source: server/major/samba3.xml@ 5254d12

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 5254d12 was 5254d12, checked in by Randy McMurchy <randy@…>, 18 years ago

Standardized the id tag name of the Bootscripts package

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@5497 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 39.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "39c0cae08fe0224cb003aa0af97d3050">
10 <!ENTITY samba3-size "17.1 MB">
11 <!ENTITY samba3-buildsize "177.4 MB">
12 <!ENTITY samba3-time "2.5 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 <keywordset>
22 <keyword role="package">samba-&samba3-version;.tar</keyword>
23 <keyword role="ftpdir">samba</keyword>
24 </keywordset>
25 </sect1info>
26
27 <title>Samba-&samba3-version;</title>
28
29 <indexterm zone="samba3">
30 <primary sortas="a-Samba">Samba</primary>
31 </indexterm>
32
33 <sect2 role="package">
34 <title>Introduction to Samba</title>
35
36 <para>The <application>Samba</application> package provides file and print
37 services to SMB/CIFS clients and Windows networking to Linux clients.
38 <application>Samba</application> can also be configured as a Windows NT
39 4.0 Domain Controller replacement (with caveats working with NT PDC's and
40 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
41 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
42 amongst other things provides LAN browsing support).</para>
43
44 <bridgehead renderas="sect3">Package Information</bridgehead>
45 <itemizedlist spacing="compact">
46 <listitem>
47 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
48 </listitem>
49 <listitem>
50 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
51 </listitem>
52 <listitem>
53 <para>Download MD5 sum: &samba3-md5sum;</para>
54 </listitem>
55 <listitem>
56 <para>Download size: &samba3-size;</para>
57 </listitem>
58 <listitem>
59 <para>Estimated disk space required: &samba3-buildsize;</para>
60 </listitem>
61 <listitem>
62 <para>Estimated build time: &samba3-time;</para>
63 </listitem>
64 </itemizedlist>
65
66 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
67 <itemizedlist spacing="compact">
68 <listitem>
69 <para>Required patch if you have <application>Heimdal</application>
70 installed: <ulink
71 url="&patch-root;/samba-&samba3-version;-heimdal-1.patch"/></para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Optional</bridgehead>
78 <para role="optional"><xref linkend="popt"/>,
79 <xref linkend="linux-pam"/>,
80 <xref linkend="openldap"/>,
81 <xref linkend="cups"/>,
82 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
83 <xref linkend="libxml2"/>,
84 <xref linkend="mysql"/>,
85 <xref linkend="postgresql"/>,
86 <xref linkend="python"/> and
87 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para>
88
89 </sect2>
90
91 <sect2 role="installation">
92 <title>Installation of Samba</title>
93
94 <para>A <application>Samba</application> <filename>include.h</filename>
95 header now does checks for C++ reserved names. The package will not build
96 if you have <application>Heimdal</application> installed as Heimdal uses
97 some of these reserved names inappropriately. If you have
98 <application>Heimdal</application> installed, apply the following patch to
99 disable these checks and allow the package to compile successfully:</para>
100
101<screen><userinput>patch -Np1 -i ../samba-&samba3-version;-heimdal-1.patch</userinput></screen>
102
103 <para>Install <application>Samba</application> by running the following
104 commands:</para>
105
106 <note>
107 <para>You may want to run <command>configure</command> with the
108 <option>--help</option> parameter. There may be other parameters
109 needed to take advantage of the optional dependencies.</para>
110 </note>
111
112<screen><userinput>cd source &amp;&amp;
113sed -i "60s/lib\[2/lib[1/" python/setup.py &amp;&amp;
114./configure \
115 --prefix=/usr \
116 --sysconfdir=/etc \
117 --localstatedir=/var \
118 --with-piddir=/var/run \
119 --with-fhs \
120 --with-smbmount &amp;&amp;
121make</userinput></screen>
122
123 <para>This package does not come with a test suite.</para>
124
125 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
126
127<!-- Commenting out the need for /var/cache/samba as my testing has
128 shown me that this directory is not used. Grepping the source
129 tree also turns up nothing about 'cache/samba'. -Randy
130<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
131-->
132
133<screen role="root"><userinput>make install &amp;&amp;
134mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
135ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
136ln -v -sf libsmbclient.so /usr/lib/libsmbclient.so.0 &amp;&amp;
137
138chmod -v 644 /usr/include/libsmbclient.h &amp;&amp;
139
140install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
141ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
142ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
143
144if [ -f nsswitch/pam_winbind.so ]; then
145 install -v -m755 nsswitch/pam_winbind.so /lib/security
146fi &amp;&amp;
147
148install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
149
150install -v -m755 -d /usr/share/doc/samba-&samba3-version; &amp;&amp;
