Using Samba. A File & Print Server for Linux, Unix & Mac OS X. 3rd Edition (e-book) Gliwice

This book is the comprehensive guide to Samba administration, officially adopted by the Samba Team. Wondering how to integrate Samba's authentication with that of a Windows domain? How to get Samba to serve Microsoft Dfs shares? How to share files on Mac OS X? These and a dozen other issues of interest to system administrators are covered. A whole chapter is dedicated to troubleshooting! The range of this book knows few bounds. Using Samba takes you from basic installation and configuration -- on both the client and server side, for a wide range of systems -- to subtle details of security, cross-platform compatibility, and resource discovery that make the difference between whether users see the folder they expect or a cryptic error message.The current edition covers such advanced 3.x features as:Integration with Active Directory and OpenLDAPMigrating from Windows NT 4.0 domains to SambaDelegating administrative tasks to non-root usersCentral printer managementAdvanced file serving features, such as making use of Virtual File System (VFS) plugins.Samba is a cross-platform triumph: robust, flexible and fast, it turns a Unix or Linux system into a file and print server for Microsoft Windows network clients. This book will help you make your file and print sharing as powerful and efficient as possible. The authors delve into the internals of the Windows activities and protocols to an unprecedented degree, explaining the strengths and weaknesses of each feature in Windows domains and in Samba itself.Whether you're playing on your personal computer or an enterprise network, on one note or a full three-octave range, Using Samba will give you an efficient and secure server. Spis treści: Using Samba, 3rd Edition Preface Audience for This Book How This Book Is Organized Conventions Used in This Book Using Code Examples How to Contact Us Safari Enabled Acknowledgments Gerald Carter Jay Ts Robert Eckstein All 1. An Introduction to Samba 1.1. What Is Samba? 1.2. What Can Samba Do for Me? 1.2.1. Sharing Files 1.2.2. Sharing a Printer 1.2.3. Seeing Things from the Unix Side 1.3. The Common Internet File System 1.3.1. Understanding NetBIOS 1.3.2. Getting a Name 1.3.3. Node Types 1.3.4. Whats in a Name? 1.3.4.1. Resource names and types 1.3.4.2. Group names and types 1.3.5. Datagrams and Sessions 1.4. Connecting to a CIFS File Share 1.5. Browsing 1.5.1. Browsing Elections 1.6. Authentication: Peer-to-Peer Versus Domains 1.7. Whats in Samba 3.0? 1.7.1. Windows NT Domain Controller Support 1.7.2. Active Directory Domain Member Servers 1.7.3. Local Nested Groups 1.7.4. Unicode and Internationalization 1.7.5. User and Group Account Storage Plug-in Modules 1.7.6. Stackable Virtual File System (VFS) Modules 1.7.7. User Privileges 1.7.8. Windows Automatic Driver Downloads 1.7.9. But Wait, Theres More 1.8. Future Research in Samba 4.0 1.9. What Can Samba Do? 1.10. An Overview of the Samba Distribution 1.11. How Can I Get Samba? 2. Installing Samba on a Unix System 2.1. Binary Packages 2.2. Compiling from Source 2.2.1. Downloading the Source Distribution 2.2.2. Read the Documentation 2.2.3. Configuring Samba 2.2.4. Kerberos and LDAP 2.2.5. Unicode and the iconv Library 2.3. Compiling and Installing Samba 2.3.1. Upgrading Your Installation 2.3.2. Reconfiguring Samba 2.3.3. Setting Search Paths 2.4. Enabling the Samba Web Administration Tool (SWAT) 2.5. A Basic Samba Configuration File 2.5.1. Encrypted Passwords 2.5.2. Using SWAT to Create an smb.conf File 2.5.3. Testing the Configuration File 2.6. Firewall Configuration 2.7. Starting the Samba Daemons 2.7.1. Starting the Daemons Manually 2.7.2. Automatic Startup 2.7.2.1. BSD Unix 2.7.2.2. System V Unix and most Linux distributions 2.7.2.3. Mac OS X 2.7.2.4. Testing automatic startup 2.7.3. Starting from inetd/xinetd 2.7.4. Testing the Samba Daemons 3. Configuring Windows Clients 3.1. Windows Networking Concepts 3.1.1. Networking Components 3.1.2. IP Address 3.1.3. Name