- Timestamp:
- May 26, 2009, 9:43:19 AM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.2.x/docs/htmldocs/Samba3-ByExample/small.html
r204 r226 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id254799 8">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id2548021">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id2548082">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id2548136">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id2548347">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id2548369">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id2550069">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id2550774">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id2550800">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id2550876">Questions and Answers</a></span></dt></dl></div><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id2547993">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id2548016">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id2548078">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id2548131">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id2548343">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id2548364">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id2550065">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id2550769">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id2550795">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id2550871">Questions and Answers</a></span></dt></dl></div><p> 2 2 <a class="link" href="simple.html" title="Chapter 1. No-Frills Samba Servers">“No-Frills Samba Servers”</a> focused on the basics of simple yet effective 3 3 network solutions. Network administrators who take pride in their work … … 9 9 good advice that the following two scenarios illustrate. 10 10 </p><p> 11 <a class="indexterm" name="id25479 53"></a>11 <a class="indexterm" name="id2547949"></a> 12 12 In one case the network administrator of a mid-sized company spent three 13 13 months building a new network to replace an old Netware server. What he … … 37 37 sleeves for when you need them.</span>” Was he smart? You decide. Let's 38 38 get on with our next exercise. 39 </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id254799 8"></a>Introduction</h2></div></div></div><p>39 </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2547993"></a>Introduction</h2></div></div></div><p> 40 40 Abmas Accounting has grown. Mr. Meany likes you and says he knew you 41 41 were the right person for the job. That's why he asked you to install the … … 48 48 some of the workstations that came with the acquired business and found some machines in need of both 49 49 hardware and software maintenance. 50 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25480 21"></a>Assignment Tasks</h3></div></div></div><p>51 <a class="indexterm" name="id254802 9"></a>50 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548016"></a>Assignment Tasks</h3></div></div></div><p> 51 <a class="indexterm" name="id2548024"></a> 52 52 Mr. Meany is retiring in 12 months. Before he goes, he wants you to help ensure 53 53 that the business is running efficiently. Many of the new staff want notebook … … 81 81 user accounts from the Windows desktop. That person will be responsible for 82 82 basic operations. 83 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id25480 82"></a>Dissection and Discussion</h2></div></div></div><p>83 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2548078"></a>Dissection and Discussion</h2></div></div></div><p> 84 84 What are the key requirements in this business example? A quick review indicates 85 85 a need for … … 88 88 </p></li><li><p> 89 89 Mobile computing capability 90 <a class="indexterm" name="id254810 4"></a>90 <a class="indexterm" name="id2548100"></a> 91 91 </p></li><li><p> 92 92 Improved reliability and usability … … 97 97 (as in <a class="link" href="simple.html#AccountingOffice" title="Accounting Office">“Accounting Office”</a>). 98 98 99 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254813 6"></a>Technical Issues</h3></div></div></div><p>100 <a class="indexterm" name="id25481 43"></a>101 <a class="indexterm" name="id25481 50"></a>102 <a class="indexterm" name="id254815 7"></a>103 <a class="indexterm" name="id25481 63"></a>104 <a class="indexterm" name="id25481 70"></a>99 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548131"></a>Technical Issues</h3></div></div></div><p> 100 <a class="indexterm" name="id2548139"></a> 101 <a class="indexterm" name="id2548145"></a> 102 <a class="indexterm" name="id2548152"></a> 103 <a class="indexterm" name="id2548159"></a> 104 <a class="indexterm" name="id2548166"></a> 105 105 It is time to implement a domain security environment. You will use the <code class="constant"> 106 106 smbpasswd</code> (default) backend. You should implement a DHCP server. There is no need to … … 123 123 other enhancements. It is important that you plan accordingly. 124 124 </p><p> 125 <a class="indexterm" name="id254823 4"></a>125 <a class="indexterm" name="id2548230"></a> 126 126 You have split the network into two separate areas. Each has its own Ethernet switch. 127 127 There are 20 users on the accounting network and 32 users on the financial services … … 138 138 hostname name resolution. 