- Timestamp:
- May 23, 2008, 6:56:41 AM (17 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.0/docs/htmldocs/Samba3-ByExample/small.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"><link rel="start" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id321229">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id321247">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id321293">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id321342">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id321528">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id321546">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id323199">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id323822">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id323841">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id323907">Questions and Answers</a></span></dt></dl></div><p>2 <a href="simple.html" title="Chapter 1. No-Frills Samba Servers">???</a> focused on the basics of simple yet effective3 network solutions. Network administrators who take pride in their work 4 (that's most of us, right?) take care to deliver what our users want, 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"><link rel="start" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id344880">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id344898">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id344943">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id344988">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id345160">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id345178">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id346626">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id347201">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id347221">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id347285">Questions and Answers</a></span></dt></dl></div><p> 2 <a class="link" href="simple.html" title="Chapter 1. No-Frills Samba Servers">“No-Frills Samba Servers”</a> focused on the basics of simple yet effective 3 network solutions. Network administrators who take pride in their work 4 (that's most of us, right?) take care to deliver what our users want, 5 5 but not too much more. If we make things too complex, we confound our users 6 and increase costs of network ownership. A professional network manager 7 avoids the temptation to put too much pizazz into the way that the network 6 and increase costs of network ownership. A professional network manager 7 avoids the temptation to put too much pizazz into the way that the network 8 8 operates. Some creativity is helpful, but keep it under control 9 9 good advice that the following two scenarios illustrate. 10 10 </p><p> 11 <a class="indexterm" name="id3 21194"></a>11 <a class="indexterm" name="id344851"></a> 12 12 In one case the network administrator of a mid-sized company spent three 13 13 months building a new network to replace an old Netware server. What he … … 37 37 sleeves for when you need them.</span>” Was he smart? You decide. Let's 38 38 get on with our next exercise. 39 </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3 21229"></a>Introduction</h2></div></div></div><p>39 </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id344880"></a>Introduction</h2></div></div></div><p> 40 40 Abmas Accounting has grown. Mr. Meany likes you and says he knew you 41 41 were the right person for the job. That's why he asked you to install the … … 45 45 network without any problems. 46 46 </p><p> 47 Some of the Windows clients are nearly past their use-by date. 48 You found damaged and unusable software on some of the workstations 49 that came with the acquired business and found some machines 50 in need of both hardware and software maintenance. 51 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id321247"></a>Assignment Tasks</h3></div></div></div><p> 52 <a class="indexterm" name="id321255"></a> 47 Some of the Windows clients are nearly past their use-by date. You found damaged and unusable software on 48 some of the workstations that came with the acquired business and found some machines in need of both 49 hardware and software maintenance. 50 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344898"></a>Assignment Tasks</h3></div></div></div><p> 51 <a class="indexterm" name="id344905"></a> 53 52 Mr. Meany is retiring in 12 months. Before he goes, he wants you to help ensure 54 53 that the business is running efficiently. Many of the new staff want notebook … … 82 81 user accounts from the Windows desktop. That person will be responsible for 83 82 basic operations. 84 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3 21293"></a>Dissection and Discussion</h2></div></div></div><p>83 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id344943"></a>Dissection and Discussion</h2></div></div></div><p> 85 84 What are the key requirements in this business example? A quick review indicates 86 85 a need for … … 89 88 </p></li><li><p> 90 89 Mobile computing capability 91 <a class="indexterm" name="id3 21314"></a>90 <a class="indexterm" name="id344963"></a> 92 91 </p></li><li><p> 93 92 Improved reliability and usability … … 95 94 Easier administration 96 95 </p></li></ul></div><p> 97 In this instance the installed Linux system is assumed to be a Red Hat Linux Fedora Core2 server 98 (as in <a href="simple.html#AccountingOffice" title="Accounting Office">???</a>).99 100 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3 21342"></a>Technical Issues</h3></div></div></div><p>101 <a class="indexterm" name="id3 21350"></a>102 <a class="indexterm" name="id3 21357"></a>103 <a class="indexterm" name="id3 21364"></a>104 <a class="indexterm" name="id3 21370"></a>105 <a class="indexterm" name="id3 21377"></a>96 In this instance the installed Linux system is assumed to be a Red Hat Linux Fedora Core2 server 97 (as in <a class="link" href="simple.html#AccountingOffice" title="Accounting Office">“Accounting Office”</a>). 