source: server/major/samba3.xml@ 22320b4c

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 22320b4c was 22320b4c, checked in by Randy McMurchy <randy@…>, 19 years ago

Updated to Samba-3.0.20

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@5113 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 38.0 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "68e72ab16334c329901816febc43217a">
10 <!ENTITY samba3-size "17.1 MB">
11 <!ENTITY samba3-buildsize "146 MB">
12 <!ENTITY samba3-time "2.5 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
63 <itemizedlist spacing="compact">
64 <listitem>
65 <para>Required patch if you have <application>Heimdal</application>
66 installed: <ulink
67 url="&patch-root;/samba-&samba3-version;-heimdal-1.patch"/></para>
68 </listitem>
69 </itemizedlist>
70
71 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
72
73 <bridgehead renderas="sect4">Optional</bridgehead>
74 <para><xref linkend="popt"/>,
75 <xref linkend="Linux_PAM"/>,
76 <xref linkend="openldap"/>,
77 <xref linkend="cups"/>,
78 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
79 <xref linkend="libxml2"/>,
80 <xref linkend="mysql"/> or <xref linkend="postgresql"/>,
81 <xref linkend="python"/> and
82 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para>
83
84 </sect2>
85
86 <sect2 role="installation">
87 <title>Installation of Samba</title>
88
89 <para>A <application>Samba</application> <filename>include.h</filename>
90 header now does checks for C++ reserved names. The package will not build
91 if you have <application>Heimdal</application> installed as Heimdal uses
92 some of these reserved names inappropriately. If you have
93 <application>Heimdal</application> installed, apply the following patch to
94 disable these checks and allow the package to compile successfully:</para>
95
96<screen><userinput>patch -Np1 -i ../samba-&samba3-version;-heimdal-1.patch</userinput></screen>
97
98 <para>Install <application>Samba</application> by running the following
99 commands:</para>
100
101 <note>
102 <para>You may want to run <command>configure</command> with the
103 <option>--help</option> parameter. There may be other parameters
104 needed to take advantage of the optional dependencies.</para>
105 </note>
106
107<screen><userinput>cd source &amp;&amp;
108./configure \
109 --prefix=/usr \
110 --sysconfdir=/etc \
111 --localstatedir=/var \
112 --with-piddir=/var/run \
113 --with-fhs \
114 --with-smbmount &amp;&amp;
115make</userinput></screen>
116
117 <para>This package does not come with a test suite.</para>
118
119 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
120
121<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
122make install &amp;&amp;
123mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
124ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
125chmod -v 644 /usr/include/libsmbclient.h &amp;&amp;
126install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
127ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
128ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
129if [ -f nsswitch/pam_winbind.so ]; then
130 install -v -m755 nsswitch/pam_winbind.so /lib/security
131fi &amp;&amp;
132install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
133install -v -m644 ../docs/*.pdf /usr/share/samba</userinput></screen>
134
135 </sect2>
136
137 <sect2 role="commands">
138 <title>Command Explanations</title>
139
140 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
141 file directory to avoid the default of
142 <filename class="directory">/usr/etc</filename>.</para>
143
144 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
145 data directory to avoid the default of
146 <filename class="directory">/usr/var</filename>.</para>
147
148 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
149 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
150
151 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
152 extra binary for use by the <command>mount</command> command so that
153 mounting remote SMB (Windows) shares becomes no more complex than
154 mounting remote NFS shares.</para>
155
156 <para><option>--with-pam</option>: Use this parameter to link
157 <application>Linux-PAM</application> into the build. This
158 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
159 <application>PAM</application> module. You can find
160 instructions on how to configure and use the module by running
161 <command>man winbindd</command>.</para>
162
163 <para><command>install -v -d /var/cache/samba</command>: This directory is
