- Timestamp:
- Nov 12, 2012, 7:37:04 PM (13 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.5.x/docs/htmldocs/Samba3-ByExample/small.html
r599 r739 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 2. Small Office Networking"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id32 7308">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327326">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327371">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327416">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id327588">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327606">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id329058">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id329633">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id329652">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id329716">Questions and Answers</a></span></dt></dl></div><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 2. Small Office Networking"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id325808">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id325825">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id325871">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id325916">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id326088">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id326106">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327557">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id328132">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id328152">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id328216">Questions and Answers</a></span></dt></dl></div><p> 2 2 <a class="link" href="simple.html" title="Chapter 1. No-Frills Samba Servers">“No-Frills Samba Servers”</a> focused on the basics of simple yet effective 3 3 network solutions. Network administrators who take pride in their work … … 9 9 good advice that the following two scenarios illustrate. 10 10 </p><p> 11 <a class="indexterm" name="id32 7280"></a>11 <a class="indexterm" name="id325780"></a> 12 12 In one case the network administrator of a mid-sized company spent three 13 13 months building a new network to replace an old Netware server. What he … … 37 37 sleeves for when you need them.</span>”</span> Was he smart? You decide. Let's 38 38 get on with our next exercise. 39 </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id32 7308"></a>Introduction</h2></div></div></div><p>39 </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id325808"></a>Introduction</h2></div></div></div><p> 40 40 Abmas Accounting has grown. Mr. Meany likes you and says he knew you 41 41 were the right person for the job. That's why he asked you to install the … … 48 48 some of the workstations that came with the acquired business and found some machines in need of both 49 49 hardware and software maintenance. 50 </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id32 7326"></a>Assignment Tasks</h3></div></div></div><p>51 <a class="indexterm" name="id32 7333"></a>50 </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id325825"></a>Assignment Tasks</h3></div></div></div><p> 51 <a class="indexterm" name="id325833"></a> 52 52 Mr. Meany is retiring in 12 months. Before he goes, he wants you to help ensure 53 53 that the business is running efficiently. Many of the new staff want notebook … … 81 81 user accounts from the Windows desktop. That person will be responsible for 82 82 basic operations. 83 </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id32 7371"></a>Dissection and Discussion</h2></div></div></div><p>83 </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id325871"></a>Dissection and Discussion</h2></div></div></div><p> 84 84 What are the key requirements in this business example? A quick review indicates 85 85 a need for … … 88 88 </p></li><li class="listitem"><p> 89 89 Mobile computing capability 90 <a class="indexterm" name="id32 7391"></a>90 <a class="indexterm" name="id325890"></a> 91 91 </p></li><li class="listitem"><p> 92 92 Improved reliability and usability … … 97 97 (as in <a class="link" href="simple.html#AccountingOffice" title="Accounting Office">“Accounting Office”</a>). 98 98 99 </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id32 7416"></a>Technical Issues</h3></div></div></div><p>100 <a class="indexterm" name="id32 7424"></a>101 <a class="indexterm" name="id32 7430"></a>102 <a class="indexterm" name="id32 7436"></a>103 <a class="indexterm" name="id32 7443"></a>104 <a class="indexterm" name="id32 7449"></a>99 </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id325916"></a>Technical Issues</h3></div></div></div><p> 100 <a class="indexterm" name="id325923"></a> 101 <a class="indexterm" name="id325930"></a> 102 <a class="indexterm" name="id325936"></a> 103 <a class="indexterm" name="id325942"></a> 104 <a class="indexterm" name="id325948"></a> 105 105 It is time to implement a domain security environment. You will use the <code class="constant"> 106 106 smbpasswd</code> (default) backend. You should implement a DHCP server. There is no need to … … 123 123 other enhancements. It is important that you plan accordingly. 