98 99 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344988"></a>Technical Issues</h3></div></div></div><p> 100 <a class="indexterm" name="id344995"></a> 101 <a class="indexterm" name="id345002"></a> 102 <a class="indexterm" name="id345008"></a> 103 <a class="indexterm" name="id345014"></a> 104 <a class="indexterm" name="id345020"></a> 106 105 It is time to implement a domain security environment. You will use the <code class="constant"> 107 106 smbpasswd</code> (default) backend. You should implement a DHCP server. There is no need to … … 109 108 BILLMORE</code>. This time, the name of the server will be <code class="constant">SLEETH</code>. 110 109 </p><p> 111 All printers will be configured as DHCP clients. The DHCP server will assign 110 All printers will be configured as DHCP clients. The DHCP server will assign 112 111 the printer a fixed IP address by way of its Ethernet interface (MAC) address. 113 See <a href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">???</a>.112 See <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>. 114 113 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 115 114 The <code class="filename">smb.conf</code> file you are creating in this exercise can be used with equal effectiveness … … 124 123 other enhancements. It is important that you plan accordingly. 125 124 </p><p> 126 <a class="indexterm" name="id3 21431"></a>125 <a class="indexterm" name="id345070"></a> 127 126 You have split the network into two separate areas. Each has its own Ethernet switch. 128 127 There are 20 users on the accounting network and 32 users on the financial services 129 network. The server has two network interfaces, one serving each network. The 130 network printers will be located in a central area. You plan to install the new 128 network. The server has two network interfaces, one serving each network. The 129 network printers will be located in a central area. You plan to install the new 131 130 printers and keep the old printer in use also. 132 131 </p><p> … … 136 135 responsible for file location, so the old share point must be maintained. 137 136 </p><p> 138 Given that DNS will not be used, you will configure WINS name resolution for UNIX 137 Given that DNS will not be used, you will configure WINS name resolution for UNIX 139 138 hostname name resolution. 140 139 </p><p> 141 <a class="indexterm" name="id3 21455"></a>142 <a class="indexterm" name="id3 21464"></a>140 <a class="indexterm" name="id345093"></a> 141 <a class="indexterm" name="id345101"></a> 143 142 It is necessary to map Windows Domain Groups to UNIX groups. It is 144 143 advisable to also map Windows Local Groups to UNIX groups. Additionally, the two … … 157 156 more information. 158 157 </p><p> 159 <a class="indexterm" name="id3 21515"></a>158 <a class="indexterm" name="id345147"></a> 160 159 Vendor-supplied printer drivers will be installed on each client. The CUPS print 161 160 spooler on the UNIX host will be operated in <code class="constant">raw</code> mode. 162 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3 21528"></a>Political Issues</h3></div></div></div><p>161 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345160"></a>Political Issues</h3></div></div></div><p> 163 162 Mr. Meany is an old-school manager. He sets the rules and wants to see compliance. 164 163 He is willing to spend money on things he believes are of value. You need more … … 168 167 supplied with antivirus software? Above all, demonstrate good purchase value and remember 169 168 to make your users happy. 170 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3 21546"></a>Implementation</h2></div></div></div><p>171 <a class="indexterm" name="id3 21554"></a>169 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id345178"></a>Implementation</h2></div></div></div><p> 170 <a class="indexterm" name="id345185"></a> 172 171 In this example, the assumption is made that this server is being configured from a clean start. 173 172 The alternate approach could be to demonstrate the migration of the system that is documented 174 in <a href="simple.html#AcctgNet" title="Implementation">???</a> to meet the new requirements. The decision to treat this case, as with173 in <a class="link" href="simple.html#AcctgNet" title="Implementation">“Implementation”</a> to meet the new requirements. The decision to treat this case, as with 175 174 future examples, as a new installation is based on the premise that you can determine 176 the migration steps from the information provided in <a href="ntmigration.html" title="Chapter 9. Migrating NT4 Domain to Samba-3">???</a>.175 the migration steps from the information provided in <a class="link" href="ntmigration.html" title="Chapter 9. Migrating NT4 Domain to Samba-3">“Migrating NT4 Domain to Samba-3”</a>. 177 176 Additionally, a fresh installation makes the example easier to follow. 178 177 </p><p> 179 <a class="indexterm" name="id3 21581"></a>178 <a class="indexterm" name="id345207"></a> 180 179 Each user will be given a home directory on the UNIX system, which will be available as a private 181 180 share. Two additional shares will be created, one for the accounting department and the other for … … 183 182 of group membership. 184 183 </p><p> 185 <a class="indexterm" name="id3 21593"></a>184 <a class="indexterm" name="id345220"></a> 186 185 UNIX group membership is the primary mechanism by which Windows Domain users will be granted 187 186 rights and privileges within the Windows environment. 