1
<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�34.�Advanced Configuration Techniques</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="The Official Samba 3.5.x HOWTO and Reference Guide"><link rel="up" href="optional.html" title="Part�III.�Advanced Configuration"><link rel="prev" href="largefile.html" title="Chapter�33.�Handling Large Directories"><link rel="next" href="migration.html" title="Part�IV.�Migration and Updating"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�34.�Advanced Configuration Techniques</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="largefile.html">Prev</a>�</td><th width="60%" align="center">Part�III.�Advanced Configuration</th><td width="20%" align="right">�<a accesskey="n" href="migration.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter�34.�Advanced Configuration Techniques"><div class="titlepage"><div><div><h2 class="title"><a name="cfgsmarts"></a>Chapter�34.�Advanced Configuration Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><code class="email"><<a class="email" href="mailto:jht@samba.org">jht@samba.org</a>></code></p></div></div></div></div><div><p class="pubdate">June 30, 2005</p></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="cfgsmarts.html#id436242">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="cfgsmarts.html#id436251">Multiple Server Hosting</a></span></dt><dt><span class="sect2"><a href="cfgsmarts.html#id436626">Multiple Virtual Server Personalities</a></span></dt><dt><span class="sect2"><a href="cfgsmarts.html#id437596">Multiple Virtual Server Hosting</a></span></dt></dl></dd></dl></div><p>
1
<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�34.�Advanced Configuration Techniques</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="The Official Samba 3.5.x HOWTO and Reference Guide"><link rel="up" href="optional.html" title="Part�III.�Advanced Configuration"><link rel="prev" href="largefile.html" title="Chapter�33.�Handling Large Directories"><link rel="next" href="migration.html" title="Part�IV.�Migration and Updating"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�34.�Advanced Configuration Techniques</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="largefile.html">Prev</a>�</td><th width="60%" align="center">Part�III.�Advanced Configuration</th><td width="20%" align="right">�<a accesskey="n" href="migration.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter�34.�Advanced Configuration Techniques"><div class="titlepage"><div><div><h2 class="title"><a name="cfgsmarts"></a>Chapter�34.�Advanced Configuration Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><code class="email"><<a class="email" href="mailto:jht@samba.org">jht@samba.org</a>></code></p></div></div></div></div><div><p class="pubdate">June 30, 2005</p></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="cfgsmarts.html#id436235">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="cfgsmarts.html#id436244">Multiple Server Hosting</a></span></dt><dt><span class="sect2"><a href="cfgsmarts.html#id436620">Multiple Virtual Server Personalities</a></span></dt><dt><span class="sect2"><a href="cfgsmarts.html#id437590">Multiple Virtual Server Hosting</a></span></dt></dl></dd></dl></div><p>
2
<a class="indexterm" name="id436097"></a>
2
3
<a class="indexterm" name="id436104"></a>
3
<a class="indexterm" name="id436111"></a>
4
4
Since the release of the first edition of this book there have been repeated requests to better document
5
5
configuration techniques that may help a network administrator to get more out of Samba. Some users have asked
6
6
for documentation regarding the use of the <a class="link" href="smb.conf.5.html#INCLUDE" target="_top">include = file-name</a> parameter.
8
<a class="indexterm" name="id436129"></a>
8
9
<a class="indexterm" name="id436135"></a>
9
<a class="indexterm" name="id436142"></a>
10
10
Commencing around mid-2004 there has been increasing interest in the ability to host multiple Samba servers on
11
11
one machine. There has also been an interest in the hosting of multiple Samba server personalities on one
14
<a class="indexterm" name="id436148"></a>
14
15
<a class="indexterm" name="id436154"></a>
15
<a class="indexterm" name="id436161"></a>
16
16
Feedback from technical reviewers made the inclusion of this chapter a necessity. So, here is an
17
17
answer the questions that have to date not been adequately addressed. Additional user input is welcome as
18
18
it will help this chapter to mature. What is presented here is just a small beginning.