164 needed for proper operation of the <command>smbd</command> and
165 <command>nmbd</command> daemons.</para>
166
167 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
168 ../libsmbclient.so ...</command>: The
169 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
170 by other packages. This command moves it to a location where other packages
171 can find it.</para>
172
173 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
174 The nss libraries are not installed by default. If you intend to use
175 winbindd for domain auth, and/or WINS name resolution,
176 you need these libraries.</para>
177
178 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
179 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
180 These symlinks are required by glibc to use the NSS
181 libraries.</para>
182
183 <para><command>install -v -m644 ../examples/smb.conf.default
184 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
185 file into <filename>/etc/samba</filename>. This sample configuration will
186 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
187 make the appropriate changes for your installation. See the configuration
188 section for minimum values which must be set.</para>
189
190 </sect2>
191
192 <sect2 role="configuration">
193 <title>Configuring Samba</title>
194
195 <sect3 id="samba3-config">
196 <title>Config Files</title>
197
198 <para>/etc/samba/smb.conf</para>
199
200 <indexterm zone="samba3 samba3-config">
201 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
202 </indexterm>
203
204 </sect3>
205
206 <sect3>
207 <title>Mounting Shares by Unprivileged Users</title>
208
209 <para>If it is desired for unprivileged users to directly mount (and
210 unmount) SMB shares, the <command>smbmnt</command> and
211 <command>smbumount</command> commands must be setuid
212 <systemitem class='username'>root</systemitem>. Note that users can
213 only mount SMB shares on a mount point owned by that user (requires
214 write access also). If desired, change these programs to setuid
215 <systemitem class='username'>root</systemitem> by issuing the following
216 command as the <systemitem class='username'>root</systemitem>
217 user:</para>
218
219<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}</userinput></screen>
220
221 </sect3>
222
223 <sect3>
224 <title>Printing to SMB Clients</title>
225
226 <para>If you use <application>CUPS</application> for print services,
227 and you wish to print to a printer attached to an SMB client, you
228 need to create an SMB backend device. To create the device, issue the
229 following command as the <systemitem class="username">root</systemitem>
230 user:</para>
231
232<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
233
234 </sect3>
235
236 <sect3>
237 <title>Configuration Information</title>
238
239 <para>Due to the complexity and the many various uses for
240 <application>Samba</application>, complete configuration for all the
241 package's capabilities is well beyond the scope of the BLFS book. This
242 section provides instructions to configure the
243 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
244 The complete contents of <filename>/etc/samba/smb.conf</filename> will
245 depend on the purpose of <application>Samba</application>
246 installation.</para>
247
248 <note>
249 <para>You may find it easier to copy the configuration parameters shown
250 below into an empty <filename>/etc/samba/smb.conf</filename> file
251 instead of copying and editing the default file as mentioned in the
252 <quote>Command Explanations</quote> section. How you create/edit the
253 <filename>/etc/samba/smb.conf</filename> file will be left up to
254 you. Do ensure the file is only writeable by the
255 <systemitem class="username">root</systemitem> user (mode 644).</para>
256 </note>
257
258 <sect4>
259 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
260
261 <para>Choose this variant if you only want to transfer files using
262 <command>smbclient</command>, mount Windows shares and print to Windows
263 printers, and don't want to share your files and printers to Windows
264 machines.</para>
265
266 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
267 three parameters is sufficient:</para>
268
269<screen role='root'><literal>[global]
270 workgroup = <replaceable>MYGROUP</replaceable>
271 dos charset = <replaceable>cp850</replaceable>
272 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
273
274 <para>The values in this example specify that the computer belongs to a
275 Windows workgroup named