188 187 </p><p> 189 <a class="indexterm" name="id3 21607"></a>188 <a class="indexterm" name="id345232"></a> 190 189 The user <code class="literal">alanm</code> will be made the owner of all files. This will be preserved 191 190 by setting the sticky bit (set UID/GID) on the top-level directories. 192 </p><div class="figure"><a name="acct2net"></a><p class="title"><b>Figure 2.1. Abmas Accounting 52-User Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/acct2net.png" alt="Abmas Accounting 52-User Network Topology"></div></div></div><br class="figure-break"><div class="procedure"><a name="id3 21665"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol type="1"><li><p>191 </p><div class="figure"><a name="acct2net"></a><p class="title"><b>Figure 2.1. Abmas Accounting 52-User Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/acct2net.png" alt="Abmas Accounting 52-User Network Topology"></div></div></div><br class="figure-break"><div class="procedure"><a name="id345285"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol type="1"><li><p> 193 192 Using UNIX/Linux system tools, name the server <code class="constant">sleeth</code>. 194 193 </p></li><li><p> 195 <a class="indexterm" name="id3 21687"></a>194 <a class="indexterm" name="id345305"></a> 196 195 Place an entry for the machine <code class="constant">sleeth</code> in the <code class="filename">/etc/hosts</code>. 197 196 The printers are network attached, so there should be entries for the … … 209 208 Install the ISC DHCP server using the UNIX/Linux system tools available to you. 210 209 </p></li><li><p> 211 <a class="indexterm" name="id3 21738"></a>212 <a class="indexterm" name="id3 21745"></a>213 <a class="indexterm" name="id3 21752"></a>214 <a class="indexterm" name="id3 21759"></a>210 <a class="indexterm" name="id345353"></a> 211 <a class="indexterm" name="id345359"></a> 212 <a class="indexterm" name="id345365"></a> 213 <a class="indexterm" name="id345372"></a> 215 214 Because Samba will be operating over two network interfaces and clients on each side 216 215 may want to be able to reach clients on the other side, it is imperative that IP forwarding … … 223 222 This causes the Linux kernel to forward IP packets so that it acts as a router. 224 223 </p></li><li><p> 225 Install the <code class="filename">smb.conf</code> file as shown in <a href="small.html#acct2conf" title="Example 2.3. Accounting Office Network smb.conf File [globals] Section">???</a> and226 <a href="small.html#acct3conf" title="Example 2.4. Accounting Office Network smb.conf File Services and Shares Section">???</a>. Combine these two examples to form a single224 Install the <code class="filename">smb.conf</code> file as shown in <a class="link" href="small.html#acct2conf" title="Example 2.3. Accounting Office Network smb.conf File [globals] Section">“Accounting Office Network smb.conf File [globals] Section”</a> and 225 <a class="link" href="small.html#acct3conf" title="Example 2.4. Accounting Office Network smb.conf File Services and Shares Section">“Accounting Office Network smb.conf File Services and Shares Section”</a>. Combine these two examples to form a single 227 226 <code class="filename">/etc/samba/smb.conf</code> file. 228 227 </p></li><li><p> 229 <a class="indexterm" name="id3 21820"></a>228 <a class="indexterm" name="id345424"></a> 230 229 Add the user <code class="literal">root</code> to the Samba password backend: 231 230 </p><pre class="screen"> … … 235 234 <code class="prompt">root# </code> 236 235 </pre><p> 237 <a class="indexterm" name="id3 21851"></a>236 <a class="indexterm" name="id345452"></a> 238 237 This is the Windows Domain Administrator password. Never delete this account from 239 238 the password backend after Windows Domain Groups have been initialized. If you delete … … 241 240 and your Samba server can no longer be administered. 242 241 </p></li><li><p> 243 <a class="indexterm" name="id3 21867"></a>244 Create the username map file to permit the <code class="constant">root</code> account to be called 242 <a class="indexterm" name="id345467"></a> 243 Create the username map file to permit the <code class="constant">root</code> account to be called 245 244 <code class="constant">Administrator</code> from the Windows network environment. To do this, create 246 245 the file <code class="filename">/etc/samba/smbusers</code> with the following contents: … … 268 267 </pre><p> 269 268 </p></li><li><p> 270 <a class="indexterm" name="id3 21909"></a>269 <a class="indexterm" name="id345501"></a> 271 270 Create and map Windows Domain Groups to UNIX groups. A sample script is provided in 272 <a href="small.html#initGrps" title="Example 2.1. Script to Map Windows NT Groups to UNIX Groups">???</a>. Create a file containing this script. We called ours271 <a class="link" href="small.html#initGrps" title="Example 2.1. Script to Map Windows NT Groups to UNIX Groups">“Script to Map Windows NT Groups to UNIX Groups”</a>. Create a file containing this script. We called ours 273 272 <code class="filename">/etc/samba/initGrps.sh</code>. Set this file so it can be executed, 274 273 and then execute the script. Sample output should be as follows: 275 274 276 </p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id3 21939"></a><pre class="screen">275 </p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id345527"></a><pre class="screen"> 277 276 #!