source: server/major/samba3.xml@ 75b4d9e

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 75b4d9e was 75b4d9e, checked in by Randy McMurchy <randy@…>, 17 years ago

Updated to Samba-3.0.23d

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6368 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 42.2 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/stable/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://us5.samba.org/pub/samba-ftp/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "afe6923d05fed5b5ccab593c7a407cd1">
10 <!ENTITY samba3-size "17.7 MB">
11 <!ENTITY samba3-buildsize "257 MB">
12 <!ENTITY samba3-time "2.8 SBU (additional 1.8 SBU to run the test suite)">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <!--
63 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
64 <itemizedlist spacing="compact">
65 <listitem>
66 <para>Required patch if you have <application>Heimdal</application>
67 installed: <ulink
68 url="&patch-root;/samba-&samba3-version;-heimdal-1.patch"/></para>
69 </listitem>
70 </itemizedlist>
71 -->
72
73 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
74
75 <bridgehead renderas="sect4">Optional</bridgehead>
76 <para role="optional"><xref linkend="popt"/>,
77 <xref linkend="linux-pam"/>,
78 <xref linkend="cups"/>,
79 <xref linkend="openldap"/>,
80 <xref linkend="gamin"/>,
81 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
82 <xref linkend="python"/> (to build Samba API bindings for the
83 <application>Python</application> installation),
84 <ulink url="ftp://oss.sgi.com/projects/xfs/cmd_tars/">libacl</ulink>
85 (requires <ulink url="ftp://oss.sgi.com/projects/xfs/cmd_tars/">libattr</ulink>),
86 and <ulink url="http://valgrind.kde.org/">Valgrind</ulink> (optionally
87 used by the test suite)</para>
88
89 <!-- Removed starting in version 3.0.23
90 <bridgehead renderas="sect4">Optional
91 (To Build Experimental passdb Libraries)</bridgehead>
92 <para><xref linkend="libxml2"/>,
93 <xref linkend="mysql"/>, and
94 <xref linkend="postgresql"/></para>
95 -->
96
97 <para condition="html" role="usernotes">User Notes:
98 <ulink url="&blfs-wiki;/samba3"/></para>
99
100 </sect2>
101
102 <sect2 role="installation">
103 <title>Installation of Samba</title>
104
105 <!--
106 <para>A <application>Samba</application> <filename>include.h</filename>
107 header now does checks for C++ reserved names. The package will not build
108 if you have <application>Heimdal</application> installed as Heimdal uses
109 some of these reserved names inappropriately. If you have
110 <application>Heimdal</application> installed, apply the following patch to
111 disable these checks and allow the package to compile successfully:</para>
112
113<screen><userinput>patch -Np1 -i ../samba-&samba3-version;-heimdal-1.patch</userinput></screen>
114 -->
115
116 <para>Install <application>Samba</application> by running the following
117 commands:</para>
118
119 <note>
120 <para>If you wish to run the test suite after the binaries are built,
121 you must add the <option>--enable-socket-wrapper</option> parameter to
122 the <command>configure</command> script below. You may want to run
123 <command>configure</command> with the <option>--help</option> parameter
124 first. There may be other parameters needed to take advantage of
125 optional dependencies.</para>
126 </note>
127
128<screen><userinput>cd source &amp;&amp;
129./configure \
130 --prefix=/usr \
131 --sysconfdir=/etc \
132 --localstatedir=/var \
133 --with-piddir=/var/run \
134 --with-fhs \
135 --with-smbmount &amp;&amp;
136make</userinput></screen>
137
138 <para>You must become the <systemitem class="username">root</systemitem>
139 user to run the test framework. To run the tests, issue:
140 <command>make test</command>. If you have
141 <application>Linux-PAM</application> installed and built the PAM library
142 modules, you can perform a dlopen test by issuing:
143 <command>make test_pam_modules</command>.</para>
144
145 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
146
147<!-- Commenting out the need for /var/cache/samba as my testing has
148 shown me that this directory is not used. Grepping the source
149 tree also turns up nothing about 'cache/samba'. -Randy
150<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
151-->
152<!-- if [ -f nsswitch/pam_winbind.so ]; then
153 install -v -m755 nsswitch/pam_winbind.so /lib/security
154 fi &amp;&amp;
155-->
156
157<screen role="root"><userinput>make install &amp;&amp;
158mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
159ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
160ln -v -sf libsmbclient.so /usr/lib/libsmbclient.so.0 &amp;&amp;
161
162chmod -v 644 /usr/include/lib{smbclient,msrpc}.h &amp;&amp;
163
164install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
165ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
166ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
167
168install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
169
170install -v -m755 -d /usr/share/doc/samba-&samba3-version; &amp;&amp;
171install -v -m644 ../docs/*.pdf /usr/share/doc/samba-&samba3-version; &amp;&amp;
172ln -v -s ../../samba/swat /usr/share/doc/samba-&samba3-version;</userinput></screen>