20
<a class="indexterm" name="id436173"></a>
20
<a class="indexterm" name="id436167"></a>
21
<a class="indexterm" name="id436174"></a>
21
22
<a class="indexterm" name="id436180"></a>
22
<a class="indexterm" name="id436187"></a>
23
23
There are a number of ways in which multiple servers can be hosted on a single Samba server. Multiple server
24
24
hosting makes it possible to host multiple domain controllers on one machine. Each such machine is
25
25
independent, and each can be stopped or started without affecting another.
27
<a class="indexterm" name="id436193"></a>
27
28
<a class="indexterm" name="id436199"></a>
28
<a class="indexterm" name="id436205"></a>
29
<a class="indexterm" name="id436212"></a>
29
<a class="indexterm" name="id436206"></a>
30
30
Sometimes it is desirable to host multiple servers, each with its own security mode. For example, a single
31
31
UNIX/Linux host may be a domain member server (DMS) as well as a generic anonymous print server. In this case,
32
32
only domain member machines and domain users can access the DMS, but even guest users can access the generic
33
33
print server. Another example of a situation where it may be beneficial to host a generic (anonymous) server
34
34
is to host a CDROM server.
36
<a class="indexterm" name="id436220"></a>
36
37
<a class="indexterm" name="id436226"></a>
37
<a class="indexterm" name="id436233"></a>
38
38
Some environments dictate the need to have separate servers, each with their own resources, each of which are
39
39
accessible only by certain users or groups. This is one of the simple, but highly effective, ways that Samba
40
40
can replace many physical Windows servers in one Samba installation.
41
</p><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id436242"></a>Implementation</h2></div></div></div><p>
42
</p><div class="sect2" title="Multiple Server Hosting"><div class="titlepage"><div><div><h3 class="title"><a name="id436251"></a>Multiple Server Hosting</h3></div></div></div><p>
43
<a class="indexterm" name="id436258"></a>
44
<a class="indexterm" name="id436265"></a>
41
</p><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id436235"></a>Implementation</h2></div></div></div><p>
42
</p><div class="sect2" title="Multiple Server Hosting"><div class="titlepage"><div><div><h3 class="title"><a name="id436244"></a>Multiple Server Hosting</h3></div></div></div><p>
43
<a class="indexterm" name="id436252"></a>
44
<a class="indexterm" name="id436259"></a>
45
<a class="indexterm" name="id436266"></a>
45
46
<a class="indexterm" name="id436272"></a>
46
47
<a class="indexterm" name="id436279"></a>
47
48
<a class="indexterm" name="id436286"></a>
48
<a class="indexterm" name="id436292"></a>
49
<a class="indexterm" name="id436299"></a>
49
<a class="indexterm" name="id436293"></a>
50
50
The use of multiple server hosting involves running multiple separate instances of Samba, each with it's own
51
51
configuration file. This method is complicated by the fact that each instance of <span class="application">nmbd</span>, <span class="application">smbd</span> and <span class="application">winbindd</span>
52
52
must have write access to entirely separate TDB files. The ability to keep separate the TDB files used by
54
54
own default TDB directories, or by configuring these in the <code class="filename">smb.conf</code> file, in which case each instance of
55
55
<span class="application">nmbd</span>, <span class="application">smbd</span> and <span class="application">winbindd</span> must be told to start up with its own <code class="filename">smb.conf</code> configuration file.
57
<a class="indexterm" name="id436372"></a>
57
58
<a class="indexterm" name="id436378"></a>
58
59
<a class="indexterm" name="id436385"></a>
59
60
<a class="indexterm" name="id436392"></a>
60
<a class="indexterm" name="id436398"></a>
61
61
Each instance should operate on its own IP address (that independent IP address can be an IP Alias).
62
62
Each instance of <span class="application">nmbd</span>, <span class="application">smbd</span> and <span class="application">winbindd</span> should listen only on its own IP socket. This can be secured
63
63
using the <a class="link" href="smb.conf.5.html#SOCKETADDRESS" target="_top">socket address</a> parameter. Each instance of the Samba server will have its
64
64
own SID also, this means that the servers are discrete and independent of each other.