/bin/bash 278 277 # … … 296 295 </p><pre class="screen"> 297 296 <code class="prompt">root# </code> chmod 755 initGrps.sh 298 <code class="prompt">root# </code> cd /etc/samba 297 <code class="prompt">root# </code> cd /etc/samba 299 298 <code class="prompt">root# </code> ./initGrps.sh 300 299 Updated mapping entry for Domain Admins … … 306 305 Successfully added group Domain Guests to the mapping db 307 306 308 <code class="prompt">root# </code> cd /etc/samba 307 <code class="prompt">root# </code> cd /etc/samba 309 308 <code class="prompt">root# </code> net groupmap list | sort 310 309 Account Operators (S-1-5-32-548) -> -1 … … 324 323 </pre><p> 325 324 </p></li><li><p> 326 <a class="indexterm" name="id3 22008"></a>327 <a class="indexterm" name="id3 22015"></a>328 <a class="indexterm" name="id3 22024"></a>325 <a class="indexterm" name="id345591"></a> 326 <a class="indexterm" name="id345597"></a> 327 <a class="indexterm" name="id345606"></a> 329 328 For each user who needs to be given a Windows Domain account, make an entry in the 330 329 <code class="filename">/etc/passwd</code> file as well as in the Samba password backend. … … 332 331 <code class="literal">smbpasswd</code> program to create the Domain user accounts. 333 332 </p><p> 334 <a class="indexterm" name="id3 22048"></a>335 <a class="indexterm" name="id3 22055"></a>336 <a class="indexterm" name="id3 22062"></a>333 <a class="indexterm" name="id345628"></a> 334 <a class="indexterm" name="id345634"></a> 335 <a class="indexterm" name="id345640"></a> 337 336 There are a number of tools for user management under UNIX, such as 338 337 <code class="literal">useradd</code> and <code class="literal">adduser</code>, as well as a plethora of custom … … 345 344 data storage for company files. In this case the mount point is indicated in the <code class="filename">smb.conf</code> 346 345 file is <code class="filename">/data</code>. Format the file system as required, mount the formatted 347 file system partition using <code class="literal">mount</code>, 346 file system partition using <code class="literal">mount</code>, 348 347 and make the appropriate changes in <code class="filename">/etc/fstab</code>. 349 348 </p></li><li><p> … … 360 359 The directory root of the <code class="literal">finsvcs</code> share is <code class="filename">/data/finsvcs</code>. 361 360 </p></li><li><p> 362 Configure the printers with the IP addresses as shown in <a href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">???</a>.361 Configure the printers with the IP addresses as shown in <a class="link" href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">“Abmas Accounting 52-User Network Topology”</a>. 363 362 Follow the instructions in the manufacturers' manuals to permit printing to port 9100. 364 363 This allows the CUPS spooler to print using raw mode protocols. 365 <a class="indexterm" name="id3 22209"></a>366 <a class="indexterm" name="id3 22216"></a>367 </p></li><li><p> 368 <a class="indexterm" name="id3 22229"></a>369 <a class="indexterm" name="id3 22238"></a>364 <a class="indexterm" name="id345771"></a> 365 <a class="indexterm" name="id345777"></a> 366 </p></li><li><p> 367 <a class="indexterm" name="id345790"></a> 368 <a class="indexterm" name="id345798"></a> 370 369 Configure the CUPS Print Queues as follows: 371 370 </p><pre class="screen"> … … 374 373 <code class="prompt">root# </code> lpadmin -p qms -v socket://192.168.2.10:9100 -E 375 374 </pre><p> 376 <a class="indexterm" name="id3 22270"></a>375 <a class="indexterm" name="id345825"></a> 377 376 This creates the necessary print queues with no assigned print filter. 378 377 </p></li><li><p> 379 <a class="indexterm" name="id3 22284"></a>380 <a class="indexterm" name="id3 22291"></a>381 <a class="indexterm" name="id3 22298"></a>378 <a class="indexterm" name="id345839"></a> 379 <a class="indexterm" name="id345845"></a> 380 <a class="indexterm" name="id345851"></a> 382 381 Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: 383 382 </p><pre class="screen"> … … 385 384 </pre><p> 386 385 </p></li><li><p> 387 <a class="indexterm" name="id3 22324"></a>386 <a class="indexterm" name="id345875"></a> 388 387 Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: 389 388 </p><pre class="screen"> … … 391 390 </pre><p> 392 391 </p></li><li><p> 393 <a class="indexterm" name="id3 22349"></a>392 <a class="indexterm" name="id345898"></a> 394 393 Using your favorite system editor, create an <code class="filename">/etc/dhcpd.conf</code> with the 395 contents as shown in <a href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">???</a>.396 </p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id3 22384"></a><pre class="screen">394 contents as shown in <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>. 395 </p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id345927"></a><pre class="screen"> 397 396 default-lease-time 86400; 398 397 max-lease-time 172800; … … 442 441 automatically at every system reboot. For example, 443 442 </p><p> 444 <a class="indexterm" name="id3 22419"></a>445 <a class="indexterm" name="id3 22426"></a>446 <a class="indexterm" name="id3 22432"></a>447 <a class="indexterm" name="id3 22439"></a>448 <a class="indexterm" name="id3 22446"></a>443 <a class="indexterm" name="id345960"></a> 444 <a class="indexterm" name="id345966"></a> 445 <a class="indexterm" name="id345973"></a> 446 <a class="indexterm" name="id345979"></a> 447 <a class="indexterm" name="id345985"></a> 449 448 </p><pre class="screen"> 450 449 <code class="prompt">root# </code> chkconfig dhcp on … … 456 455 </pre><p> 457 456 </p></li><li><p> 458 <a class="indexterm" name="id3 22501"></a>459 <a class="indexterm" name="id3 22508"></a>460 <a class="indexterm" name="id3 22517"></a>461 <a class="indexterm" name="id3 22523"></a>462 <a class="indexterm" name="id3 22530"></a>463 <a class="indexterm" name="id3 22537"></a>457 <a class="indexterm" name="id346034"></a> 458 <a class="indexterm" name="id346040"></a> 459 <a class="indexterm" name="id346049"></a> 460 <a class="indexterm" name="id346055"></a> 461 <a class="indexterm" name="id346061"></a> 462 <a class="indexterm" name="id346068"></a> 464 463 Configure the name service switch (NSS) to handle WINS-based name resolution. 