Resolution 3.1.3.1. Windows LMHOSTS and HOSTS 3.2. Windows Setup 3.2.1. Networking Components 3.2.2. Configuring TCP/IP 3.2.2.1. IP address and DNS servers 3.2.2.2. WINS server 3.2.3. Computer and Workgroup Names 3.2.4. Connecting to the Samba Server 3.2.5. Creating Local Users on Window Clients 3.2.6. Browsing the Samba Server 4. The Samba Configuration File 4.1. Basic Syntax and Rules 4.1.1. Configuration File Structure 4.1.1.1. Whitespace, delimiters, and capitalization 4.1.1.2. Line continuation 4.1.1.3. Comments 4.1.2. Updating a Live System 4.1.3. Variables 4.2. Special Sections 4.2.1. The [global] Section 4.2.2. The [homes] Section 4.2.3. The [printers] Section 4.3. Configuration File Options 4.3.1. config file 4.3.2. include 4.3.3. copy 4.4. Basic Server Configuration 4.4.1. Server Configuration Options 4.4.1.1. netbios name 4.4.1.2. workgroup 4.4.1.3. server string 4.5. Disk Share Configuration 4.5.1. Disk Share Configuration Options 4.5.1.1. path 4.5.1.2. comment 4.5.1.3. volume 4.5.1.4. read only, writable 4.6. Networking Options with Samba 4.6.1. Networking Options 4.6.1.1. hosts allow 4.6.1.2. hosts deny 4.6.1.3. interfaces 4.6.1.4. bind interfaces only 4.7. Virtual Servers 4.7.1. Virtual Server Configuration Options 4.7.1.1. netbios aliases 4.7.1.2. smb ports 4.8. Logging Configuration Options 4.8.1. Using syslog 4.8.2. Logging Configuration Options 4.8.2.1. log file 4.8.2.2. log level 4.8.2.3. max log size 4.8.2.4. debug timestamp 4.8.2.5. debug pid, debug uid 4.8.2.6. syslog 4.8.2.7. syslog only 5. Accounts, Authentication, and Authorization 5.1. Security Modes 5.1.1. Guest Access with security = user 5.1.2. Passwords and Authentication 5.1.2.1. Clear-text passwords 5.1.2.2. Pluggable Authentication Modules (PAM) 5.1.2.3. NTLMv1 5.1.2.4. NTLMv2 5.2. User Management 5.2.1. Security Identifiers 5.2.2. Account Storage 5.2.2.1. passdb backend = smbpasswd 5.2.2.2. passdb backend = tdbsam 5.2.2.3. passdb backend = ldapsam 5.2.3. Username Maps 5.2.4. Account Utilities 5.2.5. Synchronizing Passwords 5.3. Group Mapping 5.4. User Privilege Management 5.4.1. The net Tool 5.5. Controlling Authorization for File Shares 6. Advanced Disk Shares 6.1. Special Share Names 6.2. Filesystem Differences 6.2.1. Name Mangling and Filename Lengths 6.2.2. Case Sensitivity and Preservation 6.2.3. Symbolic Links 6.2.4. Hiding Files 6.2.5. Locks and Leases 6.2.6. DOS Attributes 6.2.6.1. DOS attributes and Unix permissions bits 6.2.6.2. DOS attributes and Unix extended attributes 6.2.7. Permissions 6.3. Access Control Lists 6.3.1. Whats in a POSIX ACL? 6.3.2. The nt acl support Parameter 6.3.3. Understanding the Explorer Security Tab 6.4. Microsoft Distributed File Systems 6.5. Virtual File Systems 6.6. Executing Server Scripts 7. Printing 7.1. Print Shares 7.2. A Usable Print Share 7.3. Samba and CUPS 7.4. The [printers] Service 7.5. Enabling SMB Printer Sharing in OS X 7.6. Creating a PDF Printer 7.7. Managing Windows Print Drivers 7.7.1. Point and Print Prerequisites 7.7.2. Installing Print Drivers 7.7.3. Assigning Print Drivers and Initializing DeviceModes 7.7.4. Testing Point and Print 7.8. Printers and Security 7.9. Disabling Point and Print 7.10. Printing, Queue Lists, and tdb Files 7.11. Printing to Windows Printers 7.11.1. Sharing Windows Printers 7.11.2. Adding a Unix Printer 7.11.2.1. BSD printers 7.11.2.2. System V printers 7.11.2.3. CUPS printers 7.12. Printing Parameters 8. Name Resolution and Network Browsing 8.1. Name Resolution 8.1.1. WINS Clients and Server Interaction 8.1.2. Setting Up Samba As a WINS Server 8.1.2.1. Proxying name resolution requests to DNS 8.1.2.2. Catching WINS database modifications 8.1.3. Setting Up Samba to Use Another WINS Server 8.1.3.1. Configuring a WINS proxy 8.1.4. The lmhosts File 8.1.5. Configuring Name Resolution for the Samba Suite 8.1.6. Name-Resolution Configuration Options 8.2. Network Browsing 8.2.1. Browsing in a Windows Network 8.2.2. Browser Elections 8.2.3. Server Announcements 8.2.4. Configuring Samba for Browsing 8.2.5. Samba As the Domain Master Browser 8.2.6. Samba Browsing Enhancements 8.2.7. Browsing Options 9. Domain Controllers 9.1. Samba Domains: NT 4.0 or Active Directory? 