User Documentation: Difference between revisions

From SambaWiki
(Link 'DNS' page to 'Samba AD DNS', because it contains some few general information.)
mNo edit summary
 
(213 intermediate revisions by 14 users not shown)
Line 1: Line 1:
* [[FAQ|Frequently Asked Questions (FAQ)]]
* '''[[Introduction]]'''
* [[Samba Release Planning]]
* [[Samba_Features_added/changed_(by_release)|Samba Release Notes]]
* [[Obtaining Samba]]
* [[Installing Samba]]
:* [[Operating System Requirements]]
::* [[Package Dependencies Required to Build Samba]]
::* [[File System Support]]
:* [[Build Samba from Source]]
:* [[Distribution-specific Package Installation]]
* [[Updating Samba]]




* '''[[Samba_4.x_Readme_First|Samba 4.x Readme First]]'''




* [[Domain Control]]
* '''[[Installation|Installation]]'''
:* [[Active Directory Domain Controller]]
** [[Samba_Release_Planning|Release planning]]
::* [[Active Directory Naming FAQ]]
** [[Samba_Features_added/changed_(by_release)|Features added/changed (by release)]]
::* [[Setting up Samba as an Active Directory Domain Controller]]
** [[Obtaining Samba]]
** [[Installing Samba]]
::* [[Joining a Samba DC to an Existing Active Directory]]
::* [[Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD]]
*** [[OS_Requirements|Operating System Requirements]]
::* [[Joining a Windows Server 2012 / 2012 R2 DC to a Samba AD]]
*** [[Build_Samba|Build Samba from Source]]
::* [[Migrating a Samba NT4 Domain to Samba AD (Classic Upgrade)]]
*** [[Binary_Distribution_Packages|Distribution specific package installation]]
*** [[Updating Samba]]
::* [[Demoting a Samba AD DC]]
::* [[The Samba AD DNS Back Ends]]
:::* [[Samba Internal DNS Back End]]
:::* [[BIND9_DLZ DNS Back End]]
::::* [[Setting up a BIND DNS Server]]
::::* [[Configure DHCP to update DNS records]]
:::* [[Testing Dynamic DNS Updates]]
::* [[Managing the Samba AD DC Service]]
::* [[Configuring Winbindd on a Samba AD DC]]
::* [[Time Synchronisation]]
::* [[Verifying the Directory Replication Statuses]]
::* [[Manually Replicating Directory Partitions]]
::* [[Running a Samba AD DC with MIT Kerberos KDC]]
::* [[Migrating the ntvfs File Server Back End to s3fs]]
::* [[Samba AD DC Port Usage]]
::* [[Samba AD DC Troubleshooting]]
::* [[Password Settings Objects]]
::* [[Running Samba AD Domain Controllers in large domains]]
::* [[Using the lmdb database backend]]




* '''[[The different server roles]]'''
** [[Difference between a DC and PDC/BDC]]
** [[Samba as an Active Directory Domain Controller]]
*** [[Samba_AD_DC_HOWTO|Set up a Samba Active Directory Domain Controller]]
**** [[Domain Name best practice]]
*** [[Join_a_domain_as_a_DC|Join Samba as a DC to an existing Domain]]
*** [[Joining_a_Windows_Server_2008_/_2008_R2_DC_to_a_Samba_AD|Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD]]
*** [[Samba_Classic_Upgrade_(NT4-style_domain_to_AD)|Samba Classic Upgrade (NT4-style Domain to AD)]]
*** [[Using_RFC2307_on_a_Samba_DC|Using RFC2307 on a Samba DC]]
*** [[Demote_a_Samba_DC|Demote a Samba DC]]
*** [[Active_Directory_Sites|Active Directory Sites]]
*** [[Samba as a DC for FreeIPA domain]]
*** [[DNS|Samba AD DNS]]
**** [[Why DNS is essential for a working AD]]
**** [[DNS|General information on the internal DNS and BIND DLZ module]]
**** [[DNS_Backend_BIND|Set up BIND as backend for Samba AD]]
**** [[Changing_the_DNS_backend|Changing the DNS backend]]
**** [[DNS_Administration|DNS Administration]]
**** [[Common_DNS_Problems|Common DNS Problems]]
***** [[Dns_tkey_negotiategss:_TKEY_is_unacceptable| Dns_tkey_negotiategss: TKEY is unacceptable]]
*** [[Replication]]
**** [[SysVol Replication]]
**** [[SysVol Bidirectional Replication]]
**** [[SysVol_Replication_between_Samba_and_Windows|SysVol Replication between Samba and Windows]]
**** [[DRS]]
**** [[DFS|FRS/DFS/DFS-R]]
*** [[Backup_and_Recovery|Back up a Samba DC]]
*** [[Flexible Single-Master Operations (FSMO) roles]]
** [[Samba as a NT4-style Primary Domain Controller]]
*** [[Set up Samba as a PDC]]
*** [[Registry_changes_for_NT4-style_domains|Registry changes for Windows clients in a Samba NT4-style domain]]
** [[Setup_a_Samba_AD_Member_Server|Samba as Domain Member Server]]
*** [[Setup_a_Samba_AD_Member_Server|Set up a Samba AD Member Server]]
*** [[Set up a Member Server in a NT4 Domain]]
*** [[Back up a Member Server]]
** [[Samba as a Standalone Server]]
*** [[Set up a Samba Standalone Server]]
*** [[Back up a Standalone Server]]
** [[Clustered Samba]]
*** [[Understanding Samba Clustering]]
*** [[CTDB_Project|The CTDB Project]]
*** [[CTDB_Setup|CTDB Setup Information]]
*** [[Samba_CTDB_GPFS_Cluster_HowTo|CTDB GPFS]]
*** [[GFS_CTDB_HowTo|CTDB GFS]]


