User Documentation

• Introduction
• General installation
• Server information used in documentation
• Frequently Asked Questions (FAQ)
• Release planning
• Samba release notes
• Obtaining Samba
• Installing Samba

• Operating system requirements

• Dependencies - Libraries and programs
• File system support

• Build Samba from source
• Distribution specific package installation

• Updating Samba

• Domain control

• Active Directory Domain Controller

• Introduction to Active Directory
• Active Directory Naming FAQ

• Samba Internal DNS
• BIND_DLZ

• Setup a basic BIND installation
• Configure BIND as backend for Samba AD

• Time syncronisation
• Setup a Samba Active Directory Domain Controller
• Join an additional Samba DC to an existing Active Directory
• Joining a Windows Server 2008/2008 R2 DC to a Samba AD
• Joining a Windows Server 2012/2012 R2 DC to a Samba AD
• Migrating a Samba NT4 domain to Samba AD domain (classic upgrade)
• Demote a Samba AD DC
• Samba AD DC port usage

• NT4 Domains

• NT4 Primary Domain Controller (PDC)

• Samba NT4 PDC port usage

• NT4 Backup Domain Controller (BDC)
• Required settings for NT4-style domains

• Domain membership

• Windows

• Configuring DNS

• Linux/Unix

• Configuring DNS
• Setup Samba as an AD Domain Member

• Identity Mapping (idmap)

• idmap config ad (RFC2307)
• idmap config rid
• idmap config autorid
• Local accounts

• Setup Samba as an NT4 Domain Member
• Samba Domain Member port usage
• Setup sssd as an AD Domain Member
• Setup a Samba AD Member Server

• MacOSX

• Configuring DNS

• FreeDOS
• Troubleshooting error messages during Domain Member join

• Standalone server

• Clustered Samba

• Understanding Samba Clustering
• The CTDB Project
• CTDB Setup Information
• CTDB GPFS
• CTDB GFS

• Advanced configuration

• DNS management

• Changing the DNS backend
• DNS administration
• DNS troubleshooting

• Dns_tkey_negotiategss: TKEY is unacceptable

• General information on RFC2307

• Setting up RFC2307 in AD
• Administer Unix Attributes in Active Directory via RFC2307

• Print server support

• Setup a Samba print server

• CUPS backend
• LPD backend
• The [printers] share
• The [print$] share
• Sharing a printer

• Configuring Point'n'Print automatic printer driver deployment

• Uploading drivers
• Associating a printer with its driver
• Preconfiguring a printer
• Defining printer driver sources trusts

• Defining new paper sizes (formes)
• Configure network printer ports

• Active Directory Sites

• Introduction into AD sites

• Setting up a new AD site
• Assigning a DC to a site
• Setting up AD subnets
• Additional tasks regarding AD sites

• Samba AD Schema

• Determine the AD schema version
• Samba AD schema extensions

• Name service switch (NSS)

• Winbind
• sssd
• nslcd

• Samba VFS (Virtual File System) modules

• Replication

• Distributed File System (DFS)

• SysVol replication (DFS-R)

• Rsync based SysVol replication workaround
• Bidirectional Rsync/Unison based SysVol replication workaround

• Directory Replication Service (DRS)

• Common administration tasks

• The Windows remote server administration tools (RSAT)

• Installing RSAT

• Remote and local management of Samba

• User and group management

• Administer Unix Attributes in AD via ADUC
• Administer Unix Attributes in AD via samba-tool and ldbedit

• Backup and restore

• Backup and restore an Samba AD DC
• Backup and restore a Samba domain member server

• File sharing

• Shares with Windows ACLs
• Shares with POSIX ACLs
• Anonymous share

• Special file shares

• User home drives
• Windows profiles

• The different Windows profile types
• Implementing local profiles
• Implementing roaming profiles
• Windows folder redirection

• Flexible Single-Master Operations (FSMO) roles

• Multi-master vs. single master model
• The seven FSMO roles
• Transfering / seizing FSMO roles

• The AD functional levels

• Raising the functional levels

• Change the IP address of an Samba AD DC
• Configuring LDAP over SSL (LDAPS) on a Samba AD DC
• Delegating administrative permissions to non-administrators

• Join machines to the domain
• Account management

• Administer workstations

• Managing local groups on domain members via GPO restricted groups

• Restoring deleted objects - The AD recycle-bin
• Performance tuning
• Improving performance with server-side copy
• Samba AD smart card login
• VPN single sign-on with Samba AD
• Authenticating other services against Samba AD

• Linux authentication against LDAP (AD)
• Authenticating Apache against Active Directory
• openSSH single sign-on

• openLDAP as proxy to AD
• Client specific logging

• Terms & Abbreviations

• Getting help

• Samba mailing list
• Commercial support

• Contribute

• Bug reporting
• How To Write Samba Documentation