Difference between revisions of "Frequently Asked Questions"

From SambaWiki
(First sub page)
 
m (Updated link)
 
(18 intermediate revisions by 9 users not shown)
Line 1: Line 1:
  +
==What are tdb files?==
−
<ul>
  
  +
Answered by Jerry Carter on samba@lists.samba.org
−
<li>file ownership</li>
  
  +
[http://lists.samba.org/archive/samba/2005-March/102412.html]
−
<li>inherit permissions</li>
  
  +
Samba uses a lightweight database called Trivial Database
−
<li>guest access</li>
  
  +
(tdb). Here's the list (john, we should really document
−
</ul>
  
  +
this somewhere).<br>
  +
(*) information persistent across restarts (but not necessarily important to backup).
  +
<table>
  +
<tr>
  +
<td>account_policy.tdb*</td><td>NT account policy settings such as pw expiration, etc...</td>
  +
</tr>
  +
<tr>
  +
<td>brlock.tdb</td><td>byte range locks</td>
  +
</tr>
  +
<tr>
  +
<td>browse.dat</td><td>browse lists</td>
  +
</tr>
  +
<tr>
  +
<td>connections.tdb</td><td>share connections (used to enforce max connections, etc...)</td>
  +
</tr>
  +
<tr>
  +
<td>gencache.tdb</td><td>generic caching db</td>
  +
</tr>
  +
<tr>
  +
<td>group_mapping.tdb*</td><td>group mapping information</td>
  +
</tr>
  +
<tr>
  +
<td>lang_en.tdb</td><td>Language encodings (i think).</td>
  +
</tr>
  +
<tr>
  +
<td>locking.tdb</td><td>share modes & oplocks</td>
  +
</tr>
  +
<tr>
  +
<td>login_cache.tdb*</td><td>bad pw attempts</td>
  +
</tr>
  +
<tr>
  +
<td>messages.tdb</td><td>Samba [[messaging]] system</td>
  +
</tr>
  +
<tr>
  +
<td>netsamlogon_cache.tdb*</td><td>cache of user net_info_3 struct from net_samlogon() request (as a domain member)</td>
  +
</tr>
  +
<tr>
  +
<td>ntdrivers.tdb*</td><td>installed printer drivers</td>
  +
</tr>
  +
<tr>
  +
<td>ntforms.tdb*</td><td>installed printer forms</td>
  +
</tr>
  +
<tr>
  +
<td>ntprinters.tdb*</td><td>installed printer information</td>
  +
</tr>
  +
<tr>
  +
<td>printing/</td><td>directory containing tdb per print queue of cached lpq output</td>
  +
</tr>
  +
<tr>
  +
<td>registry.tdb</td><td>Windows registry skeleton (connect via regedit.exe)</td>
  +
</tr>
  +
<tr>
  +
<td>sessionid.tdb</td><td>session information (e.g. support for 'utmp = yes')</td>
  +
</tr>
  +
<tr>
  +
<td>share_info.tdb*</td><td>share acls</td>
  +
</tr>
  +
<tr>
  +
<td>unexpected.tdb</td><td>unexpected packet queue needed to support windows clients that respond on a difference port that the originating request) (i could be wrong on this one).</td>
  +
</tr>
  +
<tr>
  +
<td>winbindd_cache.tdb</td><td>winbindd's cache of user lists, etc...</td>
  +
</tr>
  +
<tr>
  +
<td>winbindd_idmap.tdb*</td><td>winbindd's local idmap db</td>
  +
</tr>
  +
<tr>
  +
<td>wins.dat*</td><td>wins database when 'wins support = yes'</td>
  +
</tr>
  +
</table>
  +
In the ''private'' subdirectory we have two more tdb files:
  +
<table>
  +
<tr>
  +
<td>secrets.tdb*</td><td>Private information like workstation passwords, the ldap admin dn and trust account information</td>
  +
</tr>
  +
<tr>
  +
<td>passdb.tdb*</td><td>User account information if passdb backend = tdbsam is used</td>
  +
</tr>
  +
</table>
  +
The following tdb's should be backed up IMO:<br>
  +
&nbsp;&nbsp;nt*.tdb
  +
&nbsp;&nbsp;account_policy.tdb
  +
&nbsp;&nbsp;group_mapping.tdb
  +
&nbsp;&nbsp;share_info.tdb
  +
&nbsp;&nbsp;winbindd_idmap.tdb
  +
&nbsp;&nbsp;secrets.tdb
  +
&nbsp;&nbsp;passdb.tdb
  +
  +
==Example==
  +
To back up printing.tdb:
  +
  +
<nowiki>root# ls
  +
. browse.dat locking.tdb ntdrivers.tdb printing.tdb
  +
.. share_info.tdb connections.tdb messages.tdb ntforms.tdb
  +
printing.tdbkp unexpected.tdb brlock.tdb gmon.out namelist.debug
  +
ntprinters.tdb sessionid.tdb
  +
  +
root# tdbbackup -s .bak printing.tdb
  +
printing.tdb : 135 records
  +
  +
root# ls -l printing.tdb*
  +
-rw------- 1 root root 40960 May 2 03:44 printing.tdb
  +
-rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak</nowiki>
  +
----
  +
  +
==vfs - An example for a recycle container on a samba share ==
  +
vfs objects = recycle
  +
recycle:keeptree = yes
  +
recycle:versions = yes
  +
recycle:touch = yes
  +
recycle:exclude = ?~$*,~$*,*.tmp,index*.pl,index*.htm*,*.temp,*.TMP
  +
recycle:exclude_dir= /tmp,/temp,/cache
  +
recycle:repository = .recycle/.recycle.%u
  +
recycle:noversions = *.doc,*.xls,*.ppt
  +
#hide files = /.recycle.*/.recycle/
  +
#veto files = /.recycle.*/.recycle/
  +
  +
==inherit permissions==
  +
  +
Use the UNIX form of setgid to make all files and subdirectories belong to the enclosing group.
  +
  +
For example: the root directory for a samba share appears as:
  +
# ls -ld /home/storage
  +
drwxrwxr-x 47 root dom_users 4096 Jan 31 08:09 /home/storage
  +
  +
change the directory so all files & subdirectories created will belong to 'dom_users' group:
  +
# chmod g+s /home/storage
  +
verify the results:
  +
# ls -ld /home/storage
  +
drwxrwsr-x 47 root dom_users 4096 Jan 31 08:09 /home/storage
  +
if you create a new file 'abc' as user 'foo' who has the primary group 'users' the file is created as
  +
# ls -ld /home/storage/*
  +
drwxrwsr-x 47 foo dom_users 4096 Jan 31 08:09 /home/storage/abc
  +
  +
==guest access==
  +
To provide Guest Access to samba please see the page: [[Setting_up_Samba_as_a_Standalone_Server|Setting up Samba as a Standalone Server]]

