source: server/major/samba3.xml@ 2a5310e8

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 2a5310e8 was 2a5310e8, checked in by Manuel Canales Esparcia <manuel@…>, 18 years ago

Typo fix. Server.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@5385 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 38.2 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "68e72ab16334c329901816febc43217a">
10 <!ENTITY samba3-size "17.1 MB">
11 <!ENTITY samba3-buildsize "146 MB">
12 <!ENTITY samba3-time "2.5 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 <keywordset>
22 <keyword role="package">samba-&samba3-version;.tar</keyword>
23 <keyword role="ftpdir">samba</keyword>
24 </keywordset>
25 </sect1info>
26
27 <title>Samba-&samba3-version;</title>
28
29 <indexterm zone="samba3">
30 <primary sortas="a-Samba">Samba</primary>
31 </indexterm>
32
33 <sect2 role="package">
34 <title>Introduction to Samba</title>
35
36 <para>The <application>Samba</application> package provides file and print
37 services to SMB/CIFS clients and Windows networking to Linux clients.
38 <application>Samba</application> can also be configured as a Windows NT
39 4.0 Domain Controller replacement (with caveats working with NT PDC's and
40 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
41 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
42 amongst other things provides LAN browsing support).</para>
43
44 <bridgehead renderas="sect3">Package Information</bridgehead>
45 <itemizedlist spacing="compact">
46 <listitem>
47 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
48 </listitem>
49 <listitem>
50 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
51 </listitem>
52 <listitem>
53 <para>Download MD5 sum: &samba3-md5sum;</para>
54 </listitem>
55 <listitem>
56 <para>Download size: &samba3-size;</para>
57 </listitem>
58 <listitem>
59 <para>Estimated disk space required: &samba3-buildsize;</para>
60 </listitem>
61 <listitem>
62 <para>Estimated build time: &samba3-time;</para>
63 </listitem>
64 </itemizedlist>
65
66 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
67 <itemizedlist spacing="compact">
68 <listitem>
69 <para>Required patch if you have <application>Heimdal</application>
70 installed: <ulink
71 url="&patch-root;/samba-&samba3-version;-heimdal-1.patch"/></para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Optional</bridgehead>
78 <para role="optional"><xref linkend="popt"/>,
79 <xref linkend="linux-pam"/>,
80 <xref linkend="openldap"/>,
81 <xref linkend="cups"/>,
82 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
83 <xref linkend="libxml2"/>,
84 <xref linkend="mysql"/> or <xref linkend="postgresql"/>,
85 <xref linkend="python"/> and
86 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para>
87
88 </sect2>
89
90 <sect2 role="installation">
91 <title>Installation of Samba</title>
92
93 <para>A <application>Samba</application> <filename>include.h</filename>
94 header now does checks for C++ reserved names. The package will not build
95 if you have <application>Heimdal</application> installed as Heimdal uses
96 some of these reserved names inappropriately. If you have
97 <application>Heimdal</application> installed, apply the following patch to
98 disable these checks and allow the package to compile successfully:</para>
99
100<screen><userinput>patch -Np1 -i ../samba-&samba3-version;-heimdal-1.patch</userinput></screen>
101
102 <para>Install <application>Samba</application> by running the following
103 commands:</para>
104
105 <note>
106 <para>You may want to run <command>configure</command> with the
107 <option>--help</option> parameter. There may be other parameters
108 needed to take advantage of the optional dependencies.</para>
109 </note>
110
111<screen><userinput>cd source &amp;&amp;
112./configure \
113 --prefix=/usr \
114 --sysconfdir=/etc \
115 --localstatedir=/var \
116 --with-piddir=/var/run \
117 --with-fhs \
118 --with-smbmount &amp;&amp;
119make</userinput></screen>
120
121 <para>This package does not come with a test suite.</para>
122
123 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
124
125<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
126make install &amp;&amp;
127mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
128ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
129chmod -v 644 /usr/include/libsmbclient.h &amp;&amp;
130install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
131ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
132ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
133if [ -f nsswitch/pam_winbind.so ]; then
134 install -v -m755 nsswitch/pam_winbind.so /lib/security
135fi &amp;&amp;
136install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
137install -v -m644 ../docs/*.pdf /usr/share/samba</userinput></screen>
138
139 </sect2>
140
141 <sect2 role="commands">
142 <title>Command Explanations</title>
143
