[an error occurred while processing this directive]
|
Symbols
- "Printers" folder,
Caveats to Be Considered,
Installing the PostScript Driver on a Client,
Manual Driver Installation in 15 Steps
- $,
Manual Creation of Machine Trust Accounts
- %i macro,
Multiple Virtual Server Personalities
- %L,
Multiple Virtual Server Personalities
- %PDF,
MIME Types and CUPS Filters
- %SystemRoot%\System32\config,
MS Windows NT4-style Domain Control
- ../source/nsswitch,
Configure Winbind and PAM
- .ai,
MIME Types and CUPS Filters
- .AppleDouble,
netatalk
- .eps,
MIME Types and CUPS Filters
- .pdf,
MIME Types and CUPS Filters
- .PDS extension,
Windows NT4 Workstation
- .profiles,
Windows 9x/Me User Profiles
- .ps,
MIME Types and CUPS Filters
- .recycle,
recycle
- /bin/false,
Example Configuration,
User Rights and Privileges
- /dev/null,
User Rights and Privileges
- /dev/shadowvol,
Shadow Copy Setup
- /etc/cups/,
MIME Types and CUPS Filters
- /etc/cups/mime.convs,
Raw Print Serving: Vendor Drivers on Windows Clients,
Explicitly Enable “raw” Printing for application/octet-stream,
MIME Type Conversion Rules,
application/octet-stream Printing
- /etc/cups/mime.types,
Raw Print Serving: Vendor Drivers on Windows Clients,
Explicitly Enable “raw” Printing for application/octet-stream,
application/octet-stream Printing
- /etc/fstab,
Shadow Copy Setup
- /etc/group,
Share-Level Security,
Discussion,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Sample smb.conf Add Group Script,
Domain Member Server or Domain Member Client,
The [global] Section,
Features and Benefits,
HPUX
- /etc/groups,
Anatomy of /etc/pam.d Entries
- /etc/host.conf,
Name Resolution in a Pure UNIX/Linux World,
/etc/host.conf
- /etc/hosts,
Configure /etc/krb5.conf,
How Browsing Functions,
Name Resolution in a Pure UNIX/Linux World,
/etc/hosts,
Name Resolution as Used within MS Windows Networking,
The Tests
- /etc/hosts>,
/etc/hosts
- /etc/inetd.conf,
Linux/FreeBSD-Specific PAM Configuration,
Starting from inetd.conf
- /etc/init.d/samba,
Joining an NT4-type Domain with Samba-3,
Linux
- /etc/init.d/samba.server,
Solaris
- /etc/init.d/smb,
Linux
- /etc/krb5.conf,
Configure /etc/krb5.conf,
Possible Errors,
ADS Domains,
IDMAP Storage in LDAP Using Winbind
- /etc/ldap.conf,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- /etc/logingroup,
HPUX
- /etc/mime.conv,
Central Print Serving
- /etc/mime.types,
Central Print Serving
- /etc/nsswitch.conf,
Domain Member Server or Domain Member Client,
NT4-Style Domains (Includes Samba Domains),
IDMAP_RID with Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension,
Name Service Switch,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris,
Name Resolution in a Pure UNIX/Linux World,
/etc/nsswitch.conf
- /etc/openldap/slapd.conf,
The Primary Domain Controller
- /etc/openldap/sldap.conf,
Accounts and Groups Management
- /etc/pam.conf,
Solaris-Specific Configuration,
Features and Benefits,
Technical Discussion,
Anatomy of /etc/pam.d Entries
- /etc/pam.d,
Requirements,
Testing Things Out,
Configure Winbind and PAM,
Features and Benefits
- /etc/pam.d/,
Pluggable Authentication Modules,
Technical Discussion
- /etc/pam.d/ftp,
Linux/FreeBSD-Specific PAM Configuration
- /etc/pam.d/login,
Linux/FreeBSD-Specific PAM Configuration
- /etc/pam.d/samba,
Linux/FreeBSD-Specific PAM Configuration
- /etc/passwd,
Share-Level Security,
Example Configuration,
“$” Cannot Be Included in Machine Name,
MS Windows Workstation/Server Machine Trust Accounts,
Manual Creation of Machine Trust Accounts,
Windows 200x/XP Professional Client,
Adding Machine to Domain Fails,
Background,
Reference Documentation Server,
Central Print Serving,
Backward Compatibility Account Storage Systems,
Plaintext,
Schema and Relationship to the RFC 2307 posixAccount,
Applicable Only to Versions Earlier than 3.0.11,
Domain Member Server or Domain Member Client,
Samba as the Trusted Domain,
Features and Benefits,
Starting and Testing the winbindd Daemon,
Features and Benefits
- /etc/printcap,
Basic CUPS Support Configuration
- /etc/resolv.conf,
Name Resolution in a Pure UNIX/Linux World,
Assumptions,
The Tests
- /etc/samba,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting,
The Tests
- /etc/samba/scripts,
Managing Nest Groups on Workstations from the Samba Server
- /etc/samba/secrets.tdb,
Joining an NT4-type Domain with Samba-3
- /etc/samba/smb.conf,
Configuring Samba (smb.conf)
- /etc/samba/smbpasswd,
Plaintext
- /etc/samba/smbusers,
User Mapping
- /etc/shadow,
Background,
Backward Compatibility Account Storage Systems
- /etc/smbpasswd,
Plaintext
- /etc/ssl/certs/slapd.pem,
LDAP Configuration Notes
- /etc/xinetd.d,
Linux/FreeBSD-Specific PAM Configuration
- /etc/xinetd.d/telnet,
Linux/FreeBSD-Specific PAM Configuration
- /export,
Reference Documentation Server
- /lib/libnss_example.so,
Name Service Switch
- /lib/libnss_files.so,
Name Service Switch
- /lib/security,
Configure Winbind and PAM,
PAM Configuration Syntax
- /lib/security/,
Pluggable Authentication Modules
- /opt/samba/bin,
Locating the SWAT File
- /tmp,
File and Directory Access Control
- /usr/bin/openssl,
Securing SWAT through SSL
- /usr/lib/samba/vfs,
Discussion
- /usr/lib/security,
NSS Winbind on AIX,
Configure Winbind and PAM
- /usr/lib/security/methods.cfg,
NSS Winbind on AIX
- /usr/local/lib,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- /usr/local/samba,
Starting and Testing the winbindd Daemon
- /usr/local/samba/bin,
Linux,
Solaris,
Locating the SWAT File
- /usr/local/samba/lib,
The Tests
- /usr/local/samba/lib/vfs,
Discussion
- /usr/local/samba/private/secrets.tdb,
Joining an NT4-type Domain with Samba-3
- /usr/local/samba/swat,
Enabling SWAT for Use
- /usr/local/samba/var,
Access Controls on Shares,
Assumptions
- /usr/local/samba/var/locks,
Static WINS Entries
- /usr/sbin,
Locating the SWAT File,
Enabling SWAT for Use
- /usr/share/samba/swat,
Enabling SWAT for Use
- /var/locks/*.tdb,
Corrupt tdb Files
- /var/log/samba,
Assumptions
- /var/run/samba,
Static WINS Entries
- /var/spool/cups/,
Autodeletion or Preservation of CUPS Spool Files
- /var/spool/samba,
Central Print Serving,
Autodeletion or Preservation of CUPS Spool Files
- 250-user limit,
tdbsam
- 3.0.11,
The Administrator Domain SID
- 4,500 user accounts,
tdbsam
- 4294967295,
Interdomain Trust Relationships
- 8.3 file names,
MS Windows NTFS Comparison with UNIX File Systems
- >Domain User Manager,
Creating an NT4 Domain Trust
- [global],
Multiple Virtual Server Personalities
- \\%L\%U\.profiles,
Windows 9x/Me User Profiles
- \\SERVER,
Problem Resolution
- _kerberos.REALM.NAME,
Configure /etc/krb5.conf
- _kerberos._udp,
Notes
- _ldap._tcp,
Notes
- _ldap._tcp.pdc._msdcs.quenya.org,
NetBIOS Over TCP/IP Disabled
- ,
Single Sign-On and Domain Security,
Domain Control: Example Configuration,
Manual Creation of Machine Trust Accounts,
Samba Client,
Joining an NT4-type Domain with Samba-3,
Configure /etc/krb5.conf,
Printer Migration,
IDMAP_RID with Winbind,
Using the “net rpc rights” Utility,
File, Directory, and Share Access Controls,
Features and Benefits,
Rapid Configuration Validation,
Extended Printing Configuration,
Identifying Driver Files,
Features and Benefits,
Linux,
Solaris-Specific Configuration,
Remote Management from NoMachine.Com,
The NetBIOS Name Cache,
Advanced Configuration Techniques,
Multiple Virtual Server Hosting (see SSO)
-
- backend,
Domain Controller Types
- logon
-
- service,
Essential Background Information
A
- abbreviated keystrokes,
TCP/IP Configuration
- aborting shutdown,
Description of Privileges
- accept connections,
Using Interface Protection
- Access,
Using the “net rpc rights” Utility
- access authentication,
Mapping Common UIDs/GIDs on Distributed Machines
- access control,
Features and Benefits,
Single Sign-On and Domain Security,
Background,
Access Controls on Shares,
Advanced Network Management
- Access Control,
Domain Logon Configuration: Windows 9x/Me
- Access Control Entries (see ACE)
- Access Control List,
File, Directory, and Share Access Controls
- access control needs,
Server Share and Directory Layout
- access controls,
Features and Benefits,
Comments Regarding LDAP,
The pdbedit Tool,
Mapping Windows Groups to UNIX Groups,
Features and Benefits,
Protecting Directories and Files from Deletion
- Access Controls,
Objectives
- access denied,
Using IPC$ Share-Based Denials
- access policies,
Domain Account Policy Managment
- access rights,
Features and Benefits,
Overview,
Trust Relationship Background
- account,
Example Configuration,
Features and Benefits,
Windows 200x/XP Professional Client,
Anatomy of /etc/pam.d Entries
-
- backend,
Features and Benefits
- database,
Domain Security Mode (User-Level Security)
-
- backends,
Features and Benefits
- account access controls,
New Account Storage Systems
- account attributes,
Primary Domain Controller
- account backends,
Account Information Databases
- account containers,
Initialize the LDAP Database
- account control block (see ACB)
- account control flags,
Account Flags Management
- account controls,
MS Windows Workstation/Server Machine Trust Accounts
- Account Controls,
Managing Account/User Policies
- account database,
Password Backends
- account deleted,
Deleting Accounts
- account encode_bits,
Account Flags Management
- account flag order,
Account Flags Management
- Account Flags,
Listing User and Machine Accounts
- account flags,
Account Flags Management
- account information,
MS Windows NT4-style Domain Control,
MS Windows Workstation/Server Machine Trust Accounts,
Schema and Relationship to the RFC 2307 posixAccount,
UNIX and Windows User Management
- account information database,
Mapping User Identifiers between MS Windows and UNIX
- account management,
Primary Domain Controller
- account migration,
The pdbedit Tool
- account name,
Domain Member Server or Domain Member Client,
User Rights and Privileges,
Samba as the Trusted Domain
- account policies,
Preparing for Domain Control
- account policy,
The pdbedit Tool
- account restrictions,
Managing Account/User Policies
- account security,
The pdbedit Tool
- account storage backends,
Passdb Backends and Authentication
- account storage mechanisms,
Account Information Databases
- account storage system,
Account Information Databases
- Account Unknown,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- accountability,
The pdbedit Tool
- accounts,
Introduction
- ACL,
Security and sambaSamAccount,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Description of Privileges,
Features and Benefits,
Printing Developments Since Samba-2.2,
Introduction
- ACLs,
File, Directory, and Share Access Controls,
The Obsoleted [printer$] Section
-
- File System,
File and Directory Access Control
- POSIX,
File, Directory, and Share Access Controls,
Features and Benefits
- share,
Features and Benefits
- Windows,
Features and Benefits
- ACLs on share,
Windows 200x/XP
- ACLs on shares,
Features and Benefits
- across network segments,
NetBIOS over TCP/IP
- active directory,
Features and Benefits,
Features and Benefits,
Single Sign-On and Domain Security,
Preparing for Domain Control,
Samba ADS Domain Control
- Active Directory,
Active Directory Domain Control,
Samba ADS Domain Membership,
UNIX and Windows Group Management,
Standalone Samba Server,
Domain Member Server or Domain Member Client,
IDMAP_RID with Winbind,
Interdomain Trust Relationships
- Active Directory Server,
Objectives
- AD4UNIX,
Domain Member Server or Domain Member Client
- ADAM,
IDMAP Storage in LDAP Using Winbind
- add a user account,
Adding User Accounts
- add client machines,
Using the “net rpc rights” Utility
- add domain users and groups to a local group,
What Rights and Privileges Will Permit Windows Client Administration?
- add drivers,
The [global] Section
- add group script,
Example: Engineering Office,
The Primary Domain Controller,
Sample smb.conf Add Group Script,
Adding Groups Fails,
Adding or Creating a New Group,
Multiple Virtual Server Hosting
- add machine script,
Example: Engineering Office,
The Primary Domain Controller,
The Machine Trust Account Is Not Accessible,
LDAP Configuration Notes,
Managing Domain Machine Accounts using NT4 Server Manager,
On-the-Fly Creation of Machine Trust Accounts,
Adding Machine to Domain Fails,
Common Errors,
Using the “net rpc rights” Utility,
Multiple Virtual Server Hosting,
Changes in Behavior
- add printer command,
Adding New Printers with the Windows NT APW
- Add Printer Wizard,
Features and Benefits,
The [global] Section,
Printing Developments Since Samba-2.2
- add printer wizard,
Driver Upload Methods
- add share command,
Creating, Editing, and Removing Shares
- add user script,
Example: Engineering Office,
The Primary Domain Controller,
Mapping User Identifiers between MS Windows and UNIX,
User Account Management,
Multiple Virtual Server Hosting,
Changes in Behavior
- add user to group script,
Example: Engineering Office,
The Primary Domain Controller,
Multiple Virtual Server Hosting
- add/delete/change share,
Description of Privileges
- adddriver,
Installing Driver Files into [print$],
Running rpcclient with adddriver,
Specific Driver Name Flexibility,
A Check of the rpcclient man Page,
Troubleshooting Revisited
- additional driver,
Additional Client Driver Installation
- additional privileges,
Description of Privileges
- addmem,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- AddPrinterDriver(),
A Check of the rpcclient man Page
- admin users,
Example Configuration,
Example: Engineering Office,
User- and Group-Based Controls,
File Operations Done as root with force user Set
- admincfg.exe,
Configuring Windows for Workgroups Password Handling
- administrative actions,
Using the “net rpc rights” Utility
- administrative duties,
Overview
- administrative privileges,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Join the Samba Server to the PDC Domain
- administrative responsibilities,
Trust Relationship Background
- administrative rights,
Description of Privileges,
What Rights and Privileges Will Permit Windows Client Administration?
- administrative rights and privileges,
What Rights and Privileges Will Permit Windows Client Administration?
- Administrative Templates,
MS Windows 200x/XP Professional Policies
- Administrator,
Discussion,
Important Administrative Information,
Join the Samba Server to the PDC Domain
- administrator account,
Windows 200x/XP Professional Client,
Windows NT4 Client
- Administrator account,
Create the Computer Account
- administrator password,
Notes
- Administrator%password,
Joining an NT4-type Domain with Samba-3
- Adobe,
GDI on Windows, PostScript on UNIX,
PostScript Drivers with No Major Problems, Even in Kernel
Mode,
The Grand Unification Achieved
- Adobe driver,
Windows CUPS PostScript Driver Versus Adobe Driver
- Adobe driver files,
Recognizing Different Driver Files
- Adobe PostScript,
Caveats to Be Considered,
Adobe and CUPS PostScript Drivers for Windows Clients
- Adobe PostScript driver,
Installing the PostScript Driver on a Client
- Adobe PPD,
CUPS Print Drivers from Linuxprinting.org
- Adobe specifications,
The Role of cupsomatic/foomatic
- ADS,
ADS Security Mode (User-Level Security),
Single Sign-On and Domain Security,
Domain Controller Types,
Features and Benefits,
MS Windows Workstation/Server Machine Trust Accounts,
Domain Member Server,
Joining an NT4-type Domain with Samba-3,
Configure smb.conf,
Configure /etc/krb5.conf,
Create the Computer Account,
Testing Server Setup,
Network Browsing,
TCP/IP without NetBIOS,
DNS and Active Directory,
Cross-Subnet Browsing,
Account Information Databases,
New Account Storage Systems,
Comments Regarding LDAP,
Accounts and Groups Management,
Administrative Tasks and Methods,
Domain Member Server or Domain Member Client,
Primary Domain Controller,
IDMAP Storage in LDAP Using Winbind,
User Rights and Privileges,
Interdomain Trust Relationships,
Features and Benefits,
Trust Relationship Background,
NT4-Style Domain Trusts with Windows 2000,
Printing Developments Since Samba-2.2,
Features and Benefits,
Result Caching,
Features and Benefits,
MS Windows 200x/XP Professional Policies,
Managing Account/User Policies,
System Startup and Logon Processing Overview,
MS Windows 200x/XP,
PAM-Based Distributed Authentication,
Features and Benefits,
Background Information,
New Features in Samba-3,
Passdb Backends and Authentication,
Objectives,
Features and Benefits (see Active Directory)
- ADS DC,
Configure smb.conf
- ADS domain,
Domain Member Server or Domain Member Client,
ADS Domains
- ADS domain members,
Identity Mapping (IDMAP)
- ADS manager,
Create the Computer Account
- ADS schema,
Primary Domain Controller
- Advanced TCP/IP configuration,
MS Windows XP Professional
- advantages,
Objectives
- affect users,
Creating and Managing System Policies
- affordable power,
The Ultimate Goal
- AFPL,
Ghostscript: The Software RIP for Non-PostScript Printers
- AFPL Ghostscript,
pstoraster
- AFS,
The Distributed File System Challenge
- AIX,
Mapping Common UIDs/GIDs on Distributed Machines,
The [global] Section,
NSS Winbind on AIX
- algorithmic mapping,
Primary Domain Controller
- alias group,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- allow access,
Using Host-Based Protection
- allow trusted domains,
IDMAP_RID with Winbind
- already exists,
Cannot Add Machine Back to Domain
- alternative solution,
Objectives
- Amanda,
Amanda
- analyzes data,
Diagnostics Tools
- anonymous,
Central Print Serving
-
- print server,
Anonymous Print Server
- read-write server,
Anonymous Read-Write Document Server
- anonymous access,
Problem Resolution
- anonymous file server,
Multiple Virtual Server Personalities
- anonymous server,
Advanced Configuration Techniques
- ANSI compiler,
HPUX
- anticipate failure,
Features and Benefits
- API,
smbpasswd: Encrypted Password Database
- Appliances,
Target Uses
- application servers,
Features and Benefits
- application/cups.vnd-postscript,
Windows CUPS PostScript Driver Versus Adobe Driver
- application/octet-stream,
Explicitly Enable “raw” Printing for application/octet-stream,
MIME Type Conversion Rules,
application/octet-stream Printing
- application/pdf,
MIME Types and CUPS Filters,
MIME Type Conversion Rules
- application/postscript,
MIME Types and CUPS Filters,
MIME Type Conversion Rules,
Prefilters,
pstops,
Windows CUPS PostScript Driver Versus Adobe Driver
- application/vnd.cups-postscript,
Prefilters,
pstops
- application/vnd.cups-raster,
PostScript Printer Descriptions for Non-PostScript Printers
- application/vnd.cups-raw,
Explicitly Enable “raw” Printing for application/octet-stream
- application/x-shell,
MIME Type Conversion Rules
- apt-get,
Shadow Copy Setup
- ARCFOUR-HMAC-MD5,
Testing Server Setup
- architecture,
Comments Regarding LDAP
- ARP/RARP,
/etc/hosts
- ASCII,
MIME Types and CUPS Filters,
What Are Charsets and Unicode?,
Japanese Charsets
- ASCII text,
Prefilters
- assign rights,
Using the “net rpc rights” Utility
- assigned RID,
Discussion
- assistance,
Free Support
- associations,
Group Mapping: MS Windows and UNIX
- attach gdb,
Debugging with Samba Itself
- attribute,
OpenLDAP Configuration
- attributes,
New Schema
- audit file access,
audit
- audit module,
extd_audit
- auth,
Anatomy of /etc/pam.d Entries
- auth methods,
Configuration of auth methods,
Passdb Backends and Authentication
- authenticate,
MS Windows Workstation/Server Machine Trust Accounts,
Joining an NT4-type Domain with Samba-3
- authenticate users,
Joining an NT4-type Domain with Samba-3
- authenticated,
Configure smb.conf
- authenticating server,
MS Windows NT4 Workstation
- authentication,
Features and Benefits,
Domain Security Mode (User-Level Security),
Single Sign-On and Domain Security,
Domain Controller Types,
The Special Case of Windows 9x/Me,
Why Is This Better Than security = server?,
Important Notes About Security,
Comments Regarding LDAP,
Account Migration,
Overview,
Configure Winbind and PAM,
Features and Benefits
-
- backend,
Domain Member Server
- authentication agents,
Single Sign-On and Domain Security
- authentication architecture,
Single Sign-On and Domain Security
- authentication backend,
Domain Layout
- authentication control,
Introduction
- authentication database,
Features and Benefits
- authentication management,
Pluggable Authentication Modules
- authentication mechanisms,
Introduction
- authentication methods,
Pluggable Authentication Modules
- authentication module API,
NSS Winbind on AIX
- authentication regime,
Domain Member Server
- authentication reply,
Why Is This Better Than security = server?
- authentication server,
MS Windows NT4-style Domain Control
- authentication service,
Linux/FreeBSD-Specific PAM Configuration
- authentication system,
Single Sign-On and Domain Security,
New Features in Samba-3
- authenticatior,
Domain Controller Types
- authoritative,
Behavior of Cross-Subnet Browsing
- authoritive,
How Browsing Functions
- authorization,
Pluggable Authentication Modules
- auto-reconnect,
Important Notes About Security
- autogen.sh,
Building the Binaries
- autogenerated printcap,
Default UNIX System Printing Commands
- automatic account creation,
Managing Domain Machine Accounts using NT4 Server Manager
- automatic mapping,
Domain Member Server or Domain Member Client
- automatic reconnects,
Advantages of Encrypted Passwords
- automatic redundancy,
Forcing Samba to Be the Master
- autopoweruser.sh,
Managing Nest Groups on Workstations from the Samba Server
- autotyping,
MIME Types and CUPS Filters
- AUXILIARY,
Schema and Relationship to the RFC 2307 posixAccount
- auxiliary members,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- availability,
Features and Benefits,
Objectives
- available,
Central Print Serving
- available port,
Samba and Printer Ports
- available printerd,
The [global] Section
- available rights,
Using the “net rpc rights” Utility
- average print run,
Advanced Intelligent Printing with PostScript Driver Download
B
- b-node,
NetBIOS over TCP/IP
- back up,
Requirements
- backed up,
Server Share and Directory Layout
- backend,
The Distributed File System Challenge
- backend authentication,
Objectives
- backend database,
Domain Controller Types,
MS Windows Workstation/Server Machine Trust Accounts,
Adding Machine to Domain Fails
- backend failures,
High-Availability Server Products
- backend file system pool,
Restrictive Constraints on Distributed File Systems
- backends,
Printing from CUPS to Windows-Attached Printers
- backup,
Features and Benefits,
Server Share and Directory Layout
- backup domain controller,
Domain Layout
- backup solution,
Discussion of Backup Solutions
- BackupPC,
BackupPC
- bad hardware,
Browsing of Shares and Directories is Very Slow
- bad logon attempts,
Changing User Accounts
- Bad networking hardware,
Browsing of Shares and Directories is Very Slow
- bad password,
The Tests
- banner pages,
Windows CUPS PostScript Driver Versus Adobe Driver,
Run cupsaddsmb (Quiet Mode)
- barriers,
Introduction
- Batch Oplock,
Opportunistic Locking Overview
- BDC,
Domain Security Mode (User-Level Security),
Example Configuration,
Single Sign-On and Domain Security,
Domain Controller Types,
Features and Benefits,
MS Windows NT4-style Domain Control,
LDAP Configuration Notes,
Active Directory Domain Control,
Backup Domain Controller Configuration,
Example Configuration,
Can Samba Be a Backup Domain Controller to an NT4 PDC?,
Joining an NT4-type Domain with Samba-3,
Why Is This Better Than security = server?,
New Account Storage Systems,
Advantages of Encrypted Passwords,
Mapping Common UIDs/GIDs on Distributed Machines,
tdbsam,
Overview,
Domain Member Server or Domain Member Client,
Primary Domain Controller,
Backup Domain Controller,
Join the Samba Server to the PDC Domain,
Remote Management from NoMachine.Com,
Domain Layout,
Steps in Migration Process
- BDCs,
Domain Layout
- behavior approximately same,
Quick Migration Guide
- between domains,
Configuring Samba NT-Style Domain Trusts
- bias,
Forcing Samba to Be the Master
- binary format TDB,
New Account Storage Systems
- BIND,
Dynamic DNS
- bind interfaces only,
Multiple Interfaces,
Using Interface Protection,
Multiple Server Hosting,
Multiple Virtual Server Personalities,
The Tests
- BIND9,
DNS and Active Directory
- BIND9.NET,
Features and Benefits
- bindery-enabled,
Features and Benefits
- block device,
File and Directory Access Control
- block incoming packets,
Using a Firewall
- BOBS,
BOBS: Browseable Online Backup System
- bogus,
Example Configuration
- boot disk`,
Requirements
- bridge,
File, Directory, and Share Access Controls
- bridges networks,
How Browsing Functions
- brlock.tdb,
The Printing *.tdb Files
-
- (see also TDB)
- broadcast,
What Qualifies a Domain Controller on the Network?,
NetBIOS over TCP/IP
- broadcast address,
Problem Resolution,
The Tests
- broadcast isolated subnet,
Forcing Samba to Be the Master
- broadcast messages,
NetBIOS over TCP/IP
- broadcast messaging,
How Does a Workstation find its Domain Controller?
- Broadcast node,
Static WINS Entries
- broadcast request,
The Special Case of Windows 9x/Me
- broadcast traffic,
Cross-Subnet Browsing
- broadcast-based,
NetBIOS over TCP/IP
- broadcast-based name resolution,
Joining an NT4-type Domain with Samba-3
- broadcasts,
Forcing Samba to Be the Master,
Behavior of Cross-Subnet Browsing
- browsable,
Simple Print Configuration
- browse across subnet,
Cross-Subnet Browsing
- browse list,
Preparing for Domain Control,
What Is Browsing?,
How Browsing Functions,
WINS: The Windows Internetworking Name Server,
Technical Overview of Browsing,
Behavior of Cross-Subnet Browsing
- browse list handling,
Network Browsing
- browse list maintainers,
How Browsing Functions
- browse list management,
Security Mode and Master Browsers,
What Is Browsing?