139 139 </p><p> 140 <a class="indexterm" name="id254826 5"></a>141 <a class="indexterm" name="id254827 4"></a>140 <a class="indexterm" name="id2548261"></a> 141 <a class="indexterm" name="id2548270"></a> 142 142 It is necessary to map Windows Domain Groups to UNIX groups. It is 143 143 advisable to also map Windows Local Groups to UNIX groups. Additionally, the two … … 156 156 more information. 157 157 </p><p> 158 <a class="indexterm" name="id25483 33"></a>158 <a class="indexterm" name="id2548328"></a> 159 159 Vendor-supplied printer drivers will be installed on each client. The CUPS print 160 160 spooler on the UNIX host will be operated in <code class="constant">raw</code> mode. 161 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254834 7"></a>Political Issues</h3></div></div></div><p>161 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548343"></a>Political Issues</h3></div></div></div><p> 162 162 Mr. Meany is an old-school manager. He sets the rules and wants to see compliance. 163 163 He is willing to spend money on things he believes are of value. You need more … … 167 167 supplied with antivirus software? Above all, demonstrate good purchase value and remember 168 168 to make your users happy. 169 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id254836 9"></a>Implementation</h2></div></div></div><p>170 <a class="indexterm" name="id254837 7"></a>169 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2548364"></a>Implementation</h2></div></div></div><p> 170 <a class="indexterm" name="id2548372"></a> 171 171 In this example, the assumption is made that this server is being configured from a clean start. 172 172 The alternate approach could be to demonstrate the migration of the system that is documented … … 176 176 Additionally, a fresh installation makes the example easier to follow. 177 177 </p><p> 178 <a class="indexterm" name="id254840 8"></a>178 <a class="indexterm" name="id2548403"></a> 179 179 Each user will be given a home directory on the UNIX system, which will be available as a private 180 180 share. Two additional shares will be created, one for the accounting department and the other for … … 182 182 of group membership. 183 183 </p><p> 184 <a class="indexterm" name="id25484 23"></a>184 <a class="indexterm" name="id2548419"></a> 185 185 UNIX group membership is the primary mechanism by which Windows Domain users will be granted 186 186 rights and privileges within the Windows environment. 187 187 </p><p> 188 <a class="indexterm" name="id254843 8"></a>188 <a class="indexterm" name="id2548434"></a> 189 189 The user <code class="literal">alanm</code> will be made the owner of all files. This will be preserved 190 190 by setting the sticky bit (set UID/GID) on the top-level directories. 191 </p><div class="figure"><a name="acct2net"></a><p class="title"><b>Figure 2.1. Abmas Accounting 52-User Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/acct2net.png" alt="Abmas Accounting 52-User Network Topology"></div></div></div><br class="figure-break"><div class="procedure"><a name="id254849 8"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol type="1"><li><p>191 </p><div class="figure"><a name="acct2net"></a><p class="title"><b>Figure 2.1. Abmas Accounting 52-User Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/acct2net.png" alt="Abmas Accounting 52-User Network Topology"></div></div></div><br class="figure-break"><div class="procedure"><a name="id2548494"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol type="1"><li><p> 192 192 Using UNIX/Linux system tools, name the server <code class="constant">sleeth</code>. 193 193 </p></li><li><p> 194 <a class="indexterm" name="id25485 21"></a>194 <a class="indexterm" name="id2548516"></a> 195 195 Place an entry for the machine <code class="constant">sleeth</code> in the <code class="filename">/etc/hosts</code>. 196 196 The printers are network attached, so there should be entries for the … … 208 208 Install the ISC DHCP server using the UNIX/Linux system tools available to you. 209 209 </p></li><li><p> 210 <a class="indexterm" name="id254857 6"></a>211 <a class="indexterm" name="id25485 83"></a>212 <a class="indexterm" name="id25485 90"></a>213 <a class="indexterm" name="id254859 7"></a>210 <a class="indexterm" name="id2548572"></a> 211 <a class="indexterm" name="id2548579"></a> 212 <a class="indexterm" name="id2548586"></a> 213 <a class="indexterm" name="id2548592"></a> 214 214 Because Samba will be operating over two network interfaces and clients on each side 215 215 may want to be able to reach clients on the other side, it is imperative that IP forwarding … … 226 226 <code class="filename">/etc/samba/smb.conf</code> file. 227 227 </p></li><li><p> 228 <a class="indexterm" name="id254866 4"></a>228 <a class="indexterm" name="id2548660"></a> 229 229 Add the user <code class="literal">root</code> to the Samba password backend: 230 230 </p><pre class="screen"> … … 234 234 <code class="prompt">root# </code> 235 235 </pre><p> 236 <a class="indexterm" name="id254869 7"></a>236 <a class="indexterm" name="id2548692"></a> 237 237 This is the Windows Domain Administrator password. Never delete this account from 238 238 the password backend after Windows Domain Groups have been initialized. If you delete … … 240 240 and your Samba server can no longer be administered. 