173
174 <para>If you passed the <option>--with-python</option> option to the
175 <command>configure</command> script, issue the following command as the
176 <systemitem class="username">root</systemitem> user to install the
177 <application>Python</application> extensions:</para>
178
179<screen role="root"><userinput>make python_install</userinput></screen>
180
181 </sect2>
182
183 <sect2 role="commands">
184 <title>Command Explanations</title>
185
186 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
187 file directory to avoid the default of
188 <filename class="directory">/usr/etc</filename>.</para>
189
190 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
191 data directory to avoid the default of
192 <filename class="directory">/usr/var</filename>.</para>
193
194 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
195 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
196
197 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
198 extra binary for use by the <command>mount</command> command so that
199 mounting remote SMB (Windows) shares becomes no more complex than
200 mounting remote NFS shares.</para>
201
202 <para><option>--with-pam</option>: Use this parameter to link
203 <application>Linux-PAM</application> into the build. This
204 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
205 and <filename class='libraryfile'>pam_smbpass.so</filename>
206 <application>PAM</application> modules. You can find
207 instructions on how to configure and use the
208 <filename class='libraryfile'>pam_winbind.so</filename>module by running
209 <command>man winbindd</command>.</para>
210
211 <!-- I am convinced that this command is no longer necessary. -Randy
212 <para><command>install -v -d /var/cache/samba</command>: This directory is
213 needed for proper operation of the <command>smbd</command> and
214 <command>nmbd</command> daemons.</para>
215 -->
216
217 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
218 ../libsmbclient.so ...</command>: The
219 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
220 by other packages. This command moves it to a location where other packages
221 can find it.</para>
222
223 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
224 The nss libraries are not installed by default. If you intend to use
225 winbindd for domain auth, and/or WINS name resolution,
226 you need these libraries.</para>
227
228 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
229 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
230 These symlinks are required by glibc to use the NSS
231 libraries.</para>
232
233 <para><command>install -v -m644 ../examples/smb.conf.default
234 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
235 file into <filename>/etc/samba</filename>. This sample configuration will
236 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
237 make the appropriate changes for your installation. See the configuration
238 section for minimum values which must be set.</para>
239
240 </sect2>
241
242 <sect2 role="configuration">
243 <title>Configuring Samba</title>
244
245 <sect3 id="samba3-config">
246 <title>Config Files</title>
247
248 <para>/etc/samba/smb.conf</para>
249
250 <indexterm zone="samba3 samba3-config">
251 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
252 </indexterm>
253
254 </sect3>
255
256 <sect3>
257 <title>Mounting Shares by Unprivileged Users</title>
258
259 <para>If it is desired for unprivileged users to directly mount (and
260 unmount) SMB and CIFS shares, the <command>smbmnt</command>,
261 <command>smbumount</command>, <command>mount.cifs</command> and
262 <command>umount.cifs</command> commands must be setuid
263 <systemitem class='username'>root</systemitem>. Note that users can
264 only mount SMB/CIFS shares on a mount point owned by that user (requires
265 write access also). If desired, change these programs to setuid
266 <systemitem class='username'>root</systemitem> by issuing the following
267 command as the <systemitem class='username'>root</systemitem>
268 user:</para>
269
270<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}
271 /usr/sbin/{,u}mount.cifs</userinput></screen>
272
273 </sect3>
274
275 <sect3>
276 <title>Printing to SMB Clients</title>
277
278 <para>If you use <application>CUPS</application> for print services,
279 and you wish to print to a printer attached to an SMB client, you
280 need to create an SMB backend device. To create the device, issue the
281 following command as the <systemitem class="username">root</systemitem>
282 user:</para>
283
284<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
285
286 </sect3>
287
288 <sect3>
289 <title>Configuration Information</title>
290
291 <para>Due to the complexity and the many various uses for
292 <application>Samba</application>, complete configuration for all the
293 package's capabilities is well beyond the scope of the BLFS book. This
294 section provides instructions to configure the
295 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
296 The complete contents of <filename>/etc/samba/smb.conf</filename> will
297 depend on the purpose of <application>Samba</application>
298 installation.</para>