124 124 </p><p> 125 <a class="indexterm" name="id32 7498"></a>125 <a class="indexterm" name="id325997"></a> 126 126 You have split the network into two separate areas. Each has its own Ethernet switch. 127 127 There are 20 users on the accounting network and 32 users on the financial services … … 138 138 hostname name resolution. 139 139 </p><p> 140 <a class="indexterm" name="id32 7521"></a>141 <a class="indexterm" name="id32 7530"></a>140 <a class="indexterm" name="id326021"></a> 141 <a class="indexterm" name="id326029"></a> 142 142 It is necessary to map Windows Domain Groups to UNIX groups. It is 143 143 advisable to also map Windows Local Groups to UNIX groups. Additionally, the two … … 156 156 more information. 157 157 </p><p> 158 <a class="indexterm" name="id32 7576"></a>158 <a class="indexterm" name="id326075"></a> 159 159 Vendor-supplied printer drivers will be installed on each client. The CUPS print 160 160 spooler on the UNIX host will be operated in <code class="constant">raw</code> mode. 161 </p></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id32 7588"></a>Political Issues</h3></div></div></div><p>161 </p></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id326088"></a>Political Issues</h3></div></div></div><p> 162 162 Mr. Meany is an old-school manager. He sets the rules and wants to see compliance. 163 163 He is willing to spend money on things he believes are of value. You need more … … 167 167 supplied with antivirus software? Above all, demonstrate good purchase value and remember 168 168 to make your users happy. 169 </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id32 7606"></a>Implementation</h2></div></div></div><p>170 <a class="indexterm" name="id32 7614"></a>169 </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id326106"></a>Implementation</h2></div></div></div><p> 170 <a class="indexterm" name="id326113"></a> 171 171 In this example, the assumption is made that this server is being configured from a clean start. 172 172 The alternate approach could be to demonstrate the migration of the system that is documented … … 176 176 Additionally, a fresh installation makes the example easier to follow. 177 177 </p><p> 178 <a class="indexterm" name="id32 7636"></a>178 <a class="indexterm" name="id326135"></a> 179 179 Each user will be given a home directory on the UNIX system, which will be available as a private 180 180 share. Two additional shares will be created, one for the accounting department and the other for … … 182 182 of group membership. 183 183 </p><p> 184 <a class="indexterm" name="id32 7648"></a>184 <a class="indexterm" name="id326147"></a> 185 185 UNIX group membership is the primary mechanism by which Windows Domain users will be granted 186 186 rights and privileges within the Windows environment. 187 187 </p><p> 188 <a class="indexterm" name="id32 7661"></a>188 <a class="indexterm" name="id326160"></a> 189 189 The user <code class="literal">alanm</code> will be made the owner of all files. This will be preserved 190 190 by setting the sticky bit (set UID/GID) on the top-level directories. 191 191 </p><p> 192 192 </p><div class="figure"><a name="acct2net"></a><p class="title"><b>Figure 2.1. Abmas Accounting 52-User Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/acct2net.png" alt="Abmas Accounting 52-User Network Topology"></div></div></div><p><br class="figure-break"> 193 </p><div class="procedure" title="Procedure 2.1. Server Installation Steps"><a name="id32 7717"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p>193 </p><div class="procedure" title="Procedure 2.1. Server Installation Steps"><a name="id326216"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> 194 194 Using UNIX/Linux system tools, name the server <code class="constant">sleeth</code>. 195 195 </p></li><li class="step" title="Step 2"><p> 196 <a class="indexterm" name="id32 7737"></a>196 <a class="indexterm" name="id326236"></a> 197 197 Place an entry for the machine <code class="constant">sleeth</code> in the <code class="filename">/etc/hosts</code>. 