source: server/major/samba3.xml@ 9f12e36

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 9f12e36 was 9f12e36, checked in by Randy McMurchy <randy@…>, 18 years ago

Removed 'keywordset' blocks and extra spaces from the XML files (note this was by accident as I meant to do just in the gnome directory but I was in the root of BOOK when I ran the script, but this was going to happen anyway so I don't think it is a big deal)

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6192 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 40.7 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/stable/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "5c39505af17cf5caf3d6ed8bab135036">
10 <!ENTITY samba3-size "17.5 MB">
11 <!ENTITY samba3-buildsize "199 MB">
12 <!ENTITY samba3-time "2.8 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <!--
63 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
64 <itemizedlist spacing="compact">
65 <listitem>
66 <para>Required patch if you have <application>Heimdal</application>
67 installed: <ulink
68 url="&patch-root;/samba-&samba3-version;-heimdal-1.patch"/></para>
69 </listitem>
70 </itemizedlist>
71 -->
72
73 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
74
75 <bridgehead renderas="sect4">Optional</bridgehead>
76 <para role="optional"><xref linkend="popt"/>,
77 <xref linkend="linux-pam"/>,
78 <xref linkend="openldap"/>,
79 <xref linkend="cups"/>,
80 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
81 <xref linkend="python"/> (to build Samba API bindings for the
82 <application>Python</application> installation) and
83 <ulink url="ftp://oss.sgi.com/projects/xfs/cmd_tars/">libacl</ulink>
84 (requires <ulink url="ftp://oss.sgi.com/projects/xfs/cmd_tars/">libattr</ulink>)</para>
85
86 <!-- only used for the test suite which is not really functional
87 and
88 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para> -->
89
90 <bridgehead renderas="sect4">Optional
91 (To Build Experimental passdb Libraries</bridgehead>
92 <para><xref linkend="libxml2"/>,
93 <xref linkend="mysql"/>,
94 <xref linkend="postgresql"/></para>
95
96 <para condition="html" role="usernotes">User Notes:
97 <ulink url="&blfs-wiki;/samba3"/></para>
98
99 </sect2>
100
101 <sect2 role="installation">
102 <title>Installation of Samba</title>
103
104 <!--
105 <para>A <application>Samba</application> <filename>include.h</filename>
106 header now does checks for C++ reserved names. The package will not build
107 if you have <application>Heimdal</application> installed as Heimdal uses
108 some of these reserved names inappropriately. If you have
109 <application>Heimdal</application> installed, apply the following patch to
110 disable these checks and allow the package to compile successfully:</para>
111
112<screen><userinput>patch -Np1 -i ../samba-&samba3-version;-heimdal-1.patch</userinput></screen>
113 -->
114
115 <para>Install <application>Samba</application> by running the following
116 commands:</para>
117
118 <note>
119 <para>You may want to run <command>configure</command> with the
120 <option>--help</option> parameter. There may be other parameters
121 needed to take advantage of the optional dependencies.</para>
122 </note>
123
124<screen><userinput>cd source &amp;&amp;
125./configure \
126 --prefix=/usr \
127 --sysconfdir=/etc \
128 --localstatedir=/var \
129 --with-piddir=/var/run \
130 --with-fhs \
131 --with-smbmount &amp;&amp;
132make</userinput></screen>
133
134 <para>This package does not come with a functional test suite.</para>
135
136 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
137
138<!-- Commenting out the need for /var/cache/samba as my testing has
139 shown me that this directory is not used. Grepping the source
140 tree also turns up nothing about 'cache/samba'. -Randy
141<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
142-->
143
144<screen role="root"><userinput>make install &amp;&amp;
145mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
146ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
147ln -v -sf libsmbclient.so /usr/lib/libsmbclient.so.0 &amp;&amp;
148
149chmod -v 644 /usr/include/lib{smbclient,msrpc}.h &amp;&amp;
150
151install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
152ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
153ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
154
155if [ -f nsswitch/pam_winbind.so ]; then
156 install -v -m755 nsswitch/pam_winbind.so /lib/security
157fi &amp;&amp;
158
159install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
160
161install -v -m755 -d /usr/share/doc/samba-&samba3-version; &amp;&amp;
162install -v -m644 ../docs/*.pdf /usr/share/doc/samba-&samba3-version; &amp;&amp;
163ln -v -s ../../samba/swat /usr/share/doc/samba-&samba3-version;</userinput></screen>
164
165 <para>If you passed the <option>--with-python</option> option to the
166 <command>configure</command> script, issue the following command as the
167 <systemitem class="username">root</systemitem> user to install the
