source: server/major/samba3.xml@ fc290c7

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 12.2 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gimp3 gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/for-12.3 xry111/intltool xry111/llvm18 xry111/soup3 xry111/spidermonkey128 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since fc290c7 was fc290c7, checked in by Randy McMurchy <randy@…>, 19 years ago

Added a Samba-client instruction page; updated the Samba server instructions with Alexander's comments; added an Stunnel-less SWAT setup in the Samba server instructions; removed Stunnel as a dependency of Samba server

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4551 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 36.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
8 <!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
9 <!ENTITY samba3-md5sum "ebee37e66a8b5f6fd328967dc09088e8">
10 <!ENTITY samba3-size "15.6 MB">
11 <!ENTITY samba3-buildsize "147 MB">
12 <!ENTITY samba3-time "2.21 SBU">
13]>
14
15<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
16 <?dbhtml filename="samba3.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Samba-&samba3-version;</title>
24
25 <indexterm zone="samba3">
26 <primary sortas="a-Samba">Samba</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Samba</title>
31
32 <para>The <application>Samba</application> package provides file and print
33 services to SMB/CIFS clients and Windows networking to Linux clients.
34 <application>Samba</application> can also be configured as a Windows NT
35 4.0 Domain Controller replacement (with caveats working with NT PDC's and
36 BDC's), a file/print server acting as a member of a Windows NT 4.0 or
37 Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which
38 amongst other things provides LAN browsing support).</para>
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>Download (HTTP): <ulink url="&samba3-download-http;"/></para>
44 </listitem>
45 <listitem>
46 <para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download MD5 sum: &samba3-md5sum;</para>
50 </listitem>
51 <listitem>
52 <para>Download size: &samba3-size;</para>
53 </listitem>
54 <listitem>
55 <para>Estimated disk space required: &samba3-buildsize;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated build time: &samba3-time;</para>
59 </listitem>
60 </itemizedlist>
61
62 <bridgehead renderas="sect3">Samba Dependencies</bridgehead>
63
64 <bridgehead renderas="sect4">Optional</bridgehead>
65 <para><xref linkend="popt"/>,
66 <xref linkend="Linux_PAM"/>,
67 <xref linkend="openldap"/>,
68 <xref linkend="cups"/>,
69 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
70 <xref linkend="libxml2"/>,
71 <xref linkend="mysql"/> or <xref linkend="postgresql"/>,
72 <xref linkend="python"/>,
73 <xref linkend="xinetd"/>,
74 <xref linkend="xfs"/> and
75 <ulink url="http://valgrind.kde.org/">Valgrind</ulink></para>
76
77 </sect2>
78
79 <sect2 role="installation">
80 <title>Installation of Samba</title>
81
82 <para>Install <application>Samba</application> by running the following
83 commands:</para>
84
85<screen><userinput>cd source &amp;&amp;
86./configure \
87 --prefix=/usr \
88 --sysconfdir=/etc \
89 --localstatedir=/var \
90 --with-piddir=/var/run \
91 --with-fhs \
92 --with-smbmount &amp;&amp;
93make</userinput></screen>
94
95 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
96
97<screen role="root"><userinput>install -v -m755 -d /var/cache/samba &amp;&amp;
98make install &amp;&amp;
99mv -v /usr/lib/samba/libsmbclient.so /usr/lib &amp;&amp;
100ln -v -sf ../libsmbclient.so /usr/lib/samba &amp;&amp;
101chmod -v 644 /usr/include/libsmbclient.h &amp;&amp;
102install -v -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
103ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
104ln -v -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
105if [ -f nsswitch/pam_winbind.so ]; then
106 install -v -m755 nsswitch/pam_winbind.so /lib/security
107fi &amp;&amp;
108install -v -m644 ../examples/smb.conf.default /etc/samba &amp;&amp;
109install -v -m644 ../docs/*.pdf /usr/share/samba</userinput></screen>
110
111 <note>
112 <para>You may want to run <command>configure</command> with the
113 <option>--help</option> parameter. There may be other parameters
114 needed to take advantage of the optional dependencies.</para>
115 </note>
116
117 </sect2>
118
119 <sect2 role="commands">
120 <title>Command Explanations</title>
121
122 <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
123 file directory to avoid the default of
124 <filename class="directory">/usr/etc</filename>.</para>
125
126 <para><parameter>--localstatedir=/var</parameter>: Sets the variable
127 data directory to avoid the default of
128 <filename class="directory">/usr/var</filename>.</para>
129