Latest revision as of 15:37, 7 January 2017

What are tdb files?

 Answered by Jerry Carter on samba@lists.samba.org
 [1]

Samba uses a lightweight database called Trivial Database (tdb). Here's the list (john, we should really document this somewhere).
(*) information persistent across restarts (but not necessarily important to backup).

account_policy.tdb*NT account policy settings such as pw expiration, etc...
brlock.tdbbyte range locks
browse.datbrowse lists
connections.tdbshare connections (used to enforce max connections, etc...)
gencache.tdbgeneric caching db
group_mapping.tdb*group mapping information
lang_en.tdbLanguage encodings (i think).
locking.tdbshare modes & oplocks
login_cache.tdb*bad pw attempts
messages.tdbSamba messaging system
netsamlogon_cache.tdb*cache of user net_info_3 struct from net_samlogon() request (as a domain member)
ntdrivers.tdb*installed printer drivers
ntforms.tdb*installed printer forms
ntprinters.tdb*installed printer information
printing/directory containing tdb per print queue of cached lpq output
registry.tdbWindows registry skeleton (connect via regedit.exe)
sessionid.tdbsession information (e.g. support for 'utmp = yes')
share_info.tdb*share acls
unexpected.tdbunexpected packet queue needed to support windows clients that respond on a difference port that the originating request) (i could be wrong on this one).
winbindd_cache.tdbwinbindd's cache of user lists, etc...
winbindd_idmap.tdb*winbindd's local idmap db
wins.dat*wins database when 'wins support = yes'

In the private subdirectory we have two more tdb files:

secrets.tdb*Private information like workstation passwords, the ldap admin dn and trust account information
passdb.tdb*User account information if passdb backend = tdbsam is used

The following tdb's should be backed up IMO:
  nt*.tdb   account_policy.tdb   group_mapping.tdb   share_info.tdb   winbindd_idmap.tdb   secrets.tdb   passdb.tdb

Example

To back up printing.tdb: 

    root# ls
     .              browse.dat     locking.tdb     ntdrivers.tdb printing.tdb
     ..             share_info.tdb connections.tdb messages.tdb  ntforms.tdb
     printing.tdbkp unexpected.tdb brlock.tdb      gmon.out      namelist.debug  
     ntprinters.tdb sessionid.tdb
 
     root# tdbbackup -s .bak printing.tdb
      printing.tdb : 135 records
 
     root# ls -l printing.tdb*
      -rw-------    1 root     root        40960 May  2 03:44 printing.tdb
      -rw-------    1 root     root        40960 May  2 03:44 printing.tdb.bak
    ----

vfs - An example for a recycle container on a samba share

vfs objects =  recycle
      recycle:keeptree = yes
      recycle:versions = yes
      recycle:touch = yes
      recycle:exclude = ?~$*,~$*,*.tmp,index*.pl,index*.htm*,*.temp,*.TMP
      recycle:exclude_dir=  /tmp,/temp,/cache
      recycle:repository = .recycle/.recycle.%u
      recycle:noversions = *.doc,*.xls,*.ppt
      #hide files = /.recycle.*/.recycle/
      #veto files = /.recycle.*/.recycle/

inherit permissions

Use the UNIX form of setgid to make all files and subdirectories belong to the enclosing group.

For example: the root directory for a samba share appears as: 

# ls -ld /home/storage
drwxrwxr-x  47 root dom_users 4096 Jan 31 08:09 /home/storage

change the directory so all files & subdirectories created will belong to 'dom_users' group: 

# chmod g+s /home/storage

verify the results: 

# ls -ld /home/storage
drwxrwsr-x  47 root dom_users 4096 Jan 31 08:09 /home/storage

if you create a new file 'abc' as user 'foo' who has the primary group 'users' the file is created as 

# ls -ld /home/storage/*
drwxrwsr-x  47 foo  dom_users 4096 Jan 31 08:09 /home/storage/abc

guest access

To provide Guest Access to samba please see the page: Setting up Samba as a Standalone Server

Retrieved from "https://wiki.samba.org/index.php?title=Frequently_Asked_Questions&oldid=12821"