299
300 <note>
301 <para>You may find it easier to copy the configuration parameters shown
302 below into an empty <filename>/etc/samba/smb.conf</filename> file
303 instead of copying and editing the default file as mentioned in the
304 <quote>Command Explanations</quote> section. How you create/edit the
305 <filename>/etc/samba/smb.conf</filename> file will be left up to
306 you. Do ensure the file is only writeable by the
307 <systemitem class="username">root</systemitem> user (mode 644).</para>
308 </note>
309
310 <sect4>
311 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
312
313 <para>Choose this variant if you only want to transfer files using
314 <command>smbclient</command>, mount Windows shares and print to Windows
315 printers, and don't want to share your files and printers to Windows
316 machines.</para>
317
318 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
319 three parameters is sufficient:</para>
320
321<screen role='root'><literal>[global]
322 workgroup = <replaceable>MYGROUP</replaceable>
323 dos charset = <replaceable>cp850</replaceable>
324 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
325
326 <para>The values in this example specify that the computer belongs to a
327 Windows workgroup named
328 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
329 <quote><replaceable>cp850</replaceable></quote> character set on the
330 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
331 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
332 encoding on the disk. Adjust these values appropriately for your
333 installation. The <quote>unix charset</quote> value must be the same as
334 the output of <command>locale charmap</command> when executed with the
335 <envar>LANG</envar> variable set to your preferred locale, otherwise the
336 <command>ls</command> command may not display correct filenames of
337 downloaded files.</para>
338
339 <para>There is no need to run any <application>Samba</application>
340 servers in this scenario, thus you don't need to install the provided
341 bootscripts.</para>
342
343 </sect4>
344
345 <sect4>
346 <title>Scenario 2: Standalone File/Print Server</title>
347
348 <para>Choose this variant if you want to share your files and printers
349 to Windows machines in your workgroup in addition to the capabilities
350 described in Scenario 1.</para>
351
352 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
353 file may be a good template to start from. Also add
354 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
355 to the <quote>[global]</quote> section as described in Scenario 1 in
356 order to prevent filename corruption.</para>
357
358 <para>The following configuration file creates a separate share for each
359 user's home directory and also makes all printers available to Windows
360 machines:</para>
361
362<screen role='root'><literal>[global]
363 workgroup = <replaceable>MYGROUP</replaceable>
364 dos charset = <replaceable>cp850</replaceable>
365 unix charset = <replaceable>ISO-8859-1</replaceable>
366
367[homes]
368 comment = Home Directories
369 browseable = no
370 writable = yes
371
372[printers]
373 comment = All Printers
374 path = /var/spool/samba
375 browseable = no
376 guest ok = no
377 printable = yes</literal></screen>
378
379 <para>Other parameters you may wish to customize in the
380 <quote>[global]</quote> section include:</para>
381
382<screen role='root'><literal> server string =
383 security =
384 hosts allow =
385 load printers =
386 log file =
387 max log size =
388 socket options =
389 local master =</literal></screen>
390
391 <para>Reference the comments in the
392 <filename>/etc/samba/smb.conf.default</filename> file for information
393 regarding these parameters.</para>
394
395 <para>Since the <command>smbd</command> and <command>nmbd</command>
396 daemons are needed in this case, install the <filename>samba</filename>
397 bootscript. Be sure to run <command>smbpasswd</command> (with the
398 <option>-a</option> option to add users) to enable and
399 set passwords for all accounts that need
400 <application>Samba</application> access, or use the SWAT web interface
401 (see below) to do the same. Using the default
402 <application>Samba</application> passdb backend, any user you attempt
403 to add will also be required to exist in the
404 <filename>/etc/passwd</filename> file.</para>
405
406 </sect4>
407
408 <sect4>
409 <title>Advanced Requirements</title>
410
411 <para>More complex scenarios involving domain control or membership are
412 possible if the right flags are passed to the ./configure script when
413 the package is built. Such setups are advanced topics and cannot be
414 adequately covered in BLFS. Many complete books have been written on
415 these topics alone. It should be noted, however, that a
416 <application>Samba</application> BDC cannot be used as a fallback
417 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
418 fallback for a <application>Samba</application> PDC. Also in some
419 domain membership scenarios, the <command>winbindd</command> daemon and
420 the corresponding bootscript are needed.</para>
421
422 <para>There is quite a bit of documentation available which covers many