130 <para><parameter>--with-fhs</parameter>: Assigns all other file paths in
131 a manner compliant with the Filesystem Hierarchy Standard (FHS).</para>
132
133 <para><parameter>--with-smbmount</parameter>: Orders the creation of an
134 extra binary for use by the <command>mount</command> command so that
135 mounting remote SMB (Windows) shares becomes no more complex than
136 mounting remote NFS shares.</para>
137
138 <para><option>--with-pam</option>: Use this parameter to link
139 <application>Linux-PAM</application> into the build. This
140 also builds the <filename class='libraryfile'>pam_winbind.so</filename>
141 <application>PAM</application> module. You can find
142 instructions on how to configure and use the module by running
143 <command>man winbindd</command>.</para>
144
145 <para><command>install -v -d /var/cache/samba</command>: This directory is
146 needed for proper operation of the <command>smbd</command> and
147 <command>nmbd</command> daemons.</para>
148
149 <para><command>mv -v /usr/lib/samba/libsmbclient.so ...; ln -v -sf
150 ../libsmbclient.so ...</command>: The
151 <filename class='libraryfile'>libsmbclient.so</filename> library is needed
152 by other packages. This command moves it to a location where other packages
153 can find it.</para>
154
155 <para><command>install -v -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
156 The nss libraries are not installed by default. If you intend to use
157 winbindd for domain auth, and/or WINS name resolution,
158 you need these libraries.</para>
159
160 <para><command>ln -v -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
161 and <command>ln -v -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
162 These symlinks are required by glibc to use the NSS
163 libraries.</para>
164
165 <para><command>install -v -m644 ../examples/smb.conf.default
166 /etc/samba</command>: This copies a default <filename>smb.conf</filename>
167 file into <filename>/etc/samba</filename>. This sample configuration will
168 not work until you copy it to <filename>/etc/samba/smb.conf</filename> and
169 make the appropriate changes for your installation. See the configuration
170 section for minimum values which must be set.</para>
171
172 </sect2>
173
174 <sect2 role="configuration">
175 <title>Configuring Samba</title>
176
177 <sect3 id="samba3-config">
178 <title>Config Files</title>
179
180 <para>/etc/samba/smb.conf</para>
181
182 <indexterm zone="samba3 samba3-config">
183 <primary sortas="e-etc-samba-smb.conf">/etc/samba/smb.conf</primary>
184 </indexterm>
185
186 </sect3>
187
188 <sect3>
189 <title>Printing to SMB Clients</title>
190
191 <para>If you use <application>CUPS</application> for print services,
192 and you wish to print to a printer attached to an SMB client, you
193 need to create an SMB backend device. To create the device, issue the
194 following command as the <systemitem class="username">root</systemitem>
195 user:</para>
196
197<screen role="root"><userinput>ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb</userinput></screen>
198
199 </sect3>
200
201 <sect3>
202 <title>Configuration Information</title>
203
204 <para>Due to the complexity and the many various uses for
205 <application>Samba</application>, complete configuration for all the
206 package's cababilities is well beyond the scope of the BLFS book. This
207 section provides instructions to configure the
208 <filename>/etc/samba/smb.conf</filename> file for two common scenarios.
209 The complete contents of <filename>/etc/samba/smb.conf</filename> will
210 depend on the purpose of <application>Samba</application>
211 installation.</para>
212
213 <note>
214 <para>You may find it easier to copy the configuration parameters shown
215 below into an empty <filename>/etc/samba/smb.conf</filename> file
216 instead of copying and editing the default file as mentioned in the
217 <quote>Command Explanations</quote> section. How you create/edit the
218 <filename>/etc/samba/smb.conf</filename> file will be left up to
219 you. Do ensure the file is only writeable by the
220 <systemitem class="username">root</systemitem> user (mode 644).</para>
221 </note>
222
223 <sect4>
224 <title>Scenario 1: Minimal Standalone Client-Only Installation</title>
225
226 <para>Choose this variant if you only want to transfer files using
227 <command>smbclient</command>, mount Windows shares and print to Windows
228 printers, and don't want to share your files and printers to Windows
229 machines.</para>
230
231 <para>A <filename>/etc/samba/smb.conf</filename> file with the following
232 three parameters is sufficient:</para>
233
234<screen role='root'><literal>[global]
235 workgroup = <replaceable>MYGROUP</replaceable>
236 dos charset = <replaceable>cp850</replaceable>
237 unix charset = <replaceable>ISO-8859-1</replaceable></literal></screen>