- browse lists,
Making Samba the Domain Master,
Cross-Subnet Browsing,
Behavior of Cross-Subnet Browsing
- browse resources,
Problem Resolution
- browse server resources,
Problem Resolution
- browse shares,
Using IPC$ Share-Based Denials
- browse.dat,
Problem Resolution
- browseable,
Configuration File Syntax,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Example Configuration,
Central Print Serving,
Simple Print Configuration,
Extended Printing Configuration,
The [printers] Section,
Any [my_printer_name] Section,
Creating the [print$] Share,
[print$] Stanza Parameters,
Simple smb.conf Settings for CUPS,
Prepare Your smb.conf for cupsaddsmb,
Discussion,
Shadow Copy Setup,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- browser election,
Configuring Workgroup Browsing
- browser elections,
Domain Browsing Configuration,
Forcing Samba to Be the Master
- BrowseShortNames,
Print Queue Called “lp” Mishandles Print Jobs
- browsing,
The Special Case of Windows 9x/Me,
What Is Browsing?,
Making Samba the Domain Master,
Browsing Support in Samba
- browsing across subnets,
Network Browsing,
Cross-Subnet Browsing
- browsing another subnet,
Browsing Support in Samba
- browsing intrinsics,
How Browsing Functions
- browsing problems,
Windows Networking Protocols,
Common Errors,
I Get an "Unable to browse the network" Error
- BSD,
“$” Cannot Be Included in Machine Name,
Manual Creation of Machine Trust Accounts,
Features and Benefits
- BSD Printing,
Simple Print Configuration
- BSD-style printing,
Extended Printing Configuration
- bug report,
Free Support
- bug reports,
Introduction
- Bugzilla,
Introduction
- built-in commands,
Custom Print Commands
- bypasses privilege,
Using the “net rpc rights” Utility
- byte ranges,
Discussion
- byte-range lock,
Discussion
- byte-range locking,
Discussion,
Opportunistic Locking Overview
C
- c:\winnt\inf,
Windows NT4-Style Policy Files
- C:\WinNT\System32\config,
MS Windows NT4-style Domain Control
- cached
-
- password,
Password Checking
- cached encrypted password,
Important Notes About Security
- cached in memory,
Advantages of Non-Encrypted Passwords
- cached local file,
Opportunistic Locking Overview
- cached locally,
Windows 9x/Me Profile Setup
- caching,
Opportunistic Locking Overview
- caching reads,
Opportunistic Locking Overview
- caching scheme,
Result Caching
- caching writes,
Opportunistic Locking Overview
- called name,
Using Host-Based Protection
- cannot join domain,
Common Errors
- canonicalize files,
Handling Large Directories
- CAP,
Japanese Charsets,
Basic Parameter Setting,
Macintosh Clients
- cap-share,
Basic Parameter Setting
- capability to delete,
Protecting Directories and Files from Deletion
- CAP_LINUX_IMMUTABLE,
Protecting Directories and Files from Deletion
- case options,
Handling Large Directories
- case sensitive,
Miscellaneous Controls,
Windows 9x/Me Profile Setup,
Handling Large Directories
- case sensitivity,
PAM Configuration Syntax
- case-insensitive,
User Level Security,
Simple Print Configuration,
Handling Large Directories
- case-preserving,
User Level Security
- central environment,
Comments Regarding LDAP
- centralized
-
- authentication,
Single Sign-On and Domain Security
- centralized identity management,
Single Sign-On and Domain Security
- centrally managed,
Features and Benefits
- certificate,
Securing SWAT through SSL
- Certificate Authority (see CA)
- cfdisk,
Shadow Copy Setup
- challenge/response mechanis,
Important Notes About Security
- change capabilities,
The smbpasswd Tool
- change motivations,
Objectives
- change password,
Notes
- change passwords,
The smbpasswd Tool
- change share command,
Creating, Editing, and Removing Shares
- changed parameters,
Upgrading from Samba-2.x to Samba-3.0.20
- changes password,
Manual Creation of Machine Trust Accounts
- character device,
File and Directory Access Control
- character set,
What Are Charsets and Unicode?
- character sets,
Samba and Charsets,
New Features in Samba-3
- charset,
What Are Charsets and Unicode?
- charset conversion,
Conversion from Old Names
- chattr,
Protecting Directories and Files from Deletion
- check for locks,
Discussion
- check logs,
Adding Machine to Domain Fails
- checksum-search,
Rsync
- chmod,
Central Print Serving,
Shadow Copy Setup
- chown,
Central Print Serving,
Viewing File Ownership,
Features and Benefits
- chpass,
Manual Creation of Machine Trust Accounts
- CIFS,
Sharing User ID Mappings between Samba Domain Members
- CIFS function calls,
User Rights and Privileges
- CIFS/SMB,
Features and Benefits,
Why Is This So Hard?
- classicalprinting,
From Windows Clients to a CUPS/Samba Print Server
- clear purpose preferred,
Discussion of Backup Solutions
- clear-text,
Password Checking,
Important Notes About Security,
Security and sambaSamAccount
- clear-text passwords,
Important Notes About Security
- client client instructions,
Features and Benefits
- Client for Microsoft Networks,
Domain Logon Configuration: Windows 9x/Me
- Client for Novell Networks,
Windows 9x/Me Profile Setup
- client use spnego,
I Can't Join a Windows 2003 PDC
- client-server mode,
The smbpasswd Tool
- client-side caching,
Opportunistic Locking Overview
- client-side data caching,
Opportunistic Locking Overview,
PDM Data Shares
- clock skew,
Configure /etc/krb5.conf
- cluster servers,
The Front-End Challenge
- clustered file server,
The Ultimate Goal
- Clustered smbds,
Server Pool Communications
- clustering technologies,
The Ultimate Goal
- cluttering,
Debugging-Specific Operations
- cmd,
Browsing of Shares and Directories is Very Slow,
What Rights and Privileges Will Permit Windows Client Administration?
- cmd shell,
What Rights and Privileges Will Permit Windows Client Administration?
- CN,
LDAP Configuration Notes,
Introduction
- code maintainer,
Free Support
- codepages,
Features and Benefits
- collating,
Making Samba the Domain Master
- collisions,
Samba Performance Problem Due to Changing Linux Kernel
- color,
UNIX Printfile Conversion and GUI Basics
- COM1:,
Samba and Printer Ports
- command-line,
Remote and Local Management: The Net Command
- command-line utility,
Using the “net rpc rights” Utility
- comment,
Configuration File Syntax,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Example Configuration,
Reference Documentation Server,
Central Print Serving,
Managing Nest Groups on Workstations from the Samba Server,
Extended Printing Configuration,
The [printers] Section,
Any [my_printer_name] Section,
Creating the [print$] Share,
[print$] Stanza Parameters,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb,
Discussion,
Shadow Copy Setup,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting,
Assumptions
- commenting out setting,
Rapid Configuration Validation
- commercial Linux products,
File, Directory, and Share Access Controls
- commercial support,
Samba Support,
Commercial Support
- commit the settings,
MS Windows 2000
- Common Internet Filesystem (see CIFS)
- Common restrictions,
Managing Account/User Policies
- Common UNIX Printing System (see CUPS)
- common.adm,
Windows NT4-Style Policy Files
- comp.protocols.smb,
Introduction
- compatible,
Important Notes About Security,
Portability
- compile,
Obtaining and Installing Samba
- compile-time options,
Rapid Configuration Validation
- complex file name space,
A Simple Solution
- complex organization,
Domain Layout
- complexity,
Example Configuration
- compliance,
The pdbedit Tool
- complicated,
Behavior of Cross-Subnet Browsing
- complicated problem,
Demultiplexing SMB Requests
- comprehensive documentation,
Multiple Server Hosting
- Computer Account,
Windows NT4 Client
- computer account,
Testing Server Setup
- computer accounts,
Account Information Databases,
LDAP Directories and Windows Computer Accounts,
User Rights and Privileges
- Computer Management,
Access Controls on Shares,
Windows 200x/XP
- Computer Name,
Joining a Domain: Windows 2000/XP Professional
- computer name,
Domain Logon Configuration: Windows 9x/Me,
Name Resolution as Used within MS Windows Networking
- concurrent access,
Opportunistic Locking Overview
- Conectiva,
Forums, Downloads, Tutorials, Howtos (Also for Mac OS X and Commercial UNIX)
- config.cache,
Possible Errors
- CONFIG.POL,
The Special Case of Windows 9x/Me
- Config.POL,
Creating and Managing System Policies,
Windows 9x/ME Policies
- configuration
-
- documentation,
Test Your Config File with testparm
- configuration files,
Features and Benefits
- configuration problem,
Introduction
- configuration syntax,
Simple Print Configuration
- configuration techniques,
Advanced Configuration Techniques
- configuration too complex,
Common Errors
- configuration tool,
SWAT: The Samba Web Administration Tool
- configuration wizard,
Joining a Domain: Windows 2000/XP Professional
- configure,
Building the Binaries
- configuring a firewall,
Using a Firewall
- confirm address,
Using Interface Protection
- confirm the password,
Samba as the Trusting Domain
- confirm the trust,
Samba as the Trusted Domain
- connect transparently,
The Ultimate Goal
- connection resources,
Why Is This Better Than security = server?
- connections,
Example Configuration
- connections.tdb,
The Printing *.tdb Files
-
- (see also TDB)
- consistent case,
Handling Large Directories
- console,
Linux/FreeBSD-Specific PAM Configuration
- consumer expects,
Samba Support
- container,
Create the Computer Account
- continuity of service,
High-Availability Server Products
- contribute,
Multiple Server Hosting
- Control Panel,
Joining a Domain: Windows 2000/XP Professional
- convert
-
- domain member server,
Domain Controller Types
- converted,
Technical Information
- copy'n'paste,
Remote Management from NoMachine.Com
- core files,
Internal Errors
- core graphic engine,
Windows Drivers, GDI, and EMF
- core values,
Objectives
- corrupted file,
Domain Member Server or Domain Member Client
- cosine.schema,
OpenLDAP Configuration
- country of origin,
Commercial Support
- CP850,
Samba and Charsets
- CP932,
Basic Parameter Setting
- cracker,
Using Interface Protection
- create,
Managing Directories
- Create a Computer Account,
Windows NT4 Client
- create a domain machine account,
Domain Member Server
- create domain member,
Windows 200x/XP Professional Client
- create machine trust account,
Joining an NT4-type Domain with Samba-3
- create mask,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Domain Control: Example Configuration,
File and Directory Permissions-Based Controls,
Interaction with the Standard Samba “create mask” Parameters,
Multiple Virtual Server Personalities,
Windows 2000 Service Pack 2
- create partition,
Shadow Copy Setup
- Create the Computer Account,
Configure /etc/krb5.conf
- create user accounts,
Background
- create volume,
Shadow Copy Setup
- credentials,
User Level Security,
Single Sign-On and Domain Security,
LDAP Configuration Notes,
Configure /etc/krb5.conf,
Joining a Domain: Windows 2000/XP Professional,
Administering User Rights and Privileges,
User Rights and Privileges
- credentials validation,
NetBIOS Over TCP/IP Enabled
- critical aspects of configuration,
Features and Benefits
- crle,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- cron,
Backup Domain Controller Configuration
- cross post,
Getting Mailing List Help
- cross-segment browsing,
NetBIOS over TCP/IP
- cross-subnet browsing,
How Browsing Functions,
Configuring Workgroup Browsing,
WINS Server Configuration,
Behavior of Cross-Subnet Browsing
- csc policy,
Miscellaneous Controls
- CUPS,
Features and Benefits,
Technical Introduction,
Extended Printing Configuration,
The [global] Section,
Features and Benefits,
Overview,
Basic CUPS Support Configuration,
Using Windows-Formatted Vendor PPDs
-
- Page Accounting,
Page Accounting with CUPS
- quotas,
Setting Up Quotas
- CUPS API,
Configuration File Syntax,
Default UNIX System Printing Commands
- CUPS backends,
CUPS Backends
- CUPS filtering,
CUPS Also Uses PPDs for Non-PostScript Printers,
The CUPS Filtering Architecture
- CUPS filtering chain,
CUPS Backends
- CUPS libarary API,
Central Print Serving
- CUPS PostScript,
Caveats to Be Considered
- CUPS PostScript driver,
Windows CUPS PostScript Driver Versus Adobe Driver
- CUPS print filters,
Central Print Serving
- CUPS raster,
The CUPS Filtering Architecture,
pstoraster
- CUPS-PPD,
cupsomatic, pdqomatic, lpdomatic, directomatic
- cups.hlp,
Caveats to Be Considered
- cupsaddsmb,
Driver Upload Methods,
cupsaddsmb: The Unknown Utility,
Caveats to Be Considered,
Run cupsaddsmb (Quiet Mode),
Run cupsaddsmb with Verbose Output,
Understanding cupsaddsmb,
cupsaddsmb with a Samba PDC,
cupsaddsmb Flowchart,
Installing the PostScript Driver on a Client,
Requirements for adddriver and setdriver to Succeed
- cupsd.conf,
Default UNIX System Printing Commands,
Basic CUPS Support Configuration,
mime.convs,
Autodeletion or Preservation of CUPS Spool Files
- cupsomatic,
Using Windows-Formatted Vendor PPDs,
The CUPS Filtering Architecture,
The Role of cupsomatic/foomatic,
cupsomatic/foomatic-rip Versus Native CUPS Printing,
CUPS Print Drivers from Linuxprinting.org,
cupsomatic, pdqomatic, lpdomatic, directomatic
- custom scripts,
smbpasswd: Encrypted Password Database
- customer expected,
Samba Support
- customers,
Samba Support
- customized print commands,
Custom Print Commands
D
- daemon,
Starting Samba,
Interdomain Trust Relationships,
Requirements,
Alternative: Starting smbd as a Daemon
- daemon running,
Starting and Testing the winbindd Daemon
- daemons,
Restarting
- damaged data,
Account Flags Management
- data caching,
Opportunistic Locking Overview
- data corruption,
Browsing of Shares and Directories is Very Slow,
UNIX or NFS Client-Accessed Files
- data interchange,
File, Directory, and Share Access Controls
- data stream,
Technical Introduction
- database,
MS Windows Workstation/Server Machine Trust Accounts,
Quick Migration Guide
- DatabaseFS,
DatabaseFS
- DAVE,
Macintosh Clients
- dbx,
Internal Errors
- DCE RPC,
Join the Samba Server to the PDC Domain
- DDK,
PostScript Drivers with No Major Problems, Even in Kernel
Mode,
CUPS “PostScript Driver for Windows NT/200x/XP”
- DDNS,
TCP/IP without NetBIOS,
DNS and Active Directory,
Background Information
- de-multiplex,
The Front-End Challenge
- de-multiplexing,
Demultiplexing SMB Requests
- Debian,
Shadow Copy Setup
- Debian Sarge,
Shadow Copy Setup
- debug,
Internal Errors
- debug level,
Debugging with Samba Itself,
Debug Levels,
Log Level
- debugging,
Debugging with Samba Itself,
Debugging-Specific Operations
- debugging passwords,
Debugging with Samba Itself
- debugging problems,
Debugging with Samba Itself
- debuglevel,
Debug Levels
- dedicated heartbeat,
High-Availability Server Products
- dedicated print server,
Features and Benefits
- default accounts,
Domain Control: Example Configuration
- default aliases,
Default Users, Groups, and Relative Identifiers
- default behavior,
Identity Mapping (IDMAP)
- default case,
Miscellaneous Controls,
Handling Large Directories
- default devmode,
Setting Device Modes on New Printers
- default DNS setup,
Notes
- default gateways,
MS Windows XP Professional
- default groups,
Default Users, Groups, and Relative Identifiers
- default mappings,
Mapping Windows Groups to UNIX Groups
- default print command,
Default UNIX System Printing Commands
- default print commands,
The [global] Section
- default printer,
Custom Print Commands
- default printing,
Features and Benefits
- default profile,
Default Profile for Windows Users,
Changing the Default Profile
- default settings,
Account Flags Management
- default shells,
Starting and Testing the winbindd Daemon
- Default User,
MS Windows 200x/XP
- default users,
Default Users, Groups, and Relative Identifiers
- defective hardware,
Browsing of Shares and Directories is Very Slow
- deferred open,
Opportunistic Locking Overview
- defined shares,
Why Can Users Access Other Users' Home Directories?
- delegate administrative privileges,
Administering User Rights and Privileges
- delegated,
Important Administrative Information
- delegation,
Trust Relationship Background
- delete,
Managing Directories
- delete a file,
Protecting Directories and Files from Deletion
- delete group script,
Example: Engineering Office,
The Primary Domain Controller,
Multiple Virtual Server Hosting
- delete printer command,
Adding New Printers with the Windows NT APW
- delete roaming profiles,
MS Windows 200x/XP
- delete share command,
Creating, Editing, and Removing Shares
- delete user from group script,
Example: Engineering Office,
The Primary Domain Controller
- delete user script,
Example: Engineering Office,
The Primary Domain Controller,
Deleting Accounts,
Multiple Virtual Server Hosting
- deleted files,
recycle
- deleted parameters,
Removed Parameters
- delmem,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- demote,
Domain Controller Types
- demoted,
MS Windows NT4-style Domain Control
- denial of service,
Using Interface Protection
- deny,
Using IPC$ Share-Based Denials
- deny access,
Using a Firewall
- deny modes,
Discussion
- deny-none,
Opportunistic Locking Overview
- DENY_ALL,
Discussion
- DENY_DOS,
Discussion
- DENY_FCB,
Discussion
- DENY_NONE,
Discussion
- DENY_READ,
Discussion
- DENY_WRITE,
Discussion
- deployment,
Free Support
- deployment guidelines,
Caution Regarding LDAP and Samba
- DES-CBC-CRC,
Configure /etc/krb5.conf
- DES-CBC-MD5,
Configure /etc/krb5.conf,
Testing Server Setup
- desirable solution,
What Rights and Privileges Will Permit Windows Client Administration?
- desktop cache,
Windows 9x/Me Profile Setup
- desktop profile,
Domain Control: Example Configuration,
MS Windows NT4-style Domain Control
- desktop profiles,
Features and Benefits,
Managing Security Identifiers (SIDS)
- deterents,
Introduction
- development libraries,
Requirements
- devfsd package,
Shadow Copy Setup
- device mode,
Setting Device Modes on New Printers
- device-specific commands,
PostScript Printer Descriptions for Non-PostScript Printers
- DFS,
Features and Benefits (see MS-DFS, Distributed File Systems)
- DFS junction,
Features and Benefits
- DFS links,
Features and Benefits
- DFS root,
Features and Benefits
- DFS server,
Features and Benefits
- DFS tree,
Features and Benefits
- DFS-aware,
Features and Benefits
- DFS-aware clients,
Features and Benefits
- DHCP,
TCP/IP Configuration,
MS Windows XP Professional,
MS Windows 2000,
MS Windows Me,
Cross-Subnet Browsing,
Background Information,
Features and Benefits
- DHCP servers,
Comments Regarding LDAP
- DHCP-enabled,
MS Windows 2000
- DHCP-enabled operation,
MS Windows XP Professional
- diagnostic,
IDMAP Storage in LDAP Using Winbind
- diagnostic tools,
Debugging with Samba Itself
- diff,
Patches
- differences,
Rsync
- different resources,
Multiple Virtual Server Personalities
- differently encrypted passwords,
Technical Information
- differing protocol,
Quick Migration Guide
- dir,
The Tests
- direct internet access,
Introduction
- directory,
Active Directory Domain Control,
Central Print Serving,
Backup Domain Controller
- directory access control,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- directory access permissions,
File, Directory, and Share Access Controls
- directory controls,
File, Directory, and Share Access Controls
- Directory Information Tree (see DIT)
- directory mask,
Domain Control: Example Configuration,
File and Directory Permissions-Based Controls,
Windows 2000 Service Pack 2
- directory permissions,
File, Directory, and Share Access Controls,
Protecting Directories and Files from Deletion
- directory schema,
Primary Domain Controller
- directory security mask,
Interaction with the Standard Samba “create mask” Parameters
- Directory Separators,
MS Windows NTFS Comparison with UNIX File Systems
- directory server,
ldapsam
- disable LMB,
Configuring Workgroup Browsing
- disable locking,
Features and Benefits
- disable roaming profiles,
Disabling Roaming Profile Support
- disable spoolss,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Multiple Virtual Server Personalities
- disabling oplocks,
PDM Data Shares
- disass,
Internal Errors
- disaster recovery,
Server Share and Directory Layout
- disconnect a connection,
NT4/200x User Profiles
- disk,
Advantages of Encrypted Passwords
- disk space,
Server Share and Directory Layout
- disparate information systems,
Single Sign-On and Domain Security
- display charset,
Samba and Charsets,
Basic Parameter Setting,
Individual Implementations,
Enabling SWAT Internationalization Support
- display PostScript,
UNIX Printfile Conversion and GUI Basics
- displayName,
OpenLDAP Configuration
- distort,
UNIX Printfile Conversion and GUI Basics
- distribute authentication systems,
Objectives
- distributed,
Features and Benefits,
Domain Control: Example Configuration
- distributed account,
New Account Storage Systems
- Distributed Computing Environment (see DCE)
- distributed directory,
Domain Member Server
- distributed file system,
The Ultimate Goal (see DFS)
- Distributed File Systems,
The Distributed File System Challenge
- distributed file systems,
The Distributed File System Challenge
- distributed locking protocol,
A Simple Solution
- distribution,
Example Configuration,
Joining an NT4-type Domain with Samba-3
- dithering algorithm,
The Role of cupsomatic/foomatic
- DMB,
Preparing for Domain Control,
Domain Control: Example Configuration,
Security Mode and Master Browsers,
What Qualifies a Domain Controller on the Network?,
How Browsing Functions,
Configuring Workgroup Browsing,
Domain Browsing Configuration,
Forcing Samba to Be the Master,
Making Samba the Domain Master,
WINS: The Windows Internetworking Name Server,
Windows Networking Protocols,
Behavior of Cross-Subnet Browsing
- DMB for a workgroup,
Browsing Support in Samba
- DMC,
Examples of IDMAP Backend Usage
- DMS,
Domain Security Mode (User-Level Security),
Overview,
Examples of IDMAP Backend Usage,
Advanced Configuration Techniques
- DN,
LDAP Configuration Notes,
Introduction
- DNS,
Preparing for Domain Control,
How Does a Workstation find its Domain Controller?,
NetBIOS Over TCP/IP Disabled,
Configure smb.conf,
Configure /etc/krb5.conf,
MS Windows XP Professional,
MS Windows 2000,
MS Windows Me,
Network Browsing,
Features and Benefits,
NetBIOS over TCP/IP,
TCP/IP without NetBIOS,
How Browsing Functions,
Cross-Subnet Browsing,
Initialize the LDAP Database,
Name Service Switch,
Background Information,
DNS Lookup,
The Tests,
Features and Benefits,
Example Configuration
-
- Active Directory,
DNS and Active Directory
- Dynamic,
Background Information,
Dynamic DNS
- SRV records,
DNS and Active Directory
- DNS Configuration,
Browsing of Shares and Directories is Very Slow
- DNS lookup,
Configure /etc/krb5.conf
- DNS name resolution,
Joining an NT4-type Domain with Samba-3
- dns proxy,
What Is Browsing?,
Assumptions
- DNS server,
Behavior of Cross-Subnet Browsing
- DNS server access,
Assumptions
- DNS server settings,
MS Windows XP Professional,
MS Windows 2000
- DNS servers,
Comments Regarding LDAP
- DNS zon,
Configure /etc/krb5.conf
- DNS/LDAP/ADS,
Technical Overview of Browsing
- document design,
Server Share and Directory Layout
- documentation,
LDAP Directories and Windows Computer Accounts,
Features and Benefits,
Analyzing and Solving Samba Problems
- domain,
The Special Case of Windows 9x/Me,
Adding User Accounts,
Name Resolution as Used within MS Windows Networking
-
- control,
Server Types
-
- role,
Domain Controller Types
- controller,
Features and Benefits,
Domain Security Mode (User-Level Security),
Domain Control,
Features and Benefits
-
- convert,
Domain Controller Types
- hierarchy,
Domain Controller Types
- controllers,
Domain Security Mode (User-Level Security)
- groups,
UNIX and Windows Group Management
- master
-
- browser,
Preparing for Domain Control
- member,
Server Types,
Features and Benefits,
Domain Controller Types
-
- server,
Features and Benefits
- member server,
Features and Benefits
- security,
Domain Security Mode (User-Level Security)
-
- protocols,
Features and Benefits
- trust account,
Features and Benefits
- domain access,
Identity Mapping (IDMAP)
- domain account access policies,
Domain Account Policy Managment
- domain admin group,
Group Mapping: MS Windows and UNIX
- domain Administrator,
The Administrator Domain SID
- Domain Admins,
Discussion,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Important Administrative Information,
Mapping Windows Groups to UNIX Groups,
Using the “net rpc rights” Utility
- Domain Admins group,
Discussion
- domain authentication,
Overview
- domain context,
Domain Layout
- domain control,
Basics of Domain Control,
Security Mode and Master Browsers,
Common Errors,
Features and Benefits,
Domain Member Server or Domain Member Client,
Migration from NT4 PDC to Samba-3 PDC
-
- backup,
Server Types
- primary,
Server Types
- domain control database (see SAM)
- domain controller,
Security Mode and Master Browsers,
Essential Background Information,
MS Windows NT4-style Domain Control,
Active Directory Domain Control,
NetBIOS Over TCP/IP Enabled,
MS Windows Workstation/Server Machine Trust Accounts,
User Rights and Privileges,
What Winbind Provides,
Join the Samba Server to the PDC Domain,
Creating and Managing System Policies,
Features and Benefits,
Domain Layout,
Steps in Migration Process
- Domain Controller,
Caveats to Be Considered
- domain controllers,
Samba ADS Domain Control,
Joining an NT4-type Domain with Samba-3,
MS Windows 200x/XP Professional Policies,
Advanced Configuration Techniques,
New Features in Samba-3
- domain environment,
Important Notes About Security
- domain global,
What Rights and Privileges Will Permit Windows Client Administration?
- domain global group,
Overview,
What Rights and Privileges Will Permit Windows Client Administration?
- domain global groups,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- domain global user,
What Rights and Privileges Will Permit Windows Client Administration?
- domain global users,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- domain group,
Features and Benefits
- domain group settings,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- Domain Groups,
Accounts and Groups Management
- domain groups,
Group Mapping: MS Windows and UNIX,
Default Users, Groups, and Relative Identifiers
- Domain Guests,
Mapping Windows Groups to UNIX Groups
- domain information,
New Schema
- domain join,
ADS Domains,
Join the Samba Server to the PDC Domain
- domain joining,
Joining a Domain: Windows 2000/XP Professional
- domain logon,
Domain Control: Example Configuration,
Domain and Network Logon Configuration,
Domain Network Logon Service,
Example PDC Configuration,
Domain Logon Configuration: Windows 9x/Me
- domain logon server,
Windows 9x/Me Profile Setup
- domain logons,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Preparing for Domain Control,
Domain Control: Example Configuration,
Example Configuration,
The Special Case of Windows 9x/Me,
Example PDC Configuration,
Example Configuration,
Browsing Support in Samba,
Important Notes About Security,
Changing the Default Profile,
Multiple Virtual Server Hosting
- domain management tools,
Managing Domain Machine Accounts using NT4 Server Manager
- domain master,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
Domain Network Logon Service,
Example Configuration,
Example PDC Configuration,
Example Configuration,
What Is Browsing?,
Configuring Workgroup Browsing,
Domain Browsing Configuration,
Making Samba the Domain Master,
Browsing Support in Samba
- domain member,
Domain Security Mode (User-Level Security),
Preparing for Domain Control,
Domain Membership,
Features and Benefits,
Windows 200x/XP Professional Client,
Common Errors,
Joining a Domain: Windows 2000/XP Professional,
Important Notes About Security,
Discussion,
Overview,
Handling of Foreign SIDs,
Domain Layout
- Domain Member,
Domain Member Server or Domain Member Client
-
- joining,
Example Configuration
- domain member client,
Important Administrative Information
- Domain Member Client (see DMC)
- domain member server,
Example Configuration,
Domain Member Server,
Joining an NT4-type Domain with Samba-3,
TCP/IP without NetBIOS,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Domain Member Server or Domain Member Client,
Features and Benefits
- Domain Member Server (see DMS)
- domain member servers,
Example Configuration,
Mapping Common UIDs/GIDs on Distributed Machines,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
User Rights and Privileges
- domain member workstations,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- domain members,
Features and Benefits,
Domain Browsing Configuration,
Introduction
- domain membership,
Preparing for Domain Control,
Domain Control: Example Configuration,
Domain Membership
- domain name,
Domain Logon Configuration: Windows 9x/Me
- Domain Name System (see DNS)
- domain non-member,
Handling of Foreign SIDs
- domain policies,
Windows NT4-Style Policy Files
- domain radio button,
Joining a Domain: Windows 2000/XP Professional
- domain security,
Features and Benefits,
MS Windows NT4-style Domain Control,
Domain Membership,
Features and Benefits,
Domain Member Server,
Joining an NT4-type Domain with Samba-3,
Why Is This Better Than security = server?,
Joining a Domain: Windows 2000/XP Professional,
Important Notes About Security,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Primary Domain Controller,
Trust Relationship Background,
Join the Samba Server to the PDC Domain,
MS Windows 200x/XP
- domain security account,
MS Windows Workstation/Server Machine Trust Accounts
- Domain Server Manager,
Applicable Only to Versions Earlier than 3.0.11
- domain SID,
Backup Domain Controller Configuration,
Managing Security Identifiers (SIDS)
- domain trust,
Features and Benefits,
Creating an NT4 Domain Trust
- domain user,
Domain Logon Configuration: Windows 9x/Me,
Features and Benefits,
What Winbind Provides
- domain user accounts,
UNIX and Windows Group Management
- domain user manager,
User Account Management
- Domain User Manager,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Applicable Only to Versions Earlier than 3.0.11,
Managing Account/User Policies
- Domain Users,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Mapping Windows Groups to UNIX Groups
- domain users,
Requirements,
Linux/FreeBSD-Specific PAM Configuration,
Conclusion
- Domain Users group,
Adding Domain Users to the Workstation Power Users Group
- domain-level,
Why Is This Better Than security = server?
