the <filename>samba</filename> script with the following
652 command issued as the <systemitem class="username">root</systemitem>
653 user:</para>
654
655<screen role="root"><userinput>make install-samba</userinput></screen>
656
657 <para>If you also need the <filename>winbind</filename>
658 script:</para>
659
660<screen role="root"><userinput>make install-winbind</userinput></screen>
661
662 </sect3>
663
664 </sect2>
665
666 <sect2 role="content">
667 <title>Contents</title>
668
669 <segmentedlist>
670 <segtitle>Installed Programs</segtitle>
671 <segtitle>Installed Libraries</segtitle>
672 <segtitle>Installed Directories</segtitle>
673
674 <seglistitem>
675 <seg>cifs.upcall, eventlogadm, findsmb, ldbadd, ldbdel, ldbedit,
676 ldbmodify, ldbrename, ldbsearch, mount.cifs, net, nmbd,
677 nmblookup, ntlm_auth, pdbedit, profiles, rpcclient, sharesec, smbcacls,
678 smbclient, smbcontrol, smbcquotas, smbd, smbget, smbpasswd, smbspool,
679 smbstatus, smbtar, smbtree, swat, testparm, umount.cifs, wbinfo,
680 winbindd, and (if not using system TDB) tdbbackup, tdbdump, and
681 tdbtool</seg>
682 <seg>libnss_winbind.so, libnss_wins.so, libnetapi.so, libsmbclient.so,
683 libsmbsharemodes.so, libtalloc.so, libwbclient.so, the pam_winbind.so
684 and pam_smbpass.so PAM libraries, and assorted character set,
685 filesystem and support modules.</seg>
686 <seg>/etc/samba, /usr/lib/samba, /usr/share/doc/samba-&samba3-version;,
687 /usr/share/samba, /var/lib/samba and (if configured) /var/log/samba</seg>
688 </seglistitem>
689 </segmentedlist>
690
691 <variablelist>
692 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
693 <?dbfo list-presentation="list"?>
694 <?dbhtml list-presentation="table"?>
695
696 <varlistentry id="cifs.upcall">
697 <term><command>cifs.upcall</command></term>
698 <listitem>
699 <para>is a userspace upcall helper for Common Internet File Systems
700 (CIFS)</para>
701 <indexterm zone="samba3 cifs.upcall">
702 <primary sortas="b-cifs.upcall">cifs.upcall</primary>
703 </indexterm>
704 </listitem>
705 </varlistentry>
706
707 <varlistentry id="eventlogadm">
708 <term><command>eventlogadm</command></term>
709 <listitem>
710 <para>is used to write records to eventlogs from STDIN, add the
711 specified source and DLL eventlog registry entries and display the
712 active eventlog names (from <filename>smb.conf</filename>).</para>
713 <indexterm zone="samba3 eventlogadm">
714 <primary sortas="b-eventlogadm">eventlogadm</primary>
715 </indexterm>
716 </listitem>
717 </varlistentry>
718
719 <varlistentry id="findsmb">
720 <term><command>findsmb</command></term>
721 <listitem>
722 <para>lists information about machines that respond to
723 SMB name queries on a subnet.</para>
724 <indexterm zone="samba3 findsmb">
725 <primary sortas="b-findsmb">findsmb</primary>
726 </indexterm>
727 </listitem>
728 </varlistentry>
729
730 <varlistentry id="ldbadd">
731 <term><command>ldbadd</command></term>
732 <listitem>
733 <para>is a command-line utility for adding records to an LDB
734 database.</para>
735 <indexterm zone="samba3 ldbadd">
736 <primary sortas="b-ldbadd">ldbadd</primary>
737 </indexterm>
738 </listitem>
739 </varlistentry>
740
741 <varlistentry id="ldbdel">
742 <term><command>ldbdel</command></term>
743 <listitem>
744 <para>is a command-line program for deleting LDB database
745 records.</para>
746 <indexterm zone="samba3 ldbdel">