238
239 <para>The values in this example specify that the computer belongs to a
240 Windows workgroup named
241 <quote><replaceable>MYGROUP</replaceable></quote>, uses the
242 <quote><replaceable>cp850</replaceable></quote> character set on the
243 wire when talking to MS-DOS and MS Windows 9x, and that the filenames
244 are stored in the <quote><replaceable>ISO-8859-1</replaceable></quote>
245 encoding on the disk. Adjust these values appropriately for your
246 installation. The <quote>unix charset</quote> value must be the same as
247 the output of <command>locale charmap</command> when executed with the
248 <envar>LANG</envar> variable set to your preferred locale, otherwise the
249 <command>ls</command> command may not display correct filenames of
250 downloaded files.</para>
251
252 <para>There is no need to run any <application>Samba</application>
253 servers in this scenario, thus you don't need to install the provided
254 bootscripts.</para>
255
256 </sect4>
257
258 <sect4>
259 <title>Scenario 2: Standalone File/Print Server</title>
260
261 <para>Choose this variant if you want to share your files and printers
262 to Windows machines in your workgroup in addition to the capabilities
263 described in Scenario 1.</para>
264
265 <para>In this case, the <filename>/etc/samba/smb.conf.default</filename>
266 file may be a good template to start from. Also add
267 <quote>dos charset</quote> and <quote>unix charset</quote> parameters
268 to the <quote>[global]</quote> section as described in Scenario 1 in
269 order to prevent filename corruption.</para>
270
271 <para>The following configuration file creates a separate share for each
272 user's home directory and also makes all printers available to Windows
273 machines:</para>
274
275<screen role='root'><literal>[global]
276 workgroup = <replaceable>MYGROUP</replaceable>
277 dos charset = <replaceable>cp850</replaceable>
278 unix charset = <replaceable>ISO-8859-1</replaceable>
279
280[homes]
281 comment = Home Directories
282 browseable = no
283 writable = yes
284
285[printers]
286 comment = All Printers
287 path = /var/spool/samba
288 browseable = no
289 guest ok = no
290 printable = yes</literal></screen>
291
292 <para>Other parameters you may wish to customize in the
293 <quote>[global]</quote> section include:</para>
294
295<screen role='root'><literal> server string =
296 security =
297 hosts allow =
298 load printers =
299 log file =
300 max log size =
301 socket options =
302 local master =</literal></screen>
303
304 <para>Reference the comments in the
305 <filename>/etc/samba/smb.conf.default</filename> file for information
306 regarding these parameters.</para>
307
308 <para>Since the <command>smbd</command> and <command>nmbd</command>
309 daemons are needed in this case, install the <filename>samba</filename>
310 bootscript. Be sure to run <command>smbpasswd</command> (with the
311 <option>-a</option> option to add users) to enable and
312 set passwords for all accounts that need
313 <application>Samba</application> access, or use the SWAT web interface
314 (see below) to do the same. Using the default
315 <application>Samba</application> passdb backend, any user you attempt
316 to add will also be required to exist in the
317 <filename>/etc/passwd</filename> file.</para>
318
319 </sect4>
320
321 <sect4>
322 <title>Advanced Requirements</title>
323
324 <para>More complex scenarios involving domain control or membership are
325 possible if the right flags are passed to the ./configure script when
326 the package is built. Such setups are advanced topics and cannot be
327 adequately covered in BLFS. Many complete books have been written on
328 these topics alone. It should be noted, however, that a
329 <application>Samba</application> BDC cannot be used as a fallback
330 for a Windows PDC, and conversely, a Windows BDC cannot be used as a
331 fallback for a <application>Samba</application> PDC. Also in some
332 domain mambership scenarios, the <command>winbindd</command> daemon and
333 the corresponding bootscript are needed.</para>
334
335 <para>There is quite a bit of documentation available which covers many
336 of these advanced configurations. Point your web browser to the links
337 below to view some of the documentation included with the
338 <application>Samba</application> package:</para>
339
340 <itemizedlist spacing='compact'>
341 <listitem>
342 <para>Using Samba, 2nd Edition; a popular book published by O'Reilly
343 <ulink url="file:///usr/share/samba/swat/using_samba/toc.html"/></para>
344 </listitem>
345 <listitem>
346 <para>The Official Samba HOWTO and Reference Guide <ulink
347 url="file:///usr/share/samba/swat/help/Samba-HOWTO-Collection/index.html"/>
348 </para>
349 </listitem>
350 <listitem>
351 <para>Samba-3 by Example
352 <ulink url="file:///usr/share/samba/swat/help/Samba-Guide/index.html"/>
