Fully Updated to Reflect Major Improvements and Configuration Changes in Samba-3.0.11 through 3.0.20+!
Youve deployed Samba: Now get the most out of it with todays definitive guide to maximizing Samba performance, stability, reliability, and power in your production environment. Direct from members of the Samba Team, The Official Samba-3 HOWTO and Reference Guide, Second Edition, offers the most systematic and authoritative coverage of Sambas advanced features and capabilities. It has been extensively updated to reflect major improvements in the Samba-3.0 series of releases and additional performance enhancements in Samba-3.0.20 and later.
Use this book to go far beyond basic deployment, leveraging all of Sambas components, from directory services to remote administration. Use it to find practical optimization techniques for any environment, from the workgroup to the enterprise. Use it to find detailed guidance and best practices for troubleshooting and problem solving. And, if your background is in Windows networking, use this book to get up to speed rapidly with Samba network administration in Linux/UNIX environments.Coverage includes
- NEW! User Rights and Privileges features and their impact on default system behavior
- NEW! Expanded LDAP capabilities, the new Winbind subsystem, and Sambas improved ACL handling
- NEW! Detailed coverage of the powerful Samba-3.x net local/remote administration utility
- NEW! Comprehensive documentation of IDMAP functionality
- NEW! Proven techniques for improving performance with large directories
- NEW! Samba integration with Windows Server 2003 and the latest versions of Active Directory
- Advanced techniques: interdomain trusts, loadable VFS file system drivers, distributed authentication, desktop profile management, CUPS printing, high availability, and more
- Contains a dramatically improved, more-detailed index
Table of Contents
List of Examples.
List of Figures.
List of Tables.