151install -v -m644 ../docs/*.pdf /usr/share/doc/samba-&samba3-version; &amp;&amp;
152ln -v -s ../../samba/swat /usr/share/doc/samba-3.0.20b</userinput></screen>
153
154 <para>If you passed the <option>--with-python</option> option to the
155 <command>configure</command> script, issue the following command as the
156 <systemitem class="username">root</systemitem> user to install the
157 <application>Python</application> extensions:</para>
158
159<screen role="root"><userinput>make python_install</userinput></screen>
160
161 </sect2>
162
163 <sect2 role="commands">
164 <title>Command Explanations</title>
165
166 <para><command>sed -i "60s/lib\[2/lib[1/" python/setup.py</command>:
167 This command is necessary to build the
168 <application>Python</application> extensions. The
169 <filename>setup.py</filename> file has a bug which causes the build to
170 crash. This command fixes the bug.</para>
171
172 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
173 file directory to avoid the default of
174 <filename class="directory">/usr/etc</filename>.</para>
175
176 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
177 data directory to avoid the default of
178 <filename class="directory">/usr/var</filename>.</para>
179
180 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
181 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
182
183 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
184 extra binary for use by the <command>mount</command> command so that
185 mounting remote SMB (Windows) shares becomes no more complex than
186 mounting remote NFS shares.</para>
187
188 <para><option>--with-pam</option>: Use this parameter to link
189 <application>Linux-PAM</application> into the build. This
190 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
191 <application>PAM</application> module. You can find
192 instructions on how to configure and use the module by running
193 <command>man winbindd</command>.</para>
194
195 <!-- I am convinced that this command is no longer necessary. -Randy
196 <para><command>install -v -d /var/cache/samba</command>: This directory is
197 needed for proper operation of the <command>smbd</command> and
198 <command>nmbd</command> daemons.</para>
199 -->
200
201 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
202 ../libsmbclient.so ...</command>: The
203 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
204 by other packages. This command moves it to a location where other packages
205 can find it.</para>
206
207 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
208 The nss libraries are not installed by default. If you intend to use
209 winbindd for domain auth, and/or WINS name resolution,
210 you need these libraries.</para>
211
212 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
213 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
214 These symlinks are required by glibc to use the NSS
215 libraries.</para>
216
217 <para><command>install -v -m644 ../examples/smb.conf.default
218 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
219 file into <filename>/etc/samba</filename>. This sample configuration will
220 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
221 make the appropriate changes for your installation. See the configuration
222 section for minimum values which must be set.</para>
223
224 </sect2>
225
226 <sect2 role="configuration">
227 <title>Configuring Samba</title>
228
229 <sect3 id="samba3-config">
230 <title>Config Files</title>
231
232 <para>/etc/samba/smb.conf</para>
233
234 <indexterm zone="samba3 samba3-config">
235 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
236 </indexterm>
237
238 </sect3>
239
240 <sect3>
241 <title>Mounting Shares by Unprivileged Users</title>
242
243 <para>If it is desired for unprivileged users to directly mount (and
244 unmount) SMB shares, the <command>smbmnt</command> and
245 <command>smbumount</command> commands must be setuid
246 <systemitem class='username'>root</systemitem>. Note that users can
247 only mount SMB shares on a mount point owned by that user (requires
248 write access also). If desired, change these programs to setuid
249 <systemitem class='username'>root</systemitem> by issuing the following
250 command as the <systemitem class='username'>root</systemitem>
251 user:</para>
252
253<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}</userinput></screen>
254
255 </sect3>
256
257 <sect3>
258 <title>Printing to SMB Clients</title>
259
260 <para>If you use <application>CUPS</application> for print services,
261 and you wish to print to a printer attached to an SMB client, you
262 need to create an SMB backend device. To create the device, issue the
263 following command as the <systemitem class="username">root</systemitem>
264 user:</para>
265
266<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
267
268 </sect3>
269
270 <sect3>
271 <title>Configuration Information</title>
272
273 <para>Due to the complexity and the many various uses for
274 <application>Samba</application>, complete configuration for all the
275 package's capabilities is well beyond the scope of the BLFS book. This
276 section provides instructions to configure the
277 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