- domain-level security,
Joining an NT4-type Domain with Samba-3
- domain-wide browse list,
Making Samba the Domain Master
- DOMAIN<1B>,
Security Mode and Master Browsers
- DOMAIN<1C>,
The Special Case of Windows 9x/Me,
Security Mode and Master Browsers
- DOMAIN<1D>,
Security Mode and Master Browsers
- dont descend,
Miscellaneous Controls
- dos charset,
Samba and Charsets,
Basic Parameter Setting,
Individual Implementations,
CP850.so Can't Be Found
- dos filemode,
File and Directory Permissions-Based Controls
- dos filetime resolution,
Miscellaneous Controls
- dos filetimes,
Miscellaneous Controls
- draft,
The Role of cupsomatic/foomatic
- Drive Identification,
MS Windows NTFS Comparison with UNIX File Systems
- driver,
Verifying Configuration with testparm
- driver CDROM,
Identifying Driver Files
- driver download,
[print$] Stanza Parameters
- Driver File,
Identifying Driver Files
- driver files,
Identifying Driver Files
- Driver Path,
Identifying Driver Files
- dual daemon mode,
Starting and Testing the winbindd Daemon
- dual-daemon winbindd,
New Features in Samba-3
- due diligence,
Discussion of Backup Solutions
- duplex,
Examples for Filtering Chains
- duplex printing,
Examples for Filtering Chains
- duplicate,
LDAP Configuration Notes
- duplication of information,
Introduction
- DVI,
MIME Types and CUPS Filters,
Prefilters
- Dynamic DNS (see DDNS)
- Dynamic Host Configuration Protocol (see DHCP)
- dynamic link loader,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- dynamic registration files,
Dynamic DNS
- Dynamic SMB servers,
Objectives
- dynamically loadable library modules,
Features and Benefits
E
- e-Directory,
Single Sign-On and Domain Security,
Domain Member Server
- EAs,
File and Directory Access Control
- economically wise,
Features and Benefits
- eDirectory,
Comments Regarding LDAP
- editreg,
Samba Editreg Toolset
- efficient authentication,
Features and Benefits
- election,
Security Mode and Master Browsers,
How Browsing Functions,
Domain Browsing Configuration,
Forcing Samba to Be the Master
- election criteria,
How Browsing Functions
- election packet,
Forcing Samba to Be the Master
- election process,
Forcing Samba to Be the Master
- EMF,
Windows Drivers, GDI, and EMF,
From Windows Clients to an NT Print Server,
Driver Execution on the Server
- enable privileges,
Rights Management Capabilities
- enables clients to print,
Simple Print Configuration
- enables NetBIOS over TCP/IP,
NetBIOS over TCP/IP
- encapsulating,
NetBIOS over TCP/IP
- encoding,
Testing Server Setup
- encryped password,
Domain Control: Example Configuration
- encrypt passwords,
Example Configuration,
Joining an NT4-type Domain with Samba-3,
Configure smb.conf,
smbpasswd: Encrypted Password Database,
Configuring Samba,
smb.conf PAM Configuration,
Quick Migration Guide,
The Tests
- encrypted,
Features and Benefits,
Password Checking,
Important Notes About Security
- encrypted password,
Advantages of Encrypted Passwords
- encrypted passwords,
Password Checking,
Features and Benefits,
Technical Information,
Important Notes About Security,
Advantages of Encrypted Passwords,
Profile Migration from Windows NT4/200x Server to Samba,
Passdb Backends and Authentication
- encrypted session,
Security and sambaSamAccount
- encryption,
Server Security (User Level Security)
- encryption key,
Windows 200x/XP Professional Client
- encryption types,
Configure /etc/krb5.conf,
Notes
- enforcing,
MS Windows Workstation/Server Machine Trust Accounts
- English,
Japanese Charsets,
Enabling SWAT Internationalization Support
- enhanced browsing,
What Is Browsing?
- Enhanced MetaFile (see EMF)
- enterprise,
smbpasswd: Encrypted Password Database
- enumdrivers,
Identifying Driver Files,
A Check of the rpcclient man Page
- enumerate domain groups,
Microsoft Remote Procedure Calls
- enumerate domain users,
Microsoft Remote Procedure Calls
- EnumJobs(),
Printing Developments Since Samba-2.2
- enumports command,
Samba and Printer Ports
- enumprinters,
A Check of the rpcclient man Page
- environment variables,
Custom Print Commands
- EPM (see ESP meta packager)
- Epson Stylus,
Examples for Filtering Chains
- Epson Stylus inkjet,
Foomatic Database-Generated PPDs
- equivalence,
Privileges Suppored by Windows 2000 Domain Controllers
- equivalent rights and privileges,
The Administrator Domain SID
- error message,
ADS Domains,
Running rpcclient with adddriver
- error messages,
Assumptions
- errors that can afflict,
Common Errors
- ESC/P,
Driver Execution on the Server
- ESP,
Ghostscript: The Software RIP for Non-PostScript Printers
-
- Ghostscript,
The CUPS Filtering Architecture,
cupsomatic/foomatic-rip Versus Native CUPS Printing
- meta packager,
CUPS “PostScript Driver for Windows NT/200x/XP”
- Print Pro,
Sources of CUPS Drivers/PPDs,
ESP Print Pro PostScript Driver for Windows NT/200x/XP
- ESP Ghostscript,
The CUPS Filtering Architecture
- established,
Samba as the Trusted Domain
- ethereal,
Windows 9x/Me Profile Setup,
Tcpdump,
Ethereal,
The Windows Network Monitor
- Ethernet adapters,
Using Interface Protection
- EUC-JP,
Japanese Charsets,
Basic Parameter Setting
- eucJP-ms locale,
Basic Parameter Setting
- Event Viewer,
Remote Server Administration
- Everyone - Full Control,
Access Controls on Shares
- Everyone group,
Printing Developments Since Samba-2.2
- EVMS,
shadow_copy
- example1: parameter,
Discussion
- example: parameter,
Discussion
- examples,
Example Configuration
- examples/LDAP,
New Account Storage Systems
- execute,
File and Directory Access Control
- existing LDAP DIT,
Caution Regarding LDAP and Samba
- expands control abilities,
New Account Storage Systems
- expired password,
Changing User Accounts
- explicit trust,
Trust Relationship Background
- explicitly set,
Rapid Configuration Validation
- exploit opportunities,
Features and Benefits
- exploitation,
Using Interface Protection
- exported file system,
A Simple Solution
- exposed,
Using a Firewall
- extd_audit module,
extd_audit
- Extended Attributes,
File, Directory, and Share Access Controls
- extended attributes,
Protecting Directories and Files from Deletion
- Extended BSD Printing,
Extended Printing Configuration
- extended characters,
What Are Charsets and Unicode?
- extended protocol,
Windows Networking Protocols
- extended SAM,
New Account Storage Systems
- extra machine,
Multiple Virtual Server Hosting
F
- fail,
Features and Benefits
- failed join,
NT4-Style Domains (Includes Samba Domains),
IDMAP_RID with Winbind
- failed logins,
Account Management Tools
- failover communication,
High-Availability Server Products
- failover process,
High-Availability Server Products
- failover servers,
A Simple Solution
- fails,
Adding Machine to Domain Fails
- failure,
ADS Domains
- failure semantics,
Required Modifications to Samba
- fake oplocks,
Miscellaneous Controls
- fake-permissions module,
Mandatory Profiles
- fake_permissions,
Domain Control: Example Configuration
- fake_perms,
fake_perms,
Mandatory Profiles
- fdisk,
Shadow Copy Setup
- Federated Identity Management (see FIM)
- federated organizations,
Single Sign-On and Domain Security
- federated-identity,
Single Sign-On and Domain Security
- Fiber Channel,
High-Availability Server Products
- fickle,
Features and Benefits
- fid,
Demultiplexing SMB Requests
- file access permissions,
File, Directory, and Share Access Controls
- File Naming Conventions,
MS Windows NTFS Comparison with UNIX File Systems
- file ownership,
Features and Benefits
- file serving,
Features and Benefits
- File System,
MS Windows NTFS Comparison with UNIX File Systems
-
- case sensitivity,
MS Windows NTFS Comparison with UNIX File Systems
- feature comparison,
MS Windows NTFS Comparison with UNIX File Systems
- UNIX,
MS Windows NTFS Comparison with UNIX File Systems
- Windows,
MS Windows NTFS Comparison with UNIX File Systems
- file system capabilities,
Protecting Directories and Files from Deletion
- FILE:,
Samba and Printer Ports
- filemanager,
Problem Resolution
- filename mangling,
New Features in Samba-3
- filter,
MIME Types and CUPS Filters
- Filter Oplock,
Opportunistic Locking Overview
- FilterLimit,
mime.convs
- filters,
MIME Types and CUPS Filters
- FIM,
Single Sign-On and Domain Security,
Comments Regarding LDAP
- firewall,
Introduction,
Using Interface Protection,
The Tests
- firewall active,
Using a Firewall
- firewall setups,
Using a Firewall
- fixed IP address,
MS Windows XP Professional,
MS Windows 2000
- fixed IP addresses,
TCP/IP Configuration
- flush local locks,
Opportunistic Locking Overview
- flush name cache,
Flushing the Samba NetBIOS Name Cache
- foomatic,
Using Windows-Formatted Vendor PPDs,
The CUPS Filtering Architecture,
The Role of cupsomatic/foomatic,
cupsomatic/foomatic-rip Versus Native CUPS Printing,
foomatic-rip and Foomatic Explained,
Foomatic's Strange Name
- Foomatic database,
Foomatic Database-Generated PPDs
- Foomatic Printer,
The Role of cupsomatic/foomatic
- Foomatic tutorial,
The Grand Unification Achieved
- foomatic-rip,
The CUPS Filtering Architecture,
The Role of cupsomatic/foomatic,
cupsomatic/foomatic-rip Versus Native CUPS Printing,
CUPS Print Drivers from Linuxprinting.org,
foomatic-rip and Foomatic Explained,
The Grand Unification Achieved
- Foomatic/cupsomatic,
cupsomatic/foomatic-rip Versus Native CUPS Printing
- force an election,
Forcing Samba to Be the Master
- force create mode,
File and Directory Permissions-Based Controls,
Interaction with the Standard Samba “create mask” Parameters,
Users Cannot Write to a Public Share,
MS Word with Samba Changes Owner of File
- force directory mode,
File and Directory Permissions-Based Controls,
Interaction with the Standard Samba “create mask” Parameters,
Users Cannot Write to a Public Share,
MS Word with Samba Changes Owner of File
- force directory security mode,
File and Directory Permissions-Based Controls,
Interaction with the Standard Samba “create mask” Parameters
- force election,
Making Samba the Domain Master
- force group,
Anonymous Read-Write Document Server,
Secure Read-Write File and Print Server,
User- and Group-Based Controls,
Users Cannot Write to a Public Share
- force security mode,
File and Directory Permissions-Based Controls,
Interaction with the Standard Samba “create mask” Parameters
- force unknown acl user,
File and Directory Migration
- force user,
Anonymous Read-Write Document Server,
Secure Read-Write File and Print Server,
User- and Group-Based Controls,
Users Cannot Write to a Public Share,
File Operations Done as root with force user Set,
Beware of Force User
- forced synchronization,
How Browsing Functions
- foreign domain,
Mapping User Identifiers between MS Windows and UNIX,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- foreign SID,
Handling of Foreign SIDs
- foreign user,
Handling of Foreign SIDs
- FQDN,
Introduction
- framing error,
Samba Performance Problem Due to Changing Linux Kernel
- free support,
Samba Support,
Free Support
- FreeBSD,
“$” Cannot Be Included in Machine Name,
Basic Parameter Setting
- freezing,
Shadow Copy Setup
- French,
Enabling SWAT Internationalization Support
- front-end virtual server,
The Front-End Challenge,
Demultiplexing SMB Requests
- frustrating experience,
LDAP Directories and Windows Computer Accounts
- FTP,
Advantages of Non-Encrypted Passwords
- ftp,
Rsync,
Accessing the Samba Sources via rsync and ftp
- ftp access,
Linux/FreeBSD-Specific PAM Configuration
- ftp service,
Linux/FreeBSD-Specific PAM Configuration
- ftp services,
Linux/FreeBSD-Specific PAM Configuration
- ftpd,
Anatomy of /etc/pam.d Entries
- full rights,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- functional components,
Debugging-Specific Operations
- functionality,
Objectives
G
- gateway address,
MS Windows XP Professional
- gcc,
Debugging with Samba Itself,
HPUX
- gdb,
Debugging with Samba Itself,
Internal Errors,
Attaching to a Running Process
- GDI,
GDI on Windows, PostScript on UNIX,
Windows Drivers, GDI, and EMF,
From Windows Clients to an NT Print Server,
Driver Execution on the Server
- general security service application programming interface (see GSSAPI)
- generic PostScript,
MIME Types and CUPS Filters
- generic raster,
pstoraster
- generic raster format,
The CUPS Filtering Architecture
- genlogon.pl,
Network Logon Script Magic
- Gentoo,
Samba Performance Problem Due to Changing Linux Kernel
- Germany,
Technical Discussion
- get,
The Tests
- getdriver,
Identifying Driver Files,
Installing Driver Files into [print$]
- getdriverdir,
A Check of the rpcclient man Page
- getent,
Adding or Creating a New Group,
IDMAP_RID with Winbind,
Starting and Testing the winbindd Daemon
- getent group demo,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- gethostbyname() function call,
Name Resolution Order
- getpwnam,
Schema and Relationship to the RFC 2307 posixAccount,
Domain Member Server or Domain Member Client
- getpwnam() call,
Changes in Behavior
- GetSID.exe,
Get SID
- GhostScript,
PostScript and Ghostscript,
Ghostscript: The Software RIP for Non-PostScript Printers
-
- (see also PostScript)
- Ghostscript,
The CUPS Filtering Architecture,
PostScript Printer Descriptions for Non-PostScript Printers
-
- ESP (see ESP
GhostScript)
- GID,
Example Configuration,
Manual Creation of Machine Trust Accounts,
Why Is This Better Than security = server?,
Sharing User ID Mappings between Samba Domain Members,
Mapping Common UIDs/GIDs on Distributed Machines,
Features and Benefits,
Overview,
Mapping Windows Groups to UNIX Groups,
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
Primary Domain Controller,
Features and Benefits,
Handling of Foreign SIDs,
Starting and Testing the winbindd Daemon
- GID numbers,
Domain Member Server or Domain Member Client
- GID range,
Interdomain Trust Relationships
- GIF,
MIME Types and CUPS Filters
- Gimp-Print,
rasterto [printers specific],
Driver Development Outside
- global print command,
Custom Print Commands
- global right,
Description of Privileges
- global section,
The [global] Section
- Global support,
Objectives
- global-level,
Printing-Related Configuration Parameters
- GNOME,
Remote Management from NoMachine.Com
- GNU Ghostscript,
The CUPS Filtering Architecture,
pstoraster
- GNU GPL,
BackupPC
- GNU tar,
Amanda
- GNU/Linux,
Discussion
- GPG,
Verifying Samba's PGP Signature
- GPL,
Remote Management from NoMachine.Com
- gpolmig.exe,
Administration of Windows 200x/XP Policies
- GPOs,
Features and Benefits,
MS Windows 200x/XP Professional Policies,
Administration of Windows 200x/XP Policies,
Managing Account/User Policies,
System Startup and Logon Processing Overview,
MS Windows 200x/XP
- grace time,
Changing User Accounts
- grant rights,
Using the “net rpc rights” Utility
- graphical objects,
UNIX Printfile Conversion and GUI Basics
- graphically illustrated client configuration,
Features and Benefits
- grayscale,
The Role of cupsomatic/foomatic
- greater scalability,
New Account Storage Systems
- greatest mistake,
Common Errors
- grep,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- group,
Example Configuration,
LDAP Directories and Windows Computer Accounts,
File and Directory Access Control
-
- account,
Domain Control: Example Configuration
- mapping,
Features and Benefits
- group account,
Important Administrative Information,
Backup Domain Controller
- group accounts,
Domain Logon Configuration: Windows 9x/Me,
Caution Regarding LDAP and Samba,
Features and Benefits,
Warning: User Private Group Problems,
Domain Member Server or Domain Member Client
- group management,
Overview,
UNIX and Windows Group Management
- group mapping,
Group Mapping: MS Windows and UNIX
- group mappings,
Features and Benefits
- group membership,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- group ownership,
Features and Benefits
- group permissions,
Server Share and Directory Layout
- Group Policies,
Features and Benefits
- group policies,
Features and Benefits
- group policy,
Domain Control: Example Configuration
- Group Policy,
Windows 9x/ME Policies
- Group Policy Container (see GPC)
- Group Policy Editor,
Windows 9x/ME Policies,
Windows NT4/200x,
Samba-3 Implementation Choices
- Group Policy Objects,
Objectives (see GPO)
- group policy objects (see GPOs)
- Group Policy Template (see GPT)
- group privileges,
Discussion
- group profiles,
Creating and Managing Group Profiles
- group SID,
Managing Security Identifiers (SIDS)
- groupadd,
Features and Benefits,
Sample smb.conf Add Group Script,
Adding Groups Fails
- groupadd limitations,
Sample smb.conf Add Group Script
- groupdel,
Features and Benefits
- groupmap,
Group Mapping: MS Windows and UNIX
- groupmod,
Features and Benefits
- grouppol.inf,
Windows 9x/ME Policies
- groups,
UNIX and Windows Group Management,
Features and Benefits
-
- domain,
Discussion
- mapping,
Group Mapping: MS Windows and UNIX
- nested,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- groups of users,
Administering User Rights and Privileges
- growing,
Shadow Copy Setup
- GSSAPI,
Single Sign-On and Domain Security
- gtklp,
Foomatic Database-Generated PPDs
- guest,
Domain Control: Example Configuration,
Reference Documentation Server
- guest account,
Central Print Serving,
Problem Resolution,
Server Resources Cannot Be Listed,
The [printers] Section,
Custom Print Commands,
The Tests
- guest ok,
Example Configuration,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Example Configuration,
Central Print Serving,
Managing Nest Groups on Workstations from the Samba Server,
User- and Group-Based Controls,
Extended Printing Configuration,
The [printers] Section,
Any [my_printer_name] Section,
Creating the [print$] Share,
[print$] Stanza Parameters,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb,
Multiple Virtual Server Personalities
- guest only,
Reference Documentation Server
- GUI,
Overview
H
- h-node,
NetBIOS over TCP/IP
- harvesting password hashes,
Security and sambaSamAccount
- hashed password equivalent,
Important Notes About Security
- headers files,
Possible Errors
- Heimdal,
Configure /etc/krb5.conf,
ADS Domains,
Features and Benefits
- Heimdal kerberos,
ADS Domains,
IDMAP Storage in LDAP Using Winbind
- help,
Free Support
- help command,
The Tests
- heterogeneous computing,
Features and Benefits
- HEX,
Japanese Charsets
- hi-res photo,
The Role of cupsomatic/foomatic
- hide dot files,
Miscellaneous Controls
- hide files,
Miscellaneous Controls
- hide unreadable,
File and Directory Permissions-Based Controls
- hide unwriteable files,
File and Directory Permissions-Based Controls
- high availability,
Features and Benefits
- high order ports,
Using a Firewall
- high-availability,
Opportunistic Locking Overview
- high-availability services,
High-Availability Server Products
- high-speed server interconnect,
A Simple Solution
- higher availability,
Features and Benefits
- HKEY_CURRENT_USER,
MS Windows NT4 Workstation
- HKEY_LOCAL_MACHINE,
Registry Spoiling
- holy grail,
Features and Benefits
- home directories,
New Account Storage Systems,
Starting and Testing the winbindd Daemon
- home directory,
Manual Creation of Machine Trust Accounts,
smbpasswd: Encrypted Password Database
- home directory template,
Linux/FreeBSD-Specific PAM Configuration
- home drive,
Example PDC Configuration
- host msdfs,
Features and Benefits
- host multiple servers,
Multiple Virtual Server Personalities
- host security,
Features and Benefits
- host-based protection,
Features and Benefits
- hostname,
Configure /etc/krb5.conf
- hosts allow,
Using Host-Based Protection,
Using IPC$ Share-Based Denials ,
Extended Printing Configuration,
Any [my_printer_name] Section,
More Complex CUPS smb.conf Settings,
The Tests
- hosts deny,
Using Host-Based Protection,
Using IPC$ Share-Based Denials ,
Extended Printing Configuration,
Any [my_printer_name] Section,
More Complex CUPS smb.conf Settings,
The Tests
- house-keeping,
Description of Privileges
- HOWTO documents,
Caution Regarding LDAP and Samba
- HP JetDirect,
Examples for Filtering Chains
- HP Photosmart,
Foomatic Database-Generated PPDs
- HP-GL,
MIME Types and CUPS Filters
- HP-GL.,
Prefilters
- hpgltops,
MIME Type Conversion Rules
- HPIJS,
Driver Development Outside
- HPUX,
The [global] Section
- http,
Rsync
- hybrid,
NetBIOS over TCP/IP
- Hybrid node,
Static WINS Entries
I
- IANA,
pstoraster
- ID mapping,
Example Configuration,
New Features in Samba-3
- ID mapping database,
User and Group ID Allocation
- ID range,
Features and Benefits
- IDEALX,
ldapsam
- Identification,
Domain Logon Configuration: Windows 9x/Me
- identify,
ADS Domains
- identity,
Standalone Samba Server
- identity information,
Single Sign-On and Domain Security
- identity management,
Single Sign-On and Domain Security,
Domain Member Server
-
- centralized,
Single Sign-On and Domain Security
- identity resolution,
Features and Benefits
- IDMAP,
Features and Benefits,
Identity Mapping (IDMAP),
Standalone Samba Server,
Domain Member Server or Domain Member Client,
IDMAP_RID with Winbind
- idmap,
New Schema
- idmap backend,
Example Configuration,
Mapping Common UIDs/GIDs on Distributed Machines,
Domain Member Server or Domain Member Client,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
Features and Benefits,
IdMap LDAP Support
- IDMAP backend,
Mapping Common UIDs/GIDs on Distributed Machines
- idmap gid,
Example Configuration,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Example Configuration,
Mapping User Identifiers between MS Windows and UNIX,
Features and Benefits,
Domain Member Server or Domain Member Client,
NT4-Style Domains (Includes Samba Domains),
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension,
Interdomain Trust Relationships,
Features and Benefits,
Configure smb.conf,
Winbind Is Not Resolving Users and Groups,
Winbind Is Not Resolving Users and Groups,
IdMap LDAP Support
- idmap GID,
New Schema
- IDMAP infrastructure,
Identity Mapping (IDMAP)
- idmap uid,
Example Configuration,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Example Configuration,
Mapping User Identifiers between MS Windows and UNIX,
Features and Benefits,
Domain Member Server or Domain Member Client,
NT4-Style Domains (Includes Samba Domains),
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension,
Interdomain Trust Relationships,
Features and Benefits,
Configure smb.conf,
Winbind Is Not Resolving Users and Groups,
Winbind Is Not Resolving Users and Groups,
IdMap LDAP Support
- idmap UID,
New Schema
- idmap_ad,
Mapping Common UIDs/GIDs on Distributed Machines
- idmap_ldap module,
New Schema
- idmap_rid,
Domain Member Server or Domain Member Client,
IDMAP_RID with Winbind
- IETF,
Overview
- ifconfig,
Starting from inetd.conf,
Samba Performance Problem Due to Changing Linux Kernel
- ignore connection,
Using Interface Protection
- imagetoraster,
imagetops and imagetoraster
- immutible,
Protecting Directories and Files from Deletion
- impersonate,
Security and sambaSamAccount
- implementing oplocks,
Advanced Samba Oplocks Parameters
- Implicit Classes,
Print Queue Called “lp” Mishandles Print Jobs
- important announcements,
Upgrading Samba
- Imprints,
The Imprints Toolset
- imprints,
Driver Upload Methods
- include,
Advanced Configuration Techniques,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting,
Debug Levels
- independent,
Background,
Multiple Server Hosting
- individual domain user,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- individual section,
The [global] Section
- inetd,
Validate SWAT Installation,
The Tests,
Starting the smbd nmbd and winbindd,
Starting from inetd.conf
- inetd.conf,
The Tests
- inetorgperson.schema,
OpenLDAP Configuration
- inf file,
Identifying Driver Files
- infrastructure,
Comments Regarding LDAP,
Target Uses
- inheritance,
Protecting Directories and Files from Deletion
- inherits rights,
Discussion
- initdb.ldif,
The Primary Domain Controller
- initGroups.sh,
Example: Engineering Office,
Script to Configure Group Mapping,
Steps in Migration Process
- inktype,
The Role of cupsomatic/foomatic
- insecure,
Features and Benefits,
Using Host-Based Protection
- inspire simplicity,
Example Configuration
- inspired structure,
Technical Discussion
- install drivers,
Features and Benefits,
Point'n'Print Client Drivers on Samba Servers
- interactive help,
Free Support
- interdomain
-
- trust
-
- account,
Features and Benefits
- trustrs,
Features and Benefits
- interdomain connection,
Samba as the Trusting Domain
- interdomain trust,
Configuring Samba NT-Style Domain Trusts,
NT4-Style Domain Trusts with Windows 2000
- interdomain trust accounts,
Account Information Databases,
Caution Regarding LDAP and Samba
- interdomain trusts,
Overview,
Features and Benefits
- Interdomain Trusts,
Interdomain Trust Relationships
-
- Completing,
Completing an NT4 Domain Trust
- creating,
Native MS Windows NT4 Trusts Configuration
- Facilities,
Interdomain Trust Facilities
- interface,
MS Windows XP Professional
- interface scripts,
User Account Management
- interface-based exclusion,
Features and Benefits
- interfaces,
Multiple Interfaces,
Problem Resolution,
Using Interface Protection,
Multiple Server Hosting,
Multiple Virtual Server Personalities,
The Tests,
Starting from inetd.conf
- intermediate information,
Caution Regarding LDAP and Samba
- intermediate tools,
Comments Regarding LDAP
- internal ordering,
Features and Benefits
- internationalization support,
Guidelines and Technical Tips
- Internet,
Using Host-Based Protection,
Using Interface Protection
- Internet Engineering Task Force (see IETF)
- Internet Printing Protocol (see IPP)
- Internet Protocol TCP/IP,
MS Windows Me
- Internetworking Packet Exchange (see IPX)
- internetworking super daemon,
Features and Benefits
- interoperability,
Features and Benefits,
Features and Benefits,
Single Sign-On and Domain Security,
Identity Mapping (IDMAP),
File, Directory, and Share Access Controls,
Features and Benefits,
Restrictive Constraints on Distributed File Systems
- intolerance,
Features and Benefits
- invalid shell,
Example Configuration
- invalid users,
User- and Group-Based Controls,
The Tests
- IP address,
The Tests
- IP address automatically,
MS Windows XP Professional,
MS Windows 2000
- IP addresses,
/etc/hosts
- IP aliases,
MS Windows XP Professional
- IPC$,
The Special Case of Windows 9x/Me,
Problem Resolution,
Using IPC$ Share-Based Denials
- IPC$ connections,
The Front-End Challenge
- ipchains,
The Tests
- ipconfig,
TCP/IP without NetBIOS
- iPlanet,
Domain Member Server
- IPP,
Understanding cupsaddsmb
- IPP client,
Administrator Cannot Install Printers for All Local Users
- iptables,
The Tests
- IPX,
Windows Networking Protocols
- IRC,
Free Support
- IRIX,
Discussion,
Basic Parameter Setting
- ISC
-
- DHCP,
Features and Benefits
- DNS,
Features and Benefits
