1
<?xml version="1.0" encoding="iso-8859-1"?>
2
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
6
<refentrytitle>swat</refentrytitle>
7
<manvolnum>8</manvolnum>
8
<refmiscinfo class="source">Samba</refmiscinfo>
9
<refmiscinfo class="manual">System Administration tools</refmiscinfo>
10
<refmiscinfo class="version">3.4</refmiscinfo>
15
<refname>swat</refname>
16
<refpurpose>Samba Web Administration Tool</refpurpose>
21
<command>swat</command>
22
<arg choice="opt">-s <smb config file></arg>
23
<arg choice="opt">-a</arg>
24
<arg choice="opt">-P</arg>
29
<title>DESCRIPTION</title>
31
<para>This tool is part of the <citerefentry><refentrytitle>samba</refentrytitle>
32
<manvolnum>7</manvolnum></citerefentry> suite.</para>
35
<para><command>swat</command> allows a Samba administrator to
36
configure the complex <citerefentry><refentrytitle>smb.conf</refentrytitle>
37
<manvolnum>5</manvolnum></citerefentry> file via a Web browser. In addition,
38
a <command>swat</command> configuration page has help links
39
to all the configurable options in the <filename>smb.conf</filename> file allowing an
40
administrator to easily look up the effects of any change. </para>
42
<para><command>swat</command> is run from <command>inetd</command> </para>
47
<title>OPTIONS</title>
51
<term>-s smb configuration file</term>
52
<listitem><para>The default configuration file path is
53
determined at compile time. The file specified contains
54
the configuration details required by the <citerefentry><refentrytitle>smbd</refentrytitle>
55
<manvolnum>8</manvolnum></citerefentry> server. This is the file
56
that <command>swat</command> will modify.
57
The information in this file includes server-specific
58
information such as what printcap file to use, as well as
59
descriptions of all the services that the server is to provide.
60
See <filename>smb.conf</filename> for more information.
67
<listitem><para>This option disables authentication and
68
places <command>swat</command> in demo mode. In that mode anyone will be able to modify
69
the <filename>smb.conf</filename> file. </para>
71
<para><emphasis>WARNING: Do NOT enable this option on a production
72
server. </emphasis></para></listitem>
77
<listitem><para>This option restricts read-only users to the password
78
management page. <command>swat</command> can then be used to change
79
user passwords without users seeing the "View" and "Status" menu
80
buttons.</para></listitem>
93
<title>INSTALLATION</title>
95
<para>Swat is included as binary package with most distributions. The
96
package manager in this case takes care of the installation and
97
configuration. This section is only for those who have compiled
101
<para>After you compile SWAT you need to run <command>make install
102
</command> to install the <command>swat</command> binary
103
and the various help files and images. A default install would put
107
<listitem><para>/usr/local/samba/sbin/swat</para></listitem>
108
<listitem><para>/usr/local/samba/swat/images/*</para></listitem>
109
<listitem><para>/usr/local/samba/swat/help/*</para></listitem>
113
<title>Inetd Installation</title>
115
<para>You need to edit your <filename>/etc/inetd.conf
116
</filename> and <filename>/etc/services</filename>
117
to enable SWAT to be launched via <command>inetd</command>.</para>
119
<para>In <filename>/etc/services</filename> you need to
120
add a line like this: </para>
122
<para><command>swat 901/tcp</command></para>
124
<para>Note for NIS/YP and LDAP users - you may need to rebuild the
125
NIS service maps rather than alter your local <filename>
126
/etc/services</filename> file. </para>
128
<para>the choice of port number isn't really important
129
except that it should be less than 1024 and not currently
130
used (using a number above 1024 presents an obscure security
131
hole depending on the implementation details of your
132
<command>inetd</command> daemon). </para>
134
<para>In <filename>/etc/inetd.conf</filename> you should
135
add a line like this: </para>
137
<para><command>swat stream tcp nowait.400 root
138
/usr/local/samba/sbin/swat swat</command></para>
140
<para>Once you have edited <filename>/etc/services</filename>
141
and <filename>/etc/inetd.conf</filename> you need to send a
142
HUP signal to inetd. To do this use <command>kill -1 PID
143
</command> where PID is the process ID of the inetd daemon. </para>
152
<title>LAUNCHING</title>
154
<para>To launch SWAT just run your favorite web browser and
155
point it at "http://localhost:901/".</para>
157
<para>Note that you can attach to SWAT from any IP connected
158
machine but connecting from a remote machine leaves your
159
connection open to password sniffing as passwords will be sent
160
in the clear over the wire. </para>
168
<term><filename>/etc/inetd.conf</filename></term>
169
<listitem><para>This file must contain suitable startup
170
information for the meta-daemon.</para></listitem>
174
<term><filename>/etc/services</filename></term>
175
<listitem><para>This file must contain a mapping of service name
176
(e.g., swat) to service port (e.g., 901) and protocol type
177
(e.g., tcp). </para></listitem>
181
<term><filename>/usr/local/samba/lib/smb.conf</filename></term>
182
<listitem><para>This is the default location of the <citerefentry>
183
<refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum>
184
</citerefentry> server configuration file that swat edits. Other
185
common places that systems install this file are <filename>
186
/usr/samba/lib/smb.conf</filename> and <filename>/etc/smb.conf
187
</filename>. This file describes all the services the server
188
is to make available to clients. </para></listitem>
195
<title>WARNINGS</title>
197
<para><command>swat</command> will rewrite your <citerefentry>
198
<refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum>
199
</citerefentry> file. It will rearrange the entries and delete all
200
comments, <parameter>include=</parameter> and <parameter>copy=
201
</parameter> options. If you have a carefully crafted <filename>
202
smb.conf</filename> then back it up or don't use swat! </para>
207
<title>VERSION</title>
209
<para>This man page is correct for version 3 of the Samba suite.</para>
213
<title>SEE ALSO</title>
214
<para><command>inetd(5)</command>, <citerefentry>
215
<refentrytitle>smbd</refentrytitle><manvolnum>8</manvolnum>
216
</citerefentry>, <citerefentry><refentrytitle>smb.conf</refentrytitle>
217
<manvolnum>5</manvolnum></citerefentry></para>
221
<title>AUTHOR</title>
223
<para>The original Samba software and related utilities
224
were created by Andrew Tridgell. Samba is now developed
225
by the Samba Team as an Open Source project similar
226
to the way the Linux kernel is developed.</para>
228
<para>The original Samba man pages were written by Karl Auer.
229
The man page sources were converted to YODL format (another
230
excellent piece of Open Source software, available at <ulink url="ftp://ftp.icce.rug.nl/pub/unix/">
231
ftp://ftp.icce.rug.nl/pub/unix/</ulink>) and updated for the Samba 2.0
232
release by Jeremy Allison. The conversion to DocBook for
233
Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for
234
Samba 3.0 was done by Alexander Bokovoy.</para>