- Fix the kerberos downgrade problem:
[Samba/gebeck_regimport.git] / docs / htmldocs / using_samba / ch01_02.html
blob9ccb2dfeee2393023fabc40e9c2d6da3243cf998
1 <HTML>
2 <HEAD>
3 <TITLE>
4 [Chapter 1] 1.2 What Can Samba Do For Me?</title><META NAME="DC.title" CONTENT=""><META NAME="DC.creator" CONTENT=""><META NAME="DC.publisher" CONTENT="O'Reilly &amp; Associates, Inc."><META NAME="DC.date" CONTENT="1999-11-05T21:29:50Z"><META NAME="DC.type" CONTENT="Text.Monograph"><META NAME="DC.format" CONTENT="text/html" SCHEME="MIME"><META NAME="DC.source" CONTENT="" SCHEME="ISBN"><META NAME="DC.language" CONTENT="en-US"><META NAME="generator" CONTENT="Jade 1.1/O'Reilly DocBook 3.0 to HTML 4.0"></head>
5 <BODY BGCOLOR="#FFFFFF" TEXT="#000000" link="#990000" vlink="#0000CC">
6 <table BORDER="0" CELLPADDING="0" CELLSPACING="0" width="90%">
7 <tr>
8 <td width="25%" valign="TOP">
9 <img hspace=10 vspace=10 src="gifs/samba.s.gif"
10 alt="Using Samba" align=left valign=top border=0>
11 </td>
12 <td height="105" valign="TOP">
13 <br>
14 <H2>Using Samba</H2>
15 <font size="-1">
16 Robert Eckstein, David Collier-Brown, Peter Kelly
17 <br>1st Edition November 1999
18 <br>1-56592-449-5, Order Number: 4495
19 <br>416 pages, $34.95
20 </font>
21 <p> <a href="http://www.oreilly.com/catalog/samba/">Buy the hardcopy</a>
22 <p><a href="index.html">Table of Contents</a>
23 </td>
24 </tr>
25 </table>
26 <hr size=1 noshade>
27 <!--sample chapter begins -->
29 <center>
30 <DIV CLASS="htmlnav">
31 <TABLE WIDTH="515" BORDER="0" CELLSPACING="0" CELLPADDING="0">
32 <TR>
33 <TD ALIGN="LEFT" VALIGN="TOP" WIDTH="172">
34 <A CLASS="sect1" HREF="ch01_01.html" TITLE="1.1 What is Samba?">
35 <IMG SRC="gifs/txtpreva.gif" ALT="Previous: 1.1 What is Samba?" BORDER="0"></a></td><TD ALIGN="CENTER" VALIGN="TOP" WIDTH="171">
36 <B>
37 <FONT FACE="ARIEL,HELVETICA,HELV,SANSERIF" SIZE="-1">
38 <A CLASS="chapter" REL="up" HREF="ch01_01.html" TITLE="1. Learning the Samba">
39 Chapter 1<br>
40 Learning the Samba</a></font></b></td><TD ALIGN="RIGHT" VALIGN="TOP" WIDTH="172">
41 <A CLASS="sect1" HREF="ch01_03.html" TITLE="1.3 Getting Familiar with a SMB/CIFS Network">
42 <IMG SRC="gifs/txtnexta.gif" ALT="Next: 1.3 Getting Familiar with a SMB/CIFS Network" BORDER="0"></a></td></tr></table>&nbsp;<hr noshade size=1></center>
43 </div>
44 <blockquote>
45 <div>
46 <H2 CLASS="sect1">
47 <A CLASS="title" NAME="ch01-pgfId-937232">
48 1.2 What Can Samba Do For Me?</a></h2><P CLASS="para">
49 As explained earlier, Samba can help Windows and Unix machines coexist in the same network. However, there are some specific reasons why you might want to set up a Samba server on your network:</p><UL CLASS="itemizedlist">
50 <LI CLASS="listitem">
51 <P CLASS="para">
52 <A CLASS="listitem" NAME="ch01-pgfId-941390">
53 </a>You don't want to pay for&nbsp;- or can't afford&nbsp;- a full-fledged Windows NT server, yet you still need the functionality that one provides.</p></li><LI CLASS="listitem">
54 <P CLASS="para">
55 <A CLASS="listitem" NAME="ch01-pgfId-941391">
56 </a>You want to provide a common area for data or user directories in order to transition from a Windows server to a Unix one, or vice versa.</p></li><LI CLASS="listitem">
57 <P CLASS="para">
58 <A CLASS="listitem" NAME="ch01-pgfId-941394">
59 </a>You want to be able to share printers across both Windows and Unix workstations.</p></li><LI CLASS="listitem">
60 <P CLASS="para">
61 <A CLASS="listitem" NAME="ch01-pgfId-941973">
62 </a>You want to be able to access NT files from a Unix server.</p></li></ul><P CLASS="para">
