From 66561b0fdadbff6f2b6bb496064d558d6fa0770e Mon Sep 17 00:00:00 2001 From: John Terpstra Date: Thu, 16 Jun 2005 02:10:11 +0000 Subject: [PATCH] PHPTR Edit 2. More to come. (This used to be commit bc4d2f60cefa126415b06440280761d19e8c0d21) --- docs/Samba3-HOWTO/TOSHARG-Bugs.xml | 44 ++-- docs/Samba3-HOWTO/TOSHARG-Compiling.xml | 48 ++--- .../TOSHARG-DNS-DHCP-Configuration.xml | 38 ++-- docs/Samba3-HOWTO/TOSHARG-Diagnosis.xml | 136 ++++++------ docs/Samba3-HOWTO/TOSHARG-HighAvailability.xml | 87 ++++---- docs/Samba3-HOWTO/TOSHARG-LargeFile.xml | 34 +-- docs/Samba3-HOWTO/TOSHARG-NT4Migration.xml | 227 +++++++++++---------- docs/Samba3-HOWTO/TOSHARG-Other-Clients.xml | 56 ++--- docs/Samba3-HOWTO/TOSHARG-Portability.xml | 47 ++--- docs/Samba3-HOWTO/TOSHARG-Problems.xml | 141 ++++++------- docs/Samba3-HOWTO/TOSHARG-SWAT.xml | 130 ++++++------ docs/Samba3-HOWTO/TOSHARG-Speed.xml | 52 +++-- docs/Samba3-HOWTO/TOSHARG-glossary.xml | 54 ++--- docs/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml | 75 ++++--- 14 files changed, 577 insertions(+), 592 deletions(-) diff --git a/docs/Samba3-HOWTO/TOSHARG-Bugs.xml b/docs/Samba3-HOWTO/TOSHARG-Bugs.xml index 5af66fc05a8..1395d8893bc 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Bugs.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Bugs.xml @@ -24,15 +24,15 @@ may be changing the bug reporting mechanism at some point. Please do as much as you can yourself to help track down the bug. Samba is maintained by a dedicated group of people who volunteer -their time, skills and efforts. We receive far more mail than +their time, skills, and efforts. We receive far more mail than we can possibly answer, so you have a much higher chance of a response -and a fix if you send us a developer friendly bug report that lets +and a fix if you send us a developer-friendly bug report that lets us fix it fast. -Do not assume that if you post the bug to the comp.protocols.smb -newsgroup or the mailing list that we will read it. If you suspect that your +If you post the bug to the comp.protocols.smb +newsgroup or the mailing list, do not assume that we will read it. If you suspect that your problem is not a bug but a configuration problem, it is better to send it to the Samba mailing list, as there are thousands of other users on that list who may be able to help you. @@ -52,7 +52,7 @@ at http://samba.org/samba/ Before submitting a bug report, check your config for silly errors. Look in your log files for obvious messages that tell -you've mis-configured something. Run testparm to check your config +you've misconfigured something. Run testparm to check your config file for correct syntax. @@ -76,7 +76,7 @@ If the bug has anything to do with Samba behaving incorrectly as a server (like refusing to open a file), then the log files will probably be quite useful. Depending on the problem, a log level of between 3 and 10 showing the problem may be appropriate. A higher level gives more -detail, but may use too much disk space. +detail but may use too much disk space. @@ -95,9 +95,9 @@ To do this, add the following lines to your main &smb.conf; file: and create a file /usr/local/samba/lib/smb.conf.machine where machine is the name of the client you wish to debug. In that file -put any &smb.conf; commands you want, for example +put any &smb.conf; commands you want; for example, may be useful. This also allows you to -experiment with different security systems, protocol levels and so on, on just +experiment with different security systems, protocol levels, and so on, on just one machine. @@ -118,12 +118,12 @@ prepared for a large volume of log data. - Debugging Specific Operations + Debugging-Specific Operations Samba-3.x permits debugging (logging) of specific functional components without unnecessarily cluttering the log files with detailed logs for all operations. An example configuration to - achive this is shown in: + achieve this is shown in: @@ -136,10 +136,10 @@ prepared for a large volume of log data. This will cause the level of detail to be expanded to the debug class (log level) passed to - each funtional area per the value shown above. The first value passed to the log level + each functional area per the value shown above. The first value passed to the log level of 0 means turn off all unnecessary debugging except the debug classes set for - the functional areas as specified. The table shown in Debugable Functions - may be used to affect very precise analysis of each SMB operation Samba is conducting. + the functional areas as specified. The table shown in Debuggable Functions + may be used to attain very precise analysis of each SMB operation Samba is conducting. @@ -178,7 +178,7 @@ you have faulty hardware or system software). If the message came from smbd, it will probably be accompanied by a message that details the last SMB message received by smbd. This -information is often useful in tracking down the problem so please +information is often useful in tracking down the problem, so please include it in your bug report. @@ -212,7 +212,7 @@ problem occurred. Include this in your report. If you know any assembly language, do a disass of the routine -where the problem occurred (if its in a library routine, then +where the problem occurred (if it's in a library routine, then disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you do not know assembly, including this information in the bug report can be @@ -225,10 +225,10 @@ useful. Unfortunately, some UNIXes (in particular some recent Linux kernels) -refuse to dump a core file if the task has changed uid (which smbd +refuse to dump a core file if the task has changed UID (which smbd does often). To debug with this sort of system, you could try to attach to the running process using -gdb smbd PID where you get +gdb smbd PID, where you get PID from smbstatus. Then use c to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you @@ -236,7 +236,7 @@ where it occurred. -Sometimes it is necessary to build a Samba binary files that have debugging +Sometimes it is necessary to build Samba binary files that have debugging symbols so as to make it possible to capture enough information from a crashed operation to permit the Samba Team to fix the problem. @@ -247,13 +247,13 @@ Add the following line to the &smb.conf; file global section: panic action = "/bin/sleep 90000" -to catch any panics. If smbd seems to be frozen look for any sleep -processes. If it is not, and appears to be spinning, find the process id +to catch any panics. If smbd seems to be frozen, look for any sleep +processes. If it is not, and appears to be spinning, find the PID of the spinning process and type: gdb /usr/local/samba/sbin/smbd -then attach 'pid' (of the spinning process), then type bt to +then attach `pid' (of the spinning process), then type bt to get a backtrace to see where the smbd is in the call path. @@ -268,7 +268,7 @@ get a backtrace to see where the smbd is in the call path. patch The best sort of bug report is one that includes a fix! If you send us patches, please use diff -u format if your version of -diff supports it, otherwise use diff -c4. Make sure +diff supports it; otherwise, use diff -c4. Make sure you do the diff against a clean version of the source and let me know exactly what version you used. diff --git a/docs/Samba3-HOWTO/TOSHARG-Compiling.xml b/docs/Samba3-HOWTO/TOSHARG-Compiling.xml index ac4c55ddb0d..80c9d9d1d6d 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Compiling.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Compiling.xml @@ -14,7 +14,7 @@ You can obtain the Samba source file from the -Samba Website. To obtain a development version, +Samba Web site. To obtain a development version, you can download Samba from Subversion or using rsync. @@ -36,7 +36,7 @@ detailed in this chapter. This chapter is a modified version of the instructions found at the -Samba web site. +Samba Web site. @@ -48,7 +48,7 @@ This chapter is a modified version of the instructions found at the The machine samba.org runs a publicly accessible Subversion repository for access to the source code of several packages, including Samba, rsync, distcc, ccache, and jitterbug. There are two main ways -of accessing the Subversion server on this host: +of accessing the Subversion server on this host. @@ -64,8 +64,8 @@ listing between any two versions on the repository. -Use the URL: -http://svnweb.samba.org/ +Use the URL +http://svnweb.samba.org/. @@ -75,8 +75,8 @@ Use the URL: You can also access the source code via a normal Subversion client. This gives you much more control over what you can -do with the repository and allows you to checkout whole source trees -and keep them up-to-date via normal Subversion commands. This is the +do with the repository and allows you to check out whole source trees +and keep them up to date via normal Subversion commands. This is the preferred method of access if you are a developer and not just a casual browser. @@ -157,12 +157,12 @@ To gain access via anonymous Subversion, use the following steps. location and also via anonymous rsync at the Samba rsync server location. I recommend using rsync rather than ftp. - See the rsync home-page for more info on rsync. + See the rsync home page for more info on rsync. The disadvantage of the unpacked trees is that they do not support automatic - merging of local changes like Subversion does. rsync access is most convenient + merging of local changes as Subversion does. rsync access is most convenient for an initial install. @@ -174,7 +174,7 @@ To gain access via anonymous Subversion, use the following steps. GPG It is strongly recommended that you verify the PGP signature for any source file before installing it. Even if you're not downloading from a mirror site, verifying PGP signatures -should be a standard reflex. Many people today use the GNU GPG tool-set in place of PGP. +should be a standard reflex. Many people today use the GNU GPG tool set in place of PGP. GPG can substitute for PGP. @@ -209,7 +209,7 @@ and verify the Samba source code integrity with: -If you receive a message like, Good signature from Samba Distribution Verification Key... +If you receive a message like, Good signature from Samba Distribution Verification Key..., then all is well. The warnings about trust relationships can be ignored. An example of what you would not want to see would be: @@ -227,7 +227,7 @@ example of what you would not want to see would be: autogen.sh After the source tarball has been unpacked, the next step involves configuration to match Samba to your operating system platform. - If your source directory does not contain the configure script + If your source directory does not contain the configure script, it is necessary to build it before you can continue. Building of the configure script requires the correct version of the autoconf tool kit. Where the necessary version of autoconf is present, @@ -244,7 +244,7 @@ example of what you would not want to see would be: To build the binaries, run the program ./configure in the source directory. This should automatically configure Samba for your operating system. If you have unusual - needs, then you may wish to run: + needs, then you may wish to first run: &rootprompt;./configure --help @@ -264,7 +264,7 @@ example of what you would not want to see would be: &rootprompt; make - Once it is successfully compiled you can execute the command shown here to + Once it is successfully compiled, you can execute the command shown here to install the binaries and manual pages: &rootprompt; make install @@ -317,13 +317,13 @@ example of what you would not want to see would be: - If your Kerberos libraries are in a non-standard location, then + If your Kerberos libraries are in a nonstandard location, then remember to add the configure option . - After you run configure, make sure that + After you run configure, make sure that the include/config.h it generates contain lines like this: #define HAVE_KRB5 1 @@ -381,8 +381,8 @@ example of what you would not want to see would be: SuSE Linux Samba RPMs support Kerberos. Please refer to the documentation for your SuSE Linux system for information regarding SuSE Linux specific configuration. - Additionally, SuSE are very active in the maintenance of Samba packages that provide - the maximum capabilities that are available. You should consider using SuSE provided + Additionally, SuSE is very active in the maintenance of Samba packages that provide + the maximum capabilities that are available. You should consider using SuSE-provided packages where they are available. @@ -402,7 +402,7 @@ example of what you would not want to see would be: inetd. Don't try to do both! Either you can put them in inetd.conf and have them started on demand by inetd or xinetd, or you - can start them as daemons either from the command line or in + can start them as daemons either from the command-line or in /etc/rc.local. See the man pages for details on the command line options. Take particular care to read the bit about what user you need to have to start Samba. In many cases, you must be root. @@ -420,7 +420,7 @@ example of what you would not want to see would be: The following will be different if - you use NIS, NIS+ or LDAP to distribute services maps. + you use NIS, NIS+, or LDAP to distribute services maps. Look at your /etc/services. @@ -466,11 +466,11 @@ netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd the IP address and netmask of your interfaces. Run ifconfig as root if you do not know what the broadcast is for your net. &nmbd; tries - to determine it at run time, but fails on some UNIXes. + to determine it at runtime, but fails on some UNIXes. - Many UNIXes only accept about five parameters on the command + Many UNIXes only accept around five parameters on the command line in inetd.conf. This means you shouldn't use spaces between the options and arguments, or you should use a script and start the script from inetd. @@ -503,7 +503,7 @@ netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd - Make it executable with chmod +x startsmb + Make it executable with chmod +x startsmb. @@ -516,7 +516,7 @@ netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd - If you use the SVR4 style init system, you may like to look at the + If you use the SVR4-style init system, you may like to look at the examples/svr4-startup script to make Samba fit into that system. diff --git a/docs/Samba3-HOWTO/TOSHARG-DNS-DHCP-Configuration.xml b/docs/Samba3-HOWTO/TOSHARG-DNS-DHCP-Configuration.xml index 6a1318bb5ec..72564f52012 100644 --- a/docs/Samba3-HOWTO/TOSHARG-DNS-DHCP-Configuration.xml +++ b/docs/Samba3-HOWTO/TOSHARG-DNS-DHCP-Configuration.xml @@ -27,7 +27,7 @@ notebook computer into a network port and have things just work. UNIX administrators have a point. Many of the normative practices in the Microsoft Windows world at best border on bad practice from a security perspective. Microsoft Windows networking protocols allow workstations to arbitrarily register -themselves on a network. Windows 2000 Active Directory registers entries in the DNS name space +themselves on a network. Windows 2000 Active Directory registers entries in the DNS namespace that are equally perplexing to UNIX administrators. Welcome to the new world! @@ -41,7 +41,7 @@ compatible with their equivalents in the Microsoft Windows 2000 Server products. -The purpose of this chapter is to provide no more than a working example of +This chapter provides no more than a working example of configuration files for both DNS and DHCP servers. The examples used match configuration examples used elsewhere in this document. @@ -50,9 +50,9 @@ configuration examples used elsewhere in this document. This chapter explicitly does not provide a tutorial, nor does it pretend to be a reference guide on DNS and DHCP, as this is well beyond the scope and intent of this document as a whole. Anyone who wants more detailed reference materials -on DNS or DHCP should visit the ISC Web sites at +on DNS or DHCP should visit the ISC Web site at http://www.isc.org. Those wanting a written text might also be interested -in the O'Reilly publications on these two subjects. +in the O'Reilly publications on these two subjects (John, more specific info on O'Reilly publications???????). @@ -61,19 +61,19 @@ in the O'Reilly publications on these two subjects. Example Configuration -The domain name system is to the Internet