465 464 Since this system does not use a DNS server, it is safe to remove this option from … … 469 468 hosts: files wins 470 469 </pre><p> 471 </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id3 22599"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id322611"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id322624"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id322637"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id322650"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id322662"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id322675"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id322688"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id322700"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id322713"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id322726"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id322739"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -G '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id322752"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id322765"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id322778"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id322790"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id322803"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id322815"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id322828"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id322840"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id322886"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id322898"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id322911"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id322924"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id322945"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id322958"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id322970"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id322983"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id322995"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id323008"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id323029"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id323042"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id323054"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id323067"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id323088"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id323101"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id323114"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id323126"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id323148"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id323160"></a><em class="parameter"><code>path = /data/finsvcs</code></em></td></tr><tr><td><a class="indexterm" name="id323173"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id323185"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id323199"></a>Validation</h3></div></div></div><p>470 </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id346123"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id346133"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id346145"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id346155"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id346165"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id346176"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id346186"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id346197"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m -G users '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id346207"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id346217"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id346228"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id346238"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -A '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id346249"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id346260"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id346271"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id346281"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id346292"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id346302"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id346312"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id346323"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id346363"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id346373"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id346383"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id346394"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id346413"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id346423"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id346433"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id346444"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id346454"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id346465"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id346483"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id346494"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id346504"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id346515"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id346533"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id346544"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id346554"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id346565"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id346583"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id346594"></a><em class="parameter"><code>path = /data/finsvcs</code></em></td></tr><tr><td><a class="indexterm" name="id346604"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id346615"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346626"></a>Validation</h3></div></div></div><p> 472 471 Does everything function as it ought? That is the key question at this point. 