241 241 </p></li><li><p> 242 <a class="indexterm" name="id254871 5"></a>242 <a class="indexterm" name="id2548711"></a> 243 243 Create the username map file to permit the <code class="constant">root</code> account to be called 244 244 <code class="constant">Administrator</code> from the Windows network environment. To do this, create … … 267 267 </pre><p> 268 268 </p></li><li><p> 269 <a class="indexterm" name="id254875 9"></a>269 <a class="indexterm" name="id2548755"></a> 270 270 Create and map Windows Domain Groups to UNIX groups. A sample script is provided in 271 271 <a class="link" href="small.html#initGrps" title="Example 2.1. Script to Map Windows NT Groups to UNIX Groups">“Script to Map Windows NT Groups to UNIX Groups”</a>. Create a file containing this script. We called ours … … 273 273 and then execute the script. Sample output should be as follows: 274 274 275 </p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id25487 92"></a><pre class="screen">275 </p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id2548788"></a><pre class="screen"> 276 276 #!/bin/bash 277 277 # … … 323 323 </pre><p> 324 324 </p></li><li><p> 325 <a class="indexterm" name="id254887 5"></a>326 <a class="indexterm" name="id25488 82"></a>327 <a class="indexterm" name="id25488 91"></a>325 <a class="indexterm" name="id2548871"></a> 326 <a class="indexterm" name="id2548878"></a> 327 <a class="indexterm" name="id2548887"></a> 328 328 For each user who needs to be given a Windows Domain account, make an entry in the 329 329 <code class="filename">/etc/passwd</code> file as well as in the Samba password backend. … … 331 331 <code class="literal">smbpasswd</code> program to create the Domain user accounts. 332 332 </p><p> 333 <a class="indexterm" name="id254891 8"></a>334 <a class="indexterm" name="id254892 5"></a>335 <a class="indexterm" name="id25489 32"></a>333 <a class="indexterm" name="id2548914"></a> 334 <a class="indexterm" name="id2548920"></a> 335 <a class="indexterm" name="id2548927"></a> 336 336 There are a number of tools for user management under UNIX, such as 337 337 <code class="literal">useradd</code> and <code class="literal">adduser</code>, as well as a plethora of custom … … 362 362 Follow the instructions in the manufacturers' manuals to permit printing to port 9100. 363 363 This allows the CUPS spooler to print using raw mode protocols. 364 <a class="indexterm" name="id25490 90"></a>365 <a class="indexterm" name="id254909 6"></a>366 </p></li><li><p> 367 <a class="indexterm" name="id25491 10"></a>368 <a class="indexterm" name="id254911 9"></a>364 <a class="indexterm" name="id2549086"></a> 365 <a class="indexterm" name="id2549092"></a> 366 </p></li><li><p> 367 <a class="indexterm" name="id2549106"></a> 368 <a class="indexterm" name="id2549115"></a> 369 369 Configure the CUPS Print Queues as follows: 370 370 </p><pre class="screen"> … … 373 373 <code class="prompt">root# </code> lpadmin -p qms -v socket://192.168.2.10:9100 -E 374 374 </pre><p> 375 <a class="indexterm" name="id25491 52"></a>375 <a class="indexterm" name="id2549148"></a> 376 376 This creates the necessary print queues with no assigned print filter. 377 377 </p></li><li><p> 378 <a class="indexterm" name="id254916 7"></a>379 <a class="indexterm" name="id254917 4"></a>380 <a class="indexterm" name="id25491 81"></a>378 <a class="indexterm" name="id2549163"></a> 379 <a class="indexterm" name="id2549170"></a> 380 <a class="indexterm" name="id2549177"></a> 381 381 Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: 382 382 </p><pre class="screen"> … … 384 384 </pre><p> 385 385 </p></li><li><p> 386 <a class="indexterm" name="id254920 9"></a>386 <a class="indexterm" name="id2549204"></a> 387 387 Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: 388 388 </p><pre class="screen"> … … 390 390 </pre><p> 391 391 </p></li><li><p> 392 <a class="indexterm" name="id254923 5"></a>392 <a class="indexterm" name="id2549231"></a> 393 393 Using your favorite system editor, create an <code class="filename">/etc/dhcpd.conf</code> with the 394 394 contents as shown in <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>. 395 </p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id25492 71"></a><pre class="screen">395 </p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id2549267"></a><pre class="screen"> 396 396 default-lease-time 86400; 397 397 max-lease-time 172800; … … 441 441 automatically at every system reboot. For example, 442 442 </p><p> 443 <a class="indexterm" name="id254931 6"></a>444 <a class="indexterm" name="id25493 23"></a>445 <a class="indexterm" name="id25493 30"></a>446 <a class="indexterm" name="id254933 7"></a>447 <a class="indexterm" name="id254934 4"></a>443 <a class="indexterm" name="id2549312"></a> 444 <a class="indexterm" name="id2549319"></a> 445 <a class="indexterm" name="id2549326"></a> 446 <a class="indexterm" name="id2549333"></a> 447 <a class="indexterm" name="id2549340"></a> 448 448 </p><pre class="screen"> 449 449 <code class="prompt">root# </code> chkconfig dhcp on … … 455 455 </pre><p> 456 456 </p></li><li><p> 457 <a class="indexterm" name="id2549 401"></a>458 <a class="indexterm" name="id254940 8"></a>459 <a class="indexterm" name="id254941 7"></a>460 <a class="indexterm" name="id25494 23"></a>461 <a class="indexterm" name="id25494 30"></a>462 <a class="indexterm" name="id254943 7"></a>457 <a class="indexterm" name="id2549396"></a> 458 <a class="indexterm" name="id2549403"></a> 459 <a class="indexterm" name="id2549412"></a> 460 <a class="indexterm" name="id2549419"></a> 461 <a class="indexterm" name="id2549426"></a> 462 <a class="indexterm" name="id2549432"></a> 463 463 Configure the name service switch (NSS) to handle WINS-based name resolution. 