168 <application>Python</application> extensions:</para>
169
170<screen role="root"><userinput>make python_install</userinput></screen>
171
172 </sect2>
173
174 <sect2 role="commands">
175 <title>Command Explanations</title>
176
177 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
178 file directory to avoid the default of
179 <filename class="directory">/usr/etc</filename>.</para>
180
181 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
182 data directory to avoid the default of
183 <filename class="directory">/usr/var</filename>.</para>
184
185 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
186 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
187
188 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
189 extra binary for use by the <command>mount</command> command so that
190 mounting remote SMB (Windows) shares becomes no more complex than
191 mounting remote NFS shares.</para>
192
193 <para><option>--with-pam</option>: Use this parameter to link
194 <application>Linux-PAM</application> into the build. This
195 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
196 <application>PAM</application> module. You can find
197 instructions on how to configure and use the module by running
198 <command>man winbindd</command>.</para>
199
200 <!-- I am convinced that this command is no longer necessary. -Randy
201 <para><command>install -v -d /var/cache/samba</command>: This directory is
202 needed for proper operation of the <command>smbd</command> and
203 <command>nmbd</command> daemons.</para>
204 -->
205
206 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
207 ../libsmbclient.so ...</command>: The
208 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
209 by other packages. This command moves it to a location where other packages
210 can find it.</para>
211
212 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
213 The nss libraries are not installed by default. If you intend to use
214 winbindd for domain auth, and/or WINS name resolution,
215 you need these libraries.</para>
216
217 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
218 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
219 These symlinks are required by glibc to use the NSS
220 libraries.</para>
221
222 <para><command>install -v -m644 ../examples/smb.conf.default
223 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
224 file into <filename>/etc/samba</filename>. This sample configuration will
225 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
226 make the appropriate changes for your installation. See the configuration
227 section for minimum values which must be set.</para>
228
229 </sect2>
230
231 <sect2 role="configuration">
232 <title>Configuring Samba</title>
233
234 <sect3 id="samba3-config">
235 <title>Config Files</title>
236
237 <para>/etc/samba/smb.conf</para>
238
239 <indexterm zone="samba3 samba3-config">
240 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
241 </indexterm>
242
243 </sect3>
244
245 <sect3>
246 <title>Mounting Shares by Unprivileged Users</title>
247
248 <para>If it is desired for unprivileged users to directly mount (and
249 unmount) SMB shares, the <command>smbmnt</command> and
250 <command>smbumount</command> commands must be setuid
251 <systemitem class='username'>root</systemitem>. Note that users can
252 only mount SMB shares on a mount point owned by that user (requires
253 write access also). If desired, change these programs to setuid
254 <systemitem class='username'>root</systemitem> by issuing the following
255 command as the <systemitem class='username'>root</systemitem>
256 user:</para>
257
258<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}</userinput></screen>
259
260 </sect3>
261
262 <sect3>
263 <title>Printing to SMB Clients</title>
264
265 <para>If you use <application>CUPS</application> for print services,
266 and you wish to print to a printer attached to an SMB client, you
267 need to create an SMB backend device. To create the device, issue the
268 following command as the <systemitem class="username">root</systemitem>
269 user:</para>
270
271<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
272
273 </sect3>
274
275 <sect3>
276 <title>Configuration Information</title>
277
278 <para>Due to the complexity and the many various uses for
279 <application>Samba</application>, complete configuration for all the
280 package's capabilities is well beyond the scope of the BLFS book. This
281 section provides instructions to configure the
282 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
283 The complete contents of <filename>/etc/samba/smb.conf</filename> will
284 depend on the purpose of <application>Samba</application>
285 installation.</para>
286
287 <note>
288 <para>You may find it easier to copy the configuration parameters shown
289 below into an empty <filename>/etc/samba/smb.conf</filename> file
290 instead of copying and editing the default file as mentioned in the
291 <quote>Command Explanations</quote> section. How you create/edit the