747 <primary sortas="b-ldbdel">ldbdel</primary>
748 </indexterm>
749 </listitem>
750 </varlistentry>
751
752 <varlistentry id="ldbedit">
753 <term><command>ldbedit</command></term>
754 <listitem>
755 <para>allows you to edit LDB databases using your preferred
756 editor.</para>
757 <indexterm zone="samba3 ldbedit">
758 <primary sortas="b-ldbedit">ldbedit</primary>
759 </indexterm>
760 </listitem>
761 </varlistentry>
762
763 <varlistentry id="ldbmodify">
764 <term><command>ldbmodify</command></term>
765 <listitem>
766 <para>allows you to modify records in an LDB database.</para>
767 <indexterm zone="samba3 ldbmodify">
768 <primary sortas="b-ldbmodify">ldbmodify</primary>
769 </indexterm>
770 </listitem>
771 </varlistentry>
772
773 <varlistentry id="ldbrename">
774 <term><command>ldbrename</command></term>
775 <listitem>
776 <para>allows you to edit LDB databases using your preferred
777 editor.</para>
778 <indexterm zone="samba3 ldbrename">
779 <primary sortas="b-ldbrename">ldbrename</primary>
780 </indexterm>
781 </listitem>
782 </varlistentry>
783
784 <varlistentry id="ldbsearch">
785 <term><command>ldbsearch</command></term>
786 <listitem>
787 <para>searches an LDB database for records matching a specified
788 expression.</para>
789 <indexterm zone="samba3 ldbsearch">
790 <primary sortas="b-ldbsearch">ldbsearch</primary>
791 </indexterm>
792 </listitem>
793 </varlistentry>
794
795 <varlistentry id="mount.cifs">
796 <term><command>mount.cifs</command></term>
797 <listitem>
798 <para>mounts a Linux CIFS filesystem. It is usually invoked
799 indirectly by the <command>mount</command> command when using the
800 <option>-t cifs</option> option.</para>
801 <indexterm zone="samba3 mount.cifs">
802 <primary sortas="b-mount.cifs">mount.cifs</primary>
803 </indexterm>
804 </listitem>
805 </varlistentry>
806
807 <varlistentry id="net">
808 <term><command>net</command></term>
809 <listitem>
810 <para>is a tool for administration of
811 <application>Samba</application> and remote CIFS servers, similar
812 to the <command>net</command> utility for DOS/Windows.</para>
813 <indexterm zone="samba3 net">
814 <primary sortas="b-net">net</primary>
815 </indexterm>
816 </listitem>
817 </varlistentry>
818
819 <varlistentry id="nmbd">
820 <term><command>nmbd</command></term>
821 <listitem>
822 <para>is the <application>Samba</application>
823 NetBIOS name server.</para>
824 <indexterm zone="samba3 nmbd">
825 <primary sortas="b-nmbd">nmbd</primary>
826 </indexterm>
827 </listitem>
828 </varlistentry>
829
830 <varlistentry id="nmblookup">
831 <term><command>nmblookup</command></term>
832 <listitem>
833 <para>is used to query NetBIOS names and map
834 them to IP addresses.</para>
835 <indexterm zone="samba3 nmblookup">
836 <primary sortas="b-nmblookup">nmblookup</primary>
837 </indexterm>
838 </listitem>
839 </varlistentry>
840
841 <varlistentry id="ntlm_auth">
842 <term><command>ntlm_auth</command></term>
843 <listitem>
844 <para>is a tool to allow external access to Winbind's
845 NTLM authentication function.</para>
846 <indexterm zone="samba3 ntlm_auth">
847 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
848 </indexterm>
849 </listitem>
850 </varlistentry>
851
852 <varlistentry id="pdbedit">
853 <term><command>pdbedit</command></term>
854 <listitem>
855 <para>is a tool used to manage the SAM database.</para>
856 <indexterm zone="samba3 pdbedit">
