diff options
Diffstat (limited to 'docs/htmldocs/samba-pdc-faq.html')
| -rw-r--r-- | docs/htmldocs/samba-pdc-faq.html | 122 |
1 files changed, 61 insertions, 61 deletions
diff --git a/docs/htmldocs/samba-pdc-faq.html b/docs/htmldocs/samba-pdc-faq.html index 058a5d5f518..d9c204bf1b5 100644 --- a/docs/htmldocs/samba-pdc-faq.html +++ b/docs/htmldocs/samba-pdc-faq.html @@ -45,9 +45,9 @@ NAME="AEN12" ></H1 ><P > This is the FAQ for Samba 2.2 as an NTDomain controller. - This document is derived from the origional FAQ that was built and + This document is derived from the original FAQ that was built and maintained by Gerald Carter from the early days of Samba NTDomain development - up until recently. It is now being updated as significent changes are + up until recently. It is now being updated as significant changes are made to 2.2.0. </P ><P @@ -165,7 +165,7 @@ HREF="#AEN103" ><A HREF="#AEN110" >"The machine account for this computer either does not -exist or is not accessable."</A +exist or is not accessible."</A ></DT ><DT ><A @@ -256,7 +256,7 @@ HREF="#AEN180" ><DT ><A HREF="#AEN182" ->What are 'Policies' ?.</A +>What are 'Policies' ?</A ></DT ><DT ><A @@ -314,12 +314,12 @@ HREF="#AEN248" ><A HREF="#AEN250" >What editor can I use in DOS/Windows that won't -mess with my unix EOF</A +mess with my unix EOF ?</A ></DT ><DT ><A HREF="#AEN263" ->How do I get 'User Manager' and 'Server Manager'</A +>How do I get 'User Manager' and 'Server Manager' ?</A ></DT ><DT ><A @@ -334,7 +334,7 @@ HREF="#AEN282" ><DT ><A HREF="#AEN286" ->How do I get my samba server to become a member ( not PDC ) of an NT domain?</A +>How do I get my samba server to become a member ( not PDC ) of an NT domain ?</A ></DT ></DL ></DD @@ -358,13 +358,13 @@ HREF="#AEN292" ><A HREF="#AEN294" >What are some diagnostics tools I can use to debug the domain logon process and where can I - find them?</A + find them ?</A ></DT ><DT ><A HREF="#AEN309" >How do I install 'Network Monitor' on an NT Workstation -or a Windows 9x box?</A +or a Windows 9x box ?</A ></DT ></DL ></DD @@ -419,13 +419,13 @@ CLASS="FILENAME" > dialog will let you reset the smbpasswd. That is you don't need to do it from the unix box. However, at the present, you do need to have root as an - administrator and use the root user name and password.</P + administrator and use the root username and password.</P ><P ><B CLASS="COMMAND" >Policies</B > do work on a W2K machine. MS says that recent - builds of W2K dont observe an NT policy but it appears it does in 'legacy' + builds of W2K don't observe an NT policy but it appears it does in 'legacy' mode.</P ></DIV ><DIV @@ -437,7 +437,7 @@ NAME="AEN27" >Introduction</A ></H1 ><P -> This FAQ was origionally compiled by Jerry Carter (gc) chiefly dealing +> This FAQ was originally compiled by Jerry Carter (gc) chiefly dealing with the 'old HEAD' version of Samba and its NTDomain facilities. It is being rewritten by David Bannon (drb) so that it addresses more accurately the Samba 2.2.x release. @@ -454,7 +454,7 @@ TARGET="_top" </P ><P >Hopefully, as we all become familiar with the Samba 2.2 as a - PDC this document will become much more usefull.</P + PDC this document will become much more useful.</P ></DIV ></DIV ><DIV @@ -532,7 +532,7 @@ NAME="AEN37" ></LI ></UL ><P -> These things are note expected to work in the forseeable future: +> These things are not expected to work in the foreseeable future: </P ><P ></P @@ -558,7 +558,7 @@ controlled domain?</A ></H2 ><P > The 2.2 release branch of Samba supports Windows 2000 domain - clients in legacy mode, ie as if the PDC is a NTServer, not a + clients in legacy mode, i.e. as if the PDC is a NTServer, not a W2K server. </P ></DIV @@ -572,7 +572,7 @@ NAME="AEN65" >CVS</A ></H1 ><P -> CVS is a programme (publically available) that the Samba developers +> CVS is a program (publicly available) that the Samba developers use to maintain the central source code. Non developers can get access to the source in a read only capacity. Many flavours of unix now arrive with cvs installed.