source: server/major/samba3.xml@ e75747d1

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 12.2 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gimp3 gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/for-12.3 xry111/intltool xry111/llvm18 xry111/soup3 xry111/spidermonkey128 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since e75747d1 was e75747d1, checked in by Randy McMurchy <randy@…>, 19 years ago

Fixed typos and added a note about unprivileged users mounting SMB shares to the Samba server instructions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4557 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 37.0 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "ebee37e66a8b5f6fd328967dc09088e8">
10 <!ENTITY samba3-size "15.6 MB">
11 <!ENTITY samba3-buildsize "147 MB">
12 <!ENTITY samba3-time "2.21 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
63
64 <bridgehead renderas="sect4">Optional</bridgehead>
65 <para><xref linkend="popt"/>,
66 <xref linkend="Linux_PAM"/>,
67 <xref linkend="openldap"/>,
68 <xref linkend="cups"/>,
69 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
70 <xref linkend="libxml2"/>,
71 <xref linkend="mysql"/> or <xref linkend="postgresql"/>,
72 <xref linkend="python"/>,
73 <xref linkend="xinetd"/>,
74 <xref linkend="xfs"/> and
75 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para>
76
77 </sect2>
78
79 <sect2 role="installation">
80 <title>Installation of Samba</title>
81
82 <para>Install <application>Samba</application> by running the following
83 commands:</para>
84
85<screen><userinput>cd source &amp;&amp;
86./configure \
87 --prefix=/usr \
88 --sysconfdir=/etc \
89 --localstatedir=/var \
90 --with-piddir=/var/run \
91 --with-fhs \
92 --with-smbmount &amp;&amp;
93make</userinput></screen>
94
95 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
96
97<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
98make install &amp;&amp;
99mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
100ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
101chmod -v 644 /usr/include/libsmbclient.h &amp;&amp;
102install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
103ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
104ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
105if [ -f nsswitch/pam_winbind.so ]; then
106 install -v -m755 nsswitch/pam_winbind.so /lib/security
107fi &amp;&amp;
108install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
109install -v -m644 ../docs/*.pdf /usr/share/samba</userinput></screen>
110
111 <note>
112 <para>You may want to run <command>configure</command> with the
113 <option>--help</option> parameter. There may be other parameters
114 needed to take advantage of the optional dependencies.</para>
115 </note>
116
117 </sect2>
118
119 <sect2 role="commands">
120 <title>Command Explanations</title>
121
122 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
123 file directory to avoid the default of
124 <filename class="directory">/usr/etc</filename>.</para>
125
126 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
127 data directory to avoid the default of
128 <filename class="directory">/usr/var</filename>.</para>
129
130 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
131 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
132
133 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
134 extra binary for use by the <command>mount</command> command so that
135 mounting remote SMB (Windows) shares becomes no more complex than
136 mounting remote NFS shares.</para>
137
138 <para><option>--with-pam</option>: Use this parameter to link
139 <application>Linux-PAM</application> into the build. This
140 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
141 <application>PAM</application> module. You can find
142 instructions on how to configure and use the module by running
143 <command>man winbindd</command>.</para>
144
145 <para><command>install -v -d /var/cache/samba</command>: This directory is
146 needed for proper operation of the <command>smbd</command> and
147 <command>nmbd</command> daemons.</para>
148
149 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
150 ../libsmbclient.so ...</command>: The