66
<a class="indexterm" name="id436435"></a>
66
67
<a class="indexterm" name="id436441"></a>
67
68
<a class="indexterm" name="id436448"></a>
68
<a class="indexterm" name="id436454"></a>
69
<a class="indexterm" name="id436461"></a>
69
<a class="indexterm" name="id436455"></a>
70
<a class="indexterm" name="id436462"></a>
70
71
<a class="indexterm" name="id436468"></a>
71
72
<a class="indexterm" name="id436475"></a>
72
73
<a class="indexterm" name="id436482"></a>
73
<a class="indexterm" name="id436488"></a>
74
<a class="indexterm" name="id436495"></a>
74
<a class="indexterm" name="id436489"></a>
75
75
The user of multiple server hosting is non-trivial, and requires careful configuration of each aspect of
76
76
process management and start up. The <code class="filename">smb.conf</code> parameters that must be carefully configured includes:
77
77
<a class="link" href="smb.conf.5.html#PRIVATEDIR" target="_top">private dir</a>, <a class="link" href="smb.conf.5.html#PIDDIRECTORY" target="_top">pid directory</a>,<a class="link" href="smb.conf.5.html#LOCKDIRECTORY" target="_top">lock directory</a>, <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a>, <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY" target="_top">bind interfaces only</a>, <a class="link" href="smb.conf.5.html#NETBIOSNAME" target="_top">netbios name</a>, <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a>, <a class="link" href="smb.conf.5.html#SOCKETADDRESS" target="_top">socket address</a>.
79
<a class="indexterm" name="id436593"></a>
79
80
<a class="indexterm" name="id436600"></a>
80
81
<a class="indexterm" name="id436606"></a>
81
<a class="indexterm" name="id436613"></a>
82
82
Those who elect to create multiple Samba servers should have the ability to read and follow
83
83
the Samba source code, and to modify it as needed. This mode of deployment is considered beyond the scope of
84
84
this book. However, if someone will contribute more comprehensive documentation we will gladly review it, and
85
85
if it is suitable extend this section of this chapter. Until such documentation becomes available the hosting
86
86
of multiple samba servers on a single host is considered not supported for Samba-3 by the Samba Team.
87
</p></div><div class="sect2" title="Multiple Virtual Server Personalities"><div class="titlepage"><div><div><h3 class="title"><a name="id436626"></a>Multiple Virtual Server Personalities</h3></div></div></div><p>
88
<a class="indexterm" name="id436634"></a>
89
<a class="indexterm" name="id436641"></a>
90
<a class="indexterm" name="id436648"></a>
87
</p></div><div class="sect2" title="Multiple Virtual Server Personalities"><div class="titlepage"><div><div><h3 class="title"><a name="id436620"></a>Multiple Virtual Server Personalities</h3></div></div></div><p>
88
<a class="indexterm" name="id436628"></a>
89
<a class="indexterm" name="id436635"></a>
90
<a class="indexterm" name="id436642"></a>
91
91
Samba has the ability to host multiple virtual servers, each of which have their own personality. This is
92
92
achieved by configuring an <code class="filename">smb.conf</code> file that is common to all personalities hosted. Each server
93
93
personality is hosted using its own <a class="link" href="smb.conf.5.html#NETBIOSALIAS" target="_top">netbios alias</a> name, and each has its own distinct
94
94
<a class="link" href="smb.conf.5.html#%5BGLOBAL%5D" target="_top">[global]</a> section. Each server may have its own stanzas for services and meta-services.
96
<a class="indexterm" name="id436683"></a>
96
97
<a class="indexterm" name="id436690"></a>
97
<a class="indexterm" name="id436696"></a>
98
<a class="indexterm" name="id436703"></a>
98
<a class="indexterm" name="id436697"></a>
99
99
When hosting multiple virtual servers, each with their own personality, each can be in a different workgroup.