473 472 Here are some simple steps to validate your Samba server configuration. 474 </p><div class="procedure"><a name="id3 23209"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol type="1"><li><p>475 <a class="indexterm" name="id3 23220"></a>473 </p><div class="procedure"><a name="id346636"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol type="1"><li><p> 474 <a class="indexterm" name="id346647"></a> 476 475 If your <code class="filename">smb.conf</code> file has bogus options or parameters, this may cause Samba 477 476 to refuse to start. The first step should always be to validate the contents … … 496 495 printcap name = CUPS 497 496 show add printer wizard = No 498 add user script = /usr/sbin/useradd -m '%u'497 add user script = /usr/sbin/useradd -m -G users '%u' 499 498 delete user script = /usr/sbin/userdel -r '%u' 500 499 add group script = /usr/sbin/groupadd '%g' 501 500 delete group script = /usr/sbin/groupdel '%g' 502 add user to group script = /usr/sbin/usermod - G'%g' '%u'503 add machine script = /usr/sbin/useradd 501 add user to group script = /usr/sbin/usermod -A '%g' '%u' 502 add machine script = /usr/sbin/useradd 504 503 -s /bin/false -d /var/lib/nobody '%u' 505 504 logon script = scripts\logon.bat … … 520 519 Clear away all errors before proceeding, and start or restart samba as necessary. 521 520 </p></li><li><p> 522 <a class="indexterm" name="id3 23270"></a>523 <a class="indexterm" name="id3 23277"></a>524 <a class="indexterm" name="id3 23284"></a>525 <a class="indexterm" name="id3 23291"></a>521 <a class="indexterm" name="id346704"></a> 522 <a class="indexterm" name="id346710"></a> 523 <a class="indexterm" name="id346716"></a> 524 <a class="indexterm" name="id346722"></a> 526 525 Check that the Samba server is running: 527 526 </p><pre class="screen"> … … 540 539 <code class="literal">smbd</code> is normal. 541 540 </p></li><li><p> 542 <a class="indexterm" name="id3 23342"></a>541 <a class="indexterm" name="id346768"></a> 543 542 Check that an anonymous connection can be made to the Samba server: 544 543 </p><pre class="screen"> … … 569 568 a <code class="constant">NULL</code> password. 570 569 </p></li><li><p> 571 <a class="indexterm" name="id3 23387"></a>572 <a class="indexterm" name="id3 23393"></a>573 <a class="indexterm" name="id3 23400"></a>570 <a class="indexterm" name="id346810"></a> 571 <a class="indexterm" name="id346816"></a> 572 <a class="indexterm" name="id346822"></a> 574 573 Verify that the printers have the IP addresses assigned in the DHCP server configuration file. 575 574 The easiest way to do this is to ping the printer name. Immediately after the ping response … … 590 589 <code class="filename">/etc/dhcpd.conf</code> file. 591 590 </p></li><li><p> 592 <a class="indexterm" name="id3 23459"></a>591 <a class="indexterm" name="id346876"></a> 593 592 Make an authenticated connection to the server using the <code class="literal">smbclient</code> tool: 594 593 </p><pre class="screen"> … … 607 606 smb: \> q 608 607 </pre><p> 609 </p></li></ol></div></div><div class="procedure"><a name="id3 23498"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol type="1"><li><p>610 Configure clients to the network settings shown in <a href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">???</a>.608 </p></li></ol></div></div><div class="procedure"><a name="id346912"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol type="1"><li><p> 609 Configure clients to the network settings shown in <a class="link" href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">“Abmas Accounting 52-User Network Topology”</a>. 611 610 All clients use DHCP for TCP/IP protocol stack configuration. 612 <a class="indexterm" name="id3 23516"></a>613 <a class="indexterm" name="id3 23523"></a>611 <a class="indexterm" name="id346928"></a> 612 <a class="indexterm" name="id346934"></a> 614 613 DHCP configures all Windows clients to use the WINS Server address <code class="constant">192.168.1.1</code>. 615 614 </p></li><li><p> … … 617 616 username <code class="constant">root</code> and the SMB password you assigned to this account. 618 617 A detailed step-by-step procedure for joining a Windows 200x/XP Professional client to 619 a Windows Domain is given in <a href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">???</a>, <a href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">???</a>.618 a Windows Domain is given in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. 620 619 Reboot the machine as prompted and then log on using a Domain User account. 621 620 </p></li><li><p> … … 653 652 Repeat the printer installation steps above for the HP LaserJet 6 printer 654 653 as well as for the QMS Magicolor XXXX laser printer. 655 </p></li></ol></div></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3 23822"></a>Notebook Computers: A Special Case</h3></div></div></div><p>654 </p></li></ol></div></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347201"></a>Notebook Computers: A Special Case</h3></div></div></div><p> 656 655 As a network administrator, you already know how to create local machine accounts for Windows 200x/XP 657 656 Professional systems. This is the preferred solution to provide continuity of work for notebook users … … 663 662 that mean that as the network is more tightly secured, it becomes necessary to modify Windows client 664 663 configuration somewhat. 