278 The complete contents of <filename>/etc/samba/smb.conf</filename> will
279 depend on the purpose of <application>Samba</application>
280 installation.</para>
281
282 <note>
283 <para>You may find it easier to copy the configuration parameters shown
284 below into an empty <filename>/etc/samba/smb.conf</filename> file
285 instead of copying and editing the default file as mentioned in the
286 <quote>Command Explanations</quote> section. How you create/edit the
287 <filename>/etc/samba/smb.conf</filename> file will be left up to
288 you. Do ensure the file is only writeable by the
289 <systemitem class="username">root</systemitem> user (mode 644).</para>
290 </note>
291
292 <sect4>
293 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
294
295 <para>Choose this variant if you only want to transfer files using
296 <command>smbclient</command>, mount Windows shares and print to Windows
297 printers, and don't want to share your files and printers to Windows
298 machines.</para>
299
300 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
301 three parameters is sufficient:</para>
302
303<screen role='root'><literal>[global]
304 workgroup = <replaceable>MYGROUP</replaceable>
305 dos charset = <replaceable>cp850</replaceable>
306 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
307
308 <para>The values in this example specify that the computer belongs to a
309 Windows workgroup named
310 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
311 <quote><replaceable>cp850</replaceable></quote> character set on the
312 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
313 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
314 encoding on the disk. Adjust these values appropriately for your
315 installation. The <quote>unix charset</quote> value must be the same as
316 the output of <command>locale charmap</command> when executed with the
317 <envar>LANG</envar> variable set to your preferred locale, otherwise the
318 <command>ls</command> command may not display correct filenames of
319 downloaded files.</para>
320
321 <para>There is no need to run any <application>Samba</application>
322 servers in this scenario, thus you don't need to install the provided
323 bootscripts.</para>
324
325 </sect4>
326
327 <sect4>
328 <title>Scenario 2: Standalone File/Print Server</title>
329
330 <para>Choose this variant if you want to share your files and printers
331 to Windows machines in your workgroup in addition to the capabilities
332 described in Scenario 1.</para>
333
334 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
335 file may be a good template to start from. Also add
336 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
337 to the <quote>[global]</quote> section as described in Scenario 1 in
338 order to prevent filename corruption.</para>
339
340 <para>The following configuration file creates a separate share for each
341 user's home directory and also makes all printers available to Windows
342 machines:</para>
343
344<screen role='root'><literal>[global]
345 workgroup = <replaceable>MYGROUP</replaceable>
346 dos charset = <replaceable>cp850</replaceable>
347 unix charset = <replaceable>ISO-8859-1</replaceable>
348
349[homes]
350 comment = Home Directories
351 browseable = no
352 writable = yes
353
354[printers]
355 comment = All Printers
356 path = /var/spool/samba
357 browseable = no
358 guest ok = no
359 printable = yes</literal></screen>
360
361 <para>Other parameters you may wish to customize in the
362 <quote>[global]</quote> section include:</para>
363
364<screen role='root'><literal> server string =
365 security =
366 hosts allow =
367 load printers =
368 log file =
369 max log size =
370 socket options =
371 local master =</literal></screen>
372
373 <para>Reference the comments in the
374 <filename>/etc/samba/smb.conf.default</filename> file for information
375 regarding these parameters.</para>
376
377 <para>Since the <command>smbd</command> and <command>nmbd</command>
378 daemons are needed in this case, install the <filename>samba</filename>
379 bootscript. Be sure to run <command>smbpasswd</command> (with the
380 <option>-a</option> option to add users) to enable and
381 set passwords for all accounts that need
382 <application>Samba</application> access, or use the SWAT web interface
383 (see below) to do the same. Using the default
384 <application>Samba</application> passdb backend, any user you attempt
385 to add will also be required to exist in the
386 <filename>/etc/passwd</filename> file.</para>
387
388 </sect4>
389
390 <sect4>
391 <title>Advanced Requirements</title>
392
393 <para>More complex scenarios involving domain control or membership are
394 possible if the right flags are passed to the ./configure script when
395 the package is built. Such setups are advanced topics and cannot be
396 adequately covered in BLFS. Many complete books have been written on
397 these topics alone. It should be noted, however, that a
398 <application>Samba</application> BDC cannot be used as a fallback
399 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
400 fallback for a <application>Samba</application> PDC. Also in some
401 domain membership scenarios, the <command>winbindd</command> daemon and
