Samba Administration Guide

Samba HowTo Guide
Prev	Home	Next

Index

Symbols

"Printers" folder, Caveats to Be Considered, Installing the PostScript Driver on a Client, Manual Driver Installation in 15 Steps
$, Manual Creation of Machine Trust Accounts
%i macro, Multiple Virtual Server Personalities
%L, Multiple Virtual Server Personalities
%PDF, MIME Types and CUPS Filters
%SystemRoot%\System32\config, MS Windows NT4-style Domain Control
../source/nsswitch, Configure Winbind and PAM
.ai, MIME Types and CUPS Filters
.AppleDouble, netatalk
.eps, MIME Types and CUPS Filters
.pdf, MIME Types and CUPS Filters
.PDS extension, Windows NT4 Workstation
.profiles, Windows 9x/Me User Profiles
.ps, MIME Types and CUPS Filters
.recycle, recycle
/bin/false, Example Configuration, User Rights and Privileges
/dev/null, User Rights and Privileges
/dev/shadowvol, Shadow Copy Setup
/etc/cups/, MIME Types and CUPS Filters
/etc/cups/mime.convs, Raw Print Serving: Vendor Drivers on Windows Clients, Explicitly Enable “raw” Printing for application/octet-stream, MIME Type Conversion Rules, application/octet-stream Printing
/etc/cups/mime.types, Raw Print Serving: Vendor Drivers on Windows Clients, Explicitly Enable “raw” Printing for application/octet-stream, application/octet-stream Printing
/etc/fstab, Shadow Copy Setup
/etc/group, Share-Level Security, Discussion, Nested Groups: Adding Windows Domain Groups to Windows Local Groups, Sample smb.conf Add Group Script, Domain Member Server or Domain Member Client, The [global] Section, Features and Benefits, HPUX
/etc/groups, Anatomy of /etc/pam.d Entries
/etc/host.conf, Name Resolution in a Pure UNIX/Linux World, /etc/host.conf
/etc/hosts, Configure /etc/krb5.conf, How Browsing Functions, Name Resolution in a Pure UNIX/Linux World, /etc/hosts, Name Resolution as Used within MS Windows Networking, The Tests
/etc/hosts>, /etc/hosts
/etc/inetd.conf, Linux/FreeBSD-Specific PAM Configuration, Starting from inetd.conf
/etc/init.d/samba, Joining an NT4-type Domain with Samba-3, Linux
/etc/init.d/samba.server, Solaris
/etc/init.d/smb, Linux
/etc/krb5.conf, Configure /etc/krb5.conf, Possible Errors, ADS Domains, IDMAP Storage in LDAP Using Winbind
/etc/ldap.conf, IDMAP Storage in LDAP Using Winbind, IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
/etc/logingroup, HPUX
/etc/mime.conv, Central Print Serving
/etc/mime.types, Central Print Serving
/etc/nsswitch.conf, Domain Member Server or Domain Member Client, NT4-Style Domains (Includes Samba Domains), IDMAP_RID with Winbind, IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension, Name Service Switch, Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris, Name Resolution in a Pure UNIX/Linux World, /etc/nsswitch.conf
/etc/openldap/slapd.conf, The Primary Domain Controller
/etc/openldap/sldap.conf, Accounts and Groups Management
/etc/pam.conf, Solaris-Specific Configuration, Features and Benefits, Technical Discussion, Anatomy of /etc/pam.d Entries
/etc/pam.d, Requirements, Testing Things Out, Configure Winbind and PAM, Features and Benefits
/etc/pam.d/, Pluggable Authentication Modules, Technical Discussion
/etc/pam.d/ftp, Linux/FreeBSD-Specific PAM Configuration
/etc/pam.d/login, Linux/FreeBSD-Specific PAM Configuration
/etc/pam.d/samba, Linux/FreeBSD-Specific PAM Configuration
/etc/passwd, Share-Level Security, Example Configuration, “$” Cannot Be Included in Machine Name, MS Windows Workstation/Server Machine Trust Accounts, Manual Creation of Machine Trust Accounts, Windows 200x/XP Professional Client, Adding Machine to Domain Fails, Background, Reference Documentation Server, Central Print Serving, Backward Compatibility Account Storage Systems, Plaintext, Schema and Relationship to the RFC 2307 posixAccount, Applicable Only to Versions Earlier than 3.0.11, Domain Member Server or Domain Member Client, Samba as the Trusted Domain, Features and Benefits, Starting and Testing the winbindd Daemon, Features and Benefits
/etc/printcap, Basic CUPS Support Configuration
/etc/resolv.conf, Name Resolution in a Pure UNIX/Linux World, Assumptions, The Tests
/etc/samba, Multiple Virtual Server Personalities, Multiple Virtual Server Hosting, The Tests
/etc/samba/scripts, Managing Nest Groups on Workstations from the Samba Server
/etc/samba/secrets.tdb, Joining an NT4-type Domain with Samba-3
/etc/samba/smb.conf, Configuring Samba (smb.conf)
/etc/samba/smbpasswd, Plaintext
/etc/samba/smbusers, User Mapping
/etc/shadow, Background, Backward Compatibility Account Storage Systems
/etc/smbpasswd, Plaintext
/etc/ssl/certs/slapd.pem, LDAP Configuration Notes
/etc/xinetd.d, Linux/FreeBSD-Specific PAM Configuration
/etc/xinetd.d/telnet, Linux/FreeBSD-Specific PAM Configuration
/export, Reference Documentation Server
/lib/libnss_example.so, Name Service Switch
/lib/libnss_files.so, Name Service Switch
/lib/security, Configure Winbind and PAM, PAM Configuration Syntax
/lib/security/, Pluggable Authentication Modules
/opt/samba/bin, Locating the SWAT File
/tmp, File and Directory Access Control
/usr/bin/openssl, Securing SWAT through SSL
/usr/lib/samba/vfs, Discussion
/usr/lib/security, NSS Winbind on AIX, Configure Winbind and PAM
/usr/lib/security/methods.cfg, NSS Winbind on AIX
/usr/local/lib, Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
/usr/local/samba, Starting and Testing the winbindd Daemon
/usr/local/samba/bin, Linux, Solaris, Locating the SWAT File
/usr/local/samba/lib, The Tests
/usr/local/samba/lib/vfs, Discussion
/usr/local/samba/private/secrets.tdb, Joining an NT4-type Domain with Samba-3
/usr/local/samba/swat, Enabling SWAT for Use
/usr/local/samba/var, Access Controls on Shares, Assumptions
/usr/local/samba/var/locks, Static WINS Entries
/usr/sbin, Locating the SWAT File, Enabling SWAT for Use
/usr/share/samba/swat, Enabling SWAT for Use
/var/locks/*.tdb, Corrupt tdb Files
/var/log/samba, Assumptions
/var/run/samba, Static WINS Entries
/var/spool/cups/, Autodeletion or Preservation of CUPS Spool Files
/var/spool/samba, Central Print Serving, Autodeletion or Preservation of CUPS Spool Files
250-user limit, tdbsam
3.0.11, The Administrator Domain SID
4,500 user accounts, tdbsam
4294967295, Interdomain Trust Relationships
8.3 file names, MS Windows NTFS Comparison with UNIX File Systems
>Domain User Manager, Creating an NT4 Domain Trust
[global], Multiple Virtual Server Personalities
\\%L\%U\.profiles, Windows 9x/Me User Profiles
\\SERVER, Problem Resolution
_kerberos.REALM.NAME, Configure /etc/krb5.conf
_kerberos._udp, Notes
_ldap._tcp, Notes
_ldap._tcp.pdc._msdcs.quenya.org, NetBIOS Over TCP/IP Disabled