151 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
152 by other packages. This command moves it to a location where other packages
153 can find it.</para>
154
155 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
156 The nss libraries are not installed by default. If you intend to use
157 winbindd for domain auth, and/or WINS name resolution,
158 you need these libraries.</para>
159
160 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
161 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
162 These symlinks are required by glibc to use the NSS
163 libraries.</para>
164
165 <para><command>install -v -m644 ../examples/smb.conf.default
166 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
167 file into <filename>/etc/samba</filename>. This sample configuration will
168 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
169 make the appropriate changes for your installation. See the configuration
170 section for minimum values which must be set.</para>
171
172 </sect2>
173
174 <sect2 role="configuration">
175 <title>Configuring Samba</title>
176
177 <sect3 id="samba3-config">
178 <title>Config Files</title>
179
180 <para>/etc/samba/smb.conf</para>
181
182 <indexterm zone="samba3 samba3-config">
183 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
184 </indexterm>
185
186 </sect3>
187
188 <sect3>
189 <title>Mounting Shares by Unprivileged Users</title>
190
191 <para>If it is desired for unprivileged users to directly mount (and
192 unmount) SMB shares, the <command>smbmnt</command> and
193 <command>smbumount</command> commands must be setuid
194 <systemitem class='username'>root</systemitem>. Note that users can
195 only mount SMB shares if the share is owned by that user, and the user
196 has write access. If desired, change these programs to setuid
197 <systemitem class='username'>root</systemitem> by issuing the following
198 command as the <systemitem class='username'>root</systemitem>
199 user:</para>
200
201<screen role="root"><userinput>chmod -v 4755 /usr/bin/smb{mnt,umount}</userinput></screen>
202
203 </sect3>
204
205 <sect3>
206 <title>Printing to SMB Clients</title>
207
208 <para>If you use <application>CUPS</application> for print services,
209 and you wish to print to a printer attached to an SMB client, you
210 need to create an SMB backend device. To create the device, issue the
211 following command as the <systemitem class="username">root</systemitem>
212 user:</para>
213
214<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
215
216 </sect3>
217
218 <sect3>
219 <title>Configuration Information</title>
220
221 <para>Due to the complexity and the many various uses for
222 <application>Samba</application>, complete configuration for all the
223 package's cababilities is well beyond the scope of the BLFS book. This
224 section provides instructions to configure the
225 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
226 The complete contents of <filename>/etc/samba/smb.conf</filename> will
227 depend on the purpose of <application>Samba</application>
228 installation.</para>
229
230 <note>
231 <para>You may find it easier to copy the configuration parameters shown
232 below into an empty <filename>/etc/samba/smb.conf</filename> file
233 instead of copying and editing the default file as mentioned in the
234 <quote>Command Explanations</quote> section. How you create/edit the
235 <filename>/etc/samba/smb.conf</filename> file will be left up to
236 you. Do ensure the file is only writeable by the
237 <systemitem class="username">root</systemitem> user (mode 644).</para>
238 </note>
239
240 <sect4>
241 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
242
243 <para>Choose this variant if you only want to transfer files using
244 <command>smbclient</command>, mount Windows shares and print to Windows
245 printers, and don't want to share your files and printers to Windows
246 machines.</para>
247
248 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
249 three parameters is sufficient:</para>
250
251<screen role='root'><literal>[global]
252 workgroup = <replaceable>MYGROUP</replaceable>
253 dos charset = <replaceable>cp850</replaceable>