</P @@ -606,7 +606,7 @@ CLASS="VARIABLELIST" ><P >Samba 3.0 ? This code boasts all the main development work in Samba. Due to its developmental - nature, its not really suitable for production work. + nature, it's not really suitable for production work. </P ></DD ><DT @@ -693,7 +693,7 @@ controlled Domain?</A HREF="samba-pdc-howto.html" TARGET="_top" >HOWTO</A -> accessable from the samba web +> accessible from the samba web site under 'Documentation'. Read it. </P ></DIV @@ -734,11 +734,11 @@ CLASS="SECT2" ><A NAME="AEN110" >"The machine account for this computer either does not -exist or is not accessable."</A +exist or is not accessible."</A ></H2 ><P > When I try to join the domain I get the message "The machine account - for this computer either does not exist or is not accessable". Whats + for this computer either does not exist or is not accessible". Whats wrong ? </P ><P @@ -802,7 +802,7 @@ CLASS="COMMAND" path to the <B CLASS="COMMAND" >smbpasswd</B -> programme, do this : +> program, do this : </P ><P > <B @@ -812,7 +812,7 @@ CLASS="COMMAND" </P ><P > The entry will be created with a well known password, so any machine that - says its doppy could join the domain as long as it gets in first. So + says it's doppy could join the domain as long as it gets in first. So don't create the accounts any earlier than you need them. </P ></DIV @@ -854,7 +854,7 @@ when creating a machine account.</A ><P > This happens if you try to create a machine account from the machine itself and use a user name that does not work (for whatever - reason) and then try another (possibly valid) user name. + reason) and then try another (possibly valid) username. Exit out of the network applet to close the initial connection and try again. </P @@ -891,7 +891,7 @@ NAME="AEN143" ><P >I joined the domain successfully but after upgrading to a newer version of the Samba code I get the message, "The system - can not log you on (C000019B), Please try a gain or consult your + can not log you on (C000019B), Please try again or consult your system administrator" when attempting to logon. </P ><P @@ -1029,14 +1029,14 @@ HREF="#AEN278" > </P ><P -> Make sure that the "logon path" is writeable by the user and make sure +> Make sure that the "logon path" is writable by the user and make sure that the connection to the logon path location is by the current user. - Sometimes Windows client do not drop the connection immediately upon + Sometimes Windows clients do not drop the connection immediately upon logoff. </P ><P > Some people have reported that the logon path location should - also be browseable. I (GC) have yet to emperically verify this, + also be browseable. I (GC) have yet to empirically verify this, but you can try.</P ></DIV ></DIV @@ -1054,13 +1054,13 @@ CLASS="SECT2" CLASS="SECT2" ><A NAME="AEN182" ->What are 'Policies' ?.</A +>What are 'Policies' ?</A ></H2 ><P > When a user logs onto the domain via a client machine, the PDC sends the client machine a list of things contained in the 'policy' (if it exists). This list may do things like suppress - a splach screen, format the dates the way you like them or perhaps + a splash screen, format the dates the way you like them or perhaps remove locally stored profiles. </P ><P @@ -1070,7 +1070,7 @@ CLASS="FILENAME" >ntconfig.pol</TT > and located in the [netlogon] share. The file is created with a policy editor and must be readable - by anyone and writeable by only root. See <A + by anyone and writable by only root. See <A HREF="#AEN203" > below</A > for