100
100
Only the primary server can be a domain member or a domain controller. The personality is defined by the
101
101
combination of the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> mode it is operating in, the <a class="link" href="smb.conf.5.html#NETBIOSALIASES" target="_top">netbios aliases</a> it has, and the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> that is defined for it.
103
<a class="indexterm" name="id436743"></a>
103
104
<a class="indexterm" name="id436750"></a>
104
105
<a class="indexterm" name="id436756"></a>
105
106
<a class="indexterm" name="id436763"></a>
106
107
<a class="indexterm" name="id436770"></a>
107
<a class="indexterm" name="id436776"></a>
108
<a class="indexterm" name="id436783"></a>
108
<a class="indexterm" name="id436777"></a>
109
109
This configuration style can be used either with NetBIOS names, or using NetBIOS-less SMB over TCP services.
110
110
If run using NetBIOS mode (the most common method) it is important that the parameter <a class="link" href="smb.conf.5.html#SMBPORTS" target="_top">smb ports = 139</a> should be specified in the primary <code class="filename">smb.conf</code> file. Failure to do this will result
111
111
in Samba operating over TCP port 445 and problematic operation at best, and at worst only being able to obtain
135
135
The CDROM server is called <code class="literal">CDSERVER</code> and its workgroup is <code class="literal">ARTSDEPT</code>. A
136
136
possible implementation is shown here:
138
<a class="indexterm" name="id436971"></a>
138
139
<a class="indexterm" name="id436978"></a>
139
140
<a class="indexterm" name="id436985"></a>
140
<a class="indexterm" name="id436991"></a>
141
<a class="indexterm" name="id436998"></a>
141
<a class="indexterm" name="id436992"></a>
142
142
The <code class="filename">smb.conf</code> file for the master server is shown in <a class="link" href="cfgsmarts.html#elastic" title="Example�34.1.�Elastic smb.conf File">Elastic smb.conf File</a>.
143
143
This file is placed in the <code class="filename">/etc/samba</code> directory. Only the <span class="application">nmbd</span> and the <span class="application">smbd</span> daemons
144
144
are needed. When started the server will appear in Windows Network Neighborhood as the machine
145
145
<code class="literal">ELASTIC</code> under the workgroup <code class="literal">ROBINSNEST</code>. It is helpful if the Windows
146
146
clients that must access this server are also in the workgroup <code class="literal">ROBINSNEST</code> as this will make
147
147
browsing much more reliable.
148
</p><div class="example"><a name="elastic"></a><p class="title"><b>Example�34.1.�Elastic smb.conf File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id437085"></a><em class="parameter"><code>workgroup = ROBINSNEST</code></em></td></tr><tr><td><a class="indexterm" name="id437097"></a><em class="parameter"><code>netbios name = ELASTIC</code></em></td></tr><tr><td><a class="indexterm" name="id437108"></a><em class="parameter"><code>netbios aliases = CDSERVER</code></em></td></tr><tr><td><a class="indexterm" name="id437120"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id437131"></a><em class="parameter"><code>printcap name = cups</code></em></td></tr><tr><td><a class="indexterm" name="id437143"></a><em class="parameter"><code>disable spoolss = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437154"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id437166"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id437177"></a><em class="parameter"><code>include = /etc/samba/smb-%L.conf</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id437198"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id437210"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id437221"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id437232"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[office]</code></em></td></tr><tr><td><a class="indexterm" name="id437253"></a><em class="parameter"><code>comment = Data</code></em></td></tr><tr><td><a class="indexterm" name="id437264"></a><em class="parameter"><code>path = /data</code></em></td></tr><tr><td><a class="indexterm" name="id437276"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id437296"></a><em class="parameter"><code>comment = All Printers</code></em></td></tr><tr><td><a class="indexterm" name="id437308"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id437319"></a><em class="parameter"><code>create mask = 0600</code></em></td></tr><tr><td><a class="indexterm" name="id437330"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437341"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437353"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437364"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><p>
149
<a class="indexterm" name="id437379"></a>
148