254 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
255
256 <para>The values in this example specify that the computer belongs to a
257 Windows workgroup named
258 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
259 <quote><replaceable>cp850</replaceable></quote> character set on the
260 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
261 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
262 encoding on the disk. Adjust these values appropriately for your
263 installation. The <quote>unix charset</quote> value must be the same as
264 the output of <command>locale charmap</command> when executed with the
265 <envar>LANG</envar> variable set to your preferred locale, otherwise the
266 <command>ls</command> command may not display correct filenames of
267 downloaded files.</para>
268
269 <para>There is no need to run any <application>Samba</application>
270 servers in this scenario, thus you don't need to install the provided
271 bootscripts.</para>
272
273 </sect4>
274
275 <sect4>
276 <title>Scenario 2: Standalone File/Print Server</title>
277
278 <para>Choose this variant if you want to share your files and printers
279 to Windows machines in your workgroup in addition to the capabilities
280 described in Scenario 1.</para>
281
282 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
283 file may be a good template to start from. Also add
284 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
285 to the <quote>[global]</quote> section as described in Scenario 1 in
286 order to prevent filename corruption.</para>
287
288 <para>The following configuration file creates a separate share for each
289 user's home directory and also makes all printers available to Windows
290 machines:</para>
291
292<screen role='root'><literal>[global]
293 workgroup = <replaceable>MYGROUP</replaceable>
294 dos charset = <replaceable>cp850</replaceable>
295 unix charset = <replaceable>ISO-8859-1</replaceable>
296
297[homes]
298 comment = Home Directories
299 browseable = no
300 writable = yes
301
302[printers]
303 comment = All Printers
304 path = /var/spool/samba
305 browseable = no
306 guest ok = no
307 printable = yes</literal></screen>
308
309 <para>Other parameters you may wish to customize in the
310 <quote>[global]</quote> section include:</para>
311
312<screen role='root'><literal> server string =
313 security =
314 hosts allow =
315 load printers =
316 log file =
317 max log size =
318 socket options =
319 local master =</literal></screen>
320
321 <para>Reference the comments in the
322 <filename>/etc/samba/smb.conf.default</filename> file for information
323 regarding these parameters.</para>
324
325 <para>Since the <command>smbd</command> and <command>nmbd</command>
326 daemons are needed in this case, install the <filename>samba</filename>
327 bootscript. Be sure to run <command>smbpasswd</command> (with the
328 <option>-a</option> option to add users) to enable and
329 set passwords for all accounts that need
330 <application>Samba</application> access, or use the SWAT web interface
331 (see below) to do the same. Using the default
332 <application>Samba</application> passdb backend, any user you attempt
333 to add will also be required to exist in the
334 <filename>/etc/passwd</filename> file.</para>
335
336 </sect4>
337
338 <sect4>
339 <title>Advanced Requirements</title>
340
341 <para>More complex scenarios involving domain control or membership are
342 possible if the right flags are passed to the ./configure script when
343 the package is built. Such setups are advanced topics and cannot be
344 adequately covered in BLFS. Many complete books have been written on
345 these topics alone. It should be noted, however, that a
346 <application>Samba</application> BDC cannot be used as a fallback
347 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
348 fallback for a <application>Samba</application> PDC. Also in some
349 domain mambership scenarios, the <command>winbindd</command> daemon and
350 the corresponding bootscript are needed.</para>
351
352 <para>There is quite a bit of documentation available which covers many
353 of these advanced configurations. Point your web browser to the links