292 <filename>/etc/samba/smb.conf</filename> file will be left up to
293 you. Do ensure the file is only writeable by the
294 <systemitem class="username">root</systemitem> user (mode 644).</para>
295 </note>
296
297 <sect4>
298 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
299
300 <para>Choose this variant if you only want to transfer files using
301 <command>smbclient</command>, mount Windows shares and print to Windows
302 printers, and don't want to share your files and printers to Windows
303 machines.</para>
304
305 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
306 three parameters is sufficient:</para>
307
308<screen role='root'><literal>[global]
309 workgroup = <replaceable>MYGROUP</replaceable>
310 dos charset = <replaceable>cp850</replaceable>
311 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
312
313 <para>The values in this example specify that the computer belongs to a
314 Windows workgroup named
315 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
316 <quote><replaceable>cp850</replaceable></quote> character set on the
317 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
318 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
319 encoding on the disk. Adjust these values appropriately for your
320 installation. The <quote>unix charset</quote> value must be the same as
321 the output of <command>locale charmap</command> when executed with the
322 <envar>LANG</envar> variable set to your preferred locale, otherwise the
323 <command>ls</command> command may not display correct filenames of
324 downloaded files.</para>
325
326 <para>There is no need to run any <application>Samba</application>
327 servers in this scenario, thus you don't need to install the provided
328 bootscripts.</para>
329
330 </sect4>
331
332 <sect4>
333 <title>Scenario 2: Standalone File/Print Server</title>
334
335 <para>Choose this variant if you want to share your files and printers
336 to Windows machines in your workgroup in addition to the capabilities
337 described in Scenario 1.</para>
338
339 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
340 file may be a good template to start from. Also add
341 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
342 to the <quote>[global]</quote> section as described in Scenario 1 in
343 order to prevent filename corruption.</para>
344
345 <para>The following configuration file creates a separate share for each
346 user's home directory and also makes all printers available to Windows
347 machines:</para>
348
349<screen role='root'><literal>[global]
350 workgroup = <replaceable>MYGROUP</replaceable>
351 dos charset = <replaceable>cp850</replaceable>
352 unix charset = <replaceable>ISO-8859-1</replaceable>
353
354[homes]
355 comment = Home Directories
356 browseable = no
357 writable = yes
358
359[printers]
360 comment = All Printers
361 path = /var/spool/samba
362 browseable = no
363 guest ok = no
364 printable = yes</literal></screen>
365
366 <para>Other parameters you may wish to customize in the
367 <quote>[global]</quote> section include:</para>
368
369<screen role='root'><literal> server string =
370 security =
371 hosts allow =
372 load printers =
373 log file =
374 max log size =
375 socket options =
376 local master =</literal></screen>
377
378 <para>Reference the comments in the
379 <filename>/etc/samba/smb.conf.default</filename> file for information
380 regarding these parameters.</para>
381
382 <para>Since the <command>smbd</command> and <command>nmbd</command>
383 daemons are needed in this case, install the <filename>samba</filename>
384 bootscript. Be sure to run <command>smbpasswd</command> (with the
385 <option>-a</option> option to add users) to enable and
386 set passwords for all accounts that need
387 <application>Samba</application> access, or use the SWAT web interface
388 (see below) to do the same. Using the default
389 <application>Samba</application> passdb backend, any user you attempt
390 to add will also be required to exist in the
391 <filename>/etc/passwd</filename> file.</para>
392
393 </sect4>
394
395 <sect4>
396 <title>Advanced Requirements</title>
397
398 <para>More complex scenarios involving domain control or membership are
399 possible if the right flags are passed to the ./configure script when
400 the package is built. Such setups are advanced topics and cannot be
401 adequately covered in BLFS. Many complete books have been written on
402 these topics alone. It should be noted, however, that a
403 <application>Samba</application> BDC cannot be used as a fallback
404 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
405 fallback for a <application>Samba</application> PDC. Also in some
406 domain membership scenarios, the <command>winbindd</command> daemon and
407 the corresponding bootscript are needed.</para>
408
409 <para>There is quite a bit of documentation available which covers many
410 of these advanced configurations. Point your web browser to the links
411 below to view some of the documentation included with the
