Samba-3 by Example: Practical Exercises to Successful Deployment

John H. Terpstra9780131472211, 0-13-147221-6

This book comprehensively documents step-by-step proven, working examples of Samba deployments. It is the perfect follow up book to the Official SAMBA-3 HOWTO and Reference Guide (0131453556). If you want to deploy Samba-3 with least effort, or if you want to become an expert at deploying Samba-3 without having to search for every piece of detail from the HOWTO, this book is the ticket to your destination. Each chapter begins with the description of a case problem and sets out specifications for the design of a solution. The second part of the chapter provides a detailed discussion of a fully documented step-by-step implementation. All example case configuration files, scripts and other tools are provided on a CDROM. This book is descriptive, provides detailed diagrams, and makes deployment of Samba-3 a breeze. Samba has an installed base of 12m, 30% of which are expected to update to Samba 3. Microsoft Windows Server has an installed base of about 16m, between 10-15% of which are expected to migrate to a non-Microsoft solution like Samba.

---

Table of contents :
Acknowledgments……Page 5
Foreword……Page 6
Preface……Page 8
List of Examples……Page 14
List of Figures……Page 21
List of Tables……Page 25
1.1 Requirements and Notes……Page 29
1.2 Introduction……Page 30
1.3 Exercises……Page 31
1.3.1.1 Findings……Page 32
1.3.2 Second Machine Startup Broadcast Interaction……Page 35
1.3.3 Simple Windows Client Connection Characteristics……Page 36
1.3.3.1 Findings and Comments……Page 38
1.3.4 Windows 200x/XP Client Interaction with Samba-3……Page 41
1.3.5 Conclusions to Exercises……Page 42
1.5 Questions and Answers……Page 45
2.2 Assignment Tasks……Page 48
2.2.1.1 Dissection and Discussion……Page 49
2.2.1.2 Implementation……Page 50
2.2.1.3 Validation……Page 51
2.2.2 Charity Administration Office……Page 52
2.2.2.1 Dissection and Discussion……Page 53
2.2.2.2 Implementation……Page 54
2.2.3 Accounting Office……Page 59
2.2.3.2 Implementation……Page 60
2.3 Questions and Answers……Page 63
3.1 Introduction……Page 67
3.2 Dissection and Discussion……Page 68
3.2.1 Technical Issues……Page 69
3.3 Implementation……Page 70
3.3.1 Validation……Page 75
3.4 Questions and Answers……Page 79
4.1 Introduction……Page 85
4.1.1 Assignment Tasks……Page 86
4.2 Dissection and Discussion……Page 87
4.2.1 Technical Issues……Page 88
4.2.1.1 Hardware Requirements……Page 89
4.2.2 Political Issues……Page 90
4.3 Implementation……Page 91
4.3.1 Basic System Configuration……Page 93
4.3.2 Samba Configuration……Page 95
4.3.3 Configuration of DHCP and DNS Servers……Page 98
4.3.4 Printer Configuration……Page 99
4.3.5 Process Startup Configuration……Page 100
4.3.6 Validation……Page 101
4.3.7 Application Share Configuration……Page 108
4.3.8 Windows Client Configuration……Page 110
4.4 Questions and Answers……Page 112
5 The 500-User Office……Page 127
5.1.1 Assignment Tasks……Page 128
5.2.1 Technical Issues……Page 129
5.2.2 Political Issues……Page 130
5.3.1 Installation of DHCP, DNS, and Samba Control Files……Page 131
5.3.2 Server Preparation — All Servers……Page 132
5.3.3.1 Configuration for Server: MASSIVE……Page 135
5.3.3.2 Configuration Specific to Domain Member Servers: BLDG1, BLDG2……Page 138
5.3.4 Process Startup Configuration……Page 139
5.3.5 Windows Client Configuration……Page 142
5.3.6 Key Points Learned……Page 146
5.4 Questions and Answers……Page 147
6 Making Users Happy……Page 156
6.1.1 Assignment Tasks……Page 158
6.2 Dissection and Discussion……Page 159
6.2.1 Technical Issues……Page 161
6.2.1.2 The Local Group Policy……Page 163