</p><div class="example"><a name="elastic"></a><p class="title"><b>Example�34.1.�Elastic smb.conf File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id437079"></a><em class="parameter"><code>workgroup = ROBINSNEST</code></em></td></tr><tr><td><a class="indexterm" name="id437090"></a><em class="parameter"><code>netbios name = ELASTIC</code></em></td></tr><tr><td><a class="indexterm" name="id437102"></a><em class="parameter"><code>netbios aliases = CDSERVER</code></em></td></tr><tr><td><a class="indexterm" name="id437114"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id437125"></a><em class="parameter"><code>printcap name = cups</code></em></td></tr><tr><td><a class="indexterm" name="id437136"></a><em class="parameter"><code>disable spoolss = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437148"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id437160"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id437171"></a><em class="parameter"><code>include = /etc/samba/smb-%L.conf</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id437192"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id437203"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id437215"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id437226"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[office]</code></em></td></tr><tr><td><a class="indexterm" name="id437246"></a><em class="parameter"><code>comment = Data</code></em></td></tr><tr><td><a class="indexterm" name="id437258"></a><em class="parameter"><code>path = /data</code></em></td></tr><tr><td><a class="indexterm" name="id437269"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id437290"></a><em class="parameter"><code>comment = All Printers</code></em></td></tr><tr><td><a class="indexterm" name="id437301"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id437313"></a><em class="parameter"><code>create mask = 0600</code></em></td></tr><tr><td><a class="indexterm" name="id437323"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437335"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437346"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437358"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><p>
149
<a class="indexterm" name="id437372"></a>
150
150
The configuration file for the CDROM server is listed in <a class="link" href="cfgsmarts.html#cdserver" title="Example�34.2.�CDROM Server smb-cdserver.conf file">CDROM Server
151
151
smb-cdserver.conf file</a>. This file is called <code class="filename">smb-cdserver.conf</code> and it should be
152
152
located in the <code class="filename">/etc/samba</code> directory. Machines that are in the workgroup
153
153
<code class="literal">ARTSDEPT</code> will be able to browse this server freely.
154
</p><div class="example"><a name="cdserver"></a><p class="title"><b>Example�34.2.�CDROM Server smb-cdserver.conf file</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id437442"></a><em class="parameter"><code>workgroup = ARTSDEPT</code></em></td></tr><tr><td><a class="indexterm" name="id437453"></a><em class="parameter"><code>netbios name = CDSERVER</code></em></td></tr><tr><td><a class="indexterm" name="id437465"></a><em class="parameter"><code>map to guest = Bad User</code></em></td></tr><tr><td><a class="indexterm" name="id437476"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[carousel]</code></em></td></tr><tr><td><a class="indexterm" name="id437497"></a><em class="parameter"><code>comment = CDROM Share</code></em></td></tr><tr><td><a class="indexterm" name="id437508"></a><em class="parameter"><code>path = /export/cddata</code></em></td></tr><tr><td><a class="indexterm" name="id437520"></a><em class="parameter"><code>read only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437531"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr></table></div></div><br class="example-break"><p>
154
</p><div class="example"><a name="cdserver"></a><p class="title"><b>Example�34.2.�CDROM Server smb-cdserver.conf file</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id437435"></a><em class="parameter"><code>workgroup = ARTSDEPT</code></em></td></tr><tr><td><a class="indexterm" name="id437447"></a><em class="parameter"><code>netbios name = CDSERVER</code></em></td></tr><tr><td><a class="indexterm" name="id437458"></a><em class="parameter"><code>map to guest = Bad User</code></em></td></tr><tr><td><a class="indexterm" name="id437470"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[carousel]</code></em></td></tr><tr><td><a class="indexterm" name="id437490"></a><em class="parameter"><code>comment = CDROM Share</code></em></td></tr><tr><td><a class="indexterm" name="id437502"></a><em class="parameter"><code>path = /export/cddata</code></em></td></tr><tr><td><a class="indexterm" name="id437513"></a><em class="parameter"><code>read only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437525"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr></table></div></div><br class="example-break"><p>
155
<a class="indexterm" name="id437539"></a>
155
156
<a class="indexterm" name="id437546"></a>
156
<a class="indexterm" name="id437552"></a>
157
<a class="indexterm" name="id437559"></a>
158
<a class="indexterm" name="id437566"></a>
157
<a class="indexterm" name="id437553"></a>
158
<a class="indexterm" name="id437560"></a>
159
159
The two servers have different resources and are in separate workgroups. The server <code class="literal">ELASTIC</code>
160
160
can only be accessed by uses who have an appropriate account on the host server. All users will be able to
161
161
access the CDROM data that is stored in the <code class="filename">/export/cddata</code> directory. File system
162
162
permissions should set so that the <code class="literal">others</code> user has read-only access to the directory and its
163
163
contents. The files can be owned by root (any user other than the nobody account).