412 <application>Samba</application> package:</para>
413
414 <itemizedlist spacing='compact'>
415 <listitem>
416 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
417 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
418 </listitem>
419 <listitem>
420 <para>The Official Samba HOWTO and Reference Guide <ulink
421 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
422 </para>
423 </listitem>
424 <listitem>
425 <para>Samba-3 by Example
426 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
427 </para>
428 </listitem>
429 <listitem>
430 <para>The Samba-3 man Pages
431 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
432 </listitem>
433 </itemizedlist>
434
435 </sect4>
436
437 </sect3>
438
439 <sect3 id="samba3-swat-config">
440 <title>Configuring SWAT</title>
441
442 <para>The built in SWAT (<application>Samba</application> Web
443 Administration Tool) utility can be used for basic configuration of
444 the <application>Samba</application> installation, but because it may
445 be inconvenient, undesirable or perhaps even impossible to gain
446 access to the console, BLFS recommends setting up access to SWAT using
447 <application>Stunnel</application>. Without
448 <application>Stunnel</application>, the
449 <systemitem class="username">root</systemitem> password is transmitted
450 in clear text over the wire, and is considered an unacceptable security
451 risk. After considering the security implications of using SWAT without
452 <application>Stunnel</application>, and you still wish to implement SWAT
453 without it, instructions are provided at this end of this section.</para>
454
455 <indexterm zone="samba3 samba3-swat-config">
456 <primary sortas="g-SWAT">SWAT</primary>
457 </indexterm>
458
459 <sect4>
460 <title>Setting up SWAT using Stunnel</title>
461
462 <para>First install, or ensure you have already installed, the
463 <xref linkend="stunnel"/> package.</para>
464
465 <para>Next you must add entries to <filename>/etc/services</filename>
466 and modify the <command>inetd</command>/<command>xinetd</command>
467 configuration.</para>
468
469 <indexterm zone="samba3 samba3-swat-config">
470 <primary sortas="e-etc-services">/etc/services</primary>
471 </indexterm>
472
473 <indexterm zone="samba3 samba3-swat-config">
474 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
475 </indexterm>
476
477 <indexterm zone="samba3 samba3-swat-config">
478 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
479 </indexterm>
480
481 <para>Add swat and swat_tunnel entries to
482 <filename>/etc/services</filename> with the following commands issued
483 as the <systemitem class="username">root</systemitem> user:</para>
484
485<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
486echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
487
488 <para>If <command>inetd</command> is used, the following command will
489 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
490 user <systemitem class="username">root</systemitem>):</para>
491
492<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
493 &gt;&gt; /etc/inetd.conf</userinput></screen>
494
495 <para>Issue a <command>killall -HUP inetd</command> to reread the
496 changed <filename>inetd.conf</filename> file.</para>
497
498 <para>If you use <command>xinetd</command>, the following command will
499 create the <application>Samba</application> file as
500 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
501 or remove the <quote>only_from</quote> line to include the desired
502 host[s]):</para>
503
504<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
505<literal># Begin /etc/xinetd.d/swat_tunnel
506
507service swat_tunnel
508{
509 port = 902
510 socket_type = stream
511 wait = no
512 only_from = 127.0.0.1
513 user = root
514 server = /usr/sbin/swat
515 log_on_failure += USERID
516}
517
518# End /etc/xinetd.d/swat_tunnel</literal>
519EOF</userinput></screen>
520
521 <indexterm zone="samba3 samba3-swat-config">
522 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
523 </indexterm>
524
525 <para>Issue a <command>killall -HUP xinetd</command> to read the new
526 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
527
528 <para>Next, you must add an entry for the swat service to the
529 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
530 <systemitem class="username">root</systemitem>):</para>
531
532 <indexterm zone="samba3 samba3-swat-config">
533 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
534 </indexterm>
535
536<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
537<literal>[swat]
538accept = 901
539connect = 902
540TIMEOUTclose = 1</literal>
541
542EOF</userinput></screen>
543
544 <para>Restart the <command>stunnel</command> daemon using the following
545 command as the <systemitem class="username">root</systemitem> user:</para>
546
547<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
548
549 <para>SWAT can be launched by pointing your web browser to
550 <uri>https://<replaceable>&lt;CA_DN_field&gt;</replaceable>:901</uri>.