198 198 The printers are network attached, so there should be entries for the … … 210 210 Install the ISC DHCP server using the UNIX/Linux system tools available to you. 211 211 </p></li><li class="step" title="Step 5"><p> 212 <a class="indexterm" name="id32 7784"></a>213 <a class="indexterm" name="id32 7791"></a>214 <a class="indexterm" name="id32 7797"></a>215 <a class="indexterm" name="id32 7803"></a>212 <a class="indexterm" name="id326284"></a> 213 <a class="indexterm" name="id326290"></a> 214 <a class="indexterm" name="id326296"></a> 215 <a class="indexterm" name="id326303"></a> 216 216 Because Samba will be operating over two network interfaces and clients on each side 217 217 may want to be able to reach clients on the other side, it is imperative that IP forwarding … … 228 228 <code class="filename">/etc/samba/smb.conf</code> file. 229 229 </p></li><li class="step" title="Step 7"><p> 230 <a class="indexterm" name="id32 7856"></a>230 <a class="indexterm" name="id326355"></a> 231 231 Add the user <code class="literal">root</code> to the Samba password backend: 232 232 </p><pre class="screen"> … … 236 236 <code class="prompt">root# </code> 237 237 </pre><p> 238 <a class="indexterm" name="id32 7884"></a>238 <a class="indexterm" name="id326383"></a> 239 239 This is the Windows Domain Administrator password. Never delete this account from 240 240 the password backend after Windows Domain Groups have been initialized. If you delete … … 242 242 and your Samba server can no longer be administered. 243 243 </p></li><li class="step" title="Step 8"><p> 244 <a class="indexterm" name="id32 7899"></a>244 <a class="indexterm" name="id326398"></a> 245 245 Create the username map file to permit the <code class="constant">root</code> account to be called 246 246 <code class="constant">Administrator</code> from the Windows network environment. To do this, create … … 269 269 </pre><p> 270 270 </p></li><li class="step" title="Step 9"><p> 271 <a class="indexterm" name="id32 7933"></a>271 <a class="indexterm" name="id326432"></a> 272 272 Create and map Windows Domain Groups to UNIX groups. A sample script is provided in 273 273 <a class="link" href="small.html#initGrps" title="Example 2.1. Script to Map Windows NT Groups to UNIX Groups">“Script to Map Windows NT Groups to UNIX Groups”</a>. Create a file containing this script. We called ours … … 275 275 and then execute the script. Sample output should be as follows: 276 276 277 </p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id32 7958"></a><pre class="screen">277 </p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id326458"></a><pre class="screen"> 278 278 #!/bin/bash 279 279 # … … 325 325 </pre><p> 326 326 </p></li><li class="step" title="Step 10"><p> 327 <a class="indexterm" name="id32 8022"></a>328 <a class="indexterm" name="id32 8029"></a>329 <a class="indexterm" name="id32 8037"></a>327 <a class="indexterm" name="id326522"></a> 328 <a class="indexterm" name="id326528"></a> 329 <a class="indexterm" name="id326537"></a> 330 330 For each user who needs to be given a Windows Domain account, make an entry in the 331 331 <code class="filename">/etc/passwd</code> file as well as in the Samba password backend. … … 333 333 <code class="literal">smbpasswd</code> program to create the Domain user accounts. 334 334 </p><p> 335 <a class="indexterm" name="id32 8059"></a>336 <a class="indexterm" name="id32 8066"></a>337 <a class="indexterm" name="id32 8072"></a>335 <a class="indexterm" name="id326559"></a> 336 <a class="indexterm" name="id326565"></a> 337 <a class="indexterm" name="id326571"></a> 338 338 There are a number of tools for user management under UNIX, such as 339 339 <code class="literal">useradd</code> and <code class="literal">adduser</code>, as well as a plethora of custom … … 364 364 Follow the instructions in the manufacturers' manuals to permit printing to port 9100. 365 365 This allows the CUPS spooler to print using raw mode protocols. 366 <a class="indexterm" name="id32 8203"></a>367 <a class="indexterm" name="id32 8209"></a>366 <a class="indexterm" name="id326702"></a> 367 <a class="indexterm" name="id326708"></a> 368 368 </p></li><li class="step" title="Step 15"><p> 369 <a class="indexterm" name="id32 8222"></a>370 <a class="indexterm" name="id32 8230"></a>369 <a class="indexterm" name="id326721"></a> 370 <a class="indexterm" name="id326729"></a> 371 371 Configure the CUPS Print Queues as follows: 372 372 </p><pre class="screen"> … … 375 375 <code class="prompt">root# </code> lpadmin -p qms -v socket://192.168.2.10:9100 -E 376 376 </pre><p> 377 <a class="indexterm" name="id32 8257"></a>377 <a class="indexterm" name="id326756"></a> 378 378 This creates the necessary print queues with no assigned print filter. 379 379 </p></li><li class="step" title="Step 16"><p> 380 <a class="indexterm" name="id32 8270"></a>381 <a class="indexterm" name="id32 8277"></a>382 <a class="indexterm" name="id32 8283"></a>380 <a class="indexterm" name="id326770"></a> 381 <a class="indexterm" name="id326776"></a> 382 <a class="indexterm" name="id326782"></a> 383 383 Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: 384 384 </p><pre class="screen"> … … 386 386 </pre><p> 387 387 </p></li><li class="step" title="Step 17"><p> 388 <a class="indexterm" name="id32 8306"></a>388 <a class="indexterm" name="id326806"></a> 389 389 Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: 390 390 </p><pre class="screen"> … … 392 392 </pre><p> 393 393 </p></li><li class="step" title="Step 18"><p> 394 <a class="indexterm" name="id32 8329"></a>394 <a class="indexterm" name="id326829"></a> 395 395 Using your favorite system editor, create an <code class="filename">/etc/dhcpd.conf</code> with the 396 396 contents as shown in <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>. 