63 Let's take a quick tour of Samba in action. Assume that we have the following basic network configuration: a Samba-enabled Unix machine, to which we will assign the name <CODE CLASS="literal">
64 hydra</code>, and a pair of Windows clients, to which we will assign the names <CODE CLASS="literal">
65 phoenix</code> and <CODE CLASS="literal">
66 chimaera</code>, all connected via a local area network (LAN). Let's also assume that <CODE CLASS="literal">
67 hydra</code> also has a local inkjet printer connected to it, <CODE CLASS="literal">
68 lp</code>, and a disk share named <CODE CLASS="literal">
69 network</code>&nbsp;- both of which it can offer to the other two machines. A graphic of this network is shown in <A CLASS="xref" HREF="ch01_02.html#ch01-45964">
70 Figure 1.1</a>. </p><H4 CLASS="figure">
71 <A CLASS="title" NAME="ch01-45964">
72 Figure 1.1: A simple network setup with a Samba server</a></h4><IMG CLASS="graphic" SRC="figs/sam.0101.gif" ALT="Figure 1.1"><P CLASS="para">
73 In this network, each of the computers listed share the same <I CLASS="firstterm">
74 workgroup</i>. A workgroup is simply a group nametag that identifies an arbitrary collection of computers and their resources on an SMB network. There can be several workgroups on the network at any time, but for our basic network example, we'll have only one: the SIMPLE workgroup.</p><DIV CLASS="sect2">
75 <H3 CLASS="sect2">
76 <A CLASS="title" NAME="ch01-pgfId-937316">
77 1.2.1 Sharing a Disk Service</a></h3><P CLASS="para">If everything is properly configured, we should be able to see the Samba server, <CODE CLASS="literal">
78 hydra</code>, through the Network Neighborhood of the <CODE CLASS="literal">
79 phoenix</code> Windows desktop. In fact, <A CLASS="xref" HREF="ch01_02.html#ch01-60493">
80 Figure 1.2</a> shows the Network Neighborhood of the <CODE CLASS="literal">
81 phoenix</code> computer, including <CODE CLASS="literal">
82 hydra</code> and each of the computers that reside in the SIMPLE workgroup. Note the Entire Network icon at the top of the list. As we just mentioned, there can be more than one workgroup on an SMB network at any given time. If a user clicks on the Entire Network icon, he or she will see a list of all the workgroups that currently exist on the network. </p><H4 CLASS="figure">
83 <A CLASS="title" NAME="ch01-60493">
84 Figure 1.2: The Network Neighborhood directory</a></h4><IMG CLASS="graphic" SRC="figs/sam.0102.gif" ALT="Figure 1.2"><P CLASS="para">
85 We can take a closer look at the <CODE CLASS="literal">
86 hydra</code> server by double-clicking on its icon. This contacts <CODE CLASS="literal">
87 hydra</code> itself and requests a list of its <I CLASS="firstterm">
88 shares</i>&nbsp;- the file and printer resources&nbsp;- that the machine provides. In this case, there is a printer entitled <CODE CLASS="literal">
89 lp</code> and a disk share entitled <CODE CLASS="literal">
90 network</code> on the server, as shown in <A CLASS="xref" HREF="ch01_02.html#ch01-76011">
91 Figure 1.3</a>. Note that the Windows display shows hostnames in mixed case (Hydra). Case is irrelevant in hostnames, so you may see hydra, Hydra, and HYDRA in various displays or command output, but they all refer to a single system. Thanks to Samba, Windows 98 sees the Unix server as a valid SMB server, and can access the <CODE CLASS="literal">
92 network</code> folder as if it were just another system folder. </p><H4 CLASS="figure">
93 <A CLASS="title" NAME="ch01-76011">
94 Figure 1.3: Shares available on the hydra sever as viewed from phoenix</a></h4><IMG CLASS="graphic" SRC="figs/sam.0103.gif" ALT="Figure 1.3"><P CLASS="para">