551 Substitute the hostname listed in the DN field of the CA certificate
552 used with <application>Stunnel</application> for
553 <replaceable>&lt;CA_DN_field&gt;</replaceable>.</para>
554
555 </sect4>
556
557 <sect4>
558 <title>Setting up SWAT without Stunnel</title>
559
560 <warning>
561 <para>BLFS does not recommend using these procedures because of the
562 security risk involved. However, in a home network environment and
563 disclosure of the <systemitem class='username'>root</systemitem>
564 password is an acceptable risk, the following
565 instructions are provided for your convenience.</para>
566 </warning>
567
568 <para>Add a swat entry to <filename>/etc/services</filename> with the
569 following command issued as the
570 <systemitem class='username'>root</systemitem> user:</para>
571
572<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
573
574 <para>If <command>inetd</command> is used, the following command
575 issued as the <systemitem class='username'>root</systemitem> user will
576 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
577
578<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
579 &gt;&gt; /etc/inetd.conf</userinput></screen>
580
581 <para>Issue a <command>killall -HUP inetd</command> to reread the
582 changed <filename>inetd.conf</filename> file.</para>
583
584 <para>If <command>xinetd</command> is used, the following command
585 issued as the <systemitem class='username'>root</systemitem> user
586 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
587
588<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
589<literal># Begin /etc/xinetd.d/swat
590
591service swat
592{
593 port = 901
594 socket_type = stream
595 wait = no
596 only_from = 127.0.0.1
597 user = root
598 server = /usr/sbin/swat
599 log_on_failure += USERID
600}
601
602# End /etc/xinetd.d/swat</literal>
603EOF</userinput></screen>
604
605 <para>Issue a <command>killall -HUP xinetd</command> to read the
606 new <filename>/etc/xinetd.d/swat</filename> file.</para>
607
608 <para>SWAT can be launched by pointing your web browser to
609 http://localhost:901.</para>
610
611 </sect4>
612
613 </sect3>
614
615 <sect3>
616 <title/>
617
618 <note>
619 <para>If you linked <application>Linux-PAM</application> into the
620 <application>Samba</application> build, you'll need to create an
621 <filename>/etc/pam.d/samba</filename> file.</para>
622 </note>
623
624 <indexterm zone="samba3 samba3-swat-config">
625 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
626 </indexterm>
627
628 </sect3>
629
630 <sect3 id="samba3-init">
631 <title>Boot Script</title>
632
633 <para>For your convenience, boot scripts have been provided for
634 <application>Samba</application>. There are two included in the
635 <xref linkend="bootscripts"/> package. The first,
636 <filename>samba</filename>, will start the <command>smbd</command>
637 and <command>nmbd</command> daemons needed to provide SMB/CIFS
638 services. The second script, <filename>winbind</filename>, starts
639 the <command>winbindd</command> daemon, used for providing Windows
640 domain services to Linux clients.</para>
641
642 <indexterm zone="samba3 samba3-init">
643 <primary sortas="f-samba">samba</primary>
644 </indexterm>
645
646 <indexterm zone="samba3 samba3-init">
647 <primary sortas="f-winbind">winbind</primary>
648 </indexterm>
649
650 <para>The default <application>Samba</application> installation uses the
651 <systemitem class='username'>nobody</systemitem> user for guest access
652 to the server. This can be overridden by setting the
653 <option>guest account =</option> parameter in the
654 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
655 <option>guest account =</option> parameter, ensure this user exists in
656 the <filename>/etc/passwd</filename> file. To use the default user,
657 issue the following commands as the
658 <systemitem class='username'>root</systemitem> user:</para>
659
660<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
661useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
662 -s /bin/false -u 99 nobody</userinput></screen>
663
664 <para>Install the <filename>samba</filename> script with the following
665 command issued as the <systemitem class="username">root</systemitem>
666 user:</para>
667