402 the corresponding bootscript are needed.</para>
403
404 <para>There is quite a bit of documentation available which covers many
405 of these advanced configurations. Point your web browser to the links
406 below to view some of the documentation included with the
407 <application>Samba</application> package:</para>
408
409 <itemizedlist spacing='compact'>
410 <listitem>
411 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
412 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
413 </listitem>
414 <listitem>
415 <para>The Official Samba HOWTO and Reference Guide <ulink
416 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
417 </para>
418 </listitem>
419 <listitem>
420 <para>Samba-3 by Example
421 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
422 </para>
423 </listitem>
424 <listitem>
425 <para>The Samba-3 man Pages
426 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
427 </listitem>
428 </itemizedlist>
429
430 </sect4>
431
432 </sect3>
433
434 <sect3 id="samba3-swat-config">
435 <title>Configuring SWAT</title>
436
437 <para>The built in SWAT (<application>Samba</application> Web
438 Administration Tool) utility can be used for basic configuration of
439 the <application>Samba</application> installation, but because it may
440 be inconvenient, undesirable or perhaps even impossible to gain
441 access to the console, BLFS recommends setting up access to SWAT using
442 <application>Stunnel</application>. Without
443 <application>Stunnel</application>, the
444 <systemitem class="username">root</systemitem> password is transmitted
445 in clear text over the wire, and is considered an unacceptable security
446 risk. After considering the security implications of using SWAT without
447 <application>Stunnel</application>, and you still wish to implement SWAT
448 without it, instructions are provided at this end of this section.</para>
449
450 <indexterm zone="samba3 samba3-swat-config">
451 <primary sortas="g-SWAT">SWAT</primary>
452 </indexterm>
453
454 <sect4>
455 <title>Setting up SWAT using Stunnel</title>
456
457 <para>First install, or ensure you have already installed, the
458 <xref linkend="stunnel"/> package.</para>
459
460 <para>Next you must add entries to <filename>/etc/services</filename>
461 and modify the <command>inetd</command>/<command>xinetd</command>
462 configuration.</para>
463
464 <indexterm zone="samba3 samba3-swat-config">
465 <primary sortas="e-etc-services">/etc/services</primary>
466 </indexterm>
467
468 <indexterm zone="samba3 samba3-swat-config">
469 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
470 </indexterm>
471
472 <indexterm zone="samba3 samba3-swat-config">
473 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
474 </indexterm>
475
476 <para>Add swat and swat_tunnel entries to
477 <filename>/etc/services</filename> with the following commands issued
478 as the <systemitem class="username">root</systemitem> user:</para>
479
480<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
481echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
482
483 <para>If <command>inetd</command> is used, the following command will
484 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
485 user <systemitem class="username">root</systemitem>):</para>
486
487<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
488 &gt;&gt; /etc/inetd.conf</userinput></screen>
489
490 <para>Issue a <command>killall -HUP inetd</command> to reread the
491 changed <filename>inetd.conf</filename> file.</para>
492
493 <para>If you use <command>xinetd</command>, the following command will
494 create the <application>Samba</application> file as
495 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
496 or remove the <quote>only_from</quote> line to include the desired
497 host[s]):</para>
498
499<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
500<literal># Begin /etc/xinetd.d/swat_tunnel
501
502service swat_tunnel
503{
504 port = 902
505 socket_type = stream
506 wait = no
507 only_from = 127.0.0.1
508 user = root
509 server = /usr/sbin/swat
510 log_on_failure += USERID
511}
512
513# End /etc/xinetd.d/swat_tunnel</literal>
514EOF</userinput></screen>
515
516 <indexterm zone="samba3 samba3-swat-config">
517 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
518 </indexterm>
519
520 <para>Issue a <command>killall -HUP xinetd</command> to read the new
521 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
522
523 <para>Next, you must add an entry for the swat service to the
524 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
525 <systemitem class="username">root</systemitem>):</para>
526
527 <indexterm zone="samba3 samba3-swat-config">
528 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
529 </indexterm>
530
531<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
532<literal>[swat]
533accept = 901
534connect = 902</literal>
535
536EOF</userinput></screen>
537
538 <para>Restart the <command>stunnel</command> daemon using the following
539 command as the <systemitem class="username">root</systemitem> user:</para>
540
541<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
542
543 <para>SWAT can be launched by pointing your web browser to
544 <uri>https://<replaceable>[CA_DN_field]</replaceable>:901</uri>.