A

abbreviated keystrokes, TCP/IP Configuration

aborting shutdown, Description of Privileges

accept connections, Using Interface Protection

Access, Using the “net rpc rights” Utility

access authentication, Mapping Common UIDs/GIDs on Distributed Machines

access control, Features and Benefits, Single Sign-On and Domain Security, Background, Access Controls on Shares, Advanced Network Management

Access Control, Domain Logon Configuration: Windows 9x/Me

Access Control Entries (see ACE)

Access Control List, File, Directory, and Share Access Controls

access control needs, Server Share and Directory Layout

access controls, Features and Benefits, Comments Regarding LDAP, The pdbedit Tool, Mapping Windows Groups to UNIX Groups, Features and Benefits, Protecting Directories and Files from Deletion

Access Controls, Objectives

access denied, Using IPC$ Share-Based Denials

access policies, Domain Account Policy Managment

access rights, Features and Benefits, Overview, Trust Relationship Background

account, Example Configuration, Features and Benefits, Windows 200x/XP Professional Client, Anatomy of /etc/pam.d Entries

backend, Features and Benefits

database, Domain Security Mode (User-Level Security)

backends, Features and Benefits

account access controls, New Account Storage Systems

account attributes, Primary Domain Controller

account backends, Account Information Databases

account containers, Initialize the LDAP Database

account control block (see ACB)

account control flags, Account Flags Management

account controls, MS Windows Workstation/Server Machine Trust Accounts

Account Controls, Managing Account/User Policies

account database, Password Backends

account deleted, Deleting Accounts

account encode_bits, Account Flags Management

account flag order, Account Flags Management

Account Flags, Listing User and Machine Accounts

account flags, Account Flags Management

account information, MS Windows NT4-style Domain Control, MS Windows Workstation/Server Machine Trust Accounts, Schema and Relationship to the RFC 2307 posixAccount, UNIX and Windows User Management

account information database, Mapping User Identifiers between MS Windows and UNIX

account management, Primary Domain Controller

account migration, The pdbedit Tool

account name, Domain Member Server or Domain Member Client, User Rights and Privileges, Samba as the Trusted Domain

account policies, Preparing for Domain Control

account policy, The pdbedit Tool

account restrictions, Managing Account/User Policies

account security, The pdbedit Tool

account storage backends, Passdb Backends and Authentication

account storage mechanisms, Account Information Databases

account storage system, Account Information Databases

Account Unknown, Nested Groups: Adding Windows Domain Groups to Windows Local Groups

accountability, The pdbedit Tool

accounts, Introduction

ACL, Security and sambaSamAccount, Nested Groups: Adding Windows Domain Groups to Windows Local Groups, Description of Privileges, Features and Benefits, Printing Developments Since Samba-2.2, Introduction

ACLs, File, Directory, and Share Access Controls, The Obsoleted [printer$] Section

File System, File and Directory Access Control
POSIX, File, Directory, and Share Access Controls, Features and Benefits
share, Features and Benefits
Windows, Features and Benefits

ACLs on share, Windows 200x/XP

ACLs on shares, Features and Benefits

across network segments, NetBIOS over TCP/IP

active directory, Features and Benefits, Features and Benefits, Single Sign-On and Domain Security, Preparing for Domain Control, Samba ADS Domain Control

Active Directory, Active Directory Domain Control, Samba ADS Domain Membership, UNIX and Windows Group Management, Standalone Samba Server, Domain Member Server or Domain Member Client, IDMAP_RID with Winbind, Interdomain Trust Relationships

Active Directory Server, Objectives

AD4UNIX, Domain Member Server or Domain Member Client

ADAM, IDMAP Storage in LDAP Using Winbind

add a user account, Adding User Accounts

add client machines, Using the “net rpc rights” Utility

add domain users and groups to a local group, What Rights and Privileges Will Permit Windows Client Administration?