how to get a suitable editor. @@ -1102,7 +1102,7 @@ CLASS="PROGRAMLISTING" ></P ><P > A policy file must be in the [netlogon] share and must be - readable by everyone and writeable by only root. The file + readable by everyone and writable by only root. The file must be created by an NTServer <A HREF="#AEN203" >Policy @@ -1170,7 +1170,7 @@ CLASS="EMPHASIS" >. Further, although the Windows 95 Policy Editor can be installed on an NT Workstation/Server, it will not - work with NT policies because the registry key that are set by the policy templates. + work with NT policies because of the registry keys that are set by the policy templates. However, the files from the NT Server will run happily enough on an NTws. You need <TT CLASS="FILENAME" @@ -1192,7 +1192,7 @@ CLASS="FILENAME" <B CLASS="COMMAND" >servicepackname /x</B ->, ie thats <B +>, i.e. that's <B CLASS="COMMAND" >Nt4sp6ai.exe /x</B @@ -1201,7 +1201,7 @@ CLASS="COMMAND" >poledt.exe</B > and the associated template files (*.adm) should - be extracted as well. It is also possible to downloaded the policy template + be extracted as well. It is also possible to download the policy template files for Office97 and get a copy of the policy editor. Another possible location is with the Zero Administration Kit available for download from Microsoft. </P @@ -1261,7 +1261,7 @@ CLASS="FILENAME" CLASS="FILENAME" >/etc/shadow</TT >). - In lots of situations thats OK, for example : + In lots of situations that's OK, for example : </P ><P ></P @@ -1278,10 +1278,10 @@ CLASS="FILENAME" ></LI ></UL ><P -> But sometimes you really do need to maintain two seperate password +> But sometimes you really do need to maintain two separate password databases and there are good reasons to keep then in sync. Trying to explain to users that they need to change their passwords in two - seperate places or use two seperate passwords is not fun. + separate places or use two separate passwords is not fun. </P ><P > However do understand that setting up password sync is not without @@ -1358,11 +1358,11 @@ CLASS="SECT2" ><A NAME="AEN250" >What editor can I use in DOS/Windows that won't -mess with my unix EOF</A +mess with my unix EOF ?</A ></H2 ><P >There are a number of Windows or DOS based editors that will - understand, and leave intact, the unix eof (as opposed to a DOS CL/LF). + understand, and leave intact, the unix eof (as opposed to a DOS CR/LF). List members suggested : </P ><P @@ -1390,7 +1390,7 @@ TARGET="_top" HREF="http://www.lancs.ac.uk/people/cpaap/pfe/" TARGET="_top" > www.lancs.ac.uk/people/cpaap/pfe/</A -> but its no longer being developed...</P +> but it's no longer being developed...</P ></LI ></UL ></DIV @@ -1400,7 +1400,7 @@ CLASS="SECT2" CLASS="SECT2" ><A NAME="AEN263" ->How do I get 'User Manager' and 'Server Manager'</A +>How do I get 'User Manager' and 'Server Manager' ?</A ></H2 ><P > Since I don't need to buy an NT Server CD now, how do I get @@ -1409,7 +1409,7 @@ NAME="AEN263" ><P > Microsoft distributes a version of these tools called nexus for installation on Windows 95 systems. The - tools set includes + tool set includes </P ><P ></P @@ -1482,7 +1482,7 @@ CLASS="SECT2" CLASS="SECT2" ><A NAME="AEN286" ->How do I get my samba server to become a member ( not PDC ) of an NT domain?</A +>How do I get my samba server to become a member ( not PDC ) of an NT domain ?</A ></H2 ><P > Please refer to the <A @@ -1517,11 +1517,11 @@ CLASS="SECT2" ><A NAME="AEN294" >What are some diagnostics tools I can use to debug the domain logon process and where can I - find them?</A + find them ?