397 </p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id32 8359"></a><pre class="screen">397 </p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id326858"></a><pre class="screen"> 398 398 default-lease-time 86400; 399 399 max-lease-time 172800; … … 443 443 automatically at every system reboot. For example, 444 444 </p><p> 445 <a class="indexterm" name="id32 8392"></a>446 <a class="indexterm" name="id32 8398"></a>447 <a class="indexterm" name="id32 8404"></a>448 <a class="indexterm" name="id32 8411"></a>449 <a class="indexterm" name="id32 8417"></a>445 <a class="indexterm" name="id326891"></a> 446 <a class="indexterm" name="id326898"></a> 447 <a class="indexterm" name="id326904"></a> 448 <a class="indexterm" name="id326910"></a> 449 <a class="indexterm" name="id326916"></a> 450 450 </p><pre class="screen"> 451 451 <code class="prompt">root# </code> chkconfig dhcp on … … 457 457 </pre><p> 458 458 </p></li><li class="step" title="Step 20"><p> 459 <a class="indexterm" name="id32 8466"></a>460 <a class="indexterm" name="id32 8472"></a>461 <a class="indexterm" name="id32 8480"></a>462 <a class="indexterm" name="id32 8487"></a>463 <a class="indexterm" name="id32 8493"></a>464 <a class="indexterm" name="id32 8499"></a>459 <a class="indexterm" name="id326965"></a> 460 <a class="indexterm" name="id326972"></a> 461 <a class="indexterm" name="id326980"></a> 462 <a class="indexterm" name="id326986"></a> 463 <a class="indexterm" name="id326992"></a> 464 <a class="indexterm" name="id326999"></a> 465 465 Configure the name service switch (NSS) to handle WINS-based name resolution. 466 466 Since this system does not use a DNS server, it is safe to remove this option from … … 470 470 hosts: files wins 471 471 </pre><p> 472 </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id32 8555"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id328565"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id328576"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id328587"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id328597"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id328607"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id328618"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id328628"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m -G users '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328639"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328649"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id328659"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id328670"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -A '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328681"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328692"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id328702"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id328713"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id328723"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328734"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328744"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328754"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id328794"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id328805"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id328815"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id328825"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id328844"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id328855"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id328865"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328875"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328886"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328896"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id328915"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id328925"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id328936"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id328946"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id328965"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id328975"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id328986"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id328996"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsrvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id329015"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id329025"></a><em