95 One popular feature of Windows 95/98/NT is that you can map a letter-drive to a known network directory using the Map Network Drive option in the Windows Explorer.[<A CLASS="footnote" HREF="#ch01-pgfId-941061">3</a>] Once you do so, your applications can access the folder across the network with a standard drive letter. Hence, you can store data on it, install and run programs from it, and even password-protect it against unwanted visitors. See <A CLASS="xref" HREF="ch01_02.html#ch01-55465">
96 Figure 1.4</a> for an example of mapping a letter-drive to a network directory. </p><BLOCKQUOTE CLASS="footnote">
97 <DIV CLASS="footnote">
98 <P CLASS="para">
99 <A CLASS="footnote" NAME="ch01-pgfId-941061">[3]</a> You can also right-click on the shared resource in the Network Neighborhood, and then select the Map Network Drive menu item.</p></div></blockquote><H4 CLASS="figure">
100 <A CLASS="title" NAME="ch01-55465">
101 Figure 1.4: Mapping a network drive to a Windows letter-drive</a></h4><IMG CLASS="graphic" SRC="figs/sam.0104.gif" ALT="Figure 1.4"><P CLASS="para">
102 Take a look at the Path: entry in the dialog box of <A CLASS="xref" HREF="ch01_02.html#ch01-55465">
103 Figure 1.4</a>. An equivalent way to represent a directory on a network machine is by using two backslashes, followed by the name of the networked machine, another backslash, and the networked directory of the machine, as shown below:</p>
105 <PRE><I>\\network-machine\directory</i></pre>
107 <P CLASS="para">
108 This is known as the <I CLASS="firstterm">
109 UNC</i> (Universal Naming Convention) in the Windows world. For example, the dialog box in <A CLASS="xref" HREF="ch01_02.html#ch01-55465">
110 Figure 1.4</a> represents the network directory on the <CODE CLASS="literal">
111 hydra</code> server as:</p>
113 <PRE CLASS="programlisting">\\HYDRA\<CODE CLASS="replaceable"><I>network</i></code></pre><P CLASS="para">
115 If this looks somewhat familiar to you, you're probably thinking of <I CLASS="firstterm">
116 uniform resource locators</i> (URLs), which are addresses that web browsers such as Netscape Navigator and Internet Explorer use to resolve machines across the Internet. Be sure not to confuse the two: web browsers typically use forward slashes instead of back slashes, and they precede the initial slashes with the data transfer protocol (i.e., ftp, http) and a colon (:). In reality, URLs and UNCs are two completely separate things.</p><P CLASS="para">
117 Once the network drive is set up, Windows and its programs will behave as if the networked directory was a fixed disk. If you have any applications that support multiuser functionality on a network, you can install those programs on the network drive.[<A CLASS="footnote" HREF="#ch01-pgfId-952017">4</a>] <A CLASS="xref" HREF="ch01_02.html#ch01-32686">
118 Figure 1.5</a> shows the resulting network drive as it would appear with other storage devices in the Windows 98 client. Note the pipeline attachment in the icon for the G: drive; this indicates that it is a network drive instead of a fixed drive. </p><BLOCKQUOTE CLASS="footnote">
119 <DIV CLASS="footnote">
120 <P CLASS="para">
121 <A CLASS="footnote" NAME="ch01-pgfId-952017">[4]</a> Be warned that many end-user license agreements forbid installing a program on a network such that multiple clients can access it. Check the legal agreements that accompany the product to be absolutely sure.</p></div></blockquote><H4 CLASS="figure">
122 <A CLASS="title" NAME="ch01-32686">
123 Figure 1.5: The Network directory mapped to the client letter-drive G</a></h4><IMG CLASS="graphic" SRC="figs/sam.0105.gif" ALT="Figure 1.5"><P CLASS="para">