857 <primary sortas="b-pdbedit">pdbedit</primary>
858 </indexterm>
859 </listitem>
860 </varlistentry>
861
862 <varlistentry id="profiles">
863 <term><command>profiles</command></term>
864 <listitem>
865 <para>is a utility that reports and changes SIDs in Windows
866 registry files. It currently only supports Windows NT.</para>
867 <indexterm zone="samba3 profiles">
868 <primary sortas="b-profiles">profiles</primary>
869 </indexterm>
870 </listitem>
871 </varlistentry>
872
873 <varlistentry id="rpcclient">
874 <term><command>rpcclient</command></term>
875 <listitem>
876 <para>is used to execute MS-RPC client side functions.</para>
877 <indexterm zone="samba3 rpcclient">
878 <primary sortas="b-rpcclient">rpcclient</primary>
879 </indexterm>
880 </listitem>
881 </varlistentry>
882
883 <varlistentry id="sharesec">
884 <term><command>sharesec</command></term>
885 <listitem>
886 <para>manipulates share ACL permissions on SMB file shares.</para>
887 <indexterm zone="samba3 sharesec">
888 <primary sortas="b-sharesec">sharesec</primary>
889 </indexterm>
890 </listitem>
891 </varlistentry>
892
893 <varlistentry id="smbcacls">
894 <term><command>smbcacls</command></term>
895 <listitem>
896 <para>is used to manipulate Windows NT access control lists.</para>
897 <indexterm zone="samba3 smbcacls">
898 <primary sortas="b-smbcacls">smbcacls</primary>
899 </indexterm>
900 </listitem>
901 </varlistentry>
902
903 <varlistentry id="smbclient">
904 <term><command>smbclient</command></term>
905 <listitem>
906 <para>is a SMB/CIFS access utility, similar to FTP.</para>
907 <indexterm zone="samba3 smbclient">
908 <primary sortas="b-smbclient">smbclient</primary>
909 </indexterm>
910 </listitem>
911 </varlistentry>
912
913 <varlistentry id="smbcontrol">
914 <term><command>smbcontrol</command></term>
915 <listitem>
916 <para>is used to control running <command>smbd</command>,
917 <command>nmbd</command> and <command>winbindd</command>
918 daemons.</para>
919 <indexterm zone="samba3 smbcontrol">
920 <primary sortas="b-smbcontrol">smbcontrol</primary>
921 </indexterm>
922 </listitem>
923 </varlistentry>
924
925 <varlistentry id="smbcquotas">
926 <term><command>smbcquotas</command></term>
927 <listitem>
928 <para>is used to manipulate Windows NT quotas on
929 SMB file shares.</para>
930 <indexterm zone="samba3 smbcquotas">
931 <primary sortas="b-smbcquotas">smbcquotas</primary>
932 </indexterm>
933 </listitem>
934 </varlistentry>
935
936 <varlistentry id="smbd">
937 <term><command>smbd</command></term>
938 <listitem>
939 <para>is the main <application>Samba</application> daemon which
940 provides SMB/CIFS services to clients.</para>
941 <indexterm zone="samba3 smbd">
942 <primary sortas="b-smbd">smbd</primary>
943 </indexterm>
944 </listitem>
945 </varlistentry>
946
947 <varlistentry id="smbget">
948 <term><command>smbget</command></term>
949 <listitem>
950 <para>is a simple utility with <command>wget</command>-like
951 semantics, that can download files from SMB servers. You can specify
952 the files you would like to download on the command-line.</para>
953 <indexterm zone="samba3 smbget">
954 <primary sortas="b-smbget">smbget</primary>
955 </indexterm>
956 </listitem>
957 </varlistentry>
958
959 <varlistentry id="smbpasswd">
960 <term><command>smbpasswd</command></term>
961 <listitem>
962 <para>changes a user's <application>Samba</application>
963 password.</para>