276 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
277 <quote><replaceable>cp850</replaceable></quote> character set on the
278 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
279 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
280 encoding on the disk. Adjust these values appropriately for your
281 installation. The <quote>unix charset</quote> value must be the same as
282 the output of <command>locale charmap</command> when executed with the
283 <envar>LANG</envar> variable set to your preferred locale, otherwise the
284 <command>ls</command> command may not display correct filenames of
285 downloaded files.</para>
286
287 <para>There is no need to run any <application>Samba</application>
288 servers in this scenario, thus you don't need to install the provided
289 bootscripts.</para>
290
291 </sect4>
292
293 <sect4>
294 <title>Scenario 2: Standalone File/Print Server</title>
295
296 <para>Choose this variant if you want to share your files and printers
297 to Windows machines in your workgroup in addition to the capabilities
298 described in Scenario 1.</para>
299
300 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
301 file may be a good template to start from. Also add
302 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
303 to the <quote>[global]</quote> section as described in Scenario 1 in
304 order to prevent filename corruption.</para>
305
306 <para>The following configuration file creates a separate share for each
307 user's home directory and also makes all printers available to Windows
308 machines:</para>
309
310<screen role='root'><literal>[global]
311 workgroup = <replaceable>MYGROUP</replaceable>
312 dos charset = <replaceable>cp850</replaceable>
313 unix charset = <replaceable>ISO-8859-1</replaceable>
314
315[homes]
316 comment = Home Directories
317 browseable = no
318 writable = yes
319
320[printers]
321 comment = All Printers
322 path = /var/spool/samba
323 browseable = no
324 guest ok = no
325 printable = yes</literal></screen>
326
327 <para>Other parameters you may wish to customize in the
328 <quote>[global]</quote> section include:</para>
329
330<screen role='root'><literal> server string =
331 security =
332 hosts allow =
333 load printers =
334 log file =
335 max log size =
336 socket options =
337 local master =</literal></screen>
338
339 <para>Reference the comments in the
340 <filename>/etc/samba/smb.conf.default</filename> file for information
341 regarding these parameters.</para>
342
343 <para>Since the <command>smbd</command> and <command>nmbd</command>
344 daemons are needed in this case, install the <filename>samba</filename>
345 bootscript. Be sure to run <command>smbpasswd</command> (with the
346 <option>-a</option> option to add users) to enable and
347 set passwords for all accounts that need
348 <application>Samba</application> access, or use the SWAT web interface
349 (see below) to do the same. Using the default
350 <application>Samba</application> passdb backend, any user you attempt
351 to add will also be required to exist in the
352 <filename>/etc/passwd</filename> file.</para>
353
354 </sect4>
355
356 <sect4>
357 <title>Advanced Requirements</title>
358
359 <para>More complex scenarios involving domain control or membership are
360 possible if the right flags are passed to the ./configure script when
361 the package is built. Such setups are advanced topics and cannot be
362 adequately covered in BLFS. Many complete books have been written on
363 these topics alone. It should be noted, however, that a
364 <application>Samba</application> BDC cannot be used as a fallback
365 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
366 fallback for a <application>Samba</application> PDC. Also in some
367 domain membership scenarios, the <command>winbindd</command> daemon and
368 the corresponding bootscript are needed.</para>
369
370 <para>There is quite a bit of documentation available which covers many
371 of these advanced configurations. Point your web browser to the links
372 below to view some of the documentation included with the
373 <application>Samba</application> package:</para>
374
375 <itemizedlist spacing='compact'>
376 <listitem>
377 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
378 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
379 </listitem>
380 <listitem>
381 <para>The Official Samba HOWTO and Reference Guide <ulink
382 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
383 </para>
384 </listitem>
385 <listitem>
386 <para>Samba-3 by Example