668<screen role="root"><userinput>make install-samba</userinput></screen>
669
670 <para>If you also need the <filename>winbind</filename>
671 script:</para>
672
673<screen role="root"><userinput>make install-winbind</userinput></screen>
674
675 </sect3>
676
677 </sect2>
678
679 <sect2 role="content">
680 <title>Contents</title>
681
682 <segmentedlist>
683 <segtitle>Installed Programs</segtitle>
684 <segtitle>Installed Libraries</segtitle>
685 <segtitle>Installed Directories</segtitle>
686
687<!--newprogs: eventlogadm smbget-->
688
689 <seglistitem>
690 <seg>eventlogadm, findsmb, mount.smbfs, net, nmbd, nmblookup,
691 ntlm_auth, pdbedit, profiles, rpcclient, smbcacls, smbclient,
692 smbcontrol, smbcquotas, smbd, smbget, smbmnt, smbmount, smbpasswd,
693 smbspool, smbstatus, smbtar, smbtree, smbumount, swat, tdbbackup,
694 tdbdump, tdbtool, testparm, testprns, wbinfo, and winbindd</seg>
695 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, libmsrpc.so,
696 the pam_winbind.so PAM library and assorted character set, filesystem
697 and support modules.</seg>
698 <seg>/etc/samba, /usr/lib/python2.4/site-packages/samba,
699 /usr/lib/samba, /usr/share/doc/samba-&samba3-version;,
700 /usr/share/samba, /var/lib/samba and /var/log/samba</seg>
701 </seglistitem>
702 </segmentedlist>
703
704 <variablelist>
705 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
706 <?dbfo list-presentation="list"?>
707 <?dbhtml list-presentation="table"?>
708
709 <varlistentry id="eventlogadm">
710 <term><command>eventlogadm</command></term>
711 <listitem>
712 <para>is used to write records to eventlogs from STDIN, add the
713 specified source and DLL eventlog registry entries and display the
714 active eventlog names (from <filename>smb.conf</filename>).</para>
715 <indexterm zone="samba3 eventlogadm">
716 <primary sortas="b-eventlogadm">eventlogadm</primary>
717 </indexterm>
718 </listitem>
719 </varlistentry>
720
721 <varlistentry id="findsmb">
722 <term><command>findsmb</command></term>
723 <listitem>
724 <para>lists information about machines that respond to
725 SMB name queries on a subnet.</para>
726 <indexterm zone="samba3 findsmb">
727 <primary sortas="b-findsmb">findsmb</primary>
728 </indexterm>
729 </listitem>
730 </varlistentry>
731
732 <varlistentry id="mount.smbfs">
733 <term><command>mount.smbfs</command></term>
734 <listitem>
735 <para>is a symlink to <command>smbmount</command> which provides
736 <command>/bin/mount</command> with a way to mount remote Windows
737 (or <application>Samba</application>) fileshares.</para>
738 <indexterm zone="samba3 mount.smbfs">
739 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
740 </indexterm>
741 </listitem>
742 </varlistentry>
743
744 <varlistentry id="net">
745 <term><command>net</command></term>
746 <listitem>
747 <para>is a tool for administration of
748 <application>Samba</application> and remote CIFS servers, similar
749 to the <command>net</command> utility for DOS/Windows.</para>
750 <indexterm zone="samba3 net">
751 <primary sortas="b-net">net</primary>
752 </indexterm>
753 </listitem>
754 </varlistentry>
755
756 <varlistentry id="nmbd">
757 <term><command>nmbd</command></term>
758 <listitem>
759 <para>is the <application>Samba</application>
760 NetBIOS name server.</para>
761 <indexterm zone="samba3 nmbd">
762 <primary sortas="b-nmbd">nmbd</primary>
763 </indexterm>
764 </listitem>
765 </varlistentry>
766
767 <varlistentry id="nmblookup">
768 <term><command>nmblookup</command></term>
769 <listitem>
770 <para>is used to query NetBIOS names and map
771 them to IP addresses.</para>
772 <indexterm zone="samba3 nmblookup">
773 <primary sortas="b-nmblookup">nmblookup</primary>
774 </indexterm>
775 </listitem>
776 </varlistentry>
777
778 <varlistentry id="ntlm_auth">
779 <term><command>ntlm_auth</command></term>
780 <listitem>
781 <para>is a tool to allow external access to Winbind's
782 NTLM authentication function.</para>
783 <indexterm zone="samba3 ntlm_auth">
784 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
785 </indexterm>
786 </listitem>
787 </varlistentry>
788
789 <varlistentry id="pdbedit">
790 <term><command>pdbedit</command></term>
791 <listitem>
792 <para>is a tool used to manage the SAM database.</para>
793 <indexterm zone="samba3 pdbedit">
794 <primary sortas="b-pdbedit">pdbedit</primary>
