Linux Samba Server Administration

Authoritative Answers to All Your Samba Questions

Linux Samba Server Administration is the most complete, most advanced guide to Samba you'll find anywhere. Written by a leading Linux expert, this book teaches you, step-by-step, all the standard and advanced Samba techniques you'll need to make Linux and UNIX machines operate seamlessly as part of your Windows network. Throughout, scores of clear, consistent examples illustrate these techniques in detail — so you stay on track and accomplish all your goals. Coverage includes:

• Installing Samba
• Setting up file sharing
• Setting up printer sharing
• Using Samba as a client
• Setting up a working user authentication system
• Using automation to expand Samba's capabilities
• Setting up Samba as a domain controller
• Configuring NetBIOS name server functions
• Configuring Samba for optimal interoperation with other servers
• Managing user accounts
• Optimizing Samba for maximum speed
• Securing Samba against intrusion
• Using Samba as a backup server
• Troubleshooting Samba
• Configuring Samba to work with a variety of client OSs

• Part 1: How Things Work
1. An Introduction to SMB/CIFS
• Windows Networking and the Development of Samba
  • The Basic Protocols: NetBIOS, NetBEUI, and SMB
  • The Evolution of SMB Protocols
  • The Emergence of Samba
  • SMB/CIFS in Various Environments
• Integration of TCP/IP and SMB/CIFS
• SMB/CIFS Terminology
  • Clients, Servers, and Shares
  • Workgroups and Domains
  • Network Browsing
• The Structure of an SMB/CIFS Network
  • Naming of NetBIOS Computers and Networks
  • A Named Hierarchy in a Flat Space
  • Resource Types
  • The Role of PDCs
  • The Role of NBNS Servers
  • NetBIOS Browsing
  • Samba’s Capabilities
• Summary
2. Integrating SMB/CIFS into Linux
• SMB/CIFS over TCP/IP
  • TCP/IP vs. NetBEUI as a Transport Protocol
  • Binding SMB/CIFS to TCP/IP in Windows
  • Linux Features Required for Samba
• The Samba Daemons
  • Samba 2.0.x
  • Samba TNG
• Resolving Filesystem Feature Conflicts
  • Filename Length and Case Retention
  • FAT-Style File Attributes
  • Ownership and Permission
  • Partitions, Mount Points, and Shares
• Summary
• Part 2: Essential Configuration
3. Installing Samba
• Obtaining Samba
  • Samba with Your Linux Distribution
  • Updates from Your Linux Distributor
  • Getting the Most Up-to-Date Samba
• Installing a Binary Package
  • Installing an RPM
  • Installing a Debian Package
  • Installing a Tarball
• Compiling the Source Code
  • Compiling a Source RPM
  • Compiling Source from a Tarball
• Locating Important Files
  • Common Installation Directories
  • Configuration Files
• Running Samba
  • Running Samba Manually
  • Common Distribution Startup Scripts
  • Running Samba from inetd
• Summary
4. GUI Configuration Tools and the smb.conf File
• Editing smb.conf to Configure Samba
  • Structure of the smb.conf File
  • Keeping Your Configuration File Readable
  • Testing Your Configuration File
• Using Red Hat’s linuxconf to Configure Samba
  • Using linuxconf Locally or Remotely
  • A Tour of linuxconf Samba Options
  • Tips Concerning linuxconf Configuration
• Using SWAT to Configure Samba
  • Initial SWAT Configuration
  • Limiting SWAT Access
  • A Tour of SWAT Options
  • Recommendations for Working with SWAT
• Important General Configuration Options
  • Server Identification
  • Logging Options
  • An Overview of Security Issues
• Summary
5. Configuring File Sharing
• Configuring File Shares
  • A Basic File Share Example
  • Home Directory Shares
  • Browsing Options
  • Filename Options
  • File Locking
• Setting Ownership and Permissions
  • Samba Ownership and Permission Options
  • Interactions with Other Services
  • Storing FAT-Style File Attributes
  • A Network Security Preview
• Some Common File-Sharing Scenarios
  • Shared Program and File Server
  • User Files on a High-Security Central Server
  • Serving Files to Legacy DOS Systems
