Samba-3 by Example : Practical Exercises to Successful Deployment

by Terpstra, John H.

• ISBN13: 9780131472211
• ISBN10: 0131472216
• Edition: 1st
• Format: Paperback w/CD
• Copyright: 2004-01-01
• Publisher: Prentice Hall Ptr

Summary

"The definitive Samba-3 guidebook has been completely updated to reflect the latest Samba releases and migration techniques. This book's complete configuration files, step-by-step implementation instructions, network diagrams, and automated scripts make deployment a breeze - even if you've never worked with Samba before. From small office networks to enterprise environments, here are proven configurations, backed by guidance from one of the world's most respected Samba experts, Samba Team contributor John H. Terpstra." "This edition has added comprehensive diagnostic techniques and validation steps, as well as solutions to common implementation mistakes: everything you need to assure reliability and performance regardless of your network environment. In response to reader requests, the author has also added detailed coverage of updating existing Samba networks, as well as a practical primer on how Samba stores essential network information."--BOOK JACKET.

Table of Contents

ABOUT THE COVER ARTWORK	v
ACKNOWLEDGMENTS	vi
FOREWORD	vii
PREFACE	ix
LIST OF EXAMPLES xxi
LIST OF FIGURES	xxv
LIST OF TABLES	xxvii
Chapter 1 NETWORKING PRIMER	1	(19)
1.1 Requirements and Notes	1	(1)
1.2 Introduction	2	(1)
1.2.1 Assignment Tasks	3	(1)
1.3 Exercises	3	(14)
1.3.1 Single Machine Broadcast Activity	4	(3)
1.3.1.1 Findings	4	(3)
1.3.2 Second Machine Startup Broadcast Interaction	7	(1)
1.3.2.1 Findings	8	(1)
1.3.3 Simple Windows Client Connection Characteristics	8	(5)
1.3.3.1 Findings and Comments	10	(3)
1.3.4 Windows 200x/XP Client Interaction with Samba-3	13	(1)
1.3.4.1 Discussion	14	(1)
1.3.5 Conclusions to Exercises	14	(3)
1.4 Dissection and Discussion	17	(1)
1.4.1 Technical Issues	17	(1)
1.5 Questions and Answers	17	(3)
Chapter 2 NO FRILLS SAMBA SERVERS	20	(19)
2.1 Introduction	20	(1)
2.2 Assignment Tasks	20	(15)
2.2.1 Drafting Office	21	(3)
2.2.1.1 Dissection and Discussion	21	(1)
2.2.1.2 Implementation	22	(1)
2.2.1.3 Validation	23	(1)
2.2.2 Charity Administration Office	24	(7)
2.2.2.1 Dissection and Discussion	25	(1)
2.2.2.2 Implementation	26	(5)
2.2.2.3 Validation	31	(1)
2.2.3 Accounting Office	31	(8)
2.2.3.1 Dissection and Discussion	32	(1)
2.2.3.2 Implementation	32	(3)
2.3 Questions and Answers	35	(4)
Chapter 3 SMALL OFFICE NETWORKING	39	(18)
3.1. Introduction	39	(1)
3.1.1 Assignment Tasks	40	(1)
3.2 Dissection and Discussion	40	(2)
3.2.1 Technical Issues	41	(1)
3.2.2 Political Issues	42	(1)
3.3 Implementation	42	(9)
3.3.1 Validation	47	(4)
3.3.2 Notebook Computers: A. Special Case	51	(1)
3.3.3 Key Points Learned	51	(1)
3.4 Questions and Answers	51	(6)
Chapter 4 SECURE OFFICE NETWORKING	57	(42)
4.1 Introduction	57	(2)
4.1.1 Assignment Tasks	58	(1)
4.2 Dissection and Discussion	59	(4)
4.2.1 Technical Issues	60	(2)
4.2.1.1 Hardware Requirements	61	(1)
4.2.2 Political Issues	62	(1)
4.3 Implementation	63	(21)
4.3.1 Basic System Configuration	65	(2)
4.3.2 Samba Configuration	67	(3)
4.3.3 Configuration of DHCP and DNS Servers	70	(1)
4.3.4 Printer Configuration	71	(1)
4.3.5 Process Startup Configuration	72	(1)
4.3.6 Validation	73	(7)