464 464 Since this system does not use a DNS server, it is safe to remove this option from … … 468 468 hosts: files wins 469 469 </pre><p> 470 </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id2549 501"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id2549513"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id2549526"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id2549538"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id2549549"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id2549561"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id2549573"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id2549585"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m -G users '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549598"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549610"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id2549622"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id2549634"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -A '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549647"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549660"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id2549672"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id2549683"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id2549695"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549707"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549719"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549730"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id2549775"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id2549787"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id2549799"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id2549810"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id2549831"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id2549843"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id2549854"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549866"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549878"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549889"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id2549910"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id2549922"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id2549933"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id2549945"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id2549966"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id2549977"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id2549989"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id2550001"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id2550021"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id2550033"></a><em class="parameter"><code>path = /data/finsvcs</code></em></td></tr><tr><td><a class="indexterm" name="id2550045"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id2550056"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550069"></a>Validation</h3></div></div></div><p>470 </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id2549497"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id2549509"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id2549521"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id2549533"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id2549545"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id2549557"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id2549569"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id2549581"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m -G users '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549593"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549606"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id2549618"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id2549630"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -A '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549643"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id2549655"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id2549667"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id2549679"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id2549691"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549702"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549714"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549726"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id2549771"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id2549783"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id2549794"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id2549806"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id2549826"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id2549838"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