  • Sharing Files Using Multiple Protocols
• Summary
6. Configuring Printer Sharing
• Creating Print Queues
  • Ghostscript and PostScript Printing
  • Raw Queues
  • Fax Queues
• Configuring Printer Shares
  • A Basic Printer-Sharing Example
  • Sharing All or Some Printers
  • Samba Options for Printer Shares
  • Windows Printer Driver Installation
• Controlling Access to Printers
  • Security Options and Printer Shares
  • Interaction of Samba Options with lpd Options
• Some Common Printer-Sharing Scenarios
  • Sharing All Local Printers with Variations
  • Re-Exporting a Remote Printer
  • Using Samba as a PostScript Processor
• Summary
7. Using Linux as an SMB/CIFS Client
• When to Use Samba as a Client
  • Accessing Resources on a Windows Network
  • Linux as a Translator
  • Using Linux Programs on Windows Files
  • Linux as a Backup Server
• Using smbclient to Access Remote Files
  • Accessing Remote Computers
  • Transferring Files
  • Manipulating Remote Files
• Mounting Remote Filesystems
  • The Evolution of smbmount
  • Mounting Remote Shares
  • Access Quirks of a Mounted Share
  • GUI Browsers
• Printing Files on Remote Printers
  • Printing a File Using smbclient
  • Configuring a Linux Printer Queue to Use smbprint
  • Security Implications of smbprint
• Summary
• Part 3: Advanced Configurations
8. Automation
• Uses for Automation
  • Dynamically Configuring Samba
  • Dynamically Configuring Windows
  • Performing Linux Tasks from Windows
• Server-Side Automation
  • A Review of Variables
  • Using preexec and postexec
  • Using Pseudo-Printers
  • Using Magic Scripts
• Client Network Scripts
  • Basic Domain Controller Configuration
  • Creating a Logon Script
  • Setting Up Roaming Profiles
  • Using Roaming Profiles from Windows Clients
  • Caveats about Logon Scripts and User Profiles
• Summary
9. Samba as an NBNS Server
• Understanding NBNS
  • The Function of NBNS
  • NBNS and DNS
  • NBNS and lmhosts
  • Setting the Node Type
• Samba NBNS Operations
  • Configuring Samba as an NBNS Server
  • Name Resolution Order
• NBNS under Various OSs
  • Windows 9x
  • Windows NT 4
  • Windows 2000
• Summary
10. Configuring Domains
• Understanding Domains
  • What Is a NetBIOS Domain?
  • Domains and Workgroups
  • Why Use a Domain?
  • NetBIOS Domains and Internet Domains
• Windows 9x and Domains
  • Configuring Samba as a Domain Controller
  • Configuring Clients to Use the Domain
  • Removing Windows .PWL Files
• Windows NT and Domains
  • Differences between Windows 9x and Windows NT
  • Domains
  • Features of Samba PDC Support
  • Configuring Samba as an NT PDC System
  • Adding Client Computers
  • Windows 2000 Considerations
• Using Samba on a Domain
• Summary
11. Local and Routed Browsing
• Understanding Browsing
  • What Is Browsing?
  • SMB/CIFS Browsing Characteristics
  • Local versus Routed Browsing
  • Electing a Local Master Browser
  • The Role of NBNS in Browsing
• Configuring Samba for Browsing
  • Allowing Clients to Browse Shares
  • Samba as a Local or Domain Master Browser
• Common Configuration Examples
  • Small Network, No Routing
  • Small Network with Isolated Samba Servers
  • Workgroup across Subnets
  • Domain across Subnets
• Summary
12. Tuning Samba for Optimum Performance
• Network Performance Testing
  • Network Benchmarks
  • Evaluating Benchmark Results
• Locating Bottlenecks
  • Hardware Bottlenecks
  • Software Bottlenecks
  • Working Around Bottlenecks
• Linux Configuration Options
  • Samba Configuration Options
  • Linux TCP/IP Performance
  • Additional Linux Options
• Windows Configuration Options
  • Windows 9x TCP/IP Options
  • Windows NT TCP/IP Options
• Summary
13. Integrating Samba into a Broader Network
• Samba Interactions with NFS and lpd
  • Controlling Ownership, Permissions, and Filenames
  • Working with File Contents
  • Creating Workable File-Locking with NFS
  • Re-Exporting Shares
  • Printer Sharing Trade-Offs
• Samba Interactions with Netatalk
  • Controlling Filenames, Ownership, and Permissions