353 </para>
354 </listitem>
355 <listitem>
356 <para>The Samba-3 man Pages
357 <ulink url="file:///usr/share/samba/swat/help/samba.7.html"/></para>
358 </listitem>
359 </itemizedlist>
360
361 </sect4>
362
363 </sect3>
364
365 <sect3 id="samba3-swat-config">
366 <title>Configuring SWAT</title>
367
368 <para>The built in SWAT (<application>Samba</application> Web
369 Administration Tool) utility can be used for basic configuration of
370 the <application>Samba</application> installation, but because it may
371 be inconvenient, undesireable or perhaps even impossible to gain
372 access to the console, BLFS recommends setting up access to SWAT using
373 <application>Stunnel</application>. Without
374 <application>Stunnel</application>, the
375 <systemitem class="username">root</systemitem> password is transmitted
376 in clear text over the wire, and is considered an unacceptable security
377 risk. After considering the security implications of using SWAT without
378 <application>Stunnel</application>, and you still wish to implement SWAT
379 without it, instructions are provided at this end of this section.</para>
380
381 <indexterm zone="samba3 samba3-swat-config">
382 <primary sortas="g-SWAT">SWAT</primary>
383 </indexterm>
384
385 <sect4>
386 <title>Setting up SWAT using Stunnel</title>
387
388 <para>First install, or ensure you have already installed, the
389 <xref linkend="stunnel"/> package.</para>
390
391 <para>Next you must add entries to <filename>/etc/services</filename>
392 and modify the <command>inetd</command>/<command>xinetd</command>
393 configuration.</para>
394
395 <indexterm zone="samba3 samba3-swat-config">
396 <primary sortas="e-etc-services">/etc/services</primary>
397 </indexterm>
398
399 <indexterm zone="samba3 samba3-swat-config">
400 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
401 </indexterm>
402
403 <indexterm zone="samba3 samba3-swat-config">
404 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
405 </indexterm>
406
407 <para>Add swat and swat_tunnel entries to
408 <filename>/etc/services</filename> with the following commands issued
409 as the <systemitem class="username">root</systemitem> user:</para>
410
411<screen role="root"><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services &amp;&amp;
412echo "swat_tunnel 902/tcp" &gt;&gt; /etc/services</userinput></screen>
413
414 <para>If <command>inetd</command> is used, the following command will
415 add the swat_tunnel entry to <filename>/etc/inetd.conf</filename> (as
416 user <systemitem class="username">root</systemitem>):</para>
417
418<screen role="root"><userinput>echo "swat_tunnel stream tcp nowait.400 root /usr/sbin/swat swat" \
419 &gt;&gt; /etc/inetd.conf</userinput></screen>
420
421 <para>Issue a <command>killall -HUP inetd</command> to reread the
422 changed <filename>inetd.conf</filename> file.</para>
423
424 <para>If you use <command>xinetd</command>, the following command will
425 create the <application>Samba</application> file as
426 <filename>/etc/xinetd.d/swat_tunnel</filename> (you may need to modify
427 or remove the <quote>only_from</quote> line to include the desired
428 host[s]):</para>
429
430<screen role="root"><userinput>cat &gt;&gt; /etc/xinetd.d/swat_tunnel &lt;&lt; "EOF"
431<literal># Begin /etc/xinetd.d/swat_tunnel
432
433service swat_tunnel
434{
435 port = 902
436 socket_type = stream
437 wait = no
438 only_from = 127.0.0.1
439 user = root
440 server = /usr/sbin/swat
441 log_on_failure += USERID
442}
443
444# End /etc/xinetd.d/swat_tunnel</literal>
445EOF</userinput></screen>
446
447 <indexterm zone="samba3 samba3-swat-config">
448 <primary sortas="e-etc-xinetd.d-swat-tunnel">/etc/xinetd.d/swat_tunnel</primary>
449 </indexterm>
450
451 <para>Issue a <command>killall -HUP xinetd</command> to read the new
452 <filename>/etc/xinetd.d/swat_tunnel</filename> file.</para>
453
454 <para>Next, you must add an entry for the swat service to the
455 <filename>/etc/stunnel/stunnel.conf</filename> file (as user
456 <systemitem class="username">root</systemitem>):</para>
457
458 <indexterm zone="samba3 samba3-swat-config">
459 <primary sortas="e-etc-stunnel-stunnel.conf">/etc/stunnel/stunnel.conf</primary>
460 </indexterm>
461
462<screen role="root"><userinput>cat &gt;&gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
463<literal>[swat]
464accept = 901
465connect = 902</literal>
466
467EOF</userinput></screen>
468
469 <para>Restart the <command>stunnel</command> daemon using the following
470 command as the <systemitem class="username">root</systemitem> user:</para>
471
472<screen role="root"><userinput>/etc/rc.d/init.d/stunnel restart</userinput></screen>
473
474 <para>SWAT can be launched by pointing your web browser to
475 <uri>https://<replaceable>[CA_DN_field]</replaceable>:901</uri>.