add drivers, The [global] Section

add group script, Example: Engineering Office, The Primary Domain Controller, Sample smb.conf Add Group Script, Adding Groups Fails, Adding or Creating a New Group, Multiple Virtual Server Hosting

add machine script, Example: Engineering Office, The Primary Domain Controller, The Machine Trust Account Is Not Accessible, LDAP Configuration Notes, Managing Domain Machine Accounts using NT4 Server Manager, On-the-Fly Creation of Machine Trust Accounts, Adding Machine to Domain Fails, Common Errors, Using the “net rpc rights” Utility, Multiple Virtual Server Hosting, Changes in Behavior

add printer command, Adding New Printers with the Windows NT APW

Add Printer Wizard, Features and Benefits, The [global] Section, Printing Developments Since Samba-2.2

add printer wizard, Driver Upload Methods

add share command, Creating, Editing, and Removing Shares

add user script, Example: Engineering Office, The Primary Domain Controller, Mapping User Identifiers between MS Windows and UNIX, User Account Management, Multiple Virtual Server Hosting, Changes in Behavior

add user to group script, Example: Engineering Office, The Primary Domain Controller, Multiple Virtual Server Hosting

add/delete/change share, Description of Privileges

adddriver, Installing Driver Files into [print$], Running rpcclient with adddriver, Specific Driver Name Flexibility, A Check of the rpcclient man Page, Troubleshooting Revisited

additional driver, Additional Client Driver Installation

additional privileges, Description of Privileges

addmem, Nested Groups: Adding Windows Domain Groups to Windows Local Groups

AddPrinterDriver(), A Check of the rpcclient man Page

admin users, Example Configuration, Example: Engineering Office, User- and Group-Based Controls, File Operations Done as root with force user Set

admincfg.exe, Configuring Windows for Workgroups Password Handling

administrative actions, Using the “net rpc rights” Utility

administrative duties, Overview

administrative privileges, Nested Groups: Adding Windows Domain Groups to Windows Local Groups, Join the Samba Server to the PDC Domain

administrative responsibilities, Trust Relationship Background

administrative rights, Description of Privileges, What Rights and Privileges Will Permit Windows Client Administration?

administrative rights and privileges, What Rights and Privileges Will Permit Windows Client Administration?

Administrative Templates, MS Windows 200x/XP Professional Policies

Administrator, Discussion, Important Administrative Information, Join the Samba Server to the PDC Domain

administrator account, Windows 200x/XP Professional Client, Windows NT4 Client

Administrator account, Create the Computer Account

administrator password, Notes

Administrator%password, Joining an NT4-type Domain with Samba-3

Adobe, GDI on Windows, PostScript on UNIX, PostScript Drivers with No Major Problems, Even in Kernel Mode, The Grand Unification Achieved

Adobe driver, Windows CUPS PostScript Driver Versus Adobe Driver

Adobe driver files, Recognizing Different Driver Files

Adobe PostScript, Caveats to Be Considered, Adobe and CUPS PostScript Drivers for Windows Clients

Adobe PostScript driver, Installing the PostScript Driver on a Client

Adobe PPD, CUPS Print Drivers from Linuxprinting.org

Adobe specifications, The Role of cupsomatic/foomatic

ADS, ADS Security Mode (User-Level Security), Single Sign-On and Domain Security, Domain Controller Types, Features and Benefits, MS Windows Workstation/Server Machine Trust Accounts, Domain Member Server, Joining an NT4-type Domain with Samba-3, Configure smb.conf, Configure /etc/krb5.conf, Create the Computer Account, Testing Server Setup, Network Browsing, TCP/IP without NetBIOS, DNS and Active Directory, Cross-Subnet Browsing, Account Information Databases, New Account Storage Systems, Comments Regarding LDAP, Accounts and Groups Management, Administrative Tasks and Methods, Domain Member Server or Domain Member Client, Primary Domain Controller, IDMAP Storage in LDAP Using Winbind, User Rights and Privileges, Interdomain Trust Relationships, Features and Benefits, Trust Relationship Background, NT4-Style Domain Trusts with Windows 2000, Printing Developments Since Samba-2.2, Features and Benefits, Result Caching, Features and Benefits, MS Windows 200x/XP Professional Policies, Managing Account/User Policies, System Startup and Logon Processing Overview, MS Windows 200x/XP, PAM-Based Distributed Authentication, Features and Benefits, Background Information, New Features in Samba-3, Passdb Backends and Authentication, Objectives, Features and Benefits (see Active Directory)

ADS DC, Configure smb.conf

ADS domain, Domain Member Server or Domain Member Client, ADS Domains

ADS domain members, Identity Mapping (IDMAP)

ADS manager, Create the Computer Account

ADS schema, Primary Domain Controller

Advanced TCP/IP configuration, MS Windows XP Professional

advantages, Objectives

affect users, Creating and Managing System Policies

affordable power, The Ultimate Goal

AFPL, Ghostscript: The Software RIP for Non-PostScript Printers

AFPL Ghostscript, pstoraster

AFS, The Distributed File System Challenge

AIX, Mapping Common UIDs/GIDs on Distributed Machines, The [global] Section, NSS Winbind on AIX

algorithmic mapping, Primary Domain Controller

alias group, Nested Groups: Adding Windows Domain Groups to Windows Local Groups

allow access, Using Host-Based Protection

allow trusted domains, IDMAP_RID with Winbind

already exists, Cannot Add Machine Back to Domain

alternative solution, Objectives

Amanda, Amanda

analyzes data, Diagnostics Tools

anonymous, Central Print Serving

print server, Anonymous Print Server
read-write server, Anonymous Read-Write Document Server

anonymous access, Problem Resolution

anonymous file server, Multiple Virtual Server Personalities

anonymous server, Advanced Configuration Techniques

ANSI compiler, HPUX

anticipate failure, Features and Benefits

API, smbpasswd: Encrypted Password Database

Appliances, Target Uses

application servers, Features and Benefits

application/cups.vnd-postscript, Windows CUPS PostScript Driver Versus Adobe Driver

application/octet-stream, Explicitly Enable “raw” Printing for application/octet-stream, MIME Type Conversion Rules, application/octet-stream Printing

application/pdf, MIME Types and CUPS Filters, MIME Type Conversion Rules

application/postscript, MIME Types and CUPS Filters, MIME Type Conversion Rules, Prefilters, pstops, Windows CUPS PostScript Driver Versus Adobe Driver

application/vnd.cups-postscript, Prefilters, pstops

application/vnd.cups-raster, PostScript Printer Descriptions for Non-PostScript Printers

application/vnd.cups-raw, Explicitly Enable “raw” Printing for application/octet-stream

application/x-shell, MIME Type Conversion Rules

apt-get, Shadow Copy Setup

ARCFOUR-HMAC-MD5, Testing Server Setup

architecture, Comments Regarding LDAP

ARP/RARP, /etc/hosts

ASCII, MIME Types and CUPS Filters, What Are Charsets and Unicode?, Japanese Charsets