665 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3 23841"></a>Key Points Learned</h3></div></div></div><p>664 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347221"></a>Key Points Learned</h3></div></div></div><p> 666 665 In this network design and implementation exercise, you created a Windows NT4-style Domain 667 666 Controller using Samba-3.0.20. Following these guidelines, you experienced … … 669 668 you build on the experience. These are the highlights from this chapter: 670 669 </p><div class="itemizedlist"><ul type="disc"><li><p> 671 <a class="indexterm" name="id3 23858"></a>670 <a class="indexterm" name="id347237"></a> 672 671 You implemented a DHCP server, and Microsoft Windows clients were able to obtain all necessary 673 672 network configuration settings from this server. 674 673 </p></li><li><p> 675 <a class="indexterm" name="id3 23871"></a>674 <a class="indexterm" name="id347249"></a> 676 675 You created a Windows Domain Controller. You were able to use the network logon service 677 676 and successfully joined Windows 200x/XP Professional clients to the Domain. 678 677 </p></li><li><p> 679 <a class="indexterm" name="id3 23883"></a>678 <a class="indexterm" name="id347262"></a> 680 679 You created raw print queues in the CUPS printing system. You maintained a simple 681 680 printing system so that all users can share centrally managed printers. You installed … … 686 685 You offered Mobile notebook users a solution that allows them to continue to work 687 686 while away from the office and not connected to the corporate network. 688 </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3 23907"></a>Questions and Answers</h2></div></div></div><p>687 </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id347285"></a>Questions and Answers</h2></div></div></div><p> 689 688 Your new Domain Controller is ready to serve you. What does it mean? Here are some questions and answers that 690 689 may help. 691 </p><div class="qandaset"><dl><dt>1. <a href="small.html#id3 23919">690 </p><div class="qandaset"><dl><dt>1. <a href="small.html#id347297"> 692 691 What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? 693 </a></dt><dt>2. <a href="small.html#id3 23941">692 </a></dt><dt>2. <a href="small.html#id347318"> 694 693 Are there any DHCP server configuration parameters in the /etc/dhcpd.conf 695 694 that should be noted in particular? 696 </a></dt><dt>3. <a href="small.html#id3 23968">695 </a></dt><dt>3. <a href="small.html#id347344"> 697 696 Is it possible to create a Windows Domain account that is specifically called Administrator? 698 </a></dt><dt>4. <a href="small.html#id3 24004">697 </a></dt><dt>4. <a href="small.html#id347378"> 699 698 Why is it necessary to give the Windows Domain Administrator a UNIX UID of 0? 700 </a></dt><dt>5. <a href="small.html#id3 24039">699 </a></dt><dt>5. <a href="small.html#id347411"> 701 700 One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him 702 701 root access. How can we do this? 703 </a></dt><dt>6. <a href="small.html#id3 24077">702 </a></dt><dt>6. <a href="small.html#id347447"> 704 703 Why must I map Windows Domain Groups to UNIX groups? 705 </a></dt><dt>7. <a href="small.html#id3 24114">704 </a></dt><dt>7. <a href="small.html#id347481"> 706 705 I deleted my root account and now I cannot add it back! What can I do? 707 </a></dt><dt>8. <a href="small.html#id3 24184">706 </a></dt><dt>8. <a href="small.html#id347546"> 708 707 When I run net groupmap list, it reports a group called Administrators 709 708 as well as Domain Admins. What is the difference between them? 710 </a></dt><dt>9. <a href="small.html#id3 24228">709 </a></dt><dt>9. <a href="small.html#id347586"> 711 710 What is the effect of changing the name of a Samba server or of changing the Domain name? 712 </a></dt><dt>10. <a href="small.html#id3 24272">711 </a></dt><dt>10. <a href="small.html#id347628"> 713 712 How can I manage user accounts from my Windows XP Professional workstation? 714 </a></dt></dl><table border="0" summary="Q and A Set"><col align="left" width="1%"><tbody><tr class="question"><td align="left" valign="top"><a name="id3 23919"></a><a name="id323922"></a><b>1.</b></td><td align="left" valign="top"><p>713 </a></dt></dl><table border="0" summary="Q and A Set"><col align="left" width="1%"><tbody><tr class="question"><td align="left" valign="top"><a name="id347297"></a><a name="id347299"></a><p><b>1.</b></p></td><td align="left" valign="top"><p> 715 714 What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? 716 715 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 721 720 default routes and DNS server addresses that apply only to the Abmas office environment do 722 721 not interfere with remote operations. This is an extremely important feature of DHCP. 723 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 23941"></a><a name="id323943"></a><b>2.</b></td><td align="left" valign="top"><p>722 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347318"></a><a name="id347320"></a><p><b>2.</b></p></td><td align="left" valign="top"><p> 724 723 Are there any DHCP server configuration parameters in the <code class="filename">/etc/dhcpd.conf</code> 725 724 that should be noted in particular? … … 730 729 NetBIOS machine name needs to be resolved to an IP Address. This configuration 731 730 results in far lower UDP broadcast traffic than would be the case if WINS was not used. 732 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 23968"></a><a name="id323970"></a><b>3.</b></td><td align="left" valign="top"><p>731 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347344"></a><a name="id347346"></a><p><b>3.