354 below to view some of the documentation included with the
355 <application>Samba</application> package:</para>
356
357 <itemizedlist spacing='compact'>
358 <listitem>
359 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
360 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
361 </listitem>
362 <listitem>
363 <para>The Official Samba HOWTO and Reference Guide <ulink
364 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
365 </para>
366 </listitem>
367 <listitem>
368 <para>Samba-3 by Example
369 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
370 </para>
371 </listitem>
372 <listitem>
373 <para>The Samba-3 man Pages
374 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
375 </listitem>
376 </itemizedlist>
377
378 </sect4>
379
380 </sect3>
381
382 <sect3 id="samba3-swat-config">
383 <title>Configuring SWAT</title>
384
385 <para>The built in SWAT (<application>Samba</application> Web
386 Administration Tool) utility can be used for basic configuration of
387 the <application>Samba</application> installation, but because it may
388 be inconvenient, undesireable or perhaps even impossible to gain
389 access to the console, BLFS recommends setting up access to SWAT using
390 <application>Stunnel</application>. Without
391 <application>Stunnel</application>, the
392 <systemitem class="username">root</systemitem> password is transmitted
393 in clear text over the wire, and is considered an unacceptable security
394 risk. After considering the security implications of using SWAT without
395 <application>Stunnel</application>, and you still wish to implement SWAT
396 without it, instructions are provided at this end of this section.</para>
397
398 <indexterm zone="samba3 samba3-swat-config">
399 <primary sortas="g-SWAT">SWAT</primary>
400 </indexterm>
401
402 <sect4>
403 <title>Setting up SWAT using Stunnel</title>
404
405 <para>First install, or ensure you have already installed, the
406 <xref linkend="stunnel"/> package.</para>
407
408 <para>Next you must add entries to <filename>/etc/services</filename>
409 and modify the <command>inetd</command>/<command>xinetd</command>
410 configuration.</para>
411
412 <indexterm zone="samba3 samba3-swat-config">
413 <primary sortas="e-etc-services">/etc/services</primary>
414 </indexterm>
415
416 <indexterm zone="samba3 samba3-swat-config">
417 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
418 </indexterm>
419
420 <indexterm zone="samba3 samba3-swat-config">
421 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
422 </indexterm>
423
424 <para>Add swat and swat_tunnel entries to
425 <filename>/etc/services</filename> with the following commands issued
426 as the <systemitem class="username">root</systemitem> user:</para>
427
428<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
429echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
430
431 <para>If <command>inetd</command> is used, the following command will
432 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
433 user <systemitem class="username">root</systemitem>):</para>
434
435<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
436 &gt;&gt; /etc/inetd.conf</userinput></screen>
437
438 <para>Issue a <command>killall -HUP inetd</command> to reread the
439 changed <filename>inetd.conf</filename> file.</para>
440
441 <para>If you use <command>xinetd</command>, the following command will
442 create the <application>Samba</application> file as
443 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
444 or remove the <quote>only_from</quote> line to include the desired
445 host[s]):</para>
446
447<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
448<literal># Begin /etc/xinetd.d/swat_tunnel
449
450service swat_tunnel
451{
452 port = 902
453 socket_type = stream
454 wait = no
455 only_from = 127.0.0.1
456 user = root
457 server = /usr/sbin/swat
458 log_on_failure += USERID
459}
460
461# End /etc/xinetd.d/swat_tunnel</literal>
462EOF</userinput></screen>
463
464 <indexterm zone="samba3 samba3-swat-config">
465 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
466 </indexterm>
467
468 <para>Issue a <command>killall -HUP xinetd</command> to read the new
469 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