ASCII text, Prefilters

assign rights, Using the “net rpc rights” Utility

assigned RID, Discussion

assistance, Free Support

associations, Group Mapping: MS Windows and UNIX

attach gdb, Debugging with Samba Itself

attribute, OpenLDAP Configuration

attributes, New Schema

audit file access, audit

audit module, extd_audit

auth, Anatomy of /etc/pam.d Entries

auth methods, Configuration of auth methods, Passdb Backends and Authentication

authenticate, MS Windows Workstation/Server Machine Trust Accounts, Joining an NT4-type Domain with Samba-3

authenticate users, Joining an NT4-type Domain with Samba-3

authenticated, Configure smb.conf

authenticating server, MS Windows NT4 Workstation

authentication, Features and Benefits, Domain Security Mode (User-Level Security), Single Sign-On and Domain Security, Domain Controller Types, The Special Case of Windows 9x/Me, Why Is This Better Than security = server?, Important Notes About Security, Comments Regarding LDAP, Account Migration, Overview, Configure Winbind and PAM, Features and Benefits

backend, Domain Member Server

authentication agents, Single Sign-On and Domain Security

authentication architecture, Single Sign-On and Domain Security

authentication backend, Domain Layout

authentication control, Introduction

authentication database, Features and Benefits

authentication management, Pluggable Authentication Modules

authentication mechanisms, Introduction

authentication methods, Pluggable Authentication Modules

authentication module API, NSS Winbind on AIX

authentication regime, Domain Member Server

authentication reply, Why Is This Better Than security = server?

authentication server, MS Windows NT4-style Domain Control

authentication service, Linux/FreeBSD-Specific PAM Configuration

authentication system, Single Sign-On and Domain Security, New Features in Samba-3

authenticatior, Domain Controller Types

authoritative, Behavior of Cross-Subnet Browsing

authoritive, How Browsing Functions

authorization, Pluggable Authentication Modules

auto-reconnect, Important Notes About Security

autogen.sh, Building the Binaries

autogenerated printcap, Default UNIX System Printing Commands

automatic account creation, Managing Domain Machine Accounts using NT4 Server Manager

automatic mapping, Domain Member Server or Domain Member Client

automatic reconnects, Advantages of Encrypted Passwords

automatic redundancy, Forcing Samba to Be the Master

autopoweruser.sh, Managing Nest Groups on Workstations from the Samba Server

autotyping, MIME Types and CUPS Filters

AUXILIARY, Schema and Relationship to the RFC 2307 posixAccount

auxiliary members, Nested Groups: Adding Windows Domain Groups to Windows Local Groups

availability, Features and Benefits, Objectives

available, Central Print Serving

available port, Samba and Printer Ports

available printerd, The [global] Section

available rights, Using the “net rpc rights” Utility

average print run, Advanced Intelligent Printing with PostScript Driver Download

B

b-node, NetBIOS over TCP/IP

back up, Requirements

backed up, Server Share and Directory Layout

backend, The Distributed File System Challenge

backend authentication, Objectives

backend database, Domain Controller Types, MS Windows Workstation/Server Machine Trust Accounts, Adding Machine to Domain Fails

backend failures, High-Availability Server Products

backend file system pool, Restrictive Constraints on Distributed File Systems

backends, Printing from CUPS to Windows-Attached Printers

backup, Features and Benefits, Server Share and Directory Layout

backup domain controller, Domain Layout

backup solution, Discussion of Backup Solutions

BackupPC, BackupPC

bad hardware, Browsing of Shares and Directories is Very Slow

bad logon attempts, Changing User Accounts

Bad networking hardware, Browsing of Shares and Directories is Very Slow

bad password, The Tests

banner pages, Windows CUPS PostScript Driver Versus Adobe Driver, Run cupsaddsmb (Quiet Mode)

barriers, Introduction

Batch Oplock, Opportunistic Locking Overview

BDC, Domain Security Mode (User-Level Security), Example Configuration, Single Sign-On and Domain Security, Domain Controller Types, Features and Benefits, MS Windows NT4-style Domain Control, LDAP Configuration Notes, Active Directory Domain Control, Backup Domain Controller Configuration, Example Configuration, Can Samba Be a Backup Domain Controller to an NT4 PDC?, Joining an NT4-type Domain with Samba-3, Why Is This Better Than security = server?, New Account Storage Systems, Advantages of Encrypted Passwords, Mapping Common UIDs/GIDs on Distributed Machines, tdbsam, Overview, Domain Member Server or Domain Member Client, Primary Domain Controller, Backup Domain Controller, Join the Samba Server to the PDC Domain, Remote Management from NoMachine.Com, Domain Layout, Steps in Migration Process

BDCs, Domain Layout

behavior approximately same, Quick Migration Guide

between domains, Configuring Samba NT-Style Domain Trusts

bias, Forcing Samba to Be the Master

binary format TDB, New Account Storage Systems

BIND, Dynamic DNS

bind interfaces only, Multiple Interfaces, Using Interface Protection, Multiple Server Hosting, Multiple Virtual Server Personalities, The Tests

BIND9, DNS and Active Directory

BIND9.NET, Features and Benefits

bindery-enabled, Features and Benefits

block device, File and Directory Access Control

block incoming packets, Using a Firewall

BOBS, BOBS: Browseable Online Backup System

bogus, Example Configuration

boot disk`, Requirements

bridge, File, Directory, and Share Access Controls

bridges networks, How Browsing Functions

brlock.tdb, The Printing *.tdb Files

(see also TDB)

broadcast, What Qualifies a Domain Controller on the Network?, NetBIOS over TCP/IP

broadcast address, Problem Resolution, The Tests

broadcast isolated subnet, Forcing Samba to Be the Master

broadcast messages, NetBIOS over TCP/IP

broadcast messaging, How Does a Workstation find its Domain Controller?