964 <indexterm zone="samba3 smbpasswd">
965 <primary sortas="b-smbpasswd">smbpasswd</primary>
966 </indexterm>
967 </listitem>
968 </varlistentry>
969
970 <varlistentry id="smbspool">
971 <term><command>smbspool</command></term>
972 <listitem>
973 <para>sends a print job to an SMB printer.</para>
974 <indexterm zone="samba3 smbspool">
975 <primary sortas="b-smbspool">smbspool</primary>
976 </indexterm>
977 </listitem>
978 </varlistentry>
979
980 <varlistentry id="smbstatus">
981 <term><command>smbstatus</command></term>
982 <listitem>
983 <para>reports current <application>Samba</application>
984 connections.</para>
985 <indexterm zone="samba3 smbstatus">
986 <primary sortas="b-smbstatus">smbstatus</primary>
987 </indexterm>
988 </listitem>
989 </varlistentry>
990
991 <varlistentry id="smbtar">
992 <term><command>smbtar</command></term>
993 <listitem>
994 <para>is a shell script used for backing up SMB/CIFS shares
995 directly to Linux tape drives or a file.</para>
996 <indexterm zone="samba3 smbtar">
997 <primary sortas="b-smbtar">smbtar</primary>
998 </indexterm>
999 </listitem>
1000 </varlistentry>
1001
1002 <varlistentry id="smbtree">
1003 <term><command>smbtree</command></term>
1004 <listitem>
1005 <para>is a text-based SMB network browser.</para>
1006 <indexterm zone="samba3 smbtree">
1007 <primary sortas="b-smbtree">smbtree</primary>
1008 </indexterm>
1009 </listitem>
1010 </varlistentry>
1011
1012 <varlistentry id="swat">
1013 <term><command>swat</command></term>
1014 <listitem>
1015 <para>is the <application>Samba</application> Web Administration
1016 Tool.</para>
1017 <indexterm zone="samba3 swat">
1018 <primary sortas="b-swat">swat</primary>
1019 </indexterm>
1020 </listitem>
1021 </varlistentry>
1022
1023 <varlistentry id="tdbbackup">
1024 <term><command>tdbbackup</command></term>
1025 <listitem>
1026 <para>is a tool for backing up or validating the integrity of
1027 <application>Samba</application> <filename>.tdb</filename>
1028 files.</para>
1029 <indexterm zone="samba3 tdbbackup">
1030 <primary sortas="b-tdbbackup">tdbbackup</primary>
1031 </indexterm>
1032 </listitem>
1033 </varlistentry>
1034
1035 <varlistentry id="tdbdump">
1036 <term><command>tdbdump</command></term>
1037 <listitem>
1038 <para> is a tool used to print the contents of a
1039 <application>Samba</application> <filename>.tdb</filename>
1040 file.</para>
1041 <indexterm zone="samba3 tdbdump">
1042 <primary sortas="b-tdbdump">tdbdump</primary>
1043 </indexterm>
1044 </listitem>
1045 </varlistentry>
1046
1047 <varlistentry id="tdbtool">
1048 <term><command>tdbtool</command></term>
1049 <listitem>
1050 <para>is a tool which allows simple database manipulation from the
1051 command line.</para>
1052 <indexterm zone="samba3 tdbtool">
1053 <primary sortas="b-tdbtool">tdbtool</primary>
1054 </indexterm>
1055 </listitem>
1056 </varlistentry>
1057
1058 <varlistentry id="testparm">
1059 <term><command>testparm</command></term>
1060 <listitem>
1061 <para>checks an <filename>smb.conf</filename> file for proper
1062 syntax.</para>
1063 <indexterm zone="samba3 testparm">
1064 <primary sortas="b-testparm">testparm</primary>
1065 </indexterm>
1066 </listitem>
1067 </varlistentry>
1068
1069 <varlistentry id="umount.cifs">
1070 <term><command>umount.cifs</command></term>
1071 <listitem>
1072 <para>is used by normal, non-<systemitem
1073 class="username">root</systemitem> users, to