387 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
388 </para>
389 </listitem>
390 <listitem>
391 <para>The Samba-3 man Pages
392 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
393 </listitem>
394 </itemizedlist>
395
396 </sect4>
397
398 </sect3>
399
400 <sect3 id="samba3-swat-config">
401 <title>Configuring SWAT</title>
402
403 <para>The built in SWAT (<application>Samba</application> Web
404 Administration Tool) utility can be used for basic configuration of
405 the <application>Samba</application> installation, but because it may
406 be inconvenient, undesirable or perhaps even impossible to gain
407 access to the console, BLFS recommends setting up access to SWAT using
408 <application>Stunnel</application>. Without
409 <application>Stunnel</application>, the
410 <systemitem class="username">root</systemitem> password is transmitted
411 in clear text over the wire, and is considered an unacceptable security
412 risk. After considering the security implications of using SWAT without
413 <application>Stunnel</application>, and you still wish to implement SWAT
414 without it, instructions are provided at this end of this section.</para>
415
416 <indexterm zone="samba3 samba3-swat-config">
417 <primary sortas="g-SWAT">SWAT</primary>
418 </indexterm>
419
420 <sect4>
421 <title>Setting up SWAT using Stunnel</title>
422
423 <para>First install, or ensure you have already installed, the
424 <xref linkend="stunnel"/> package.</para>
425
426 <para>Next you must add entries to <filename>/etc/services</filename>
427 and modify the <command>inetd</command>/<command>xinetd</command>
428 configuration.</para>
429
430 <indexterm zone="samba3 samba3-swat-config">
431 <primary sortas="e-etc-services">/etc/services</primary>
432 </indexterm>
433
434 <indexterm zone="samba3 samba3-swat-config">
435 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
436 </indexterm>
437
438 <indexterm zone="samba3 samba3-swat-config">
439 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
440 </indexterm>
441
442 <para>Add swat and swat_tunnel entries to
443 <filename>/etc/services</filename> with the following commands issued
444 as the <systemitem class="username">root</systemitem> user:</para>
445
446<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
447echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
448
449 <para>If <command>inetd</command> is used, the following command will
450 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
451 user <systemitem class="username">root</systemitem>):</para>
452
453<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
454 &gt;&gt; /etc/inetd.conf</userinput></screen>
455
456 <para>Issue a <command>killall -HUP inetd</command> to reread the
457 changed <filename>inetd.conf</filename> file.</para>
458
459 <para>If you use <command>xinetd</command>, the following command will
460 create the <application>Samba</application> file as
461 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
462 or remove the <quote>only_from</quote> line to include the desired
463 host[s]):</para>
464
465<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
466<literal># Begin /etc/xinetd.d/swat_tunnel
467
468service swat_tunnel
469{
470 port = 902
471 socket_type = stream
472 wait = no
473 only_from = 127.0.0.1
474 user = root
475 server = /usr/sbin/swat
476 log_on_failure += USERID
477}
478
479# End /etc/xinetd.d/swat_tunnel</literal>
480EOF</userinput></screen>
481
482 <indexterm zone="samba3 samba3-swat-config">
483 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
484 </indexterm>
485
486 <para>Issue a <command>killall -HUP xinetd</command> to read the new
487 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
488
489 <para>Next, you must add an entry for the swat service to the
490 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
491 <systemitem class="username">root</systemitem>):</para>
492
493 <indexterm zone="samba3 samba3-swat-config">
494 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
495 </indexterm>
496
497<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
498<literal>[swat]
499accept = 901
500connect = 902</literal>
501
502EOF</userinput></screen>
503
504 <para>Restart the <command>stunnel</command> daemon using the following
505 command as the <systemitem class="username">root</systemitem> user:</para>
506
507<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
508
509 <para>SWAT can be launched by pointing your web browser to
510 <uri>https://<replaceable>[CA_DN_field]</replaceable>:901</uri>.