Broadcast node, Static WINS Entries

broadcast request, The Special Case of Windows 9x/Me

broadcast traffic, Cross-Subnet Browsing

broadcast-based, NetBIOS over TCP/IP

broadcast-based name resolution, Joining an NT4-type Domain with Samba-3

broadcasts, Forcing Samba to Be the Master, Behavior of Cross-Subnet Browsing

browsable, Simple Print Configuration

browse across subnet, Cross-Subnet Browsing

browse list, Preparing for Domain Control, What Is Browsing?, How Browsing Functions, WINS: The Windows Internetworking Name Server, Technical Overview of Browsing, Behavior of Cross-Subnet Browsing

browse list handling, Network Browsing

browse list maintainers, How Browsing Functions

browse list management, Security Mode and Master Browsers, What Is Browsing?

browse lists, Making Samba the Domain Master, Cross-Subnet Browsing, Behavior of Cross-Subnet Browsing

browse resources, Problem Resolution

browse server resources, Problem Resolution

browse shares, Using IPC$ Share-Based Denials

browse.dat, Problem Resolution

browseable, Configuration File Syntax, Anonymous Print Server, Secure Read-Write File and Print Server, Example Configuration, Example: Engineering Office, Example Configuration, Central Print Serving, Simple Print Configuration, Extended Printing Configuration, The [printers] Section, Any [my_printer_name] Section, Creating the [print$] Share, [print$] Stanza Parameters, Simple smb.conf Settings for CUPS, Prepare Your smb.conf for cupsaddsmb, Discussion, Shadow Copy Setup, Multiple Virtual Server Personalities, Multiple Virtual Server Hosting

browser election, Configuring Workgroup Browsing

browser elections, Domain Browsing Configuration, Forcing Samba to Be the Master

BrowseShortNames, Print Queue Called “lp” Mishandles Print Jobs

browsing, The Special Case of Windows 9x/Me, What Is Browsing?, Making Samba the Domain Master, Browsing Support in Samba

browsing across subnets, Network Browsing, Cross-Subnet Browsing

browsing another subnet, Browsing Support in Samba

browsing intrinsics, How Browsing Functions

browsing problems, Windows Networking Protocols, Common Errors, I Get an "Unable to browse the network" Error

BSD, “$” Cannot Be Included in Machine Name, Manual Creation of Machine Trust Accounts, Features and Benefits

BSD Printing, Simple Print Configuration

BSD-style printing, Extended Printing Configuration

bug report, Free Support

bug reports, Introduction

Bugzilla, Introduction

built-in commands, Custom Print Commands

bypasses privilege, Using the “net rpc rights” Utility

byte ranges, Discussion

byte-range lock, Discussion

byte-range locking, Discussion, Opportunistic Locking Overview

C

c:\winnt\inf, Windows NT4-Style Policy Files

C:\WinNT\System32\config, MS Windows NT4-style Domain Control

cached

password, Password Checking

cached encrypted password, Important Notes About Security

cached in memory, Advantages of Non-Encrypted Passwords

cached local file, Opportunistic Locking Overview

cached locally, Windows 9x/Me Profile Setup

caching, Opportunistic Locking Overview

caching reads, Opportunistic Locking Overview

caching scheme, Result Caching

caching writes, Opportunistic Locking Overview

called name, Using Host-Based Protection

cannot join domain, Common Errors

canonicalize files, Handling Large Directories

CAP, Japanese Charsets, Basic Parameter Setting, Macintosh Clients

cap-share, Basic Parameter Setting

capability to delete, Protecting Directories and Files from Deletion

CAP_LINUX_IMMUTABLE, Protecting Directories and Files from Deletion

case options, Handling Large Directories

case sensitive, Miscellaneous Controls, Windows 9x/Me Profile Setup, Handling Large Directories

case sensitivity, PAM Configuration Syntax

case-insensitive, User Level Security, Simple Print Configuration, Handling Large Directories

case-preserving, User Level Security

central environment, Comments Regarding LDAP

centralized

authentication, Single Sign-On and Domain Security

centralized identity management, Single Sign-On and Domain Security

centrally managed, Features and Benefits

certificate, Securing SWAT through SSL

Certificate Authority (see CA)

cfdisk, Shadow Copy Setup

challenge/response mechanis, Important Notes About Security

change capabilities, The smbpasswd Tool

change motivations, Objectives

change password, Notes

change passwords, The smbpasswd Tool

change share command, Creating, Editing, and Removing Shares

changed parameters, Upgrading from Samba-2.x to Samba-3.0.20

changes password, Manual Creation of Machine Trust Accounts

character device, File and Directory Access Control

character set, What Are Charsets and Unicode?

character sets, Samba and Charsets, New Features in Samba-3

charset, What Are Charsets and Unicode?

charset conversion, Conversion from Old Names

chattr, Protecting Directories and Files from Deletion

check for locks, Discussion

check logs, Adding Machine to Domain Fails

checksum-search, Rsync

chmod, Central Print Serving, Shadow Copy Setup

chown, Central Print Serving, Viewing File Ownership, Features and Benefits

chpass, Manual Creation of Machine Trust Accounts

CIFS, Sharing User ID Mappings between Samba Domain Members

CIFS function calls, User Rights and Privileges

CIFS/SMB, Features and Benefits, Why Is This So Hard?

