commit 5dc8579e7026c05a873f566714a2749f2db1db3e
Author: Stephen Wadeley <swadeley(a)redhat.com>
Date: Wed Aug 6 22:02:05 2014 +0200
Samba: corrections and updates
thanks to Robin Hack for his feedback
en-US/Samba.xml | 33 ++++++++-------------------------
1 files changed, 8 insertions(+), 25 deletions(-)
---
diff --git a/en-US/Samba.xml b/en-US/Samba.xml
index debbdd7..371289b 100644
--- a/en-US/Samba.xml
+++ b/en-US/Samba.xml
@@ -14,8 +14,7 @@
<see>Samba</see>
</indexterm>
<para>
- <firstterm>Samba</firstterm> is an open source implementation of the
<firstterm>Server Message Block</firstterm> (<systemitem
class="protocol">SMB</systemitem>) protocol. It allows the networking
of Microsoft <trademark
- class="registered">Windows</trademark>, Linux, UNIX, and other
operating systems together, enabling access to Windows-based file and printer shares.
Samba's use of <systemitem class="protocol">SMB</systemitem>
allows it to appear as a Windows server to Windows clients.</para>
+ <application>Samba</application> is an open source implementation of the
<firstterm>server message block</firstterm> (<systemitem
class="protocol">SMB</systemitem>) protocol. Modern versions of this
protocol are also known as the <firstterm>common Internet file
system</firstterm> (<systemitem
class="protocol">CIFS</systemitem>) protocol. It allows the networking
of Microsoft <trademark class="registered">Windows</trademark>,
Linux, UNIX, and other operating systems together, enabling access to Windows-based file
and printer shares. Samba's use of <systemitem
class="protocol">SMB</systemitem> allows it to appear as a Windows
server to Windows clients.</para>
<note>
<title>Installing the samba package</title>
<para>In order to use <application>Samba</application>, first
ensure the <package>samba</package> package is installed on your system by
running, as <systemitem
class="username">root</systemitem>:</para>
@@ -31,22 +30,7 @@
<primary>Samba</primary>
<secondary>Introduction</secondary>
</indexterm>
- <para>The third major release of Samba, version 3.0.0, introduced numerous
improvements from prior versions, including:</para>
- <itemizedlist>
- <listitem>
- <para>The ability to join an Active Directory domain by means of the
<firstterm>Lightweight Directory Access Protocol</firstterm> (<systemitem
class="protocol">LDAP</systemitem>) and
<firstterm>Kerberos</firstterm></para>
- </listitem>
- <listitem>
- <para>Built in Unicode support for internationalization</para>
- </listitem>
- <listitem>
- <para>Support for all recent Microsoft Windows server and client versions
to connect to Samba servers without needing local registry hacking</para>
- </listitem>
- <listitem>
- <para>Two new documents developed by the
Samba.org team, which include a
400+ page reference manual, and a 300+ page implementation and integration manual. For
more information about these published titles, refer to <xref
- linkend="s3-samba-resources-published"/>.</para>
- </listitem>
- </itemizedlist>
+ <para>Fedora includes Samba version
<literal>4.1</literal>:</para>
<section
id="s3-samba-abilities">
<title>Samba Features</title>
@@ -81,7 +65,7 @@
<para>Act as an Active Directory domain member server</para>
</listitem>
<listitem>
- <para>Join a Windows NT/2000/2003/2008 PDC</para>
+ <para>Join a Windows NT/2000/2003/2008 PDC/Windows Server
2012</para>
</listitem>
</itemizedlist>
<para>What Samba cannot do:</para>
@@ -134,7 +118,7 @@
<secondary>daemon</secondary>
<tertiary>nmbd</tertiary>
</indexterm>
- <para>The <command>nmbd</command> server daemon understands and
replies to NetBIOS name service requests such as those produced by
SMB/<firstterm>Common Internet File System</firstterm> (CIFS) in Windows-based
systems. These systems include Windows 95/98/ME, Windows NT, Windows 2000, Windows XP, and
LanManager clients. It also participates in the browsing protocols that make up the
Windows <guilabel>Network Neighborhood</guilabel> view. The default port that
the server listens to for <systemitem
class="protocol">NMB</systemitem> traffic is <systemitem
class="protocol">UDP</systemitem> port <systemitem
class="constant">137</systemitem>.</para>
+ <para>The <command>nmbd</command> server daemon understands and
replies to NetBIOS name service requests such as those produced by SMB/CIFS in
Windows-based systems. These systems include Windows 95/98/ME, Windows NT, Windows 2000,
Windows XP, and LanManager clients. It also participates in the browsing protocols that
make up the Windows <guilabel>Network Neighborhood</guilabel> view. The
default port that the server listens to for <systemitem