511 Substitute the hostname listed in the DN field of the CA certificate
512 used with <application>Stunnel</application> for
513 <replaceable>[CA_DN_field]</replaceable>.</para>
514
515 </sect4>
516
517 <sect4>
518 <title>Setting up SWAT without Stunnel</title>
519
520 <warning>
521 <para>BLFS does not recommend using these procedures because of the
522 security risk involved. However, in a home network environment and
523 disclosure of the <systemitem class='username'>root</systemitem>
524 password is an acceptable risk, the following
525 instructions are provided for your convenience.</para>
526 </warning>
527
528 <para>Add a swat entry to <filename>/etc/services</filename> with the
529 following command issued as the
530 <systemitem class='username'>root</systemitem> user:</para>
531
532<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
533
534 <para>If <command>inetd</command> is used, the following command
535 issued as the <systemitem class='username'>root</systemitem> user will
536 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
537
538<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
539 &gt;&gt; /etc/inetd.conf</userinput></screen>
540
541 <para>Issue a <command>killall -HUP inetd</command> to reread the
542 changed <filename>inetd.conf</filename> file.</para>
543
544 <para>If <command>xinetd</command> is used, the following command
545 issued as the <systemitem class='username'>root</systemitem> user
546 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
547
548<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
549<literal># Begin /etc/xinetd.d/swat
550
551service swat
552{
553 port = 901
554 socket_type = stream
555 wait = no
556 only_from = 127.0.0.1
557 user = root
558 server = /usr/sbin/swat
559 log_on_failure += USERID
560}
561
562# End /etc/xinetd.d/swat</literal>
563EOF</userinput></screen>
564
565 <para>Issue a <command>killall -HUP xinetd</command> to read the
566 new <filename>/etc/xinetd.d/swat</filename> file.</para>
567
568 <para>SWAT can be launched by pointing your web browser to
569 http://localhost:901.</para>
570
571 </sect4>
572
573 </sect3>
574
575 <sect3>
576 <title/>
577
578 <note>
579 <para>If you linked <application>Linux-PAM</application> into the
580 <application>Samba</application> build, you'll need to create an
581 <filename>/etc/pam.d/samba</filename> file.</para>
582 </note>
583
584 <indexterm zone="samba3 samba3-swat-config">
585 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
586 </indexterm>
587
588 </sect3>
589
590 <sect3 id="samba3-init">
591 <title>Boot Script</title>
592
593 <para>For your convenience, boot scripts have been provided for
594 <application>Samba</application>. There are two included in the
595 <xref linkend="intro-important-bootscripts"/> package. The first,
596 <filename>samba</filename>, will start the <command>smbd</command>
597 and <command>nmbd</command> daemons needed to provide SMB/CIFS
598 services. The second script, <filename>winbind</filename>, starts
599 the <command>winbindd</command> daemon, used for providing Windows
600 domain services to Linux clients.</para>
601
602 <indexterm zone="samba3 samba3-init">
603 <primary sortas="f-samba">samba</primary>
604 </indexterm>
605
606 <indexterm zone="samba3 samba3-init">
607 <primary sortas="f-winbind">winbind</primary>
608 </indexterm>
609
610 <para>The default <application>Samba</application> installation uses the
611 <systemitem class='username'>nobody</systemitem> user for guest access
612 to the server. This can be overridden by setting the
613 <option>guest account =</option> parameter in the
614 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
615 <option>guest account =</option> parameter, ensure this user exists in
616 the <filename>/etc/passwd</filename> file. To use the default user,
617 issue the following commands as the
618 <systemitem class='username'>root</systemitem> user:</para>
619
620<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
621useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
622 -s /bin/false -u 99 nobody</userinput></screen>
623
624 <para>Install the <filename>samba</filename> script with the following
625 command issued as the <systemitem class="username">root</systemitem>
626 user:</para>
627
628<screen role="root"><userinput>make install-samba</userinput></screen>
629
630 <para>If you also need the <filename>winbind</filename>
631 script:</para>
632
633<screen role="root"><userinput>make install-winbind</userinput></screen>
634
635 </sect3>
636
637 </sect2>
638
639 <sect2 role="content">
640 <title>Contents</title>
641
642 <segmentedlist>
643 <segtitle>Installed Programs</segtitle>
644 <segtitle>Installed Libraries</segtitle>
645 <segtitle>Installed Directories</segtitle>
646
647 <seglistitem>
648 <seg>findsmb, mount.smbfs, net, nmbd, nmblookup, ntlm_auth, pdbedit,
649 profiles, rpcclient, smbcacls, smbclient, smbcontrol, smbcquotas, smbd,
650 smbmnt, smbmount, smbpasswd, smbspool, smbstatus, smbtar, smbtree,
651 smbumount, swat, tdbbackup, tdbdump, tdbtool, testparm, testprns,
652 wbinfo, and winbindd</seg>
653 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, the
654 pam_winbind.so PAM library and assorted character set,
655 filesystem and support modules.</seg>
656 <seg>/etc/samba, /usr/lib/samba, /usr/share/samba, /var/cache/samba,
657 and /var/lib/samba</seg>
658 </seglistitem>
659 </segmentedlist>
660
661 <variablelist>
662 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
663 <?dbfo list-presentation="list"?>
664 <?dbhtml list-presentation="table"?>
665
666 <varlistentry id="findsmb">
667 <term><command>findsmb</command></term>
668 <listitem>
669 <para>lists information about machines that respond to
670 SMB name queries on a subnet.</para>
671 <indexterm zone="samba3 findsmb">
672 <primary sortas="b-findsmb">findsmb</primary>
673 </indexterm>
674 </listitem>
675 </varlistentry>
676
677 <varlistentry id="mount.smbfs">
678 <term><command>mount.smbfs</command></term>
679 <listitem>
680 <para>is a symlink to <command>smbmount</command> which provides
681 <command>/bin/mount</command> with a way to mount remote Windows
682 (or <application>Samba</application>) fileshares.</para>
683 <indexterm zone="samba3 mount.smbfs">
684 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
685 </indexterm>
686 </listitem>
687 </varlistentry>
688
689 <varlistentry id="net">
690 <term><command>net</command></term>
691 <listitem>
692 <para>is a tool for administration of
693 <application>Samba</application> and remote CIFS servers, similar
694 to the <command>net</command> utility for DOS/Windows.</para>
695 <indexterm zone="samba3 net">
696 <primary sortas="b-net">net</primary>
697 </indexterm>
698 </listitem>
699 </varlistentry>
700
701 <varlistentry id="nmbd">
702 <term><command>nmbd</command></term>
703 <listitem>
704 <para>is the <application>Samba</application>
705 NetBIOS name server.</para>
706 <indexterm zone="samba3 nmbd">
707 <primary sortas="b-nmbd">nmbd</primary>
708 </indexterm>
709 </listitem>
710 </varlistentry>
711
712 <varlistentry id="nmblookup">
713 <term><command>nmblookup</command></term>
714 <listitem>
715 <para>is used to query NetBIOS names and map
716 them to IP addresses.</para>
717 <indexterm zone="samba3 nmblookup">
718 <primary sortas="b-nmblookup">nmblookup</primary>
719 </indexterm>
720 </listitem>
721 </varlistentry>
722
723 <varlistentry id="ntlm_auth">
724 <term><command>ntlm_auth</command></term>
725 <listitem>
726 <para>is a tool to allow external access to Winbind's
727 NTLM authentication function.</para>
728 <indexterm zone="samba3 ntlm_auth">
729 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
730 </indexterm>
731 </listitem>
732 </varlistentry>
733
734 <varlistentry id="pdbedit">
735 <term><command>pdbedit</command></term>
736 <listitem>
737 <para>is a tool used to manage the SAM database.</para>
738 <indexterm zone="samba3 pdbedit">
739 <primary sortas="b-pdbedit">pdbedit</primary>
740 </indexterm>
741 </listitem>