124 From our Windows NT Workstation machine, <CODE CLASS="literal">
125 chimaera</code>, Samba looks almost identical to Windows 98. <A CLASS="xref" HREF="ch01_02.html#ch01-29255">
126 Figure 1.6</a> shows the same view of the <CODE CLASS="literal">
127 hydra</code> server from the Windows NT 4.0 Network Neighborhood. Setting up the network drive using the Map Network Drive option in Windows NT Workstation 4.0 would have identical results as well. </p><H4 CLASS="figure">
128 <A CLASS="title" NAME="ch01-29255">
129 Figure 1.6: Shares available on hydra (viewed from chimaera) </a></h4><IMG CLASS="graphic" SRC="figs/sam.0106.gif" ALT="Figure 1.6"></div><DIV CLASS="sect2">
130 <H3 CLASS="sect2">
131 <A CLASS="title" NAME="ch01-pgfId-942088">
132 1.2.2 Sharing a Printer</a></h3><P CLASS="para">You probably noticed that the printer <CODE CLASS="literal">
133 lp</code> appeared under the available shares for <CODE CLASS="literal">
134 hydra</code> in <A CLASS="xref" HREF="ch01_02.html#ch01-76011">
135 Figure 1.3</a>. This indicates that the Unix server has a printer that can be shared by the various SMB clients in the workgroup. Data sent to the printer from any of the clients will be spooled on the Unix server and printed in the order it is received.</p><P CLASS="para">Setting up a Samba-enabled printer on the Windows side is even easier than setting up a disk share. By double-clicking on the printer and identifying the manufacturer and model, you can install a driver for this printer on the Windows client. Windows can then properly format any information sent to the network printer and access it as if it were a local printer (we show you how to do this later in the chapter). <A CLASS="xref" HREF="ch01_02.html#ch01-46265">
136 Figure 1.7</a> shows the resulting network printer in the Printers window of Windows 98. Again, note the pipeline attachment below the printer, which identifies it as being on a network. </p><H4 CLASS="figure">
137 <A CLASS="title" NAME="ch01-46265">
138 Figure 1.7: A network printer available on hydra (viewed from chimaera)</a></h4><IMG CLASS="graphic" SRC="figs/sam.0107.gif" ALT="Figure 1.7"><DIV CLASS="sect3">
139 <H4 CLASS="sect3">
140 <A CLASS="title" NAME="ch01-pgfId-937586">
141 1.2.2.1 Seeing things from the Unix side</a></h4><P CLASS="para">
142 As mentioned earlier, Samba appears in Unix as a set of daemon programs. You can view them with the Unix <CODE CLASS="literal">
143 ps</code> and <CODE CLASS="literal">
144 netstat</code> commands, you can read any messages they generate through custom debug files or the Unix <CODE CLASS="literal">
145 syslog</code> (depending on how Samba is set up), and you can configure it from a single Samba properties file: <i>smb.conf</i>. In addition, if you want to get an idea of what each of the daemons are doing, Samba has a program called
146 <i>smbstatus</i> that will lay it all on the line. Here is how it works:</p>
148 <PRE CLASS="programlisting"><B CLASS="emphasis.bold"><CODE CLASS="literal">#</code> smbstatus</b>
149 </pre><PRE CLASS="programlisting">
150 Samba version 2.0.4
151 Service uid gid pid machine
152 ----------------------------------------------
153 network davecb davecb 7470 phoenix (192.168.220.101) Sun May 16
154 network davecb davecb 7589 chimaera (192.168.220.102) Sun May 16
156 Locked files:
157 Pid DenyMode R/W Oplock Name
158 --------------------------------------------------
159 7589 DENY_NONE RDONLY EXCLUSIVE+BATCH /home/samba/quicken/inet/common/system/help.bmp Sun May 16 21:23:40 1999
160 7470 DENY_WRITE RDONLY NONE /home/samba/word/office/findfast.exe Sun May 16 20:51:08 1999