144 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
145 file directory to avoid the default of
146 <filename class="directory">/usr/etc</filename>.</para>
147
148 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
149 data directory to avoid the default of
150 <filename class="directory">/usr/var</filename>.</para>
151
152 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
153 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
154
155 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
156 extra binary for use by the <command>mount</command> command so that
157 mounting remote SMB (Windows) shares becomes no more complex than
158 mounting remote NFS shares.</para>
159
160 <para><option>--with-pam</option>: Use this parameter to link
161 <application>Linux-PAM</application> into the build. This
162 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
163 <application>PAM</application> module. You can find
164 instructions on how to configure and use the module by running
165 <command>man winbindd</command>.</para>
166
167 <para><command>install -v -d /var/cache/samba</command>: This directory is
168 needed for proper operation of the <command>smbd</command> and
169 <command>nmbd</command> daemons.</para>
170
171 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
172 ../libsmbclient.so ...</command>: The
173 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
174 by other packages. This command moves it to a location where other packages
175 can find it.</para>
176
177 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
178 The nss libraries are not installed by default. If you intend to use
179 winbindd for domain auth, and/or WINS name resolution,
180 you need these libraries.</para>
181
182 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
183 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
184 These symlinks are required by glibc to use the NSS
185 libraries.</para>
186
187 <para><command>install -v -m644 ../examples/smb.conf.default
188 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
189 file into <filename>/etc/samba</filename>. This sample configuration will
190 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
191 make the appropriate changes for your installation. See the configuration
192 section for minimum values which must be set.</para>
193
194 </sect2>
195
196 <sect2 role="configuration">
197 <title>Configuring Samba</title>
198
199 <sect3 id="samba3-config">
200 <title>Config Files</title>
201
202 <para>/etc/samba/smb.conf</para>
203
204 <indexterm zone="samba3 samba3-config">
205 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
206 </indexterm>
207
208 </sect3>
209
210 <sect3>
211 <title>Mounting Shares by Unprivileged Users</title>
212
213 <para>If it is desired for unprivileged users to directly mount (and
214 unmount) SMB shares, the <command>smbmnt</command> and
215 <command>smbumount</command> commands must be setuid
216 <systemitem class='username'>root</systemitem>. Note that users can
217 only mount SMB shares on a mount point owned by that user (requires
218 write access also). If desired, change these programs to setuid
219 <systemitem class='username'>root</systemitem> by issuing the following
220 command as the <systemitem class='username'>root</systemitem>
221 user:</para>
222
223<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}</userinput></screen>
224
225 </sect3>
226
227 <sect3>
228 <title>Printing to SMB Clients</title>
229
230 <para>If you use <application>CUPS</application> for print services,
231 and you wish to print to a printer attached to an SMB client, you
232 need to create an SMB backend device. To create the device, issue the
233 following command as the <systemitem class="username">root</systemitem>
234 user:</para>
235
236<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
237
238 </sect3>
239
240 <sect3>
241 <title>Configuration Information</title>
242
243 <para>Due to the complexity and the many various uses for
244 <application>Samba</application>, complete configuration for all the
245 package's capabilities is well beyond the scope of the BLFS book. This
246 section provides instructions to configure the
247 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
248 The complete contents of <filename>/etc/samba/smb.conf</filename> will
249 depend on the purpose of <application>Samba</application>
250 installation.</para>
251
252 <note>
253 <para>You may find it easier to copy the configuration parameters shown
254 below into an empty <filename>/etc/samba/smb.conf</filename> file
255 instead of copying and editing the default file as mentioned in the
256 <quote>Command Explanations</quote> section. How you create/edit the
257 <filename>/etc/samba/smb.conf</filename> file will be left up to
258 you. Do ensure the file is only writeable by the
259 <systemitem class="username">root</systemitem> user (mode 644).</para>
260 </note>
261