9.2. Configuring a Samba PDC 9.2.1. Setting Up Domain Joins 9.2.1.1. Domain Admins 9.2.1.2. Required privileges 9.2.1.3. Joining a Windows client 9.2.2. Managing Users and Groups 9.2.3. User Profiles 9.2.4. System Policies 9.3. Configuring a Samba BDC 9.4. passdb Recommendations 9.5. Migrating an NT 4.0 Domain to Samba 9.6. Domain Trusts 9.7. Remote Server Management 9.7.1. File Shares 9.7.2. Services 9.7.3. Eventlogs 9.7.4. Performance Monitor 10. Domain Member Servers 10.1. Joining a Domain 10.2. Domain and ADS Security Modes 10.2.1. security = domain 10.2.2. security = ads 10.2.2.1. Basic Samba settings 10.2.2.2. Time synchronization 10.2.2.3. Encryption types 10.2.2.4. Realm/domain and KDC lookups 10.2.2.4.1. Using DNS for KDCs lookups 10.2.2.4.2. Manually configuring KDCs lookups 10.2.2.5. Final steps 10.2.2.6. Integrating Kerberized Unix services 10.2.3. Locating a Domain Controller 10.3. Matching Domain Users to Local Accounts 10.4. Winbind 10.4.1. idmap Backends 10.4.1.1. idmap backend = ldap 10.4.1.2. idmap backend = rid 10.4.1.3. idmap backend = ad 10.5. Additional Winbind Features 10.5.1. PAM and Domains 10.5.2. Local Nested Groups 11. Unix Clients 11.1. The Linux CIFS Filesystem 11.1.1. Installation 11.1.2. Mounting a SMB/CIFS File Share 11.1.3. Allowing Normal User CIFS Mounts 11.1.4. CIFS Extensions for Unix Clients 11.2. FreeBSDs smbfs 11.2.1. smbutil 11.2.2. mount_smbfs 11.3. Mac OS X 11.4. smbclient 11.4.1. Listing Shares and Workgroups 11.4.2. An Interactive smbclient Session 11.4.3. Backups with smbclient 11.4.4. Programming with smbclient 11.5. Remote Administration with net 11.5.1. net rpc 11.5.1.1. Shares 11.5.1.2. Services 11.5.2. net ads 12. Troubleshooting Samba 12.1. The Tool Box 12.2. Samba Logs 12.2.1. Log Level 12.2.2. Activating and Deactivating Logging 12.2.3. Logging by Individual Client Systems or Users 12.3. Unix Utilities 12.3.1. Tracing System Calls 12.3.2. Network Packet Captures 12.3.2.1. Using Wireshark 12.4. The Fault Tree 12.4.1. How to Use the Fault Tree 12.4.2. Troubleshooting Low-Level IP 12.4.2.1. Testing the networking software with ping 12.4.2.2. Testing local name services with ping 12.4.2.3. Testing the networking hardware with ping 12.4.2.4. Testing connections with ping 12.4.3. Troubleshooting Server Daemons 12.4.3.1. Tracking daemon startup 12.4.3.2. Looking for daemons bound to ports 12.4.3.3. Checking smbd with telnet 12.4.3.4. Testing daemons with testparm 12.4.4. Troubleshooting SMB Connections 12.4.4.1. A minimal smb.conf file 12.4.4.2. Testing locally with smbclient 12.4.4.3. Testing connections with smbclient 12.4.4.4. Testing connections with net use 12.5. Troubleshooting Browsing 12.5.1. Testing the Server with nmblookup 12.5.2. Testing the Client with nmblookup 12.5.3. Testing the Network with nmblookup 12.5.4. Testing Browsing with smbclient 12.5.5. Testing Client Browsing with net view 12.5.6. Browsing the Server from the Client 12.6. Troubleshooting Name Services 12.6.1. Identifying Whats in Use 12.6.2. Cannot Look Up Hostnames 12.6.3. Long and Short Hostnames 12.6.4. Unusual Delays 12.6.5. Localhost issues 12.7. Troubleshooting Network Addresses 12.7.1. Netmasks 12.7.2. Broadcast Addresses 12.7.3. Network Address Ranges 12.7.4. Finding Your Network Address 12.8. Troubleshooting NetBIOS Names 12.9. Extra Resources 12.9.1. Documentation and FAQs 12.9.2. Samba Mailing Lists, Newsgroups, and IRC 12.9.3. Filing a Bug Report A. Summary of Samba Daemons and Commands A.1. SMB URI Syntax A.2. Samba Daemons A.3. Samba Client Programs A.3.1. Common Options A.3.1.1. General options A.3.1.2. Authentication options A.3.1.3. Connection options B. Downloading Samba with Subversion C. Configure Options C.1. Install Directory and Library Options C.2. Developer Options C.3. Authentication Options C.4. File Serving Features C.5. Printing Options C.6. Clients and Libraries Index About the Authors Colophon Copyright