what water is to life. By it nearly all -information resources (host names) are resolved to their Internet protocol (IP) address. +The DNS is to the Internet what water is to life. Nearly all +information resources (host names) are resolved to their Internet protocol (IP) addresses through DNS. Windows networking tried hard to avoid the complexities of DNS, but alas, DNS won. WINS -The alternative to DNS, the Windows Internet Name Service (WINS) an artifact of -NetBIOS networking over the TCP/IP protocols, has demonstrated scalability problems as -well as a flat non-hierarchical name space that became unmanageable as the size and +The alternative to DNS, the Windows Internet Name Service (WINS) &smbmdash; an artifact of +NetBIOS networking over the TCP/IP protocols &smbmdash; has demonstrated scalability problems as +well as a flat, nonhierarchical namespace that became unmanageable as the size and complexity of information technology networks grew. WINS is a Microsoft implementation of the RFC1001/1002 NetBIOS Name Service (NBNS). -It allows NetBIOS clients (like Microsoft Windows Machines) to register an arbitrary +It allows NetBIOS clients (like Microsoft Windows machines) to register an arbitrary machine name that the administrator or user has chosen together with the IP address that the machine has been given. Through the use of WINS, network client machines could resolve machine names to their IP address. @@ -88,14 +88,14 @@ Both WINS and Microsoft DNS rely on dynamic name registration. Microsoft Windows clients can perform dynamic name registration to the DNS server -on start-up. Alternately, where DHCP is used to assign workstation IP addresses, -it is possible to register host names and their IP address by the DHCP server as -soon as a client acknowledges an IP address lease. Lastly, Microsoft DNS can resolve +on startup. Alternatively, where DHCP is used to assign workstation IP addresses, +it is possible to register hostnames and their IP address by the DHCP server as +soon as a client acknowledges an IP address lease. Finally, Microsoft DNS can resolve hostnames via Microsoft WINS. -The following configurations demonstrate a simple insecure Dynamic DNS server and +The following configurations demonstrate a simple, insecure dynamic DNS server and a simple DHCP server that matches the DNS configuration. @@ -114,13 +114,13 @@ a simple DHCP server that matches the DNS configuration. BIND It is assumed that this network will be situated behind a secure firewall. The files that follow work with ISC BIND version 9. BIND is the Berkeley - Internet Name Daemon. The following configuration files are offered: + Internet Name Daemon. The master configuration file /etc/named.conf determines the location of all further configuration files used. - The location and name of this file is specified in the start-up script + The location and name of this file is specified in the startup script that is part of the operating system. # Quenya.Org configuration file @@ -274,7 +274,7 @@ $ORIGIN 1.168.192.in-addr.arpa. - The above were copied from a fully working system. All dynamically registered + The configuration files shown here were copied from a fully working system. All dynamically registered entries have been removed. In addition to these files, BIND version 9 will create for each of the dynamic registration files a file that has a .jnl extension. Do not edit or tamper with the configuration @@ -317,8 +317,8 @@ subnet 192.168.1.0 netmask 255.255.255.0 { - In the above example, IP addresses between 192.168.1.1 and 192.168.1.59 are - reserved for fixed address (commonly called hard-wired) IP addresses. The + In this example, IP addresses between 192.168.1.1 and 192.168.1.59 are + reserved for fixed-address (commonly called hard-wired) IP addresses. The addresses between 192.168.1.60 and 192.168.1.254 are allocated for dynamic use. diff --git a/docs/Samba3-HOWTO/TOSHARG-Diagnosis.xml b/docs/Samba3-HOWTO/TOSHARG-Diagnosis.xml index 6b844dc17e5..b1408f3b606 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Diagnosis.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Diagnosis.xml @@ -21,15 +21,15 @@ then it is probably working fine. -You should do all the tests, in the order shown. We have tried to +You should do all the tests in the order shown. We have tried to carefully choose them so later tests only use capabilities verified in -the earlier tests. However, do not stop at the first error as there +the earlier tests. However, do not stop at the first error: there have been some instances when continuing with the tests has helped to solve a problem. -If you send one of the Samba mailing lists an email saying, it does not work +If you send one of the Samba mailing lists an email saying, It does not work, and you have not followed this test procedure, you should not be surprised if your email is ignored. @@ -41,7 +41,7 @@ if your email is ignored. In all of the tests, it is assumed you have a Samba server called -BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP. +BIGSERVER and a PC called ACLIENT, both in workgroup TESTGROUP. @@ -50,14 +50,14 @@ The procedure is similar for other types of clients. It is also assumed you know the name of an available share in your -&smb.conf;. I will assume this share is called . +&smb.conf;. I for our examples this share is called . You can add a share like this by adding the lines shown in the next example. - smb.conf with [tmp] share - +smb.conf with [tmp] Share + temporary files /tmp @@ -105,7 +105,7 @@ remember to restart &smbd; and &nmbd;. The Tests -Diagnosing your Samba server +Diagnosing Your Samba Server @@ -117,7 +117,7 @@ configuration file is faulty. -Your &smb.conf; file may be located in: /etc/samba +Your &smb.conf; file may be located in /etc/samba or in /usr/local/samba/lib. @@ -130,12 +130,12 @@ then your TCP/IP software is not correctly installed. -You will need to start a dos prompt window on the PC to run ping. +You will need to start a DOS prompt window on the PC to run ping. -If you get a message saying host not found or similar, then your DNS -software or /etc/hosts file is not correctly setup. +If you get a message saying host not found or a similar message, then your DNS +software or /etc/hosts file is not correctly set up. It is possible to run Samba without DNS entries for the server and client, but it is assumed you do have correct entries for the remainder of these tests. @@ -157,13 +157,13 @@ This is a common problem that is often overlooked. If you wish to check what firewall rules may be present in a system under test, simply run -iptables -L -v or if ipchains-based firewall rules are in use, +iptables -L -v, or if ipchains-based firewall rules are in use, ipchains -L -v. -Here is a sample listing from a system that has an external ethernet interface (eth1) on which Samba -is not active, and an internal (private network) interface (eth0) on which Samba is active: +Here is a sample listing from a system that has an external Ethernet interface (eth1) on which Samba +is not active and an internal (private network) interface (eth0) on which Samba is active: frodo:~ # iptables -L -v Chain INPUT (policy DROP 98496 packets, 12M bytes) @@ -193,24 +193,24 @@ Chain reject_func (0 references) -Run the command: smbclient -L BIGSERVER +Run the command smbclient -L BIGSERVER on the UNIX box. You should get back a list of available shares. -If you get an error message containing the string Bad password, then +If you get an error message containing the string bad password, then you probably have either an incorrect hosts allow, -hosts deny or valid users line in your +hosts deny, or valid users line in your &smb.conf;, or your guest account is not valid. Check what your guest account is using &testparm; and temporarily remove any hosts allow, hosts deny, -valid users or invalid users lines. +valid users, or invalid users lines. If you get a message connection refused response, then the smbd server may not be running. If you installed it in inetd.conf, then you probably edited that file incorrectly. If you installed it as a daemon, then check that -it is running, and check that the netbios-ssn port is in a LISTEN +it is running and check that the netbios-ssn port is in a LISTEN state using netstat -a. @@ -224,8 +224,8 @@ the network super daemon. -If you get a message saying session request failed, the server refused the -connection. If it says Your server software is being unfriendly, then +If you get a message saying session request failed, the server refused the +connection. If it says Your server software is being unfriendly, then it's probably because you have invalid command line parameters to &smbd;, or a similar fatal problem with the initial startup of &smbd;. Also check your config file (&smb.conf;) for syntax errors with &testparm; @@ -241,8 +241,8 @@ the &smb.conf; file entries as shown in the next example< - Configuration for only allowing connections from a certain subnet - +Configuration for Allowing Connections Only from a Certain Subnet + ALL xxx.xxx.xxx.xxx/yy @@ -252,14 +252,15 @@ the &smb.conf; file entries as shown in the next example< -In the above, no allowance has been made for any session requests that -will automatically translate to the loopback adapter address 127.0.0.1. -To solve this problem, change these lines as shown in the following example. +In Configuration for Allowing Connections Only from a Certain Subnet, no +allowance has been made for any session requests that will automatically translate to the loopback adapter +address 127.0.0.1. To solve this problem, change these lines as shown in the following +example. - Configuration for allowing connections from a certain subnet and localhost - +Configuration for Allowing Connections from a Certain Subnet and localhost + ALL xxx.xxx.xxx.xxx/yy 127. @@ -269,18 +270,17 @@ To solve this problem, change these lines as shown in the inetd -Another common cause of these two errors is having something already running smbclient -on port 139, such as Samba (&smbd; is running from inetd already) or -something like Digital's Pathworks. Check your inetd.conf file before trying -to start &smbd; as a daemon &smbmdash; it can avoid a lot of frustration! +Another common cause of these two errors is having something already running on port 139, +such as Samba (&smbd; is running from inetd already) or Digital's Pathworks. Check +your inetd.conf file before trying to start &smbd; as a daemon &smbmdash; it can avoid a +lot of frustration! -And yet another possible cause for failure of this test is when the subnet mask -and/or broadcast address settings are incorrect. Please check that the -network interface IP Address/Broadcast Address/Subnet Mask settings are -correct and that Samba has correctly noted these in the log.nmbd file. +And yet another possible cause for failure of this test is when the subnet mask and/or broadcast address +settings are incorrect. Please check that the network interface IP address/broadcast address/subnet mask +settings are correct and that Samba has correctly noted these in the log.nmbd file. @@ -288,13 +288,13 @@ correct and that Samba has correctly noted these in the log.nmbd -Run the command: nmblookup -B BIGSERVER __SAMBA__. +Run the command nmblookup -B BIGSERVER __SAMBA__. You should get back the IP address of your Samba server. If you do not, then nmbd is incorrectly installed. Check your inetd.conf -if you run it from there, or that the daemon is running and listening to udp port 137. +if you run it from there, or that the daemon is running and listening to UDP port 137. @@ -309,17 +309,17 @@ inetd. -Run the command: nmblookup -B ACLIENT `*' +Run the command nmblookup -B ACLIENT `*'. -You should get the PC's IP address back. If you do not then the client +You should get the PC's IP address back. If you do not, then the client software on the PC isn't installed correctly, or isn't started, or you got the name of the PC wrong. -If ACLIENT does not resolve via DNS then use the IP address of the +If ACLIENT does not resolve via DNS, then use the IP address of the client in the above test. @@ -328,7 +328,7 @@ client in the above test. -Run the command: nmblookup -d 2 '*' +Run the command nmblookup -d 2 `*'. @@ -341,21 +341,21 @@ messages from several hosts. -If this does not give a similar result to the previous test, then +If this does not give a result similar to the previous test, then nmblookup isn't correctly getting your broadcast address through its automatic mechanism. In this case you should experiment with the option in &smb.conf; to manually configure your IP -address, broadcast and netmask. +address, broadcast, and netmask. If your PC and server aren't on the same subnet, then you will need to use the - option to set the broadcast address to that of the PCs subnet. + option to set the broadcast address to that of the PC's subnet. This test will probably fail if your subnet mask and broadcast address are -not correct. (Refer to TEST 3 notes above). +not correct. (Refer to test 3 notes above). @@ -365,11 +365,11 @@ not correct. (Refer to TEST 3 notes above). smbclient -Run the command: smbclient //BIGSERVER/TMP. You should +Run the command smbclient //BIGSERVER/TMP. You should then be prompted for a password. You should use the password of the account with which you are logged into the UNIX box. If you want to test with another account, then add the option to the end of -the command line. For example, smbclient //bigserver/tmp -Ujohndoe. +the command line &smbmdash; for example, smbclient //bigserver/tmp -Ujohndoe. @@ -380,11 +380,11 @@ It is possible to specify the password along with the username as follows: Once you enter the password, you should get the smb> prompt. If you do not, then look at the error message. If it says invalid network -name, then the service is not correctly setup in your &smb.conf;. +name, then the service is not correctly set up in your &smb.conf;. -If it says bad password, then the likely causes are: +If it says bad password, then the likely causes are: @@ -403,7 +403,7 @@ If it says bad password, then the likely c - You have a mixed case password and you haven't enabled the option at a high enough level. + You have a mixed-case password and you haven't enabled the option at a high enough level. @@ -415,7 +415,7 @@ If it says bad password, then the likely c - You enabled password encryption but didn't map UNIX to Samba users. Run: + You enabled password encryption but didn't map UNIX to Samba users. Run smbpasswd -a username @@ -423,7 +423,7 @@ If it says bad password, then the likely c Once connected, you should be able to use the commands dir, get, -put and so on. Type help command for instructions. You should +put, and so on. Type help command for instructions. You should especially check that the amount of free disk space shown is correct when you type dir. @@ -433,19 +433,19 @@ especially check that the amount of free disk space shown is correct when you ty On the PC, type the command net view \\BIGSERVER. You will -need to do this from within a dos prompt window. You should get back a +need to do this from within a DOS prompt window. You should get back a list of shares available on the server. -If you get a message network name not found or similar error, then netbios +If you get a message network name not found or similar error, then NetBIOS name resolution is not working. This is usually caused by a problem in nmbd. To overcome it, you could do one of the following (you only need to choose one of them): - Fixup the &nmbd; installation. + Fix the &nmbd; installation. @@ -464,8 +464,8 @@ To overcome it, you could do one of the following (you only need to choose one o If you get a message invalid network name or -bad password error, then apply the -same fixes as for the smbclient -L test above. In +bad password error, then apply the +same fixes as for the smbclient -L test. In particular, make sure your hosts allow line is correct (see the man pages). @@ -478,9 +478,9 @@ name and password. -If you get a message specified computer is not receiving requests or similar, -it probably means that the host is not contact-able via TCP services. -Check to see if the host is running TCP wrappers, and if so add an entry in +If you get a message specified computer is not receiving requests or similar error, +it probably means that the host is not contactable via