6.2.1.5 Installation of Printer Driver Auto-Download……Page 164
6.2.3 Installation Check-List……Page 165
6.3.1 OpenLDAP Server Configuration……Page 166
6.3.2 PAM and NSS Client Configuration……Page 168
6.3.3 Samba-3 PDC Configuration……Page 171
6.3.4 Install and Configure Idealx SMB-LDAP Scripts……Page 173
6.3.5 LDAP Initialization and Creation of User and Group Accounts……Page 176
6.3.6 Printer Configuration……Page 185
6.4 Samba-3 BDC Configuration……Page 186
6.5.1 Configuring Directory Share Point Roots……Page 190
6.5.2 Configuring Profile Directories……Page 191
6.6 Windows Client Configuration……Page 192
6.6.1 Configuration of Default Profile with Folder Redirection……Page 193
6.6.2 Configuration of MS Outlook to Relocate PST File……Page 194
6.6.3 Configure Delete Cached Profiles on Logout……Page 195
6.6.4 Uploading Printer Drivers to Samba Servers……Page 196
6.7 Key Points Learned……Page 197
6.8 Questions and Answers……Page 198
7.1 Introduction……Page 207
7.2 Dissection and Discussion……Page 208
7.2.1.1 User Needs……Page 209
7.2.1.2 The Nature of Windows Networking Protocols……Page 210
7.2.1.3 Identity Management Needs……Page 212
7.3 Implementation……Page 216
7.4 Questions and Answers……Page 221
8.1.1 Assignment Tasks……Page 227
8.2.1 Technical Issues……Page 228
8.2.2 Political Issues……Page 230
8.3.1 NT4 Migration Using LDAP Backend……Page 231
8.3.2 NT4 Migration Using tdbsam Backend……Page 234
8.3.3 Key Points Learned……Page 238
8.4 Questions and Answers……Page 239
9 Adding UNIX/LINUX Servers and Clients……Page 242
9.2 Dissection and Discussion……Page 243
9.2.1 Technical Issues……Page 244
9.2.2 Political Issues……Page 245
9.3.1 Samba Domain with Samba Domain Member Server — Using LDAP……Page 246
9.3.2 NT4/Samba Domain with Samba Domain Member Server — Using Winbind……Page 249
9.3.3 Active Directory Domain with Samba Domain Member Server……Page 252
9.3.4 UNIX/Linux Client Domain Member……Page 261
9.3.4.1 NT4 Domain Member……Page 262
9.3.5 Key Points Learned……Page 263
9.4 Questions and Answers……Page 264
10.1 Introduction……Page 275
10.2 Dissection and Discussion……Page 278
10.2.1 Technical Issues……Page 279
10.2.1.1 Kerberos Exposed……Page 281
10.3.1 Share Access Controls……Page 283
10.3.2.1 Check-point Controls……Page 284
10.3.2.2 Override Controls……Page 286
10.3.3 Share Point Directory and File Permissions……Page 287
10.3.4 Managing Windows 200x ACLs……Page 288
10.3.4.2 Using MS Windows Explorer (File Manager)……Page 289
10.3.4.3 Setting Posix ACLs in UNIX/Linux……Page 290
10.4 Questions and Answers……Page 291
11.1.1 Assignment Tasks……Page 294
11.2.1 Technical Issues……Page 295
11.3 Implementation……Page 296
11.3.2 Kerberos Configuration……Page 297
11.3.2.1 Samba Configuration……Page 299
11.3.3 Configuration……Page 301
11.4 Questions and Answers……Page 303
12.1 Introduction……Page 305
12.2 Dissection and Discussion……Page 306
12.3.1.1 Bad Hostnames……Page 307
12.3.2 Samba Configuration……Page 308
12.3.5 For Scalability, Use SAN Based Storage on Samba Servers……Page 310
12.3.8 Hardware Problems……Page 311
12.3.9 Key Points Learned……Page 312
A.1 Joining a Domain: Windows 200x/XP Professional……Page 313
A.2 Samba System File Location……Page 317
A.3 Starting Samba……Page 318
A.5 Alternative LDAP Database Initialization……Page 320
A.5.1 Initialization of the LDAP Database……Page 321
A.6 The LDAP Account Manager……Page 324
A.7 Effect of Setting File and Directory SUID/SGID Permissions Explained……Page 330
A.8.1 Microsoft Access……Page 332
A.8.3 Opportunistic Locking Controls……Page 333
B The GNU General Public License……Page 344
Glossary……Page 349
SUBJECT INDEX……Page 351