  • Working with File Contents
  • Creating Workable File-Locking with Netatalk
  • Re-Exporting Shares
  • Coping with Netatalk Resource Forks
• Using a Samba Server to Serve Additional Protocols
  • Integration with File-Serving Protocols
  • Protocols That May Affect Shared Files
  • Additional Protocols
  • Multiple Dedicated Servers vs. Single-Server Networks
• Summary
• Part 4: Maintaining a Healthy System
14. Samba Security Considerations
• Controlling Initial Access to Samba
  • Binding Samba to Specific Network Interfaces
  • Restricting Access by Computer
  • Authenticating Users by Username and Password
• Encrypted versus Cleartext Passwords
  • Advantages and Drawbacks of Encrypted and
  • Cleartext Passwords
  • Default Encryption for Versions of Windows
  • Using Samba’s Encryption Policy
  • Samba’s Password Support Programs
  • Setting the Windows Encryption Policy
• File Ownership and Permissions
  • Evaluating Per-Share Ownership and Permissions
  • Evaluating Per-User Access Controls
  • Integrating ACLs with Samba
• Samba over SSL
  • Configuring SSL
  • Creating Certificates
  • Configuring Samba to Use SSL
  • Configuring a Client to Use SSL
• Samba in the Broader Security World
  • Ports Used by SMB/CIFS
  • Using ipchains or a Firewall to Block Samba Access
  • Running Samba through TCP Wrappers or xinetd
  • Non-Samba Servers
• Summary
15. Managing Accounts
• Using Linux Usernames and Groups
  • Matching Windows and Linux Usernames
  • Managing Guest Access
  • Creating Groups to Emulate ACLs
  • Using valid users and invalid users to Create Pseudo-Groups
• Managing Passwords
  • Passwords in Workgroups and Domains
  • Changing Passwords
  • Password Change Strategies
• Summary
16. Backups
• An Overview of Backup Options
  • Backup Hardware Options
  • Server- vs. Client-Initiated Backups
  • Backup Software Choices
  • Timing Backups
  • Backup Storage
• Backing Up a Samba Server Locally
  • An Example Using tar
  • Preparing for Disaster: Developing a Recovery Plan
• Backing Up a Samba Server Remotely
  • Using NFS to Back Up a Server
  • Performing a Client-Initiated Backup
• Using Samba to Back Up Client Computers
  • Preparing Windows Clients
  • Using smbtar to Back Up a Client
  • Using smbmount to Back Up a Client
  • Cautions Concerning Remote Backups
  • Emergency Recovery Options
• Summary
17. Troubleshooting
• General-Purpose Troubleshooting
  • Testing Basic Networking
  • Checking Log Files
  • Using Samba Utilities
• Problems with Domain Controllers
  • Conflicts with Windows Computers
  • Rejected Passwords
• Problems Locating a Samba Server
  • Checking SMB/CIFS Binding to TCP/IP
  • Browsing Problems
  • Name Resolution Problems
• Problems Accessing Samba Shares
  • Initial Troubleshooting Measures
  • Host-by-Host Security Features
  • User-Based Security Features
• Problems Accessing Files
  • Checking Permissions
  • File-Hiding Options
  • Filename Options
• Problems with Printing
  • General Printer Troubleshooting Advice
  • Vanishing Print Jobs
  • Garbled Output
  • Poor-Quality Printouts
  • Last-Page Difficulties
• Summary
• Appendices
1. Configuration Reference Guide
2. OS-Specific Issues
• Samba and DOS
  • Obtaining Software
  • Configuring Software
  • Using Samba from DOS
  • Filename Options
• Samba and Windows 3.11
• Samba and OS/2
  • Configuring OS/2 for SMB/CIFS
  • Using Samba Shares from OS/2
  • Printer Sharing
  • Understanding OS/2 SMB/CIFS Peculiarities
• Samba and BeOS
  • Installing SMB/CIFS Support in BeOS
  • Using a Samba Server from BeOS
  • BeOS Filesystem Quirks
• Samba and MacOS
  • Obtaining and Installing MacOS Client Software
  • Using Samba Resources from the Macintosh
  • Macintosh File Idiosyncrasies
• Samba with Multiple Client OSs
  • Using the include Parameter
  • Creating Compromise Configurations
• Summary
3. The GNU GPL

If you want a good discussion about Samba and its pros/cons, this is for you. Recommended.