[system-administrators-guide] Samba: corrections and updates
stephenw
stephenw at fedoraproject.org
Wed Aug 6 21:46:25 UTC 2014
commit 5dc8579e7026c05a873f566714a2749f2db1db3e
Author: Stephen Wadeley <swadeley at redhat.com>
Date: Wed Aug 6 22:02:05 2014 +0200
Samba: corrections and updates
thanks to Robin Hack for his feedback
en-US/Samba.xml | 33 ++++++++-------------------------
1 files changed, 8 insertions(+), 25 deletions(-)
---
diff --git a/en-US/Samba.xml b/en-US/Samba.xml
index debbdd7..371289b 100644
--- a/en-US/Samba.xml
+++ b/en-US/Samba.xml
@@ -14,8 +14,7 @@
<see>Samba</see>
</indexterm>
<para>
- <firstterm>Samba</firstterm> is an open source implementation of the <firstterm>Server Message Block</firstterm> (<systemitem class="protocol">SMB</systemitem>) protocol. It allows the networking of Microsoft <trademark
- class="registered">Windows</trademark>, Linux, UNIX, and other operating systems together, enabling access to Windows-based file and printer shares. Samba's use of <systemitem class="protocol">SMB</systemitem> allows it to appear as a Windows server to Windows clients.</para>
+ <application>Samba</application> is an open source implementation of the <firstterm>server message block</firstterm> (<systemitem class="protocol">SMB</systemitem>) protocol. Modern versions of this protocol are also known as the <firstterm>common Internet file system</firstterm> (<systemitem class="protocol">CIFS</systemitem>) protocol. It allows the networking of Microsoft <trademark class="registered">Windows</trademark>, Linux, UNIX, and other operating systems together, enabling access to Windows-based file and printer shares. Samba's use of <systemitem class="protocol">SMB</systemitem> allows it to appear as a Windows server to Windows clients.</para>
<note>
<title>Installing the samba package</title>
<para>In order to use <application>Samba</application>, first ensure the <package>samba</package> package is installed on your system by running, as <systemitem class="username">root</systemitem>:</para>
@@ -31,22 +30,7 @@
<primary>Samba</primary>
<secondary>Introduction</secondary>
</indexterm>
- <para>The third major release of Samba, version 3.0.0, introduced numerous improvements from prior versions, including:</para>
- <itemizedlist>
- <listitem>
- <para>The ability to join an Active Directory domain by means of the <firstterm>Lightweight Directory Access Protocol</firstterm> (<systemitem class="protocol">LDAP</systemitem>) and <firstterm>Kerberos</firstterm></para>
- </listitem>
- <listitem>
- <para>Built in Unicode support for internationalization</para>
- </listitem>
- <listitem>
- <para>Support for all recent Microsoft Windows server and client versions to connect to Samba servers without needing local registry hacking</para>
- </listitem>
- <listitem>
- <para>Two new documents developed by the Samba.org team, which include a 400+ page reference manual, and a 300+ page implementation and integration manual. For more information about these published titles, refer to <xref
- linkend="s3-samba-resources-published"/>.</para>
- </listitem>
- </itemizedlist>
+ <para>Fedora includes Samba version <literal>4.1</literal>:</para>
<section
id="s3-samba-abilities">
<title>Samba Features</title>
@@ -81,7 +65,7 @@
<para>Act as an Active Directory domain member server</para>
</listitem>
<listitem>
- <para>Join a Windows NT/2000/2003/2008 PDC</para>
+ <para>Join a Windows NT/2000/2003/2008 PDC/Windows Server 2012</para>
</listitem>
</itemizedlist>
<para>What Samba cannot do:</para>
@@ -134,7 +118,7 @@
<secondary>daemon</secondary>
<tertiary>nmbd</tertiary>
</indexterm>
- <para>The <command>nmbd</command> server daemon understands and replies to NetBIOS name service requests such as those produced by SMB/<firstterm>Common Internet File System</firstterm> (CIFS) in Windows-based systems. These systems include Windows 95/98/ME, Windows NT, Windows 2000, Windows XP, and LanManager clients. It also participates in the browsing protocols that make up the Windows <guilabel>Network Neighborhood</guilabel> view. The default port that the server listens to for <systemitem class="protocol">NMB</systemitem> traffic is <systemitem class="protocol">UDP</systemitem> port <systemitem class="constant">137</systemitem>.</para>
+ <para>The <command>nmbd</command> server daemon understands and replies to NetBIOS name service requests such as those produced by SMB/CIFS in Windows-based systems. These systems include Windows 95/98/ME, Windows NT, Windows 2000, Windows XP, and LanManager clients. It also participates in the browsing protocols that make up the Windows <guilabel>Network Neighborhood</guilabel> view. The default port that the server listens to for <systemitem class="protocol">NMB</systemitem> traffic is <systemitem class="protocol">UDP</systemitem> port <systemitem class="constant">137</systemitem>.</para>