423 of these advanced configurations. Point your web browser to the links
424 below to view some of the documentation included with the
425 <application>Samba</application> package:</para>
426
427 <itemizedlist spacing='compact'>
428 <listitem>
429 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
430 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
431 </listitem>
432 <listitem>
433 <para>The Official Samba HOWTO and Reference Guide <ulink
434 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
435 </para>
436 </listitem>
437 <listitem>
438 <para>Samba-3 by Example
439 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
440 </para>
441 </listitem>
442 <listitem>
443 <para>The Samba-3 man Pages
444 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
445 </listitem>
446 </itemizedlist>
447
448 </sect4>
449
450 </sect3>
451
452 <sect3 id="samba3-swat-config">
453 <title>Configuring SWAT</title>
454
455 <para>The built in SWAT (<application>Samba</application> Web
456 Administration Tool) utility can be used for basic configuration of
457 the <application>Samba</application> installation, but because it may
458 be inconvenient, undesirable or perhaps even impossible to gain
459 access to the console, BLFS recommends setting up access to SWAT using
460 <application>Stunnel</application>. Without
461 <application>Stunnel</application>, the
462 <systemitem class="username">root</systemitem> password is transmitted
463 in clear text over the wire, and is considered an unacceptable security
464 risk. After considering the security implications of using SWAT without
465 <application>Stunnel</application>, and you still wish to implement SWAT
466 without it, instructions are provided at this end of this section.</para>
467
468 <indexterm zone="samba3 samba3-swat-config">
469 <primary sortas="g-SWAT">SWAT</primary>
470 </indexterm>
471
472 <sect4>
473 <title>Setting up SWAT using Stunnel</title>
474
475 <para>First install, or ensure you have already installed, the
476 <xref linkend="stunnel"/> package.</para>
477
478 <para>Next you must add entries to <filename>/etc/services</filename>
479 and modify the <command>inetd</command>/<command>xinetd</command>
480 configuration.</para>
481
482 <indexterm zone="samba3 samba3-swat-config">
483 <primary sortas="e-etc-services">/etc/services</primary>
484 </indexterm>
485
486 <indexterm zone="samba3 samba3-swat-config">
487 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
488 </indexterm>
489
490 <indexterm zone="samba3 samba3-swat-config">
491 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
492 </indexterm>
493
494 <para>Add swat and swat_tunnel entries to
495 <filename>/etc/services</filename> with the following commands issued
496 as the <systemitem class="username">root</systemitem> user:</para>
497
498<screen role="root"><userinput>echo "swat 904/tcp" &gt;&gt; /etc/services &amp;&amp;
499echo "swat_tunnel 905/tcp" &gt;&gt; /etc/services</userinput></screen>
500
501 <para>If <command>inetd</command> is used, the following command will
502 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
503 user <systemitem class="username">root</systemitem>):</para>
504
505<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
506 &gt;&gt; /etc/inetd.conf</userinput></screen>
507
508 <para>Issue a <command>killall -HUP inetd</command> to reread the
509 changed <filename>inetd.conf</filename> file.</para>
510
511 <para>If you use <command>xinetd</command>, the following command will
512 create the <application>Samba</application> file as
513 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
514 or remove the <quote>only_from</quote> line to include the desired
515 host[s]):</para>
516
517<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
518<literal># Begin /etc/xinetd.d/swat_tunnel
519
520service swat_tunnel
521{
522 port = 905
523 socket_type = stream
524 wait = no
525 only_from = 127.0.0.1
526 user = root
527 server = /usr/sbin/swat
528 log_on_failure += USERID
529}
530
531# End /etc/xinetd.d/swat_tunnel</literal>
532EOF</userinput></screen>
533
534 <indexterm zone="samba3 samba3-swat-config">
535 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
536 </indexterm>
537
538 <para>Issue a <command>killall -HUP xinetd</command> to read the new
539 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
540
541 <para>Next, you must add an entry for the swat service to the
542 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
543 <systemitem class="username">root</systemitem>):</para>
544
545 <indexterm zone="samba3 samba3-swat-config">
546 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
547 </indexterm>
548
549<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
550<literal>[swat]
551accept = 904
552connect = 905
553TIMEOUTclose = 1</literal>
554
555EOF</userinput></screen>
556
557 <para>Restart the <command>stunnel</command> daemon using the following
558 command as the <systemitem class="username">root</systemitem> user:</para>
559
560<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
561
562 <para>SWAT can be launched by pointing your web browser to
563 <uri>https://<replaceable>&lt;CA_DN_field&gt;</replaceable>:904</uri>.