4.3.7 Application Share Configuration	80	(2)
4.3.7.1 Comments Regarding Software Terms of Use	82	(1)
4.3.8 Windows Client Configuration	82	(2)
4.3.9 Key Points Learned	84	(1)
4.4 Questions and Answers	84	(15)
Chapter 5 THE 500-USER OFFICE	99	(29)
5.1 Introduction	100	(1)
5.1.1 Assignment Tasks	100	(1)
5.2 Dissection and Discussion	101	(2)
5.2.1 Technical Issues	101	(1)
5.2.2 Political Issues	102	(1)
5.3 Implementation	103	(16)
5.3.1 Installation of DHCP, DNS, and Samba Control Files	103	(1)
5.3.2 Server Preparation All Servers	104	(3)
5.3.3 Server Specific Preparation	107	(4)
5.3.3.1 Configuration for Server: MASSIVE	107	(3)
5.3.3.2 Configuration Specific to Domain Member Servers: BLDG1, BLDG2	110	(1)
5.3.4 Process Startup Configuration	111	(3)
5.3.5 Windows Client Configuration	114	(4)
5.3.6 Key Points Learned	118	(1)
5.4 Questions and Answers	119	(9)
Chapter 6 MAKING USERS HAPPY	128	(51)
6.1 Introduction	130	(1)
6.1.1 Assignment Tasks	130	(1)
6.2 Dissection and Discussion	131	(7)
6.2.1 Technical Issues	133	(4)
6.2.1.1 Roaming Profile Background	135	(1)
6.2.1.2 The Local Group Policy	135	(1)
6.2.1.3 Profile Changes	136	(1)
6.2.1.4 Using a Network Default User Profile	136	(1)
6.2.1.5 Installation of Printer Driver Auto-Download	136	(1)
6.2.2 Political Issues	137	(1)
6.2.3 Installation Check-List	137	(1)
6.3 Samba Server Implementation	138	(20)
6.3.1 OpenLDAP Server Configuration	138	(2)
6.3.2 PAM and NSS Client Configuration	140	(3)
6.3.3 Samba-3 PDC Configuration	143	(2)
6.3.4 Install and Configure Idealx SMB-LDAP Scripts	145	(3)
6.3.5 LDAP Initialization and Creation of User and Group Accounts	148	(9)
6.3.6 Printer Configuration	157	(1)
6.4 Samba-3 BDC Configuration	158	(4)
6.5 Miscellaneous Server Preparation Tasks	162	(2)
6.5.1 Configuring Directory Share Point Roots	162	(1)
6.5.2 Configuring Profile Directories	163	(1)
6.5.3 Preparation of Logon Scripts	164	(1)
6.6 Windows Client Configuration	164	(5)
6.6.1 Configuration of Default Profile with Folder Redirection	165	(1)
6.6.2 Configuration of MS Outlook to Relocate PST File	166	(1)
6.6.3 Configure Delete Cached Profiles on Logout	167	(1)
6.6.4 Uploading Printer Drivers to Samba Servers	168	(1)
6.6.5 Software Installation	169	(1)
6.6.6 Roll-out Image Creation	169	(1)
6.7 Key Points Learned	169	(10)
6.8 Questions and Answers	170	(9)
Chapter 7 A DISTRIBUTED 2000 USER NETWORK	179	(20)
7.1 Introduction	179	(1)
7.1.1 Assignment Tasks	180	(1)
7.2 Dissection and Discussion	180	(8)
7.2.1 Technical Issues	181	(7)
7.2.1.1 User Needs	181	(1)
7.2.1.2 The Nature of Windows Networking Protocols	182	(2)
7.2.1.3 Identity Management Needs	184	(4)
7.2.2 Political Issues	188	(1)
7.3 Implementation	188	(5)
7.3.1 Key Points Learned	193	(1)
7.4 Questions and Answers	193	(6)
Chapter 8 MIGRATING NT4 DOMAIN TO SAMBA-3	199	(15)
8.1 Introduction	199	(1)
8.1.1 Assignment Tasks	199	(1)
8.2 Dissection and Discussion	200	(3)
8.2.1 Technical Issues	200	(2)
8.2.2 Political Issues	202	(1)
8.3 Implementation	203	(8)
8.3.1 NT4 Migration Using LDAP Backend	203	(3)
8.3.2 NT4 Migration Using tdbsam Backend	206	(4)
8.3.3 Key Points Learned	210	(1)
8.4 Questions and Answers	211	(3)
Chapter 9 ADDING UNIX/LINUX SERVERS AND CLIENTS	214	(33)
9.1 Introduction	215	(1)
9.1.1 Assignment Tasks	215	(1)
9.2 Dissection and Discussion	215	(3)