class="protocol">NMB</systemitem> traffic is <systemitem
class="protocol">UDP</systemitem> port <systemitem
class="constant">137</systemitem>.</para>
<para>The <command>nmbd</command> daemon is controlled by the
<command>nmb</command> service.</para>
<bridgehead id="s4-samba-daemon-winbindd">
<command>winbindd</command>
@@ -145,8 +129,8 @@
<secondary>daemon</secondary>
<tertiary>winbindd</tertiary>
</indexterm>
- <para>The <command>winbind</command> service resolves user and
group information on a server running Windows NT, 2000, 2003 or Windows Server 2008. This
makes Windows user / group information understandable by UNIX platforms. This is achieved
by using Microsoft RPC calls, <firstterm>Pluggable Authentication
Modules</firstterm> (PAM), and the <firstterm>Name Service
Switch</firstterm> (NSS). This allows Windows NT domain users to appear and operate
as UNIX users on a UNIX machine. Though bundled with the Samba distribution, the
<command>winbind</command> service is controlled separately from the
<command>smb</command> service.</para>
- <para>The <command>winbindd</command> daemon is controlled by the
<command>winbind</command> service and does not require the
<command>smb</command> service to be started in order to operate.
<command>winbindd</command> is also used when Samba is an Active Directory
member, and may also be used on a Samba domain controller (to implement nested groups
and/or interdomain trust). Because <command>winbind</command> is a client-side
service used to connect to Windows NT-based servers, further discussion of
<command>winbind</command> is beyond the scope of this chapter.</para>
+ <para>The <command>winbind</command> service resolves user and
group information received from a server running Windows NT, 2000, 2003, Windows Server
2008, or Windows Server 2012. This makes Windows user and group information understandable
by UNIX platforms. This is achieved by using Microsoft RPC calls,
<firstterm>Pluggable Authentication Modules</firstterm> (PAM), and the
<firstterm>Name Service Switch</firstterm> (NSS). This allows Windows NT
domain users to appear and operate as UNIX users on a UNIX machine. Though bundled with
the Samba distribution, the <command>winbind</command> service is controlled
separately from the <command>smb</command> service.</para>
+ <para>The <command>winbindd</command> daemon is controlled by the
<command>winbind</command> service and does not require the
<command>smb</command> service to be started in order to operate.
<command>winbindd</command> is also used when Samba is an Active Directory
member, and may also be used on a Samba domain controller (to implement nested groups and
interdomain trust). Because <command>winbind</command> is a client-side
service used to connect to Windows NT-based servers, further discussion of
<command>winbind</command> is beyond the scope of this chapter.</para>
<note>
<title>Obtaining a list of utilities that are shipped with
Samba</title>
<para>You may refer to <xref
@@ -317,8 +301,7 @@ create mask = 0765</programlisting>
<section
id="s3-samba-encrypted-passwords">
<title>Encrypted Passwords</title>
- <para>Encrypted passwords are enabled by default because it is more secure to
do so. To create a user with an encrypted password, use the command
<command>smbpasswd -a <replaceable>username</replaceable>
- </command>.</para>
+ <para>Encrypted passwords are enabled by default because it is more secure to
use them. To create a user with an encrypted password, use the command
<command>smbpasswd -a
<replaceable>username</replaceable></command>.</para>
<indexterm
significance="normal">
<primary>Samba</primary>
@@ -394,7 +377,7 @@ create mask = 0765</programlisting>
<screen><command>systemctl start smb.service</command></screen>
<important>
<title>Setting up a domain member server</title>
- <para>To set up a domain member server, you must first join the domain or
Active Directory using the <command>net join</command> command
<emphasis>before</emphasis> starting the <command>smb</command>
service.</para>
+ <para>To set up a domain member server, you must first join the domain or
Active Directory using the <command>net join</command> command
<emphasis>before</emphasis> starting the <command>smb</command>
service. Also, it is recommended to run <systemitem
class="daemon">winbind</systemitem> before <systemitem
class="daemon">smbd</systemitem>.</para>
</important>
<para>To stop the server, type the following command in a shell prompt, as
<systemitem class="username">root</systemitem>:</para>
<screen><command>systemctl stop
smb.service</command></screen>