564 Substitute the hostname listed in the DN field of the CA certificate
565 used with <application>Stunnel</application> for
566 <replaceable>&lt;CA_DN_field&gt;</replaceable>.</para>
567
568 </sect4>
569
570 <sect4>
571 <title>Setting up SWAT without Stunnel</title>
572
573 <warning>
574 <para>BLFS does not recommend using these procedures because of the
575 security risk involved. However, in a home network environment and
576 disclosure of the <systemitem class='username'>root</systemitem>
577 password is an acceptable risk, the following
578 instructions are provided for your convenience.</para>
579 </warning>
580
581 <para>Add a swat entry to <filename>/etc/services</filename> with the
582 following command issued as the
583 <systemitem class='username'>root</systemitem> user:</para>
584
585<screen role='root'><userinput>echo "swat 904/tcp" &gt;&gt; /etc/services</userinput></screen>
586
587 <para>If <command>inetd</command> is used, the following command
588 issued as the <systemitem class='username'>root</systemitem> user will
589 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
590
591<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
592 &gt;&gt; /etc/inetd.conf</userinput></screen>
593
594 <para>Issue a <command>killall -HUP inetd</command> to reread the
595 changed <filename>inetd.conf</filename> file.</para>
596
597 <para>If <command>xinetd</command> is used, the following command
598 issued as the <systemitem class='username'>root</systemitem> user
599 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
600
601<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
602<literal># Begin /etc/xinetd.d/swat
603
604service swat
605{
606 port = 904
607 socket_type = stream
608 wait = no
609 only_from = 127.0.0.1
610 user = root
611 server = /usr/sbin/swat
612 log_on_failure += USERID
613}
614
615# End /etc/xinetd.d/swat</literal>
616EOF</userinput></screen>
617
618 <para>Issue a <command>killall -HUP xinetd</command> to read the
619 new <filename>/etc/xinetd.d/swat</filename> file.</para>
620
621 <para>SWAT can be launched by pointing your web browser to
622 http://localhost:904.</para>
623
624 </sect4>
625
626 </sect3>
627
628 <sect3>
629 <title/>
630
631 <note>
632 <para>If you linked <application>Linux-PAM</application> into the
633 <application>Samba</application> build, you'll need to create an
634 <filename>/etc/pam.d/samba</filename> file.</para>
635 </note>
636
637 <indexterm zone="samba3 samba3-swat-config">
638 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
639 </indexterm>
640
641 </sect3>
642
643 <sect3 id="samba3-init">
644 <title>Boot Script</title>
645
646 <para>For your convenience, boot scripts have been provided for
647 <application>Samba</application>. There are two included in the
648 <xref linkend="bootscripts"/> package. The first,
649 <filename>samba</filename>, will start the <command>smbd</command>
650 and <command>nmbd</command> daemons needed to provide SMB/CIFS
651 services. The second script, <filename>winbind</filename>, starts
652 the <command>winbindd</command> daemon, used for providing Windows
653 domain services to Linux clients.</para>
654
655 <indexterm zone="samba3 samba3-init">
656 <primary sortas="f-samba">samba</primary>
657 </indexterm>
658
659 <indexterm zone="samba3 samba3-init">
660 <primary sortas="f-winbind">winbind</primary>
661 </indexterm>
662
663 <para>The default <application>Samba</application> installation uses the
664 <systemitem class='username'>nobody</systemitem> user for guest access
665 to the server. This can be overridden by setting the
666 <option>guest account =</option> parameter in the
667 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
668 <option>guest account =</option> parameter, ensure this user exists in
669 the <filename>/etc/passwd</filename> file. To use the default user,
670 issue the following commands as the
671 <systemitem class='username'>root</systemitem> user:</para>
672
673<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
674useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
675 -s /bin/false -u 99 nobody</userinput></screen>
676
677 <para>Install the <filename>samba</filename> script with the following
678 command issued as the <systemitem class="username">root</systemitem>
679 user:</para>
680
681<screen role="root"><userinput>make install-samba</userinput></screen>
682
683 <para>If you also need the <filename>winbind</filename>
684 script:</para>
685