476 Substitute the hostname listed in the DN field of the CA certificate
477 used with <application>Stunnel</application> for
478 <replaceable>[CA_DN_field]</replaceable>.</para>
479
480 </sect4>
481
482 <sect4>
483 <title>Setting up SWAT without Stunnel</title>
484
485 <warning>
486 <para>BLFS does not recommend using these procedures because of the
487 security risk involved. However, in a home network environment and
488 disclosure of the root password is an acceptable risk, the following
489 instructions are provided for your convenience.</para>
490 </warning>
491
492 <para>Add a swat entry to <filename>/etc/services</filename> with the
493 following command issued as the
494 <systemitem class='username'>root</systemitem> user:</para>
495
496<screen role='root'><userinput>echo "swat 901/tcp" &gt;&gt; /etc/services</userinput></screen>
497
498 <para>If <command>inetd</command> is used, the following command
499 issed as the <systemitem class='username'>root</systemitem> user will
500 add a swat entry to the <filename>/etc/inetd.conf</filename> file:</para>
501
502<screen role='root'><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
503 &gt;&gt; /etc/inetd.conf</userinput></screen>
504
505 <para>Issue a <command>killall -HUP inetd</command> to reread the
506 changed <filename>inetd.conf</filename> file.</para>
507
508 <para>If <command>xinetd</command> is used, the following command
509 issued as the <systemitem class='username'>root</systemitem> user
510 will create an <filename>/etc/xinetd.d/swat</filename> file:</para>
511
512<screen role='root'><userinput>cat &gt;&gt; /etc/xinetd.d/swat &lt;&lt; "EOF"
513<literal># Begin /etc/xinetd.d/swat
514
515service swat
516{
517 port = 901
518 socket_type = stream
519 wait = no
520 only_from = 127.0.0.1
521 user = root
522 server = /usr/sbin/swat
523 log_on_failure += USERID
524}
525
526# End /etc/xinetd.d/swat</literal>
527EOF</userinput></screen>
528
529 <para>Issue a <command>killall -HUP xinetd</command> to read the
530 new <filename>/etc/xinetd.d/swat</filename> file.</para>
531
532 <para>SWAT can be launched by pointing your web browser to
533 http://localhost:901.</para>
534
535 </sect4>
536
537 </sect3>
538
539 <sect3>
540 <title/>
541
542 <note>
543 <para>If you linked <application>Linux-PAM</application> into the
544 <application>Samba</application> build, you'll need to create an
545 <filename>/etc/pam.d/samba</filename> file.</para>
546 </note>
547
548 <indexterm zone="samba3 samba3-swat-config">
549 <primary sortas="e-etc-pam.d-samba">/etc/pam.d/samba</primary>
550 </indexterm>
551
552 </sect3>
553
554 <sect3 id="samba3-init">
555 <title>Boot Script</title>
556
557 <para>For your convenience, boot scripts have been provided for
558 <application>Samba</application>. There are two included in the
559 <xref linkend="intro-important-bootscripts"/> package. The first,
560 <filename>samba</filename>, will start the <command>smbd</command>
561 and <command>nmbd</command> daemons needed to provide SMB/CIFS
562 services. The second script, <filename>winbind</filename>, starts
563 the <command>winbindd</command> daemon, used for providing Windows
564 domain services to Linux clients.</para>
565
566 <indexterm zone="samba3 samba3-init">
567 <primary sortas="f-samba">samba</primary>
568 </indexterm>
569
570 <indexterm zone="samba3 samba3-init">
571 <primary sortas="f-winbind">winbind</primary>
572 </indexterm>
573
574 <para>The default <application>Samba</application> installation uses the
575 <systemitem class='username'>nobody</systemitem> user for guest access
576 to the server. This can be overridden by setting the
577 <option>guest account =</option> parameter in the
578 <filename>/etc/samba/smb.conf</filename> file. If you utilize the
579 <option>guest account =</option> parameter, ensure this user exists in
580 the <filename>/etc/passwd</filename> file. To use the default user,
581 issue the following commands as the
582 <systemitem class='username'>root</systemitem> user:</para>
583