- ISC DHCP server,
MS Windows XP Professional,
MS Windows Me
- isolated workgroup,
Configuring Workgroup Browsing
- IXFR,
Background Information
J
- Japanese,
Japanese Charsets,
Enabling SWAT Internationalization Support
- Japanese locale,
Basic Parameter Setting
- Japanese UNIX,
Basic Parameter Setting
- Java,
Basic Parameter Setting
- JIS X 0208,
Japanese Charsets
- join,
NT4-Style Domains (Includes Samba Domains)
- join client,
Description of Privileges
- join domain,
Joining Domain Fails Because of Existing Machine Account
- join the ADS domain,
Joining an NT4-type Domain with Samba-3
- join the domain,
Domain Member Server,
Joining an NT4-type Domain with Samba-3
- join the machine,
Windows NT4 Client
- joined client,
MS Windows Workstation/Server Machine Trust Accounts
- Joined domain,
Joining an NT4-type Domain with Samba-3
- joining domain,
Join the Samba Server to the PDC Domain
- joining the domain,
Joining an NT4-type Domain with Samba-3
- JPEG,
MIME Types and CUPS Filters
K
- KB 129202,
Additional Reading
- KB 224992,
Additional Reading
- KB 296264,
Additional Reading
- KB 811492,
Long Delays Deleting Files over Network with XP SP1
- KB 812937,
Problems Saving Files in MS Office on Windows XP
- KDC,
Samba ADS Domain Membership,
Configure /etc/krb5.conf
- KDE,
Remote Management from NoMachine.Com
- KDE konqueror,
Remote Management from NoMachine.Com
- KDE session,
Remote Management from NoMachine.Com
- KDEPrint,
Overview
- kerberos,
Features and Benefits,
Configure /etc/krb5.conf,
ADS Domains
- Kerberos,
Samba ADS Domain Membership,
Configure /etc/krb5.conf,
Possible Errors,
Testing with smbclient,
Trust Relationship Background,
Microsoft Active Directory Services,
Features and Benefits,
Passdb Backends and Authentication
-
- /etc/krb5.conf,
Configure /etc/krb5.conf
- Kerberos authentication,
Testing with smbclient
- kernel oplocks,
Disabling Kernel Oplocks
- killall,
Starting from inetd.conf
- kinit,
Configure /etc/krb5.conf,
Create the Computer Account,
Possible Errors
- kixstart,
Logon Scripts
- kprinter,
Foomatic Database-Generated PPDs
- KRB,
ADS Domains
- KRB5,
Configure /etc/krb5.conf
- krb5.conf,
Configure /etc/krb5.conf
L
- LAN,
Forcing Samba to Be the Master,
High-Availability Server Products,
Diagnostics Tools
- LanMan,
Features and Benefits,
Essential Background Information,
MS Windows Workstation/Server Machine Trust Accounts,
Technical Information,
Printing Developments Since Samba-2.2
- LanMan logon service,
Preparing for Domain Control
- LanMan passwords,
Backward Compatibility Account Storage Systems
- LanManager,
User Level Security,
Domain Logon Configuration: Windows 9x/Me
- LanManager-compatible,
WINS: The Windows Internetworking Name Server
- LanManger password,
Listing User and Machine Accounts
- laptops,
BackupPC
- large directory,
Handling Large Directories
- large domain,
IDMAP_RID with Winbind
- large numbers of files,
Handling Large Directories
- large organizations,
Trust Relationship Background
- last change time,
Listing User and Machine Accounts
- latency,
Slow and/or Unreliable Networks
- laws,
The pdbedit Tool
- LCT (see last change time)
- LDAP,
Features and Benefits,
Single Sign-On and Domain Security,
Domain Controller Types,
LDAP Configuration Notes,
Backup Domain Controller Configuration,
How Do I Replicate the smbpasswd File?,
Can I Do This All with LDAP?,
Features and Benefits,
Domain Member Server,
Sharing User ID Mappings between Samba Domain Members,
Account Information Databases,
New Account Storage Systems,
Important Notes About Security,
Mapping Common UIDs/GIDs on Distributed Machines,
Comments Regarding LDAP,
Caution Regarding LDAP and Samba,
LDAP Directories and Windows Computer Accounts,
ldapsam,
Supported LDAP Servers,
Schema and Relationship to the RFC 2307 posixAccount,
Initialize the LDAP Database,
Configuring Samba,
Default Users, Groups, and Relative Identifiers,
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
Backup Domain Controller,
Interdomain Trust Relationships,
Features and Benefits,
Trust Relationship Background,
Printing Developments Since Samba-2.2,
Microsoft Active Directory Services,
Features and Benefits,
Passdb Backends and Authentication,
Domain Layout
-
- directories,
Comments Regarding LDAP
- master,
LDAP Configuration Notes
- server,
LDAP Configuration Notes
- slave,
Features and Benefits,
LDAP Configuration Notes
- ldap admin dn,
The Primary Domain Controller,
Backup Domain Controller,
Example PDC Configuration,
Backup Domain Controller Configuration,
Example Configuration,
Sharing User ID Mappings between Samba Domain Members,
Configuring Samba,
IDMAP Storage in LDAP Using Winbind
- LDAP administration password,
Backup Domain Controller Configuration
- LDAP administrative password,
Sharing User ID Mappings between Samba Domain Members
- LDAP backend,
Background,
Primary Domain Controller,
Quick Migration Guide
- LDAP backends,
Mapping Common UIDs/GIDs on Distributed Machines
- LDAP database,
Example Configuration,
Initialize the LDAP Database,
Domain Layout
- ldap delete dn,
Configuring Samba
- LDAP deployment,
Comments Regarding LDAP
- LDAP directory,
Comments Regarding LDAP,
Account Flags Management,
ldapsam,
New Features in Samba-3
- ldap filter,
Configuring Samba
- ldap group suffix,
The Primary Domain Controller,
Backup Domain Controller,
Example PDC Configuration,
Example Configuration,
Configuring Samba,
New Schema,
New Suffix for Searching
- LDAP idmap Backend,
Mapping Common UIDs/GIDs on Distributed Machines
- ldap idmap suffix,
The Primary Domain Controller,
Backup Domain Controller,
Example PDC Configuration,
Backup Domain Controller Configuration,
Example Configuration,
Sharing User ID Mappings between Samba Domain Members,
Configuring Samba,
IDMAP Storage in LDAP Using Winbind,
New Schema,
New Suffix for Searching,
IdMap LDAP Support
- ldap machine suffix,
The Primary Domain Controller,
Backup Domain Controller,
Example PDC Configuration,
Example Configuration,
Configuring Samba,
New Suffix for Searching
- ldap page size,
Configuring Samba
- ldap passwd sync,
The Primary Domain Controller,
Backup Domain Controller,
Configuring Samba,
Password Synchronization
- LDAP queries,
New Suffix for Searching
- LDAP redirects,
Domain Member Server or Domain Member Client
- ldap replication sleep,
LDAP Configuration Notes,
Configuring Samba
- LDAP server,
Domain Member Server or Domain Member Client
- ldap ssl,
The Primary Domain Controller,
Backup Domain Controller,
Configuring Samba,
Security and sambaSamAccount
- ldap suffix,
The Primary Domain Controller,
Backup Domain Controller,
Example PDC Configuration,
Backup Domain Controller Configuration,
Example Configuration,
Configuring Samba,
IDMAP Storage in LDAP Using Winbind,
New Schema,
New Suffix for Searching
- ldap timeout,
Configuring Samba
- ldap user suffix,
The Primary Domain Controller,
Backup Domain Controller,
Example PDC Configuration,
Example Configuration,
Configuring Samba,
New Suffix for Searching
- LDAP-based,
Mapping Common UIDs/GIDs on Distributed Machines,
Interdomain Trust Relationships
- LDAP.,
LDAP Directories and Windows Computer Accounts
- LDAP/Kerberos,
New Features in Samba-3
- LDAPS,
Security and sambaSamAccount
- ldapsam,
Domain Control: Example Configuration,
MS Windows Workstation/Server Machine Trust Accounts,
Account Information Databases,
smbpasswd: Encrypted Password Database,
ldapsam,
Supported LDAP Servers,
Default Users, Groups, and Relative Identifiers,
Primary Domain Controller,
New Schema,
Objectives
- ldapsam_compat,
Backward Compatibility Account Storage Systems,
New Schema
- ldapsearch,
New Schema
- LDAPv3,
Security and sambaSamAccount
- ldconfig,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- ldd,
Linking smbd with libcups.so
- LDIF,
Initialize the LDAP Database,
New Schema
- LDIF file,
Initialize the LDAP Database
- legacy systems,
Single Sign-On and Domain Security
- legal UNIX system account name,
Adding Machine to Domain Fails
- Level1 Oplock,
Opportunistic Locking Overview
- Level1 oplock,
Opportunistic Locking Overview
- Level2 Oplock,
Opportunistic Locking Overview
- level2 oplocks,
Disabling Oplocks
- LGPL,
ldapsam
- libcups,
Default UNIX System Printing Commands,
Linking smbd with libcups.so
- libcups.so,
Linking smbd with libcups.so
- libcups.so.2,
Linking smbd with libcups.so
- Liberty Alliance,
Single Sign-On and Domain Security
- libiconv,
Basic Parameter Setting
- libnss_winbind,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- libnss_winbind.so,
Name Service Switch,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- libnss_wins.so,
/etc/nsswitch.conf
- libraries,
Configure /etc/krb5.conf
- licensing,
Objectives
- limitations,
Trust Relationship Background
- linewidth,
UNIX Printfile Conversion and GUI Basics
- link loader configuration,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- Links
-
- hard,
MS Windows NTFS Comparison with UNIX File Systems
- soft,
MS Windows NTFS Comparison with UNIX File Systems
- Linux,
Mapping Common UIDs/GIDs on Distributed Machines,
Features and Benefits,
Basic Parameter Setting
- Linux High Availability project,
High-Availability Server Products
- Linux LVM,
Shadow Copy Setup
- Linux LVM partition,
Shadow Copy Setup
- LinuxKongress2002,
The Grand Unification Achieved
- Linuxprinting.org,
The Role of cupsomatic/foomatic,
CUPS Print Drivers from Linuxprinting.org,
Driver Development Outside
- list of domain controllers,
Joining an NT4-type Domain with Samba-3
- listen for connections,
Using Interface Protection
- listen own socket,
Multiple Server Hosting
- LLC,
Integrating MS Windows Networks with Samba
- lm announce,
What Is Browsing?
- lm interval,
What Is Browsing?
- LM/NT password hashes,
smbpasswd: Encrypted Password Database,
Security and sambaSamAccount
- LMB,
Preparing for Domain Control,
How Browsing Functions,
Configuring Workgroup Browsing,
Domain Browsing Configuration,
Forcing Samba to Be the Master,
Making Samba the Domain Master,
Use of the Remote Browse Sync Parameter,
WINS: The Windows Internetworking Name Server,
Windows Networking Protocols,
Browsing Support in Samba,
Behavior of Cross-Subnet Browsing (see Local Master Browser)
- LMHOSTS,
How Browsing Functions,
The LMHOSTS File
- lmhosts,
WINS: The Windows Internetworking Name Server
- load balancing,
Features and Benefits
- load printers,
Simple Print Configuration,
Rapid Configuration Validation,
Extended Printing Configuration,
The [global] Section,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb
- loaded modules,
Features and Benefits
- loading printer drivers,
Any [my_printer_name] Section
- local
-
- groups,
UNIX and Windows Group Management
- master
-
- browser,
Preparing for Domain Control
- local access permissions,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- local accounts,
Domain Member Server or Domain Member Client
- local administrative privileges,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- Local Area Connection,
MS Windows XP Professional
- Local Area Connection Properties,
MS Windows 2000
- local authentication,
Background
- local authentication database,
Background
- local cache,
The NetBIOS Name Cache
- local disk,
BackupPC
- local domain,
Handling of Foreign SIDs
- local group,
What Rights and Privileges Will Permit Windows Client Administration?
- local groups,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Domain Member Server or Domain Member Client,
Name Service Switch
- Local Machine Trust Account,
Machine Accounts Keep Expiring
- local master,
Domain Control: Example Configuration,
What Is Browsing?,
Configuring Workgroup Browsing,
Domain Browsing Configuration
- Local Master Browser,
NetBIOS over TCP/IP,
Domain Browsing Configuration,
Use of the Remote Announce Parameter
- local master browser (see LMB)
- local names,
NetBIOS over TCP/IP
- local print driver,
[print$] Stanza Parameters
- local profile,
Disabling Roaming Profile Support,
Windows 9x/Me Profile Setup
- local profiles,
Features and Benefits
- local registry values,
MS Windows 200x/XP Professional Policies
- Local security policies,
Windows 200x/XP Local Security Policies
- local smbpasswd file,
Background
- local spool area,
Technical Introduction
- local subnet,
Forcing Samba to Be the Master
- local system printing,
Technical Introduction
- local UNIX groups,
Overview
- local user,
Standalone Samba Server,
Restarting
- local user account,
Mapping User Identifiers between MS Windows and UNIX
- local users,
Domain Member Server or Domain Member Client,
Name Service Switch
- locale,
Enabling SWAT Internationalization Support
- localhost,
Using Host-Based Protection
- locally known UID,
Mapping Windows Groups to UNIX Groups
- locate domain controller,
How Does a Workstation find its Domain Controller?
- Lock caching,
Opportunistic Locking Overview
- lock directory,
Multiple Server Hosting
- lock password,
Central Print Serving
- lock the account,
Changing User Accounts
- locking,
File and Record Locking,
Features and Benefits,
Discussion,
The Distributed File System Challenge
- locking protocol,
Features and Benefits
- locking semantics,
Features and Benefits,
Discussion
- locking.tdb,
The Printing *.tdb Files
-
- (see also TDB)
- lockout,
Example Configuration
- log file,
Configuration of Auditing,
Debug Levels,
Debugging-Specific Operations
- log files,
Assumptions
-
- monitoring,
Assumptions
- log level,
Adding Machine to Domain Fails,
Problem Resolution,
ADS Domains,
IDMAP Storage in LDAP Using Winbind,
extd_audit,
Windows 9x/Me Profile Setup,
Debugging with Samba Itself,
Debug Levels,
Debugging-Specific Operations
- log.nmbd,
Problem Resolution,
The Tests
- logging,
Configuration of Auditing,
Debugging-Specific Operations
- logical directories,
Features and Benefits
- Logical Link Control (see LLC)
- logical volume,
Shadow Copy Setup
- Logical Volume Manager (see LVM)
- Login,
Advantages of Non-Encrypted Passwords
- login,
Linux/FreeBSD-Specific PAM Configuration,
Features and Benefits
- login id,
Listing User and Machine Accounts
- login name,
Example Configuration
- login shells,
Comments Regarding LDAP
- LoginID,
Domain Member Server or Domain Member Client
- logon,
Domain Security Mode (User-Level Security)
- logon authentication,
NetBIOS Over TCP/IP Disabled
- logon drive,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
Windows NT4 Workstation,
Changing the Default Profile,
Multiple Virtual Server Hosting
- logon home,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
LDAP Special Attributes for sambaSamAccounts,
Windows 9x/Me User Profiles,
Mixed Windows Windows 9x/Me and NT4/200x User Profiles,
Disabling Roaming Profile Support,
Windows NT4 Workstation,
Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations
- logon name,
User Mapping
- logon path,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
LDAP Special Attributes for sambaSamAccounts,
NT4/200x User Profiles,
Mixed Windows Windows 9x/Me and NT4/200x User Profiles,
Disabling Roaming Profile Support,
Windows 9x/Me Profile Setup,
Windows NT4 Workstation,
Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations,
Changing the Default Profile,
Multiple Virtual Server Hosting
- logon processing,
Domain Control: Example Configuration
- logon requests,
Essential Background Information,
NetBIOS Over TCP/IP Enabled,
Can Samba Be a Backup Domain Controller to an NT4 PDC?
- logon script,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
Features and Benefits,
LDAP Special Attributes for sambaSamAccounts,
Multiple Virtual Server Hosting
- Logon Scripts,
Objectives
- Logon scripts,
Logon Scripts
- logon server,
The Special Case of Windows 9x/Me,
MS Windows NT4 Workstation
- logons,
NT4/200x User Profiles
- lookups,
smbpasswd: Encrypted Password Database
- loopback adapter,
The Tests
- loopback interface,
Using Interface Protection,
Red Hat Linux
- lower-case,
User Level Security
- lowercase filenames,
Handling Large Directories
- lp,
Verifying Configuration with testparm,
Print Queue Called “lp” Mishandles Print Jobs
- lpadmin,
“Raw” Printing,
Printing with Interface Scripts,
CUPS Print Drivers from Linuxprinting.org,
Setting Up Quotas
- LPD,
The [global] Section
- lpinfo,
CUPS Backends
- lppause command,
Linking smbd with libcups.so,
From Windows Clients to a CUPS/Samba Print Server,
Preconditions
- lpq cache time,
Extended Printing Configuration,
The [global] Section
- lpq command,
The [global] Section,
Linking smbd with libcups.so,
Preconditions
- lpresume command,
Linking smbd with libcups.so,
Preconditions
- lprm command,
Linking smbd with libcups.so,
Preconditions
- LPRNG,
The [global] Section
- lpstat,
Configuration File Syntax,
Troubleshooting Revisited
- LPT1:,
Samba and Printer Ports
- LsaEnumTrustedDomains,
Debugging with Samba Itself
- LTSP,
Remote Management from NoMachine.Com
- Lustre,
The Distributed File System Challenge
- lvcreate,
Shadow Copy Setup
- LVM,
shadow_copy,
Shadow Copy Setup
- LVM snapshots,
Shadow Copy Setup
- LVM volume,
Shadow Copy Setup
- lvm10 package,
Shadow Copy Setup
M
- m-node,
NetBIOS over TCP/IP
- MAC address,
/etc/hosts
- MAC Addresses,
/etc/hosts
- Mac OS X ,
Basic Parameter Setting
- machine,
LDAP Directories and Windows Computer Accounts
-
- account,
Domain Security Mode (User-Level Security)
- machine account,
Features and Benefits,
Domain Controller Types,
LDAP Configuration Notes,
Account Flags Management,
tdbsam,
User Rights and Privileges
- machine account password
-
- change protocol,
Joining an NT4-type Domain with Samba-3
- machine accounts,
Manual Creation of Machine Trust Accounts,
LDAP Directories and Windows Computer Accounts,
Account Management Tools,
User Rights and Privileges
- machine accounts database,
MS Windows NT4-style Domain Control
- machine authentication,
Domain Member Server
- machine name,
/etc/hosts,
Name Resolution as Used within MS Windows Networking
- Machine Policy Objects,
Objectives
- machine SID,
Managing Security Identifiers (SIDS)
- machine trust account,
Features and Benefits,
Preparing for Domain Control,
The Special Case of Windows 9x/Me,
Domain Membership,
Windows 200x/XP Professional Client,
Create the Computer Account,
Cannot Add Machine Back to Domain
-
- create privilege,
Windows 200x/XP Professional Client
- creation,
MS Windows Workstation/Server Machine Trust Accounts
- password,
Preparing for Domain Control,
MS Windows Workstation/Server Machine Trust Accounts
- Machine Trust Account,
MS Windows Workstation/Server Machine Trust Accounts,
Manual Creation of Machine Trust Accounts,
Windows NT4 Client
-
- creation,
On-the-Fly Creation of Machine Trust Accounts
- password,
Manual Creation of Machine Trust Accounts
- UNIX account,
On-the-Fly Creation of Machine Trust Accounts
- Machine Trust Accounts,
Machine Accounts Keep Expiring,
MS Windows Workstation/Server Machine Trust Accounts
-
- creating,
MS Windows Workstation/Server Machine Trust Accounts
- machine trust accounts,
How Do I Replicate the smbpasswd File?,
Managing Domain Machine Accounts using NT4 Server Manager,
Common Errors,
Account Information Databases,
Caution Regarding LDAP and Samba
- machine_name,
Manual Creation of Machine Trust Accounts
- machine_nickname,
Manual Creation of Machine Trust Accounts
- Macintosh,
Basic Parameter Setting
- macros,
Custom Print Commands
- mail,
Comments Regarding LDAP
- mailing list,
Free Support
- mailing lists,
Free Support
- maintaining ids,
New Features in Samba-3
- major changes,
New Functionality
- make,
/etc/nsswitch.conf,
Building the Binaries
- man,
Features and Benefits
- man page,
Configure smb.conf
- man pages,
Overview
- man-in-the-middle,
User Rights and Privileges
- manage accounts,
The pdbedit Tool
- manage drivers,
Features and Benefits
- manage groups,
Administering User Rights and Privileges
- manage printers,
Administering User Rights and Privileges
- manage privileges,
Rights Management Capabilities
- manage roaming profiles,
Features and Benefits
- manage share permissions,
Windows NT4 Workstation/Server
- manage share-level ACL,
Applicable Only to Versions Earlier than 3.0.11
- manage shares,
Administering User Rights and Privileges
- manage users,
Administering User Rights and Privileges
- manageability,
Objectives
- Manageability,
Objectives
- managed by humans,
Features and Benefits
- management bottleneck,
Multiuser Databases
- management costs,
Comments Regarding LDAP
- management overheads,
Single Sign-On and Domain Security
- management procedures,
Single Sign-On and Domain Security
- management tools,
Account Management Tools
- managing rights,
Using the “net rpc rights” Utility
- mandatory profiles,
Mandatory Profiles
- Mandrake,
Forums, Downloads, Tutorials, Howtos (Also for Mac OS X and Commercial UNIX)
- Mandriva,
Forums, Downloads, Tutorials, Howtos (Also for Mac OS X and Commercial UNIX)
- manual UNIX account creation,
MS Windows Workstation/Server Machine Trust Accounts
- manual WINS server entries,
MS Windows XP Professional,
MS Windows 2000
- manually configured,
MS Windows Me
- manually configured DNS settings,
MS Windows XP Professional
- map,
Windows 200x/XP Professional Client,
User and Group Accounts
- map to guest,
[print$] Stanza Parameters,
Adding New Printers with the Windows NT APW,
New Account Reconnection from Windows 200x/XP Troubles,
Avoid Being Connected to the Samba Server as the Wrong User,
Multiple Virtual Server Personalities
- mapped,
Important Administrative Information,
Overview,
Mapping Windows Groups to UNIX Groups
- mapping,
Mapping User Identifiers between MS Windows and UNIX,
Mapping Windows Groups to UNIX Groups
- mapping home directory,
Why Can Users Access Other Users' Home Directories?
- mapping printer driver,
Running rpcclient with setdriver
- mappings,
Sharing User ID Mappings between Samba Domain Members
- maps UNIX users and groups,
Sharing User ID Mappings between Samba Domain Members
- master browser,
Forcing Samba to Be the Master
- master browsers,
Behavior of Cross-Subnet Browsing
- master server,
Domain Layout
- master smb.conf,
Multiple Virtual Server Hosting
- MasterAnnouncement,
Behavior of Cross-Subnet Browsing
- match case,
Handling Large Directories
- max log size,
Configuration of Auditing,
Debugging-Specific Operations
- max print jobs,
Extended Printing Configuration,
The [global] Section
- max xmit,
Max Xmit
- maximum value,
Interdomain Trust Relationships
- mbd kept spawning,
Corrupt tdb Files
- Meccano set,
Discussion of Backup Solutions
- mechanism,
Joining an NT4-type Domain with Samba-3
- media type,
The Role of cupsomatic/foomatic
- member,
Preparing for Domain Control,
Using the “net rpc rights” Utility
- member machine,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- memory,
Advantages of Encrypted Passwords
- messages.tdb,
The Printing *.tdb Files
-
- (see also TDB)
- messaging systems,
Comments Regarding LDAP
- Meta node,
Static WINS Entries
- meta-directory,
Single Sign-On and Domain Security
- meta-service,
Configuration File Syntax
- meta-services,
Multiple Virtual Server Personalities
- Microsoft Active Directory,
Features and Benefits
- Microsoft Developer Network CDs,
The Windows Network Monitor
- Microsoft driver,
PostScript Drivers with No Major Problems, Even in Kernel
Mode
- Microsoft management console (see MMC)
- Microsoft Remote Procedure Call (see MSRPC)
- Microsoft Windows 9x/Me,
Managing Domain Machine Accounts using NT4 Server Manager
- Microsoft Wolfpack,
High-Availability Server Products
- middle-ware,
Comments Regarding LDAP
- migrate,
Server Types and Security Modes,
Migration from NT4 PDC to Samba-3 PDC
- migrate account settings,
User and Group Accounts
- migrate accounts,
Account Migration
- migrate group,
User and Group Accounts
- migrate user,
User and Group Accounts
- migrating,
New Features in Samba-3
- migration,
Objectives
- migration plan,
Planning and Getting Started
- migration process,
Objectives
- MIME,
MIME Types and CUPS Filters,
MIME Type Conversion Rules,
Filtering Overview,
application/octet-stream Printing
-
- filters,
MIME Types and CUPS Filters
- raw,
Anonymous Print Server,
Central Print Serving,
Explicitly Enable “raw” Printing for application/octet-stream
- MIME conversion rules,
The CUPS Filtering Architecture
- MIME recognition,
The CUPS Filtering Architecture
- MIME type,
Explicitly Enable “raw” Printing for application/octet-stream,
The CUPS Filtering Architecture,
Prefilters,
application/octet-stream Printing
- mime.types,
MIME Types and CUPS Filters
- minimal
-
- configuration,
Configuration File Syntax
- minimal configuration,
Configuration File Syntax
- minimum security control,
Standalone Servers
- misconfigurations,
Test Your Config File with testparm
- misconfigured settings,
Simple Print Configuration
- misinformation,
Domain Membership
- mission-critical,
Opportunistic Locking Overview,
Features and Benefits
- MIT,
Configure /etc/krb5.conf,
ADS Domains
- MIT kerberos,
ADS Domains,
IDMAP Storage in LDAP Using Winbind
- MIT Kerberos,
Features and Benefits
- mixed mode,
ADS Security Mode (User-Level Security),
NT4-Style Domain Trusts with Windows 2000
- mixed profile,
Mixed Windows Windows 9x/Me and NT4/200x User Profiles
- mkdir,
Central Print Serving,
Shadow Copy Setup
- mkfs.xfs,
Shadow Copy Setup
- MMC,
Features and Benefits,
Features and Benefits,
Domain Member Server or Domain Member Client,
Primary Domain Controller,
Access Controls on Shares,
Windows 200x/XP,
Creating and Managing System Policies,
Windows NT4/200x,
Disabling Roaming Profile Support
- MMC snap-in,
Administration of Windows 200x/XP Policies
- modem/ISDN,
Remote Management from NoMachine.Com
- moderately secure,
Features and Benefits
- modprobe,
Shadow Copy Setup
- module,
Shadow Copy Setup
- modules,
Features and Benefits,
Discussion
- more than one protocol,
Windows Networking Protocols
- mount,
Share-Level Security,
Shadow Copy Setup
- mouse-over,
Remote Management from NoMachine.Com
- moveuser.exe,
moveuser.exe
- MS DCE RPC,
Join the Samba Server to the PDC Domain
- MS Windows 2000,
Active Directory Domain Control
- MS Windows NT4/200x,
New Account Storage Systems
- MS Windows SID,
Domain Member Server or Domain Member Client
- MS WINS,
Features and Benefits
- MS-DFS,
MS-DFS: The Poor Man's Cluster
- MS-RPC,
Printing Developments Since Samba-2.2
- MS-WINS replication,
NetBIOS over TCP/IP
- msdfs links,
Features and Benefits
- msdfs root,
Features and Benefits,
MSDFS UNIX Path Is Case-Critical
- msg,
Enabling SWAT Internationalization Support
- msg file,
Enabling SWAT Internationalization Support
- MSRPC,
Microsoft Remote Procedure Calls,
Name Service Switch
- multibyte character sets,
New Features in Samba-3
- multibyte charsets,
What Are Charsets and Unicode?
