User Documentation

• Frequently Asked Questions (FAQ)
• Samba Release Planning
• Samba Release Notes
• Obtaining Samba
• Installing Samba

• Operating System Requirements

• Package Dependencies Required to Build Samba
• File System Support

• Build Samba from Source
• Distribution-specific Package Installation

• Updating Samba

• Domain Control

• Active Directory Domain Controller

• Active Directory Naming FAQ
• Setting up Samba as an Active Directory Domain Controller
• Joining a Samba DC to an Existing Active Directory
• Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD
• Joining a Windows Server 2012 / 2012 R2 DC to a Samba AD
• Migrating a Samba NT4 Domain to Samba AD (Classic Upgrade)
• Demoting a Samba AD DC
• The Samba AD DNS Back Ends

• Samba Internal DNS Back End
• BIND9_DLZ DNS Back End

• Setting up a BIND DNS Server
• Configure DHCP to update DNS records

• Testing Dynamic DNS Updates

• Managing the Samba AD DC Service
• Configuring Winbindd on a Samba AD DC
• Time Synchronisation
• Verifying the Directory Replication Statuses
• Manually Replicating Directory Partitions
• Running a Samba AD DC with MIT Kerberos KDC
• Migrating the ntvfs File Server Back End to s3fs
• Samba AD DC Port Usage
• Samba AD DC Troubleshooting
• Password Settings Objects
• Running Samba AD Domain Controllers in large domains
• Using the lmdb database backend

• NT4 Domains

• Setting up Samba as an NT4 PDC (Quick Start)

• Samba NT4 PDC Port Usage

• Setting up Samba as an NT4 BDC
• Required Settings for Samba NT4 Domains

• Domain Membership

• Joining a Windows Client or Server to a Domain

• Windows DNS Configuration

• Joining a Linux or Unix Host to a Domain

• Linux and Unix DNS Configuration
• Setting up Samba as a Domain Member

• Identity Mapping Back Ends

• idmap config ad (RFC2307)
• idmap config rid
• idmap config autorid
• Local accounts

• Authenticating Domain Users Using PAM
• PAM Offline Authentication

• Samba Domain Member Port Usage

• Joining a macOS Client to a Domain

• macOS DNS Configuration

• Configuring FreeDOS to Access a Samba Share
• Troubleshooting Samba Domain Members

• Standalone Server

• Setting up Samba as a Standalone Server

• CTDB and Clustered Samba

• Advanced Configuration

• Configuring Logging on a Samba Server

• Setting up Audit Logging

• DNS Administration

• Changing the DNS Back End of a Samba AD DC
• DNS administration
• DNS troubleshooting

• Dns_tkey_negotiategss: TKEY is unacceptable
• Deleted AD zone

• Setting up RFC2307 in AD
• Print Server Support

• Setting up Samba as a Print Server
• Setting up Automatic Printer Driver Downloads for Windows Clients
• Creating Custom Paper Sizes
• Setting up Network Printer Ports
• Virtual PDF Printer
• Virtual PDF Printer with CUPS Back End for Windows Clients without roaming user profile
• Connect printer with session logon script for non admins users

• Active Directory Sites
• Samba AD Schema

• AD Schema Version Support
• Samba AD schema extensions

• Virtual File System Modules
• Generating Keytabs

• Replication

• Distributed File System (DFS)

• SysVol replication (DFS-R)

• Rsync based SysVol replication workaround (Samba DCs only)
• Bidirectional Rsync/Unison based SysVol replication workaround (Samba DCs only)
• Bidirectional Rsync/osync based SysVol replication workaround (Samba DCs only)
• Robocopy based SysVol replication workaround (Samba DCs -> Windows DCs)

• Directory Replication Service (DRS)

• Common Administration Tasks

• The Windows remote server administration tools (RSAT)

• Installing RSAT

• Remote and local management of Samba

• User and group management

• Maintaining Unix Attributes in AD using ADUC
• Administer Unix Attributes in AD using samba-tool and ldb-tools

• Backup and restore

• Back up and Restoring a Samba AD DC
• Back up and Restoring a Samba Domain Member

• Samba File Serving

• Setting up a Share Using Windows ACLs
• Setting up a Share Using POSIX ACLs
• Special file shares

• User Home Folders
• Roaming Windows User Profiles

• Configuring Windows Profile Folder Redirections

• Setting up a Share Without Authentication

• Flexible Single-Master Operations (FSMO) Roles

• Transferring and Seizing FSMO Roles

• The AD functional levels

• Raising the Functional Levels

• Changing the IP Address of a Samba AD DC
• Configuring LDAP over SSL (LDAPS) on a Samba AD DC
• Delegating administrative permissions to non-administrators

• Joining Machines to a Domain
• Account management

• Administer workstations

• Managing local groups on domain members via GPO restricted groups

• Working with Active Directory encoded LDAP values
• Performance Tuning
• Configure Samba to Bind to Specific Interfaces
• Improving performance with server-side copy
• Samba AD Smart Card Login
• Samba AD Smart Card Login for macOS clients
• VPN Single SignOn with Samba AD
• Authenticating other services against Samba AD

• Authenticating Apache against Active Directory
• OpenSSH Single sign-on
• Authenticating Dovecot against Active Directory

• openLDAP as proxy to AD
• Client specific logging
• Configure Samba to Work Better with Mac OS X
• Interpreting JSON Audit Logs

• Security

• Samba Security Documentation

• Terms and Abbreviations

• Getting Help

• Samba Mailing List
• Commercial Support

• Contribute

• Bug Reporting
• How To Write Samba Documentation