class="parameter"><code>path = /data/finsrvcs</code></em></td></tr><tr><td><a class="indexterm" name="id329036"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id329046"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" title="Validation"><div class="titlepage"><div><div><h3 class="title"><a name="id329058"></a>Validation</h3></div></div></div><p>472 </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id327054"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id327064"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id327076"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id327086"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id327096"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id327107"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id327117"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id327128"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m -G users '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id327138"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id327148"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id327159"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id327169"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -A '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id327180"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id327192"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id327202"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id327212"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id327223"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id327233"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id327244"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id327254"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id327294"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id327304"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id327314"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id327325"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id327344"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id327354"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id327364"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id327375"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id327385"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id327396"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id327414"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id327425"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id327435"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id327446"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id327464"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id327475"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id327485"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id327496"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsrvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id327514"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id327525"></a><em class="parameter"><code>path = /data/finsrvcs</code></em></td></tr><tr><td><a class="indexterm" name="id327535"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id327546"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" title="Validation"><div class="titlepage"><div><div><h3 class="title"><a name="id327557"></a>Validation</h3></div></div></div><p> 473 473 Does everything function as it ought? That is the key question at this point. 474 474 Here are some simple steps to validate your Samba server configuration. 475 </p><div class="procedure" title="Procedure 2.2. Validation Steps"><a name="id32 9068"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p>476 <a class="indexterm" name="id32 9078"></a>475 </p><div class="procedure" title="Procedure 2.2. Validation Steps"><a name="id327567"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> 476 <a class="indexterm" name="id327578"></a> 477 477 If your <code class="filename">smb.conf</code> file has bogus options or parameters, this may cause Samba 478 478 to refuse to start. The first step should always be to validate the contents … … 521 521 Clear away all errors before proceeding, and start or restart samba as necessary. 522 522 </p></li><li class="step" title="Step 2"><p> 523 <a class="indexterm" name="id32 9135"></a>524 <a class="indexterm" name="id32 9141"></a>525 <a class="indexterm" name="id32 9148"></a>526 <a class="indexterm" name="id32 9154"></a>523 <a class="indexterm" name="id327635"></a> 524 <a class="indexterm" name="id327641"></a> 525 <a class="indexterm" name="id327647"></a> 526 <a class="indexterm" name="id327653"></a> 527 527 Check that the Samba server is running: 528 528 </p><pre class="screen"> … … 541 541 <code class="literal">smbd</code> is normal. 