545 Substitute the hostname listed in the DN field of the CA certificate
546 used with <application>Stunnel</application> for
547 <replaceable>[CA_DN_field]</replaceable>.</para>
548
549 </sect4>
550
551 <sect4>
552 <title>Setting up SWAT without Stunnel</title>
553
554 <warning>
555 <para>BLFS does not recommend using these procedures because of the
556 security risk involved. However, in a home network environment and
557 disclosure of the <systemitem class='username'>root</systemitem>
558 password is an acceptable risk, the following
559 instructions are provided for your convenience.</para>
560 </warning>
561
562 <para>Add a swat entry to <filename>/etc/services</filename> with the
563 following command issued as the
564 <systemitem class='username'>root</systemitem> user:</para>
565
566<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
567
568 <para>If <command>inetd</command> is used, the following command
569 issued as the <systemitem class='username'>root</systemitem> user will
570 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
571
572<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
573 &gt;&gt; /etc/inetd.conf</userinput></screen>
574
575 <para>Issue a <command>killall -HUP inetd</command> to reread the
576 changed <filename>inetd.conf</filename> file.</para>
577
578 <para>If <command>xinetd</command> is used, the following command
579 issued as the <systemitem class='username'>root</systemitem> user
580 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
581
582<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
583<literal># Begin /etc/xinetd.d/swat
584
585service swat
586{
587 port = 901
588 socket_type = stream
589 wait = no
590 only_from = 127.0.0.1
591 user = root
592 server = /usr/sbin/swat
593 log_on_failure += USERID
594}
595
596# End /etc/xinetd.d/swat</literal>
597EOF</userinput></screen>
598
599 <para>Issue a <command>killall -HUP xinetd</command> to read the
600 new <filename>/etc/xinetd.d/swat</filename> file.</para>
601
602 <para>SWAT can be launched by pointing your web browser to
603 http://localhost:901.</para>
604
605 </sect4>
606
607 </sect3>
608
609 <sect3>
610 <title/>
611
612 <note>
613 <para>If you linked <application>Linux-PAM</application> into the
614 <application>Samba</application> build, you'll need to create an
615 <filename>/etc/pam.d/samba</filename> file.</para>
616 </note>
617
618 <indexterm zone="samba3 samba3-swat-config">
619 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
620 </indexterm>
621
622 </sect3>
623
624 <sect3 id="samba3-init">
625 <title>Boot Script</title>
626
627 <para>For your convenience, boot scripts have been provided for
628 <application>Samba</application>. There are two included in the
629 <xref linkend="bootscripts"/> package. The first,
630 <filename>samba</filename>, will start the <command>smbd</command>
631 and <command>nmbd</command> daemons needed to provide SMB/CIFS
632 services. The second script, <filename>winbind</filename>, starts
633 the <command>winbindd</command> daemon, used for providing Windows
634 domain services to Linux clients.</para>
635
636 <indexterm zone="samba3 samba3-init">
637 <primary sortas="f-samba">samba</primary>
638 </indexterm>
639
640 <indexterm zone="samba3 samba3-init">
641 <primary sortas="f-winbind">winbind</primary>
642 </indexterm>
643
644 <para>The default <application>Samba</application> installation uses the
645 <systemitem class='username'>nobody</systemitem> user for guest access
646 to the server. This can be overridden by setting the
647 <option>guest account =</option> parameter in the
648 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
649 <option>guest account =</option> parameter, ensure this user exists in
650 the <filename>/etc/passwd</filename> file. To use the default user,
651 issue the following commands as the
652 <systemitem class='username'>root</systemitem> user:</para>
653
654<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
655useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