TCP services. +Check to see if the host is running TCP wrappers, and if so, add an entry in the hosts.allow file for your client (or subnet, and so on.) @@ -497,7 +497,7 @@ and other config lines in &smb.conf; are correct. -It's also possible that the server can't work out what user name to connect you as. +It's also possible that the server can't work out what username to connect you as. To see if this is the problem, add the line username to the section of @@ -509,7 +509,7 @@ fixes things, you may need the username mapping option. It might also be the case that your client only sends encrypted passwords and you have no in &smb.conf;. -Change this to "yes" to fix this. +Change this setting to `yes' to fix this. @@ -538,14 +538,14 @@ an election is held at startup. From file manager, try to browse the server. Your Samba server should appear in the browse list of your local workgroup (or the one you -specified in &smb.conf;). You should be able to double click on the name -of the server and get a list of shares. If you get the error message invalid password, +specified in &smb.conf;). You should be able to double-click on the name +of the server and get a list of shares. If you get the error message invalid password, you are probably running Windows NT and it is refusing to browse a server that has no encrypted password -capability and is in User Level Security mode. In this case, either set +capability and is in user-level security mode. In this case, either set server and Windows_NT_Machine in your -&smb.conf; file, or make sure is +&smb.conf; file or make sure is set to yes. diff --git a/docs/Samba3-HOWTO/TOSHARG-HighAvailability.xml b/docs/Samba3-HOWTO/TOSHARG-HighAvailability.xml index 385646d91f0..3d91f2c3565 100644 --- a/docs/Samba3-HOWTO/TOSHARG-HighAvailability.xml +++ b/docs/Samba3-HOWTO/TOSHARG-HighAvailability.xml @@ -80,7 +80,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. All clients can connect transparently to any server. A server can fail and clients are transparently reconnected to another server. - All servers server out the same set of files. + All servers serve out the same set of files. All file changes are immediately seen on all servers. Requires a distributed file system. Infinite ability to scale by adding more servers or disks. @@ -103,7 +103,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. The TCP connection involves a packet sequence number. This sequence number would need to be dynamically updated on all - machines in the cluster to effect seamless TCP fail-over. + machines in the cluster to effect seamless TCP failover. @@ -111,13 +111,13 @@ from other sources, but it was Jeremy who inspired the structure that follows. CIFS/SMB (the Windows networking protocols) uses TCP connections. - This means that from a basic design perspective, fail-over is not + This means that from a basic design perspective, failover is not seriously considered. - All current SMB clusters are fail-over solutions + All current SMB clusters are failover solutions &smbmdash; they rely on the clients to reconnect. They provide server - fail-over, but clients can lose information due to a server failure. + failover, but clients can lose information due to a server failure. @@ -127,7 +127,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. Servers keep state information about client connections. CIFS/SMB involves a lot of state. - Every file open must be compared with other file opens + Every file open must be compared with other open files to check share modes. @@ -140,13 +140,13 @@ from other sources, but it was Jeremy who inspired the structure that follows. To make it possible for a cluster of file servers to appear as a single server that has one name and one IP address, the incoming TCP data streams from clients must be processed by the - front end virtual server. This server must de-multiplex the incoming packets at the SMB protocol + front-end virtual server. This server must de-multiplex the incoming packets at the SMB protocol layer level and then feed the SMB packet to different servers in the cluster. - One could split all IPC$ connections and RPC calls to one server to handle printing and user - lookup requirements. RPC Printing handles are shared between different IPC4 sessions &smbmdash; it is + One could split all IPC4 connections and RPC calls to one server to handle printing and user + lookup requirements. RPC printing handles are shared between different IPC4 sessions &smbmdash; it is hard to split this across clustered servers! @@ -158,7 +158,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. - De-multiplexing SMB Requests + Demultiplexing SMB Requests De-multiplexing of SMB requests requires knowledge of SMB state information, @@ -174,7 +174,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. SMB requests are sent by vuid to their associated server. No code exists today to - affect this solution. This problem is conceptually similar to the problem of + effect this solution. This problem is conceptually similar to the problem of correctly handling requests from multiple requests from Windows 2000 Terminal Server in Samba. @@ -196,7 +196,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. Many could be adopted to backend our cluster, so long as awareness of SMB - semantics is kept in mind (share modes, locking and oplock issues in particular). + semantics is kept in mind (share modes, locking, and oplock issues in particular). Common free distributed file systems include: NFS AFS @@ -229,9 +229,9 @@ from other sources, but it was Jeremy who inspired the structure that follows. On the other hand, where the server pool also provides NFS or other file services, - it will be essential that the implementation be oplock aware so it can + it will be essential that the implementation be oplock-aware so it can interoperate with SMB services. This is a significant challenge today. A failure - to provide this will result in a significant loss of performance that will be + to provide this interoperability will result in a significant loss of performance that will be sorely noted by users of Microsoft Windows clients. @@ -253,7 +253,7 @@ from other sources, but it was Jeremy who inspired the structure that follows. All smbd processes in the server pool must of necessity communicate very quickly. For this, the current tdb file structure that Samba - uses is not suitable for use across a network. Clustered smbd's must use something else. + uses is not suitable for use across a network. Clustered smbds must use something else. @@ -262,22 +262,22 @@ from other sources, but it was Jeremy who inspired the structure that follows. Server Pool Communications Demands - High speed inter-server communications in the server pool is a design prerequisite + High-speed interserver communications in the server pool is a design prerequisite for a fully functional system. Possibilities for this include: - Proprietary shared memory bus (example: Myrinet or SCI [Scalable Coherent Interface]). - These are high cost items. + Proprietary shared memory bus (example: Myrinet or SCI [scalable coherent interface]). + These are high-cost items. - Gigabit ethernet (now quite affordable). + Gigabit Ethernet (now quite affordable). - Raw ethernet framing (to bypass TCP and UDP overheads). + Raw Ethernet framing (to bypass TCP and UDP overheads). @@ -292,8 +292,8 @@ from other sources, but it was Jeremy who inspired the structure that follows. Required Modifications to Samba - Samba needs to be significantly modified to work with a high-speed server inter-connect - system to permit transparent fail-over clustering. + Samba needs to be significantly modified to work with a high-speed server interconnect + system to permit transparent failover clustering. @@ -309,8 +309,8 @@ from other sources, but it was Jeremy who inspired the structure that follows. Failure semantics need to be defined. Samba behaves the same way as Windows. When oplock messages fail, a file open request is allowed, but this is - potentially dangerous in a clustered environment. So how should inter-server - pool failure semantics function and how should this be implemented? + potentially dangerous in a clustered environment. So how should interserver + pool failure semantics function, and how should such functionality be implemented? @@ -327,13 +327,13 @@ from other sources, but it was Jeremy who inspired the structure that follows. A Simple Solution - Allowing fail-over servers to handle different functions within the exported file system + Allowing failover servers to handle different functions within the exported file system removes the problem of requiring a distributed locking protocol. - If only one server is active in a pair, the need for high speed server interconnect is avoided. - This allows the use of existing high availability solutions, instead of inventing a new one. + If only one server is active in a pair, the need for high-speed server interconnect is avoided. + This allows the use of existing high-availability solutions, instead of inventing a new one. This simpler solution comes at a price &smbmdash; the cost of which is the need to manage a more complex file name space. Since there is now not a single file system, administrators must remember where all services are located &smbmdash; a complexity not easily dealt with. @@ -347,32 +347,32 @@ from other sources, but it was Jeremy who inspired the structure that follows. - High Availability Server Products + High-Availability Server Products - Fail-over servers must communicate in order to handle resource fail-over. This is essential - for high availability services. The use of a dedicated heartbeat is a common technique to - introduce some intelligence into the fail-over process. This is often done over a dedicated + Failover servers must communicate in order to handle resource failover. This is essential + for high-availability services. The use of a dedicated heartbeat is a common technique to + introduce some intelligence into the failover process. This is often done over a dedicated link (LAN or serial). SCSI - Many fail-over solutions (like Red Hat Cluster Manager, as well as Microsoft Wolfpack) - can use a shared SCSI of Fiber Channel disk storage array for fail-over communication. - Information regarding Red Hat high availability solutions for Samba may be obtained from: - www.redhat.com. + Many failover solutions (like Red Hat Cluster Manager and Microsoft Wolfpack) + can use a shared SCSI of Fiber Channel disk storage array for failover communication. + Information regarding Red Hat high availability solutions for Samba may be obtained from + www.redhat.com. The Linux High Availability project is a resource worthy of consultation if your desire is to build a highly available Samba file server solution. Please consult the home page at - www.linux-ha.org/. + www.linux-ha.org/. - Front-end server complexity remains a challenge for high availability as it needs to deal - gracefully with backend failures, while at the same time it needs to provide continuity of service + Front-end server complexity remains a challenge for high availability because it must deal + gracefully with backend failures, while at the same time providing continuity of service to all network clients. @@ -386,12 +386,12 @@ from other sources, but it was Jeremy who inspired the structure that follows. DFSMS-DFS, Distributed File Systems MS-DFS links can be used to redirect clients to disparate backend servers. This pushes complexity back to the network client, something already included by Microsoft. - MS-DFS creates the illusion of a simple, continuous file system name space, that even - works at the file level. + MS-DFS creates the illusion of a simple, continuous file system name space that works even + at the file level. - Above all, at the cost of complexity of management, a distributed (pseudo-cluster) can + Above all, at the cost of complexity of management, a distributed system (pseudo-cluster) can be created using existing Samba functionality. @@ -402,9 +402,8 @@ from other sources, but it was Jeremy who inspired the structure that follows. Transparent SMB clustering is hard to do! - Client fail-over is the best we can do today. - Much more work is needed before a practical and manageable high - availability transparent cluster solution will be possible. + Client failover is the best we can do today. + Much more work is needed before a practical and manageable high-availability transparent cluster solution will be possible. MS-DFS can be used to create the illusion of a single transparent cluster. diff --git a/docs/Samba3-HOWTO/TOSHARG-LargeFile.xml b/docs/Samba3-HOWTO/TOSHARG-LargeFile.xml index 44f054236e3..d227638cbdb 100644 --- a/docs/Samba3-HOWTO/TOSHARG-LargeFile.xml +++ b/docs/Samba3-HOWTO/TOSHARG-LargeFile.xml @@ -9,25 +9,25 @@ Handling Large Directories -Samba-3.0.12 implements a solution for sites that have experienced performance degradation do to the +Samba-3.0.12 implements a solution for sites that have experienced performance degradation due to the problem of using Samba-3 with applications that need large numbers of files (100,000 or more) per directory. The key was fixing the directory handling to read only the current list requested instead of the old -(up to samba-3.0.11) behaviour of reading the entire directory into memory before doling out names. -Normally this would have broken OS/2 applications which have very strange delete semantics, but by -stealing logic from Samba4 (thanks tridge) the current code in 3.0.12 handles this correctly. +(up to samba-3.0.11) behavior of reading the entire directory into memory before doling out names. +Normally this would have broken OS/2 applications, which have very strange delete semantics, but by +stealing logic from Samba4 (thanks, Tridge), the current code in 3.0.12 handles this correctly. -To set up an application that needs large number of files per directory in a way that does not -damage performance unduly follow these steps: +To set up an application that needs large numbers of files per directory in a way that does not +damage performance unduly, follow these steps: -Firstly, you need to canonicalize all the files in the directory to have one case, upper or lower - take your -pick (I chose upper as all my files were already upper case names). Then set up a new custom share for the +First, you need to canonicalize all the files in the directory to have one case, upper or lower &smbmdash; take your +pick (I chose upper because all my files were already uppercase names). Then set up a new custom share for the application as follows: [bigshare] @@ -42,29 +42,29 @@ application as follows: Of course, use your own path and settings, but set the case options to match the case of all the files in your -directory. The path should point at the large directory needed for the application - any new files created in -there and in any paths under it will be forced by smbd into upper case - but smbd will no longer have to scan -the directory for names - it knows that if a file does not exist in upper case then it doesn't exist at all. +directory. The path should point at the large directory needed for the application &smbmdash; any new files created in +there and in any paths under it will be forced by smbd into uppercase, but smbd will no longer have to scan +the directory for names: it knows that if a file does not exist in uppercase, then it doesn't exist at all. The secret to this is really in the True line. This tells smbd never to scan for case-insensitive versions of names. So if an application asks for a file -called FOO, and it can not be found by a simple stat call, then smbd will return file not +called FOO, and it cannot be found by a simple stat call, then smbd will return file not found immediately without scanning the containing directory for a version of a different case. The other xxx case xxx lines make this work by forcing a consistent case on all files created by smbd. -Remember, all files and directories under the path directory must be in upper case -with this &smb.conf; stanza as smbd will not be able to find lower case filenames with these settings. Also -note this is done on a per-share basis, allowing this to be set only for a share servicing an application with -this problematic behaviour (using large numbers of entries in a directory) - the