795 </indexterm>
796 </listitem>
797 </varlistentry>
798
799 <varlistentry id="profiles">
800 <term><command>profiles</command></term>
801 <listitem>
802 <para>is a utility that reports and changes SIDs in Windows
803 registry files. It currently only supports Windows NT.</para>
804 <indexterm zone="samba3 profiles">
805 <primary sortas="b-profiles">profiles</primary>
806 </indexterm>
807 </listitem>
808 </varlistentry>
809
810 <varlistentry id="rpcclient">
811 <term><command>rpcclient</command></term>
812 <listitem>
813 <para>is used to execute MS-RPC client side functions.</para>
814 <indexterm zone="samba3 rpcclient">
815 <primary sortas="b-rpcclient">rpcclient</primary>
816 </indexterm>
817 </listitem>
818 </varlistentry>
819
820 <varlistentry id="smbcacls">
821 <term><command>smbcacls</command></term>
822 <listitem>
823 <para>is used to manipulate Windows NT access control lists.</para>
824 <indexterm zone="samba3 smbcacls">
825 <primary sortas="b-smbcacls">smbcacls</primary>
826 </indexterm>
827 </listitem>
828 </varlistentry>
829
830 <varlistentry id="smbclient">
831 <term><command>smbclient</command></term>
832 <listitem>
833 <para>is a SMB/CIFS access utility, similar to FTP.</para>
834 <indexterm zone="samba3 smbclient">
835 <primary sortas="b-smbclient">smbclient</primary>
836 </indexterm>
837 </listitem>
838 </varlistentry>
839
840 <varlistentry id="smbcontrol">
841 <term><command>smbcontrol</command></term>
842 <listitem>
843 <para>is used to control running <command>smbd</command>,
844 <command>nmbd</command> and <command>winbindd</command>
845 daemons.</para>
846 <indexterm zone="samba3 smbcontrol">
847 <primary sortas="b-smbcontrol">smbcontrol</primary>
848 </indexterm>
849 </listitem>
850 </varlistentry>
851
852 <varlistentry id="smbcquotas">
853 <term><command>smbcquotas</command></term>
854 <listitem>
855 <para>is used to manipulate Windows NT quotas on
856 SMB file shares.</para>
857 <indexterm zone="samba3 smbcquotas">
858 <primary sortas="b-smbcquotas">smbcquotas</primary>
859 </indexterm>
860 </listitem>
861 </varlistentry>
862
863 <varlistentry id="smbd">
864 <term><command>smbd</command></term>
865 <listitem>
866 <para>is the main <application>Samba</application> daemon which
867 provides SMB/CIFS services to clients.</para>
868 <indexterm zone="samba3 smbd">
869 <primary sortas="b-smbd">smbd</primary>
870 </indexterm>
871 </listitem>
872 </varlistentry>
873
874 <varlistentry id="smbget">
875 <term><command>smbget</command></term>
876 <listitem>
877 <para>is a simple utility with <command>wget</command>-like
878 semantics, that can download files from SMB servers. You can specify
879 the files you would like to download on the command-line.</para>
880 <indexterm zone="samba3 smbget">
881 <primary sortas="b-smbget">smbget</primary>
882 </indexterm>
883 </listitem>
884 </varlistentry>
885
886 <varlistentry id="smbmnt">
887 <term><command>smbmnt</command></term>
888 <listitem>
889 <para>is a helper application used by the
890 <command>smbmount</command> program to do the actual mounting of
891 SMB shares. It can be installed setuid
892 <systemitem class='username'>root</systemitem> if you want
893 unprivileged users to be able to mount their SMB shares.</para>
894 <indexterm zone="samba3 smbmnt">
895 <primary sortas="b-smbmnt">smbmnt</primary>
896 </indexterm>
897 </listitem>
898 </varlistentry>
899
900 <varlistentry id="smbmount">
901 <term><command>smbmount</command></term>
902 <listitem>
903 <para>is usually invoked as <command>mount.smbfs</command> by the
904 <command>mount</command> command when using the
905 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
906 filesystem.</para>
907 <indexterm zone="samba3 smbmount">
908 <primary sortas="b-smbmount">smbmount</primary>
909 </indexterm>
910 </listitem>
911 </varlistentry>
912
913 <varlistentry id="smbpasswd">
914 <term><command>smbpasswd</command></term>
915 <listitem>
916 <para>changes a user's <application>Samba</application>
917 password.</para>
918 <indexterm zone="samba3 smbpasswd">
919 <primary sortas="b-smbpasswd">smbpasswd</primary>
920 </indexterm>
921 </listitem>
922 </varlistentry>
923
924 <varlistentry id="smbspool">
925 <term><command>smbspool</command></term>
926 <listitem>
927 <para>sends a print job to an SMB printer.</para>