470
471 <para>Next, you must add an entry for the swat service to the
472 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
473 <systemitem class="username">root</systemitem>):</para>
474
475 <indexterm zone="samba3 samba3-swat-config">
476 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
477 </indexterm>
478
479<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
480<literal>[swat]
481accept = 901
482connect = 902</literal>
483
484EOF</userinput></screen>
485
486 <para>Restart the <command>stunnel</command> daemon using the following
487 command as the <systemitem class="username">root</systemitem> user:</para>
488
489<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
490
491 <para>SWAT can be launched by pointing your web browser to
492 <uri>https://<replaceable>[CA_DN_field]</replaceable>:901</uri>.
493 Substitute the hostname listed in the DN field of the CA certificate
494 used with <application>Stunnel</application> for
495 <replaceable>[CA_DN_field]</replaceable>.</para>
496
497 </sect4>
498
499 <sect4>
500 <title>Setting up SWAT without Stunnel</title>
501
502 <warning>
503 <para>BLFS does not recommend using these procedures because of the
504 security risk involved. However, in a home network environment and
505 disclosure of the root password is an acceptable risk, the following
506 instructions are provided for your convenience.</para>
507 </warning>
508
509 <para>Add a swat entry to <filename>/etc/services</filename> with the
510 following command issued as the
511 <systemitem class='username'>root</systemitem> user:</para>
512
513<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
514
515 <para>If <command>inetd</command> is used, the following command
516 issed as the <systemitem class='username'>root</systemitem> user will
517 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
518
519<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
520 &gt;&gt; /etc/inetd.conf</userinput></screen>
521
522 <para>Issue a <command>killall -HUP inetd</command> to reread the
523 changed <filename>inetd.conf</filename> file.</para>
524
525 <para>If <command>xinetd</command> is used, the following command
526 issued as the <systemitem class='username'>root</systemitem> user
527 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
528
529<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
530<literal># Begin /etc/xinetd.d/swat
531
532service swat
533{
534 port = 901
535 socket_type = stream
536 wait = no
537 only_from = 127.0.0.1
538 user = root
539 server = /usr/sbin/swat
540 log_on_failure += USERID
541}
542
543# End /etc/xinetd.d/swat</literal>
544EOF</userinput></screen>
545
546 <para>Issue a <command>killall -HUP xinetd</command> to read the
547 new <filename>/etc/xinetd.d/swat</filename> file.</para>
548
549 <para>SWAT can be launched by pointing your web browser to
550 http://localhost:901.</para>
551
552 </sect4>
553
554 </sect3>
555
556 <sect3>
557 <title/>
558
559 <note>
560 <para>If you linked <application>Linux-PAM</application> into the
561 <application>Samba</application> build, you'll need to create an
562 <filename>/etc/pam.d/samba</filename> file.</para>
563 </note>
564
565 <indexterm zone="samba3 samba3-swat-config">
566 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
567 </indexterm>
568
569 </sect3>
570
571 <sect3 id="samba3-init">
572 <title>Boot Script</title>
573
574 <para>For your convenience, boot scripts have been provided for
575 <application>Samba</application>. There are two included in the
576 <xref linkend="intro-important-bootscripts"/> package. The first,
577 <filename>samba</filename>, will start the <command>smbd</command>
578 and <command>nmbd</command> daemons needed to provide SMB/CIFS
579 services. The second script, <filename>winbind</filename>, starts
580 the <command>winbindd</command> daemon, used for providing Windows
581 domain services to Linux clients.</para>
582
583 <indexterm zone="samba3 samba3-init">
584 <primary sortas="f-samba">samba</primary>
585 </indexterm>
586
587 <indexterm zone="samba3 samba3-init">
588 <primary sortas="f-winbind">winbind</primary>
589 </indexterm>
590
591 <para>The default <application>Samba</application> installation uses the