542 542 </p></li><li class="step" title="Step 3"><p> 543 <a class="indexterm" name="id32 9199"></a>543 <a class="indexterm" name="id327699"></a> 544 544 Check that an anonymous connection can be made to the Samba server: 545 545 </p><pre class="screen"> … … 570 570 a <code class="constant">NULL</code> password. 571 571 </p></li><li class="step" title="Step 4"><p> 572 <a class="indexterm" name="id32 9241"></a>573 <a class="indexterm" name="id32 9247"></a>574 <a class="indexterm" name="id32 9254"></a>572 <a class="indexterm" name="id327741"></a> 573 <a class="indexterm" name="id327747"></a> 574 <a class="indexterm" name="id327753"></a> 575 575 Verify that the printers have the IP addresses assigned in the DHCP server configuration file. 576 576 The easiest way to do this is to ping the printer name. Immediately after the ping response … … 591 591 <code class="filename">/etc/dhcpd.conf</code> file. 592 592 </p></li><li class="step" title="Step 5"><p> 593 <a class="indexterm" name="id32 9307"></a>593 <a class="indexterm" name="id327807"></a> 594 594 Make an authenticated connection to the server using the <code class="literal">smbclient</code> tool: 595 595 </p><pre class="screen"> … … 608 608 smb: \> q 609 609 </pre><p> 610 </p></li></ol></div></div><div class="procedure" title="Procedure 2.3. Windows XP Professional Client Configuration"><a name="id32 9344"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p>610 </p></li></ol></div></div><div class="procedure" title="Procedure 2.3. Windows XP Professional Client Configuration"><a name="id327844"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> 611 611 Configure clients to the network settings shown in <a class="link" href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">“Abmas Accounting 52-User Network Topology”</a>. 612 612 All clients use DHCP for TCP/IP protocol stack configuration. 613 <a class="indexterm" name="id32 9359"></a>614 <a class="indexterm" name="id32 9366"></a>613 <a class="indexterm" name="id327859"></a> 614 <a class="indexterm" name="id327865"></a> 615 615 DHCP configures all Windows clients to use the WINS Server address <code class="constant">192.168.1.1</code>. 616 616 </p></li><li class="step" title="Step 2"><p> … … 654 654 Repeat the printer installation steps above for the HP LaserJet 6 printer 655 655 as well as for the QMS Magicolor XXXX laser printer. 656 </p></li></ol></div></li></ol></div><div class="sect2" title="Notebook Computers: A Special Case"><div class="titlepage"><div><div><h3 class="title"><a name="id32 9633"></a>Notebook Computers: A Special Case</h3></div></div></div><p>656 </p></li></ol></div></li></ol></div><div class="sect2" title="Notebook Computers: A Special Case"><div class="titlepage"><div><div><h3 class="title"><a name="id328132"></a>Notebook Computers: A Special Case</h3></div></div></div><p> 657 657 As a network administrator, you already know how to create local machine accounts for Windows 200x/XP 658 658 Professional systems. This is the preferred solution to provide continuity of work for notebook users … … 664 664 that mean that as the network is more tightly secured, it becomes necessary to modify Windows client 665 665 configuration somewhat. 666 </p></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id32 9652"></a>Key Points Learned</h3></div></div></div><p>666 </p></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id328152"></a>Key Points Learned</h3></div></div></div><p> 667 667 In this network design and implementation exercise, you created a Windows NT4-style Domain 668 668 Controller using Samba-3.0.20. Following these guidelines, you experienced … … 670 670 you build on the experience. These are the highlights from this chapter: 671 671 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> 672 <a class="indexterm" name="id32 9669"></a>672 <a class="indexterm" name="id328168"></a> 673 673 You implemented a DHCP server, and Microsoft Windows clients were able to obtain all necessary 674 674 network configuration settings from this server. 675 675 </p></li><li class="listitem"><p> 676 <a class="indexterm" name="id32 9681"></a>676 <a class="indexterm" name="id328180"></a> 677 677 You created a Windows Domain Controller. You were able to use the network logon service 678 678 and successfully joined Windows 200x/XP Professional clients to the Domain. 679 679 </p></li><li class="listitem"><p> 680 <a class="indexterm" name="id32 9693"></a>680 <a class="indexterm" name="id328193"></a> 681 681 You created raw print queues in the CUPS printing system. You maintained a simple 682 682 printing system so that all users can share centrally managed printers. You installed … … 687 687 You offered Mobile notebook users a solution that allows them to continue to work 688 688 while away from the office and not connected to the corporate network. 