164
</p></div><div class="sect2" title="Multiple Virtual Server Hosting"><div class="titlepage"><div><div><h3 class="title"><a name="id437596"></a>Multiple Virtual Server Hosting</h3></div></div></div><p>
165
<a class="indexterm" name="id437604"></a>
166
<a class="indexterm" name="id437611"></a>
167
<a class="indexterm" name="id437618"></a>
164
</p></div><div class="sect2" title="Multiple Virtual Server Hosting"><div class="titlepage"><div><div><h3 class="title"><a name="id437590"></a>Multiple Virtual Server Hosting</h3></div></div></div><p>
165
<a class="indexterm" name="id437598"></a>
166
<a class="indexterm" name="id437605"></a>
167
<a class="indexterm" name="id437612"></a>
168
168
In this example, the requirement is for a primary domain controller for the domain called
169
169
<code class="literal">MIDEARTH</code>. The PDC will be called <code class="literal">MERLIN</code>. An extra machine called
170
170
<code class="literal">SAURON</code> is required. Each machine will have only its own shares. Both machines belong to the
171
171
same domain/workgroup.
173
<a class="indexterm" name="id437642"></a>
173
174
<a class="indexterm" name="id437648"></a>
174
175
<a class="indexterm" name="id437655"></a>
175
<a class="indexterm" name="id437662"></a>
176
176
The master <code class="filename">smb.conf</code> file is shown in <a class="link" href="cfgsmarts.html#mastersmbc" title="Example�34.3.�Master smb.conf File Global Section">the Master smb.conf File Global Section</a>.
177
177
The two files that specify the share information for each server are shown in <a class="link" href="cfgsmarts.html#merlinsmbc" title="Example�34.4.�MERLIN smb-merlin.conf File Share Section">the
178
178
smb-merlin.conf File Share Section</a>, and <a class="link" href="cfgsmarts.html#sauronsmbc" title="Example�34.5.�SAURON smb-sauron.conf File Share Section">the smb-sauron.conf File Share
179
179
Section</a>. All three files are locate in the <code class="filename">/etc/samba</code> directory.