742 </varlistentry>
743
744 <varlistentry id="profiles">
745 <term><command>profiles</command></term>
746 <listitem>
747 <para>is a utility that reports and changes SIDs in Windows
748 registry files. It currently only supports Windows NT.</para>
749 <indexterm zone="samba3 profiles">
750 <primary sortas="b-profiles">profiles</primary>
751 </indexterm>
752 </listitem>
753 </varlistentry>
754
755 <varlistentry id="rpcclient">
756 <term><command>rpcclient</command></term>
757 <listitem>
758 <para>is used to execute MS-RPC client side functions.</para>
759 <indexterm zone="samba3 rpcclient">
760 <primary sortas="b-rpcclient">rpcclient</primary>
761 </indexterm>
762 </listitem>
763 </varlistentry>
764
765 <varlistentry id="smbcacls">
766 <term><command>smbcacls</command></term>
767 <listitem>
768 <para>is used to manipulate Windows NT access control lists.</para>
769 <indexterm zone="samba3 smbcacls">
770 <primary sortas="b-smbcacls">smbcacls</primary>
771 </indexterm>
772 </listitem>
773 </varlistentry>
774
775 <varlistentry id="smbclient">
776 <term><command>smbclient</command></term>
777 <listitem>
778 <para>is a SMB/CIFS access utility, similar to FTP.</para>
779 <indexterm zone="samba3 smbclient">
780 <primary sortas="b-smbclient">smbclient</primary>
781 </indexterm>
782 </listitem>
783 </varlistentry>
784
785 <varlistentry id="smbcontrol">
786 <term><command>smbcontrol</command></term>
787 <listitem>
788 <para>is used to control running <command>smbd</command>,
789 <command>nmbd</command> and <command>winbindd</command>
790 daemons.</para>
791 <indexterm zone="samba3 smbcontrol">
792 <primary sortas="b-smbcontrol">smbcontrol</primary>
793 </indexterm>
794 </listitem>
795 </varlistentry>
796
797 <varlistentry id="smbcquotas">
798 <term><command>smbcquotas</command></term>
799 <listitem>
800 <para>is used to manipulate Windows NT quotas on
801 SMB file shares.</para>
802 <indexterm zone="samba3 smbcquotas">
803 <primary sortas="b-smbcquotas">smbcquotas</primary>
804 </indexterm>
805 </listitem>
806 </varlistentry>
807
808 <varlistentry id="smbd">
809 <term><command>smbd</command></term>
810 <listitem>
811 <para>is the main <application>Samba</application> daemon which
812 provides SMB/CIFS services to clients.</para>
813 <indexterm zone="samba3 smbd">
814 <primary sortas="b-smbd">smbd</primary>
815 </indexterm>
816 </listitem>
817 </varlistentry>
818
819 <varlistentry id="smbmnt">
820 <term><command>smbmnt</command></term>
821 <listitem>
822 <para>is a helper application used by the
823 <command>smbmount</command> program to do the actual mounting of
824 SMB shares. It can be installed setuid
825 <systemitem class='username'>root</systemitem> if you want
826 unprivileged users to be able to mount their SMB shares.</para>
827 <indexterm zone="samba3 smbmnt">
828 <primary sortas="b-smbmnt">smbmnt</primary>
829 </indexterm>
830 </listitem>
831 </varlistentry>
832
833 <varlistentry id="smbmount">
834 <term><command>smbmount</command></term>
835 <listitem>
836 <para>is usually invoked as <command>mount.smbfs</command> by the
837 <command>mount</command> command when using the
838 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
839 filesystem.</para>
840 <indexterm zone="samba3 smbmount">
841 <primary sortas="b-smbmount">smbmount</primary>
842 </indexterm>
843 </listitem>
844 </varlistentry>
845
846 <varlistentry id="smbpasswd">
847 <term><command>smbpasswd</command></term>
848 <listitem>
849 <para>changes a user's <application>Samba</application>
850 password.</para>
851 <indexterm zone="samba3 smbpasswd">
852 <primary sortas="b-smbpasswd">smbpasswd</primary>
853 </indexterm>
854 </listitem>
855 </varlistentry>
856
857 <varlistentry id="smbspool">
858 <term><command>smbspool</command></term>
859 <listitem>
860 <para>sends a print job to an SMB printer.</para>
861 <indexterm zone="samba3 smbspool">
862 <primary sortas="b-smbspool">smbspool</primary>
863 </indexterm>
864 </listitem>
865 </varlistentry>
866
867 <varlistentry id="smbstatus">