262 <sect4>
263 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
264
265 <para>Choose this variant if you only want to transfer files using
266 <command>smbclient</command>, mount Windows shares and print to Windows
267 printers, and don't want to share your files and printers to Windows
268 machines.</para>
269
270 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
271 three parameters is sufficient:</para>
272
273<screen role='root'><literal>[global]
274 workgroup = <replaceable>MYGROUP</replaceable>
275 dos charset = <replaceable>cp850</replaceable>
276 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
277
278 <para>The values in this example specify that the computer belongs to a
279 Windows workgroup named
280 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
281 <quote><replaceable>cp850</replaceable></quote> character set on the
282 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
283 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
284 encoding on the disk. Adjust these values appropriately for your
285 installation. The <quote>unix charset</quote> value must be the same as
286 the output of <command>locale charmap</command> when executed with the
287 <envar>LANG</envar> variable set to your preferred locale, otherwise the
288 <command>ls</command> command may not display correct filenames of
289 downloaded files.</para>
290
291 <para>There is no need to run any <application>Samba</application>
292 servers in this scenario, thus you don't need to install the provided
293 bootscripts.</para>
294
295 </sect4>
296
297 <sect4>
298 <title>Scenario 2: Standalone File/Print Server</title>
299
300 <para>Choose this variant if you want to share your files and printers
301 to Windows machines in your workgroup in addition to the capabilities
302 described in Scenario 1.</para>
303
304 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
305 file may be a good template to start from. Also add
306 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
307 to the <quote>[global]</quote> section as described in Scenario 1 in
308 order to prevent filename corruption.</para>
309
310 <para>The following configuration file creates a separate share for each
311 user's home directory and also makes all printers available to Windows
312 machines:</para>
313
314<screen role='root'><literal>[global]
315 workgroup = <replaceable>MYGROUP</replaceable>
316 dos charset = <replaceable>cp850</replaceable>
317 unix charset = <replaceable>ISO-8859-1</replaceable>
318
319[homes]
320 comment = Home Directories
321 browseable = no
322 writable = yes
323
324[printers]
325 comment = All Printers
326 path = /var/spool/samba
327 browseable = no
328 guest ok = no
329 printable = yes</literal></screen>
330
331 <para>Other parameters you may wish to customize in the
332 <quote>[global]</quote> section include:</para>
333
334<screen role='root'><literal> server string =
335 security =
336 hosts allow =
337 load printers =
338 log file =
339 max log size =
340 socket options =
341 local master =</literal></screen>
342
343 <para>Reference the comments in the
344 <filename>/etc/samba/smb.conf.default</filename> file for information
345 regarding these parameters.</para>
346
347 <para>Since the <command>smbd</command> and <command>nmbd</command>
348 daemons are needed in this case, install the <filename>samba</filename>
349 bootscript. Be sure to run <command>smbpasswd</command> (with the
350 <option>-a</option> option to add users) to enable and
351 set passwords for all accounts that need
352 <application>Samba</application> access, or use the SWAT web interface
353 (see below) to do the same. Using the default
354 <application>Samba</application> passdb backend, any user you attempt
355 to add will also be required to exist in the
356 <filename>/etc/passwd</filename> file.</para>
357
358 </sect4>
359
360 <sect4>
361 <title>Advanced Requirements</title>
362
363 <para>More complex scenarios involving domain control or membership are
364 possible if the right flags are passed to the ./configure script when
365 the package is built. Such setups are advanced topics and cannot be
366 adequately covered in BLFS. Many complete books have been written on
367 these topics alone. It should be noted, however, that a
368 <application>Samba</application> BDC cannot be used as a fallback
369 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
370 fallback for a <application>Samba</application> PDC. Also in some
371 domain membership scenarios, the <command>winbindd</command> daemon and
372 the corresponding bootscript are needed.</para>
373
374 <para>There is quite a bit of documentation available which covers many
375 of these advanced configurations. Point your web browser to the links
376 below to view some of the documentation included with the
377 <application>Samba</application> package:</para>
378
379 <itemizedlist spacing='compact'>