584<screen><userinput>groupadd -g 99 nogroup &amp;&amp;
585useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
586 -s /bin/false -u 99 nobody</userinput></screen>
587
588 <para>Install the <filename>samba</filename> script with the following
589 command issued as the <systemitem class="username">root</systemitem>
590 user:</para>
591
592<screen role="root"><userinput>make install-samba</userinput></screen>
593
594 <para>If you also need the <filename>winbind</filename>
595 script:</para>
596
597<screen role="root"><userinput>make install-winbind</userinput></screen>
598
599 </sect3>
600
601 </sect2>
602
603 <sect2 role="content">
604 <title>Contents</title>
605
606 <segmentedlist>
607 <segtitle>Installed Programs</segtitle>
608 <segtitle>Installed Libraries</segtitle>
609 <segtitle>Installed Directories</segtitle>
610
611 <seglistitem>
612 <seg>findsmb, mount.smbfs, net, nmbd, nmblookup, ntlm_auth, pdbedit,
613 profiles, rpcclient, smbcacls, smbclient, smbcontrol, smbcquotas, smbd,
614 smbmnt, smbmount, smbpasswd, smbspool, smbstatus, smbtar, smbtree,
615 smbumount, swat, tdbbackup, tdbdump, tdbtool, testparm, testprns,
616 wbinfo, and winbindd</seg>
617 <seg>libnss_winbind.so, libnss_wins.so, libsmbclient.so, the
618 pam_winbind.so PAM library and assorted character set,
619 filesystem and support modules.</seg>
620 <seg>/etc/samba, /usr/lib/samba, /usr/share/samba, /var/cache/samba,
621 and /var/lib/samba</seg>
622 </seglistitem>
623 </segmentedlist>
624
625 <variablelist>
626 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
627 <?dbfo list-presentation="list"?>
628 <?dbhtml list-presentation="table"?>
629
630 <varlistentry id="findsmb">
631 <term><command>findsmb</command></term>
632 <listitem>
633 <para>lists information about machines that respond to
634 SMB name queries on a subnet.</para>
635 <indexterm zone="samba3 findsmb">
636 <primary sortas="b-findsmb">findsmb</primary>
637 </indexterm>
638 </listitem>
639 </varlistentry>
640
641 <varlistentry id="mount.smbfs">
642 <term><command>mount.smbfs</command></term>
643 <listitem>
644 <para>is a symlink to <command>mountsmb</command> which provides
645 <command>/bin/mount</command> with a way to mount remote Windows
646 (or <application>Samba</application>) fileshares.</para>
647 <indexterm zone="samba3 mount.smbfs">
648 <primary sortas="b-mount.smbfs">mount.smbfs</primary>
649 </indexterm>
650 </listitem>
651 </varlistentry>
652
653 <varlistentry id="net">
654 <term><command>net</command></term>
655 <listitem>
656 <para>is a tool for administration of
657 <application>Samba</application> and remote CIFS servers, similar
658 to the <command>net</command> utility for DOS/Windows.</para>
659 <indexterm zone="samba3 net">
660 <primary sortas="b-net">net</primary>
661 </indexterm>
662 </listitem>
663 </varlistentry>
664
665 <varlistentry id="nmbd">
666 <term><command>nmbd</command></term>
667 <listitem>
668 <para>is the <application>Samba</application>
669 NetBIOS name server.</para>
670 <indexterm zone="samba3 nmbd">
671 <primary sortas="b-nmbd">nmbd</primary>
672 </indexterm>
673 </listitem>
674 </varlistentry>
675
676 <varlistentry id="nmblookup">
677 <term><command>nmblookup</command></term>
678 <listitem>
679 <para>is used to query NetBIOS names and map
680 them to IP addresses.</para>
681 <indexterm zone="samba3 nmblookup">
682 <primary sortas="b-nmblookup">nmblookup</primary>
683 </indexterm>
684 </listitem>
685 </varlistentry>
686
687 <varlistentry id="ntlm_auth">
688 <term><command>ntlm_auth</command></term>
689 <listitem>
690 <para>is a tool to allow external access to Winbind's
691 NTLM authentication function.</para>
692 <indexterm zone="samba3 ntlm_auth">
693 <primary sortas="b-ntlm_auth">ntlm_auth</primary>
694 </indexterm>
695 </listitem>
696 </varlistentry>
697
698 <varlistentry id="pdbedit">
699 <term><command>pdbedit</command></term>
700 <listitem>
701 <para>is a tool used to manage the SAM database.</para>
702 <indexterm zone="samba3 pdbedit">