classicalprinting, From Windows Clients to a CUPS/Samba Print Server

clear purpose preferred, Discussion of Backup Solutions

clear-text, Password Checking, Important Notes About Security, Security and sambaSamAccount

clear-text passwords, Important Notes About Security

client client instructions, Features and Benefits

Client for Microsoft Networks, Domain Logon Configuration: Windows 9x/Me

Client for Novell Networks, Windows 9x/Me Profile Setup

client use spnego, I Can't Join a Windows 2003 PDC

client-server mode, The smbpasswd Tool

client-side caching, Opportunistic Locking Overview

client-side data caching, Opportunistic Locking Overview, PDM Data Shares

clock skew, Configure /etc/krb5.conf

cluster servers, The Front-End Challenge

clustered file server, The Ultimate Goal

Clustered smbds, Server Pool Communications

clustering technologies, The Ultimate Goal

cluttering, Debugging-Specific Operations

cmd, Browsing of Shares and Directories is Very Slow, What Rights and Privileges Will Permit Windows Client Administration?

cmd shell, What Rights and Privileges Will Permit Windows Client Administration?

CN, LDAP Configuration Notes, Introduction

code maintainer, Free Support

codepages, Features and Benefits

collating, Making Samba the Domain Master

collisions, Samba Performance Problem Due to Changing Linux Kernel

color, UNIX Printfile Conversion and GUI Basics

COM1:, Samba and Printer Ports

command-line, Remote and Local Management: The Net Command

command-line utility, Using the “net rpc rights” Utility

comment, Configuration File Syntax, Anonymous Read-Only Document Server, Anonymous Read-Write Document Server, Anonymous Print Server, Secure Read-Write File and Print Server, Example Configuration, Example: Engineering Office, Example Configuration, Reference Documentation Server, Central Print Serving, Managing Nest Groups on Workstations from the Samba Server, Extended Printing Configuration, The [printers] Section, Any [my_printer_name] Section, Creating the [print$] Share, [print$] Stanza Parameters, Simple smb.conf Settings for CUPS, More Complex CUPS smb.conf Settings, Prepare Your smb.conf for cupsaddsmb, Discussion, Shadow Copy Setup, Multiple Virtual Server Personalities, Multiple Virtual Server Hosting, Assumptions

commenting out setting, Rapid Configuration Validation

commercial Linux products, File, Directory, and Share Access Controls

commercial support, Samba Support, Commercial Support

commit the settings, MS Windows 2000

Common Internet Filesystem (see CIFS)

Common restrictions, Managing Account/User Policies

Common UNIX Printing System (see CUPS)

common.adm, Windows NT4-Style Policy Files

comp.protocols.smb, Introduction

compatible, Important Notes About Security, Portability

compile, Obtaining and Installing Samba

compile-time options, Rapid Configuration Validation

complex file name space, A Simple Solution

complex organization, Domain Layout

complexity, Example Configuration

compliance, The pdbedit Tool

complicated, Behavior of Cross-Subnet Browsing

complicated problem, Demultiplexing SMB Requests

comprehensive documentation, Multiple Server Hosting

Computer Account, Windows NT4 Client

computer account, Testing Server Setup

computer accounts, Account Information Databases, LDAP Directories and Windows Computer Accounts, User Rights and Privileges

Computer Management, Access Controls on Shares, Windows 200x/XP

Computer Name, Joining a Domain: Windows 2000/XP Professional

computer name, Domain Logon Configuration: Windows 9x/Me, Name Resolution as Used within MS Windows Networking

concurrent access, Opportunistic Locking Overview

Conectiva, Forums, Downloads, Tutorials, Howtos (Also for Mac OS X and Commercial UNIX)

config.cache, Possible Errors

CONFIG.POL, The Special Case of Windows 9x/Me

Config.POL, Creating and Managing System Policies, Windows 9x/ME Policies

configuration

documentation, Test Your Config File with testparm

configuration files, Features and Benefits

configuration problem, Introduction

configuration syntax, Simple Print Configuration

configuration techniques, Advanced Configuration Techniques

configuration too complex, Common Errors

configuration tool, SWAT: The Samba Web Administration Tool

configuration wizard, Joining a Domain: Windows 2000/XP Professional

configure, Building the Binaries

configuring a firewall, Using a Firewall

confirm address, Using Interface Protection

confirm the password, Samba as the Trusting Domain

confirm the trust, Samba as the Trusted Domain

connect transparently, The Ultimate Goal

connection resources, Why Is This Better Than security = server?

connections, Example Configuration

connections.tdb, The Printing *.tdb Files

(see also TDB)

consistent case, Handling Large Directories

console, Linux/FreeBSD-Specific PAM Configuration

consumer expects, Samba Support

container, Create the Computer Account

continuity of service, High-Availability Server Products

contribute, Multiple Server Hosting

Control Panel, Joining a Domain: Windows 2000/XP Professional

convert

domain member server, Domain Controller Types

converted, Technical Information

copy'n'paste, Remote Management from NoMachine.Com

core files, Internal Errors

core graphic engine, Windows Drivers, GDI, and EMF

core values, Objectives

corrupted file, Domain Member Server or Domain Member Client

cosine.schema, OpenLDAP Configuration

country of origin, Commercial Support

CP850, Samba and Charsets

CP932, Basic Parameter Setting

cracker, Using Interface Protection

create, Managing Directories

Create a Computer Account, Windows NT4 Client

create a domain machine account, Domain Member Server

create domain member, Windows 200x/XP Professional Client

create machine trust account, Joining an NT4-type Domain with Samba-3

create mask, Secure Read-Write File and Print Server, Example Configuration, Example: Engineering Office, Domain Control: Example Configuration, File and Directory Permissions-Based Controls, Interaction with the Standard Samba “create mask” Parameters, Multiple Virtual Server Personalities, Windows 2000 Service Pack 2

create partition, Shadow Copy Setup

Create the Computer Account, Configure /etc/krb5.conf

create user accounts, Background

create volume, Shadow Copy Setup

credentials, User Level Security, Single Sign-On and Domain Security, LDAP Configuration Notes, Configure /etc/krb5.conf, Joining a Domain: Windows 2000/XP Professional, Administering User Rights and Privileges, User Rights and Privileges

credentials validation, NetBIOS Over TCP/IP Enabled

critical aspects of configuration, Features and Benefits

crle, Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris

cron, Backup Domain Controller Configuration

cross post, Getting Mailing List Help

cross-segment browsing, NetBIOS over TCP/IP

cross-subnet browsing, How Browsing Functions, Configuring Workgroup Browsing, WINS Server Configuration, Behavior of Cross-Subnet Browsing

csc policy, Miscellaneous Controls

CUPS, Features and Benefits, Technical Introduction, Extended Printing Configuration, The [global] Section, Features and Benefits, Overview, Basic CUPS Support Configuration, Using Windows-Formatted Vendor PPDs