380 <listitem>
381 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
382 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
383 </listitem>
384 <listitem>
385 <para>The Official Samba HOWTO and Reference Guide <ulink
386 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
387 </para>
388 </listitem>
389 <listitem>
390 <para>Samba-3 by Example
391 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
392 </para>
393 </listitem>
394 <listitem>
395 <para>The Samba-3 man Pages
396 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
397 </listitem>
398 </itemizedlist>
399
400 </sect4>
401
402 </sect3>
403
404 <sect3 id="samba3-swat-config">
405 <title>Configuring SWAT</title>
406
407 <para>The built in SWAT (<application>Samba</application> Web
408 Administration Tool) utility can be used for basic configuration of
409 the <application>Samba</application> installation, but because it may
410 be inconvenient, undesirable or perhaps even impossible to gain
411 access to the console, BLFS recommends setting up access to SWAT using
412 <application>Stunnel</application>. Without
413 <application>Stunnel</application>, the
414 <systemitem class="username">root</systemitem> password is transmitted
415 in clear text over the wire, and is considered an unacceptable security
416 risk. After considering the security implications of using SWAT without
417 <application>Stunnel</application>, and you still wish to implement SWAT
418 without it, instructions are provided at this end of this section.</para>
419
420 <indexterm zone="samba3 samba3-swat-config">
421 <primary sortas="g-SWAT">SWAT</primary>
422 </indexterm>
423
424 <sect4>
425 <title>Setting up SWAT using Stunnel</title>
426
427 <para>First install, or ensure you have already installed, the
428 <xref linkend="stunnel"/> package.</para>
429
430 <para>Next you must add entries to <filename>/etc/services</filename>
431 and modify the <command>inetd</command>/<command>xinetd</command>
432 configuration.</para>
433
434 <indexterm zone="samba3 samba3-swat-config">
435 <primary sortas="e-etc-services">/etc/services</primary>
436 </indexterm>
437
438 <indexterm zone="samba3 samba3-swat-config">
439 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
440 </indexterm>
441
442 <indexterm zone="samba3 samba3-swat-config">
443 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
444 </indexterm>
445
446 <para>Add swat and swat_tunnel entries to
447 <filename>/etc/services</filename> with the following commands issued
448 as the <systemitem class="username">root</systemitem> user:</para>
449
450<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
451echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
452
453 <para>If <command>inetd</command> is used, the following command will
454 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
455 user <systemitem class="username">root</systemitem>):</para>
456
457<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
458 &gt;&gt; /etc/inetd.conf</userinput></screen>
459
460 <para>Issue a <command>killall -HUP inetd</command> to reread the
461 changed <filename>inetd.conf</filename> file.</para>
462
463 <para>If you use <command>xinetd</command>, the following command will
464 create the <application>Samba</application> file as
465 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
466 or remove the <quote>only_from</quote> line to include the desired
467 host[s]):</para>
468
469<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
470<literal># Begin /etc/xinetd.d/swat_tunnel
471
472service swat_tunnel
473{
474 port = 902
475 socket_type = stream
476 wait = no
477 only_from = 127.0.0.1
478 user = root
479 server = /usr/sbin/swat
480 log_on_failure += USERID
481}
482
483# End /etc/xinetd.d/swat_tunnel</literal>
484EOF</userinput></screen>
485
486 <indexterm zone="samba3 samba3-swat-config">
487 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
488 </indexterm>
489
490 <para>Issue a <command>killall -HUP xinetd</command> to read the new
491 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
492
493 <para>Next, you must add an entry for the swat service to the
494 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
495 <systemitem class="username">root</systemitem>):</para>
496
497 <indexterm zone="samba3 samba3-swat-config">
498 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
499 </indexterm>
500
501<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
502<literal>[swat]
503accept = 901
504connect = 902</literal>
505
506EOF</userinput></screen>
507
508 <para>Restart the <command>stunnel</command> daemon using the following
509 command as the <systemitem class="username">root</systemitem> user:</para>
510
511<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
512
513 <para>SWAT can be launched by pointing your web browser to
514 <uri>https://<replaceable>[CA_DN_field]</replaceable>:901</uri>.