686<screen role="root"><userinput>make install-winbind</userinput></screen>
687
688 </sect3>
689
690 </sect2>
691
692 <sect2 role="content">
693 <title>Contents</title>
694
695 <segmentedlist>
696 <segtitle>Installed Programs</segtitle>
697 <segtitle>Installed Libraries</segtitle>
698 <segtitle>Installed Directories</segtitle>
699
700<!--newprogs: eventlogadm smbget-->
701
702 <seglistitem>
703 <seg>eventlogadm, findsmb, mount.cifs, mount.smbfs, net, nmbd,
704 nmblookup, ntlm_auth, pdbedit, profiles, rpcclient, smbcacls,
705 smbclient, smbcontrol, smbcquotas, smbd, smbget, smbmnt, smbmount,
706 smbpasswd, smbspool, smbstatus, smbtar, smbtree, smbumount, swat,
707 tdbbackup, tdbdump, tdbtool, testparm, unmount.cifs, wbinfo
708 and winbindd</seg>
709 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, libmsrpc.so,
710 the pam_winbind.so and pam_smbpass.so PAM libraries, and assorted
711 character set, filesystem and support modules.</seg>
712 <seg>/etc/samba, /usr/lib/python2.4/site-packages/samba,
713 /usr/lib/samba, /usr/share/doc/samba-&samba3-version;,
714 /usr/share/samba, /var/lib/samba and /var/log/samba</seg>
715 </seglistitem>
716 </segmentedlist>
717
718 <variablelist>
719 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
720 <?dbfo list-presentation="list"?>
721 <?dbhtml list-presentation="table"?>
722
723 <varlistentry id="eventlogadm">
724 <term><command>eventlogadm</command></term>
725 <listitem>
726 <para>is used to write records to eventlogs from STDIN, add the
727 specified source and DLL eventlog registry entries and display the
728 active eventlog names (from <filename>smb.conf</filename>).</para>
729 <indexterm zone="samba3 eventlogadm">
730 <primary sortas="b-eventlogadm">eventlogadm</primary>
731 </indexterm>
732 </listitem>
733 </varlistentry>
734
735 <varlistentry id="findsmb">
736 <term><command>findsmb</command></term>
737 <listitem>
738 <para>lists information about machines that respond to
739 SMB name queries on a subnet.</para>
740 <indexterm zone="samba3 findsmb">
741 <primary sortas="b-findsmb">findsmb</primary>
742 </indexterm>
743 </listitem>
744 </varlistentry>
745
746 <varlistentry id="mount.cifs">
747 <term><command>mount.cifs</command></term>
748 <listitem>
749 <para>mounts a Linux CIFS filesystem. It is usually invoked
750 indirectly by the <command>mount</command> command when using the
751 <option>-t cifs</option> option.</para>
752 <indexterm zone="samba3 mount.cifs">
753 <primary sortas="b-mount.cifs">mount.cifs</primary>
754 </indexterm>
755 </listitem>
756 </varlistentry>
757
758 <varlistentry id="mount.smbfs">
759 <term><command>mount.smbfs</command></term>
760 <listitem>
761 <para>is a symlink to <command>smbmount</command> which provides
762 <command>/bin/mount</command> with a way to mount remote Windows
763 (or <application>Samba</application>) fileshares.</para>
764 <indexterm zone="samba3 mount.smbfs">
765 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
766 </indexterm>
767 </listitem>
768 </varlistentry>
769
770 <varlistentry id="net">
771 <term><command>net</command></term>
772 <listitem>
773 <para>is a tool for administration of
774 <application>Samba</application> and remote CIFS servers, similar
775 to the <command>net</command> utility for DOS/Windows.</para>
776 <indexterm zone="samba3 net">
777 <primary sortas="b-net">net</primary>
778 </indexterm>
779 </listitem>
780 </varlistentry>
781
782 <varlistentry id="nmbd">
783 <term><command>nmbd</command></term>
784 <listitem>
785 <para>is the <application>Samba</application>
786 NetBIOS name server.</para>
787 <indexterm zone="samba3 nmbd">
788 <primary sortas="b-nmbd">nmbd</primary>
789 </indexterm>
790 </listitem>
791 </varlistentry>
792
793 <varlistentry id="nmblookup">
794 <term><command>nmblookup</command></term>
795 <listitem>
796 <para>is used to query NetBIOS names and map
797 them to IP addresses.</para>
798 <indexterm zone="samba3 nmblookup">
799 <primary sortas="b-nmblookup">nmblookup</primary>
800 </indexterm>
801 </listitem>
802 </varlistentry>
803
804 <varlistentry id="ntlm_auth">
805 <term><command>ntlm_auth</command></term>
806 <listitem>
807 <para>is a tool to allow external access to Winbind's
808 NTLM authentication function.</para>
809 <indexterm zone="samba3 ntlm_auth">
810 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
811 </indexterm>
812 </listitem>
813 </varlistentry>
814
815 <varlistentry id="pdbedit">
816 <term><command>pdbedit</command></term>