id2549850"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549862"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549873"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id2549885"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id2549906"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id2549917"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id2549929"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id2549941"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id2549961"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id2549973"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id2549985"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id2549996"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id2550017"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id2550029"></a><em class="parameter"><code>path = /data/finsvcs</code></em></td></tr><tr><td><a class="indexterm" name="id2550040"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id2550052"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550065"></a>Validation</h3></div></div></div><p> 471 471 Does everything function as it ought? That is the key question at this point. 472 472 Here are some simple steps to validate your Samba server configuration. 473 </p><div class="procedure"><a name="id25500 81"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol type="1"><li><p>474 <a class="indexterm" name="id25500 92"></a>473 </p><div class="procedure"><a name="id2550076"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol type="1"><li><p> 474 <a class="indexterm" name="id2550087"></a> 475 475 If your <code class="filename">smb.conf</code> file has bogus options or parameters, this may cause Samba 476 476 to refuse to start. The first step should always be to validate the contents … … 519 519 Clear away all errors before proceeding, and start or restart samba as necessary. 520 520 </p></li><li><p> 521 <a class="indexterm" name="id255017 4"></a>522 <a class="indexterm" name="id25501 81"></a>523 <a class="indexterm" name="id255018 8"></a>524 <a class="indexterm" name="id255019 5"></a>521 <a class="indexterm" name="id2550170"></a> 522 <a class="indexterm" name="id2550177"></a> 523 <a class="indexterm" name="id2550184"></a> 524 <a class="indexterm" name="id2550190"></a> 525 525 Check that the Samba server is running: 526 526 </p><pre class="screen"> … … 539 539 <code class="literal">smbd</code> is normal. 540 540 </p></li><li><p> 541 <a class="indexterm" name="id25502 50"></a>541 <a class="indexterm" name="id2550246"></a> 542 542 Check that an anonymous connection can be made to the Samba server: 543 543 </p><pre class="screen"> … … 568 568 a <code class="constant">NULL</code> password. 569 569 </p></li><li><p> 570 <a class="indexterm" name="id255030 5"></a>571 <a class="indexterm" name="id25503 12"></a>572 <a class="indexterm" name="id255031 9"></a>570 <a class="indexterm" name="id2550300"></a> 571 <a class="indexterm" name="id2550307"></a> 572 <a class="indexterm" name="id2550314"></a> 573 573 Verify that the printers have the IP addresses assigned in the DHCP server configuration file. 574 574 The easiest way to do this is to ping the printer name. Immediately after the ping response … … 589 589 <code class="filename">/etc/dhcpd.conf</code> file. 590 590 </p></li><li><p> 591 <a class="indexterm" name="id255038 4"></a>591 <a class="indexterm" name="id2550380"></a> 592 592 Make an authenticated connection to the server using the <code class="literal">smbclient</code> tool: 593 593 </p><pre class="screen"> … … 606 606 smb: \> q 607 607 </pre><p> 608 </p></li></ol></div></div><div class="procedure"><a name="id255043 6"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol type="1"><li><p>608 </p></li></ol></div></div><div class="procedure"><a name="id2550431"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol type="1"><li><p> 609 609 Configure clients to the network settings shown in <a class="link" href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">“Abmas Accounting 52-User Network Topology”</a>. 610 610 All clients use DHCP for TCP/IP protocol stack configuration. 611 <a class="indexterm" name="id255045 5"></a>612 <a class="indexterm" name="id25504 62"></a>611 <a class="indexterm" name="id2550451"></a> 612 <a class="indexterm" name="id2550457"></a> 613 613 DHCP configures all Windows clients to use the WINS Server address <code class="constant">192.168.1.1</code>. 614 614 </p></li><li><p> … … 652 652 Repeat the printer installation steps above for the HP LaserJet 6 printer 653 653 as well as for the QMS Magicolor XXXX laser printer. 654 </p></li></ol></div></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25507 74"></a>Notebook Computers: A Special Case</h3></div></div></div><p>654 </p></li></ol></div></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550769"></a>Notebook Computers: A Special Case</h3></div></div></div><p> 655 655 As a network administrator, you already know how to create local machine accounts for Windows 200x/XP 656 656 Professional systems. This is the preferred solution to provide continuity of work for notebook users … … 662 662 that mean that as the network is more tightly secured, it becomes necessary to modify Windows client 663 663 configuration somewhat. 