- multiple backends,
Password Backends
- multiple domains,
Domain Layout
- multiple hosting,
Advanced Configuration Techniques
- multiple modules,
Discussion
- multiple network interfaces,
Multiple Interfaces
- multiple network segments,
Domain Layout
- multiple personality,
Multiple Virtual Server Personalities
- multiple server hosting,
Multiple Server Hosting
- multiple server personalities,
Advanced Configuration Techniques
- multiple servers,
Advanced Configuration Techniques,
Multiple Server Hosting
- multiple universal naming convention provider (see MUP)
- multiple VFS,
Discussion
- multiple virtual servers,
Multiple Virtual Server Personalities
- multiple Windows workgroups or domains,
MS Windows Me
- multiple WINS servers,
NetBIOS over TCP/IP
- Multiuser databases,
Multiuser Databases
- mutual assistance,
Free Support
- mutually exclusive options,
What Is Browsing?
- My Network Places,
MS Windows Me,
Problem Resolution
- Myrinet,
Server Pool Communications Demands
N
- n security context,
How Browsing Functions
- n-memory buffer,
The NetBIOS Name Cache
- name conflict,
Any [my_printer_name] Section
- name lookup,
Domain Controller Types,
The NetBIOS Name Cache
- name lookups,
NetBIOS over TCP/IP,
How Browsing Functions
- name registration,
What Qualifies a Domain Controller on the Network?
- name resolution,
What Is Browsing?,
NetBIOS over TCP/IP,
How Browsing Functions,
Technical Overview of Browsing,
Common Errors,
/etc/hosts,
Assumptions
- name resolution across routed networks,
How Browsing Functions
- name resolve order,
What Is Browsing?,
Name Resolution Order
- name service switch (see NSS)
- name-to-address,
WINS: The Windows Internetworking Name Server
- nameserv.h,
Static WINS Entries
- name_type,
WINS: The Windows Internetworking Name Server,
Name Resolution Order
- native ACLs,
Features and Benefits
- native dump,
Amanda
- native member,
Domain Controller Types,
Features and Benefits
- native mode,
ADS Security Mode (User-Level Security),
Microsoft Active Directory Services
- NBT,
Name Resolution as Used within MS Windows Networking
- nbtstat,
Cannot Add Machine Back to Domain,
The NetBIOS Name Cache
- necessary rights,
Using the “net rpc rights” Utility
- negotiate,
Important Notes About Security
- negotiating the charset,
What Are Charsets and Unicode?
- nested group,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- Nested Group Support,
What Rights and Privileges Will Permit Windows Client Administration?
- nested groups,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups
- net,
Account Management Tools,
Group Mapping: MS Windows and UNIX,
Remote and Local Management: The Net Command,
Overview,
Administrative Tasks and Methods,
UNIX and Windows Group Management,
What Rights and Privileges Will Permit Windows Client Administration?
-
- ads,
UNIX and Windows Group Management
-
- join,
Joining an NT4-type Domain with Samba-3,
Create the Computer Account,
Machine Trust Accounts,
ADS Domains
- leave,
Machine Trust Accounts
- printer info,
Printers and ADS
- printer publish,
Printers and ADS
- printer remove,
Printers and ADS
- printer search,
Printers and ADS
- status,
Machine Trust Accounts
- testjoin,
Machine Trust Accounts
- getlocalsid,
Managing Security Identifiers (SIDS),
New Schema
- groupmap,
Example: Engineering Office,
Features and Benefits,
Example Configuration,
Steps in Migration Process
-
- add,
Mapping Windows Groups to UNIX Groups
- delete,
Mapping Windows Groups to UNIX Groups
- list,
Example Configuration,
Adding or Creating a New Group
- modify,
Mapping Windows Groups to UNIX Groups
- localgroup,
What Rights and Privileges Will Permit Windows Client Administration?
- rap,
UNIX and Windows Group Management
-
- session,
Session and Connection Management
- rpc,
Example Configuration,
Example Configuration,
Features and Benefits,
UNIX and Windows Group Management
-
- getsid,
Backup Domain Controller Configuration,
Managing Security Identifiers (SIDS)
- group,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Adding or Creating a New Group
- group add,
Adding or Creating a New Group
- group addmem,
Manipulating Group Memberships,
Managing Nest Groups on Workstations from the Samba Server
- group delete,
Deleting a Group Account
- group delmem,
Manipulating Group Memberships
- group list,
Adding or Creating a New Group
- group members,
Manipulating Group Memberships
- group rename,
Rename Group Accounts
- info,
Other Miscellaneous Operations,
Side Bar Notes
- join,
Example Configuration,
Joining an NT4-type Domain with Samba-3,
Machine Trust Accounts,
Join the Samba Server to the PDC Domain,
Steps in Migration Process
- join bdc,
Machine Trust Accounts
- join member,
Machine Trust Accounts
- list,
Using the “net rpc rights” Utility
- printer migrate drivers,
Printer Migration
- printer migrate forms,
Printer Migration
- printer migrate printers,
Printer Migration
- printer migrate security,
Printer Migration
- printer migrate settings,
Printer Migration
- right list accounts,
Share Migration
- rights grant,
Administering User Rights and Privileges,
Using the “net rpc rights” Utility
- rights list,
Administering User Rights and Privileges
- rights list accounts,
Administering User Rights and Privileges
- share add,
Creating, Editing, and Removing Shares
- share delete,
Creating, Editing, and Removing Shares
- share migrate,
Share Migration
- share migrate all,
Simultaneous Share and File Migration
- share migrate files,
File and Directory Migration
- share migrate security,
Share-ACL Migration
- testjoin,
Machine Trust Accounts
- trustdom add,
Interdomain Trusts
- trustdom establish,
Interdomain Trusts,
Samba as the Trusting Domain
- trustdom list,
Interdomain Trusts
- trustdom revoke,
Interdomain Trusts
- user add,
Adding User Accounts
- user delete,
Deletion of User Accounts,
Machine Trust Accounts
- user info,
Managing User Accounts
- user password,
Adding User Accounts
- user rename,
Managing User Accounts
- vampire,
Share, Directory, and File Migration,
Steps in Migration Process
- setlocalsid,
Managing Security Identifiers (SIDS)
- time,
Other Miscellaneous Operations
-
- set,
Other Miscellaneous Operations
- system,
Other Miscellaneous Operations
- zone,
Other Miscellaneous Operations
- use,
Testing Server Setup
- NET,
Samba PDC
- net command,
New Features in Samba-3
- net getlocalsid,
The Administrator Domain SID
- net groupmap,
New Schema
- net rpc user add,
Description of Privileges
- net tool,
Passdb Backends and Authentication
- net use,
Error Message: “Cannot connect under a different Name”
- net use /home,
Windows 9x/Me User Profiles
- net use lpt1:,
Installing the PostScript Driver on a Client
- net view,
The [global] Section,
The Tests
- netatalk,
netatalk
- NetAtalk,
Basic Parameter Setting
- Netatalk,
Macintosh Clients
- NetBEUI,
Integrating MS Windows Networks with Samba
- NetBIOS,
Domain Security Mode (User-Level Security),
Features and Benefits,
What Qualifies a Domain Controller on the Network?,
How Does a Workstation find its Domain Controller?,
Example Configuration,
Features and Benefits,
Discussion,
TCP/IP without NetBIOS,
Technical Overview of Browsing,
Integrating MS Windows Networks with Samba,
Name Resolution as Used within MS Windows Networking,
The NetBIOS Name Cache
-
- brooadcast,
Preparing for Domain Control
- name,
Domain Security Mode (User-Level Security)
- netbios alias,
Multiple Virtual Server Personalities
- netbios aliases,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- NetBIOS broadcast,
Joining an NT4-type Domain with Samba-3
- NetBIOS disabled,
Features and Benefits
- NetBIOS flags,
Static WINS Entries
- netbios name,
Configuration File Syntax,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
Reference Documentation Server,
Central Print Serving,
Configuring Samba,
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
Features and Benefits,
Multiple Server Hosting,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- NetBIOS name,
Security Mode and Master Browsers,
Manual Creation of Machine Trust Accounts,
Joining an NT4-type Domain with Samba-3,
Name Resolution as Used within MS Windows Networking,
Multiple Virtual Server Personalities
- NetBIOS name cache,
Cannot Add Machine Back to Domain,
Flushing the Samba NetBIOS Name Cache
- NetBIOS name length,
WINS: The Windows Internetworking Name Server
- NetBIOS name resolution,
Behavior of Cross-Subnet Browsing
- NetBIOS Name Server (see NBNS)
- NetBIOS name type,
How Browsing Functions
- NetBIOS names,
Name Resolution Order,
/etc/nsswitch.conf
- NetBIOS network interface,
Windows Networking Protocols
- NetBIOS networking,
Features and Benefits
- NetBIOS over TCP/IP,
Network Browsing,
Features and Benefits,
NetBIOS over TCP/IP,
Technical Overview of Browsing,
Cross-Subnet Browsing,
Background Information
- NetBIOS over TCP/IP disabled,
Browsing of Shares and Directories is Very Slow
- NetBIOS-less,
TCP/IP without NetBIOS,
Multiple Virtual Server Personalities
- NetBIOS-less SMB,
Multiple Virtual Server Personalities
- NetBIOSless SMB over TCP/IP,
NetBIOS over TCP/IP
- NetBT,
Name Resolution as Used within MS Windows Networking
- netlogon,
Domain Controller Types
- NETLOGON,
Preparing for Domain Control,
Domain Control: Example Configuration,
Creating and Managing System Policies,
MS Windows 200x/XP Professional Policies,
Managing Account/User Policies,
MS Windows NT4 Workstation,
MS Windows 200x/XP
- Netlogon,
Essential Background Information
- NetLogon service,
WINS: The Windows Internetworking Name Server
- netlogon share,
Backup Domain Controller Configuration,
Steps in Migration Process
- Netmon,
The Windows Network Monitor
- Netmon.,
Installing Network Monitor on an NT Workstation
- netmon.exe,
Windows 9x/Me Profile Setup
- NetSAMLogon,
Roaming Profiles
- Netscape's Directory Server,
Supported LDAP Servers
- NetServerEnum2,
Behavior of Cross-Subnet Browsing
- NetUserGetInfo,
The Special Case of Windows 9x/Me,
Roaming Profiles
- NetWare,
Name Resolution as Used within MS Windows Networking
- NetWare Bindery,
Features and Benefits
- NetWare Core Protocol-based server,
Features and Benefits
- NetWkstaUserLogon,
The Special Case of Windows 9x/Me
- network
-
- browsing,
Features and Benefits
- logon,
Domain Control: Example Configuration
-
- service,
Security Mode and Master Browsers
- performance,
Domain Controller Types
- wide-area,
MS Windows NT4-style Domain Control
- network access controls,
File, Directory, and Share Access Controls
- network access profile,
MS Windows NT4-style Domain Control
- network administrator,
File, Directory, and Share Access Controls
- network administrator's toolbox,
Remote and Local Management: The Net Command
- network administrators,
Server Share and Directory Layout
- network analyzer,
Diagnostics Tools
- network bandwidth,
Forcing Samba to Be the Master,
Domain Layout
- Network Basic Extended User Interface (see NetBEUI)
- Network Basic Input/Output System (see NetBIOS)
- Network Bridge,
MS Windows XP Professional
- Network Bridge Configuration,
MS Windows XP Professional
- network browsing problems,
Making Samba the Domain Master,
Browsing of Shares and Directories is Very Slow
- network client,
Features and Benefits,
Identity Mapping (IDMAP)
- network clients,
MS Windows 2000
- network configuration problems,
TCP/IP Configuration
- network difficulty,
Features and Benefits
- network environment,
Remote Desktop Management
- Network ID,
Joining a Domain: Windows 2000/XP Professional
- network interface,
Using Interface Protection,
The Tests
- network logon,
The Special Case of Windows 9x/Me,
Features and Benefits,
Domain Logon Configuration: Windows 9x/Me
- network logon services,
The Special Case of Windows 9x/Me
- network membership,
Technical Details
- Network Monitor,
The Windows Network Monitor
- Network Monitor Tools and Agent,
Installing Network Monitor on an NT Workstation
- Network Neighborhood,
What Is Browsing?,
Problem Resolution,
Behavior of Cross-Subnet Browsing,
The [global] Section,
Check Samba for Driver Recognition
- network neighborhood,
Behavior of Cross-Subnet Browsing
- network policies,
Creating and Managing System Policies
- network security,
Domain Layout
- network segment,
NetBIOS over TCP/IP,
How Browsing Functions,
Domain Layout
- Network settings,
Cross-Subnet Browsing
- network sniffer,
Advantages of Encrypted Passwords
- network storage,
BackupPC
- network traffic,
Domain Member Server or Domain Member Client
- networked workstation,
Name Service Switch
- networking advocates,
Discussion of Backup Solutions
- networking environment,
Caution Regarding LDAP and Samba
- networking systems,
Common Errors
- networks access,
Samba Performance is Very Slow
- Networks Properties,
Domain Logon Configuration: Windows 9x/Me
- new account,
Samba as the Trusted Domain
- new parameters,
New Parameters
- newsgroup,
Introduction
- Nexus toolkit,
MS Windows Workstation/Server Machine Trust Accounts
- Nexus.exe,
Features and Benefits,
Managing Domain Machine Accounts using NT4 Server Manager,
Remote Server Administration
- NFS,
Sharing User ID Mappings between Samba Domain Members,
Mapping Common UIDs/GIDs on Distributed Machines,
The Distributed File System Challenge,
Restrictive Constraints on Distributed File Systems,
IdMap LDAP Support
- NFS clients,
UNIX or NFS Client-Accessed Files
- NIS,
Share-Level Security,
Backup Domain Controller Configuration,
Schema and Relationship to the RFC 2307 posixAccount,
Domain Member Server or Domain Member Client,
Name Service Switch
- NIS database,
Pluggable Authentication Modules
- nmbd,
Starting Samba,
Test Your Config File with testparm,
Secure Read-Write File and Print Server,
Example Configuration,
What Is Browsing?,
NetBIOS over TCP/IP,
Browsing Support in Samba,
Flushing the Samba NetBIOS Name Cache,
NT4-Style Domains (Includes Samba Domains),
Testing Things Out,
Linux,
Solaris,
Multiple Server Hosting,
Multiple Virtual Server Personalities,
The Tests,
Debugging with Samba Itself,
Corrupt tdb Files
- nmblookup,
The NetBIOS Name Cache,
The Tests
- No NetBIOS layer,
TCP/IP without NetBIOS
- no network logon service,
Background
- no printcap file,
Central Print Serving
- nobody,
Central Print Serving
- nobody account,
Custom Print Commands,
Multiple Virtual Server Personalities
- node-type,
NetBIOS over TCP/IP
- NoMachine,
Remote Management from NoMachine.Com
- NoMachine.Com,
Remote Management from NoMachine.Com
- non-authentication-based account management,
Anatomy of /etc/pam.d Entries
- non-authoritative,
Behavior of Cross-Subnet Browsing
- non-LDAP
-
- backend,
Features and Benefits
- non-member Windows client,
Mapping User Identifiers between MS Windows and UNIX
- non-PostScript,
CUPS Also Uses PPDs for Non-PostScript Printers,
PostScript Printer Descriptions for Non-PostScript Printers
- non-PostScript printers,
Prefilters,
Foomatic Database-Generated PPDs
- nonhierarchical,
Trust Relationship Background
- nontransitive,
Trust Relationship Background
- normal color,
The Role of cupsomatic/foomatic
- normal user,
Administering User Rights and Privileges
- not domain member,
Background
- not domain members,
Standalone Servers
- not part of domain,
WINS Server Configuration
- not stored anywhere,
Advantages of Encrypted Passwords
- not transitive,
NT4-Style Domain Trusts with Windows 2000
- Novell,
Domain Member Server,
Windows 9x/Me Profile Setup
- Novell eDirectory server,
Features and Benefits
- NSS,
Background,
Mapping Common UIDs/GIDs on Distributed Machines,
LDAP Directories and Windows Computer Accounts,
ldapsam,
Schema and Relationship to the RFC 2307 posixAccount,
Accounts and Groups Management,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
IDMAP_RID with Winbind,
Features and Benefits,
What Winbind Provides,
How Winbind Works,
Name Service Switch,
Configure Winbind and PAM,
Conclusion
- nsswitch.conf,
Share-Level Security
- nss_ldap,
Example Configuration,
Mapping Common UIDs/GIDs on Distributed Machines,
LDAP Directories and Windows Computer Accounts,
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- nss_winbind.so.1,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- nt acl support,
File and Directory Permissions-Based Controls,
Viewing File Ownership,
Viewing File or Directory Permissions,
Modifying File or Directory Permissions,
Windows 2000 Service Pack 2
- NT domain,
What Winbind Provides
- NT groups,
Why Is This Better Than security = server?,
Default Users, Groups, and Relative Identifiers
- NT migration scripts,
ldapsam
- NT password,
Listing User and Machine Accounts
- NT Server Manager,
Windows NT4 Workstation/Server
- NT-controlled domain,
Samba as the Trusting Domain
- NT-encrypted password,
MS Windows Workstation/Server Machine Trust Accounts
- NT-encrypted passwords,
Backward Compatibility Account Storage Systems
- NT4,
Domain Member Server or Domain Member Client
- NT4 Domain,
Standalone Samba Server
- NT4 domain,
Domain Member Server or Domain Member Client,
Features and Benefits
- NT4 domain members,
Identity Mapping (IDMAP)
- NT4 style policy updates,
Managing Account/User Policies
- NT4 User Manager for Domains,
Using the “net rpc rights” Utility
- NT4-style,
NT4-Style Domain Trusts with Windows 2000
- NT4-style domain,
Interdomain Trust Relationships
- NT4-style domains,
Trust Relationship Background
- Nt4sp6ai.exe,
Windows NT4-Style Policy Files
- NTConfig.POL,
Domain Control: Example Configuration,
Features and Benefits,
Windows 9x/ME Policies,
Registry Spoiling,
MS Windows 200x/XP Professional Policies,
Administration of Windows 200x/XP Policies,
Managing Account/User Policies,
Samba Editreg Toolset,
MS Windows NT4 Workstation,
Samba-3 Implementation Choices
- ntconfig.pol,
Windows NT4-Style Policy Files
- ntdrivers.tdb,
Setting Device Modes on New Printers,
The Printing *.tdb Files
-
- (see also TDB)
- ntforms.tdb,
Setting Device Modes on New Printers,
The Printing *.tdb Files
-
- (see also TDB)
- NTFS,
MS Windows NTFS Comparison with UNIX File Systems
- NTLMv2,
NTLMv2 Security
- ntlm_auth,
Single Sign-On and Domain Security
- ntprinters.tdb,
Setting Device Modes on New Printers,
The Printing *.tdb Files
-
- (see also TDB)
- NTUser.DAT,
Samba Editreg Toolset,
Mandatory Profiles,
Samba-3 Implementation Choices
- NTuser.DAT,
Windows NT4 Workstation,
Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations,
Profile Migration/Creation
- NTuser.MAN,
Windows NT4 Workstation
- NTUser.MAN,
Mandatory Profiles
- NT_STATUS_LOGON_FAILURE,
Changes in Behavior
- NT_STATUS_UNSUCCESSFUL,
Running rpcclient with adddriver
- null shell,
Manual Creation of Machine Trust Accounts
- NX,
Remote Management from NoMachine.Com
O
- obey pam restrictions,
smb.conf PAM Configuration
- object class,
New Schema
- object class declaration,
New Schema
- object module dependencies,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- ObjectClass,
Schema and Relationship to the RFC 2307 posixAccount
- ObjectClasses,
Schema and Relationship to the RFC 2307 posixAccount,
OpenLDAP Configuration
- obtuse complexity,
Server Share and Directory Layout
- office server,
Secure Read-Write File and Print Server
- OID,
Schema and Relationship to the RFC 2307 posixAccount
- old sambaAccount,
New Schema
- Omni,
Driver Development Outside
- on the fly,
Windows NT4 Client
- on-the-fly,
Primary Domain Controller
- on-the-fly logon scripts,
Objectives
- on-the-fly policy files,
Objectives
- one direction,
Trust Relationship Background
- one domain,
Identity Mapping (IDMAP)
- one-way trust,
Interdomain Trust Facilities
- only one WINS server,
WINS Server Configuration
- only user,
User- and Group-Based Controls,
Why Can Users Access Other Users' Home Directories?
- OpenGFS,
The Distributed File System Challenge
- OpenLDAP,
Single Sign-On and Domain Security,
LDAP Configuration Notes,
Domain Member Server,
New Account Storage Systems,
Supported LDAP Servers,
Schema and Relationship to the RFC 2307 posixAccount,
OpenLDAP Configuration,
Features and Benefits
- OpenLDAP backend,
Backward Compatibility Account Storage Systems
- OpenSSL,
Securing SWAT through SSL,
Generating the Certificate Authority
- operating costs,
Objectives
- operating system search path,
Locating the SWAT File
- oplock,
The Distributed File System Challenge
- oplock break,
Opportunistic Locking Overview,
Beware of Force User
- oplock break contention limit,
Disabling Kernel Oplocks
- oplock break wait time,
Advanced Samba Oplocks Parameters,
Disabling Kernel Oplocks
- oplock contention limit,
Advanced Samba Oplocks Parameters
- oplock handling,
Restrictive Constraints on Distributed File Systems
- oplock mechanism,
Advanced Samba Oplocks Parameters
- oplock messages,
Required Modifications to Samba
- oplock parameters,
Advanced Samba Oplocks Parameters
- oplocks,
Opportunistic Locking Overview,
Disabling Oplocks
- oplocks disabled,
Multiuser Databases
- oplocks management,
PDM Data Shares
- opportunistic locking,
Features and Benefits,
Opportunistic Locking Overview
- Opportunistic locking,
Opportunistic Locking Overview
- optional,
Anatomy of /etc/pam.d Entries
- ordinary connection,
Samba as the Trusting Domain
- Organization for the Advancement of Structured Information Standards (see OASIS)
- organizational directory,
Create the Computer Account
- organizational unit,
Create the Computer Account (see OU)
- os level,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
What Is Browsing?,
Configuring Workgroup Browsing,
Domain Browsing Configuration,
Forcing Samba to Be the Master,
Making Samba the Domain Master,
Changing the Default Profile
- os2 driver map,
Printer Driver Download for OS/2 Clients
- OSS/Free Software,
Remote Management from NoMachine.Com
- other,
File and Directory Access Control
- output duplexing,
pstops
- outside threat,
Using Host-Based Protection
- own home directory,
Why Can Users Access Other Users' Home Directories?
- ownership,
Viewing File Ownership
- ownership cost,
Objectives
- ownership rights,
Windows 9x/Me Profile Setup
P
- p-node,
NetBIOS over TCP/IP
- package,
Example Configuration
- packages,
Obtaining and Installing Samba
- packet sniffer,
Windows 9x/Me Profile Setup
- packet trace,
Windows 9x/Me Profile Setup
- PADL,
Mapping Common UIDs/GIDs on Distributed Machines,
LDAP Directories and Windows Computer Accounts,
Domain Member Server or Domain Member Client,
IDMAP Storage in LDAP Using Winbind
- PADL Software,
Mapping Common UIDs/GIDs on Distributed Machines
- page description languages (see PDL)
- pager program,
Simple Print Configuration
- page_log,
The page_log File Syntax
- paid-for support,
Samba Support
- PAM,
Background,
Backward Compatibility Account Storage Systems,
Mapping Common UIDs/GIDs on Distributed Machines,
Plaintext,
ldapsam,
How Winbind Works,
Pluggable Authentication Modules,
Requirements,
Testing Things Out,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris,
Configure Winbind and PAM,
Conclusion,
Features and Benefits,
Technical Discussion
- PAM authentication module,
PAM Configuration Syntax
- PAM configuration,
Requirements
- PAM management,
PAM-Based Distributed Authentication
- PAM module,
NSS Winbind on AIX
- PAM modules,
Features and Benefits
- PAM-capable,
Features and Benefits
- pam-devel,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris
- PAM-enabled,
What Winbind Provides,
PAM-Based Distributed Authentication,
Features and Benefits
- PAM-specific tokens,
PAM Configuration Syntax
- pam_krb5.so,
Features and Benefits
- pam_ldap,
Mapping Common UIDs/GIDs on Distributed Machines
- pam_ldap.so,
Features and Benefits
- pam_mkhomedir,
Linux/FreeBSD-Specific PAM Configuration
- pam_ncp_auth.so,
Features and Benefits
- pam_pwdb.so,
Features and Benefits
- pam_securetty.so,
Linux/FreeBSD-Specific PAM Configuration
- pam_smbpass.so,
PAM-Based Distributed Authentication,
Features and Benefits
- pam_smbpasswd.so,
Features and Benefits
- pam_smb_auth.so,
Features and Benefits
- pam_unix.so,
Linux/FreeBSD-Specific PAM Configuration,
Features and Benefits
- pam_unix2.so,
Features and Benefits
- pam_userdb.so,
Features and Benefits
- pam_winbind.so,
Pluggable Authentication Modules,
Configure Winbind and PAM,
Linux/FreeBSD-Specific PAM Configuration,
Features and Benefits
- parameters,
Rapid Configuration Validation
- paranoid,
Starting and Testing the winbindd Daemon
- passdb,
Machine Accounts Keep Expiring
- passdb backend,
Secure Read-Write File and Print Server,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
Example PDC Configuration,
LDAP Configuration Notes,
Example Configuration,
MS Windows Workstation/Server Machine Trust Accounts,
Reference Documentation Server,
Central Print Serving,
Account Information Databases,
Technical Information,
Comments Regarding LDAP,
The smbpasswd Tool,
The pdbedit Tool,
Deleting Accounts,
Account Migration,
Password Backends,
tdbsam,
Configuring Samba,
Users Cannot Logon,
Users Being Added to the Wrong Backend Database,
Default Users, Groups, and Relative Identifiers,
Domain Member Server or Domain Member Client,
Primary Domain Controller,
The Administrator Domain SID,
Interdomain Trust Relationships,
Features and Benefits,
Remote CIFS Authentication Using winbindd.so,
Multiple Virtual Server Hosting,
Quick Migration Guide,
Passdb Backends and Authentication,
New Suffix for Searching
- passdb backends,
smbpasswd: Encrypted Password Database,
New Features in Samba-3
- passed across the network,
Advantages of Encrypted Passwords
- passwd,
Central Print Serving,
LDAP Directories and Windows Computer Accounts,
The smbpasswd Tool,
Name Service Switch,
Features and Benefits
- password,
MS Windows NT4-style Domain Control,
Samba as the Trusted Domain,
Samba as the Trusting Domain,
Anatomy of /etc/pam.d Entries
-
- plaintext,
The Special Case of Windows 9x/Me
- password aging,
Account Management Tools
- password assigned,
Completing an NT4 Domain Trust
- password backend,
Reference Documentation Server,
Listing User and Machine Accounts
- password backends,
Account Information Databases
- password change facility,
Enabling SWAT for Use
- password database,
Backup Domain Controller Configuration,
Samba as the Trusted Domain
- password encryption,
Plaintext
- password expiration,
smbpasswd: Encrypted Password Database
- password expired,
Changing User Accounts
- password history,
Single Sign-On and Domain Security
- password level,
Password Checking,
The Tests,
Password Case Sensitivity,
Slow Logins
- password management,
Pluggable Authentication Modules
- password prompt,
Advantages of Encrypted Passwords
- password scheme,
Important Notes About Security
- password server,
Example Configuration,
Server Security (User Level Security),
Example Configuration,
Security Mode and Master Browsers,
Joining an NT4-type Domain with Samba-3,
Configure smb.conf,
The Tests
- password uniqueness,
Single Sign-On and Domain Security
- passwords,
Introduction
- patch,
Patches
- path,
Configuration File Syntax,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Domain Control: Example Configuration,
Example Configuration,
Reference Documentation Server,
Central Print Serving,
Managing Nest Groups on Workstations from the Samba Server,
Features and Benefits,
MSDFS UNIX Path Is Case-Critical,
Simple Print Configuration,
Extended Printing Configuration,
The [printers] Section,
Any [my_printer_name] Section,
Print Commands,
Creating the [print$] Share,
[print$] Stanza Parameters,
The [print$] Share Directory,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Samba Receiving Job-Files and Passing Them to CUPS,
Prepare Your smb.conf for cupsaddsmb,
Autodeletion or Preservation of CUPS Spool Files,
Permissions on /var/spool/samba/ Get Reset After Each Reboot,
Discussion,
Shadow Copy Setup,
Handling Large Directories,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting,
Assumptions,
The Tests,
Windows 2000 Service Pack 2
- path specified,
Adding Machine to Domain Fails
- pauses,
Samba Performance is Very Slow
- PBM,
MIME Types and CUPS Filters
- PCL,
GDI on Windows, PostScript on UNIX,
Windows Drivers, GDI, and EMF,
UNIX Printfile Conversion and GUI Basics,
Printing with Interface Scripts,
Driver Execution on the Server,
Network PostScript RIP
- pdbedit,
Example: Engineering Office,
Account Management Tools,
The pdbedit Tool,
User Account Management,
Listing User and Machine Accounts,
Adding User Accounts,
Deleting Accounts,
Changing User Accounts,
Account Flags Management,
Account Migration,
The Administrator Domain SID,
Samba PDC,
Quick Migration Guide,
Passdb Backends and Authentication,
Steps in Migration Process,
Samba-3 Implementation Choices
- pdb_ldap,
Can I Do This All with LDAP?
