User Documentation: Difference between revisions

From SambaWiki
m (Fix link)
(Add link to lmdb details page)
(166 intermediate revisions by 10 users not shown)
Line 1: Line 1:
* [[FAQ|Frequently Asked Questions (FAQ)]]
* '''[[Introduction]]'''
* [[Samba Release Planning]]
* [[Samba_Features_added/changed_(by_release)|Samba Release Notes]]
* [[Obtaining Samba]]
* [[Installing Samba]]
:* [[Operating System Requirements]]
::* [[Package Dependencies Required to Build Samba]]
::* [[File System Support]]
:* [[Build Samba from Source]]
:* [[Distribution-specific Package Installation]]
* [[Updating Samba]]




* '''[[Samba_4.x_Readme_First|Samba 4.x Readme First]]'''




* [[Domain Control]]
* '''[[Installation|Installation]]'''
:* [[Active Directory Domain Controller]]
** [[Samba_Release_Planning|Release planning]]
::* [[Active Directory Naming FAQ]]
** [[Samba_Features_added/changed_(by_release)|Features added/changed (by release)]]
::* [[Setting up Samba as an Active Directory Domain Controller]]
** [[Obtaining Samba]]
** [[Installing Samba]]
::* [[Joining a Samba DC to an Existing Active Directory]]
::* [[Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD]]
*** [[Operating system requirements|Operating System Requirements]]
::* [[Joining a Windows Server 2012 / 2012 R2 DC to a Samba AD]]
*** [[Build_Samba_from_source|Build Samba from Source]]
::* [[Migrating a Samba NT4 Domain to Samba AD (Classic Upgrade)]]
*** [[Distribution_specific_package_installation|Distribution specific package installation]]
*** [[Updating Samba]]
::* [[Demoting a Samba AD DC]]
::* [[The Samba AD DNS Back Ends]]
:::* [[Samba Internal DNS Back End]]
:::* [[BIND9_DLZ DNS Back End]]
::::* [[Setting up a BIND DNS Server]]
::::* [[Configure DHCP to update DNS records with BIND9]]
:::* [[Testing Dynamic DNS Updates]]
::* [[Managing the Samba AD DC Service]]
::* [[Configuring Winbindd on a Samba AD DC]]
::* [[Time Synchronisation]]
::* [[Verifying the Directory Replication Statuses]]
::* [[Manually Replicating Directory Partitions]]
::* [[Running a Samba AD DC with MIT Kerberos KDC]]
::* [[Migrating the ntvfs File Server Back End to s3fs]]
::* [[Samba AD DC Port Usage]]
::* [[Samba AD DC Troubleshooting]]
::* [[Password Settings Objects]]
::* [[Running Samba AD Domain Controllers in large domains]]
::* [[Using the lmdb database backend]]




* '''[[The different server roles]]'''
** [[Difference between a DC and PDC/BDC]]
** [[Samba as an Active Directory Domain Controller]]
*** [[Samba_AD_DC_HOWTO|Set up a Samba Active Directory Domain Controller]]
*** [[Join_a_domain_as_a_DC|Join Samba as a DC to an existing Domain]]
*** [[Joining_a_Windows_Server_2008_/_2008_R2_DC_to_a_Samba_AD|Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD]]
*** [[Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_(classic_upgrade)|Samba Classic Upgrade (NT4-style Domain to AD)]]
*** [[Using_RFC2307_on_a_Samba_DC|Using RFC2307 on a Samba DC]]
*** [[Demote_a_Samba_AD_DC|Demote a Samba DC]]
*** [[Active_Directory_Sites|Active Directory Sites]]
*** [[Samba as a DC for FreeIPA domain]]
*** [[DNS|Samba AD DNS (general information)]]
**** [[Samba_Internal_DNS|Samba internal DNS server]]
**** [[Configure_BIND_as_backend_for_Samba_AD|DNS backend BIND_DLZ]]
***** [[Setup_a_basic_BIND_installation|Setup a basic BIND installation]]
**** [[Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates|Using BIND DLZ backend with secured / signed DNS updates]]
**** [[Changing_the_DNS_backend|Changing the DNS backend]]
**** [[DNS_Administration|DNS Administration]]
**** [[Common_DNS_Problems|Common DNS Problems]]
***** [[Dns_tkey_negotiategss:_TKEY_is_unacceptable| Dns_tkey_negotiategss: TKEY is unacceptable]]
***** [[Fix_DNS_dynamic_updates_in_Samba_versions_prior_4.0.7|Fix DNS dynamic updates in Samba version prior 4.0.7]]
*** [[Replication]]
**** [[SysVol Replication]]
**** [[SysVol Bidirectional Replication]]
**** [[SysVol_Replication_between_Samba_and_Windows|SysVol Replication between Samba and Windows]]
**** [[DRS]]
**** [[DFS|FRS/DFS/DFS-R]]
*** [[Backup and restore an Samba AD DC|Back up a Samba DC]]
*** [[Flexible Single-Master Operations (FSMO) roles]]
** [[Samba as a NT4-style Primary Domain Controller]]
*** [[Set up Samba as a PDC]]
*** [[Required_settings_for_NT4-style_domains|Required settings for Windows clients in an Samba NT4-style domain]]
** [[Setup_a_Samba_AD_Member_Server|Samba as Domain Member Server]]
*** [[Setup_a_Samba_AD_Member_Server|Set up a Samba AD Member Server]]
*** [[Set up a Member Server in a NT4 Domain]]
*** [[Back up a Member Server]]
** [[Samba as a Standalone Server]]
*** [[Set up a Samba Standalone Server]]
*** [[Back up a Standalone Server]]
** [[Clustered Samba]]
*** [[Understanding Samba Clustering]]
*** [[CTDB_Project|The CTDB Project]]
*** [[CTDB_Setup|CTDB Setup Information]]
*** [[Samba_CTDB_GPFS_Cluster_HowTo|CTDB GPFS]]
*** [[GFS_CTDB_HowTo|CTDB GFS]]