592 <systemitem class='username'>nobody</systemitem> user for guest access
593 to the server. This can be overridden by setting the
594 <option>guest account =</option> parameter in the
595 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
596 <option>guest account =</option> parameter, ensure this user exists in
597 the <filename>/etc/passwd</filename> file. To use the default user,
598 issue the following commands as the
599 <systemitem class='username'>root</systemitem> user:</para>
600
601<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
602useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
603 -s /bin/false -u 99 nobody</userinput></screen>
604
605 <para>Install the <filename>samba</filename> script with the following
606 command issued as the <systemitem class="username">root</systemitem>
607 user:</para>
608
609<screen role="root"><userinput>make install-samba</userinput></screen>
610
611 <para>If you also need the <filename>winbind</filename>
612 script:</para>
613
614<screen role="root"><userinput>make install-winbind</userinput></screen>
615
616 </sect3>
617
618 </sect2>
619
620 <sect2 role="content">
621 <title>Contents</title>
622
623 <segmentedlist>
624 <segtitle>Installed Programs</segtitle>
625 <segtitle>Installed Libraries</segtitle>
626 <segtitle>Installed Directories</segtitle>
627
628 <seglistitem>
629 <seg>findsmb, mount.smbfs, net, nmbd, nmblookup, ntlm_auth, pdbedit,
630 profiles, rpcclient, smbcacls, smbclient, smbcontrol, smbcquotas, smbd,
631 smbmnt, smbmount, smbpasswd, smbspool, smbstatus, smbtar, smbtree,
632 smbumount, swat, tdbbackup, tdbdump, tdbtool, testparm, testprns,
633 wbinfo, and winbindd</seg>
634 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, the
635 pam_winbind.so PAM library and assorted character set,
636 filesystem and support modules.</seg>
637 <seg>/etc/samba, /usr/lib/samba, /usr/share/samba, /var/cache/samba,
638 and /var/lib/samba</seg>
639 </seglistitem>
640 </segmentedlist>
641
642 <variablelist>
643 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
644 <?dbfo list-presentation="list"?>
645 <?dbhtml list-presentation="table"?>
646
647 <varlistentry id="findsmb">
648 <term><command>findsmb</command></term>
649 <listitem>
650 <para>lists information about machines that respond to
651 SMB name queries on a subnet.</para>
652 <indexterm zone="samba3 findsmb">
653 <primary sortas="b-findsmb">findsmb</primary>
654 </indexterm>
655 </listitem>
656 </varlistentry>
657
658 <varlistentry id="mount.smbfs">
659 <term><command>mount.smbfs</command></term>
660 <listitem>
661 <para>is a symlink to <command>smbmount</command> which provides
662 <command>/bin/mount</command> with a way to mount remote Windows
663 (or <application>Samba</application>) fileshares.</para>
664 <indexterm zone="samba3 mount.smbfs">
665 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
666 </indexterm>
667 </listitem>
668 </varlistentry>
669
670 <varlistentry id="net">
671 <term><command>net</command></term>
672 <listitem>
673 <para>is a tool for administration of
674 <application>Samba</application> and remote CIFS servers, similar
675 to the <command>net</command> utility for DOS/Windows.</para>
676 <indexterm zone="samba3 net">
677 <primary sortas="b-net">net</primary>
678 </indexterm>
679 </listitem>
680 </varlistentry>
681
682 <varlistentry id="nmbd">
683 <term><command>nmbd</command></term>
684 <listitem>
685 <para>is the <application>Samba</application>
686 NetBIOS name server.</para>
687 <indexterm zone="samba3 nmbd">
688 <primary sortas="b-nmbd">nmbd</primary>
689 </indexterm>
690 </listitem>
691 </varlistentry>
692
693 <varlistentry id="nmblookup">
694 <term><command>nmblookup</command></term>
695 <listitem>
696 <para>is used to query NetBIOS names and map
697 them to IP addresses.</para>
698 <indexterm zone="samba3 nmblookup">
699 <primary sortas="b-nmblookup">nmblookup</primary>
700 </indexterm>
701 </listitem>
702 </varlistentry>
703
704 <varlistentry id="ntlm_auth">
705 <term><command>ntlm_auth</command></term>
706 <listitem>
707 <para>is a tool to allow external access to Winbind's
708 NTLM authentication function.</para>