</b></p></td><td align="left" valign="top"><p> 733 732 Is it possible to create a Windows Domain account that is specifically called <code class="constant">Administrator</code>? 734 733 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 737 736 necessary to use the <em class="parameter"><code>username map</code></em> facility to map this account to the UNIX 738 737 account called <code class="constant">root</code>. 739 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24004"></a><a name="id324006"></a><b>4.</b></td><td align="left" valign="top"><p>738 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347378"></a><a name="id347380"></a><p><b>4.</b></p></td><td align="left" valign="top"><p> 740 739 Why is it necessary to give the Windows Domain <code class="constant">Administrator</code> a UNIX UID of 0? 741 740 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 747 746 settings within the Domain and on the Samba server, equivalent rights must be assigned. This is 748 747 achieved with the <code class="constant">root</code> UID equal to 0. 749 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24039"></a><a name="id324042"></a><b>5.</b></td><td align="left" valign="top"><p>748 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347411"></a><a name="id347414"></a><p><b>5.</b></p></td><td align="left" valign="top"><p> 750 749 One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him 751 750 <code class="constant">root</code> access. How can we do this? … … 756 755 This must be the primary GID of the account of the user who is a member of the Windows <code class="constant"> 757 756 Domain Admins</code> account. 758 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24077"></a><a name="id324079"></a><b>6.</b></td><td align="left" valign="top"><p>757 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347447"></a><a name="id347449"></a><p><b>6.</b></p></td><td align="left" valign="top"><p> 759 758 Why must I map Windows Domain Groups to UNIX groups? 760 759 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 762 761 has a UNIX group account equivalent. The Domain groups that should be given UNIX equivalents are 763 762 <span class="guimenu">Domain Guests</span>, <span class="guimenu">Domain Users</span>, and <span class="guimenu">Domain Admins</span>. 764 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24114"></a><a name="id324116"></a><b>7.</b></td><td align="left" valign="top"><p>763 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347481"></a><a name="id347483"></a><p><b>7.</b></p></td><td align="left" valign="top"><p> 765 764 I deleted my <code class="constant">root</code> account and now I cannot add it back! What can I do? 766 765 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> 767 This is a nasty problem. Fortunately, there is a solution. 766 This is a nasty problem. Fortunately, there is a solution. 768 767 </p><div class="procedure"><ol type="1"><li><p> 769 768 Back up your existing configuration files in case you need to restore them. 770 769 </p></li><li><p> 771 Rename the <code class="filename">group_mapping.tdb</code> file. 770 Rename the <code class="filename">group_mapping.tdb</code> file. 772 771 </p></li><li><p> 773 772 Use the <code class="literal">smbpasswd</code> to add the root account. 774 773 </p></li><li><p> 775 774 Restore the <code class="filename">group_mapping.tdb</code> file. 776 </p></li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24184"></a><a name="id324186"></a><b>8.</b></td><td align="left" valign="top"><p>775 </p></li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="id347546"></a><a name="id347548"></a><p><b>8.</b></p></td><td align="left" valign="top"><p> 777 776 When I run <code class="literal">net groupmap list</code>, it reports a group called <span class="guimenu">Administrators</span> 778 777 as well as <span class="guimenu">Domain Admins</span>. What is the difference between them? 779 778 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> 780 779 The group called <span class="guimenu">Administrators</span> is representative of the same account that would be 781 present as the Local Group account on a Domain Member server or workstation. Samba uses only Domain 780 present as the Local Group account on a Domain Member server or workstation. Samba uses only Domain 782 781 Groups at this time. A Workstation or Server Local Group has no meaning in a Samba context. This 783 782 may change at some later date. These accounts are provided only so that security objects are correctly shown. 784 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24228"></a><a name="id324230"></a><b>9.</b></td><td align="left" valign="top"><p>783 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347586"></a><a name="id347588"></a><p><b>9.</b></p></td><td align="left" valign="top"><p> 785 784 What is the effect of changing the name of a Samba server or of changing the Domain name? 786 785 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 794 793 or the <code class="literal">smbpasswd</code> (Samba-2.2.x). To change the SID, you use the same tool. Be sure 795 794 to check the man page for this command for detailed instructions regarding the steps involved. 796 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id3 24272"></a><a name="id324274"></a><b>10.</b></td><td align="left" valign="top"><p>795 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id347628"></a><a name="id347630"></a><p><b>10.</b></p></td><td align="left" valign="top"><p> 797 796 How can I manage user accounts from my Windows XP Professional workstation? 798 797 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p>
Note:
See TracChangeset
for help on using the changeset viewer.