656 -s /bin/false -u 99 nobody</userinput></screen>
657
658 <para>Install the <filename>samba</filename> script with the following
659 command issued as the <systemitem class="username">root</systemitem>
660 user:</para>
661
662<screen role="root"><userinput>make install-samba</userinput></screen>
663
664 <para>If you also need the <filename>winbind</filename>
665 script:</para>
666
667<screen role="root"><userinput>make install-winbind</userinput></screen>
668
669 </sect3>
670
671 </sect2>
672
673 <sect2 role="content">
674 <title>Contents</title>
675
676 <segmentedlist>
677 <segtitle>Installed Programs</segtitle>
678 <segtitle>Installed Libraries</segtitle>
679 <segtitle>Installed Directories</segtitle>
680
681 <seglistitem>
682 <seg>findsmb, mount.smbfs, net, nmbd, nmblookup, ntlm_auth, pdbedit,
683 profiles, rpcclient, smbcacls, smbclient, smbcontrol, smbcquotas, smbd,
684 smbmnt, smbmount, smbpasswd, smbspool, smbstatus, smbtar, smbtree,
685 smbumount, swat, tdbbackup, tdbdump, tdbtool, testparm, testprns,
686 wbinfo, and winbindd</seg>
687 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, the
688 pam_winbind.so PAM library and assorted character set,
689 filesystem and support modules.</seg>
690 <seg>/etc/samba, /usr/lib/samba, /usr/share/samba, /var/cache/samba,
691 and /var/lib/samba</seg>
692 </seglistitem>
693 </segmentedlist>
694
695 <variablelist>
696 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
697 <?dbfo list-presentation="list"?>
698 <?dbhtml list-presentation="table"?>
699
700 <varlistentry id="findsmb">
701 <term><command>findsmb</command></term>
702 <listitem>
703 <para>lists information about machines that respond to
704 SMB name queries on a subnet.</para>
705 <indexterm zone="samba3 findsmb">
706 <primary sortas="b-findsmb">findsmb</primary>
707 </indexterm>
708 </listitem>
709 </varlistentry>
710
711 <varlistentry id="mount.smbfs">
712 <term><command>mount.smbfs</command></term>
713 <listitem>
714 <para>is a symlink to <command>smbmount</command> which provides
715 <command>/bin/mount</command> with a way to mount remote Windows
716 (or <application>Samba</application>) fileshares.</para>
717 <indexterm zone="samba3 mount.smbfs">
718 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
719 </indexterm>
720 </listitem>
721 </varlistentry>
722
723 <varlistentry id="net">
724 <term><command>net</command></term>
725 <listitem>
726 <para>is a tool for administration of
727 <application>Samba</application> and remote CIFS servers, similar
728 to the <command>net</command> utility for DOS/Windows.</para>
729 <indexterm zone="samba3 net">
730 <primary sortas="b-net">net</primary>
731 </indexterm>
732 </listitem>
733 </varlistentry>
734
735 <varlistentry id="nmbd">
736 <term><command>nmbd</command></term>
737 <listitem>
738 <para>is the <application>Samba</application>
739 NetBIOS name server.</para>
740 <indexterm zone="samba3 nmbd">
741 <primary sortas="b-nmbd">nmbd</primary>
742 </indexterm>
743 </listitem>
744 </varlistentry>
745
746 <varlistentry id="nmblookup">
747 <term><command>nmblookup</command></term>
748 <listitem>
749 <para>is used to query NetBIOS names and map
750 them to IP addresses.</para>
751 <indexterm zone="samba3 nmblookup">
752 <primary sortas="b-nmblookup">nmblookup</primary>
753 </indexterm>
754 </listitem>
755 </varlistentry>
756
757 <varlistentry id="ntlm_auth">
758 <term><command>ntlm_auth</command></term>
759 <listitem>
760 <para>is a tool to allow external access to Winbind's
761 NTLM authentication function.</para>
762 <indexterm zone="samba3 ntlm_auth">
763 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
764 </indexterm>
765 </listitem>
766 </varlistentry>
767
768 <varlistentry id="pdbedit">
769 <term><command>pdbedit</command></term>
770 <listitem>
771 <para>is a tool used to manage the SAM database.</para>
772 <indexterm zone="samba3 pdbedit">
773 <primary sortas="b-pdbedit">pdbedit</primary>
774 </indexterm>
775 </listitem>
776 </varlistentry>
777
