The next step is to modify the Samba configuration file to include the following setup options. These options assume that you created the certificates directory for the certificate authority at
/etc/certificates :
[global]
ssl = yes
ssl server cert = /etc/certificates/cacert.pem
ssl server key = /etc/certificates/private/cakey.pem
ssl CA certDir = /etc/certificates
At this point, you will need to kill the Samba daemons and restart them manually:
#
nmbd -D
#
smbd -D
Enter PEM pass phrase:
You will need to enter the PEM pass phrase of the certificate authority to start up the Samba daemons. Note that this may present a problem in terms of starting the program using ordinary means. However, you can get around this using advanced scripting languages, such as Expect or Python.