I. GENERAL INSTALLATION: PREPARING SAMBA FOR CONFIGURATION.
1. How to Install and Test Samba.
1.1 Obtaining and Installing Samba
1.2 Configuring Samba (smb.conf)
1.3 List Shares Available on the Server
1.4 Connect with a UNIX Client
1.5 Connect from a Remote SMB Client
1.6 Common Errors
2. Fast Start: Cure for Impatience.
2.1 Features and Benefits
2.2 Description of Example Sites
2.3 Worked Examples
II. SERVER CONFIGURATION BASICS: FIRST STEPS IN SERVER CONFIGURATION.
3. Server Types and Security Modes.
3.1 Features and Benefits
3.2 Server Types
3.3 Samba Security Modes
3.4 Password Checking
3.5 Common Errors
4. Domain Control.
4.1 Features and Benefits
4.2 Single Sign-On and Domain Security
4.3 Basics of Domain Control
4.4 Domain Control: Example Configuration
4.5 Samba ADS Domain Control
4.6 Domain and Network Logon Configuration
4.7 Common Errors
5. Backup Domain Control.
5.1 Features and Benefits
5.2 Essential Background Information
5.3 Backup Domain Controller Configuration
5.4 Common Errors
6. Domain Membership.
6.1 Features and Benefits
6.2 MS Windows Workstation/Server Machine Trust Accounts
6.3 Domain Member Server
6.4 Samba ADS Domain Membership
6.5 Sharing User ID Mappings between Samba Domain Members
6.6 Common Errors
7. Standalone Servers.
7.1 Features and Benefits
7.3 Example Configuration
7.4 Common Errors
8. MS Windows Network Configuration Guide.
8.1 Features and Benefits
8.2 Technical Details
8.3 Common Errors
III. ADVANCED CONFIGURATION: VALUABLE NUTS AND BOLTS INFORMATION.
9. Network Browsing.
9.1 Features and Benefits
9.2 What Is Browsing?
9.4 How Browsing Functions
9.5 WINS: The Windows Internetworking Name Server
9.6 Helpful Hints
9.7 Technical Overview of Browsing
9.8 Common Errors
10. Account Information Databases.
10.1 Features and Benefits
10.2 Technical Information
10.3 Account Management Tools
10.4 Password Backends
10.5 Common Errors
11. Group Mapping: MS Windows and Unix.
11.1 Features and Benefits
11.3 Configuration Scripts
11.4 Common Errors
12. Remote and Local Management: the net Command.
12.2 Administrative Tasks and Methods
12.3 UNIX and Windows Group Management
12.4 UNIX and Windows User Management
12.5 Administering User Rights and Privileges
12.6 Managing Trust Relationships
12.7 Managing Security Identifiers (SIDS)
12.8 Share Management
12.9 Controlling Open Files
12.10 Session and Connection Management
12.11 Printers and ADS
12.12 Manipulating the Samba Cache
12.13 Other Miscellaneous Operations
13. Identity Mapping (IDMAP).
13.1 Samba Server Deployment Types and IDMAP
13.2 Examples of IDMAP Backend Usage
14. User Rights and Privileges.
14.1 Rights Management Capabilities
14.2 The Administrator Domain SID
14.3 Common Errors
15. File, Directory, and Share Access Controls.
15.1 Features and Benefits
15.2 File System Access Controls
15.3 Share Definition Access Controls
15.4 Access Controls on Shares
15.5 MS Windows Access Control Lists and UNIX Interoperability
15.6 Common Errors
16. File and Record Locking.
16.1 Features and Benefits
16.3 Samba Oplocks Control
16.4 MS Windows Oplocks and Caching Controls
16.5 Persistent Data Corruption
16.6 Common Errors
16.7 Additional Reading
17. Securint Samba.
17.2 Features and Benefits
17.3 Technical Discussion of Protective Measures and Issues
17.4 Upgrading Samba
17.5 Common Errors
18. Interdomain Trust Relationships.
18.1 Features and Benefits
18.2 Trust Relationship Background
18.3 Native MS Windows NT4 Trusts Configuration
18.4 Configuring Samba NT-Style Domain Trusts
18.5 NT4-Style Domain Trusts with Windows 2000
18.6 Common Errors
19. Hosting a Microsoft Distributed File System Tree.
19.1 Features and Benefits
19.2 Common Errors
20. Classical Printing Support.
20.1 Features and Benefits
20.2 Technical Introduction
20.3 Simple Print Configuration
20.4 Extended Printing Configuration
20.5 Printing Developments Since Samba-2.2
20.6 Installing Drivers into [print$]
20.7 Client Driver Installation Procedure
20.8 Other Gotchas
20.9 The Imprints Toolset
20.10 Adding Network Printers without User Interaction
20.11 The addprinter Command
20.12 Migration of Classical Printing to Samba
20.13 Publishing Printer Information in Active Directory or LDAP
20.14 Common Errors
21. CUPS Printing Support.
21.2 Basic CUPS Support Configuration