:* [[NT4 Domains]]
::* [[Setting up Samba as an NT4 PDC (Quick Start)]]
:::* [[Samba NT4 PDC Port Usage]]
::* [[Setting up Samba as an NT4 BDC]]
::* [[Required Settings for Samba NT4 Domains]]


* '''[[Common administration tasks in a Samba AD]]'''
** [[Samba as a File Server]]
*** [[Understanding_the_difference_between_POSIX_and_Windows_ACLpermissions|Understanding the difference between POSIX and Windows ACL permissions]]
*** [[Setup_and_configure_file_shares_with_Windows_ACLs|Basic share configuration with Windows ACLs]]
**** [[Setup_and_configure_file_shares_with_Windows_ACLs#Change_permissions_on_folders_of_a_share|Configuring Windows ACLs on files and folders]]
**** [[Setup_and_configure_file_shares#Setup_share_permissions|Configuring ACLs on shares]]
*** [[Setup_and_configure_file_shares_with_POSIX_ACLs|Setup and configure file shares with POSIX ACLs]]
**** [[Setup_and_configure_file_shares_with_POSIX_ACLs#Change_permissions_on_folders_of_a_share|Configuring POSIX ACLs on files and folders]]
**** [[Setup_and_configure_file_shares_with_POSIX_ACLs#Setup_share_permissions|Configuring ACLs on shares]]
*** [[Server-Side_Copy|Improving performance with server-side copy]]
** [[Setting_up_a_home_share|Set up user homes]]
** [[Samba_%26_Windows_Profiles|Configuring roaming profiles]]
** [[Samba_as_a_print_server|Samba as a Print Server]]
*** [[Samba_as_a_print_server|Setting up a Samba Print Server]]
**** [[Samba_as_a_print_server#CUPS|Using Samba with CUPS backend]]
***** [[CUPS with Universal PS driver on the client side]]
***** [[CUPS in pass-throught mode]]
**** [[Samba_as_a_print_server#LPD|Using Samba with LPD backend]]
*** [[Configuring_Point_n_Click_Automatic_Printer_Driver_Deployment|Configuring Point'n'Click Automatic Printer Driver Deployment]]
*** [[Setting_up_a_GPO_for_trusting_printer_drivers|Setting up a GPO for trusting printer drivers]]
*** [[Enabling_new_paper_sizes_(Forms)|Enabling new paper sizes (Forms)]]
*** [[Network_Printer_Ports|Network Printer Ports]]
*** [[Virtual_PDF_Printer|Set up a virtual PDF Printer]]
** [[Local_user_management_and_authentication|Making Domain users available locally on the server]]
*** [[Winbind|Winbind & pam_winbind]]
**** [[TDB backend]]
**** [[TDB2 backend]]
**** [[RID backend]]
**** [[RFC2307 backend|RFC2307 backend]] (recommended for AD)
*** [[Local_user_management_and_authentication/nslcd|nslcd & pam_ldap]]
*** [[Local_user_management_and_authentication/sssd|sssd & pam_sss]]
** [[Configuring DNS on client computers]]
*** [[DNS_Configuration_Windows|Windows]]
*** [[DNS_Configuration_Linux|Linux]]
*** [[DNS_Configuration_MacOSX|Mac OSX]]
*** [[DNS_Configuration_Other_Unixes|Other Unixes]]
*** [[Testing_DNS_Name_Resolution|Testing DNS Name Resolution]]
** [[Joining client machines to the domain]]
*** [[Joining_a_Windows_Client_to_a_Domain|Windows]]
*** [[Configuring_a_Linux_client_for_AD|Linux/Unix]]
*** [[Configuring_a_MacOSX_client_for_AD|Mac OSX]]
*** [[Setup_FreeDOS_to_access_a_Samba_share|FreeDOS]]
** [[User and Group management]]
*** [[Using Windows RSAT]]
*** [[Using samba-tool]]
** [[Group_Policy_management|Group Policy management]]
*** [[Modifying_local_groups_using_GPO_restricted_groups|Modifying local groups using GPO restricted groups]]
** [[Performance_Tuning|Performance Tuning]]
** [[Installing_RSAT_on_Windows_for_AD_Management|Installing RSAT on Windows for AD Management]]
** [[Restoring_deleted_AD_objects|Restoring deleted AD objects]]
** [[Raising_the_functional_levels|Raising the function levels]]
** [[Change IP address of the DC]]
** [[Samba_AD_Schema_Extenstions|Samba AD Schema Extensions]]
** [[Setup_LDAPS_on_a_DC|Configuring LDAP over SSL on a DC]]
** [[Time_Synchronisation|Time Synchronisation]]
** [[Delegating_Administration_Permissions|Delegating administrative jobs to non-admin-accounts]]
** [[Client_specific_Log|Client specific logging]]
** [[Authenticating_other_services_against_AD|Authenticating other services against AD]]
** [[Samba_AD_Smart_Card_Login|Samba Smart Card Login]]
** [[VPN_Single_SignOn_with_Samba_AD|Single Sign-On VPN]]