9.2.1 Technical Issues	216	(1)
9.2.2 Political Issues	217	(1)
9.3 Implementation	218	(18)
9.3.1 Samba Domain with Samba Domain Member Server Using LDAP	218	(3)
9.3.2 NT4/Samba Domain with Samba Domain Member Server--Using Winbind	221	(3)
9.3.3 Active Directory Domain with Samba Domain Member Server	224	(9)
9.3.4 UNIX/Linux Client Domain Member	233	(2)
9.3.4.1 NT4 Domain Member	234	(1)
9.3.4.2 ADS Domain Member	235	(1)
9.3.5 Key Points Learned	235	(1)
9.4 Questions and Answers	236	(11)
Chapter 10 ACTIVE DIRECTORY, KERBEROS, AND SECURITY	247	(19)
10.1 Introduction	247	(1)
10.1.1 Assignment Tasks	250	(1)
10.2 Dissection and Discussion	250	(1)
10.2.1 Technical Issues	251	(4)
10.2.1.1 Kerberos Exposed	253	(2)
10.3 Implementation	255	(1)
10.3.1 Share Access Controls	255	(1)
10.3.2 Share Definition Controls	256	(7)
10.3.2.1 Check-point Controls	256	(2)
10.3.2.2 Override Controls	258	(1)
10.3.3 Share Point Directory and File Permissions	259	(1)
10.3.4 Managing Windows 200x ACLs	260	(1)
10.3.4.1 Using the MMC Computer Management Interface	261	(1)
10.3.4.2 Using MS Windows Explorer (File Manager)	261	(1)
10.3.4.3 Setting Posix ACLs in UNIX/Linux	262	(1)
10.3.5 Key Points Learned	263	(1)
10.4 Questions and Answers	263	(3)
Chapter 11 INTEGRATING ADDITIONAL SERVICES	266	(11)
11.1 Introduction	266	(1)
11.1.1 Assignment Tasks	266	(1)
11.2 Dissection and Discussion	267	(1)
11.2.1 Technical Issues	267	(1)
11.2.2 Political Issues	268	(1)
11.3 Implementation	268	(1)
11.3.1 Removal of Pre-existing Conflicting RPMs	269	(1)
11.3.2 Kerberos Configuration	269	(6)
11.3.2.1 Samba Configuration	271	(2)
11.3.2.2 NSS Configuration	273	(1)
11.3.2.3 Squid Configuration	273	(1)
11.3.3 Configuration	273	(2)
11.3.4 Key Points Learned	275	(1)
11.4 Questions and Answers	275	(2)
Chapter 12 PERFORMANCE, RELIABILITY, AND AVAILABILITY	277	(8)
12.1 Introduction	277	(1)
12.2 Dissection and Discussion	278	(1)
12.3 Guidelines for Reliable Samba Operation	279	(1)
12.3.1 Name Resolution	279	(6)
12.3.1.1 Bad Hostnames	279	(1)
12.3.1.2 Routed Networks	280	(1)
12.3.1.3 Network Collisions	280	(1)
12.3.2 Samba Configuration	280	(2)
12.3.3 Use and Location of BDCs	282	(1)
12.3.4 Use One Consistent Version of MS Windows Client	282	(1)
12.3.5 For Scalability, Use SAN Based Storage on Samba Servers	282	(1)
12.3.6 Distribute Network Load with MSDFS	283	(1)
12.3.7 Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth	283	(1)
12.3.8 Hardware Problems	283	(1)
12.3.9 Key Points Learned	284	(1)
Chapter A APPENDIX: A COLLECTION OF USEFUL TID-BITS	285	(31)
A.1 Joining a Domain: Windows 200x/XP Professional	285	(4)
A.2 Samba System File Location	289	(1)
A.3 Starting Samba	290	(2)
A.4 DNS Configuration Files	292	(1)
A.4.1 The Forward Zone File for the Loopback Adaptor	292	(1)
A.4.2 The Reverse Zone File for the Loopback Adaptor	292	(1)
A.4.3 DNS Root Server Hint File	292	(1)
A.5 Alternative LDAP Database Initialization	292	(1)
A.5.1 Initialization of the LDAP Database	293	(3)
A.6 The LDAP Account Manager	296	(6)
A.7 Effect of Setting File and Directory SUID/SLID Permissions Explained	302	(2)
A.8 Shared Data Integrity	304	(1)
A.8.1 Microsoft Access	304	(1)
A.8.2 Act! Database Sharing	305	(1)
A.8.3 Opportunistic Locking Controls	305	(11)
Chapter B THE GNU GENERAL PUBLIC LICENSE	316	(7)
GLOSSARY	323	(4)
SUBJECT INDEX	327