<para>The <command>nmbd</command> daemon is controlled by the <command>nmb</command> service.</para>
<bridgehead id="s4-samba-daemon-winbindd">
<command>winbindd</command>
@@ -145,8 +129,8 @@
<secondary>daemon</secondary>
<tertiary>winbindd</tertiary>
</indexterm>
- <para>The <command>winbind</command> service resolves user and group information on a server running Windows NT, 2000, 2003 or Windows Server 2008. This makes Windows user / group information understandable by UNIX platforms. This is achieved by using Microsoft RPC calls, <firstterm>Pluggable Authentication Modules</firstterm> (PAM), and the <firstterm>Name Service Switch</firstterm> (NSS). This allows Windows NT domain users to appear and operate as UNIX users on a UNIX machine. Though bundled with the Samba distribution, the <command>winbind</command> service is controlled separately from the <command>smb</command> service.</para>
- <para>The <command>winbindd</command> daemon is controlled by the <command>winbind</command> service and does not require the <command>smb</command> service to be started in order to operate. <command>winbindd</command> is also used when Samba is an Active Directory member, and may also be used on a Samba domain controller (to implement nested groups and/or interdomain trust). Because <command>winbind</command> is a client-side service used to connect to Windows NT-based servers, further discussion of <command>winbind</command> is beyond the scope of this chapter.</para>
+ <para>The <command>winbind</command> service resolves user and group information received from a server running Windows NT, 2000, 2003, Windows Server 2008, or Windows Server 2012. This makes Windows user and group information understandable by UNIX platforms. This is achieved by using Microsoft RPC calls, <firstterm>Pluggable Authentication Modules</firstterm> (PAM), and the <firstterm>Name Service Switch</firstterm> (NSS). This allows Windows NT domain users to appear and operate as UNIX users on a UNIX machine. Though bundled with the Samba distribution, the <command>winbind</command> service is controlled separately from the <command>smb</command> service.</para>
+ <para>The <command>winbindd</command> daemon is controlled by the <command>winbind</command> service and does not require the <command>smb</command> service to be started in order to operate. <command>winbindd</command> is also used when Samba is an Active Directory member, and may also be used on a Samba domain controller (to implement nested groups and interdomain trust). Because <command>winbind</command> is a client-side service used to connect to Windows NT-based servers, further discussion of <command>winbind</command> is beyond the scope of this chapter.</para>
<note>
<title>Obtaining a list of utilities that are shipped with Samba</title>
<para>You may refer to <xref
@@ -317,8 +301,7 @@ create mask = 0765</programlisting>
<section
id="s3-samba-encrypted-passwords">
<title>Encrypted Passwords</title>
- <para>Encrypted passwords are enabled by default because it is more secure to do so. To create a user with an encrypted password, use the command <command>smbpasswd -a <replaceable>username</replaceable>
- </command>.</para>
+ <para>Encrypted passwords are enabled by default because it is more secure to use them. To create a user with an encrypted password, use the command <command>smbpasswd -a <replaceable>username</replaceable></command>.</para>
<indexterm
significance="normal">
<primary>Samba</primary>
@@ -394,7 +377,7 @@ create mask = 0765</programlisting>
<screen><command>systemctl start smb.service</command></screen>
<important>
<title>Setting up a domain member server</title>
- <para>To set up a domain member server, you must first join the domain or Active Directory using the <command>net join</command> command <emphasis>before</emphasis> starting the <command>smb</command> service.</para>
+ <para>To set up a domain member server, you must first join the domain or Active Directory using the <command>net join</command> command <emphasis>before</emphasis> starting the <command>smb</command> service. Also, it is recommended to run <systemitem class="daemon">winbind</systemitem> before <systemitem class="daemon">smbd</systemitem>.</para>
</important>
<para>To stop the server, type the following command in a shell prompt, as <systemitem class="username">root</systemitem>:</para>
<screen><command>systemctl stop smb.service</command></screen>
More information about the docs-commits
mailing list