rest of your smbd shares +Remember, all files and directories under the path directory must be in uppercase +with this &smb.conf; stanza because smbd will not be able to find lowercase filenames with these settings. Also +note that this is done on a per-share basis, allowing this parameter to be set only for a share servicing an application with +this problematic behavior (using large numbers of entries in a directory) &smbmdash; the rest of your smbd shares don't need to be affected. -This makes smbd much faster when dealing with large directories. My test case has over 100,000 files and +This makes smbd much faster when dealing with large directories. My test case has over 100,000 files, and smbd now deals with this very efficiently. diff --git a/docs/Samba3-HOWTO/TOSHARG-NT4Migration.xml b/docs/Samba3-HOWTO/TOSHARG-NT4Migration.xml index e6c68bb5fff..8209fce16fa 100644 --- a/docs/Samba3-HOWTO/TOSHARG-NT4Migration.xml +++ b/docs/Samba3-HOWTO/TOSHARG-NT4Migration.xml @@ -9,8 +9,8 @@ Migration from NT4 PDC to Samba-3 PDC -This is a rough guide to assist those wishing to migrate from NT4 Domain Control to -Samba-3-based Domain Control. +This is a rough guide to assist those wishing to migrate from NT4 domain control to +Samba-3-based domain control. @@ -23,31 +23,31 @@ and planned for. Then again, good planning will anticipate most show-stopper-typ -Those wishing to migrate from MS Windows NT4 Domain Control to a Samba-3 Domain Control +Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control environment would do well to develop a detailed migration plan. So here are a few pointers to -help migration get under way. +help migration get underway. Objectives -The key objective for most organizations will be to make the migration from MS Windows NT4 -to Samba-3 Domain Control as painless as possible. One of the challenges you may experience -in your migration process may well be one of convincing management that the new environment +The key objective for most organizations is to make the migration from MS Windows NT4 +to Samba-3 domain control as painless as possible. One of the challenges you may experience +in your migration process may well be convincing management that the new environment should remain in place. Many who have introduced open source technologies have experienced pressure to return to a Microsoft-based platform solution at the first sign of trouble. -Before attempting a migration to a Samba-3 controlled network, make every possible effort to +Before attempting a migration to a Samba-3-controlled network, make every possible effort to gain all-round commitment to the change. Know precisely why the change is important for the organization. Possible motivations to make a change include: Improve network manageability. - Obtain better user level functionality. + Obtain better user-level functionality. Reduce network operating costs. Reduce exposure caused by Microsoft withdrawal of NT4 support. Avoid MS License 6 implications. @@ -82,31 +82,31 @@ include: Lower cost of ownership. Global availability of support with no strings attached. - Dynamic SMB Servers (can run more than one SMB/CIFS server per UNIX/Linux system). + Dynamic SMB servers (can run more than one SMB/CIFS server per UNIX/Linux system). Creation of on-the-fly logon scripts. - Creation of on-the-fly Policy Files. - Greater stability, reliability, performance and availability. - Manageability via an ssh connection. - Flexible choices of back-end authentication technologies (tdbsam, ldapsam, mysqlsam). + Creation of on-the-fly policy files. + Greater stability, reliability, performance, and availability. + Manageability via an SSH connection. + Flexible choices of backend authentication technologies (tdbsam, ldapsam, mysqlsam). Ability to implement a full single-sign-on architecture. - Ability to distribute authentication systems for absolute minimum wide area network bandwidth demand. + Ability to distribute authentication systems for absolute minimum wide-area network bandwidth demand. Before migrating a network from MS Windows NT4 to Samba-3, consider all necessary factors. Users should be educated about changes they may experience so the change will be a welcome one -and not become an obstacle to the work they need to do. The following are factors that will -help ensure a successful migration: +and not become an obstacle to the work they need to do. The following sections explain factors that will +help ensure a successful migration. Domain Layout -Samba-3 can be configured as a Domain Controller, a back-up Domain Controller (probably best called -a secondary controller), a Domain Member, or as a stand-alone Server. The Windows network security +Samba-3 can be configured as a domain controller, a backup domain controller (probably best called +a secondary controller), a domain member, or a standalone server. The Windows network security domain context should be sized and scoped before implementation. Particular attention needs to be -paid to the location of the primary Domain Controller (PDC) as well as backup controllers (BDCs). +paid to the location of the Primary Domain Controller (PDC) as well as backup controllers (BDCs). One way in which Samba-3 differs from Microsoft technology is that if one chooses to use an LDAP authentication backend, then the same database can be used by several different domains. In a complex organization, there can be a single LDAP database, which itself can be distributed (have @@ -121,11 +121,11 @@ domain should be scaled taking into consideration server capacity and network ba A physical network segment may house several domains. Each may span multiple network segments. Where domains span routed network segments, consider and test the performance implications of -the design and layout of a network. A centrally located Domain Controller that is designed to +the design and layout of a network. A centrally located domain controller that is designed to serve multiple routed network segments may result in severe performance problems. Check the response time (ping timing) between the remote segment and the PDC. If it's long (more than 100 ms), -locate a backup controller (BDC) on the remote segment to serve as the local authentication and +locate a BDC on the remote segment to serve as the local authentication and access control server. @@ -142,16 +142,16 @@ of keeping systems secure and functional. Keep in mind the nature of how data must be shared. Physical disk space layout should be considered -carefully. Some data must be backed up. The simpler the disk layout the easier it will be to +carefully. Some data must be backed up. The simpler the disk layout, the easier it will be to keep track of backup needs. Identify what backup media will meet your needs; consider backup to tape, -CD-ROM or (DVD-ROM), or other offline storage medium. Plan and implement for minimum +CD-ROM or DVD-ROM, or other offline storage medium. Plan and implement for minimum maintenance. Leave nothing to chance in your design; above all, do not leave backups to chance: -Backup, test, and validate every backup, create a disaster recovery plan and prove that it works. +backup, test, and validate every backup; create a disaster recovery plan and prove that it works. Users should be grouped according to data access control needs. File and directory access -is best controlled via group permissions and the use of the sticky bit on group controlled +is best controlled via group permissions, and the use of the sticky bit on group-controlled directories may substantially avoid file access complaints from Samba share users. @@ -162,7 +162,7 @@ Keep your design and implementation simple and document your design extensively. audit your documentation. Do not create a complex mess that your successor will not understand. Remember, job security through complex design and implementation may cause loss of operations and downtime to users as the new administrator learns to untangle your knots. Keep access -controls simple and effective and make sure that users will never be interrupted by obtuse +controls simple and effective, and make sure that users will never be interrupted by obtuse complexity. @@ -175,8 +175,8 @@ Logon scripts can help to ensure that all users gain the share and printer conne -Logon scripts can be created on-the-fly so all commands executed are specific to the -rights and privileges granted to the user. The preferred controls should be affected through +Logon scripts can be created on the fly so all commands executed are specific to the +rights and privileges granted to the user. The preferred controls should be effected through group membership so group information can be used to create a custom logon script using the parameters to the share. @@ -193,16 +193,16 @@ deals with how to add printers without user intervention via the logon script pr Profile Migration/Creation -User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile +User and group profiles may be migrated using the tools described in the section titled Desktop Profile Management. SID -Profiles may also be managed using the Samba-3 tool profiles. This tool allows -the MS Windows NT-style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file -to be changed to the SID of the Samba-3 domain. +Profiles may also be managed using the Samba-3 tool profiles. This tool allows the MS +Windows NT-style security identifiers (SIDs) that are stored inside the profile +NTuser.DAT file to be changed to the SID of the Samba-3 domain. @@ -211,7 +211,7 @@ to be changed to the SID of the Samba-3 domain. It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before -attempting to migrate user and group accounts, it is STRONGLY advised to create in Samba-3 the +attempting to migrate user and group accounts, you are STRONGLY advised to create in Samba-3 the groups that are present on the MS Windows NT4 domain AND to map them to suitable UNIX/Linux groups. By following this simple advice, all user and group attributes should migrate painlessly. @@ -228,37 +228,43 @@ The approximate migration process is described below. - -You have an NT4 PDC that has the users, groups, policies and profiles to be migrated. - - - -Samba-3 set up as a DC with netlogon share, profile share, and so on. Configure the &smb.conf; file -to function as a BDC, i.e., domain master = No. - + + You have an NT4 PDC that has the users, groups, policies, and profiles to be migrated. + + + + Samba-3 is set up as a domain controller with netlogon share, profile share, and so on. Configure the &smb.conf; file + to function as a BDC: domain master = No. + -The Account Migration Process - -pdbedit - Create a BDC account in the old NT4 domain for the Samba server using NT Server Manager. - Samba must not be running. + +The Account Migration Process + + pdbedit + Create a BDC account in the old NT4 domain for the Samba server using NT Server Manager. + Samba must not be running. + -netrpc - net rpc join -S NT4PDC -w DOMNAME -U Administrator%passwd + netrpc + net rpc join -S NT4PDC -w DOMNAME -U + Administrator%passwd + - net rpc vampire -S NT4PDC -U administrator%passwd + + net rpc vampire -S NT4PDC -U + administrator%passwd + pdbedit -L - Note &smbmdash; did the users migrate? + Note: Did the users migrate? - -netgroupmap -initGroups.sh + netgroupmap + initGroups.sh Now assign each of the UNIX groups to NT groups: (It may be useful to copy this text to a script called initGroups.sh) @@ -278,8 +284,8 @@ net groupmap add ntgroup="QA Team" unixgroup=qateam type=d rid=3220 net groupmap list - Check that all groups are recognized. - + Check that all groups are recognized. + @@ -293,7 +299,7 @@ Migrate all the profiles, then migrate all policy files. Migration Options -Sites that wish to migrate from MS Windows NT4 Domain Control to a Samba-based solution +Sites that wish to migrate from MS Windows NT4 domain control to a Samba-based solution generally fit into three basic categories. Following table shows the possibilities. @@ -306,8 +312,9 @@ generally fit into three basic categories. Following ta < 50Want simple conversion with no pain. - 50 - 250Want new features, can manage some in-house complexity. - > 250Solution/Implementation must scale well, complex needs. Cross-departmental decision process. Local expertise in most areas. + 50 - 250Want new features; can manage some inhouse complexity. + > 250Solution/implementation must scale well; complex needs. + Cross-departmental decision process. Local expertise in most areas.
@@ -335,7 +342,7 @@ to Samba-3: -Minimize down-stream problems by: +Minimize downstream problems by: @@ -344,7 +351,7 @@ Minimize down-stream problems by: - Avoiding Panic. + Avoiding panic. @@ -370,9 +377,9 @@ being contemplated. - Make use of minimal OS specific features. - Translate NT4 features to new host OS features. - Decide: + Make use of minimal OS specific features + Translate NT4 features to new host OS features + Decide: (John, decide what???????) Move all accounts from NT4 into Samba-3 @@ -395,7 +402,7 @@ being contemplated. Identify Needs for: Manageability, Scalability, Security, Availability - Integrate Samba-3 then migrate while users are active, then change of control (swap out) + Integrate Samba-3, then migrate while users are active, then change of control (swap out) Take advantage of lower maintenance opportunity @@ -408,7 +415,7 @@ being contemplated. Samba-3 Implementation Choices - Authentication Database/Backend + Authentication Database/Backend Samba-3 can use an external authentication backend: @@ -416,43 +423,42 @@ being contemplated. Winbind (external Samba or NT4/200x server). - External server could use Active Directory or NT4 Domain. - Can use pam_mkhomedir.so to auto-create home dirs. - - Samba-3 can use a local authentication backend: smbpasswd, tdbsam, ldapsam, mysqlsam - - - + External server could use Active Directory or NT4 domain. + Can use pam_mkhomedir.so to autocreate home directories. + Samba-3 can use a local authentication backend: smbpasswd, + tdbsam, ldapsam, mysqlsam + + + Access Control Points - Samba permits Access Control Points to be set: + Samba permits Access Control points to be set: - On the share itself &smbmdash; using Share ACLs. - On the file system &smbmdash; using UNIX permissions on files and directories. - Note: Can enable Posix ACLs in file system also. - Through Samba share parameters &smbmdash; not recommended except as last resort. - - + On the share itself &smbmdash; using share ACLs. + On the file system &smbmdash; using UNIX permissions on files and directories. + Note: Can enable Posix ACLs in file system also. + Through Samba share parameters &smbmdash; not recommended except as last resort. + Policies (migrate or create new ones) - Exercise great caution when affecting registry changes, use the right tool and be aware + Exercise great caution when making registry changes; use the right tool and be aware that changes made through NT4-style NTConfig.POL files can leave permanent changes. Using Group Policy Editor (NT4). - Watch out for Tattoo effect. + Watch out for tattoo effect. User and Group Profiles - Platform-specific so use platform tool to change from a Local to a Roaming profile. + Platform-specific, so use platform tool to change from a local to a roaming profile. Can use new profiles tool to change SIDs (NTUser.DAT). @@ -468,53 +474,50 @@ being contemplated. User and Group Mapping to UNIX/Linux -pdbedit - User and Group mapping code is new. Many problems have been experienced as network administrators + pdbedit + User and group mapping code is new. Many problems have been experienced as network administrators who are familiar with Samba-2.2.x migrate to Samba-3. Carefully study the chapters that document the new password backend behavior and the new group mapping functionality. - - The username map facility may be needed. - Use net groupmap to connect NT4 groups to UNIX groups. - Use pdbedit to set/change user configuration. - - - When migrating to LDAP backend, it may be easier to dump the initial - LDAP database to LDIF, edit, then reload into LDAP. - - - - + + The username map facility may be needed. + Use net groupmap to connect NT4 groups to UNIX groups. + + Use pdbedit to set/change user configuration. + + + + When migrating to LDAP backend, it may be easier to dump the initial + LDAP database to LDIF, edit, then reload into LDAP. + + - OS Specific Scripts/Programs may be Needed + OS Specific Scripts/Programs May be Needed Every operating system has its peculiarities. These are the result of engineering decisions - that were based on the experience of the designer, and may have side-effects that were not + that were based on the experience of the designer and may have side effects that were not anticipated. Limitations that may bite the Windows network administrator include: Add/Delete Users: Note OS limits on size of name - (Linux 8 chars) NT4 up to 254 chars. - Add/Delete Machines: Applied only to Domain Members + (Linux 8 chars, NT4 up to 254 chars). + Add/Delete Machines: Applied only to domain members (Note: machine names may be limited to 16 characters). Use net groupmap to connect NT4 groups to UNIX groups. Add/Delete Groups: Note OS limits on size and nature. - Linux limit is 16 char, no spaces and no upper case chars (groupadd). - - + Linux limit is 16 char, no spaces, and no uppercase chars (groupadd). + Migration Tools -pdbedit - Domain Control (NT4 Style) Profiles, Policies, Access Controls, Security - - Samba: net, rpcclient, smbpasswd, pdbedit, profiles. - Windows: NT4 Domain User Manager, Server Manager (NEXUS) - - - + pdbedit + Domain Control (NT4-Style) Profiles, Policies, Access Controls, Security + + Samba: net, rpcclient, smbpasswd, pdbedit, profiles + Windows: NT4 Domain User Manager, Server Manager (NEXUS) + diff --git a/docs/Samba3-HOWTO/TOSHARG-Other-Clients.xml b/docs/Samba3-HOWTO/TOSHARG-Other-Clients.xml index 61f100f7c6d..686b1942031 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Other-Clients.