515 Substitute the hostname listed in the DN field of the CA certificate
516 used with <application>Stunnel</application> for
517 <replaceable>[CA_DN_field]</replaceable>.</para>
518
519 </sect4>
520
521 <sect4>
522 <title>Setting up SWAT without Stunnel</title>
523
524 <warning>
525 <para>BLFS does not recommend using these procedures because of the
526 security risk involved. However, in a home network environment and
527 disclosure of the <systemitem class='username'>root</systemitem>
528 password is an acceptable risk, the following
529 instructions are provided for your convenience.</para>
530 </warning>
531
532 <para>Add a swat entry to <filename>/etc/services</filename> with the
533 following command issued as the
534 <systemitem class='username'>root</systemitem> user:</para>
535
536<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
537
538 <para>If <command>inetd</command> is used, the following command
539 issued as the <systemitem class='username'>root</systemitem> user will
540 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
541
542<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
543 &gt;&gt; /etc/inetd.conf</userinput></screen>
544
545 <para>Issue a <command>killall -HUP inetd</command> to reread the
546 changed <filename>inetd.conf</filename> file.</para>
547
548 <para>If <command>xinetd</command> is used, the following command
549 issued as the <systemitem class='username'>root</systemitem> user
550 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
551
552<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
553<literal># Begin /etc/xinetd.d/swat
554
555service swat
556{
557 port = 901
558 socket_type = stream
559 wait = no
560 only_from = 127.0.0.1
561 user = root
562 server = /usr/sbin/swat
563 log_on_failure += USERID
564}
565
566# End /etc/xinetd.d/swat</literal>
567EOF</userinput></screen>
568
569 <para>Issue a <command>killall -HUP xinetd</command> to read the
570 new <filename>/etc/xinetd.d/swat</filename> file.</para>
571
572 <para>SWAT can be launched by pointing your web browser to
573 http://localhost:901.</para>
574
575 </sect4>
576
577 </sect3>
578
579 <sect3>
580 <title/>
581
582 <note>
583 <para>If you linked <application>Linux-PAM</application> into the
584 <application>Samba</application> build, you'll need to create an
585 <filename>/etc/pam.d/samba</filename> file.</para>
586 </note>
587
588 <indexterm zone="samba3 samba3-swat-config">
589 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
590 </indexterm>
591
592 </sect3>
593
594 <sect3 id="samba3-init">
595 <title>Boot Script</title>
596
597 <para>For your convenience, boot scripts have been provided for
598 <application>Samba</application>. There are two included in the
599 <xref linkend="intro-important-bootscripts"/> package. The first,
600 <filename>samba</filename>, will start the <command>smbd</command>
601 and <command>nmbd</command> daemons needed to provide SMB/CIFS
602 services. The second script, <filename>winbind</filename>, starts
603 the <command>winbindd</command> daemon, used for providing Windows
604 domain services to Linux clients.</para>
605
606 <indexterm zone="samba3 samba3-init">
607 <primary sortas="f-samba">samba</primary>
608 </indexterm>
609
610 <indexterm zone="samba3 samba3-init">
611 <primary sortas="f-winbind">winbind</primary>
612 </indexterm>
613
614 <para>The default <application>Samba</application> installation uses the
615 <systemitem class='username'>nobody</systemitem> user for guest access
616 to the server. This can be overridden by setting the
617 <option>guest account =</option> parameter in the
618 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
619 <option>guest account =</option> parameter, ensure this user exists in
620 the <filename>/etc/passwd</filename> file. To use the default user,
621 issue the following commands as the
622 <systemitem class='username'>root</systemitem> user:</para>
623
624<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
625useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
626 -s /bin/false -u 99 nobody</userinput></screen>
627
628 <para>Install the <filename>samba</filename> script with the following
629 command issued as the <systemitem class="username">root</systemitem>
630 user:</para>
631
632<screen role="root"><userinput>make install-samba</userinput></screen>
633
634 <para>If you also need the <filename>winbind</filename>
635 script:</para>
636
637<screen role="root"><userinput>make install-winbind</userinput></screen>
638
639 </sect3>
640
641 </sect2>
642
643 <sect2 role="content">
644 <title>Contents</title>
645
646 <segmentedlist>
647 <segtitle>Installed Programs</segtitle>
648 <segtitle>Installed Libraries</segtitle>
649 <segtitle>Installed Directories</segtitle>
650
651 <seglistitem>
652 <seg>findsmb, mount.smbfs, net, nmbd, nmblookup, ntlm_auth, pdbedit,
653 profiles, rpcclient, smbcacls, smbclient, smbcontrol, smbcquotas, smbd,
654 smbmnt, smbmount, smbpasswd, smbspool, smbstatus, smbtar, smbtree,
655 smbumount, swat, tdbbackup, tdbdump, tdbtool, testparm, testprns,
656 wbinfo, and winbindd</seg>
657 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, the
658 pam_winbind.so PAM library and assorted character set,
659 filesystem and support modules.</seg>
660 <seg>/etc/samba, /usr/lib/samba, /usr/share/samba, /var/cache/samba,
661 and /var/lib/samba</seg>
662 </seglistitem>
663 </segmentedlist>
664
665 <variablelist>
666 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
667 <?dbfo list-presentation="list"?>
668 <?dbhtml list-presentation="table"?>
669
670 <varlistentry id="findsmb">
671 <term><command>findsmb</command></term>
672 <listitem>
673 <para>lists information about machines that respond to
674 SMB name queries on a subnet.</para>
675 <indexterm zone="samba3 findsmb">
676 <primary sortas="b-findsmb">findsmb</primary>
677 </indexterm>
678 </listitem>
679 </varlistentry>
680
681 <varlistentry id="mount.smbfs">
682 <term><command>mount.smbfs</command></term>
683 <listitem>
684 <para>is a symlink to <command>smbmount</command> which provides
685 <command>/bin/mount</command> with a way to mount remote Windows
686 (or <application>Samba</application>) fileshares.</para>
687 <indexterm zone="samba3 mount.smbfs">
688 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
689 </indexterm>
690 </listitem>
691 </varlistentry>
692
693 <varlistentry id="net">
694 <term><command>net</command></term>
695 <listitem>
696 <para>is a tool for administration of
697 <application>Samba</application> and remote CIFS servers, similar
698 to the <command>net</command> utility for DOS/Windows.</para>
699 <indexterm zone="samba3 net">
700 <primary sortas="b-net">net</primary>
701 </indexterm>
702 </listitem>
703 </varlistentry>
704
705 <varlistentry id="nmbd">
706 <term><command>nmbd</command></term>
707 <listitem>
708 <para>is the <application>Samba</application>
709 NetBIOS name server.</para>
710 <indexterm zone="samba3 nmbd">
711 <primary sortas="b-nmbd">nmbd</primary>
712 </indexterm>
713 </listitem>
714 </varlistentry>
715
716 <varlistentry id="nmblookup">
717 <term><command>nmblookup</command></term>
718 <listitem>
719 <para>is used to query NetBIOS names and map
720 them to IP addresses.</para>
721 <indexterm zone="samba3 nmblookup">
722 <primary sortas="b-nmblookup">nmblookup</primary>
723 </indexterm>
724 </listitem>
725 </varlistentry>
726
727 <varlistentry id="ntlm_auth">
728 <term><command>ntlm_auth</command></term>
729 <listitem>
730 <para>is a tool to allow external access to Winbind's
731 NTLM authentication function.</para>
732 <indexterm zone="samba3 ntlm_auth">
733 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
734 </indexterm>
735 </listitem>
736 </varlistentry>
737
738 <varlistentry id="pdbedit">
739 <term><command>pdbedit</command></term>
740 <listitem>
741 <para>is a tool used to manage the SAM database.</para>
742 <indexterm zone="samba3 pdbedit">
743 <primary sortas="b-pdbedit">pdbedit</primary>
744 </indexterm>
745 </listitem>
746 </varlistentry>