1074 <command>unmount</command> their own Common Internet File System
1075 (CIFS) mounts.</para>
1076 <indexterm zone="samba3 umount.cifs">
1077 <primary sortas="b-umount.cifs">umount.cifs</primary>
1078 </indexterm>
1079 </listitem>
1080 </varlistentry>
1081
1082 <varlistentry id="wbinfo">
1083 <term><command>wbinfo</command></term>
1084 <listitem>
1085 <para>queries a running <command>winbindd</command> daemon.</para>
1086 <indexterm zone="samba3 wbinfo">
1087 <primary sortas="b-wbinfo">wbinfo</primary>
1088 </indexterm>
1089 </listitem>
1090 </varlistentry>
1091
1092 <varlistentry id="winbindd">
1093 <term><command>winbindd</command></term>
1094 <listitem>
1095 <para>resolves names from Windows NT servers.</para>
1096 <indexterm zone="samba3 winbindd">
1097 <primary sortas="b-winbindd">winbindd</primary>
1098 </indexterm>
1099 </listitem>
1100 </varlistentry>
1101
1102 <varlistentry id="libnss_winbind">
1103 <term><filename class='libraryfile'>libnss_winbind.so</filename></term>
1104 <listitem>
1105 <para>provides Name Service Switch API functions for resolving names
1106 from NT servers.</para>
1107 <indexterm zone="samba3 libnss_winbind">
1108 <primary sortas="c-libnss_winbind">libnss_winbind.so</primary>
1109 </indexterm>
1110 </listitem>
1111 </varlistentry>
1112
1113 <varlistentry id="libnss_wins">
1114 <term><filename class='libraryfile'>libnss_wins.so</filename></term>
1115 <listitem>
1116 <para>provides API functions for Samba's implementation of the
1117 Windows Internet Naming Service.</para>
1118 <indexterm zone="samba3 libnss_wins">
1119 <primary sortas="c-libnss_wins">libnss_wins.so</primary>
1120 </indexterm>
1121 </listitem>
1122 </varlistentry>
1123
1124 <varlistentry id="libnetapi">
1125 <term><filename class='libraryfile'>libnetapi.so</filename></term>
1126 <listitem>
1127 <para>provides the API functions for the administration tools used
1128 for Samba and remote CIFS servers.</para>
1129 <indexterm zone="samba3 libnetapi">
1130 <primary sortas="c-libnetapi">libnetapi.so</primary>
1131 </indexterm>
1132 </listitem>
1133 </varlistentry>
1134
1135 <varlistentry id="libsmbclient">
1136 <term><filename class='libraryfile'>libsmbclient.so</filename></term>
1137 <listitem>
1138 <para>provides the API functions for the Samba SMB client tools.</para>
1139 <indexterm zone="samba3 libsmbclient">
1140 <primary sortas="c-libsmbclient">libsmbclient.so</primary>
1141 </indexterm>
1142 </listitem>
1143 </varlistentry>
1144
1145 <varlistentry id="libsmbsharemodes">
1146 <term><filename class='libraryfile'>libsmbsharemodes.so</filename></term>
1147 <listitem>
1148 <para>provides API functions for accessing SMB share modes
1149 (locks etc.)</para>
1150 <indexterm zone="samba3 libsmbsharemodes">
1151 <primary sortas="c-libsmbsharemodes">libsmbsharemodes.so</primary>
1152 </indexterm>
1153 </listitem>
1154 </varlistentry>
1155
1156 <varlistentry id="libwbclient">
1157 <term><filename class='libraryfile'>libwbclient.so</filename></term>
1158 <listitem>
1159 <para>provides API functions for Windows domain client services.</para>
1160 <indexterm zone="samba3 libwbclient">
1161 <primary sortas="c-libwbclient">libwbclient.so</primary>
1162 </indexterm>
1163 </listitem>
1164 </varlistentry>
1165
1166 </variablelist>
1167
1168 </sect2>
1169
1170</sect1>
Note: See TracBrowser for help on using the repository browser.