* [[Domain Membership]]
:* [[Joining a Windows Client or Server to a Domain]]
::* [[Windows DNS Configuration]]
:* [[Joining a Linux or Unix Host to a Domain]]
::* [[Linux and Unix DNS Configuration]]
::* [[Setting up Samba as a Domain Member]]
:::* [[Identity Mapping Back Ends]]
::::* [[idmap config ad]] (RFC2307)
::::* [[idmap config rid]]
::::* [[idmap config autorid]]
::::* [[Local accounts]]
:::* [[Authenticating Domain Users Using PAM]]
:::* [[PAM Offline Authentication]]
::* [[Samba Domain Member Port Usage]]
:* [[Joining a macOS Client to a Domain]]
::* [[macOS DNS Configuration]]
:* [[Configuring FreeDOS to Access a Samba Share]]
:* [[Troubleshooting Samba Domain Members]]


* '''[[VFS|Enhancing Samba with VFS modules]]'''


* [[Setting_up_Samba_as_a_Standalone_Server|Standalone Server]]
:* [[Setting up Samba as a Standalone Server]]


* '''[[General information]]'''
** [[Samba port usage]]
** [[Understanding oplocks]]
** [[Tuning performance]]
** [[Reloading server configuration]]


* [[CTDB and Clustered Samba]]


* '''[[FAQ|Frequently Asked Questions (FAQ)]]'''


* [[Advanced Configuration]]
:* [[Configuring Logging on a Samba Server]]
::* [[Setting up Audit Logging]]
:* [[DNS Administration]]
::* [[Changing the DNS Back End of a Samba AD DC]]
::* [[DNS administration]]
::* [[DNS troubleshooting]]
:::* [[Dns_tkey_negotiategss: TKEY is unacceptable]]
:::* [[Deleted AD zone]]
:* [[Setting up RFC2307 in AD]]
:* [[Print Server Support]]
::* [[Setting up Samba as a Print Server]]
::* [[Setting up Automatic Printer Driver Downloads for Windows Clients]]
::* [[Creating Custom Paper Sizes]]
::* [[Setting up Network Printer Ports]]
::* [[Virtual PDF Printer]]
::* [[Virtual PDF Printer with CUPS Back End for Windows Clients without roaming user profile]]
::* [[Connect printer with session logon script for non admins users]]
:* [[Active Directory Sites]]
:* [[Samba AD Schema]]
::* [[AD Schema Version Support]]
::* [[Samba AD schema extensions]]
:* [[Virtual File System Modules]]
:* [[Generating Keytabs]]