778 <varlistentry id="profiles">
779 <term><command>profiles</command></term>
780 <listitem>
781 <para>is a utility that reports and changes SIDs in Windows
782 registry files. It currently only supports Windows NT.</para>
783 <indexterm zone="samba3 profiles">
784 <primary sortas="b-profiles">profiles</primary>
785 </indexterm>
786 </listitem>
787 </varlistentry>
788
789 <varlistentry id="rpcclient">
790 <term><command>rpcclient</command></term>
791 <listitem>
792 <para>is used to execute MS-RPC client side functions.</para>
793 <indexterm zone="samba3 rpcclient">
794 <primary sortas="b-rpcclient">rpcclient</primary>
795 </indexterm>
796 </listitem>
797 </varlistentry>
798
799 <varlistentry id="smbcacls">
800 <term><command>smbcacls</command></term>
801 <listitem>
802 <para>is used to manipulate Windows NT access control lists.</para>
803 <indexterm zone="samba3 smbcacls">
804 <primary sortas="b-smbcacls">smbcacls</primary>
805 </indexterm>
806 </listitem>
807 </varlistentry>
808
809 <varlistentry id="smbclient">
810 <term><command>smbclient</command></term>
811 <listitem>
812 <para>is a SMB/CIFS access utility, similar to FTP.</para>
813 <indexterm zone="samba3 smbclient">
814 <primary sortas="b-smbclient">smbclient</primary>
815 </indexterm>
816 </listitem>
817 </varlistentry>
818
819 <varlistentry id="smbcontrol">
820 <term><command>smbcontrol</command></term>
821 <listitem>
822 <para>is used to control running <command>smbd</command>,
823 <command>nmbd</command> and <command>winbindd</command>
824 daemons.</para>
825 <indexterm zone="samba3 smbcontrol">
826 <primary sortas="b-smbcontrol">smbcontrol</primary>
827 </indexterm>
828 </listitem>
829 </varlistentry>
830
831 <varlistentry id="smbcquotas">
832 <term><command>smbcquotas</command></term>
833 <listitem>
834 <para>is used to manipulate Windows NT quotas on
835 SMB file shares.</para>
836 <indexterm zone="samba3 smbcquotas">
837 <primary sortas="b-smbcquotas">smbcquotas</primary>
838 </indexterm>
839 </listitem>
840 </varlistentry>
841
842 <varlistentry id="smbd">
843 <term><command>smbd</command></term>
844 <listitem>
845 <para>is the main <application>Samba</application> daemon which
846 provides SMB/CIFS services to clients.</para>
847 <indexterm zone="samba3 smbd">
848 <primary sortas="b-smbd">smbd</primary>
849 </indexterm>
850 </listitem>
851 </varlistentry>
852
853 <varlistentry id="smbmnt">
854 <term><command>smbmnt</command></term>
855 <listitem>
856 <para>is a helper application used by the
857 <command>smbmount</command> program to do the actual mounting of
858 SMB shares. It can be installed setuid
859 <systemitem class='username'>root</systemitem> if you want
860 unprivileged users to be able to mount their SMB shares.</para>
861 <indexterm zone="samba3 smbmnt">
862 <primary sortas="b-smbmnt">smbmnt</primary>
863 </indexterm>
864 </listitem>
865 </varlistentry>
866
867 <varlistentry id="smbmount">
868 <term><command>smbmount</command></term>
869 <listitem>
870 <para>is usually invoked as <command>mount.smbfs</command> by the
871 <command>mount</command> command when using the
872 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
873 filesystem.</para>
874 <indexterm zone="samba3 smbmount">
875 <primary sortas="b-smbmount">smbmount</primary>
876 </indexterm>
877 </listitem>
878 </varlistentry>
879
880 <varlistentry id="smbpasswd">
881 <term><command>smbpasswd</command></term>
882 <listitem>
883 <para>changes a user's <application>Samba</application>
884 password.</para>
885 <indexterm zone="samba3 smbpasswd">
886 <primary sortas="b-smbpasswd">smbpasswd</primary>
887 </indexterm>
888 </listitem>
889 </varlistentry>
890
891 <varlistentry id="smbspool">
892 <term><command>smbspool</command></term>
893 <listitem>
894 <para>sends a print job to an SMB printer.</para>
895 <indexterm zone="samba3 smbspool">
896 <primary sortas="b-smbspool">smbspool</primary>
897 </indexterm>
898 </listitem>
899 </varlistentry>
900
901 <varlistentry id="smbstatus">
902 <term><command>smbstatus</command></term>