709 <indexterm zone="samba3 ntlm_auth">
710 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
711 </indexterm>
712 </listitem>
713 </varlistentry>
714
715 <varlistentry id="pdbedit">
716 <term><command>pdbedit</command></term>
717 <listitem>
718 <para>is a tool used to manage the SAM database.</para>
719 <indexterm zone="samba3 pdbedit">
720 <primary sortas="b-pdbedit">pdbedit</primary>
721 </indexterm>
722 </listitem>
723 </varlistentry>
724
725 <varlistentry id="profiles">
726 <term><command>profiles</command></term>
727 <listitem>
728 <para>is a utility that reports and changes SIDs in Windows
729 registry files. It currently only supports Windows NT.</para>
730 <indexterm zone="samba3 profiles">
731 <primary sortas="b-profiles">profiles</primary>
732 </indexterm>
733 </listitem>
734 </varlistentry>
735
736 <varlistentry id="rpcclient">
737 <term><command>rpcclient</command></term>
738 <listitem>
739 <para>is used to execute MS-RPC client side functions.</para>
740 <indexterm zone="samba3 rpcclient">
741 <primary sortas="b-rpcclient">rpcclient</primary>
742 </indexterm>
743 </listitem>
744 </varlistentry>
745
746 <varlistentry id="smbcacls">
747 <term><command>smbcacls</command></term>
748 <listitem>
749 <para>is used to manipulate Windows NT access control lists.</para>
750 <indexterm zone="samba3 smbcacls">
751 <primary sortas="b-smbcacls">smbcacls</primary>
752 </indexterm>
753 </listitem>
754 </varlistentry>
755
756 <varlistentry id="smbclient">
757 <term><command>smbclient</command></term>
758 <listitem>
759 <para>is a SMB/CIFS access utility, similar to FTP.</para>
760 <indexterm zone="samba3 smbclient">
761 <primary sortas="b-smbclient">smbclient</primary>
762 </indexterm>
763 </listitem>
764 </varlistentry>
765
766 <varlistentry id="smbcontrol">
767 <term><command>smbcontrol</command></term>
768 <listitem>
769 <para>is used to control running <command>smbd</command>,
770 <command>nmbd</command> and <command>winbindd</command>
771 daemons.</para>
772 <indexterm zone="samba3 smbcontrol">
773 <primary sortas="b-smbcontrol">smbcontrol</primary>
774 </indexterm>
775 </listitem>
776 </varlistentry>
777
778 <varlistentry id="smbcquotas">
779 <term><command>smbcquotas</command></term>
780 <listitem>
781 <para>is used to manipulate Windows NT quotas on
782 SMB file shares.</para>
783 <indexterm zone="samba3 smbcquotas">
784 <primary sortas="b-smbcquotas">smbcquotas</primary>
785 </indexterm>
786 </listitem>
787 </varlistentry>
788
789 <varlistentry id="smbd">
790 <term><command>smbd</command></term>
791 <listitem>
792 <para>is the main <application>Samba</application> daemon which
793 provides SMB/CIFS services to clients.</para>
794 <indexterm zone="samba3 smbd">
795 <primary sortas="b-smbd">smbd</primary>
796 </indexterm>
797 </listitem>
798 </varlistentry>
799
800 <varlistentry id="smbmnt">
801 <term><command>smbmnt</command></term>
802 <listitem>
803 <para>is a helper application used by the
804 <command>smbmount</command> program to do the actual mounting of
805 SMB shares. It can be installed setuid root if you want
806 normal users to be able to mount their SMB shares.</para>
807 <indexterm zone="samba3 smbmnt">
808 <primary sortas="b-smbmnt">smbmnt</primary>
809 </indexterm>
810 </listitem>
811 </varlistentry>
812
813 <varlistentry id="smbmount">
814 <term><command>smbmount</command></term>
815 <listitem>
816 <para>is usually invoked as <command>mount.smbfs</command> by the
817 <command>mount</command> command when using the
818 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
819 filesystem.</para>
820 <indexterm zone="samba3 smbmount">
821 <primary sortas="b-smbmount">smbmount</primary>
822 </indexterm>
823 </listitem>
824 </varlistentry>
825
826 <varlistentry id="smbpasswd">
827 <term><command>smbpasswd</command></term>
828 <listitem>
829 <para>changes a user's <application>Samba</application>
830 password.</para>
831 <indexterm zone="samba3 smbpasswd">
832 <primary sortas="b-smbpasswd">smbpasswd</primary>
833 </indexterm>
834 </listitem>
835 </varlistentry>
836
837 <varlistentry id="smbspool">
838 <term><command>smbspool</command></term>
839 <listitem>
840 <para>sends a print job to an SMB printer.</para>