868 <term><command>smbstatus</command></term>
869 <listitem>
870 <para>reports current <application>Samba</application>
871 connections.</para>
872 <indexterm zone="samba3 smbstatus">
873 <primary sortas="b-smbstatus">smbstatus</primary>
874 </indexterm>
875 </listitem>
876 </varlistentry>
877
878 <varlistentry id="smbtar">
879 <term><command>smbtar</command></term>
880 <listitem>
881 <para>is a shell script used for backing up SMB/CIFS shares
882 directly to Linux tape drives or a file.</para>
883 <indexterm zone="samba3 smbtar">
884 <primary sortas="b-smbtar">smbtar</primary>
885 </indexterm>
886 </listitem>
887 </varlistentry>
888
889 <varlistentry id="smbtree">
890 <term><command>smbtree</command></term>
891 <listitem>
892 <para>is a text-based SMB network browser.</para>
893 <indexterm zone="samba3 smbtree">
894 <primary sortas="b-smbtree">smbtree</primary>
895 </indexterm>
896 </listitem>
897 </varlistentry>
898
899 <varlistentry id="smbumount">
900 <term><command>smbumount</command></term>
901 <listitem>
902 <para>is used by unprivileged users to unmount SMB filesystems,
903 provided that it is setuid root.</para>
904 <indexterm zone="samba3 smbumount">
905 <primary sortas="b-smbumount">smbumount</primary>
906 </indexterm>
907 </listitem>
908 </varlistentry>
909
910 <varlistentry id="swat">
911 <term><command>swat</command></term>
912 <listitem>
913 <para>is the <application>Samba</application> Web Administration
914 Tool.</para>
915 <indexterm zone="samba3 swat">
916 <primary sortas="b-swat">swat</primary>
917 </indexterm>
918 </listitem>
919 </varlistentry>
920
921 <varlistentry id="tdbbackup">
922 <term><command>tdbbackup</command></term>
923 <listitem>
924 <para>is a tool for backing up or validating the integrity of
925 <application>Samba</application> <filename>.tdb</filename>
926 files.</para>
927 <indexterm zone="samba3 tdbbackup">
928 <primary sortas="b-tdbbackup">tdbbackup</primary>
929 </indexterm>
930 </listitem>
931 </varlistentry>
932
933 <varlistentry id="tdbdump">
934 <term><command>tdbdump</command></term>
935 <listitem>
936 <para> is a tool used to print the contents of a
937 <application>Samba</application> <filename>.tdb</filename>
938 file.</para>
939 <indexterm zone="samba3 tdbdump">
940 <primary sortas="b-tdbdump">tdbdump</primary>
941 </indexterm>
942 </listitem>
943 </varlistentry>
944
945 <varlistentry id="tdbtool">
946 <term><command>tdbtool</command></term>
947 <listitem>
948 <para>is a tool which allows simple database manipulation from the
949 command line.</para>
950 <indexterm zone="samba3 tdbtool">
951 <primary sortas="b-tdbtool">tdbtool</primary>
952 </indexterm>
953 </listitem>
954 </varlistentry>
955
956 <varlistentry id="testparm">
957 <term><command>testparm</command></term>
958 <listitem>
959 <para>checks an <filename>smb.conf</filename> file for proper
960 syntax.</para>
961 <indexterm zone="samba3 testparm">
962 <primary sortas="b-testparm">testparm</primary>
963 </indexterm>
964 </listitem>
965 </varlistentry>
966
967 <varlistentry id="testprns">
968 <term><command>testprns</command></term>
969 <listitem>
970 <para>tests printer names.</para>
971 <indexterm zone="samba3 testprns">
972 <primary sortas="b-testprns">testprns</primary>
973 </indexterm>
974 </listitem>
975 </varlistentry>
976
977 <varlistentry id="wbinfo">
978 <term><command>wbinfo</command></term>
979 <listitem>
980 <para>queries a running <command>winbindd</command> daemon.</para>
981 <indexterm zone="samba3 wbinfo">
982 <primary sortas="b-wbinfo">wbinfo</primary>
983 </indexterm>
984 </listitem>
985 </varlistentry>
986
987 <varlistentry id="winbindd">
988 <term><command>winbindd</command></term>
989 <listitem>
990 <para>resolves names from Windows NT servers.</para>
991 <indexterm zone="samba3 winbindd">
992 <primary sortas="b-winbindd">winbindd</primary>
993 </indexterm>
994 </listitem>
995 </varlistentry>
996
997 </variablelist>
998
999 </sect2>
1000
1001</sect1>
Note: See TracBrowser for help on using the repository browser.