Excerpts

Preface Network administrators live busy lives. We face distractions and pressures that drive us to seek proven, working case scenarios that can be easily implemented. Often this approach lands us in trouble. There is a saying that, geometrically speaking, the shortest distance between two points is a straight line, but practically we find that the quickest route to a stable network solution is the long way around. This book is your means to the straight path. It provides step-by-step, proven, working examples of Samba deployments. If you want to deploy Samba-3 with the least effort, or if you want to become an expert at deploying Samba-3 without having to search through lots of documentation, this book is the ticket to your destination. Samba is software that can be run on a platform other than Microsoft Windows, for example, UNIX, Linux, IBM System 390, OpenVMS, and other operating systems. Samba uses the TCP/IP protocol that is installed on the host server. When correctly configured, it allows that host to interact with a Microsoft Windows client or server as if it is a Windows file and print server. This book will help you to implement Windows-compatible file and print services. The examples presented in this book are typical of various businesses and re ect the problems and challenges they face. Care has been taken to preserve attitudes, perceptions, practices, and demands from real network case studies. The maximum benefit may be obtained from this book by working carefully through each exercise. You may be in a hurry to satisfy a specific need, so feel free to locate the example that most closely matches your need, copy it, and innovate as much as you like. Above all, enjoy the process of learning the secrets of MS Windows networking that is truly liberated by Samba. The focus of attention in this book is Samba-3. Specific notes are made in respect of how Samba may be made secure. This book does not attempt to provide detailed information regarding secure operation and configuration of peripheral services and applications such as OpenLDAP, DNS and DHCP, the need for which can be met from other resources that are dedicated to the subject. Why Is This Book Necessary? This book is the result of observations and feedback. The feedback from the Samba-HOWTO-Collection has been positive and complimentary. There have been requests for far more worked examples, a "Samba Cookbook," and for training materials to help kick-start the process of mastering Samba. The Samba mailing list's users have asked for sample configuration files that work. It is natural to question one's own ability to correctly configure a complex tool such as Samba until a minimum necessary knowledge level has been attained. The Samba-HOWTO-Collection, as do The Official Samba-3 HOWTO and Reference Guide, document Samba features and functionality in a topical context. This book takes a completely different approach. It walks through Samba network configurations that are working within particular environmental contexts, providing documented step-by-step implementations. All example case configuration files, scripts, and other tools are provided on the CD-ROM. This book is descriptive, provides detailed diagrams, and makes deployment of Samba-3 a breeze. Prerequisites This book is not a tutorial on UNIX or Linux administration. UNIX and Linux training is best obtained from books dedicated to the subject. This book assumes that you have at least the basic skill necessary to use these operating systems, and that you can use a basic system editor to edit and configure files. It has been written with the assumption that you have experience with Samba, have read The Official Samba-3 HOWTO and Reference Guide and the Samba-HOWTO-Collection, or that you have familiarity with Microsoft Windows. If you do not have this experience, you can follow the examples in this book but may find y