689 </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id32 9716"></a>Questions and Answers</h2></div></div></div><p>689 </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id328216"></a>Questions and Answers</h2></div></div></div><p> 690 690 Your new Domain Controller is ready to serve you. What does it mean? Here are some questions and answers that 691 691 may help. 692 </p><div class="qandaset" title="Frequently Asked Questions"><a name="id32 9726"></a><dl><dt>1. <a href="small.html#id329728">692 </p><div class="qandaset" title="Frequently Asked Questions"><a name="id328226"></a><dl><dt>1. <a href="small.html#id328228"> 693 693 What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? 694 </a></dt><dt>2. <a href="small.html#id32 9750">694 </a></dt><dt>2. <a href="small.html#id328249"> 695 695 Are there any DHCP server configuration parameters in the /etc/dhcpd.conf 696 696 that should be noted in particular? 697 </a></dt><dt>3. <a href="small.html#id32 9776">697 </a></dt><dt>3. <a href="small.html#id328275"> 698 698 Is it possible to create a Windows Domain account that is specifically called Administrator? 699 </a></dt><dt>4. <a href="small.html#id32 9810">699 </a></dt><dt>4. <a href="small.html#id328309"> 700 700 Why is it necessary to give the Windows Domain Administrator a UNIX UID of 0? 701 </a></dt><dt>5. <a href="small.html#id32 9843">701 </a></dt><dt>5. <a href="small.html#id328342"> 702 702 One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him 703 703 root access. How can we do this? 704 </a></dt><dt>6. <a href="small.html#id32 9878">704 </a></dt><dt>6. <a href="small.html#id328378"> 705 705 Why must I map Windows Domain Groups to UNIX groups? 706 </a></dt><dt>7. <a href="small.html#id32 9912">706 </a></dt><dt>7. <a href="small.html#id328412"> 707 707 I deleted my root account and now I cannot add it back! What can I do? 708 </a></dt><dt>8. <a href="small.html#id32 9978">708 </a></dt><dt>8. <a href="small.html#id328477"> 709 709 When I run net groupmap list, it reports a group called Administrators 710 710 as well as Domain Admins. What is the difference between them? 711 </a></dt><dt>9. <a href="small.html#id3 30018">711 </a></dt><dt>9. <a href="small.html#id328517"> 712 712 What is the effect of changing the name of a Samba server or of changing the Domain name? 713 </a></dt><dt>10. <a href="small.html#id3 30060">713 </a></dt><dt>10. <a href="small.html#id328559"> 714 714 How can I manage user accounts from my Windows XP Professional workstation? 715 </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question" title="1."><td align="left" valign="top"><a name="id32 9728"></a><a name="id329730"></a><p><b>1.</b></p></td><td align="left" valign="top"><p>715 </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question" title="1."><td align="left" valign="top"><a name="id328228"></a><a name="id328230"></a><p><b>1.</b></p></td><td align="left" valign="top"><p> 716 716 What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? 717 717 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 722 722 default routes and DNS server addresses that apply only to the Abmas office environment do 723 723 not interfere with remote operations. This is an extremely important feature of DHCP. 724 </p></td></tr><tr class="question" title="2."><td align="left" valign="top"><a name="id32 9750"></a><a name="id329752"></a><p><b>2.</b></p></td><td align="left" valign="top"><p>724 </p></td></tr><tr class="question" title="2."><td align="left" valign="top"><a name="id328249"></a><a name="id328251"></a><p><b>2.</b></p></td><td align="left" valign="top"><p> 725 725 Are there any DHCP server configuration parameters in the <code class="filename">/etc/dhcpd.conf</code> 726 726 that should be noted in particular? … … 731 731 NetBIOS machine name needs to be resolved to an IP Address. This configuration 732 732 results in far lower UDP broadcast traffic than would be the case if WINS was not used. 733 </p></td></tr><tr class="question" title="3."><td align="left" valign="top"><a name="id32 9776"></a><a name="id329778"></a><p><b>3.</b></p></td><td align="left" valign="top"><p>733 </p></td></tr><tr class="question" title="3."><td align="left" valign="top"><a name="id328275"></a><a name="id328277"></a><p><b>3.</b></p></td><td align="left" valign="top"><p> 734 734 Is it possible to create a Windows Domain account that is specifically called <code class="constant">Administrator</code>? 735 735 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 738 738 necessary to use the <em class="parameter"><code>username map</code></em> facility to map this account to the UNIX 739 739 account called <code class="constant">root</code>. 740 </p></td></tr><tr class="question" title="4."><td align="left" valign="top"><a name="id32 9810"></a><a name="id329812"></a><p><b>4.