:* [[NT4 Domains]]
::* [[Setting up Samba as an NT4 PDC (Quick Start)]]
:::* [[Samba NT4 PDC Port Usage]]
::* [[Setting up Samba as an NT4 BDC]]
::* [[Required Settings for Samba NT4 Domains]]


* '''[[Common administration tasks in a Samba AD]]'''
** [[Samba as a File Server]]
*** [[Understanding_the_difference_between_POSIX_and_Windows_ACLpermissions|Understanding the difference between POSIX and Windows ACL permissions]]
*** [[Shares_with_Windows_ACLs|Basic share configuration with Windows ACLs]]
**** [[Shares_with_Windows_ACLs#Change_permissions_on_folders_of_a_share|Configuring Windows ACLs on files and folders]]
**** [[Shares_with_Windows_ACLs|Configuring ACLs on shares]]
*** [[Shares_with_POSIX_ACLs|Setup and configure file shares with POSIX ACLs]]
**** [[Shares_with_POSIX_ACLs#Change_permissions_on_folders_of_a_share|Configuring POSIX ACLs on files and folders]]
**** [[Shares_with_POSIX_ACLs#Setup_share_permissions|Configuring ACLs on shares]]
*** [[Server-Side_Copy|Improving performance with server-side copy]]
** [[Anonymous_Share|Set up anonymous share]]
** [[Setting_up_a_home_share|Set up user homes]]
** [[Samba_%26_Windows_Profiles|Configuring roaming profiles]]
** [[Setup_a_Samba_print_server|Samba as a Print Server]]
*** [[Setup_a_Samba_print_server|Setting up a Samba Print Server]]
**** [[Setup_a_Samba_print_server#CUPS|Using Samba with CUPS backend]]
***** [[CUPS with Universal PS driver on the client side]]
***** [[CUPS in pass-throught mode]]
**** [[Setup_a_Samba_print_server#LPD|Using Samba with LPD backend]]
*** [[Configuring_Point'n'Print_automatic_printer_driver_deployment|Configuring Point'n'Click Automatic Printer Driver Deployment]]
*** [[Defining_printer_driver_sources_trusts|Setting up a GPO for trusting printer drivers]]
*** [[Defining_new_paper_sizes_(formes)|Defiing new paper sizes (Forms)]]
*** [[Configure network printer ports|Configure network printer ports]]
*** [[Virtual_PDF_Printer|Set up a virtual PDF Printer]]
** [[Local_user_management_and_authentication|Making Domain users available locally on the server]]
*** [[Winbind|Winbind & pam_winbind]]
**** [[TDB backend]]
**** [[TDB2 backend]]
**** [[RID backend]]
**** [[RFC2307 backend|RFC2307 backend]] (recommended for AD)
*** [[Local_user_management_and_authentication/nslcd|nslcd & pam_ldap]]
*** [[Sssd|sssd & pam_sss]]
** [[Configuring DNS on client computers]]
*** [[DNS_Configuration_Windows|Windows]]
*** [[DNS_Configuration_Linux/Unix|Linux/Unix]]
*** [[DNS_Configuration_MacOSX|Mac OSX]]
*** [[DNS_Configuration_Other_Unixes|Other Unixes]]
*** [[Testing_DNS_Name_Resolution|Testing DNS Name Resolution]]
** [[Joining client machines to the domain]]
*** [[Joining_a_Windows_client_to_a_domain|Windows]]
*** [[Configuring_a_Linux_client_for_AD|Linux/Unix]]
*** [[Configuring_a_MacOSX_client_for_AD|Mac OSX]]
*** [[Setup_FreeDOS_to_access_a_Samba_share|FreeDOS]]
** [[User and Group management]]
*** [[Using Windows RSAT]]
*** [[Using samba-tool]]
** [[Group_Policy_management|Group Policy management]]
*** [[Managing local groups on domain members via GPO restricted groups|Modifying local groups using GPO restricted groups]]
** [[Performance tuning|Performance tuning]]
** [[Installing RSAT|Installing RSAT on Windows for AD Management]]
** [[The_AD_recycle_bin|Restoring deleted AD objects]]
** [[Raising_the_functional_levels|Raising the function levels]]
** [[Change_IP_address_of_an_Samba_AD_DC|Change IP address of an Samba AD DC]]
** [[Samba_AD_Schema_Extenstions|Samba AD Schema Extensions]]
** [[Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC|Configuring LDAP over SSL on a DC]]
** [[Time_syncronisation|Time Synchronisation]]
** [[Delegating_administrative_permissions_to_non-administrators|Delegating administrative jobs to non-admin-accounts]]
*** [[Delegation/Join_machines_to_a_domain|Delegation: Join machines to a domain]]
*** [[Delegation/Account_management|Delegation: Account management]]
** [[Client_specific_Log|Client specific logging]]
** [[Authenticating_other_services_against_AD|Authenticating other services against AD]]
** [[Samba_AD_Smart_Card_Login|Samba Smart Card Login]]
** [[VPN_Single_SignOn_with_Samba_AD|Single Sign-On VPN]]