Page Accounting, Page Accounting with CUPS
quotas, Setting Up Quotas

CUPS API, Configuration File Syntax, Default UNIX System Printing Commands

CUPS backends, CUPS Backends

CUPS filtering, CUPS Also Uses PPDs for Non-PostScript Printers, The CUPS Filtering Architecture

CUPS filtering chain, CUPS Backends

CUPS libarary API, Central Print Serving

CUPS PostScript, Caveats to Be Considered

CUPS PostScript driver, Windows CUPS PostScript Driver Versus Adobe Driver

CUPS print filters, Central Print Serving

CUPS raster, The CUPS Filtering Architecture, pstoraster

CUPS-PPD, cupsomatic, pdqomatic, lpdomatic, directomatic

cups.hlp, Caveats to Be Considered

cupsaddsmb, Driver Upload Methods, cupsaddsmb: The Unknown Utility, Caveats to Be Considered, Run cupsaddsmb (Quiet Mode), Run cupsaddsmb with Verbose Output, Understanding cupsaddsmb, cupsaddsmb with a Samba PDC, cupsaddsmb Flowchart, Installing the PostScript Driver on a Client, Requirements for adddriver and setdriver to Succeed

cupsd.conf, Default UNIX System Printing Commands, Basic CUPS Support Configuration, mime.convs, Autodeletion or Preservation of CUPS Spool Files

cupsomatic, Using Windows-Formatted Vendor PPDs, The CUPS Filtering Architecture, The Role of cupsomatic/foomatic, cupsomatic/foomatic-rip Versus Native CUPS Printing, CUPS Print Drivers from Linuxprinting.org, cupsomatic, pdqomatic, lpdomatic, directomatic

custom scripts, smbpasswd: Encrypted Password Database

customer expected, Samba Support

customers, Samba Support

customized print commands, Custom Print Commands

D

daemon, Starting Samba, Interdomain Trust Relationships, Requirements, Alternative: Starting smbd as a Daemon

daemon running, Starting and Testing the winbindd Daemon

daemons, Restarting

damaged data, Account Flags Management

data caching, Opportunistic Locking Overview

data corruption, Browsing of Shares and Directories is Very Slow, UNIX or NFS Client-Accessed Files

data interchange, File, Directory, and Share Access Controls

data stream, Technical Introduction

database, MS Windows Workstation/Server Machine Trust Accounts, Quick Migration Guide

DatabaseFS, DatabaseFS

DAVE, Macintosh Clients

dbx, Internal Errors

DCE RPC, Join the Samba Server to the PDC Domain

DDK, PostScript Drivers with No Major Problems, Even in Kernel Mode, CUPS “PostScript Driver for Windows NT/200x/XP”

DDNS, TCP/IP without NetBIOS, DNS and Active Directory, Background Information

de-multiplex, The Front-End Challenge

de-multiplexing, Demultiplexing SMB Requests

Debian, Shadow Copy Setup

Debian Sarge, Shadow Copy Setup

debug, Internal Errors

debug level, Debugging with Samba Itself, Debug Levels, Log Level

debugging, Debugging with Samba Itself, Debugging-Specific Operations

debugging passwords, Debugging with Samba Itself

debugging problems, Debugging with Samba Itself

debuglevel, Debug Levels

dedicated heartbeat, High-Availability Server Products

dedicated print server, Features and Benefits

default accounts, Domain Control: Example Configuration

default aliases, Default Users, Groups, and Relative Identifiers

default behavior, Identity Mapping (IDMAP)

default case, Miscellaneous Controls, Handling Large Directories

default devmode, Setting Device Modes on New Printers

default DNS setup, Notes

default gateways, MS Windows XP Professional

default groups, Default Users, Groups, and Relative Identifiers

default mappings, Mapping Windows Groups to UNIX Groups

default print command, Default UNIX System Printing Commands

default print commands, The [global] Section

default printer, Custom Print Commands

default printing, Features and Benefits

default profile, Default Profile for Windows Users, Changing the Default Profile

default settings, Account Flags Management

default shells, Starting and Testing the winbindd Daemon

Default User, MS Windows 200x/XP

default users, Default Users, Groups, and Relative Identifiers

defective hardware, Browsing of Shares and Directories is Very Slow

deferred open, Opportunistic Locking Overview

defined shares, Why Can Users Access Other Users' Home Directories?

delegate administrative privileges, Administering User Rights and Privileges

delegated, Important Administrative Information

delegation, Trust Relationship Background

delete, Managing Directories

delete a file, Protecting Directories and Files from Deletion

delete group script, Example: Engineering Office, The Primary Domain Controller, Multiple Virtual Server Hosting

delete printer command, Adding New Printers with the Windows NT APW

delete roaming profiles, MS Windows 200x/XP

delete share command, Creating, Editing, and Removing Shares

delete user from group script, Example: Engineering Office, The Primary Domain Controller

delete user script, Example: Engineering Office, The Primary Domain Controller, Deleting Accounts, Multiple Virtual Server Hosting

deleted files, recycle

deleted parameters, Removed Parameters

delmem, Nested Groups: Adding Windows Domain Groups to Windows Local Groups

demote, Domain Controller Types

demoted, MS Windows NT4-style Domain Control

denial of service, Using Interface Protection

deny, Using IPC$ Share-Based Denials

deny access, Using a Firewall

deny modes, Discussion

deny-none, Opportunistic Locking Overview

DENY_ALL, Discussion

DENY_DOS, Discussion

DENY_FCB, Discussion

DENY_NONE, Discussion

DENY_READ, Discussion

DENY_WRITE, Discussion

deployment, Free Support

deployment guidelines, Caution Regarding LDAP and Samba

DES-CBC-CRC, Configure /etc/krb5.conf

DES-CBC-MD5, Configure /etc/krb5.conf, Testing Server Setup

desirable solution, What Rights and Privileges Will Permit Windows Client Administration?