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Other-Clients.xml @@ -17,21 +17,21 @@ Macintosh Clients -Yes. Thursby has a CIFS Client/Server called DAVE. -They test it against Windows 95, Windows NT /200x/XP and Samba for +Yes. Thursby has a CIFS client/server called DAVE. +They test it against Windows 95, Windows NT/200x/XP, and Samba for compatibility issues. At the time of this writing, DAVE was at version 4.1. Please refer to Thursby's Web site for more information regarding this product. -Alternatives &smbmdash; There are two free implementations of AppleTalk for +Alternatives include two free implementations of AppleTalk for several kinds of UNIX machines and several more commercial ones. These products allow you to run file services and print services natively to Macintosh users, with no additional support required on the Macintosh. The two free implementations are -Netatalk, and -CAP. +Netatalk and +CAP. What Samba offers MS Windows users, these packages offer to Macs. For more info on these packages, Samba, and Linux (and other UNIX-based systems), see http://www.eats.com/linux_mac_win.html. @@ -50,7 +50,7 @@ For more info on these packages, Samba, and Linux (and other UNIX-based systems) Basically, you need three components: - The File and Print Client (IBM Peer) + The File and Print Client (IBM peer) TCP/IP (Internet support) The NetBIOS over TCP/IP driver (TCPBEUI) @@ -63,18 +63,18 @@ For more info on these packages, Samba, and Linux (and other UNIX-based systems) Adding the NetBIOS over TCP/IP driver is not described in the manual and just barely in the online documentation. Start - MPTS.EXE, click on OK, click on Configure LAPS and click + MPTS.EXE, click on OK, click on Configure LAPS, and click on IBM OS/2 NETBIOS OVER TCP/IP in Protocols. This line is then moved to Current Configuration. Select that line, - click on Change number and increase it from 0 to 1. Save this + click on Change number, and increase it from 0 to 1. Save this configuration. If the Samba server is not on your local subnet, you can optionally add IP names and addresses of these servers - to the Names List, or specify a WINS server (NetBIOS + to the Names List or specify a WINS server (NetBIOS Nameserver in IBM and RFC terminology). For Warp Connect, you may need to download an update for IBM Peer to bring it on - the same level as Warp 4. See the Web page mentioned above. + the same level as Warp 4. See the Web page (John, which page do you mean???????). @@ -113,7 +113,7 @@ For more info on these packages, Samba, and Linux (and other UNIX-based systems) Next, in the file specified by filename, map the name of the NT driver name to the OS/2 driver name as follows: - nt driver name = os2 driver name.device name, e.g. + nt driver name = os2 driver name.device name, e.g., HP LaserJet 5L = LASERJET.HP LaserJet 5L @@ -140,8 +140,8 @@ For more info on these packages, Samba, and Linux (and other UNIX-based systems) for Workgroups. The early TCP/IP stacks had lots of bugs. -Microsoft has released an incremental upgrade to their TCP/IP 32-bit -VxD drivers. The latest release can be found on their ftp site at +Microsoft has released an incremental upgrade to its TCP/IP 32-bit +VxD drivers. The latest release can be found at ftp.microsoft.com, located in /Softlib/MSLFILES/TCP32B.EXE. There is an update.txt file there that describes the problems that were fixed. New files include WINSOCK.DLL, @@ -154,7 +154,7 @@ fixed. New files include WINSOCK.DLL, NBTSTAT.EXE. -More information about this patch is available in Knowledge base article 99891. +More information about this patch is available in Knowledge Base article 99891. @@ -163,7 +163,7 @@ fixed. New files include WINSOCK.DLL, Windows for Workgroups does a lousy job with passwords. When you change passwords on either -the UNIX box or the PC, the safest thing to do is to delete the .pwl files in the Windows +the UNIX box or the PC, the safest thing to do is delete the .pwl files in the Windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password. @@ -186,9 +186,9 @@ Often Windows for Workgroups will totally ignore a password you give it in a dia There is a program call admincfg.exe on the last disk (disk 8) of the WFW 3.11 disk set. To install it, type EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE. -Then add an icon for it via the Program Manager New Menu. -This program allows you to control how WFW handles passwords, i.e., -Disable Password Caching and so on. +Then add an icon for it via the Program Manager New menu. +This program allows you to control how WFW handles passwords, +Disable Password Caching and so on, for use with user. @@ -240,12 +240,12 @@ person even reported a speed drop of a factor of 30 when he went from When using Windows 95 OEM SR2, the following updates are recommended where Samba -is being used. Please note that the above change will effect you once these +is being used. Please note that the above change (John, specify the change???????) will affect you once these updates have been installed. -There are more updates than the ones mentioned here. You are referred to the +There are more updates than the ones mentioned here. Refer to the Microsoft Web site for all currently available updates to your specific version of Windows 95. @@ -262,7 +262,7 @@ of Windows 95. Also, if using MS Outlook, it is desirable to install the OLEUPD.EXE fix. This fix may stop your machine from hanging for an extended period when exiting -Outlook and you may notice a significant speedup when accessing network +Outlook, and you may notice a significant speedup when accessing network neighborhood services. @@ -283,7 +283,7 @@ Internet. There are various other utilities of this type freely available. Windows 2000 Service Pack 2 -There are several annoyances with Windows 2000 SP2. One of which +There are several annoyances with Windows 2000 SP2, one of which only appears when using a Samba server to host user profiles to Windows 2000 SP2 clients in a Windows domain. This assumes that Samba is a member of the domain, but the problem will @@ -294,7 +294,7 @@ most likely occur if it is not. In order to serve profiles successfully to Windows 2000 SP2 clients (when not operating as a PDC), Samba must have no -added to the file share which houses the roaming profiles. +added to the file share that houses the roaming profiles. If this is not done, then the Windows 2000 SP2 client will complain about not being able to access the profile (Access Denied) and create multiple copies of it on disk (DOMAIN.user.001, @@ -309,7 +309,7 @@ releases prior to Samba 2.2.2. -Minimal profile share +Minimal Profile Share /export/profile @@ -325,12 +325,12 @@ The reason for this bug is that the Windows 200x SP2 client copies the security descriptor for the profile that contains the Samba server's SID, and not the domain SID. The client compares the SID for SAMBA\user and realizes it is -different from the one assigned to DOMAIN\user. Hence, the reason -for the access denied message. +different from the one assigned to DOMAIN\user; hence, +access denied message. -By disabling the parameter, Samba will send +When the parameter is disabled, Samba will send the Windows 200x client a response to the QuerySecurityDescriptor trans2 call, which causes the client to set a default ACL for the profile. This default ACL includes: @@ -346,7 +346,7 @@ create accounts on the Samba host for Domain users. Windows NT 3.1 If you have problems communicating across routers with Windows -NT 3.1 workstations, read this Microsoft Knowledge Base article. +NT 3.1 workstations, read this Microsoft Knowledge Base article:. diff --git a/docs/Samba3-HOWTO/TOSHARG-Portability.xml b/docs/Samba3-HOWTO/TOSHARG-Portability.xml index a5455a6c67c..28f32702e08 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Portability.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Portability.xml @@ -9,7 +9,7 @@ Portability -Samba works on a wide range of platforms but the interface all the +Samba works on a wide range of platforms, but the interface all the platforms provide is not always compatible. This chapter contains platform-specific information about compiling and using Samba. @@ -17,14 +17,14 @@ platform-specific information about compiling and using Samba. HPUX -HP's implementation of supplementary groups is non-standard (for +Hewlett-Packard's implementation of supplementary groups is nonstandard (for historical reasons). There are two group files, /etc/group and /etc/logingroup; the system maps UIDs to numbers using the former, but -initgroups() reads the latter. Most system Admins who know the ropes +initgroups() reads the latter. Most system admins who know the ropes symlink /etc/group to /etc/logingroup -(hard link does not work for reasons too obtuse to go into here). initgroups() will complain if one of the -groups you're in in /etc/logingroup has what it considers to be an invalid -ID, which means outside the range [0..UID_MAX], where UID_MAX is (I think) +(hard-link does not work for reasons too obtuse to go into here). initgroups() will complain if one of the +groups you're in, in /etc/logingroup, has what it considers to be an invalid +ID, which means outside the range [0..UID_MAX], where UID_MAX is 60000 currently on HP-UX. This precludes -2 and 65534, the usual nobody GIDs. @@ -56,14 +56,14 @@ encounter corrupt data transfers using Samba. The patch you need is UOD385 Connection Drivers SLS. It is available from -SCO (ftp.sco.com, directory SLS, +SCO ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z). The information provided here refers to an old version of SCO UNIX. If you require binaries for more recent SCO UNIX products, please contact SCO to obtain packages that are -ready to install. You should also verify with SCO that your platform is up-to-date for the +ready to install. You should also verify with SCO that your platform is up to date for the binary packages you will install. This is important if you wish to avoid data corruption problems with your installation. To build Samba for SCO UNIX products may require significant patching of Samba source code. It is much easier to obtain binary @@ -128,7 +128,7 @@ _seteuid: -After creating the above files, you then assemble them using +After creating the files, you then assemble them using @@ -137,13 +137,13 @@ After creating the above files, you then assemble them using -that should produce the files seteuid.o and -setegid.o +which should produce the files seteuid.o and +setegid.o. -Then you need to add these to the LIBSM line in the DNIX section of -the Samba Makefile. Your LIBSM line will then look something like this: +Next you need to add these to the LIBSM line in the DNIX section of +the Samba Makefile. Your LIBSM line will look something like this: @@ -181,21 +181,18 @@ is the master browse list holder and who is the master browser. -Corrective Action: Delete the entry after the word "loopback" +Corrective action: Delete the entry after the word "loopback" in the line starting 127.0.0.1. -AIX - -Sequential Read Ahead +AIX: Sequential Read Ahead -Disabling Sequential Read Ahead using vmtune -r 0 improves +Disabling sequential read ahead using vmtune -r 0 improves Samba performance significantly. - @@ -205,13 +202,13 @@ Samba performance significantly. Locking Improvements Some people have been experiencing problems with F_SETLKW64/fcntl -when running Samba on Solaris. The built-in file locking mechanism was +when running Samba on Solaris. The built-in file-locking mechanism was not scalable. Performance would degrade to the point where processes would get into loops of trying to lock a file. It would try a lock, then fail, then try again. The lock attempt was failing before the grant was -occurring. So the visible manifestation of this would be a handful of -processes stealing all of the CPU, and when they were truss-ed they would -be stuck if F_SETLKW64 loops. +occurring. The visible manifestation of this was a handful of +processes stealing all of the CPU, and when they were trussed, they would +be stuck in F_SETLKW64 loops. @@ -220,11 +217,11 @@ has not been released yet. -The patch revision for 2.6 is 105181-34, for 8 is 108528-19 and for 9 is 112233-04. +The patch revision for 2.6 is 105181-34, for 8 is 108528-19, and for 9 is 112233-04. -After the install of these patches, it is recommended to reconfigure +After the installation of these patches, it is recommended to reconfigure and rebuild Samba. diff --git a/docs/Samba3-HOWTO/TOSHARG-Problems.xml b/docs/Samba3-HOWTO/TOSHARG-Problems.xml index 2c840021f82..6b5e232af0e 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Problems.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Problems.xml @@ -14,45 +14,40 @@ There are many sources of information available in the form -of mailing lists, RFCs and documentation. The documentation that comes +of mailing lists, RFCs, and documentation. The documentation that comes with the Samba distribution contains good explanations of general SMB topics such as browsing. Diagnostics Tools -With SMB networking, it is often not immediately clear what -the cause is of a certain problem. Samba itself provides rather -useful information, but in some cases you might have to fall back -to using a sniffer. A sniffer is a program that -listens on your LAN, analyzes the data sent on it and displays it -on the screen. + +With SMB networking, it is often not immediately clear what the cause is of a certain problem. Samba itself +provides rather useful information, but in some cases you might have to fall back to using a +sniffer. A sniffer is a program that listens on your LAN, analyzes the data sent on it, +and displays it on the screen. + Debugging with Samba Itself -One of the best diagnostic tools for debugging problems is Samba itself. -You can use the for both &smbd; and &nmbd; to specify the - at which to run. -See the man pages for smbd, nmbd and -&smb.conf; for more information regarding debugging options. The debug -level can range from 1 (the default) to 10 (100 for debugging passwords). +One of the best diagnostic tools for debugging problems is Samba itself. You can use the for both &smbd; and &nmbd; to specify the at which to run. +See the man pages for smbd, nmbd, and &smb.conf; for more information regarding debugging +options. The debug level can range from 1 (the default) to 10 (100 for debugging passwords). -Another helpful method of debugging is to compile Samba using the -gcc -g flag. This will include debug information in the binaries and -allow you to attach gdb to the running smbd/nmbd process. -To attach gdb to an smbd -process for an NT workstation, first get the workstation to make the -connection. Pressing ctrl-alt-delete and going down to the domain box -is sufficient (at least, the first time you join the domain) to -generate a LsaEnumTrustedDomains. Thereafter, the workstation -maintains an open connection and there will be an smbd -process running (assuming that you haven't set a really short smbd -idle timeout). So, in between pressing ctrl-alt-delete and actually -typing in your password, you can attach gdb and continue. +Another helpful method of debugging is to compile Samba using the gcc -g flag. This will +include debug information in the binaries and allow you to attach gdb to the running +smbd/nmbd process. To attach gdb to an smbd process +for an NT workstation, first get the workstation to make the connection. Pressing ctrl-alt-delete and going +down to the domain box is sufficient (at least, the first time you join the domain) to generate a +LsaEnumTrustedDomains. Thereafter, the workstation maintains an open connection and +there will be an smbd process running (assuming that you haven't set a really short smbd idle timeout). So, in +between pressing ctrl-alt-delete and actually typing in your password, you can attach +gdb and continue. @@ -82,24 +77,23 @@ and tethereal. Ethereal -Ethereal is a graphical -sniffer, available for both UNIX (Gtk) and Windows. Ethereal's -SMB support is quite good. - -For details on the use of ethereal, read the well-written -Ethereal User Guide. +Ethereal is a graphical sniffer, available for both UNIX (Gtk) +and Windows. Ethereal's SMB support is quite good. For details on the use of ethereal, read +the well-written Ethereal User Guide. + -