703 <primary sortas="b-pdbedit">pdbedit</primary>
704 </indexterm>
705 </listitem>
706 </varlistentry>
707
708 <varlistentry id="profiles">
709 <term><command>profiles</command></term>
710 <listitem>
711 <para>is a utility that reports and changes SIDs in Windows
712 registry files. It currently only supports Windows NT.</para>
713 <indexterm zone="samba3 profiles">
714 <primary sortas="b-profiles">profiles</primary>
715 </indexterm>
716 </listitem>
717 </varlistentry>
718
719 <varlistentry id="rpcclient">
720 <term><command>rpcclient</command></term>
721 <listitem>
722 <para>is used to execute MS-RPC client side functions.</para>
723 <indexterm zone="samba3 rpcclient">
724 <primary sortas="b-rpcclient">rpcclient</primary>
725 </indexterm>
726 </listitem>
727 </varlistentry>
728
729 <varlistentry id="smbcacls">
730 <term><command>smbcacls</command></term>
731 <listitem>
732 <para>is used to manipulate Windows NT access control lists.</para>
733 <indexterm zone="samba3 smbcacls">
734 <primary sortas="b-smbcacls">smbcacls</primary>
735 </indexterm>
736 </listitem>
737 </varlistentry>
738
739 <varlistentry id="smbclient">
740 <term><command>smbclient</command></term>
741 <listitem>
742 <para>is a SMB/CIFS access utility, similar to FTP.</para>
743 <indexterm zone="samba3 smbclient">
744 <primary sortas="b-smbclient">smbclient</primary>
745 </indexterm>
746 </listitem>
747 </varlistentry>
748
749 <varlistentry id="smbcontrol">
750 <term><command>smbcontrol</command></term>
751 <listitem>
752 <para>is used to control running <command>smbd</command>,
753 <command>nmbd</command> and <command>winbindd</command>
754 daemons.</para>
755 <indexterm zone="samba3 smbcontrol">
756 <primary sortas="b-smbcontrol">smbcontrol</primary>
757 </indexterm>
758 </listitem>
759 </varlistentry>
760
761 <varlistentry id="smbcquotas">
762 <term><command>smbcquotas</command></term>
763 <listitem>
764 <para>is used to manipulate Windows NT quotas on
765 SMB file shares.</para>
766 <indexterm zone="samba3 smbcquotas">
767 <primary sortas="b-smbcquotas">smbcquotas</primary>
768 </indexterm>
769 </listitem>
770 </varlistentry>
771
772 <varlistentry id="smbd">
773 <term><command>smbd</command></term>
774 <listitem>
775 <para>is the main <application>Samba</application> daemon which
776 provides SMB/CIFS services to clients.</para>
777 <indexterm zone="samba3 smbd">
778 <primary sortas="b-smbd">smbd</primary>
779 </indexterm>
780 </listitem>
781 </varlistentry>
782
783 <varlistentry id="smbmnt">
784 <term><command>smbmnt</command></term>
785 <listitem>
786 <para>is a helper application used by the
787 <command>smbmount</command> program to do the actual mounting of
788 SMB shares. It can be installed setuid root if you want
789 normal users to be able to mount their SMB shares.</para>
790 <indexterm zone="samba3 smbmnt">
791 <primary sortas="b-smbmnt">smbmnt</primary>
792 </indexterm>
793 </listitem>
794 </varlistentry>
795
796 <varlistentry id="smbmount">
797 <term><command>smbmount</command></term>
798 <listitem>
799 <para>is usually invoked as <command>mount.smbfs</command> by the
800 <command>mount</command> command when using the
801 <parameter>-t smbfs</parameter> option, mounts a Linux SMB
802 filesystem.</para>
803 <indexterm zone="samba3 smbmount">
804 <primary sortas="b-smbmount">smbmount</primary>
805 </indexterm>
806 </listitem>
807 </varlistentry>
808
809 <varlistentry id="smbpasswd">
810 <term><command>smbpasswd</command></term>
811 <listitem>
812 <para>changes a user's <application>Samba</application>
813 password.</para>
814 <indexterm zone="samba3 smbpasswd">
815 <primary sortas="b-smbpasswd">smbpasswd</primary>
816 </indexterm>
817 </listitem>
818 </varlistentry>
819
820 <varlistentry id="smbspool">
821 <term><command>smbspool</command></term>
822 <listitem>
823 <para>sends a print job to an SMB printer.</para>
824 <indexterm zone="samba3 smbspool">
825 <primary sortas="b-smbspool">smbspool</primary>
826 </indexterm>
827 </listitem>
828 </varlistentry>
829
830 <varlistentry id="smbstatus">