</b></p></td><td align="left" valign="top"><p>740 </p></td></tr><tr class="question" title="4."><td align="left" valign="top"><a name="id328309"></a><a name="id328311"></a><p><b>4.</b></p></td><td align="left" valign="top"><p> 741 741 Why is it necessary to give the Windows Domain <code class="constant">Administrator</code> a UNIX UID of 0? 742 742 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 748 748 settings within the Domain and on the Samba server, equivalent rights must be assigned. This is 749 749 achieved with the <code class="constant">root</code> UID equal to 0. 750 </p></td></tr><tr class="question" title="5."><td align="left" valign="top"><a name="id32 9843"></a><a name="id329845"></a><p><b>5.</b></p></td><td align="left" valign="top"><p>750 </p></td></tr><tr class="question" title="5."><td align="left" valign="top"><a name="id328342"></a><a name="id328345"></a><p><b>5.</b></p></td><td align="left" valign="top"><p> 751 751 One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him 752 752 <code class="constant">root</code> access. How can we do this? … … 757 757 This must be the primary GID of the account of the user who is a member of the Windows <code class="constant"> 758 758 Domain Admins</code> account. 759 </p></td></tr><tr class="question" title="6."><td align="left" valign="top"><a name="id32 9878"></a><a name="id329880"></a><p><b>6.</b></p></td><td align="left" valign="top"><p>759 </p></td></tr><tr class="question" title="6."><td align="left" valign="top"><a name="id328378"></a><a name="id328380"></a><p><b>6.</b></p></td><td align="left" valign="top"><p> 760 760 Why must I map Windows Domain Groups to UNIX groups? 761 761 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 763 763 has a UNIX group account equivalent. The Domain groups that should be given UNIX equivalents are 764 764 <span class="guimenu">Domain Guests</span>, <span class="guimenu">Domain Users</span>, and <span class="guimenu">Domain Admins</span>. 765 </p></td></tr><tr class="question" title="7."><td align="left" valign="top"><a name="id32 9912"></a><a name="id329914"></a><p><b>7.</b></p></td><td align="left" valign="top"><p>765 </p></td></tr><tr class="question" title="7."><td align="left" valign="top"><a name="id328412"></a><a name="id328414"></a><p><b>7.</b></p></td><td align="left" valign="top"><p> 766 766 I deleted my <code class="constant">root</code> account and now I cannot add it back! What can I do? 767 767 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 775 775 </p></li><li class="step" title="Step 4"><p> 776 776 Restore the <code class="filename">group_mapping.tdb</code> file. 777 </p></li></ol></div></td></tr><tr class="question" title="8."><td align="left" valign="top"><a name="id32 9978"></a><a name="id329980"></a><p><b>8.</b></p></td><td align="left" valign="top"><p>777 </p></li></ol></div></td></tr><tr class="question" title="8."><td align="left" valign="top"><a name="id328477"></a><a name="id328479"></a><p><b>8.</b></p></td><td align="left" valign="top"><p> 778 778 When I run <code class="literal">net groupmap list</code>, it reports a group called <span class="guimenu">Administrators</span> 779 779 as well as <span class="guimenu">Domain Admins</span>. What is the difference between them? … … 783 783 Groups at this time. A Workstation or Server Local Group has no meaning in a Samba context. This 784 784 may change at some later date. These accounts are provided only so that security objects are correctly shown. 785 </p></td></tr><tr class="question" title="9."><td align="left" valign="top"><a name="id3 30018"></a><a name="id330020"></a><p><b>9.</b></p></td><td align="left" valign="top"><p>785 </p></td></tr><tr class="question" title="9."><td align="left" valign="top"><a name="id328517"></a><a name="id328519"></a><p><b>9.</b></p></td><td align="left" valign="top"><p> 786 786 What is the effect of changing the name of a Samba server or of changing the Domain name? 787 787 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> … … 795 795 or the <code class="literal">smbpasswd</code> (Samba-2.2.x). To change the SID, you use the same tool. Be sure 796 796 to check the man page for this command for detailed instructions regarding the steps involved. 797 </p></td></tr><tr class="question" title="10."><td align="left" valign="top"><a name="id3 30060"></a><a name="id330062"></a><p><b>10.</b></p></td><td align="left" valign="top"><p>797 </p></td></tr><tr class="question" title="10."><td align="left" valign="top"><a name="id328559"></a><a name="id328561"></a><p><b>10.</b></p></td><td align="left" valign="top"><p> 798 798 How can I manage user accounts from my Windows XP Professional workstation? 799 799 </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p>
Note:
See TracChangeset
for help on using the changeset viewer.