180
</p><div class="example"><a name="mastersmbc"></a><p class="title"><b>Example�34.3.�Master smb.conf File Global Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id437733"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id437744"></a><em class="parameter"><code>netbios name = MERLIN</code></em></td></tr><tr><td><a class="indexterm" name="id437756"></a><em class="parameter"><code>netbios aliases = SAURON</code></em></td></tr><tr><td><a class="indexterm" name="id437767"></a><em class="parameter"><code>passdb backend = tdbsam</code></em></td></tr><tr><td><a class="indexterm" name="id437779"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id437790"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id437802"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id437813"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id437825"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437836"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437848"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id437860"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id437872"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -G '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437884"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437896"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id437907"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id437919"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id437930"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437942"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437953"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437965"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id437976"></a><em class="parameter"><code>include = /etc/samba/smb-%L.conf</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="merlinsmbc"></a><p class="title"><b>Example�34.4.�MERLIN smb-merlin.conf File Share Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id438016"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id438028"></a><em class="parameter"><code>netbios name = MERLIN</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id438048"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id438060"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id438071"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id438082"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[office]</code></em></td></tr><tr><td><a class="indexterm" name="id438103"></a><em class="parameter"><code>comment = Data</code></em></td></tr><tr><td><a class="indexterm" name="id438114"></a><em class="parameter"><code>path = /data</code></em></td></tr><tr><td><a class="indexterm" name="id438126"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id438146"></a><em class="parameter"><code>comment = NETLOGON</code></em></td></tr><tr><td><a class="indexterm" name="id438158"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id438169"></a><em class="parameter"><code>read only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id438181"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id438201"></a><em class="parameter"><code>comment = All Printers</code></em></td></tr><tr><td><a class="indexterm" name="id438213"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id438224"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id438236"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id438247"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sauronsmbc"></a><p class="title"><b>Example�34.5.�SAURON smb-sauron.conf File Share Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id438287"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id438298"></a><em class="parameter"><code>netbios name = SAURON</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[www]</code></em></td></tr><tr><td><a class="indexterm" name="id438319"></a><em class="parameter"><code>comment = Web Pages</code></em></td></tr><tr><td><a class="indexterm" name="id438330"></a><em class="parameter"><code>path = /srv/www/htdocs</code></em></td></tr><tr><td><a class="indexterm" name="id438342"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="largefile.html">Prev</a>�</td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right">�<a accesskey="n" href="migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter�33.�Handling Large Directories�</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">�Part�IV.�Migration and Updating</td></tr></table></div></body></html>
180
</p><div class="example"><a name="mastersmbc"></a><p class="title"><b>Example�34.3.�Master smb.conf File Global Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id437726"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id437738"></a><em class="parameter"><code>netbios name = MERLIN</code></em></td></tr><tr><td><a class="indexterm" name="id437749"></a><em class="parameter"><code>netbios aliases = SAURON</code></em></td></tr><tr><td><a class="indexterm" name="id437761"></a><em class="parameter"><code>passdb backend = tdbsam</code></em></td></tr><tr><td><a class="indexterm" name="id437772"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id437784"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id437795"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id437807"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id437818"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437830"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437842"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id437854"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id437865"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -G '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437877"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id437889"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id437901"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id437912"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id437924"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437935"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437947"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id437958"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id437970"></a><em class="parameter"><code>include = /etc/samba/smb-%L.conf</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="merlinsmbc"></a><p class="title"><b>Example�34.4.�MERLIN smb-merlin.conf File Share Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id438010"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id438021"></a><em class="parameter"><code>netbios name = MERLIN</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id438042"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id438053"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id438065"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id438076"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[office]</code></em></td></tr><tr><td><a class="indexterm" name="id438096"></a><em class="parameter"><code>comment = Data</code></em></td></tr><tr><td><a class="indexterm" name="id438108"></a><em class="parameter"><code>path = /data</code></em></td></tr><tr><td><a class="indexterm" name="id438119"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id438140"></a><em class="parameter"><code>comment = NETLOGON</code></em></td></tr><tr><td><a class="indexterm" name="id438151"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id438163"></a><em class="parameter"><code>read only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id438174"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id438195"></a><em class="parameter"><code>comment = All Printers</code></em></td></tr><tr><td><a class="indexterm" name="id438206"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id438218"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id438229"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id438241"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sauronsmbc"></a><p class="title"><b>Example�34.5.�SAURON smb-sauron.conf File Share Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id438280"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id438292"></a><em class="parameter"><code>netbios name = SAURON</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[www]</code></em></td></tr><tr><td><a class="indexterm" name="id438312"></a><em class="parameter"><code>comment = Web Pages</code></em></td></tr><tr><td><a class="indexterm" name="id438324"></a><em class="parameter"><code>path = /srv/www/htdocs</code></em></td></tr><tr><td><a class="indexterm" name="id438335"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="largefile.html">Prev</a>�</td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right">�<a accesskey="n" href="migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter�33.�Handling Large Directories�</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">�Part�IV.�Migration and Updating</td></tr></table></div></body></html>
added
removed
docs/htmldocs/Samba3-HOWTO/cfgsmarts.html