* [[Domain Membership]]
:* [[Joining a Windows Client or Server to a Domain]]
::* [[Windows DNS Configuration]]
:* [[Joining a Linux or Unix Host to a Domain]]
::* [[Linux and Unix DNS Configuration]]
::* [[Setting up Samba as a Domain Member]]
:::* [[Identity Mapping Back Ends]]
::::* [[idmap config ad]] (RFC2307)
::::* [[idmap config rid]]
::::* [[idmap config autorid]]
::::* [[Local accounts]]
:::* [[Authenticating Domain Users Using PAM]]
:::* [[PAM Offline Authentication]]
::* [[Samba Domain Member Port Usage]]
:* [[Joining a Mac OS X Client to a Domain]]
::* [[Mac OS X DNS Configuration]]
:* [[Configuring FreeDOS to Access a Samba Share]]
:* [[Troubleshooting Samba Domain Members]]


* '''[[VFS|Enhancing Samba with VFS modules]]'''


* [[Setting_up_Samba_as_a_Standalone_Server|Standalone Server]]
:* [[Setting up Samba as a Standalone Server]]


* '''[[General information]]'''
** [[Samba_AD_DC_port_usage|Samba AD DC port usage]]
** [[Samba_NT4_PDC_port_usage|Samba NT4 PDC port usage]]
** [[Samba_Member_Server_port_usage|Samba Member Server port usage]]
** [[Understanding oplocks]]
** [[Tuning performance]]
** [[Reloading server configuration]]


* [[CTDB and Clustered Samba]]


* '''[[FAQ|Frequently Asked Questions (FAQ)]]'''


* [[Advanced Configuration]]
:* [[Configuring Logging on a Samba Server]]
::* [[Setting up Audit Logging]]
:* [[DNS Administration]]
::* [[Changing the DNS Back End of a Samba AD DC]]
::* [[DNS administration]]
::* [[DNS troubleshooting]]
:::* [[Dns_tkey_negotiategss: TKEY is unacceptable]]
:* [[Setting up RFC2307 in AD]]
:* [[Print Server Support]]
::* [[Setting up Samba as a Print Server]]
::* [[Setting up Automatic Printer Driver Downloads for Windows Clients]]
::* [[Creating Custom Paper Sizes]]
::* [[Setting up Network Printer Ports]]
::* [[Virtual PDF Printer]]
:* [[Active Directory Sites]]
:* [[Samba AD Schema]]
::* [[AD Schema Version Support]]
::* [[Samba AD schema extensions]]
:* [[Virtual File System Modules]]
:* [[Generating Keytabs]]