- PDC,
Domain Security Mode (User-Level Security),
Example Configuration,
Domain Controller Types,
Security Mode and Master Browsers,
Features and Benefits,
MS Windows NT4-style Domain Control,
Example PDC Configuration,
LDAP Configuration Notes,
What Qualifies a Domain Controller on the Network?,
Backup Domain Controller Configuration,
Example Configuration,
Can Samba Be a Backup Domain Controller to an NT4 PDC?,
MS Windows Workstation/Server Machine Trust Accounts,
Manual Creation of Machine Trust Accounts,
Joining an NT4-type Domain with Samba-3,
Why Is This Better Than security = server?,
Adding Machine to Domain Fails,
Configuring Workgroup Browsing,
Domain Browsing Configuration,
New Account Storage Systems,
Advantages of Encrypted Passwords,
tdbsam,
LDAP Special Attributes for sambaSamAccounts,
Discussion,
Overview,
Domain Member Server or Domain Member Client,
Primary Domain Controller,
Samba as the Trusted Domain,
Samba as the Trusting Domain,
cupsaddsmb with a Samba PDC,
Handling of Foreign SIDs,
Microsoft Remote Procedure Calls,
Pluggable Authentication Modules,
Result Caching,
Introduction,
Join the Samba Server to the PDC Domain,
Starting and Testing the winbindd Daemon,
Remote Management from NoMachine.Com,
New Schema,
Domain Layout,
Getting Mailing List Help,
Corrupt tdb Files
- PDF,
Simple smb.conf Settings for CUPS,
Windows Drivers, GDI, and EMF,
PostScript Printer Description (PPD) Specification,
MIME Types and CUPS Filters,
Prefilters,
Examples for Filtering Chains
- pdf,
MIME Type Conversion Rules
- PDF distilling,
PostScript Printer Description (PPD) Specification
- PDF filter,
Central Print Serving
- pdftops,
MIME Type Conversion Rules,
Examples for Filtering Chains
- pdftosocket,
Examples for Filtering Chains
- PDL,
GDI on Windows, PostScript on UNIX,
PostScript and Ghostscript,
PostScript Printer Description (PPD) Specification
- PDM,
PDM Data Shares
- peer domain,
Configuring Samba NT-Style Domain Trusts
- Peer node,
Static WINS Entries
- per-share access control,
Access Controls on Shares
- performance,
Handling Large Directories,
Objectives
- performance advantage,
Features and Benefits
- performance degradation,
Handling Large Directories
- performance enhancement,
Opportunistic Locking Overview
- performance improvement,
Slow and/or Unreliable Networks
- performance-based,
tdbsam
- performed as root,
Using the “net rpc rights” Utility
- perimeter firewall,
Features and Benefits
- permanent changes,
Samba-3 Implementation Choices
- Permanent name,
Static WINS Entries
- permissions,
Why Can Users Access Other Users' Home Directories?,
Shadow Copy Setup
-
- file/directory ACLs,
Managing UNIX Permissions Using NT Security Dialogs
- share,
Share Definition Access Controls
- share ACLs,
Access Controls on Shares
- UNIX file and directory,
Features and Benefits
- Permissions,
Windows 200x/XP
- permissions and controls,
Features and Benefits
- PGP,
Verifying Samba's PGP Signature
- phasing out NetBIOS,
Discussion
- Photo-CD,
MIME Types and CUPS Filters
- physical locations,
Features and Benefits
- physical network transport layer,
/etc/hosts
- PID,
Attaching to a Running Process
- pid directory,
Multiple Server Hosting
- ping,
Domain Layout,
The Tests
- pipe device,
File and Directory Access Control
- PJL,
Network PostScript RIP,
Windows CUPS PostScript Driver Versus Adobe Driver,
Adobe and CUPS PostScript Drivers for Windows Clients
- PJL-header,
Adobe and CUPS PostScript Drivers for Windows Clients
- plague network users,
TCP/IP Configuration
- plain-text
-
- passwords,
Password Checking
- plaintext,
Backward Compatibility Account Storage Systems
- plaintext authentication,
Backward Compatibility Account Storage Systems
- plaintext password,
The Special Case of Windows 9x/Me,
How Do I Replicate the smbpasswd File?
- plaintext passwords,
Technical Information,
Important Notes About Security
- platforms,
Portability
- PLP,
The [global] Section
- Pluggable Authentication Modules (see PAM)
- PNG,
Ghostscript: The Software RIP for Non-PostScript Printers,
MIME Types and CUPS Filters
- PNM,
MIME Types and CUPS Filters
- point 'n' print,
Installation of Windows Client Drivers,
Run cupsaddsmb (Quiet Mode),
Manual Driver Installation in 15 Steps
- Point'n'Print,
Features and Benefits,
Printing Developments Since Samba-2.2,
Point'n'Print Client Drivers on Samba Servers,
smbclient to Confirm Driver Installation
- point'n'print,
Driver Upload Methods,
The Role of cupsomatic/foomatic,
Installing the PostScript Driver on a Client
- Poledit,
Administration of Windows 200x/XP Policies
- poledit.exe,
Creating and Managing System Policies,
Windows NT4-Style Policy Files,
Administration of Windows 200x/XP Policies
- Policies,
Creating and Managing System Policies,
Managing Account/User Policies
- policies,
Samba-3 Implementation Choices
- policy editor,
Creating and Managing System Policies
- Policy Editor,
Windows NT4-Style Policy Files
- policy file ,
Managing Account/User Policies
- policy files,
Features and Benefits
- policy settings,
The pdbedit Tool
- port 135,
Multiple Interfaces
- Port 135/TCP,
Using a Firewall
- port 137,
Multiple Interfaces,
The Tests
- Port 137/UDP,
Using a Firewall
- port 138,
Multiple Interfaces
- Port 138/UDP,
Using a Firewall
- port 139,
Multiple Interfaces
- Port 139/TCP,
Using a Firewall
- port 445,
Multiple Interfaces
- Port 445/TCP,
Using a Firewall
- ports,
Verifying Configuration with testparm,
Ethereal
- POSIX,
Backup Domain Controller Configuration,
LDAP Directories and Windows Computer Accounts,
Accounts and Groups Management,
Adding or Creating a New Group
- POSIX account,
User Account Management,
UNIX and Windows User Management
- POSIX ACLs,
File and Directory Access Control,
Protecting Directories and Files from Deletion
- POSIX ACLS,
Samba-3 Implementation Choices
- POSIX identity,
Caution Regarding LDAP and Samba
- POSIX locks,
Server Pool Communications
- POSIX semantics,
Server Pool Communications
- POSIX user accounts,
Interdomain Trust Relationships
- posixAccount,
Schema and Relationship to the RFC 2307 posixAccount,
OpenLDAP Configuration
- posixGroup,
OpenLDAP Configuration,
Accounts and Groups Management
- PostScript,
Simple smb.conf Settings for CUPS,
Advanced Intelligent Printing with PostScript Driver Download,
GDI on Windows, PostScript on UNIX,
Windows Drivers, GDI, and EMF,
UNIX Printfile Conversion and GUI Basics,
PostScript and Ghostscript,
PostScript Printer Description (PPD) Specification,
Using Windows-Formatted Vendor PPDs,
MIME Types and CUPS Filters,
Prefilters,
pstops,
PostScript Printer Descriptions for Non-PostScript Printers,
Examples for Filtering Chains,
Driver Execution on the Server,
Network PostScript RIP,
CUPS: A “Magical Stone”?,
PostScript Drivers with No Major Problems, Even in Kernel
Mode,
CUPS “PostScript Driver for Windows NT/200x/XP”
-
- (see also Ghostscript)
- RIP,
PostScript and Ghostscript
- PostScript driver,
Installing Driver Files into [print$]
- PostScript interpreter,
PostScript and Ghostscript
- PostScript Printer Description (see PPD)
- PostScript printers,
Printing from CUPS to Windows-Attached Printers
- potential master browsers,
Forcing Samba to Be the Master
- potential printer,
[print$] Stanza Parameters
- Power Users,
What Rights and Privileges Will Permit Windows Client Administration?
- powerful,
Domain Controller Types
- PPD,
Installing Driver Files into [print$],
PostScript and Ghostscript,
PostScript Printer Description (PPD) Specification,
CUPS Also Uses PPDs for Non-PostScript Printers,
MIME Types and CUPS Filters,
“Raw” Printing,
PostScript Printer Descriptions for Non-PostScript Printers,
PPDs for Non-PS Printers on UNIX,
PPDs for Non-PS Printers on Windows,
CUPS: A “Magical Stone”?,
Installing the PostScript Driver on a Client,
Adobe and CUPS PostScript Drivers for Windows Clients,
Printing from CUPS to Windows-Attached Printers
-
- CUPS (see CUPS-PPD)
- PPD-aware,
PostScript and Ghostscript
- PPDs,
Using Windows-Formatted Vendor PPDs,
The Role of cupsomatic/foomatic,
The Grand Unification Achieved
- PPP,
Using Interface Protection
- precedence,
Forcing Samba to Be the Master
- preferred master,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Domain Control: Example Configuration,
What Is Browsing?,
Configuring Workgroup Browsing,
Domain Browsing Configuration,
Forcing Samba to Be the Master,
Making Samba the Domain Master,
Multiple Virtual Server Hosting,
The Tests
- prefilter,
imagetops and imagetoraster
- prefilters,
Prefilters
- preserve case,
Windows 9x/Me Profile Setup,
Handling Large Directories
- primary domain controller,
Multiple Virtual Server Hosting
- primary group,
Manual Creation of Machine Trust Accounts
- Primary Logon,
Windows 9x/Me Profile Setup
- Primary WINS Server,
WINS Server Configuration
- print,
Verifying Configuration with testparm
-
- queue,
Configuration File Syntax
- spooler,
Configuration File Syntax
- print accounting,
Features and Benefits
- print command,
The [global] Section,
Print Commands,
Default UNIX System Printing Commands,
Custom Print Commands,
Linking smbd with libcups.so,
More Complex CUPS smb.conf Settings,
From Windows Clients to a CUPS/Samba Print Server,
Preconditions,
Manual Configuration
- print commands,
Custom Print Commands
- print configuration,
Technical Introduction,
Verifying Configuration with testparm
- print environment,
Simple Print Configuration
- print filtering,
Technical Introduction
- print job,
Custom Print Commands
- print jobs,
The [global] Section
- print processing,
Technical Introduction
- print queue,
Point'n'Print Client Drivers on Samba Servers,
smbclient to Confirm Driver Installation,
Specific Driver Name Flexibility,
CUPS Backends
- print quota,
Advanced Intelligent Printing with PostScript Driver Download
- print server,
Central Print Serving,
Features and Benefits
- print service,
Features and Benefits
- print spooling,
Microsoft Remote Procedure Calls
- print spooling system,
Overview
- print statistics,
Advanced Intelligent Printing with PostScript Driver Download
- print subsystem,
Technical Introduction,
Print Commands
- print test page,
First Client Driver Installation
- printable,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Central Print Serving,
Simple Print Configuration,
Extended Printing Configuration,
The [printers] Section,
Any [my_printer_name] Section,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- printcap,
Configuration File Syntax,
The [global] Section,
The [printers] Section,
Default UNIX System Printing Commands,
Basic CUPS Support Configuration,
Linking smbd with libcups.so,
More Complex CUPS smb.conf Settings,
Raw Print Serving: Vendor Drivers on Windows Clients,
From Windows Clients to a CUPS/Samba Print Server,
Preconditions
- Printcap,
Basic CUPS Support Configuration
- printcap name,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Central Print Serving,
Extended Printing Configuration,
The [global] Section,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- PrintcapFormat,
Basic CUPS Support Configuration
- printer admin,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Central Print Serving,
ADS Domains,
IDMAP_RID with Winbind,
Description of Privileges,
Extended Printing Configuration,
The [global] Section,
Any [my_printer_name] Section,
Creating the [print$] Share,
[print$] Stanza Parameters,
Add Printer Wizard Driver Installation,
First Client Driver Installation,
Setting Device Modes on New Printers,
Always Make First Client Connection as root or “printer admin”,
Setting Default Print Options for Client Drivers,
Adding New Printers with the Windows NT APW,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb,
Requirements for adddriver and setdriver to Succeed,
Print Options for All Users Can't Be Set on Windows 200x/XP
- printer attributes publishing,
New Features in Samba-3
- printer default permissions,
Printing Developments Since Samba-2.2
- printer driver,
The Obsoleted [printer$] Section,
Creating the [print$] Share,
Simple smb.conf Settings for CUPS
- printer driver data,
Setting Device Modes on New Printers
- printer driver file,
The Obsoleted [printer$] Section
- printer driver files,
smbclient to Confirm Driver Installation
- printer drivers,
Point'n'Print Client Drivers on Samba Servers,
The Grand Unification Achieved
- printer icon,
Check Samba for Driver Recognition
- printer management,
Overview
- printer management system,
Overview
- printer migration,
Overview
- printer monitor,
Samba Performance is Very Slow
- printer objects,
Printing Developments Since Samba-2.2
- Printer Pooling,
Samba and Printer Ports
- printer queue,
Printing Developments Since Samba-2.2
- printer share,
The [global] Section
- printer shares ,
Verifying Configuration with testparm,
The [global] Section
- printer$ share,
The Obsoleted [printer$] Section
- printers,
Configuration File Syntax,
Features and Benefits
- Printers,
The [global] Section
- printers admin,
Description of Privileges
- Printers and Faxes,
Check Samba for Driver Recognition
- printers available,
What Is Browsing?
- printers section,
The [printers] Section
- printing,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Central Print Serving,
Simple Print Configuration,
Rapid Configuration Validation,
Extended Printing Configuration,
The [global] Section,
Default UNIX System Printing Commands,
Custom Print Commands,
Basic CUPS Support Configuration,
Linking smbd with libcups.so,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Raw Print Serving: Vendor Drivers on Windows Clients,
From Windows Clients to a CUPS/Samba Print Server,
Prepare Your smb.conf for cupsaddsmb,
Preconditions,
Manual Configuration,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- printing behavior,
Printing-Related Configuration Parameters
- printing calls,
Printing Developments Since Samba-2.2
- printing now,
Samba Performance is Very Slow
- printing support,
Features and Benefits,
Technical Introduction
- printing system,
Technical Introduction
- printing systems,
Comments Regarding LDAP
- printing-related settings,
Verifying Configuration with testparm
- printing.tdb,
Setting Device Modes on New Printers,
The Printing *.tdb Files
-
- (see also TDB)
- PrintPro (see ESP Print Pro)
- private dir,
Multiple Server Hosting
- private groups,
Warning: User Private Group Problems
- private key,
Securing SWAT through SSL
- private network,
Introduction
- private networks,
Using Host-Based Protection
- private/MACHINE.SID,
Backup Domain Controller Configuration
- private/secrets.tdb,
Backup Domain Controller Configuration
- privilege,
Applicable Only to Versions Earlier than 3.0.11,
Description of Privileges
- privilege management,
Important Administrative Information,
Administering User Rights and Privileges
- privilege model,
Rights Management Capabilities
- privilege-granting applications,
Technical Discussion
- privileged accounts,
Using the “net rpc rights” Utility
- privileges,
Single Sign-On and Domain Security,
Windows 200x/XP Professional Client,
Applicable Only to Versions Earlier than 3.0.11,
Rights Management Capabilities,
Description of Privileges,
Trust Relationship Background,
Printing Developments Since Samba-2.2
- privileges assigned,
Using the “net rpc rights” Utility
- problem report,
Free Support
- problem resolution,
Samba Support
- problematic print,
Technical Introduction
- Process data management,
PDM Data Shares
- professional support,
Free Support
- profile,
Domain Control: Example Configuration,
The Special Case of Windows 9x/Me,
MS Windows NT4-style Domain Control,
New Account Storage Systems,
Technical Information
- profile access rights,
Creating and Managing Group Profiles
- profile acls,
Example: Engineering Office
- profile contents,
Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations
- profile directory,
Windows 9x/Me Profile Setup
- profile migration tool,
Creating and Managing Group Profiles
- profile path,
Example PDC Configuration,
Windows 9x/Me Profile Setup,
Windows NT4 Workstation
- profile sharing,
Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations
- Profile Type,
Disabling Roaming Profile Support
- ProfilePath,
Windows 9x/Me Profile Setup
- profiles,
The Special Case of Windows 9x/Me
- Profiles,
Creating and Managing System Policies
- project,
Free Support
- promiscuous mode,
The Windows Network Monitor
- promote,
Domain Controller Types
- promoted,
MS Windows NT4-style Domain Control
- propagate,
Features and Benefits
- Properties,
MS Windows Me,
Domain Logon Configuration: Windows 9x/Me
- protect directories,
Protecting Directories and Files from Deletion
- protect files,
Protecting Directories and Files from Deletion
- protection against attackers,
Using IPC$ Share-Based Denials
- protocol stack settings,
MS Windows 2000
- provided services,
Samba Support
- provisioned,
Single Sign-On and Domain Security
- pstops,
Prefilters,
pstops,
Examples for Filtering Chains,
Adobe and CUPS PostScript Drivers for Windows Clients
- pstoraster,
pstoraster,
cupsomatic/foomatic-rip Versus Native CUPS Printing,
Adobe and CUPS PostScript Drivers for Windows Clients
- public,
Simple Print Configuration,
Extended Printing Configuration,
The [printers] Section,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb
- publish printers,
Printing Developments Since Samba-2.2
- publishing printers,
Rapid Configuration Validation
- punching,
pstops
- purchase support,
Free Support
- put,
The Tests
- pvcreate,
Shadow Copy Setup
R
- RAID,
BackupPC
- random machine account password,
Joining an NT4-type Domain with Samba-3
- range,
UNIX and Windows User Management
- range of hosts,
Using Host-Based Protection
- RAP,
UNIX and Windows Group Management
- raster,
Prefilters,
Foomatic Database-Generated PPDs
- raster driver,
The CUPS Filtering Architecture
- raster drivers,
pstoraster
- raster image processor (see RIP)
- raster images,
UNIX Printfile Conversion and GUI Basics
- rasterization,
pstoraster,
cupsomatic/foomatic-rip Versus Native CUPS Printing
- rastertoalps,
rasterto [printers specific]
- rastertobj,
rasterto [printers specific]
- rastertoepson,
rasterto [printers specific],
Examples for Filtering Chains
- rastertoescp,
rasterto [printers specific]
- rastertohp,
rasterto [printers specific]
- rastertopcl,
rasterto [printers specific]
- rastertoprinter,
rasterto [printers specific]
- rastertosomething,
cupsomatic/foomatic-rip Versus Native CUPS Printing
- rastertoturboprint,
rasterto [printers specific]
- raw mode,
application/octet-stream Printing
- raw print,
cupsaddsmb Flowchart
- raw printers,
Overview
- raw printing,
Anonymous Print Server,
Central Print Serving,
Raw Print Serving: Vendor Drivers on Windows Clients,
Explicitly Enable “raw” Printing for application/octet-stream
- raw SMB,
Features and Benefits
- raw SMB over TCP/IP,
TCP/IP without NetBIOS
- rawprinter,
“Raw” Printing
- rcp,
Rsync
- rdesktop,
Remote Management from NoMachine.Com
- rdesktop/RDP,
Remote Management from NoMachine.Com
- read,
File and Directory Access Control
- read directory into memory,
Handling Large Directories
- read list,
User- and Group-Based Controls
- read only,
Example Configuration,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
Domain Control: Example Configuration,
Managing Nest Groups on Workstations from the Samba Server,
Miscellaneous Controls,
Extended Printing Configuration,
The [printers] Section,
Creating the [print$] Share,
[print$] Stanza Parameters,
Prepare Your smb.conf for cupsaddsmb,
fake_perms,
Handling Large Directories,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting,
Assumptions,
Windows 2000 Service Pack 2
-
- server,
Anonymous Read-Only Document Server
- read raw,
Read Raw
- read size,
Read Size
- Read-ahead,
Opportunistic Locking Overview
- read-only,
Features and Benefits,
Reference Documentation Server
- read-only access,
Backup Domain Controller,
Multiple Virtual Server Personalities
- read-only files,
Features and Benefits
- read-write access,
The Obsoleted [printer$] Section
- realm,
ADS Security Mode (User-Level Security),
Example Configuration,
NetBIOS Over TCP/IP Disabled,
Configure smb.conf,
Configure /etc/krb5.conf,
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- rebooted,
Joining a Domain: Windows 2000/XP Professional,
Configuring Workgroup Browsing
- rebooting server,
Description of Privileges
- recompiling,
Multiple Server Hosting
- reconfiguration,
MS Windows NT4-style Domain Control
- record locking,
Discussion
- recycle,
recycle
- recycle bin,
Discussion
- recycle directory,
recycle
- recycle:exclude,
recycle
- recycle:exclude_dir,
recycle
- recycle:keeptree,
recycle
- recycle:maxsize,
recycle
- recycle:noversions,
recycle
- recycle:repository,
recycle
- recycle:touch,
recycle
- recycle:versions,
recycle
- Red Hat Cluster Manager,
High-Availability Server Products
- Red Hat Linux,
LDAP Configuration Notes,
On-the-Fly Creation of Machine Trust Accounts,
Warning: User Private Group Problems
- redirect,
Example Configuration
- redirection,
What Winbind Provides
- redirector,
Opportunistic Locking Overview
- redundancy,
NetBIOS over TCP/IP
- reference documents,
Reference Documentation Server
- refusing connection,
Using Interface Protection
- regedit.exe,
MS Windows 9x/Me
- regedt32,
MS Windows NT4 Workstation
- regedt32.exe,
Windows NT4/200x
- register driver files,
Running rpcclient with adddriver
- register NetBIOS names,
How Browsing Functions
- registered,
WINS: The Windows Internetworking Name Server,
Check Samba for Driver Recognition
- registers,
Domain Browsing Configuration
- registry,
Domain Controller Types,
Technical Information,
Features and Benefits,
Creating and Managing System Policies,
Windows 9x/ME Policies,
MS Windows 200x/XP Professional Policies,
MS Windows 9x/Me
- registry change,
Important Notes About Security
- registry keys,
Default Profile for Windows Users
- registry settings,
Managing Account/User Policies
- regulations,
The pdbedit Tool
- rejoin,
Managing Security Identifiers (SIDS)
- relationship password,
Samba as the Trusted Domain
- relative identifier,
smbpasswd: Encrypted Password Database (see RID)
- Relative Identifier (see RID)
- reliability,
Features and Benefits,
Objectives
- Remote Access Dial-In User Service (see RADIUS)
- remote announce,
NetBIOS over TCP/IP,
How Browsing Functions,
Use of the Remote Announce Parameter,
Browsing Support in Samba,
Cross-Subnet Browsing
- remote browse sync,
NetBIOS over TCP/IP,
How Browsing Functions,
Use of the Remote Browse Sync Parameter,
Cross-Subnet Browsing
- remote desktop capabilities,
Remote Management from NoMachine.Com
- remote desktop management,
Remote Desktop Management
- remote domain,
Creating an NT4 Domain Trust,
Completing an NT4 Domain Trust,
Samba as the Trusted Domain
- remote login,
Remote Management from NoMachine.Com
- remote management,
Remote and Local Management: The Net Command,
Microsoft Remote Procedure Calls
- Remote Procedure Call (see RPC)
- Remote Procedure Call System Service (see RPCSS)
- remote profile,
Windows 9x/Me Profile Setup
- remote segment,
Use of the Remote Browse Sync Parameter,
Domain Layout
- Remote X,
Remote Management from NoMachine.Com
- Remote X protocol,
Remote Management from NoMachine.Com
- remote-update protocol,
Rsync
- rename,
Managing Directories
- render,
Raw Print Serving: Vendor Drivers on Windows Clients
- rendering,
cupsomatic/foomatic-rip Versus Native CUPS Printing
- repeated intervals,
NetBIOS over TCP/IP
- replicate,
Backup Domain Controller Configuration,
smbpasswd: Encrypted Password Database
- replicated,
Features and Benefits,
Features and Benefits,
Active Directory Domain Control,
Backup Domain Controller Configuration,
MS Windows 200x/XP Professional Policies
- replicated SYSVOL,
MS Windows 200x/XP Professional Policies
- replication,
Features and Benefits,
LDAP Configuration Notes
-
- browse lists,
Cross-Subnet Browsing
- SAM,
Domain Controller Types,
Features and Benefits,
MS Windows NT4-style Domain Control,
Backup Domain Controller Configuration,
Can Samba Be a Backup Domain Controller to an NT4 PDC?,
How Do I Replicate the smbpasswd File?