161 7589 DENY_WRITE RDONLY EXCLUSIVE+BATCH /home/samba/quicken/lfbmp70n.dll Sun May 16 21:23:39 1999
162 7589 DENY_WRITE RDWR EXCLUSIVE+BATCH /home/samba/quicken/inet/qdata/runtime.dat Sun May 16 21:23:41 1999
163 7470 DENY_WRITE RDONLY EXCLUSIVE+BATCH /home/samba/word/office/osa.exe Sun May 16 20:51:09 1999
164 7589 DENY_WRITE RDONLY NONE /home/samba/quicken/qversion.dll Sun May 16 21:20:33 1999
165 7470 DENY_WRITE RDONLY NONE /home/samba/quicken/qversion.dll Sun May 16 20:51:11 1999
167 Share mode memory usage (bytes):
168 1043432(99%) free + 4312(0%) used + 832(0%) overhead = 1048576(100%) total</pre><P CLASS="para">
169 The Samba status from this output provides three sets of data, each divided into separate sections. The first section tells which systems have connected to the Samba server, identifying each client by its machine name (<CODE CLASS="literal">phoenix</code> and <CODE CLASS="literal">chimaera</code>) and IP address. The second section reports the name and status of the files that are currently in use on a share on the server, including the read/write status and any locks on the files. Finally, Samba reports the amount of memory it has currently allocated to the shares that it administers, including the amount actively used by the shares plus additional overhead. (Note that this is not the same as the total amount of memory that the <EM CLASS="emphasis">
170 smbd</em> or <EM CLASS="emphasis">
171 nmbd</em> processes are using.)</p><P CLASS="para">
172 Don't worry if you don't understand these statistics; they will become easier to understand as you move through the book. </p></div></div></div></blockquote>
173 <div>
174 <center>
175 <hr noshade size=1><TABLE WIDTH="515" BORDER="0" CELLSPACING="0" CELLPADDING="0">
176 <TR>
177 <TD ALIGN="LEFT" VALIGN="TOP" WIDTH="172">
178 <A CLASS="sect1" HREF="ch01_01.html" TITLE="1.1 What is Samba?">
179 <IMG SRC="gifs/txtpreva.gif" ALT="Previous: 1.1 What is Samba?" BORDER="0"></a></td><TD ALIGN="CENTER" VALIGN="TOP" WIDTH="171">
180 <A CLASS="book" HREF="index.html" TITLE="">
181 <IMG SRC="gifs/txthome.gif" ALT="" BORDER="0"></a></td><TD ALIGN="RIGHT" VALIGN="TOP" WIDTH="172">
182 <A CLASS="sect1" HREF="ch01_03.html" TITLE="1.3 Getting Familiar with a SMB/CIFS Network">
183 <IMG SRC="gifs/txtnexta.gif" ALT="Next: 1.3 Getting Familiar with a SMB/CIFS Network" BORDER="0"></a></td></tr><TR>
184 <TD ALIGN="LEFT" VALIGN="TOP" WIDTH="172">
185 1.1 What is Samba?</td><TD ALIGN="CENTER" VALIGN="TOP" WIDTH="171">
186 <A CLASS="index" HREF="inx.html" TITLE="Book Index">
187 <IMG SRC="gifs/index.gif" ALT="Book Index" BORDER="0"></a></td><TD ALIGN="RIGHT" VALIGN="TOP" WIDTH="172">
188 1.3 Getting Familiar with a SMB/CIFS Network</td></tr></table><hr noshade size=1></center>
189 </div>
191 <!-- End of sample chapter -->
192 <CENTER>
193 <FONT SIZE="1" FACE="Verdana, Arial, Helvetica">
194 <A HREF="http://www.oreilly.com/">
195 <B>O'Reilly Home</B></A> <B> | </B>
196 <A HREF="http://www.oreilly.com/sales/bookstores">
197 <B>O'Reilly Bookstores</B></A> <B> | </B>
198 <A HREF="http://www.oreilly.com/order_new/">
199 <B>How to Order</B></A> <B> | </B>
200 <A HREF="http://www.oreilly.com/oreilly/contact.html">
201 <B>O'Reilly Contacts<BR></B></A>
202 <A HREF="http://www.oreilly.com/international/">
203 <B>International</B></A> <B> | </B>
204 <A HREF="http://www.oreilly.com/oreilly/about.html">
205 <B>About O'Reilly</B></A> <B> | </B>
206 <A HREF="http://www.oreilly.com/affiliates.html">
207 <B>Affiliated Companies</B></A><p>
208 <EM>&copy; 1999, O'Reilly &amp; Associates, Inc.</EM>
209 </FONT>
210 </CENTER>
211 </BODY>
212 </html>