747
748 <varlistentry id="profiles">
749 <term><command>profiles</command></term>
750 <listitem>
751 <para>is a utility that reports and changes SIDs in Windows
752 registry files. It currently only supports Windows NT.</para>
753 <indexterm zone="samba3 profiles">
754 <primary sortas="b-profiles">profiles</primary>
755 </indexterm>
756 </listitem>
757 </varlistentry>
758
759 <varlistentry id="rpcclient">
760 <term><command>rpcclient</command></term>
761 <listitem>
762 <para>is used to execute MS-RPC client side functions.</para>
763 <indexterm zone="samba3 rpcclient">
764 <primary sortas="b-rpcclient">rpcclient</primary>
765 </indexterm>
766 </listitem>
767 </varlistentry>
768
769 <varlistentry id="smbcacls">
770 <term><command>smbcacls</command></term>
771 <listitem>
772 <para>is used to manipulate Windows NT access control lists.</para>
773 <indexterm zone="samba3 smbcacls">
774 <primary sortas="b-smbcacls">smbcacls</primary>
775 </indexterm>
776 </listitem>
777 </varlistentry>
778
779 <varlistentry id="smbclient">
780 <term><command>smbclient</command></term>
781 <listitem>
782 <para>is a SMB/CIFS access utility, similar to FTP.</para>
783 <indexterm zone="samba3 smbclient">
784 <primary sortas="b-smbclient">smbclient</primary>
785 </indexterm>
786 </listitem>
787 </varlistentry>
788
789 <varlistentry id="smbcontrol">
790 <term><command>smbcontrol</command></term>
791 <listitem>
792 <para>is used to control running <command>smbd</command>,
793 <command>nmbd</command> and <command>winbindd</command>
794 daemons.</para>
795 <indexterm zone="samba3 smbcontrol">
796 <primary sortas="b-smbcontrol">smbcontrol</primary>
797 </indexterm>
798 </listitem>
799 </varlistentry>
800
801 <varlistentry id="smbcquotas">
802 <term><command>smbcquotas</command></term>
803 <listitem>
804 <para>is used to manipulate Windows NT quotas on
805 SMB file shares.</para>
806 <indexterm zone="samba3 smbcquotas">
807 <primary sortas="b-smbcquotas">smbcquotas</primary>
808 </indexterm>
809 </listitem>
810 </varlistentry>
811
812 <varlistentry id="smbd">
813 <term><command>smbd</command></term>
814 <listitem>
815 <para>is the main <application>Samba</application> daemon which
816 provides SMB/CIFS services to clients.</para>
817 <indexterm zone="samba3 smbd">
818 <primary sortas="b-smbd">smbd</primary>
819 </indexterm>
820 </listitem>
821 </varlistentry>
822
823 <varlistentry id="smbmnt">
824 <term><command>smbmnt</command></term>
825 <listitem>
826 <para>is a helper application used by the
827 <command>smbmount</command> program to do the actual mounting of
828 SMB shares. It can be installed setuid
829 <systemitem class='username'>root</systemitem> if you want
830 unprivileged users to be able to mount their SMB shares.</para>
831 <indexterm zone="samba3 smbmnt">
832 <primary sortas="b-smbmnt">smbmnt</primary>
833 </indexterm>
834 </listitem>
835 </varlistentry>
836
837 <varlistentry id="smbmount">
838 <term><command>smbmount</command></term>
839 <listitem>
840 <para>is usually invoked as <command>mount.smbfs</command> by the
841 <command>mount</command> command when using the
842 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
843 filesystem.</para>
844 <indexterm zone="samba3 smbmount">
845 <primary sortas="b-smbmount">smbmount</primary>
846 </indexterm>
847 </listitem>
848 </varlistentry>
849
850 <varlistentry id="smbpasswd">
851 <term><command>smbpasswd</command></term>
852 <listitem>
853 <para>changes a user's <application>Samba</application>
854 password.</para>
855 <indexterm zone="samba3 smbpasswd">
856 <primary sortas="b-smbpasswd">smbpasswd</primary>
857 </indexterm>
858 </listitem>
859 </varlistentry>
860
861 <varlistentry id="smbspool">
862 <term><command>smbspool</command></term>
863 <listitem>
864 <para>sends a print job to an SMB printer.</para>
865 <indexterm zone="samba3 smbspool">
866 <primary sortas="b-smbspool">smbspool</primary>
867 </indexterm>
868 </listitem>
869 </varlistentry>
870
871 <varlistentry id="smbstatus">