841 <indexterm zone="samba3 smbspool">
842 <primary sortas="b-smbspool">smbspool</primary>
843 </indexterm>
844 </listitem>
845 </varlistentry>
846
847 <varlistentry id="smbstatus">
848 <term><command>smbstatus</command></term>
849 <listitem>
850 <para>reports current <application>Samba</application>
851 connections.</para>
852 <indexterm zone="samba3 smbstatus">
853 <primary sortas="b-smbstatus">smbstatus</primary>
854 </indexterm>
855 </listitem>
856 </varlistentry>
857
858 <varlistentry id="smbtar">
859 <term><command>smbtar</command></term>
860 <listitem>
861 <para>is a shell script used for backing up SMB/CIFS shares
862 directly to Linux tape drives or a file.</para>
863 <indexterm zone="samba3 smbtar">
864 <primary sortas="b-smbtar">smbtar</primary>
865 </indexterm>
866 </listitem>
867 </varlistentry>
868
869 <varlistentry id="smbtree">
870 <term><command>smbtree</command></term>
871 <listitem>
872 <para>is a text-based SMB network browser.</para>
873 <indexterm zone="samba3 smbtree">
874 <primary sortas="b-smbtree">smbtree</primary>
875 </indexterm>
876 </listitem>
877 </varlistentry>
878
879 <varlistentry id="smbumount">
880 <term><command>smbumount</command></term>
881 <listitem>
882 <para>is used by normal users to unmount SMB filesystems,
883 provided that it is setuid root.</para>
884 <indexterm zone="samba3 smbumount">
885 <primary sortas="b-smbumount">smbumount</primary>
886 </indexterm>
887 </listitem>
888 </varlistentry>
889
890 <varlistentry id="swat">
891 <term><command>swat</command></term>
892 <listitem>
893 <para>is the <application>Samba</application> Web Administration
894 Tool.</para>
895 <indexterm zone="samba3 swat">
896 <primary sortas="b-swat">swat</primary>
897 </indexterm>
898 </listitem>
899 </varlistentry>
900
901 <varlistentry id="tdbbackup">
902 <term><command>tdbbackup</command></term>
903 <listitem>
904 <para>is a tool for backing up or validating the integrity of
905 <application>Samba</application> <filename>.tdb</filename>
906 files.</para>
907 <indexterm zone="samba3 tdbbackup">
908 <primary sortas="b-tdbbackup">tdbbackup</primary>
909 </indexterm>
910 </listitem>
911 </varlistentry>
912
913 <varlistentry id="tdbdump">
914 <term><command>tdbdump</command></term>
915 <listitem>
916 <para> is a tool used to print the contents of a
917 <application>Samba</application> <filename>.tdb</filename>
918 file.</para>
919 <indexterm zone="samba3 tdbdump">
920 <primary sortas="b-tdbdump">tdbdump</primary>
921 </indexterm>
922 </listitem>
923 </varlistentry>
924
925 <varlistentry id="tdbtool">
926 <term><command>tdbtool</command></term>
927 <listitem>
928 <para>is a tool which allows simple database manipulation from the
929 command line.</para>
930 <indexterm zone="samba3 tdbtool">
931 <primary sortas="b-tdbtool">tdbtool</primary>
932 </indexterm>
933 </listitem>
934 </varlistentry>
935
936 <varlistentry id="testparm">
937 <term><command>testparm</command></term>
938 <listitem>
939 <para>checks an <filename>smb.conf</filename> file for proper
940 syntax.</para>
941 <indexterm zone="samba3 testparm">
942 <primary sortas="b-testparm">testparm</primary>
943 </indexterm>
944 </listitem>
945 </varlistentry>
946
947 <varlistentry id="testprns">
948 <term><command>testprns</command></term>
949 <listitem>
950 <para>tests printer names.</para>
951 <indexterm zone="samba3 testprns">
952 <primary sortas="b-testprns">testprns</primary>
953 </indexterm>
954 </listitem>
955 </varlistentry>
956
957 <varlistentry id="wbinfo">
958 <term><command>wbinfo</command></term>
959 <listitem>
960 <para>queries a running <command>winbindd</command> daemon.</para>
961 <indexterm zone="samba3 wbinfo">
962 <primary sortas="b-wbinfo">wbinfo</primary>
963 </indexterm>
964 </listitem>
965 </varlistentry>
966
967 <varlistentry id="winbindd">
968 <term><command>winbindd</command></term>
969 <listitem>
970 <para>resolves names from Windows NT servers.</para>
971 <indexterm zone="samba3 winbindd">
972 <primary sortas="b-winbindd">winbindd</primary>
973 </indexterm>
974 </listitem>
975 </varlistentry>
976
977 </variablelist>
978
979 </sect2>
980
981</sect1>
Note: See TracBrowser for help on using the repository browser.