- WINS,
NetBIOS over TCP/IP,
WINS Server Configuration,
WINS Replication
- replication protocols,
WINS Server Configuration
- repository,
Domain Member Server or Domain Member Client
- requesting payment,
Free Support
- required,
Anatomy of /etc/pam.d Entries
- requisite,
Anatomy of /etc/pam.d Entries
- research,
Discussion of Backup Solutions
- resizing,
Shadow Copy Setup
- resolution,
The Role of cupsomatic/foomatic
- resolution of NetBIOS names,
Network Browsing
- resolve NetBIOS names,
Making Samba the Domain Master
- resolver functions,
Name Service Switch
- resource failover,
High-Availability Server Products
- resource kit,
Administration of Windows 200x/XP Policies,
Windows NT4 Profile Management Tools
- resource-based exclusion,
Features and Benefits
- response,
IDMAP_RID with Winbind
- restrict DNS,
Name Resolution Order
- reviewers,
Advanced Configuration Techniques
- revoke privileges,
Using the “net rpc rights” Utility
- RFC 1001,
Example Configuration
- RFC 1002,
Example Configuration
- RFC 1179,
The [global] Section
- RFC 2307,
Mapping Common UIDs/GIDs on Distributed Machines
- RFC 2307.,
Schema and Relationship to the RFC 2307 posixAccount
- RFC 2830,
Introduction
- rfc2307bis,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- RFC2830,
LDAP Configuration Notes
- RFCs,
Analyzing and Solving Samba Problems
- rich database backend,
New Account Storage Systems
- rich directory backend,
New Account Storage Systems
- RID,
Features and Benefits,
Manual Creation of Machine Trust Accounts,
Discussion,
Default Users, Groups, and Relative Identifiers,
Domain Member Server or Domain Member Client,
Primary Domain Controller,
IDMAP_RID with Winbind,
The Administrator Domain SID,
User and Group ID Allocation,
New Schema
- RID 500,
The Administrator Domain SID
- RID base,
Primary Domain Controller
- right to join domain,
Description of Privileges
- rights,
Single Sign-On and Domain Security,
The Special Case of Windows 9x/Me,
Possible Errors,
Rights Management Capabilities
- rights and privilege,
Administering User Rights and Privileges
- rights and privileges,
Important Administrative Information,
The Administrator Domain SID
- rights assigned,
Rights Management Capabilities,
Using the “net rpc rights” Utility
- RIP,
PostScript Printer Descriptions for Non-PostScript Printers
- rlogind,
Anatomy of /etc/pam.d Entries
- Roaming Profile,
fake_perms
- roaming profiles,
Preparing for Domain Control,
Features and Benefits,
Disabling Roaming Profile Support,
Windows 9x/Me Profile Setup
- rogue machine,
Flushing the Samba NetBIOS Name Cache
- rogue user,
MS Windows Workstation/Server Machine Trust Accounts
- root,
Windows 200x/XP Professional Client,
Joining a Domain: Windows 2000/XP Professional,
User Rights and Privileges
- root account,
User Rights and Privileges,
The Administrator Domain SID
- root preexec,
Managing Nest Groups on Workstations from the Samba Server,
Logon Scripts
- root user,
Using the “net rpc rights” Utility
- rotate,
UNIX Printfile Conversion and GUI Basics
- RPC,
Why Is This Better Than security = server?,
Features and Benefits,
Join the Samba Server to the PDC Domain,
Roaming Profiles
- RPC calls,
Conclusion,
The Front-End Challenge
- RPC modules,
New Features in Samba-3
- rpc.lockd,
Discussion
- rpcclient,
Remote and Local Management: The Net Command,
Identifying Driver Files,
Specific Driver Name Flexibility,
Troubleshooting Revisited,
Samba PDC
-
- adddriver,
Run cupsaddsmb with Verbose Output,
Understanding cupsaddsmb,
Installing PostScript Driver Files Manually Using rpcclient,
Understanding the rpcclient man Page,
Requirements for adddriver and setdriver to Succeed,
Manual Driver Installation in 15 Steps
- enumdrivers,
Installing PostScript Driver Files Manually Using rpcclient,
Manual Driver Installation in 15 Steps
- enumports,
Installing PostScript Driver Files Manually Using rpcclient
- enumprinters,
Installing PostScript Driver Files Manually Using rpcclient,
Requirements for adddriver and setdriver to Succeed,
Manual Driver Installation in 15 Steps,
Troubleshooting Revisited
- getdriver,
Producing an Example by Querying a Windows Box,
Manual Driver Installation in 15 Steps
- getprinter,
Producing an Example by Querying a Windows Box,
Manual Driver Installation in 15 Steps,
Troubleshooting Revisited
- setdriver,
Caveats to Be Considered,
Run cupsaddsmb with Verbose Output,
Understanding cupsaddsmb,
Installing PostScript Driver Files Manually Using rpcclient,
Requirements for adddriver and setdriver to Succeed,
Manual Driver Installation in 15 Steps
- rsh,
BackupPC
- rsync,
Backup Domain Controller Configuration,
How Do I Replicate the smbpasswd File?,
Mapping Common UIDs/GIDs on Distributed Machines,
smbpasswd: Encrypted Password Database,
BackupPC,
Rsync,
Accessing the Samba Sources via rsync and ftp
- rsyncd,
BackupPC
- runas,
Always Make First Client Connection as root or “printer admin”
- rundll32,
Additional Client Driver Installation,
Setting Default Print Options for Client Drivers,
Manual Driver Installation in 15 Steps,
Adding Printers without User Intervention
S
- SAM,
Features and Benefits,
Domain Controller Types,
MS Windows NT4-style Domain Control,
Machine Accounts Keep Expiring,
Can Samba Be a Backup Domain Controller to an NT4 PDC?,
How Do I Replicate the smbpasswd File?,
Features and Benefits,
Backward Compatibility Account Storage Systems,
Mapping User Identifiers between MS Windows and UNIX,
Result Caching
-
- delta file,
MS Windows NT4-style Domain Control
- replication,
Domain Controller Types,
MS Windows NT4-style Domain Control
- SAM backend,
Mapping Common UIDs/GIDs on Distributed Machines,
Comments Regarding LDAP
-
- LDAP,
Features and Benefits
- ldapsam,
Features and Benefits,
New Account Storage Systems,
Mapping Common UIDs/GIDs on Distributed Machines,
ldapsam
- ldapsam_compat,
Features and Benefits
- non-LDAP,
Features and Benefits
- smbpasswd,
Features and Benefits,
smbpasswd: Encrypted Password Database
- tdbsam,
Features and Benefits,
New Account Storage Systems,
tdbsam
- Samba 1.9.17,
WINS Server Configuration
- Samba account,
Manual Creation of Machine Trust Accounts
- Samba administrator,
Introduction
- Samba backend database,
Adding Machine to Domain Fails
- Samba daemons,
Joining an NT4-type Domain with Samba-3
- Samba differences,
Upgrading from Samba-2.x to Samba-3.0.20
- Samba mailing lists,
Features and Benefits
- Samba private directory,
Create the Computer Account
- Samba SAM,
Mapping User Identifiers between MS Windows and UNIX
- Samba SAM account,
Adding Machine to Domain Fails
- Samba SAM account flags,
Account Flags Management
- Samba schema,
New Account Storage Systems
- Samba security,
Features and Benefits
- Samba-2.2.x LDAP schema,
Backward Compatibility Account Storage Systems
- Samba-3-compatible LDAP backend,
Quick Migration Guide
- Samba-PDC-LDAP-HOWTO,
ldapsam
- samba-to-samba trusts,
Interdomain Trust Relationships
- samba-vscan,
vscan
- samba.schema,
Schema and Relationship to the RFC 2307 posixAccount,
OpenLDAP Configuration,
New Schema
- sambaDomain,
New Schema
- sambaGroupMapping,
New Schema
- sambaHomeDrive,
LDAP Special Attributes for sambaSamAccounts
- sambaHomePath,
LDAP Special Attributes for sambaSamAccounts
- sambaIdmapEntry,
New Schema
- sambaLogonScript,
LDAP Special Attributes for sambaSamAccounts
- SambaNTPassword,
Security and sambaSamAccount
- sambaProfilePath,
LDAP Special Attributes for sambaSamAccounts
- SambaSAMAccount,
Backup Domain Controller Configuration,
Account Management Tools,
Adding User Accounts,
Deleting Accounts,
Changing User Accounts,
tdbsam
- sambaSamAccount,
LDAP Directories and Windows Computer Accounts,
Schema and Relationship to the RFC 2307 posixAccount,
OpenLDAP Configuration,
Accounts and Groups Management,
LDAP Special Attributes for sambaSamAccounts,
New Schema
- sambaSAMAccount,
Security and sambaSamAccount
- sambaUNIXIdPool,
New Schema
- SambaXP conference,
Technical Discussion
- samdb interface,
smbpasswd: Encrypted Password Database
- same domain/workgroup,
Multiple Virtual Server Hosting
- Sarbanes-Oxley,
The pdbedit Tool
- scalability,
Features and Benefits,
Features and Benefits,
Account Information Databases,
tdbsam,
Features and Benefits
- scalable,
Comments Regarding LDAP
- scalable backend,
Features and Benefits
- scalable coherent interface (see SCI)
- scale,
UNIX Printfile Conversion and GUI Basics
- scanner module,
Discussion
- schannel,
Cannot Log onto Domain Member Workstation After Joining Domain
- schema,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- schema file,
New Account Storage Systems
- scp,
Rsync
- script,
Adding Machine to Domain Fails
- scripted control,
Remote and Local Management: The Net Command
- scripts,
Browsing Support in Samba,
Caution Regarding LDAP and Samba
- SCSI,
High-Availability Server Products
- SeAddUsersPrivilege,
Administering User Rights and Privileges,
Rights Management Capabilities,
Description of Privileges
- SeAssignPrimaryTokenPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeAuditPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeBackupPrivilege,
Administering User Rights and Privileges,
Privileges Suppored by Windows 2000 Domain Controllers
- SeChangeNotifyPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- Seclib,
Viewing File Ownership
- secondary controller,
Domain Layout
- SeCreateGlobalPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeCreatePagefilePrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeCreatePermanentPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeCreateTokenPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- secret,
Important Notes About Security
- secrets.tdb,
Backup Domain Controller Configuration,
Sharing User ID Mappings between Samba Domain Members,
Initialize the LDAP Database,
The Printing *.tdb Files
-
- (see also TDB)
- section name,
Configuration File Syntax
- secure,
Features and Benefits
- secure access,
Single Sign-On and Domain Security
- secure authentication,
User Rights and Privileges
- secure communications,
Security and sambaSamAccount
- secured networks,
Introduction
- security,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Anonymous Print Server,
Example Configuration,
Samba Security Modes,
Example Configuration,
Example Configuration,
Domain Security Mode (User-Level Security),
Example Configuration,
Example Configuration,
Server Security (User Level Security),
Example Configuration,
What Makes Samba a Server?,
What Makes Samba a Domain Controller?,
What Makes Samba a Domain Member?,
Constantly Losing Connections to Password Server,
Preparing for Domain Control,
Domain Control: Example Configuration,
Security Mode and Master Browsers,
Joining an NT4-type Domain with Samba-3,
Why Is This Better Than security = server?,
Configure smb.conf,
Reference Documentation Server,
Central Print Serving,
Configuring Samba,
NT4-Style Domains (Includes Samba Domains),
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension,
Introduction,
Run cupsaddsmb (Quiet Mode),
“cupsaddsmb” Keeps Asking for Root Password in Never-ending Loop,
Changing the Default Profile,
Multiple Virtual Server Personalities,
Passdb Backends and Authentication,
The Tests,
Configuring Windows for Workgroups Password Handling
-
- controllers,
Domain Security Mode (User-Level Security)
- modes,
Features and Benefits
- settings,
Example Configuration
- security = user,
Joining an NT4-type Domain with Samba-3
- security account,
Overview
- Security Account Manager (see SAM)
- Security Assertion Markup Language (see SAML)
- security context,
Domain Member Server
- security contexts,
Trust Relationship Background
- security credentials,
Backup Domain Controller,
Native MS Windows NT4 Trusts Configuration
- security domain,
Trust Relationship Background
- security domains,
Trust Relationship Background
- security flaw,
Why Can Users Access Other Users' Home Directories?
- security hole,
Using IPC$ Share-Based Denials
- security identifier,
Managing Security Identifiers (SIDS) (see SID)
- security level,
Server Security (User Level Security)
- security levels,
Samba Security Modes
- security mask,
File and Directory Permissions-Based Controls,
Interaction with the Standard Samba “create mask” Parameters
- security mode,
Server Types and Security Modes,
Security Mode and Master Browsers
- Security Mode,
Samba Security Modes
- security modes,
Samba Security Modes
- security name-space,
Identity Mapping (IDMAP)
- security policies,
Why Can Users Access Other Users' Home Directories?
- security settings,
New Features in Samba-3
- security structure,
Trust Relationship Background
- security vulnerability,
Upgrading Samba
- security-aware,
application/octet-stream Printing
- SeDebugPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeDiskOperatorPrivilege,
Administering User Rights and Privileges,
Rights Management Capabilities,
Description of Privileges
- SeEnableDelegationPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeImpersonatePrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeIncreaseBasePriorityPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeIncreaseQuotaPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeLoadDriverPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeLockMemoryPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeMachineAccountPrivilege,
Administering User Rights and Privileges,
Rights Management Capabilities,
Description of Privileges,
Privileges Suppored by Windows 2000 Domain Controllers
- SeManageVolumePrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- separate instances,
Multiple Server Hosting
- separate servers,
Advanced Configuration Techniques
- separate shares,
The [global] Section
- separate workgroups,
Multiple Virtual Server Personalities
- SePrintOperatorPrivilege,
Administering User Rights and Privileges,
Rights Management Capabilities,
Description of Privileges
- SeProfileSingleProcessPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeRemoteShutdownPrivilege,
Administering User Rights and Privileges,
Rights Management Capabilities,
Description of Privileges,
Privileges Suppored by Windows 2000 Domain Controllers
- SeRestorePrivilege,
Administering User Rights and Privileges,
Privileges Suppored by Windows 2000 Domain Controllers
- server failure,
Why Is This So Hard?
- Server Manager,
MS Windows Workstation/Server Machine Trust Accounts,
Manual Creation of Machine Trust Accounts,
Managing Domain Machine Accounts using NT4 Server Manager,
Remote Server Administration
- Server Manager for Domains,
Managing Domain Machine Accounts using NT4 Server Manager
- Server Message Block (see SMB)
- server pool,
The Distributed File System Challenge,
Restrictive Constraints on Distributed File Systems
- server string,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind
- Server Type,
Server Types
-
- Domain Controller,
Domain Controller
- Domain Member,
Domain Member Server,
Example Configuration,
Features and Benefits
- Stand-alone,
Standalone Server
- server type,
Overview
-
- domain member,
Example Configuration
- Server Types,
Samba Server Deployment Types and IDMAP
- server-mode,
What Makes Samba a Domain Controller?
- service name,
Example Configuration
- service-level,
Printing-Related Configuration Parameters,
The [global] Section
- services provided,
Samba Support
- SeSecurityPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeShutdownPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- session,
Anatomy of /etc/pam.d Entries
- session services,
Features and Benefits
- session setup,
User Level Security,
Server Security (User Level Security)
- sessionid.tdb,
The Printing *.tdb Files
-
- (see also TDB)
- SessionSetupAndX,
Domain Member Server or Domain Member Client
- SeSyncAgentPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeSystemEnvironmentPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeSystemProfilePrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- SeSystemtimePrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- set a password,
Central Print Serving
- set group id (see SGID)
- set primary group script,
The Primary Domain Controller
- set printer properties,
The [global] Section
- set user id (see SUID)
- SeTakeOwnershipPrivilege,
Administering User Rights and Privileges,
Rights Management Capabilities,
Description of Privileges,
Privileges Suppored by Windows 2000 Domain Controllers
- SeTcbPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- setdriver,
A Check of the rpcclient man Page,
Requirements for adddriver and setdriver to Succeed
- SetPrinter(),
A Check of the rpcclient man Page
- setting up directories,
File and Directory Access Control
- SeUndockPrivilege,
Privileges Suppored by Windows 2000 Domain Controllers
- severely impaired,
TCP/IP without NetBIOS
- SFU,
IDMAP, Active Directory, and MS Services for UNIX 3.5
- SFU 3.5,
Primary Domain Controller
- SGI-RGB,
MIME Types and CUPS Filters
- SGID,
File and Directory Access Control
- shadow,
LDAP Directories and Windows Computer Accounts
- shadow copies,
Shadow Copy Setup
- shadow password file,
Joining an NT4-type Domain with Samba-3
- shadow utilities,
Features and Benefits
- shadow_copy,
shadow_copy,
Shadow Copy Setup
- shadow_copy module,
shadow_copy
- share,
Configuration File Syntax,
File, Directory, and Share Access Controls,
The [global] Section
- share access,
Access Controls on Shares
- share ACLs,
Samba-3 Implementation Choices
- share management,
Overview
- share modes,
The Distributed File System Challenge
- share permissions,
Windows NT4 Workstation/Server
- Share Permissions,
Windows 200x/XP
- share settings,
Features and Benefits
- share stanza controls,
Samba-3 Implementation Choices
- share-level,
Samba Security Modes,
Share-Level Security,
Features and Benefits
- share-level ACLs,
Applicable Only to Versions Earlier than 3.0.11
- share-mode,
Features and Benefits
- share-mode security,
Security Mode and Master Browsers
- share-mode server,
Features and Benefits
- shared secret,
MS Windows Workstation/Server Machine Trust Accounts
- shares,
What Is Browsing?
- shares and files,
Requirements
- share_info.tdb,
Access Controls on Shares,
The Printing *.tdb Files
-
- (see also TDB)
- Sharing,
Windows 200x/XP
- shell scripts,
Print Commands
- shift,
UNIX Printfile Conversion and GUI Basics
- Shift_JIS,
Japanese Charsets,
Basic Parameter Setting
- short preserve case,
Miscellaneous Controls,
Windows 9x/Me Profile Setup,
Handling Large Directories
- shortcuts,
TCP/IP Configuration,
Windows 9x/Me Profile Setup
- Shortcuts,
MS Windows NTFS Comparison with UNIX File Systems
- show add printer wizard,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Extended Printing Configuration,
The [global] Section,
Adding New Printers with the Windows NT APW,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- show-stopper-type,
Planning and Getting Started
- SID,
Features and Benefits,
The System Cannot Log You On (C000019B),
Backup Domain Controller Configuration,
Example Configuration,
Why Is This Better Than security = server?,
Sharing User ID Mappings between Samba Domain Members,
Technical Information,
Mapping User Identifiers between MS Windows and UNIX,
LDAP Directories and Windows Computer Accounts,
Group Mapping: MS Windows and UNIX,
Features and Benefits,
Managing Security Identifiers (SIDS),
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
Primary Domain Controller,
IDMAP_RID with Winbind,
Rights Management Capabilities,
The Administrator Domain SID,
Features and Benefits,
Handling of Foreign SIDs,
Side Bar Notes,
Get SID,
Multiple Server Hosting,
New Features in Samba-3,
Profile Migration/Creation
- SID management,
Overview
- SID-to-GID,
Features and Benefits
- SIDs,
Samba-3 Implementation Choices
- signing,
Cannot Log onto Domain Member Workstation After Joining Domain
- simple access controls,
Server Share and Directory Layout
- simple configuration,
Example Configuration
- simple guide,
Upgrading from Samba-2.x to Samba-3.0.20
- Simple Object Access Protocol (see SOAP)
- simple operation,
New Account Storage Systems
- simple print server,
Central Print Serving
- simple printing,
Simple Print Configuration
- simplest
-
- configuration,
Example Configuration
- simplicity,
Features and Benefits
- Simplicity is king,
Server Share and Directory Layout
- single DHCP server,
MS Windows Me
- single repository,
Account Information Databases
- single server,
The Front-End Challenge
- single sign-on,
Features and Benefits (see SSO)
- Single Sign-On,
Caveats to Be Considered
- single-byte charsets,
What Are Charsets and Unicode?
- single-logon,
The Special Case of Windows 9x/Me
- single-sign-on,
Objectives
- single-user mode,
Requirements
- slapadd,
Initialize the LDAP Database
- slapd,
OpenLDAP Configuration
- slapd.conf,
OpenLDAP Configuration,
Security and sambaSamAccount
- slapd.pem,
LDAP Configuration Notes
- slappasswd,
Initialize the LDAP Database
- slave servers,
Domain Layout
- slow browsing,
Browsing of Shares and Directories is Very Slow
- slow network,
Samba Performance Problem Due to Changing Linux Kernel
- slow performance,
Samba Performance is Very Slow
- smart printers,
Overview
- SMB,
Server Security (User Level Security),
I Can't Join a Windows 2003 PDC,
Background,
Features and Benefits,
NetBIOS over TCP/IP,
Technical Overview of Browsing,
Using Interface Protection,
Printing Developments Since Samba-2.2,
Name Resolution as Used within MS Windows Networking,
BackupPC,
The Front-End Challenge,
Server Pool Communications,
Analyzing and Solving Samba Problems
- SMB encryption,
Advantages of Encrypted Passwords
- SMB locks,
Server Pool Communications
- SMB name,
Name Resolution as Used within MS Windows Networking
- SMB networking,
Diagnostics Tools
- SMB password,
The smbpasswd Tool
- SMB Password,
Features and Benefits
- SMB password encryption,
Important Notes About Security
- smb ports,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- SMB printers,
Administrator Cannot Install Printers for All Local Users
- SMB requests,
Demultiplexing SMB Requests
- SMB semantics,
The Distributed File System Challenge
- SMB server,
Advantages of Encrypted Passwords
- SMB Server,
Features and Benefits
- SMB services,
Restrictive Constraints on Distributed File Systems
- SMB signing,
I Can't Join a Windows 2003 PDC,
New Features in Samba-3
- SMB state information,
Demultiplexing SMB Requests
- SMB-based messaging,
Discussion
- smb-cdserver.conf,
Multiple Virtual Server Personalities
- smb.conf,
Multiple Virtual Server Personalities
- SMB/CIFS,
What Qualifies a Domain Controller on the Network?,
I Can't Join a Windows 2003 PDC,
Important Notes About Security,
What Are Charsets and Unicode?
- SMB/CIFS server,
Password Backends
- smbclient,
Testing with smbclient,
Installing Driver Files into [print$],
smbclient to Confirm Driver Installation,
BackupPC,
The Tests,
Debugging with Samba Itself
- smbd,
Starting Samba,
Example Configuration,
Test Your Config File with testparm,
Secure Read-Write File and Print Server,
Example Configuration,
smbpasswd: Encrypted Password Database,
Schema and Relationship to the RFC 2307 posixAccount,
Configuring Samba,
Domain Member Server or Domain Member Client,
NT4-Style Domains (Includes Samba Domains),
Description of Privileges,
Verifying Configuration with testparm,
Rapid Configuration Validation,
extd_audit,
Features and Benefits,
Testing Things Out,
Join the Samba Server to the PDC Domain,
Linux,
Solaris,
Server Pool Communications,
Handling Large Directories,
Multiple Server Hosting,
Multiple Virtual Server Personalities,
Debugging with Samba Itself
- smbgroupedit,
Remote and Local Management: The Net Command
- smbgrpadd.sh,
Sample smb.conf Add Group Script
- smbHome,
LDAP Special Attributes for sambaSamAccounts
- smbldap-groupadd,
Adding or Creating a New Group
- smbldap-tools,
ldapsam
- smbpasswd,
Example Configuration,
Domain Control: Example Configuration,
Backup Domain Controller Configuration,
How Do I Replicate the smbpasswd File?,
MS Windows Workstation/Server Machine Trust Accounts,
Configure smb.conf,
Sharing User ID Mappings between Samba Domain Members,
Account Information Databases,
Backward Compatibility Account Storage Systems,
Account Management Tools,
The smbpasswd Tool,
The pdbedit Tool,
User Account Management,
Account Migration,
smbpasswd: Encrypted Password Database,
ldapsam,
Schema and Relationship to the RFC 2307 posixAccount,
Initialize the LDAP Database,
Domain Member Server or Domain Member Client,
Samba as the Trusted Domain,
Samba PDC,
Passdb Backends and Authentication,
New Schema
- smbpasswd format,
Listing User and Machine Accounts
- smbpasswd plaintext database,
smbpasswd: Encrypted Password Database
- SMBsessetupX,
The Special Case of Windows 9x/Me
- smbspool,
Printing from CUPS to Windows-Attached Printers
- smbstatus,
Avoid Being Connected to the Samba Server as the Wrong User,
Attaching to a Running Process
- SMBtconX,
The Special Case of Windows 9x/Me
- smbusers,
User-Based Protection
- SMS,
The Windows Network Monitor
- Snapshots,
Shadow Copy Setup
- sniffer,
The Special Case of Windows 9x/Me,
Diagnostics Tools
- socket,
Multiple Server Hosting
- socket address,
Multiple Server Hosting
- socket options,
Socket Options
- SOFTQ printing system,
The [global] Section
- Solaris,
Mapping Common UIDs/GIDs on Distributed Machines,
Configure Winbind and PAM,
Features and Benefits,
Basic Parameter Setting
- Solaris 9,
Solaris
- source code,
Example Configuration
- space character,
Adding Groups Fails
- special account,
User Rights and Privileges,
Samba as the Trusted Domain
- special section,
[print$] Stanza Parameters
- special sections,
The [global] Section
- special stanza,
[print$] Stanza Parameters
- specific restrictions,
Access Controls on Shares
- Specify an IP address,
MS Windows Me
- spinning process,
Attaching to a Running Process
- spool,
Verifying Configuration with testparm
-
- directory,
Configuration File Syntax
- spool files,
Custom Print Commands
- spooled file,
Technical Introduction
- spooler.,
Configuration File Syntax
- spooling,
Custom Print Commands,
Central Spooling vs. “Peer-to-Peer” Printing
-
- central,
Central Spooling vs. “Peer-to-Peer” Printing
- peer-to-peer,
Central Spooling vs. “Peer-to-Peer” Printing
- spooling path,
Verifying Configuration with testparm
- spooling-only,
Raw Print Serving: Vendor Drivers on Windows Clients
- SPOOLSS,
Printing Developments Since Samba-2.2
- SQUID,
Single Sign-On and Domain Security
- SRV records,
Configure /etc/krb5.conf,
DNS and Active Directory
- SRV RR,
Background Information
- SrvMgr.exe,
Managing Domain Machine Accounts using NT4 Server Manager
- srvmgr.exe,
Managing Domain Machine Accounts using NT4 Server Manager
- SRVTOOLS.EXE,
Managing Domain Machine Accounts using NT4 Server Manager,
Remote Server Administration
- ssh,
Backup Domain Controller Configuration,
How Do I Replicate the smbpasswd File?,
smbpasswd: Encrypted Password Database,
BackupPC
- SSH,
smbclient to Confirm Driver Installation
- SSL,
Securing SWAT through SSL
- SSO,
Single Sign-On and Domain Security,
Features and Benefits,
Comments Regarding LDAP
- stability,
Objectives
- stack trace,
Internal Errors
- stand-alone server,
Standalone Samba Server
- standalone,
Server Types,
Preparing for Domain Control,
Overview,
Domain Member Server or Domain Member Client
- standalone filter,
pstoraster
- standalone server,
Joining an NT4-type Domain with Samba-3,
Standalone Servers,
Features and Benefits,
Background,
Adding User Accounts,
Features and Benefits,
Domain Layout
- standard confirmation,
Creating an NT4 Domain Trust
- stanza,
Configuration File Syntax,
Handling Large Directories
- stapling,
pstops
- StartDocPrinter,
Printing Developments Since Samba-2.2
- starting samba
-
- nmbd,
Starting Samba,
Secure Read-Write File and Print Server,
Example Configuration
- smbd,
Starting Samba,
Secure Read-Write File and Print Server,
Example Configuration
- winbindd,
Starting Samba,
Example Configuration,
Features and Benefits
- startsmb,
Alternative: Starting smbd as a Daemon
- StartTLS,
Security and sambaSamAccount
- startup
-
- process,
Starting Samba
- startup script,
Starting and Testing the winbindd Daemon
- state,
Why Is This So Hard?
- state information,
Why Is This So Hard?
- state of knowledge,
Features and Benefits
- static WINS entries,
Static WINS Entries
- status32 codes,
New Features in Samba-3
- sticky bit,
File and Directory Access Control,
Server Share and Directory Layout
- storage mechanism,
Account Management Tools
- storage methods,
The smbpasswd Tool
- stphoto2.ppd,
Examples for Filtering Chains
- strange delete semantics,
Handling Large Directories
- strict locking,
Discussion
- stripped of comments,
Features and Benefits
- strptime,
Changing User Accounts
- stunnel,
Securing SWAT through SSL
- su,
Anatomy of /etc/pam.d Entries
- subnet mask,
MS Windows XP Professional,
MS Windows Me,
The Tests
- subnets,
NetBIOS over TCP/IP,
Configuring Workgroup Browsing
- subscription,
Free Support
- subsuffix parameters,
New Suffix for Searching
- Subversion,
Introduction,
Access via Subversion
- successful join,
Testing Server Setup
- successful migration,
Objectives
- sufficient,
Anatomy of /etc/pam.d Entries
- suffixes,
MIME Types and CUPS Filters
- SUID,
File and Directory Access Control
- Sun,
Domain Member Server
- Sun ONE iDentity server,
Features and Benefits
- Sun Solaris,
Features and Benefits
- SUN-Raster,
MIME Types and CUPS Filters
- support,
Samba Support
- support exposure,
Objectives
- SVN
-
- web,
Access via SVNweb
- SVRTOOLS.EXE,
Features and Benefits
- SWAT,
Configuring Samba (smb.conf),
SWAT: The Samba Web Administration Tool
- swat,
SWAT,
Validate SWAT Installation,
Locating the SWAT File,
Enabling SWAT for Use
-
- enable,
Enabling SWAT for Use
- security,
Securing SWAT through SSL
- SWAT binary support,
Validate SWAT Installation
- swat command-line options,
Locating the SWAT File
- SWAT permission allowed,
Enabling SWAT for Use
- symbolic links,
Features and Benefits
- synchronization,
Domain Controller Types,
Security Mode and Master Browsers,
WINS: The Windows Internetworking Name Server,
Behavior of Cross-Subnet Browsing
- synchronization problems,
Introduction
- synchronize,
Backup Domain Controller Configuration,
Configure /etc/krb5.conf,
Use of the Remote Browse Sync Parameter,
Behavior of Cross-Subnet Browsing
- synchronized,
Backup Domain Controller Configuration
- syntax tolerates spelling errors,
Simple Print Configuration
- syslog,
Multiple Virtual Server Hosting
- system access controls,
New Account Storage Systems
- system accounts,
User Account Management
- system administrator,
User Rights and Privileges
- system groups,
Mapping Windows Groups to UNIX Groups
- system interface scripts,
User Rights and Privileges
- system policies,
Creating and Managing System Policies
- System Policy Editor,
Creating and Managing System Policies,
Administration of Windows 200x/XP Policies,
MS Windows 9x/Me
- system security,
Applicable Only to Versions Earlier than 3.0.11
- system tools,
Features and Benefits
- SYSV,
The [global] Section
- SYSVOL,
MS Windows 200x/XP Professional Policies
T
- tail,
Assumptions
- take ownership,
Description of Privileges
- Take Ownership,
Viewing File Ownership
- tape,
Server Share and Directory Layout
- tar,
BackupPC
- tarball,
Example Configuration
- tattoo effect,
Samba-3 Implementation Choices
- TCP,
Multiple Interfaces,
Why Is This So Hard?