Starting a capture.ethereal1
+
Starting a Capture.ethereal1
Listen for data on ports 137, 138, 139, and 445. For example, use the filter port 137, port 138, -port 139, or port 445 as seen in Starting a capture snapshot. +port 139, or port 445 as seen in Starting a Capture snapshot. -A console version of ethereal is available as well and is called -tethereal. + +A console version of ethereal is available as well and is called tethereal. + -
Main ethereal data window.ethereal2
+
Main Ethereal Data Window.ethereal2
 @@ -107,27 +101,22 @@ port 139, or port 445 as seen in Starting The Windows Network Monitor -For tracing things on Microsoft Windows NT, Network Monitor -(aka Netmon) is available on Microsoft Developer Network CDs, -the Windows NT Server install CD and the SMS CDs. The version of -Netmon that ships with SMS allows for dumping packets between any two -computers (i.e., placing the network interface in promiscuous mode). -The version on the NT Server install CD will only allow monitoring -of network traffic directed to the local NT box and broadcasts on the -local subnet. Be aware that Ethereal can read and write Netmon -formatted files. +For tracing things on Microsoft Windows NT, Network Monitor (aka Netmon) is available on Microsoft Developer +Network CDs, the Windows NT Server install CD, and the SMS CDs. The version of Netmon that ships with SMS +allows for dumping packets between any two computers (i.e., placing the network interface in promiscuous +mode). The version on the NT Server install CD will only allow monitoring of network traffic directed to the +local NT box and broadcasts on the local subnet. Be aware that Ethereal can read and write Netmon formatted +files. Installing Network Monitor on an NT Workstation -Installing Netmon on an NT workstation requires a couple -of steps. The following are instructions for installing Netmon V4.00.349, which comes -with Microsoft Windows NT Server 4.0, on Microsoft Windows NT -Workstation 4.0. The process should be similar for other versions of -Windows NT version of Netmon. You will need both the Microsoft Windows -NT Server 4.0 Install CD and the Workstation 4.0 Install CD. +Installing Netmon on an NT workstation requires a couple of steps. The following are instructions for +installing Netmon V4.00.349, which comes with Microsoft Windows NT Server 4.0, on Microsoft Windows NT +Workstation 4.0. The process should be similar for other versions of Windows NT version of Netmon. You will +need both the Microsoft Windows NT Server 4.0 Install CD and the Workstation 4.0 Install CD. @@ -148,7 +137,7 @@ on the NT Server to do this: At this point, the Netmon files should exist in %SYSTEMROOT%\System32\netmon\*.*. -Two subdirectories exist as well, parsers\ which contains the necessary DLLs +Two subdirectories exist as well: parsers\, which contains the necessary DLLs for parsing the Netmon packet dump, and captures\. @@ -158,10 +147,12 @@ Network Monitor Agent from the Workstation install CD. - Go to Start -> Settings -> Control Panel -> - Network -> Services -> Add. + Go to Start -> Settings -> + Control Panel -> Network -> + Services -> Add. - Select the Network Monitor Agent, click on OK. + Select the Network Monitor Agent, click on + OK. Click on OK in the Network Control Panel. @@ -171,7 +162,7 @@ Network Monitor Agent from the Workstation install CD. Now copy the files from the NT Server in %SYSTEMROOT%\System32\netmon -to %SYSTEMROOT%\System32\netmon on the Workstation and set permissions +to %SYSTEMROOT%\System32\netmon on the workstation and set permissions as you deem appropriate for your site. You will need administrative rights on the NT box to run Netmon. @@ -181,7 +172,7 @@ as you deem appropriate for your site. You will need administrative rights on th To install Netmon on Windows 9x/Me, install the Network Monitor Agent from the Windows 9x/Me CD (\admin\nettools\netmon). -There is a readme file located with the Netmon driver files on the CD if you need +There is a readme file included with the Netmon driver files on the CD if you need information on how to do this. Copy the files from a working Netmon installation. @@ -196,9 +187,9 @@ information on how to do this. Copy the files from a working Netmon installation http://www.skippy.net/linux/smb-howto.html. -FTP site for older SMB specs: +FTP site for older SMB specs, - ftp://ftp.microsoft.com/developr/drg/CIFS/ + ftp://ftp.microsoft.com/developr/drg/CIFS/. @@ -209,26 +200,26 @@ information on how to do this. Copy the files from a working Netmon installation There are a number of Samba-related mailing lists. Go to http://samba.org, click on your nearest mirror -and then click on Support and next click on +noescape="1" url="http://samba.org">http://samba.org, click on your nearest mirror, +and then click on Support. Next, click on Samba-related mailing lists. For questions relating to Samba TNG, go to -http://www.samba-tng.org/. +http://www.samba-tng.org/. It has been requested that you do not post questions about Samba-TNG to the -main-stream Samba lists. +mainstream Samba lists. -If you do post a message to one of the lists, please observe the following guidelines : +If you do post a message to one of the lists, please observe the following guidelines: - Always remember that the developers are volunteers, they are + Always remember that the developers are volunteers; they are not paid and they never guarantee to produce a particular feature at - a particular time. Any timelines are best guess and nothing more. + a particular time. Any timelines are best guess, and nothing more. Always mention what version of Samba you are using and what @@ -240,14 +231,14 @@ If you do post a message to one of the lists, please observe the following guide In addition to the version, if you obtained Samba via CVS, mention the date when you last checked it out. - Try and make your questions clear and brief. Lots of long, + Try to make your questions clear and brief. Lots of long, convoluted questions get deleted before they are completely read! - Do not post HTML encoded messages. Most people on mailing lists simply delete + Do not post HTML-encoded messages. Most people on mailing lists simply delete them. - If you run one of those nifty I'm on holidays things when - you are away, make sure its configured to not answer mailing list traffic. Auto-responses + If you run one of those nifty I'm on holiday things when + you are away, make sure its configured to not answer mailing list traffic. Autoresponses to mailing lists really irritate the thousands of people who end up having to deal with such bad netiquet bahavior. @@ -256,8 +247,8 @@ If you do post a message to one of the lists, please observe the following guide and see what happens. Do not post to both samba-ntdom and samba-technical. Many people active on the lists subscribe to more than one list and get annoyed to see the same message two or more times. - Often someone will see a message and thinking it would be better dealt - with on another list, will forward it on for you. + Often someone who thinks a message would be better dealt + with on another list will forward it on for you. You might include partial log files written at a debug level set to as much as 20. @@ -281,9 +272,9 @@ If you do post a message to one of the lists, please observe the following guide To have your name removed from a Samba mailing list, go to the same place where you went to -subscribe to it. Go to http://lists.samba.org, -click on your nearest mirror, click on Support and -then click on Samba related mailing lists. +subscribe to it, go to http://lists.samba.org, +click on your nearest mirror, click on Support, and +then click on Samba-related mailing lists. diff --git a/docs/Samba3-HOWTO/TOSHARG-SWAT.xml b/docs/Samba3-HOWTO/TOSHARG-SWAT.xml index 1995778d335..1f05a3f25d4 100644 --- a/docs/Samba3-HOWTO/TOSHARG-SWAT.xml +++ b/docs/Samba3-HOWTO/TOSHARG-SWAT.xml @@ -6,15 +6,15 @@ April 21, 2003 -SWAT &smbmdash; The Samba Web Administration Tool +SWAT: The Samba Web Administration Tool There are many and varied opinions regarding the usefulness of SWAT. No matter how hard one tries to produce the perfect configuration tool, it remains -an object of personal taste. SWAT is a tool that will allow Web-based configuration +an object of personal taste. SWAT is a tool that allows Web-based configuration of Samba. It has a wizard that may help to get Samba configured quickly, it has context-sensitive help on each &smb.conf; parameter, it provides for monitoring of current state -of connection information, and it allows network-wide MS Windows network password +of connection information, and it allows networkwide MS Windows network password management. @@ -23,22 +23,22 @@ management. SWAT is a facility that is part of the Samba suite. The main executable is called -swat and is invoked by the inter-networking super daemon. +swat and is invoked by the internetworking super daemon. See appropriate section for details. -SWAT uses integral samba components to locate parameters supported by the particular +SWAT uses integral Samba components to locate parameters supported by the particular version of Samba. Unlike tools and utilities that are external to Samba, SWAT is always up to date as known Samba parameters change. SWAT provides context-sensitive help for each configuration parameter, directly from man page entries. -There are network administrators who believe that it is a good idea to write systems +Some network administrators believe that it is a good idea to write systems documentation inside configuration files, and for them SWAT will always be a nasty tool. SWAT -does not store the configuration file in any intermediate form, rather, it stores only the -parameter settings, so when SWAT writes the &smb.conf; file to disk, it will write only +does not store the configuration file in any intermediate form; rather, it stores only the +parameter settings, so when SWAT writes the &smb.conf; file to disk, it writes only those parameters that are at other than the default settings. The result is that all comments, as well as parameters that are no longer supported, will be lost from the &smb.conf; file. Additionally, the parameters will be written back in internal ordering. @@ -46,8 +46,8 @@ Additionally, the parameters will be written back in internal ordering. Before using SWAT, please be warned &smbmdash; SWAT will completely replace your &smb.conf; with -a fully-optimized file that has been stripped of all comments you might have placed there -and only non-default settings will be written to the file. +a fully optimized file that has been stripped of all comments you might have placed there +and only nondefault settings will be written to the file. @@ -57,7 +57,7 @@ and only non-default settings will be written to the file. This section aims to unlock the dark secrets behind how SWAT may be made to work, -may be made more secure, and how to solve Internationalization support problems. +how it can be made more secure, and how to solve internationalization support problems. @@ -66,13 +66,13 @@ may be made more secure, and how to solve Internationalization support problems. The very first step that should be taken before attempting to configure a host system for SWAT operation is to check that it is installed. This may seem a trivial -point to some, however several Linux distributions do not install SWAT by default, -even though they do ship an install-able binary support package containing SWAT +point to some, but several Linux distributions do not install SWAT by default, +even though they do ship an installable binary support package containing SWAT on the distribution media. -When you have confirmed that SWAT is installed it is necessary to validate +When you have confirmed that SWAT is installed, it is necessary to validate that the installation includes the binary swat file as well as all the supporting text and Web files. A number of operating system distributions in the past have failed to include the necessary support files, even though the @@ -80,36 +80,36 @@ in the past have failed to include the necessary support files, even though the -Finally, when you are sure that SWAT has been fully installed, please check the SWAT -has been enabled in the control file for the inter-networking super-daemon (inetd or xinetd) +Finally, when you are sure that SWAT has been fully installed, please check that SWAT +is enabled in the control file for the internetworking super-daemon (inetd or xinetd) that is used on your operating system platform. -Locating the <command>swat</command> File +Locating the <command>SWAT</command> File To validate that SWAT is installed, first locate the swat binary -file on the system. It may be found under the following directories: - - /usr/local/samba/bin &smbmdash; the default Samba location. - /usr/sbin &smbmdash; the default location on most Linux systems. +file on the system. It may be found under the following directories: + + /usr/local/samba/bin &smbmdash; the default Samba location + /usr/sbin &smbmdash; the default location on most Linux systems /opt/samba/bin -The actual location is much dependant on the choice of the operating system vendor, or as determined +The actual location is much dependent on the choice of the operating system vendor or as determined by the administrator who compiled and installed Samba. -There are a number methods that may be used to locate the swat binary file. -The following methods may be helpful: +There are a number of methods that may be used to locate the swat binary file. +The following methods may be helpful. -If swat is in your current operating system search path it will be easy to +If swat is in your current operating system search path, it will be easy to find it. You can ask what are the command-line options for swat as shown here: frodo:~ # swat -? @@ -212,7 +212,7 @@ jht@frodo:/> -If the files needed are not available it will be necessary to obtain and install them +If the files needed are not available, it is necessary to obtain and install them before SWAT can be used. @@ -232,7 +232,7 @@ your UNIX/Linux system has, you will have either an inetd- or The nature and location of the network super-daemon varies with the operating system implementation. The control file (or files) can be located in the file /etc/inetd.conf or in the directory /etc/[x]inet[d].d -or similar. +or in a similar location. @@ -274,7 +274,7 @@ as shown. -Both of the above examples assume that the swat binary has been +Both of the previous examples assume that the swat binary has been located in the /usr/sbin directory. In addition to the above, SWAT will use a directory access point from which it will load its Help files as well as other control information. The default location for this on most Linux @@ -286,16 +286,16 @@ location using Samba defaults will be /usr/local/samba/swat Access to SWAT will prompt for a logon. If you log onto SWAT as any non-root user, the only permission allowed is to view certain aspects of configuration as well as access to the password change facility. The buttons that will be exposed to the non-root -user are: HOME, STATUS, VIEW, +user are HOME, STATUS, VIEW, and PASSWORD. The only page that allows change capability in this case is PASSWORD. As long as you log onto SWAT as the user root, you should obtain -full change and commit ability. The buttons that will be exposed include: +full change and commit ability. The buttons that will be exposed include HOME, GLOBALS, SHARES, PRINTERS, -WIZARD, STATUS, VIEW, PASSWORD. +WIZARD, STATUS, VIEW, and PASSWORD. @@ -306,7 +306,7 @@ full change and commit ability. The buttons that will be exposed include: swatsecurity -Many people have asked about how to setup SWAT with SSL to allow for secure remote +Many people have asked about how to set up SWAT with SSL to allow for secure remote administration of Samba. Here is a method that works, courtesy of Markus Krieger. @@ -329,7 +329,7 @@ Modifications to the SWAT setup are as follows: - Remove swat-entry from [x]inetd. + Remove SWAT entry from [x]inetd. @@ -342,7 +342,7 @@ Modifications to the SWAT setup are as follows: -Afterward, simply connect to swat by using the URL https://myhost:901, accept the certificate +Afterward, simply connect to SWAT by using the URL https://myhost:901, accept the certificate, and the SSL connection is up. @@ -373,8 +373,8 @@ To enable this feature: -The name of msg file is same as the language ID sent by the browser. For -example en means "English", ja means "Japanese", fr means "French. +The name of the msg file is the same as the language ID sent by the browser. For +example, en means English, ja means Japanese, fr means French. @@ -388,12 +388,12 @@ msgid "Set Default" msgstr "Imposta Default" and so on. If you find a mistake or create a new msg file, please email it -to us so we will include this in the next release of Samba. The msg file should be encoded in UTF-8. +to us so we will consider it in the next release of Samba. The msg file should be encoded in UTF-8. Note that if you enable this feature and the is not -matched to your browsers setting, the SWAT display may be corrupted. In a future version of +matched to your browser's setting, the SWAT display may be corrupted. In a future version of Samba, SWAT will always display messages with UTF-8 encoding. You will then not need to set this &smb.conf; file parameter. @@ -406,8 +406,8 @@ this &smb.conf; file parameter. Overview and Quick Tour -SWAT is a tools that many be used to configure Samba, or just to obtain useful links -to important reference materials such as the contents of this book, as well as other +SWAT is a tool that may be used to configure Samba or just to obtain useful links +to important reference materials such as the contents of this book as well as other documents that have been found useful for solving Windows networking problems. @@ -423,15 +423,15 @@ document) as well as the O'Reilly book Using Samba. Administrators who wish to validate their Samba configuration may obtain useful information from the man pages for the diagnostic utilities. These are available from the SWAT home page -also. One diagnostic tool that is not mentioned on this page, but that is particularly -useful is ethereal. +also. One diagnostic tool that is not mentioned on this page but that is particularly +useful is ethereal. SWAT can be configured to run in demo mode. This is not recommended -as it runs SWAT without authentication and with full administrative ability. Allows +because it runs SWAT without authentication and with full administrative ability. It allows changes to &smb.conf; as well as general operation with root privileges. The option that -creates this ability is the flag to swat. Do not use this in a +creates this ability is the flag to SWAT. Do not use this in a production environment. @@ -441,7 +441,7 @@ production environment. Global Settings -The GLOBALS button will expose a page that allows configuration of the global parameters +The GLOBALS button exposes a page that allows configuration of the global parameters in &smb.conf;. There are two levels of exposure of the parameters: @@ -464,7 +464,7 @@ You may also do this by clicking on the radio button, then click on the After making any changes to configuration parameters, make sure that you click on the -Commit Changes button before moving to another area, otherwise +Commit Changes button before moving to another area; otherwise, your changes will be lost. @@ -480,16 +480,16 @@ for, simply click on the Share Settings -To effect a currently configured share, simply click on the pull down button between the -Choose Share and the Delete Share buttons, -select the share you wish to operate on, then to edit the settings +To affect a currently configured share, simply click on the pull-down button between the +Choose Share and the Delete Share buttons and +select the share you wish to operate on. To edit the settings, click on the Choose Share button. To delete the share, simply press the Delete Share button. -To create a new share, next to the button labeled Create Share enter +To create a new share, next to the button labeled Create Share, enter into the text field the name of the share to be created, then click on the Create Share button. @@ -500,16 +500,16 @@ into the text field the name of the share to be created, then click on the Printers Settings -To affect a currently configured printer, simply click on the pull down button between the -Choose Printer and the Delete Printer buttons, -select the printer you wish to operate on, then to edit the settings +To affect a currently configured printer, simply click on the pull-down button between the +Choose Printer and the Delete Printer buttons and +select the printer you wish to operate on. To edit the settings, click on the Choose Printer button. To delete the share, simply press the Delete Printer button. -To create a new printer, next to the button labeled Create Printer enter +To create a new printer, next to the button labeled Create Printer, enter into the text field the name of the share to be created, then click on the Create Printer button. @@ -520,14 +520,14 @@ into the text field the name of the share to be created, then click on the The SWAT Wizard -The purpose if the SWAT Wizard is to help the Microsoft-knowledgeable network administrator +The purpose of the SWAT Wizard is to help the Microsoft-knowledgeable network administrator to configure Samba with a minimum of effort. The Wizard page provides a tool for rewriting the &smb.conf; file in fully optimized format. This will also happen if you press the Commit button. The two differ -since the Rewrite button ignores any changes that may have been made, +because the Rewrite button ignores any changes that may have been made, while the Commit button causes all changes to be affected. @@ -537,7 +537,7 @@ options that may be necessary to create a working Samba server. -Finally, there are a limited set of options that will determine what type of server Samba +Finally, there are a limited set of options that determine what type of server Samba will be configured for, whether it will be a WINS server, participate as a WINS client, or operate with no WINS support. By clicking one button, you can elect to expose (or not) user home directories. @@ -550,18 +550,18 @@ home directories. The status page serves a limited purpose. First, it allows control of the Samba daemons. -The key daemons that create the Samba server environment are: &smbd;, &nmbd;, &winbindd;. +The key daemons that create the Samba server environment are &smbd;, &nmbd;, and &winbindd;. The daemons may be controlled individually or as a total group. Additionally, you may set an automatic screen refresh timing. As MS Windows clients interact with Samba, new smbd processes -will be continually spawned. The auto-refresh facility will allow you to track the changing +are continually spawned. The auto-refresh facility allows you to track the changing conditions with minimal effort. -Lastly, the Status page may be used to terminate specific smbd client connections in order to +Finally, the status page may be used to terminate specific smbd client connections in order to free files that may be locked. @@ -571,8 +571,8 @@ free files that may be locked. The View Page -This page allows the administrator to view the optimized &smb.conf; file and, if you are -particularly masochistic, will permit you also to see all possible global configuration +The view page allows you to view the optimized &smb.conf; file and, if you are +particularly masochistic, permits you also to see all possible global configuration parameters and their settings. @@ -582,13 +582,13 @@ parameters and their settings. The Password Change Page -The Password Change page is a popular tool that allows the creation, deletion, deactivation, -and reactivation of MS Windows networking users on the local machine. Alternately, you can use +The password change page is a popular tool that allows the creation, deletion, deactivation, +and reactivation of MS Windows networking users on the local machine. You can also use this tool to change a local password for a user account. -When logged in as a non-root account, the user will have to provide the old password as well as +When logged in as a non-root account, the user must provide the old password as well as the new password (twice). When logged in as root, only the new password is required. diff --git a/docs/Samba3-HOWTO/TOSHARG-Speed.xml b/docs/Samba3-HOWTO/TOSHARG-Speed.xml index 1e74a223962..c9707552e84 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Speed.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Speed.xml @@ -20,7 +20,7 @@ Comparisons -The Samba server uses TCP to talk to the client. Thus if you are +The Samba server uses TCP to talk to the client, so if you are trying to see if it performs well, you should really compare it to programs that use the same protocol. The most readily available programs for file transfer that use TCP are ftp or another TCP-based @@ -41,7 +41,7 @@ although this depends on your system. -Several people have done comparisons between Samba and Novell, NFS or +Several people have done comparisons between Samba and Novell, NFS, or Windows NT. In some cases Samba performed the best, in others the worst. I suspect the biggest factor is not Samba versus some other system, but the hardware and drivers used on the various systems. Given similar @@ -61,7 +61,7 @@ performance of a TCP-based server like Samba. The socket options that Samba uses are settable both on the command -line with the option, or in the &smb.conf; file. +line with the option and in the &smb.conf; file. @@ -86,7 +86,7 @@ this is that the Microsoft TCP/IP stack is slow in sending TCP ACKs. There have been reports that setting socket options = SO_RCVBUF=8192 in smb.conf can seriously degrade Samba performance on the loopback adaptor (IP Address 127.0.0.1). It is strongly -recommended that before specifying any settings for socket options the effect +recommended that before specifying any settings for socket options, the effect first be quantitatively measured on the server being configured. @@ -98,7 +98,7 @@ first be quantitatively measured on the server being configured. The option affects the overlap of disk reads/writes with network reads/writes. If the amount of data being -transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and +transferred in several of the SMB commands (currently SMBwrite, SMBwriteX, and SMBreadbraw) is larger than this value, then the server begins writing the data before it has received the whole packet from the network, or in the case of SMBreadbraw, it begins writing to the network before @@ -129,7 +129,7 @@ which limits the size of nearly all SMB commands. You can set the maximum size that Samba will negotiate using the option in &smb.conf;. Note that this is the maximum size of SMB requests that Samba will accept, but not the maximum size that the client will accept. -The client maximum receive size is sent to Samba by the client and Samba +The client maximum receive size is sent to Samba by the client, and Samba honors this limit. @@ -146,7 +146,7 @@ In most cases the default is the best option. Log Level -If you set the log level (also known as ) higher than 2 +If you set the log level (also known as ) higher than 2, then you may suffer a large drop in performance. This is because the server flushes the log file after each operation, which can be quite expensive. @@ -166,12 +166,8 @@ being enabled by default. In some cases clients do not handle very well and actually get lower performance using it than they get using the conventional -read operations. - - - -So you might like to try no and see what happens on your -network. It might lower, raise or not effect your performance. Only +read operations, so you might like to try no and see what happens on your +network. It might lower, raise, or not affect your performance. Only testing can really tell. @@ -227,11 +223,11 @@ I am running Gentoo on my server and Samba 2.2.8a. Recently I changed kernel version from linux-2.4.19-gentoo-r10 to linux-2.4.20-wolk4.0s. And now I have a performance issue with Samba. Many of you will probably say, Move to vanilla sources! -Well, I tried that and it didn't work. I have a 100mb LAN and two computers (Linux and +Well, I tried that and it didn't work. I have a 100MB LAN and two computers (Linux and Windows 2000). The Linux server shares directories with DivX files, the client -(Windows 2000) plays them via LAN. Before when I was running the 2.4.19 kernel +(Windows 2000) plays them via LAN. Before, when I was running the 2.4.19 kernel, everything was fine, but now movies freeze and stop. I tried moving -files between the server and Windows and it is terribly slow. +files between the server and Windows, and it is terribly slow. (John, should this be set off as an extract???????) @@ -242,7 +238,7 @@ The answer he was given is: Grab the mii-tool and check the duplex settings on the NIC. My guess is that it is a link layer issue, not an application layer problem. Also run ifconfig and verify that the framing -error, collisions, and so on, look normal for ethernet. +error, collisions, and so on, look normal for ethernet. (John, should this be set off as an extract???????) @@ -253,14 +249,14 @@ error, collisions, and so on, look normal for ethernet. Our Samba PDC server has been hosting three TB of data to our 500+ users [Windows NT/XP] for the last three years using Samba without a problem. -Today all shares went very slow. Also the main smbd kept -spawning new processes so we had 1600+ running smbd's (normally we avg. 250). +Today all shares went very slow. Also, the main smbd kept +spawning new processes, so we had 1600+ running SMDB's (normally we average 250). It crashed the SUN E3500 cluster twice. After a lot of searching, I decided to rm /var/locks/*.tdb. Happy again. -Question: Is there any method of keeping the *.tdb files in top condition or +Question: Is there any method of keeping the *.tdb files in top condition, or how can I detect early corruption? @@ -284,12 +280,12 @@ a lot lower than before the locks cleanup. Any ideas on keeping it top notch? A site reported experiencing very baffling symptoms with MYOB Premier opening and -accessing it's data-files. Some operations on the file would take between 40 and +accessing its data files. Some operations on the file would take between 40 and 45 seconds. -It turned out that the printer monitor program running on the windows +It turned out that the printer monitor program running on the Windows clients was causing the problems. From the logs, we saw activity coming through with pauses of about 1 second. @@ -297,19 +293,19 @@ through with pauses of about 1 second. Stopping the monitor software resulted in the networks access at normal (quick) speed. Restarting the program caused the speed to slow down -again. The printer was a cannon lbp810 and the relevant task was +again. The printer was a Canon LBP-810 and the relevant task was something like CAPON (not sure on spelling). The monitor software -displayed a printing now dialog on the client during printing. +displayed a "printing