desktop cache, Windows 9x/Me Profile Setup

desktop profile, Domain Control: Example Configuration, MS Windows NT4-style Domain Control

desktop profiles, Features and Benefits, Managing Security Identifiers (SIDS)

deterents, Introduction

development libraries, Requirements

devfsd package, Shadow Copy Setup

device mode, Setting Device Modes on New Printers

device-specific commands, PostScript Printer Descriptions for Non-PostScript Printers

DFS, Features and Benefits (see MS-DFS, Distributed File Systems)

DFS junction, Features and Benefits

DFS links, Features and Benefits

DFS root, Features and Benefits

DFS server, Features and Benefits

DFS tree, Features and Benefits

DFS-aware, Features and Benefits

DFS-aware clients, Features and Benefits

DHCP, TCP/IP Configuration, MS Windows XP Professional, MS Windows 2000, MS Windows Me, Cross-Subnet Browsing, Background Information, Features and Benefits

DHCP servers, Comments Regarding LDAP

DHCP-enabled, MS Windows 2000

DHCP-enabled operation, MS Windows XP Professional

diagnostic, IDMAP Storage in LDAP Using Winbind

diagnostic tools, Debugging with Samba Itself

diff, Patches

differences, Rsync

different resources, Multiple Virtual Server Personalities

differently encrypted passwords, Technical Information

differing protocol, Quick Migration Guide

dir, The Tests

direct internet access, Introduction

directory, Active Directory Domain Control, Central Print Serving, Backup Domain Controller

directory access control, Nested Groups: Adding Windows Domain Groups to Windows Local Groups

directory access permissions, File, Directory, and Share Access Controls

directory controls, File, Directory, and Share Access Controls

Directory Information Tree (see DIT)

directory mask, Domain Control: Example Configuration, File and Directory Permissions-Based Controls, Windows 2000 Service Pack 2

directory permissions, File, Directory, and Share Access Controls, Protecting Directories and Files from Deletion

directory schema, Primary Domain Controller

directory security mask, Interaction with the Standard Samba “create mask” Parameters

Directory Separators, MS Windows NTFS Comparison with UNIX File Systems

directory server, ldapsam

disable LMB, Configuring Workgroup Browsing

disable locking, Features and Benefits

disable roaming profiles, Disabling Roaming Profile Support

disable spoolss, Anonymous Print Server, Secure Read-Write File and Print Server, Example Configuration, Multiple Virtual Server Personalities

disabling oplocks, PDM Data Shares

disass, Internal Errors

disaster recovery, Server Share and Directory Layout

disconnect a connection, NT4/200x User Profiles

disk, Advantages of Encrypted Passwords

disk space, Server Share and Directory Layout

disparate information systems, Single Sign-On and Domain Security

display charset, Samba and Charsets, Basic Parameter Setting, Individual Implementations, Enabling SWAT Internationalization Support

display PostScript, UNIX Printfile Conversion and GUI Basics

displayName, OpenLDAP Configuration

distort, UNIX Printfile Conversion and GUI Basics

distribute authentication systems, Objectives

distributed, Features and Benefits, Domain Control: Example Configuration

distributed account, New Account Storage Systems

Distributed Computing Environment (see DCE)

distributed directory, Domain Member Server

distributed file system, The Ultimate Goal (see DFS)

Distributed File Systems, The Distributed File System Challenge

distributed file systems, The Distributed File System Challenge

distributed locking protocol, A Simple Solution

distribution, Example Configuration, Joining an NT4-type Domain with Samba-3

dithering algorithm, The Role of cupsomatic/foomatic

DMB, Preparing for Domain Control, Domain Control: Example Configuration, Security Mode and Master Browsers, What Qualifies a Domain Controller on the Network?, How Browsing Functions, Configuring Workgroup Browsing, Domain Browsing Configuration, Forcing Samba to Be the Master, Making Samba the Domain Master, WINS: The Windows Internetworking Name Server, Windows Networking Protocols, Behavior of Cross-Subnet Browsing

DMB for a workgroup, Browsing Support in Samba

DMC, Examples of IDMAP Backend Usage

DMS, Domain Security Mode (User-Level Security), Overview, Examples of IDMAP Backend Usage, Advanced Configuration Techniques

DN, LDAP Configuration Notes, Introduction

DNS, Preparing for Domain Control, How Does a Workstation find its Domain Controller?, NetBIOS Over TCP/IP Disabled, Configure smb.conf, Configure /etc/krb5.conf, MS Windows XP Professional, MS Windows 2000, MS Windows Me, Network Browsing, Features and Benefits, NetBIOS over TCP/IP, TCP/IP without NetBIOS, How Browsing Functions, Cross-Subnet Browsing, Initialize the LDAP Database, Name Service Switch, Background Information, DNS Lookup, The Tests, Features and Benefits, Example Configuration

Active Directory, DNS and Active Directory
Dynamic, Background Information, Dynamic DNS
SRV records, DNS and Active Directory

DNS Configuration, Browsing of Shares and Directories is Very Slow

DNS lookup, Configure /etc/krb5.conf

DNS name resolution, Joining an NT4-type Domain with Samba-3

dns proxy, What Is Browsing?, Assumptions

DNS server,

Contents

Index

Symbols

A

B

C

D