664 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550 800"></a>Key Points Learned</h3></div></div></div><p>664 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550795"></a>Key Points Learned</h3></div></div></div><p> 665 665 In this network design and implementation exercise, you created a Windows NT4-style Domain 666 666 Controller using Samba-3.0.20. Following these guidelines, you experienced … … 668 668 you build on the experience. These are the highlights from this chapter: 669 669 </p><div class="itemizedlist"><ul type="disc"><li><p> 670 <a class="indexterm" name="id25508 20"></a>670 <a class="indexterm" name="id2550815"></a> 671 671 You implemented a DHCP server, and Microsoft Windows clients were able to obtain all necessary 672 672 network configuration settings from this server. 673 673 </p></li><li><p> 674 <a class="indexterm" name="id25508 33"></a>674 <a class="indexterm" name="id2550829"></a> 675 675 You created a Windows Domain Controller. You were able to use the network logon service 676 676 and successfully joined Windows 200x/XP Professional clients to the Domain. 677 677 </p></li><li><p> 678 <a class="indexterm" name="id255084 8"></a>678 <a class="indexterm" name="id2550843"></a> 679 679 You created raw print queues in the CUPS printing system. You maintained a simple 680 680 printing system so that all users can share centrally managed printers. You installed … … 685 685 You offered Mobile notebook users a solution that allows them to continue to work 686 686 while away from the office and not connected to the corporate network. 687 </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id255087 6"></a>Questions and Answers</h2></div></div></div><p>687 </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2550871"></a>Questions and Answers</h2></div></div></div><p> 688 688 Your new Domain Controller is ready to serve you. What does it mean? Here are some questions and answers that 689 689 may help. 690 </p><div class="qandaset"><dl><dt>1. <a href="small.html#id255088 9">690 </p><div class="qandaset"><dl><dt>1. <a href="small.html#id2550885"> 691 691 What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? 692 </a></dt><dt>2. <a href="small.html#id255091 6">692 </a></dt><dt>2. <a href="small.html#id2550911"> 693 693 Are there any DHCP server configuration parameters in the /etc/dhcpd.conf 694 694 that should be noted in particular? 695 </a></dt><dt>3. <a href="small.html#id255094 7">695 </a></dt><dt>3. <a href="small.html#id2550943"> 696 696 Is it possible to create a Windows Domain account that is specifically called Administrator? 697 </a></dt><dt>4. <a href="small.html#id255098 6">697 </a></dt><dt>4. <a href="small.html#id2550982"> 698 698 Why is it necessary to give the Windows Domain Administrator a UNIX UID of 0? 699 </a></dt><dt>5. <a href="small.html#id255102 8">699 </a></dt><dt>5. <a href="small.html#id2551023"> 700 700 One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him 701 701 root access. How can we do this? 702 </a></dt><dt>6. <a href="small.html#id25510 70">702 </a></dt><dt>6. <a href="small.html#id2551065"> 703 703 Why must I map Windows Domain Groups to UNIX groups? 704 </a></dt><dt>7. <a href="small.html#id255110 8">704 </a></dt><dt>7. <a href="small.html#id2551104"> 705 705 I deleted my root account and now I cannot add it back! What can I do? 706 </a></dt><dt>8. <a href="small.html#id25511 81">706 </a></dt><dt>8. <a href="small.html#id2551177"> 707 707 When I run net groupmap list, it reports a group called Administrators 708 708 as well as Domain Admins. What is the difference between them? 709 </a></dt><dt>9. <a href="small.html#id25512 30">709 </a></dt><dt>9. <a href="small.html#id2551225"> 710 710 What is the effect of changing the name of a Samba server or of changing the Domain name? 711 </a></dt><dt>10. <a href="small.html#id25512 81">711 </a></dt><dt>10. <a href="small.html#id2551277"> 712 712 How can I manage user accounts from my Windows XP Professional workstation? 713 </a></dt></dl><table border="0" summary="Q and A Set"><col align="left" width="1%"><tbody><tr class="question"><td align="left" valign="top"><a name="id255088 9"></a><a name="id2550891"></a><p><b>1.</b></p></td><td align="left" valign="top"><p>713 </a></dt></dl><table border="0" summary="Q and A Set"><col align="left" width="1%"><tbody><tr class="question"><td align="left" valign="top"><a name="id2550885"></a><a name="id2550887"></a><p><b>1.</b></p></td><td align="left" valign="top"><p> 714 714 What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? 715 715 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 720 720 default routes and DNS server addresses that apply only to the Abmas office environment do 721 721 not interfere with remote operations. This is an extremely important feature of DHCP. 722 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id255091 6"></a><a name="id2550918"></a><p><b>2.</b></p></td><td align="left" valign="top"><p>722 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2550911"></a><a name="id2550914"></a><p><b>2.