- TCP data streams,
The Front-End Challenge
- TCP failover,
Why Is This So Hard?
- TCP port,
Features and Benefits
- TCP port 139,
Background Information,
Multiple Virtual Server Personalities
- TCP port 445,
Background Information,
Multiple Virtual Server Personalities
- tcp ports,
Join the Samba Server to the PDC Domain
- TCP/IP,
MS Windows XP Professional,
MS Windows Me,
Features and Benefits,
Windows Networking Protocols
- TCP/IP configuration,
MS Windows XP Professional,
MS Windows Me
- TCP/IP configuration panel,
MS Windows 2000
- TCP/IP protocol configuration,
Technical Details
- TCP/IP protocol settings,
MS Windows XP Professional,
MS Windows 2000
- TCP/IP protocol stack,
WINS: The Windows Internetworking Name Server
- TCP/IP-only,
Windows Networking Protocols
- tcpdump,
Tcpdump
- TDB,
New Account Storage Systems,
Running rpcclient with setdriver,
The Printing *.tdb Files,
Trivial Database Files,
Multiple Server Hosting
-
- backing up (see tdbbackup)
- tdb,
User and Group ID Allocation,
Server Pool Communications
- tdb data files,
TDB Data Files
- TDB database,
Running rpcclient with adddriver
- TDB database files,
Setting Device Modes on New Printers
- tdb file backup,
TDB Data Files
- tdb file descriptions,
TDB Database File Information,
TDB Data Files
- tdb file locations,
TDB Database File Information
- tdb files,
Access Controls on Shares
- tdbbackup,
Using tdbbackup,
Corrupt tdb Files
- tdbdump,
Access Controls on Shares
- tdbsam,
Domain Control: Example Configuration,
Account Information Databases,
Technical Information,
Listing User and Machine Accounts,
smbpasswd: Encrypted Password Database,
tdbsam,
Default Users, Groups, and Relative Identifiers,
Domain Member Server or Domain Member Client,
Objectives
- tdbsam databases,
Password Backends
- technical reviewers,
Advanced Configuration Techniques
- Telnet,
Advantages of Non-Encrypted Passwords
- telnet logins,
Linux/FreeBSD-Specific PAM Configuration
- template,
Creating and Managing Group Profiles
- template homedir,
Configure smb.conf,
Linux/FreeBSD-Specific PAM Configuration
- template primary group,
NT4-Style Domains (Includes Samba Domains)
- template shell,
NT4-Style Domains (Includes Samba Domains),
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension,
Configure smb.conf
- temporary location,
Print Commands
- Terminal Server,
Demultiplexing SMB Requests
- test: parameter,
Discussion
- Testing Server Setup,
Configure /etc/krb5.conf
- testparm,
Test Your Config File with testparm,
Central Print Serving,
Simple Print Configuration,
Verifying Configuration with testparm,
Rapid Configuration Validation,
Extended Printing Configuration,
Assumptions,
The Tests,
Debugging with Samba Itself
- tethereal,
Tcpdump
- text/plain,
MIME Type Conversion Rules
- texttops,
MIME Type Conversion Rules
- tid,
Demultiplexing SMB Requests
- TIFF,
MIME Types and CUPS Filters
- TightVNC,
Remote Management from NoMachine.Com
- time difference,
Configure /etc/krb5.conf
- time format,
Changing User Accounts
- time-to-live (see TTL)
- tool,
Windows 200x/XP
- tools,
Central Print Serving,
Caution Regarding LDAP and Samba
- tools\reskit\netadmin\poledit,
Windows 9x/ME Policies
- traditional printing,
Custom Print Commands
- training course,
Discussion of Backup Solutions
- transfer differences,
Rsync
- transformation,
MIME Types and CUPS Filters
- transitive,
Trust Relationship Background
- transparent access,
Features and Benefits
- transparently reconnected,
The Ultimate Goal
- transport connection loss,
Opportunistic Locking Overview
- Transport Layer Seccurity, TLS
-
- Configuring,
Configuring
- Introduction,
Introduction
- transport layer security (see TLS)
- Transport Layer Security, TLS
-
- Testing,
Testing
- Troubleshooting,
Troubleshooting
- trigger,
Preparing for Domain Control,
MS Windows NT4-style Domain Control
- trivial database,
New Account Storage Systems (see TDB)
- troubleshoot,
Rapid Configuration Validation
- troubleshooting,
Printing from CUPS to Windows-Attached Printers
- Tru64 UNIX,
Basic Parameter Setting
- trust,
Features and Benefits,
LDAP Directories and Windows Computer Accounts
-
- account,
Domain Security Mode (User-Level Security)
- trust account,
Domain Security Mode (User-Level Security),
Account Flags Management,
NT4-Style Domain Trusts with Windows 2000
-
- interdomain,
Features and Benefits
- machine,
Features and Benefits
- trust account password,
Features and Benefits
- trust accounts,
LDAP Directories and Windows Computer Accounts,
Overview
- trust established,
Interdomain Trust Facilities
- trust relationship,
Trust Relationship Background,
Completing an NT4 Domain Trust,
Interdomain Trust Facilities,
Configuring Samba NT-Style Domain Trusts,
NT4-Style Domain Trusts with Windows 2000
- trust relationships,
Interdomain Trust Relationships,
Features and Benefits,
Trust Relationship Background,
Creating an NT4 Domain Trust,
New Features in Samba-3
- trusted,
Behavior of Cross-Subnet Browsing,
User Rights and Privileges
- trusted domain,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Interdomain Trust Relationships,
Trust Relationship Background,
Completing an NT4 Domain Trust,
Samba as the Trusting Domain,
Name Service Switch
- trusted domain name,
Samba as the Trusted Domain
- trusted party,
Samba as the Trusted Domain
- trusting domain,
Interdomain Trust Relationships,
Trust Relationship Background,
Completing an NT4 Domain Trust
- trusting party,
Samba as the Trusted Domain
- trusts,
Interdomain Trust Relationships,
Trust Relationship Background
- TTL,
Static WINS Entries
- turn oplocks off,
Advanced Samba Oplocks Parameters
- turnkey solution,
LDAP Directories and Windows Computer Accounts
- two-up,
Examples for Filtering Chains
- two-way
-
- propagation,
Features and Benefits
- two-way trust,
Trust Relationship Background,
Native MS Windows NT4 Trusts Configuration,
Interdomain Trust Facilities
U
- UCS-2,
Japanese Charsets
- UDP,
Preparing for Domain Control,
NetBIOS over TCP/IP,
How Browsing Functions,
Forcing Samba to Be the Master,
Multiple Interfaces,
Cross-Subnet Browsing
- UDP port 137,
Background Information
- udp ports,
Join the Samba Server to the PDC Domain
- UDP unicast,
How Browsing Functions
- UID,
Example Configuration,
MS Windows Workstation/Server Machine Trust Accounts,
Manual Creation of Machine Trust Accounts,
Why Is This Better Than security = server?,
Sharing User ID Mappings between Samba Domain Members,
Technical Information,
Mapping User Identifiers between MS Windows and UNIX,
Mapping Common UIDs/GIDs on Distributed Machines,
LDAP Directories and Windows Computer Accounts,
Listing User and Machine Accounts,
Features and Benefits,
Overview,
Mapping Windows Groups to UNIX Groups,
UNIX and Windows User Management,
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
Primary Domain Controller,
User Rights and Privileges,
Features and Benefits,
Handling of Foreign SIDs,
Starting and Testing the winbindd Daemon
- uid,
OpenLDAP Configuration
- UID numbers,
Domain Member Server or Domain Member Client
- UID range,
Interdomain Trust Relationships
- unauthorized,
MS Windows Workstation/Server Machine Trust Accounts
- unauthorized access,
File, Directory, and Share Access Controls
- UNC notation,
Identifying Driver Files
- unexpected.tdb,
The Printing *.tdb Files
-
- (see also TDB)
- unicast,
NetBIOS over TCP/IP
- unicode,
What Are Charsets and Unicode?
- Unicode,
Samba and Charsets,
New Features in Samba-3
- Unicode UTF-8,
Basic Parameter Setting
- unified logon,
Introduction
- UNIX,
Basic Parameter Setting
-
- server,
Features and Benefits
- UNIX account,
MS Windows Workstation/Server Machine Trust Accounts,
Manual Creation of Machine Trust Accounts,
On-the-Fly Creation of Machine Trust Accounts
- unix charset,
Samba and Charsets,
Basic Parameter Setting,
Individual Implementations,
Migration from Samba-2.2 Series
- UNIX Domain Socket,
File and Directory Access Control
- UNIX domain socket,
How Winbind Works
- UNIX file system access controls,
Features and Benefits
- UNIX group,
Mapping Windows Groups to UNIX Groups
- UNIX groups,
Group Mapping: MS Windows and UNIX,
What Winbind Provides
- UNIX home directories,
Why Can Users Access Other Users' Home Directories?
- UNIX host system,
User Rights and Privileges
- UNIX ID,
User and Group ID Allocation
- UNIX locking,
Discussion
- UNIX login ID,
MS Windows Workstation/Server Machine Trust Accounts
- UNIX permissions,
Samba-3 Implementation Choices
- UNIX printer,
The [global] Section
- UNIX printing,
Technical Introduction
- UNIX system account,
Adding Machine to Domain Fails
- UNIX system accounts,
User Rights and Privileges
- UNIX system files,
Features and Benefits
- UNIX user identifier (see UID)
- UNIX users,
Why Is This Better Than security = server?,
What Winbind Provides
- UNIX-style encrypted passwords,
Technical Information
- UNIX-user database,
Background
- UNIX/Linux group,
Warning: User Private Group Problems
- UNIX/Linux user account,
UNIX and Windows User Management
- unlink calls,
recycle
- unlinked,
File and Directory Access Control
- unprivileged account names,
Reference Documentation Server
- unsigned drivers,
Windows 200x/XP Local Security Policies
- unstoppable services,
The Ultimate Goal
- unsupported encryption,
Possible Errors
- unsupported software,
Commercial Support
- updates,
Upgrading Samba
- upload drivers,
Features and Benefits
- uploaded driver,
The [global] Section
- uploaded drivers,
Point'n'Print Client Drivers on Samba Servers
- uploading,
Point'n'Print Client Drivers on Samba Servers
- upper-case,
User Level Security
- uppercase,
Configure /etc/krb5.conf,
Adding Machine to Domain Fails,
Handling Large Directories
- uppercase character,
Adding Groups Fails
- USB,
Examples for Filtering Chains
- use client driver,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Central Print Serving,
Extended Printing Configuration,
The [global] Section,
Raw Print Serving: Vendor Drivers on Windows Clients,
How to Recognize If cupsaddsmb Completed Successfully,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
- use computer anywhere,
Features and Benefits
- user,
Share-Level Security,
LDAP Directories and Windows Computer Accounts,
File and Directory Access Control,
The Tests
- user access management,
Features and Benefits
- user account,
LDAP Directories and Windows Computer Accounts,
User Account Management,
Account Flags Management,
smbpasswd: Encrypted Password Database,
UNIX and Windows User Management
-
- Adding/Deleting,
The smbpasswd Tool
- user account database,
MS Windows NT4-style Domain Control
- user accounts,
Caution Regarding LDAP and Samba,
Domain Member Server or Domain Member Client,
User Rights and Privileges
- User Accounts
-
- Adding/Deleting,
The pdbedit Tool,
Accounts and Groups Management
- user and group,
What Winbind Provides
- user and trust accounts,
Account Information Databases
- user attributes,
smbpasswd: Encrypted Password Database
- user authentication,
Microsoft Remote Procedure Calls
- user database,
Backup Domain Controller Configuration,
Plaintext
- user encoded,
Managing Security Identifiers (SIDS)
- user groups,
Free Support
- user logons,
User Rights and Privileges
- user management,
The smbpasswd Tool,
Overview,
UNIX and Windows Group Management
- User Management,
The pdbedit Tool,
Accounts and Groups Management
- User Manager,
Samba as the Trusted Domain,
Samba as the Trusting Domain,
Remote Server Administration,
Creating and Managing Group Profiles
- User Manager for Domains,
Remote Server Administration
- user or group,
Using the “net rpc rights” Utility
- user profiles,
Windows 9x/Me Profile Setup
- User Rights and Privileges,
The Administrator Domain SID
- user-level,
Samba Security Modes,
User Level Security
- User-level access control,
Domain Logon Configuration: Windows 9x/Me
- user-level security,
Advantages of Encrypted Passwords
- user-mode security,
Security Mode and Master Browsers
- user.DAT,
Windows 9x/Me Profile Setup,
Sharing Profiles between Windows 9x/Me and NT4/200x/XP Workstations
- user.MAN,
Windows 9x/Me Profile Setup
- User.MAN,
Mandatory Profiles
- useradd,
Manual Creation of Machine Trust Accounts,
On-the-Fly Creation of Machine Trust Accounts
- username,
MS Windows NT4-style Domain Control,
User- and Group-Based Controls
- username and password,
Joining a Domain: Windows 2000/XP Professional
- username level,
Password Checking
- username map,
The Primary Domain Controller,
Backup Domain Controller,
Windows 200x/XP Professional Client,
UNIX and Windows User Management,
User Mapping
- username-level,
Password Checking
- userPassword,
Initialize the LDAP Database
- users,
Why Can Users Access Other Users' Home Directories?,
Features and Benefits
- UsrMgr.exe,
Managing Domain Machine Accounts using NT4 Server Manager
- UTF-8,
Samba and Charsets,
Basic Parameter Setting
- UTF-8 encoding,
Enabling SWAT Internationalization Support
V
- valid username/password,
Using IPC$ Share-Based Denials
- valid users,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
User- and Group-Based Controls,
User-Based Protection,
Why Can Users Access Other Users' Home Directories?,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting,
The Tests
- validate,
Test Your Config File with testparm,
Introduction
- validate every backup,
Server Share and Directory Layout
- validation,
Single Sign-On and Domain Security,
System and Account Policies
- vendor-provided drivers,
Raw Print Serving: Vendor Drivers on Windows Clients
- verifiable,
Behavior of Cross-Subnet Browsing
- verify,
Rapid Configuration Validation
- version control,
shadow_copy
- veto files,
Miscellaneous Controls
- veto oplock files,
Disabling Oplocks,
Disabling Kernel Oplocks
- VFS,
Domain Control: Example Configuration,
Discussion
- VFS module,
shadow_copy,
Mandatory Profiles
- VFS modules,
Discussion,
VFS Modules Available Elsewhere
- vfs objects,
Discussion,
Shadow Copy Setup
- vfs option,
Basic Parameter Setting
- vgcreate,
Shadow Copy Setup
- vgdisplay,
Shadow Copy Setup
- vipw,
“$” Cannot Be Included in Machine Name,
Manual Creation of Machine Trust Accounts
- Virtual File System (see VFS)
- virtual server,
The Front-End Challenge,
A Simple Solution
- virus scanner,
Discussion
- Visual Studio,
PostScript Drivers with No Major Problems, Even in Kernel
Mode
- vital task,
Features and Benefits
- VNC/RFB,
Remote Management from NoMachine.Com
- volume group,
Shadow Copy Setup
- volunteers,
Getting Mailing List Help
- vscan,
vscan
- vuid,
Demultiplexing SMB Requests
W
- W32X86,
Identifying Driver Files,
PostScript Drivers with No Major Problems, Even in Kernel
Mode,
Caveats to Be Considered
- W32X86/2,
Using Windows-Formatted Vendor PPDs
- WAN,
Forcing Samba to Be the Master,
Slow and/or Unreliable Networks
- wbinfo,
Starting and Testing the winbindd Daemon
- Web-based configuration,
SWAT: The Samba Web Administration Tool
- WebClient,
Browsing of Shares and Directories is Very Slow
- Welcome,
Joining a Domain: Windows 2000/XP Professional
- well known RID,
The Administrator Domain SID
- well-controlled network,
Server Share and Directory Layout
- well-known RID,
Default Users, Groups, and Relative Identifiers
- wide-area network bandwidth,
Features and Benefits
- win election,
Making Samba the Domain Master
- Win32 printing API,
Printing Developments Since Samba-2.2
- WIN40,
Identifying Driver Files,
Obtaining Driver Files from Windows Client [print$] Shares,
Caveats to Be Considered
- winbind,
Why Is This Better Than security = server?,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
Domain Member Server or Domain Member Client,
Examples of IDMAP Backend Usage,
NT4-Style Domains (Includes Samba Domains),
Interdomain Trust Relationships,
Features and Benefits,
Configure smb.conf
- Winbind,
Background,
Target Uses,
Microsoft Active Directory Services,
Pluggable Authentication Modules,
User and Group ID Allocation,
Result Caching,
Introduction,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris,
NSS Winbind on AIX,
Starting and Testing the winbindd Daemon,
Linux/FreeBSD-Specific PAM Configuration,
Conclusion,
PAM-Based Distributed Authentication,
Features and Benefits
- Winbind architecture,
New Features in Samba-3
- winbind cache time,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- winbind enum groups,
IDMAP_RID with Winbind,
Configure smb.conf
- winbind enum users,
IDMAP_RID with Winbind,
Configure smb.conf
- Winbind hooks,
What Winbind Provides
- winbind nested groups,
ADS Domains,
IDMAP_RID with Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- winbind separator,
Configure smb.conf,
Starting and Testing the winbindd Daemon
- Winbind services,
Starting and Testing the winbindd Daemon
- winbind trusted domains only,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- winbind use default domain,
Example Configuration,
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension
- Winbind-based authentication,
PAM-Based Distributed Authentication
- winbind.so,
Solaris-Specific Configuration
- winbindd,
Starting Samba,
Test Your Config File with testparm,
Example Configuration,
Example Configuration,
LDAP Directories and Windows Computer Accounts,
Features and Benefits,
Nested Groups: Adding Windows Domain Groups to Windows Local Groups,
UNIX and Windows User Management,
Identity Mapping (IDMAP),
Domain Member Server or Domain Member Client,
Interdomain Trust Relationships,
Features and Benefits,
How Winbind Works,
Requirements,
Testing Things Out,
Configure nsswitch.conf and the Winbind Libraries on Linux and Solaris,
Configure smb.conf,
Starting and Testing the winbindd Daemon,
Solaris,
Configure Winbind and PAM,
Multiple Server Hosting
- Winbindd,
Starting and Testing the winbindd Daemon
- winbindd daemon,
Linux
- Windows,
Identity Mapping (IDMAP),
Basic Parameter Setting
- Windows 2000,
Configure /etc/krb5.conf,
Testing Server Setup,
Network Browsing,
Trust Relationship Background
- Windows 2000 Professional TCP/IP,
MS Windows 2000
- Windows 2000 server,
NT4-Style Domain Trusts with Windows 2000
- Windows 2003,
Configure /etc/krb5.conf,
I Can't Join a Windows 2003 PDC
- Windows 200x/XP,
NetBIOS over TCP/IP,
Features and Benefits
- Windows 9x/Me,
Domain Logon Configuration: Windows 9x/Me,
WINS Server Configuration,
Windows Networking Protocols,
Remote Server Administration
- Windows 9x/Me/XP Home,
MS Windows Workstation/Server Machine Trust Accounts
- Windows account management,
What Winbind Provides
- Windows client,
What Rights and Privileges Will Permit Windows Client Administration?
- Windows client failover,
Opportunistic Locking Overview
- Windows domain,
Changes in Behavior
- Windows Explorer,
Problem Resolution,
Identifying Driver Files
- Windows group,
Group Mapping: MS Windows and UNIX,
Warning: User Private Group Problems,
Mapping Windows Groups to UNIX Groups,
User Rights and Privileges
- Windows group account,
The Administrator Domain SID
- Windows groups,
Mapping Windows Groups to UNIX Groups
- Windows Internet Name Server (see WINS)
- Windows Logon,
Windows 9x/Me Profile Setup
- Windows Me TCP/IP,
MS Windows Me
- Windows Millennium,
MS Windows Me
- Windows Millennium edition (Me) TCP/IP,
MS Windows Me
- Windows network clients,
Features and Benefits
- Windows NT domain name,
Domain Logon Configuration: Windows 9x/Me
- Windows NT PostScript driver,
Printing from CUPS to Windows-Attached Printers
- Windows NT Server,
Samba as the Trusted Domain
- Windows NT/2000/XP,
Check Samba for Driver Recognition
- Windows NT/200x,
WINS Server Configuration,
Introduction
- Windows NT/200x/XP,
The [global] Section
- Windows NT/200x/XP Professional,
MS Windows Workstation/Server Machine Trust Accounts,
Joining a Domain: Windows 2000/XP Professional,
Common Errors
- Windows NT3.10,
Essential Background Information
- Windows NT4,
Windows NT4 Workstation/Server,
Features and Benefits
- Windows NT4 domains,
Interdomain Trust Facilities
- Windows NT4 Server,
Configuring Samba NT-Style Domain Trusts
- Windows NT4/200X,
LDAP Directories and Windows Computer Accounts
- Windows NT4/200x,
Discussion
- Windows NT4/200x/XP,
NetBIOS Over TCP/IP Enabled,
Default Users, Groups, and Relative Identifiers,
Windows 200x/XP
- Windows NT4/2kX/XPPro,
User Rights and Privileges
- Windows PPD,
690 “Perfect” Printers
- Windows privilege model,
Rights Management Capabilities
- Windows Registry,
MS Windows Workstation/Server Machine Trust Accounts
- windows registry settings,
Windows 9x/Me Profile Setup
-
- default profile locations,
MS Windows NT4 Workstation,
MS Windows 200x/XP
- profile path,
Windows 9x/Me Profile Setup
- roaming profiles,
Disabling Roaming Profile Support
- Windows Resource Kit,
Disabling Roaming Profile Support
- Windows Security Identifiers (see SID)
- Windows Terminal server,
Remote Management from NoMachine.Com
- Windows user,
User Rights and Privileges
- Windows user accounts,
UNIX and Windows User Management
- Windows workstation.,
What Rights and Privileges Will Permit Windows Client Administration?
- Windows XP Home,
Important Notes About Security
- Windows XP Home edition,
Features and Benefits,
The Special Case of MS Windows XP Home Edition,
Domain Logon Configuration: Windows 9x/Me
- Windows XP Home Edition,
MS Windows 200x/XP
- Windows XP Professional,
MS Windows XP Professional,
Features and Benefits
- Windows XP Professional TCP/IP,
MS Windows 2000
- Windows XP TCP/IP,
MS Windows XP Professional
- Windows95/98/ME,
Check Samba for Driver Recognition
- winnt.adm,
Windows NT4-Style Policy Files
- WINS,
Features and Benefits,
Domain Controller Types,
Preparing for Domain Control,
What Qualifies a Domain Controller on the Network?,
Joining an NT4-type Domain with Samba-3,
Reference Documentation Server,
MS Windows XP Professional,
MS Windows 2000,
MS Windows Me,
Features and Benefits,
What Is Browsing?,
NetBIOS over TCP/IP,
How Browsing Functions,
Domain Browsing Configuration,
Making Samba the Domain Master,
WINS: The Windows Internetworking Name Server,
WINS Server Configuration,
Technical Overview of Browsing,
Browsing Support in Samba,
Cross-Subnet Browsing,
Behavior of Cross-Subnet Browsing,
WINS Lookup,
Example Configuration
- wins,
/etc/nsswitch.conf
- WINS Configuration,
Browsing of Shares and Directories is Very Slow
- wins hook,
What Is Browsing?
- WINS lookup,
Joining an NT4-type Domain with Samba-3
- wins proxy,
What Is Browsing?
- WINS replication,
WINS Replication,
Static WINS Entries
- wins server,
Reference Documentation Server,
What Is Browsing?,
WINS: The Windows Internetworking Name Server,
WINS Server Configuration,
WINS Lookup
- WINS Server,
What Is Browsing?
- WINS server,
How Browsing Functions,
Configuring Workgroup Browsing,
Making Samba the Domain Master,
WINS Server Configuration,
Browsing Support in Samba,
Browsing of Shares and Directories is Very Slow
- WINS server address,
How Browsing Functions
- WINS server settings,
MS Windows Me
- WINS servers,
WINS: The Windows Internetworking Name Server
- WINS service,
WINS Server Configuration
- wins support,
What Is Browsing?,
WINS: The Windows Internetworking Name Server,
WINS Server Configuration,
WINS Lookup,
Multiple Virtual Server Hosting
- WINS Support,
What Is Browsing?
- wins.dat,
Static WINS Entries
- without Administrator account,
The Administrator Domain SID
- without ADS,
Objectives
- work-flow protocol,
Single Sign-On and Domain Security
- workgroup,
Configuration File Syntax,
Example Configuration,
Anonymous Read-Only Document Server,
Anonymous Read-Write Document Server,
Anonymous Print Server,
Secure Read-Write File and Print Server,
Example Configuration,
Example: Engineering Office,
The Primary Domain Controller,
Backup Domain Controller,
Example Configuration,
Server Security (User Level Security),
Preparing for Domain Control,
Domain Control: Example Configuration,
The Special Case of Windows 9x/Me,
Security Mode and Master Browsers,
Example PDC Configuration,
Example Configuration,
Joining an NT4-type Domain with Samba-3,
Reference Documentation Server,
Central Print Serving,
Domain Logon Configuration: Windows 9x/Me,
Configuring Workgroup Browsing,
Making Samba the Domain Master,
Browsing Support in Samba,
Configuring Samba,
NT4-Style Domains (Includes Samba Domains),
ADS Domains,
IDMAP_RID with Winbind,
IDMAP Storage in LDAP Using Winbind,
IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension,
Name Resolution as Used within MS Windows Networking,
Multiple Server Hosting,
Multiple Virtual Server Personalities,
Multiple Virtual Server Hosting
-
- membership,
Preparing for Domain Control
- workstations,
Technical Information
- world-writable,
File and Directory Access Control
- writable,
Simple Print Configuration,
Extended Printing Configuration,
The [printers] Section,
Any [my_printer_name] Section,
Simple smb.conf Settings for CUPS,
More Complex CUPS smb.conf Settings,
Prepare Your smb.conf for cupsaddsmb
- write,
File and Directory Access Control
- write access,
Protecting Directories and Files from Deletion
- Write caching,
Opportunistic Locking Overview
- write changes,
Backup Domain Controller
- write list,
Example: Engineering Office,
Domain Control: Example Configuration,
User- and Group-Based Controls,
Creating the [print$] Share,
[print$] Stanza Parameters,
Prepare Your smb.conf for cupsaddsmb
- write permission,
Create the Computer Account
- write raw,
Write Raw
- writeable,
Discussion,
fake_perms,
Shadow Copy Setup
- WYSIWYG,
Windows Drivers, GDI, and EMF
X
- X Window
System,
Windows Drivers, GDI, and EMF,
UNIX Printfile Conversion and GUI Basics
- X.509 certificates,
Introduction
- XFS file system,
Shadow Copy Setup
- xfsprogs,
Shadow Copy Setup
- xinetd,
Validate SWAT Installation,
Starting from inetd.conf (see inetd)
- XML-based datasets,
Foomatic Database-Generated PPDs
- xpp,
Foomatic Database-Generated PPDs
- Xprint,
Windows Drivers, GDI, and EMF,
UNIX Printfile Conversion and GUI Basics
- xxxxBSD,
Features and Benefits
[an error occurred while processing this directive]
This book not what you were looking for? Search our entire on-line book library
or browse the entire Linuxtopia catalog of free
on-line books.
Linuxtopia.org - Know Linux.
|