928 <indexterm zone="samba3 smbspool">
929 <primary sortas="b-smbspool">smbspool</primary>
930 </indexterm>
931 </listitem>
932 </varlistentry>
933
934 <varlistentry id="smbstatus">
935 <term><command>smbstatus</command></term>
936 <listitem>
937 <para>reports current <application>Samba</application>
938 connections.</para>
939 <indexterm zone="samba3 smbstatus">
940 <primary sortas="b-smbstatus">smbstatus</primary>
941 </indexterm>
942 </listitem>
943 </varlistentry>
944
945 <varlistentry id="smbtar">
946 <term><command>smbtar</command></term>
947 <listitem>
948 <para>is a shell script used for backing up SMB/CIFS shares
949 directly to Linux tape drives or a file.</para>
950 <indexterm zone="samba3 smbtar">
951 <primary sortas="b-smbtar">smbtar</primary>
952 </indexterm>
953 </listitem>
954 </varlistentry>
955
956 <varlistentry id="smbtree">
957 <term><command>smbtree</command></term>
958 <listitem>
959 <para>is a text-based SMB network browser.</para>
960 <indexterm zone="samba3 smbtree">
961 <primary sortas="b-smbtree">smbtree</primary>
962 </indexterm>
963 </listitem>
964 </varlistentry>
965
966 <varlistentry id="smbumount">
967 <term><command>smbumount</command></term>
968 <listitem>
969 <para>is used by unprivileged users to unmount SMB filesystems,
970 provided that it is setuid root.</para>
971 <indexterm zone="samba3 smbumount">
972 <primary sortas="b-smbumount">smbumount</primary>
973 </indexterm>
974 </listitem>
975 </varlistentry>
976
977 <varlistentry id="swat">
978 <term><command>swat</command></term>
979 <listitem>
980 <para>is the <application>Samba</application> Web Administration
981 Tool.</para>
982 <indexterm zone="samba3 swat">
983 <primary sortas="b-swat">swat</primary>
984 </indexterm>
985 </listitem>
986 </varlistentry>
987
988 <varlistentry id="tdbbackup">
989 <term><command>tdbbackup</command></term>
990 <listitem>
991 <para>is a tool for backing up or validating the integrity of
992 <application>Samba</application> <filename>.tdb</filename>
993 files.</para>
994 <indexterm zone="samba3 tdbbackup">
995 <primary sortas="b-tdbbackup">tdbbackup</primary>
996 </indexterm>
997 </listitem>
998 </varlistentry>
999
1000 <varlistentry id="tdbdump">
1001 <term><command>tdbdump</command></term>
1002 <listitem>
1003 <para> is a tool used to print the contents of a
1004 <application>Samba</application> <filename>.tdb</filename>
1005 file.</para>
1006 <indexterm zone="samba3 tdbdump">
1007 <primary sortas="b-tdbdump">tdbdump</primary>
1008 </indexterm>
1009 </listitem>
1010 </varlistentry>
1011
1012 <varlistentry id="tdbtool">
1013 <term><command>tdbtool</command></term>
1014 <listitem>
1015 <para>is a tool which allows simple database manipulation from the
1016 command line.</para>
1017 <indexterm zone="samba3 tdbtool">
1018 <primary sortas="b-tdbtool">tdbtool</primary>
1019 </indexterm>
1020 </listitem>
1021 </varlistentry>
1022
1023 <varlistentry id="testparm">
1024 <term><command>testparm</command></term>
1025 <listitem>
1026 <para>checks an <filename>smb.conf</filename> file for proper
1027 syntax.</para>
1028 <indexterm zone="samba3 testparm">
1029 <primary sortas="b-testparm">testparm</primary>
1030 </indexterm>
1031 </listitem>
1032 </varlistentry>
1033
1034 <varlistentry id="testprns">
1035 <term><command>testprns</command></term>
1036 <listitem>
1037 <para>tests printer names.</para>
1038 <indexterm zone="samba3 testprns">
1039 <primary sortas="b-testprns">testprns</primary>
1040 </indexterm>
1041 </listitem>
1042 </varlistentry>
1043
1044 <varlistentry id="wbinfo">
1045 <term><command>wbinfo</command></term>
1046 <listitem>
1047 <para>queries a running <command>winbindd</command> daemon.</para>
1048 <indexterm zone="samba3 wbinfo">
1049 <primary sortas="b-wbinfo">wbinfo</primary>
1050 </indexterm>
1051 </listitem>
1052 </varlistentry>
1053
1054 <varlistentry id="winbindd">
1055 <term><command>winbindd</command></term>
1056 <listitem>
1057 <para>resolves names from Windows NT servers.</para>
1058 <indexterm zone="samba3 winbindd">
1059 <primary sortas="b-winbindd">winbindd</primary>
1060 </indexterm>
1061 </listitem>
1062 </varlistentry>
1063
1064 </variablelist>
1065
1066 </sect2>
1067
1068</sect1>
Note: See TracBrowser for help on using the repository browser.