</b></p></td><td align="left" valign="top"><p> 723 723 Are there any DHCP server configuration parameters in the <code class="filename">/etc/dhcpd.conf</code> 724 724 that should be noted in particular? … … 729 729 NetBIOS machine name needs to be resolved to an IP Address. This configuration 730 730 results in far lower UDP broadcast traffic than would be the case if WINS was not used. 731 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id255094 7"></a><a name="id2550950"></a><p><b>3.</b></p></td><td align="left" valign="top"><p>731 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2550943"></a><a name="id2550945"></a><p><b>3.</b></p></td><td align="left" valign="top"><p> 732 732 Is it possible to create a Windows Domain account that is specifically called <code class="constant">Administrator</code>? 733 733 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 736 736 necessary to use the <em class="parameter"><code>username map</code></em> facility to map this account to the UNIX 737 737 account called <code class="constant">root</code>. 738 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id255098 6"></a><a name="id2550988"></a><p><b>4.</b></p></td><td align="left" valign="top"><p>738 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2550982"></a><a name="id2550984"></a><p><b>4.</b></p></td><td align="left" valign="top"><p> 739 739 Why is it necessary to give the Windows Domain <code class="constant">Administrator</code> a UNIX UID of 0? 740 740 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 746 746 settings within the Domain and on the Samba server, equivalent rights must be assigned. This is 747 747 achieved with the <code class="constant">root</code> UID equal to 0. 748 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id255102 8"></a><a name="id2551030"></a><p><b>5.</b></p></td><td align="left" valign="top"><p>748 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2551023"></a><a name="id2551025"></a><p><b>5.</b></p></td><td align="left" valign="top"><p> 749 749 One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him 750 750 <code class="constant">root</code> access. How can we do this? … … 755 755 This must be the primary GID of the account of the user who is a member of the Windows <code class="constant"> 756 756 Domain Admins</code> account. 757 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id25510 70"></a><a name="id2551072"></a><p><b>6.</b></p></td><td align="left" valign="top"><p>757 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2551065"></a><a name="id2551067"></a><p><b>6.</b></p></td><td align="left" valign="top"><p> 758 758 Why must I map Windows Domain Groups to UNIX groups? 759 759 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 761 761 has a UNIX group account equivalent. The Domain groups that should be given UNIX equivalents are 762 762 <span class="guimenu">Domain Guests</span>, <span class="guimenu">Domain Users</span>, and <span class="guimenu">Domain Admins</span>. 763 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id255110 8"></a><a name="id2551110"></a><p><b>7.</b></p></td><td align="left" valign="top"><p>763 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2551104"></a><a name="id2551106"></a><p><b>7.</b></p></td><td align="left" valign="top"><p> 764 764 I deleted my <code class="constant">root</code> account and now I cannot add it back! What can I do? 765 765 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 773 773 </p></li><li><p> 774 774 Restore the <code class="filename">group_mapping.tdb</code> file. 775 </p></li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="id25511 81"></a><a name="id2551183"></a><p><b>8.</b></p></td><td align="left" valign="top"><p>775 </p></li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="id2551177"></a><a name="id2551179"></a><p><b>8.</b></p></td><td align="left" valign="top"><p> 776 776 When I run <code class="literal">net groupmap list</code>, it reports a group called <span class="guimenu">Administrators</span> 777 777 as well as <span class="guimenu">Domain Admins</span>. What is the difference between them? … … 781 781 Groups at this time. A Workstation or Server Local Group has no meaning in a Samba context. This 782 782 may change at some later date. These accounts are provided only so that security objects are correctly shown. 783 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id25512 30"></a><a name="id2551232"></a><p><b>9.</b></p></td><td align="left" valign="top"><p>783 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2551225"></a><a name="id2551227"></a><p><b>9.</b></p></td><td align="left" valign="top"><p> 784 784 What is the effect of changing the name of a Samba server or of changing the Domain name? 785 785 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 793 793 or the <code class="literal">smbpasswd</code> (Samba-2.2.x). To change the SID, you use the same tool. Be sure 794 794 to check the man page for this command for detailed instructions regarding the steps involved. 795 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id25512 81"></a><a name="id2551283"></a><p><b>10.</b></p></td><td align="left" valign="top"><p>795 </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id2551277"></a><a name="id2551279"></a><p><b>10.</b></p></td><td align="left" valign="top"><p> 796 796 How can I manage user accounts from my Windows XP Professional workstation? 797 797 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p>
Note:
See TracChangeset
for help on using the changeset viewer.