21.3 Advanced Configuration
21.4 Advanced Intelligent Printing with PostScript Driver Download
21.5 The CUPS Filtering Architecture
21.6 Network Printing (Purely Windows)
21.7 Network Printing (Windows Clients and UNIX/Samba Print Servers)
21.8 Network PostScript RIP
21.9 Windows Terminal Servers (WTS) as CUPS Clients
21.10 Configuring CUPS for Driver Download
21.11 Installing PostScript Driver Files Manually Using rpcclient
21.12 The Printing .tdb Files
21.13 CUPS Print Drivers from Linuxprinting.org
21.14 Page Accounting with CUPS
21.15 Additional Material
21.16 Autodeletion or Preservation of CUPS Spool Files
21.17 Printing from CUPS to Windows-Attached Printers
21.18 More CUPS Filtering Chains
21.19 Common Errors
21.20 Overview of the CUPS Printing Processes
22. Stackable VFS Modules.
22.1 Features and Benefits
22.3 Included Modules
22.4 VFS Modules Available Elsewhere
23. Winbind: Use of Domain Accounts.
23.1 Features and Benefits
23.3 What Winbind Provides
23.4 How Winbind Works
23.5 Installation and Configuration
23.7 Common Errors
24. Advanced Network Management.
24.1 Features and Benefits
24.2 Remote Server Administration
24.3 Remote Desktop Management
24.4 Network Logon Script Magic
25. System and Account Policies.
25.1 Features and Benefits
25.2 Creating and Managing System Policies
25.3 Managing Account/User Policies
25.4 Management Tools
25.5 System Startup and Logon Processing Overview
25.6 Common Errors
26. Desktop Profile Management.
26.1 Features and Benefits
26.2 Roaming Profiles
26.3 Mandatory Profiles
26.4 Creating and Managing Group Profiles
26.5 Default Profile for Windows Users
26.6 Common Errors
27. PAM-Based Distributed Authentication.
27.1 Features and Benefits
27.2 Technical Discussion
27.3 Common Errors
28. Integrating MS Windows Networks with Samba.
28.1 Features and Benefits
28.2 Background Information
28.3 Name Resolution in a Pure UNIX/Linux World
28.4 Name Resolution as Used within MS Windows Networking
28.5 Common Errors
29.1 Features and Benefits
29.2 What Are Charsets and Unicode?
29.3 Samba and Charsets
29.4 Conversion from Old Names
29.5 Japanese Charsets
29.6 Common Errors
30. Backup Techniques.
30.1 Features and Benefits
30.2 Discussion of Backup Solutions
31. High Availability.
31.1 Features and Benefits
31.2 Technical Discussion
32. Handling Large Directories.
33. Advanced Configuration Techniques.
IV. MIGRATION AND UPDATING.
34. Upgrading from Samba-2.x to Samba-3.0.20.
34.1 Quick Migration Guide
34.2 New Features in Samba-3
34.3 Configuration Parameter Changes
34.4 New Functionality
35. Migration from NT4 PDC to Samba-3 PDC.
35.1 Planning and Getting Started
35.2 Migration Options
36. SWAT: The Samba Web Administration Tool.
36.1 Features and Benefits
36.2 Guidelines and Technical Tips
36.3 Overview and Quick Tour
37. The Samba Checklist.
37.3 The Tests
38. Analyzing and Solving Samba Problems.
38.1 Diagnostics Tools
38.2 Useful URLs
38.3 Getting Mailing List Help
38.4 How to Get O_ the Mailing Lists
39. Reporting Bugs.
39.2 General Information
39.3 Debug Levels
39.4 Internal Errors
39.5 Attaching to a Running Process
VI. REFERENCE SECTION.
40. How to Compile Samba.
40.1 Access Samba Source Code via Subversion
40.2 Accessing the Samba Sources via rsync and ftp
40.3 Verifying Samba's PGP Signature
40.4 Building the Binaries
40.5 Starting the smbd nmbd and winbindd
41.2 SCO UNIX
41.4 Red Hat Linux
41.5 AIX: Sequential Read Ahead
42. Samba and Other CIFS Clients.
42.1 Macintosh Clients
42.2 OS2 Client
42.3 Windows for Workgroups
42.4 Windows 95/98
42.5 Windows 2000 Service Pack 2
42.6 Windows NT 3.1
43. Samba Performance Tuning.
43.2 Socket Options
43.3 Read Size
43.4 Max Xmit
43.5 Log Level
43.6 Read Raw
43.7 Write Raw
43.8 Slow Logins
43.9 Client Tuning
43.10 Samba Performance Problem Due to Changing Linux Kernel
43.11 Corrupt tdb Files
43.12 Samba Performance is Very Slow
44. LDAP and Transport Layer Security.
45. Samba Support.
45.1 Free Support
45.2 Commercial Support
46. DNS and DHCP Configuration Guide.
46.1 Features and Benefits
46.2 Example Configuration
47. Manual Pages.
Appendix A: GNU General Public License.
A.2 Terms and Conditions for Copying, Distribution and Modification
A.3 How to Apply These Terms to Your New Programs