817 <listitem>
818 <para>is a tool used to manage the SAM database.</para>
819 <indexterm zone="samba3 pdbedit">
820 <primary sortas="b-pdbedit">pdbedit</primary>
821 </indexterm>
822 </listitem>
823 </varlistentry>
824
825 <varlistentry id="profiles">
826 <term><command>profiles</command></term>
827 <listitem>
828 <para>is a utility that reports and changes SIDs in Windows
829 registry files. It currently only supports Windows NT.</para>
830 <indexterm zone="samba3 profiles">
831 <primary sortas="b-profiles">profiles</primary>
832 </indexterm>
833 </listitem>
834 </varlistentry>
835
836 <varlistentry id="rpcclient">
837 <term><command>rpcclient</command></term>
838 <listitem>
839 <para>is used to execute MS-RPC client side functions.</para>
840 <indexterm zone="samba3 rpcclient">
841 <primary sortas="b-rpcclient">rpcclient</primary>
842 </indexterm>
843 </listitem>
844 </varlistentry>
845
846 <varlistentry id="smbcacls">
847 <term><command>smbcacls</command></term>
848 <listitem>
849 <para>is used to manipulate Windows NT access control lists.</para>
850 <indexterm zone="samba3 smbcacls">
851 <primary sortas="b-smbcacls">smbcacls</primary>
852 </indexterm>
853 </listitem>
854 </varlistentry>
855
856 <varlistentry id="smbclient">
857 <term><command>smbclient</command></term>
858 <listitem>
859 <para>is a SMB/CIFS access utility, similar to FTP.</para>
860 <indexterm zone="samba3 smbclient">
861 <primary sortas="b-smbclient">smbclient</primary>
862 </indexterm>
863 </listitem>
864 </varlistentry>
865
866 <varlistentry id="smbcontrol">
867 <term><command>smbcontrol</command></term>
868 <listitem>
869 <para>is used to control running <command>smbd</command>,
870 <command>nmbd</command> and <command>winbindd</command>
871 daemons.</para>
872 <indexterm zone="samba3 smbcontrol">
873 <primary sortas="b-smbcontrol">smbcontrol</primary>
874 </indexterm>
875 </listitem>
876 </varlistentry>
877
878 <varlistentry id="smbcquotas">
879 <term><command>smbcquotas</command></term>
880 <listitem>
881 <para>is used to manipulate Windows NT quotas on
882 SMB file shares.</para>
883 <indexterm zone="samba3 smbcquotas">
884 <primary sortas="b-smbcquotas">smbcquotas</primary>
885 </indexterm>
886 </listitem>
887 </varlistentry>
888
889 <varlistentry id="smbd">
890 <term><command>smbd</command></term>
891 <listitem>
892 <para>is the main <application>Samba</application> daemon which
893 provides SMB/CIFS services to clients.</para>
894 <indexterm zone="samba3 smbd">
895 <primary sortas="b-smbd">smbd</primary>
896 </indexterm>
897 </listitem>
898 </varlistentry>
899
900 <varlistentry id="smbget">
901 <term><command>smbget</command></term>
902 <listitem>
903 <para>is a simple utility with <command>wget</command>-like
904 semantics, that can download files from SMB servers. You can specify
905 the files you would like to download on the command-line.</para>
906 <indexterm zone="samba3 smbget">
907 <primary sortas="b-smbget">smbget</primary>
908 </indexterm>
909 </listitem>
910 </varlistentry>
911
912 <varlistentry id="smbmnt">
913 <term><command>smbmnt</command></term>
914 <listitem>
915 <para>is a helper application used by the
916 <command>smbmount</command> program to do the actual mounting of
917 SMB shares. It can be installed setuid
918 <systemitem class='username'>root</systemitem> if you want
919 unprivileged users to be able to mount their SMB shares.</para>
920 <indexterm zone="samba3 smbmnt">
921 <primary sortas="b-smbmnt">smbmnt</primary>
922 </indexterm>
923 </listitem>
924 </varlistentry>
925
926 <varlistentry id="smbmount">
927 <term><command>smbmount</command></term>
928 <listitem>
929 <para>is usually invoked as <command>mount.smbfs</command> by the
930 <command>mount</command> command when using the
931 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
932 filesystem.</para>
933 <indexterm zone="samba3 smbmount">
934 <primary sortas="b-smbmount">smbmount</primary>
935 </indexterm>
936 </listitem>
937 </varlistentry>
938
939 <varlistentry id="smbpasswd">
940 <term><command>smbpasswd</command></term>
941 <listitem>
942 <para>changes a user's <application>Samba</application>
943 password.</para>
944 <indexterm zone="samba3 smbpasswd">
945 <primary sortas="b-smbpasswd">smbpasswd</primary>
946 </indexterm>
947 </listitem>
948 </varlistentry>
949
950 <varlistentry id="smbspool">
951 <term><command>smbspool</command></term>
952 <listitem>
953 <para>sends a print job to an SMB printer.</para>