872 <term><command>smbstatus</command></term>
873 <listitem>
874 <para>reports current <application>Samba</application>
875 connections.</para>
876 <indexterm zone="samba3 smbstatus">
877 <primary sortas="b-smbstatus">smbstatus</primary>
878 </indexterm>
879 </listitem>
880 </varlistentry>
881
882 <varlistentry id="smbtar">
883 <term><command>smbtar</command></term>
884 <listitem>
885 <para>is a shell script used for backing up SMB/CIFS shares
886 directly to Linux tape drives or a file.</para>
887 <indexterm zone="samba3 smbtar">
888 <primary sortas="b-smbtar">smbtar</primary>
889 </indexterm>
890 </listitem>
891 </varlistentry>
892
893 <varlistentry id="smbtree">
894 <term><command>smbtree</command></term>
895 <listitem>
896 <para>is a text-based SMB network browser.</para>
897 <indexterm zone="samba3 smbtree">
898 <primary sortas="b-smbtree">smbtree</primary>
899 </indexterm>
900 </listitem>
901 </varlistentry>
902
903 <varlistentry id="smbumount">
904 <term><command>smbumount</command></term>
905 <listitem>
906 <para>is used by unprivileged users to unmount SMB filesystems,
907 provided that it is setuid root.</para>
908 <indexterm zone="samba3 smbumount">
909 <primary sortas="b-smbumount">smbumount</primary>
910 </indexterm>
911 </listitem>
912 </varlistentry>
913
914 <varlistentry id="swat">
915 <term><command>swat</command></term>
916 <listitem>
917 <para>is the <application>Samba</application> Web Administration
918 Tool.</para>
919 <indexterm zone="samba3 swat">
920 <primary sortas="b-swat">swat</primary>
921 </indexterm>
922 </listitem>
923 </varlistentry>
924
925 <varlistentry id="tdbbackup">
926 <term><command>tdbbackup</command></term>
927 <listitem>
928 <para>is a tool for backing up or validating the integrity of
929 <application>Samba</application> <filename>.tdb</filename>
930 files.</para>
931 <indexterm zone="samba3 tdbbackup">
932 <primary sortas="b-tdbbackup">tdbbackup</primary>
933 </indexterm>
934 </listitem>
935 </varlistentry>
936
937 <varlistentry id="tdbdump">
938 <term><command>tdbdump</command></term>
939 <listitem>
940 <para> is a tool used to print the contents of a
941 <application>Samba</application> <filename>.tdb</filename>
942 file.</para>
943 <indexterm zone="samba3 tdbdump">
944 <primary sortas="b-tdbdump">tdbdump</primary>
945 </indexterm>
946 </listitem>
947 </varlistentry>
948
949 <varlistentry id="tdbtool">
950 <term><command>tdbtool</command></term>
951 <listitem>
952 <para>is a tool which allows simple database manipulation from the
953 command line.</para>
954 <indexterm zone="samba3 tdbtool">
955 <primary sortas="b-tdbtool">tdbtool</primary>
956 </indexterm>
957 </listitem>
958 </varlistentry>
959
960 <varlistentry id="testparm">
961 <term><command>testparm</command></term>
962 <listitem>
963 <para>checks an <filename>smb.conf</filename> file for proper
964 syntax.</para>
965 <indexterm zone="samba3 testparm">
966 <primary sortas="b-testparm">testparm</primary>
967 </indexterm>
968 </listitem>
969 </varlistentry>
970
971 <varlistentry id="testprns">
972 <term><command>testprns</command></term>
973 <listitem>
974 <para>tests printer names.</para>
975 <indexterm zone="samba3 testprns">
976 <primary sortas="b-testprns">testprns</primary>
977 </indexterm>
978 </listitem>
979 </varlistentry>
980
981 <varlistentry id="wbinfo">
982 <term><command>wbinfo</command></term>
983 <listitem>
984 <para>queries a running <command>winbindd</command> daemon.</para>
985 <indexterm zone="samba3 wbinfo">
986 <primary sortas="b-wbinfo">wbinfo</primary>
987 </indexterm>
988 </listitem>
989 </varlistentry>
990
991 <varlistentry id="winbindd">
992 <term><command>winbindd</command></term>
993 <listitem>
994 <para>resolves names from Windows NT servers.</para>
995 <indexterm zone="samba3 winbindd">
996 <primary sortas="b-winbindd">winbindd</primary>
997 </indexterm>
998 </listitem>
999 </varlistentry>
1000
1001 </variablelist>
1002
1003 </sect2>
1004
1005</sect1>
Note: See TracBrowser for help on using the repository browser.