* '''[[Complete Guides|Complete Guides]]'''




* '''[[Background information]]'''
** [[Samba Database files]]
*** [[LDB|LDB]]
*** [[TDB|TDB]]
*** [[TDB_Locations|TDB Locations]]




* '''[[Known Issues]]'''
* [[Replication]]
** [[incompatibility with realmd]]
:* [[Distributed File System (DFS)]]
::* [[SysVol replication (DFS-R)]]
:::* [[Rsync based SysVol replication workaround]] (Samba DCs only)
:::* [[Bidirectional Rsync/Unison based SysVol replication workaround]] (Samba DCs only)
:::* [[Bidirectional Rsync/osync based SysVol replication workaround]] (Samba DCs only)
:::* [[Robocopy based SysVol replication workaround]] (Samba DCs -> Windows DCs)
:* [[Directory Replication Service (DRS)]]




* '''[[Troubleshooting]]'''
** [[Getting help]]
*** [https://lists.samba.org/mailman/listinfo/samba Samba Mailing List]
*** [http://www.samba.org/samba/support/ Commercial Support]




* '''[[Presentations|Presentations about Samba, including slides and papers]]'''


* [[Common Administration Tasks]]
:* [[The Windows remote server administration tools (RSAT)]]
::* [[Installing RSAT]]
:* [[Remote and local management of Samba]]
::* [[User and group management]]
:::* [[Maintaining Unix Attributes in AD using ADUC]]
:::* [[Administer Unix Attributes in AD using samba-tool and ldb-tools]]
:* [[Backup and restore]]
::* [[Back up and Restoring a Samba AD DC]]
::* [[Back up and Restoring a Samba Domain Member]]
:* [[Samba File Serving]]
::* [[Setting up a Share Using Windows ACLs]]
::* [[Setting up a Share Using POSIX ACLs]]
::* [[Special file shares]]
:::* [[User Home Folders]]
:::* [[Roaming Windows User Profiles]]
::::* [[Configuring Windows Profile Folder Redirections]]
:::* [[Setting up a Share Without Authentication]]
:* [[Flexible Single-Master Operations (FSMO) Roles]]
::* [[Transferring and Seizing FSMO Roles]]
:* [[The AD functional levels]]
::* [[Raising the Functional Levels]]
:* [[Changing the IP Address of a Samba AD DC]]
:* [[Configuring LDAP over SSL (LDAPS) on a Samba AD DC]]
:* [[Delegating administrative permissions to non-administrators]]
::* [[Delegation/Joining_Machines_to_a_Domain|Joining Machines to a Domain]]
::* [[Delegation/Account_management|Account management]]
:* [[Administer workstations]]
::* [[Managing local groups on domain members via GPO restricted groups]]
:* [[Working with Active Directory encoded LDAP values]]
:* [[Performance Tuning]]
:* [[Configure Samba to Bind to Specific Interfaces]]
:* [[Server-Side_Copy|Improving performance with server-side copy]]
:* [[Samba AD Smart Card Login]]
:* [[VPN Single SignOn with Samba AD]]
:* [[Authenticating other services against Samba AD]]
::* [[Authenticating Apache against Active Directory]]
::* [[OpenSSH Single sign-on]]
::* [[Authenticating Dovecot against Active Directory]]
:* [[openLDAP as proxy to AD]]
:* [[Client specific logging]]
:* [[Configure Samba to Work Better with Mac OS X]]


* '''[[Contribute|Contributing]]'''
** [[Bug_Reporting|Bug reporting]]
** [[Samba documentation team]]
** [[How_To_Write_Samba_Documentation|How To Write Samba Documentation]]
** [[Roadmap]]





* '''[[Terms_and_Abbreviations|Terms and Abbreviations]]'''
* Security
:* [[Samba_Security_Documentation|Samba Security Documentation]]




* [[Terms and Abbreviations]]





* [[Getting Help]]
:* [https://lists.samba.org/mailman/listinfo/samba Samba Mailing List]
:* [https://www.samba.org/samba/support/ Commercial Support]





* [[Contribute]]
:* [[Bug Reporting]]
:* [[How To Write Samba Documentation]]

Revision as of 20:30, 31 March 2020














  • Security