now" dialog on the client during printing. -We discovered this by starting with a clean install of windows and -trying the app at every step of the installation of other software -process (had to do this many times). +We discovered this by starting with a clean install of Windows and +trying the application at every step of the installation of other software +process (we had to do this many times). -Moral of the story, check everything (other software included)! +Moral of the story: Check everything (other software included)! diff --git a/docs/Samba3-HOWTO/TOSHARG-glossary.xml b/docs/Samba3-HOWTO/TOSHARG-glossary.xml index 3a36e2c5537..da61267e4e0 100644 --- a/docs/Samba3-HOWTO/TOSHARG-glossary.xml +++ b/docs/Samba3-HOWTO/TOSHARG-glossary.xml @@ -17,7 +17,7 @@ ADS A service unique to Microsoft Windows 200x servers that provides a centrally managed - directory for management of user identities, and computer objects, as well as the permissions + directory for management of user identities and computer objects, as well as the permissions each user or computer may be granted to access distributed network resources. ADS uses Kerberos-based authentication and LDAP over Kerberos for directory access. @@ -42,8 +42,8 @@ CUPS A recent implementation of a high capability printing system for UNIX developed by - . The design objective of CUPS was to provide - a rich print processing system that has built-in intelligence that is capable of correctly rendering (processing) + . The design objective of CUPS was to provide + a rich print processing system that has built-in intelligence capable of correctly rendering (processing) a file that is submitted for printing even if it was formatted for an entirely different printer. @@ -52,7 +52,7 @@ Domain Master Browser DMB - The Domain Master Browser maintains a list of all the servers that + The domain master browser maintains a list of all the servers that have announced their services within a given workgroup or NT domain. See for details. @@ -61,9 +61,9 @@ Domain Name Service DNS - A protocol by which computer host names may be resolved to the matching IP address/es. DNS is implemented + A protocol by which computer hostnames may be resolved to the matching IP address/es. DNS is implemented by the Berkeley Internet Name Daemon. There exists a recent version of DNS that allows dynamic name registration - by network clients or by a DHCP server. This recent protocol is known as Dynamic DNS (DDNS). + by network clients or by a DHCP server. This recent protocol is known as dynamic DNS (DDNS). @@ -74,7 +74,7 @@ A protocol that was based on the BOOTP protocol that may be used to dynamically assign an IP address, from a reserved pool of addresses, to a network client or device. Additionally, DHCP may assign all network configuration settings and may be used to register a computer name and its address with a - Dynamic DNS server. + dynamic DNS server. @@ -92,7 +92,7 @@ Graphical Device Interface GDI - Device Independent format for printing used by Microsoft Windows. + Device-independent format for printing used by Microsoft Windows. It is quite similar to what PostScript is for UNIX. Printing jobs are first generated in GDI and then converted to a device-specific format. See for details. @@ -102,8 +102,8 @@ Group IDentifier GID - The UNIX system Group Identifier; on older systems a 32-bit unsigned integer and on newer systems - an unsigned 64-bit integer. The GID is used in UNIX-like operating systems for all group level access + The UNIX system group identifier; on older systems, a 32-bit unsigned integer, and on newer systems + an unsigned 64-bit integer. The GID is used in UNIX-like operating systems for all group-level access control. @@ -128,7 +128,7 @@ NetBEUI Very simple network protocol invented by IBM and Microsoft. It is used - to do NetBIOS over ethernet with low overhead. NetBEUI is a non-routable + to do NetBIOS over Ethernet with low overhead. NetBEUI is a nonroutable protocol. @@ -137,11 +137,11 @@ Network Basic Input/Output System NetBIOS - NetBIOS is a simple application programming interface (API) invented in the eighties + NetBIOS is a simple application programming interface (API) invented in the 1980s that allows programs to send data to certain network names. NetBIOS is always run over another network protocol such as IPX/SPX, TCP/IP, or Logical Link Control (LLC). NetBIOS run over LLC - is best known as NetBEUI (The NetBIOS Extended User Interface &smbmdash; a complete misnomer!). + is best known as NetBEUI (NetBIOS Extended User Interface &smbmdash; a complete misnomer!). @@ -149,7 +149,7 @@ NetBT NBT - Protocol for transporting NetBIOS frames over TCP/IP. Uses ports 137, 138 and 139. + Protocol for transporting NetBIOS frames over TCP/IP. Uses ports 137, 138, and 139. NetBT is a fully routable protocol. @@ -159,9 +159,9 @@ Local Master Browser LMB - The Local Master Browser maintains a list + The local master browser maintains a list of all servers that have announced themselves within a given workgroup or NT domain on a particular - broadcast isolated subnet. See for details. + broadcast-isolated subnet. See for details. @@ -169,7 +169,7 @@ Printer Command Language PCL - A printer page description language that was developed by Hewlett Packard + A printer page description language that was developed by Hewlett-Packard and is in common use today. @@ -179,9 +179,9 @@ PDF - A highly compressed document format, based on postscript, used as a document distribution format - that is supported by Web browsers as well as many applications. Adobe also distribute an application - called acrobat which is a PDF reader. + A highly compressed document format, based on PostScript, used as a document distribution format + that is supported by Web browsers as well as many applications. Adobe also distributes an application + called Acrobat, which is a PDF reader. @@ -198,9 +198,9 @@ PostScript Printer Description PPD - PPD's specify and control options supported by postscript printers, such as duplexing, stapling, - DPI, ... See also . PPD files can be read by printing applications - to enable correct postscript page layout for a particular postscript printer. + PPDs specify and control options supported by PostScript printers, such as duplexing, stapling, + and DPI. See also . PPD files can be read by printing applications + to enable correct PostScript page layout for a particular PostScript printer. @@ -209,10 +209,10 @@ SMB SMB was the original name of the protocol `spoken' by - Samba. It was invented in the eighties by IBM and adopted + Samba. It was invented in the 1980s by IBM and adopted and extended further by Microsoft. Microsoft renamed the protocol to CIFS during the Internet hype in the - nineties. + 1990s. @@ -220,8 +220,8 @@ User IDentifier UID - The UNIX system User Identifier; on older systems a 32-bit unsigned integer and on newer systems - an unsigned 64-bit integer. The UID is used in UNIX-like operating systems for all user level access + The UNIX system user identifier; on older systems a 32-bit unsigned integer, and on newer systems, + an unsigned 64-bit integer. The UID is used in UNIX-like operating systems for all user-level access control. diff --git a/docs/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml b/docs/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml index 6f3853fd6f1..65b91dfa87a 100644 --- a/docs/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml +++ b/docs/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml @@ -23,12 +23,12 @@ the move from 2.2.x to 3.0.20. Samba-3.0.20 default behavior should be approximately the same as Samba-2.2.x. The default behavior when the new parameter is not defined in the &smb.conf; file provides the same default behavior as Samba-2.2.x -with Yes, and +with Yes and will use the smbpasswd database. -So why say that behavior should be approximately the same as Samba-2.2.x? Because +So why say that behavior should be approximately the same as Samba-2.2.x? Because Samba-3.0.20 can negotiate new protocols, such as support for native Unicode, that may result in differing protocol code paths being taken. The new behavior under such circumstances is not exactly the same as the old one. The good news is that the domain and machine SIDs will be @@ -36,10 +36,10 @@ preserved across the upgrade. -If the Samba-2.2.x system was using an LDAP backend, and there is no time to update the LDAP +If the Samba-2.2.x system is using an LDAP backend, and there is no time to update the LDAP database, then make sure that ldapsam_compat is specified in the &smb.conf; file. For the rest, behavior should remain more or less the same. -At a later date, when there is time to implement a new Samba-3 compatible LDAP backend, it is possible +At a later date, when there is time to implement a new Samba-3-compatible LDAP backend, it is possible to migrate the old LDAP database to the new one through use of the pdbedit. See The pdbedit Command. @@ -60,8 +60,8 @@ The major new features are: - Unicode support. Samba will now negotiate Unicode on the wire and - internally there is a much better infrastructure for multi-byte + Unicode support. Samba will now negotiate Unicode on the wire, and + internally there is a much better infrastructure for multibyte and Unicode character sets. @@ -90,7 +90,7 @@ The major new features are: - Better Windows 200x/XP printing support including publishing + Better Windows 200x/XP printing support, including publishing printer attributes in Active Directory. @@ -104,12 +104,12 @@ The major new features are: Support for migrating from a Windows NT 4.0 domain to a Samba - domain and maintaining user, group and domain SIDs. + domain and maintaining user, group, and domain SIDs. Support for establishing trust relationships with Windows NT 4.0 - Domain Controllers. + domain controllers. @@ -145,7 +145,7 @@ complete descriptions of new or modified parameters. Removed Parameters -(Ordered Alphabetically): +In alphabetical order, these are the parameters eliminated for Samba 3.0.20. admin log @@ -175,7 +175,7 @@ complete descriptions of new or modified parameters. New Parameters -(New parameters have been grouped by function): +New parameters in Samba 3.0.20 are grouped by function): Remote Management @@ -184,7 +184,7 @@ complete descriptions of new or modified parameters. shutdown script -User and Group Account Management: +User and Group Account Management add group script @@ -197,14 +197,14 @@ complete descriptions of new or modified parameters. set primary group script -Authentication: +Authentication auth methods realm -Protocol Options: +Protocol Options client lanman auth @@ -221,7 +221,7 @@ complete descriptions of new or modified parameters. use spnego -File Service: +File Service get quota command @@ -237,14 +237,14 @@ complete descriptions of new or modified parameters. vfs objects -Printing: +Printing max reported print jobs -Unicode and Character Sets: +Unicode and Character Sets display charset @@ -253,7 +253,7 @@ complete descriptions of new or modified parameters. UNIX charset -SID to UID/GID Mappings: +SID to UID/GID Mappings idmap backend @@ -265,7 +265,7 @@ complete descriptions of new or modified parameters. enable rid algorithm -LDAP: +LDAP ldap delete dn @@ -276,7 +276,7 @@ complete descriptions of new or modified parameters. ldap user suffix -General Configuration: +General Configuration preload modules @@ -286,7 +286,7 @@ complete descriptions of new or modified parameters. -Modified Parameters (Changes in Behavior): +Modified Parameters (Changes in Behavior) encrypt passwords (enabled by default) @@ -314,7 +314,7 @@ complete descriptions of new or modified parameters. This section contains brief descriptions of any new databases - introduced in Samba-3. Please remember to backup your existing + introduced in Samba-3. Please remember to back up your existing ${lock directory}/*tdb before upgrading to Samba-3. Samba will upgrade databases as they are opened (if necessary), but downgrading from 3.0 to 2.2 is an unsupported path. @@ -355,7 +355,7 @@ complete descriptions of new or modified parameters. idmap - new ID map table from SIDS to UNIX UIDs/GIDs + New ID map table from SIDS to UNIX UIDs/GIDs yes @@ -371,15 +371,14 @@ complete descriptions of new or modified parameters. printing/*.tdb - Cached output from `lpq command' created on a per print - service basis + Cached output from lpq command created on a per-print-service basis no registry Read-only Samba registry skeleton that provides support for - exporting various db tables via the winreg RPCs + exporting various database tables via the winreg RPCs no @@ -400,15 +399,15 @@ complete descriptions of new or modified parameters. When operating as a member of a Windows domain, Samba-2.2 would map any users authenticated by the remote DC to the guest account - if a uid could not be obtained via the getpwnam() call. Samba-3 + if a UID could not be obtained via the getpwnam() call. Samba-3 rejects the connection as NT_STATUS_LOGON_FAILURE. There is no - current work around to re-establish the Samba-2.2 behavior. + current workaround to re-establish the Samba-2.2 behavior. When adding machines to a Samba-2.2 controlled domain, the add user script was used to create the UNIX identity of the - Machine Trust Account. Samba-3 introduces a new add machine + machine trust account. Samba-3 introduces a new add machine script that must be specified for this purpose. Samba-3 will not fall back to using the add user script in the absence of an add machine script. @@ -447,7 +446,7 @@ complete descriptions of new or modified parameters. storage backends (). Please refer to the &smb.conf; - man page and Account Information Databases, for details. While both parameters assume sane default + man page and Chapter 10, Account Information Databases, for details. While both parameters assume sane default values, it is likely that you will need to understand what the values actually mean in order to ensure Samba operates correctly. @@ -455,7 +454,7 @@ complete descriptions of new or modified parameters. pdbedit Certain functions of the smbpasswd tool have been split between the - new smbpasswd utility, the net tool and the new pdbedit + new smbpasswd utility, the net tool, and the new pdbedit utility. See the respective man pages for details. @@ -473,7 +472,7 @@ complete descriptions of new or modified parameters. A new object class (sambaSamAccount) has been introduced to replace - the old sambaAccount. This change aids us in the renaming of attributes + the old sambaAccount. This change aids in the renaming of attributes to prevent clashes with attributes from other vendors. There is a conversion script (examples/LDAP/convertSambaAccount) to modify an LDIF file to the new schema. @@ -496,7 +495,7 @@ complete descriptions of new or modified parameters. - Under Samba-2.x the Domain SID can be obtained by executing: + Under Samba-2.x the domain SID can be obtained by executing: &prompt;smbpasswd -S <DOMAINNAME> @@ -558,21 +557,21 @@ complete descriptions of new or modified parameters. ldap suffix &smbmdash; used to search for user and computer accounts. ldap user suffix &smbmdash; used to store user accounts. - ldap machine suffix &smbmdash; used to store Machine Trust Accounts. + ldap machine suffix &smbmdash; used to store machine trust accounts. ldap group suffix &smbmdash; location of posixGroup/sambaGroupMapping entries. ldap idmap suffix &smbmdash; location of sambaIdmapEntry objects. If an ldap suffix is defined, it will be appended to all of the - remaining sub-suffix parameters. In this case, the order of the suffix + remaining subsuffix parameters. In this case, the order of the suffix listings in smb.conf is important. Always place the ldap suffix first in the list. Due to a limitation in Samba's &smb.conf; parsing, you should not surround - the DNs with quotation marks. + the domain names with quotation marks. @@ -581,9 +580,9 @@ complete descriptions of new or modified parameters. IdMap LDAP Support - Samba-3 supports an ldap backend for the idmap subsystem. The + Samba-3 supports an LDAP backend for the idmap subsystem. The following options inform Samba that the idmap table should be - stored on the directory server onterose in the "ou=idmap,dc=quenya,dc=org" partition. + stored on the directory server onterose in the ou=idmap,dc=quenya,dc=org partition. -- 2.11.4.GIT