954 <indexterm zone="samba3 smbspool">
955 <primary sortas="b-smbspool">smbspool</primary>
956 </indexterm>
957 </listitem>
958 </varlistentry>
959
960 <varlistentry id="smbstatus">
961 <term><command>smbstatus</command></term>
962 <listitem>
963 <para>reports current <application>Samba</application>
964 connections.</para>
965 <indexterm zone="samba3 smbstatus">
966 <primary sortas="b-smbstatus">smbstatus</primary>
967 </indexterm>
968 </listitem>
969 </varlistentry>
970
971 <varlistentry id="smbtar">
972 <term><command>smbtar</command></term>
973 <listitem>
974 <para>is a shell script used for backing up SMB/CIFS shares
975 directly to Linux tape drives or a file.</para>
976 <indexterm zone="samba3 smbtar">
977 <primary sortas="b-smbtar">smbtar</primary>
978 </indexterm>
979 </listitem>
980 </varlistentry>
981
982 <varlistentry id="smbtree">
983 <term><command>smbtree</command></term>
984 <listitem>
985 <para>is a text-based SMB network browser.</para>
986 <indexterm zone="samba3 smbtree">
987 <primary sortas="b-smbtree">smbtree</primary>
988 </indexterm>
989 </listitem>
990 </varlistentry>
991
992 <varlistentry id="smbumount">
993 <term><command>smbumount</command></term>
994 <listitem>
995 <para>is used by unprivileged users to unmount SMB filesystems,
996 provided that it is setuid root.</para>
997 <indexterm zone="samba3 smbumount">
998 <primary sortas="b-smbumount">smbumount</primary>
999 </indexterm>
1000 </listitem>
1001 </varlistentry>
1002
1003 <varlistentry id="swat">
1004 <term><command>swat</command></term>
1005 <listitem>
1006 <para>is the <application>Samba</application> Web Administration
1007 Tool.</para>
1008 <indexterm zone="samba3 swat">
1009 <primary sortas="b-swat">swat</primary>
1010 </indexterm>
1011 </listitem>
1012 </varlistentry>
1013
1014 <varlistentry id="tdbbackup">
1015 <term><command>tdbbackup</command></term>
1016 <listitem>
1017 <para>is a tool for backing up or validating the integrity of
1018 <application>Samba</application> <filename>.tdb</filename>
1019 files.</para>
1020 <indexterm zone="samba3 tdbbackup">
1021 <primary sortas="b-tdbbackup">tdbbackup</primary>
1022 </indexterm>
1023 </listitem>
1024 </varlistentry>
1025
1026 <varlistentry id="tdbdump">
1027 <term><command>tdbdump</command></term>
1028 <listitem>
1029 <para> is a tool used to print the contents of a
1030 <application>Samba</application> <filename>.tdb</filename>
1031 file.</para>
1032 <indexterm zone="samba3 tdbdump">
1033 <primary sortas="b-tdbdump">tdbdump</primary>
1034 </indexterm>
1035 </listitem>
1036 </varlistentry>
1037
1038 <varlistentry id="tdbtool">
1039 <term><command>tdbtool</command></term>
1040 <listitem>
1041 <para>is a tool which allows simple database manipulation from the
1042 command line.</para>
1043 <indexterm zone="samba3 tdbtool">
1044 <primary sortas="b-tdbtool">tdbtool</primary>
1045 </indexterm>
1046 </listitem>
1047 </varlistentry>
1048
1049 <varlistentry id="testparm">
1050 <term><command>testparm</command></term>
1051 <listitem>
1052 <para>checks an <filename>smb.conf</filename> file for proper
1053 syntax.</para>
1054 <indexterm zone="samba3 testparm">
1055 <primary sortas="b-testparm">testparm</primary>
1056 </indexterm>
1057 </listitem>
1058 </varlistentry>
1059
1060 <varlistentry id="umount.cifs">
1061 <term><command>umount.cifs</command></term>
1062 <listitem>
1063 <para>is used by normal, non-<systemitem
1064 class="username">root</systemitem> users, to
1065 <command>unmount</command> their own Common Internet File System
1066 (CIFS) mounts.</para>
1067 <indexterm zone="samba3 umount.cifs">
1068 <primary sortas="b-umount.cifs">umount.cifs</primary>
1069 </indexterm>
1070 </listitem>
1071 </varlistentry>
1072
1073 <varlistentry id="wbinfo">
1074 <term><command>wbinfo</command></term>
1075 <listitem>
1076 <para>queries a running <command>winbindd</command> daemon.</para>
1077 <indexterm zone="samba3 wbinfo">
1078 <primary sortas="b-wbinfo">wbinfo</primary>
1079 </indexterm>
1080 </listitem>
1081 </varlistentry>
1082
1083 <varlistentry id="winbindd">
1084 <term><command>winbindd</command></term>
1085 <listitem>
1086 <para>resolves names from Windows NT servers.</para>
1087 <indexterm zone="samba3 winbindd">
1088 <primary sortas="b-winbindd">winbindd</primary>
1089 </indexterm>
1090 </listitem>
1091 </varlistentry>
1092
1093 </variablelist>
1094
1095 </sect2>
1096
1097</sect1>
Note: See TracBrowser for help on using the repository browser.