* '''[[Complete Guides|Complete Guides]]'''




* '''[[Background information]]'''
** [[Samba Database files]]
*** [[LDB|LDB]]
*** [[TDB|TDB]]
*** [[TDB_Locations|TDB Locations]]




* '''[[Known Issues]]'''
* [[Replication]]
** [[incompatibility with realmd]]
:* [[Distributed File System (DFS)]]
::* [[SysVol replication (DFS-R)]]
:::* [[Rsync based SysVol replication workaround]] (Samba DCs only)
:::* [[Bidirectional Rsync/Unison based SysVol replication workaround]] (Samba DCs only)
:::* [[Bidirectional Rsync/osync based SysVol replication workaround]] (Samba DCs only)
:::* [[Robocopy based SysVol replication workaround]] (Samba DCs -> Windows DCs)
:* [[Directory Replication Service (DRS)]]




* '''[[Troubleshooting]]'''
** [[Getting help]]
*** [https://lists.samba.org/mailman/listinfo/samba Samba Mailing List]
*** [http://www.samba.org/samba/support/ Commercial Support]




* '''[[Presentations|Presentations about Samba, including slides and papers]]'''


* [[Common Administration Tasks]]
:* [[The Windows remote server administration tools (RSAT)]]
::* [[Installing RSAT]]
:* [[Remote and local management of Samba]]
::* [[User and group management]]
:::* [[Maintaining Unix Attributes in AD using ADUC]]
:::* [[Administer Unix Attributes in AD using samba-tool and ldb-tools]]
:* [[Backup and restore]]
::* [[Back up and Restoring a Samba AD DC]]
::* [[Back up and Restoring a Samba Domain Member]]
:* [[Samba File Serving]]
::* [[Setting up a Share Using Windows ACLs]]
::* [[Setting up a Share Using POSIX ACLs]]
::* [[Special file shares]]
:::* [[User Home Folders]]
:::* [[Roaming Windows User Profiles]]
::::* [[Configuring Windows Profile Folder Redirections]]
:::* [[Setting up a Share Without Authentication]]
:* [[Flexible Single-Master Operations (FSMO) Roles]]
::* [[Transferring and Seizing FSMO Roles]]
:* [[The AD functional levels]]
::* [[Raising the Functional Levels]]
:* [[Changing the IP Address of a Samba AD DC]]
:* [[Configuring LDAP over SSL (LDAPS) on a Samba AD DC]]
:* [[Delegating administrative permissions to non-administrators]]
::* [[Delegation/Joining_Machines_to_a_Domain|Joining Machines to a Domain]]
::* [[Delegation/Account_management|Account management]]
:* [[Administer workstations]]
::* [[Managing local groups on domain members via GPO restricted groups]]
:* [[Working with Active Directory encoded LDAP values]]
:* [[Performance Tuning]]
:* [[Configure Samba to Bind to Specific Interfaces]]
:* [[Server-Side_Copy|Improving performance with server-side copy]]
:* [[Samba AD Smart Card Login]]
:* [[Samba AD Smart Card Login for macOS clients]]
:* [[VPN Single SignOn with Samba AD]]
:* [[Authenticating other services against Samba AD]]
::* [[Authenticating Apache against Active Directory]]
::* [[OpenSSH Single sign-on]]
::* [[Authenticating Dovecot against Active Directory]]
:* [[openLDAP as proxy to AD]]
:* [[Client specific logging]]
:* [[Configure Samba to Work Better with Mac OS X]]
:* [[Interpreting JSON Audit Logs]]


* '''[[Contribute|Contributing]]'''
** [[Bug_Reporting|Bug reporting]]
** [[Samba documentation team]]
** [[How_To_Write_Samba_Documentation|How To Write Samba Documentation]]
** [[Roadmap]]




* Security
* '''[[Terms_and_Abbreviations|Terms and Abbreviations]]'''
:* [[Samba_Security_Documentation|Samba Security Documentation]]




* [[Terms and Abbreviations]]





* [[Getting Help]]
:* [https://lists.samba.org/mailman/listinfo/samba Samba Mailing List]
:* [https://www.samba.org/samba/support/ Commercial Support]





* [[Contribute]]
:* [[Bug Reporting]]
:* [[How To Write Samba Documentation]]

Latest revision as of 17:26, 22 May 2023













  • Security