831 <term><command>smbstatus</command></term>
832 <listitem>
833 <para>reports current <application>Samba</application>
834 connections.</para>
835 <indexterm zone="samba3 smbstatus">
836 <primary sortas="b-smbstatus">smbstatus</primary>
837 </indexterm>
838 </listitem>
839 </varlistentry>
840
841 <varlistentry id="smbtar">
842 <term><command>smbtar</command></term>
843 <listitem>
844 <para>is a shell script used for backing up SMB/CIFS shares
845 directly to Linux tape drives or a file.</para>
846 <indexterm zone="samba3 smbtar">
847 <primary sortas="b-smbtar">smbtar</primary>
848 </indexterm>
849 </listitem>
850 </varlistentry>
851
852 <varlistentry id="smbtree">
853 <term><command>smbtree</command></term>
854 <listitem>
855 <para>is a text-based SMB network browser.</para>
856 <indexterm zone="samba3 smbtree">
857 <primary sortas="b-smbtree">smbtree</primary>
858 </indexterm>
859 </listitem>
860 </varlistentry>
861
862 <varlistentry id="smbumount">
863 <term><command>smbumount</command></term>
864 <listitem>
865 <para>is used by normal users to unmount SMB filesystems,
866 provided that it is setuid root.</para>
867 <indexterm zone="samba3 smbumount">
868 <primary sortas="b-smbumount">smbumount</primary>
869 </indexterm>
870 </listitem>
871 </varlistentry>
872
873 <varlistentry id="swat">
874 <term><command>swat</command></term>
875 <listitem>
876 <para>is the <application>Samba</application> Web Administration
877 Tool.</para>
878 <indexterm zone="samba3 swat">
879 <primary sortas="b-swat">swat</primary>
880 </indexterm>
881 </listitem>
882 </varlistentry>
883
884 <varlistentry id="tdbbackup">
885 <term><command>tdbbackup</command></term>
886 <listitem>
887 <para>is a tool for backing up or validating the integrity of
888 <application>Samba</application> <filename>.tdb</filename>
889 files.</para>
890 <indexterm zone="samba3 tdbbackup">
891 <primary sortas="b-tdbbackup">tdbbackup</primary>
892 </indexterm>
893 </listitem>
894 </varlistentry>
895
896 <varlistentry id="tdbdump">
897 <term><command>tdbdump</command></term>
898 <listitem>
899 <para> is a tool used to print the contents of a
900 <application>Samba</application> <filename>.tdb</filename>
901 file.</para>
902 <indexterm zone="samba3 tdbdump">
903 <primary sortas="b-tdbdump">tdbdump</primary>
904 </indexterm>
905 </listitem>
906 </varlistentry>
907
908 <varlistentry id="tdbtool">
909 <term><command>tdbtool</command></term>
910 <listitem>
911 <para>is a tool which allows simple database manipulation from the
912 command line.</para>
913 <indexterm zone="samba3 tdbtool">
914 <primary sortas="b-tdbtool">tdbtool</primary>
915 </indexterm>
916 </listitem>
917 </varlistentry>
918
919 <varlistentry id="testparm">
920 <term><command>testparm</command></term>
921 <listitem>
922 <para>checks an <filename>smb.conf</filename> file for proper
923 syntax.</para>
924 <indexterm zone="samba3 testparm">
925 <primary sortas="b-testparm">testparm</primary>
926 </indexterm>
927 </listitem>
928 </varlistentry>
929
930 <varlistentry id="testprns">
931 <term><command>testprns</command></term>
932 <listitem>
933 <para>tests printer names.</para>
934 <indexterm zone="samba3 testprns">
935 <primary sortas="b-testprns">testprns</primary>
936 </indexterm>
937 </listitem>
938 </varlistentry>
939
940 <varlistentry id="wbinfo">
941 <term><command>wbinfo</command></term>
942 <listitem>
943 <para>queries a running <command>winbindd</command> daemon.</para>
944 <indexterm zone="samba3 wbinfo">
945 <primary sortas="b-wbinfo">wbinfo</primary>
946 </indexterm>
947 </listitem>
948 </varlistentry>
949
950 <varlistentry id="winbindd">
951 <term><command>winbindd</command></term>
952 <listitem>
953 <para>resolves names from Windows NT servers.</para>
954 <indexterm zone="samba3 winbindd">
955 <primary sortas="b-winbindd">winbindd</primary>
956 </indexterm>
957 </listitem>
958 </varlistentry>
959
960 </variablelist>
961
962 </sect2>
963
964</sect1>
Note: See TracBrowser for help on using the repository browser.