903 <listitem>
904 <para>reports current <application>Samba</application>
905 connections.</para>
906 <indexterm zone="samba3 smbstatus">
907 <primary sortas="b-smbstatus">smbstatus</primary>
908 </indexterm>
909 </listitem>
910 </varlistentry>
911
912 <varlistentry id="smbtar">
913 <term><command>smbtar</command></term>
914 <listitem>
915 <para>is a shell script used for backing up SMB/CIFS shares
916 directly to Linux tape drives or a file.</para>
917 <indexterm zone="samba3 smbtar">
918 <primary sortas="b-smbtar">smbtar</primary>
919 </indexterm>
920 </listitem>
921 </varlistentry>
922
923 <varlistentry id="smbtree">
924 <term><command>smbtree</command></term>
925 <listitem>
926 <para>is a text-based SMB network browser.</para>
927 <indexterm zone="samba3 smbtree">
928 <primary sortas="b-smbtree">smbtree</primary>
929 </indexterm>
930 </listitem>
931 </varlistentry>
932
933 <varlistentry id="smbumount">
934 <term><command>smbumount</command></term>
935 <listitem>
936 <para>is used by unprivileged users to unmount SMB filesystems,
937 provided that it is setuid root.</para>
938 <indexterm zone="samba3 smbumount">
939 <primary sortas="b-smbumount">smbumount</primary>
940 </indexterm>
941 </listitem>
942 </varlistentry>
943
944 <varlistentry id="swat">
945 <term><command>swat</command></term>
946 <listitem>
947 <para>is the <application>Samba</application> Web Administration
948 Tool.</para>
949 <indexterm zone="samba3 swat">
950 <primary sortas="b-swat">swat</primary>
951 </indexterm>
952 </listitem>
953 </varlistentry>
954
955 <varlistentry id="tdbbackup">
956 <term><command>tdbbackup</command></term>
957 <listitem>
958 <para>is a tool for backing up or validating the integrity of
959 <application>Samba</application> <filename>.tdb</filename>
960 files.</para>
961 <indexterm zone="samba3 tdbbackup">
962 <primary sortas="b-tdbbackup">tdbbackup</primary>
963 </indexterm>
964 </listitem>
965 </varlistentry>
966
967 <varlistentry id="tdbdump">
968 <term><command>tdbdump</command></term>
969 <listitem>
970 <para> is a tool used to print the contents of a
971 <application>Samba</application> <filename>.tdb</filename>
972 file.</para>
973 <indexterm zone="samba3 tdbdump">
974 <primary sortas="b-tdbdump">tdbdump</primary>
975 </indexterm>
976 </listitem>
977 </varlistentry>
978
979 <varlistentry id="tdbtool">
980 <term><command>tdbtool</command></term>
981 <listitem>
982 <para>is a tool which allows simple database manipulation from the
983 command line.</para>
984 <indexterm zone="samba3 tdbtool">
985 <primary sortas="b-tdbtool">tdbtool</primary>
986 </indexterm>
987 </listitem>
988 </varlistentry>
989
990 <varlistentry id="testparm">
991 <term><command>testparm</command></term>
992 <listitem>
993 <para>checks an <filename>smb.conf</filename> file for proper
994 syntax.</para>
995 <indexterm zone="samba3 testparm">
996 <primary sortas="b-testparm">testparm</primary>
997 </indexterm>
998 </listitem>
999 </varlistentry>
1000
1001 <varlistentry id="testprns">
1002 <term><command>testprns</command></term>
1003 <listitem>
1004 <para>tests printer names.</para>
1005 <indexterm zone="samba3 testprns">
1006 <primary sortas="b-testprns">testprns</primary>
1007 </indexterm>
1008 </listitem>
1009 </varlistentry>
1010
1011 <varlistentry id="wbinfo">
1012 <term><command>wbinfo</command></term>
1013 <listitem>
1014 <para>queries a running <command>winbindd</command> daemon.</para>
1015 <indexterm zone="samba3 wbinfo">
1016 <primary sortas="b-wbinfo">wbinfo</primary>
1017 </indexterm>
1018 </listitem>
1019 </varlistentry>
1020
1021 <varlistentry id="winbindd">
1022 <term><command>winbindd</command></term>
1023 <listitem>
1024 <para>resolves names from Windows NT servers.</para>
1025 <indexterm zone="samba3 winbindd">
1026 <primary sortas="b-winbindd">winbindd</primary>
1027 </indexterm>
1028 </listitem>
1029 </varlistentry>
1030
1031 </variablelist>
1032
1033 </sect2>
1034
1035</sect1>
Note: See TracBrowser for help on using the repository browser.