</A ></H2 ><P > One of the best diagnostic tools for debugging problems is Samba itself. - You can use the -d option for both smbd and nmbd to specifiy what + You can use the -d option for both smbd and nmbd to specify what 'debug level' at which to run. See the man pages on smbd, nmbd and smb.conf for more information on debugging options. The debug level can range from 1 (the default) to 10 (100 for debugging passwords). @@ -1532,19 +1532,19 @@ NAME="AEN294" CLASS="COMMAND" >gcc -g </B > flag. This will include debug - information in the binaries and allow you to attch gdb to the + information in the binaries and allow you to attach gdb to the running smbd / nmbd process. In order to attach gdb to an smbd process for an NT workstation, first get the workstation to make the - connection. Pressing ctrl-alt-delete and going down to the domain box + connection. Pressing Ctrl-Alt-Del and going down to the domain box is sufficient (at least, on the first time you join the domain) to generate a 'LsaEnumTrustedDomains'. Thereafter, the workstation maintains an open connection, and therefore there will be an smbd process running (assuming that you haven't set a really short smbd - idle timeout) So, in between pressing ctrl alt delete, and actually + idle timeout) So, in between pressing Ctrl-Alt-Del, and actually typing in your password, you can gdb attach and continue. </P ><P -> Some usefull samba commands worth investigating: +> Some useful samba commands worth investigating: </P ><P ></P @@ -1563,7 +1563,7 @@ CLASS="COMMAND" <A HREF="http://www.tcpdump.org/" TARGET="_top" ->http://www.tcpdup.org/</A +>http://www.tcpdump.org/</A >. Ethereal, another good packet sniffer for UNIX and Win32 hosts, can be downloaded from <A @@ -1573,11 +1573,11 @@ TARGET="_top" >. </P ><P -> For tracing things on the Microsoft Windows NT, Network Monitor +> For tracing things on Microsoft Windows NT, Network Monitor (aka. netmon) is available on the Microsoft Developer Network CD's, the Windows NT Server install CD and the SMS CD's. The version of netmon that ships with SMS allows for dumping packets between any two - computers (ie. placing the network interface in promiscuous mode). + computers (i.e. placing the network interface in promiscuous mode). The version on the NT Server install CD will only allow monitoring of network traffic directed to the local NT box and broadcasts on the local subnet. Be aware that Ethereal can read and write netmon @@ -1591,7 +1591,7 @@ CLASS="SECT2" ><A NAME="AEN309" >How do I install 'Network Monitor' on an NT Workstation -or a Windows 9x box?</A +or a Windows 9x box ?</A ></H2 ><P > Installing netmon on an NT workstation requires a couple @@ -1732,13 +1732,13 @@ CLASS="EMPHASIS" ></LI ><LI ><P -> Ignacio Coupeau has a very comprehesive look at LDAP with Samba at +> Ignacio Coupeau has a very comprehensive look at LDAP with Samba at <A HREF="http://www.unav.es/cti/ldap-smb-howto.html" TARGET="_top" > http://www.unav.es/cti/ldap-smb-howto.html</A > - Be a little carefull however, I suspect that it does not specificly + Be a little careful however, I suspect that it does not specifically address samba 2.2.x. The HEAD pre-2.1 may possibly be the best stream to look at.</P ></LI @@ -1754,7 +1754,7 @@ HREF="http://www.kneschke.de/projekte/samba_tng" TARGET="_top" > http://www.kneschke.de/projekte/samba_tng</A >, but again, a - lot of it does not apply to the main stream Samba.</P + lot of it does not apply to the mainstream Samba.</P ></LI ><LI ><P @@ -1839,7 +1839,7 @@ TARGET="_top" >http://www.samba-tng.org/</A > It has been requested that you don't post questions about Samba-TNG to the - main stream Samba lists.</P + mainstream Samba lists.</P ><P ></P ><P @@ -1872,18 +1872,18 @@ TARGET="_top" > Try and make your question clear and brief, lots of long, convoluted questions get deleted before they are completely read ! Don't post html encoded messages (if you can select colour or font - size its html).</P + size it's html).</P ></LI ><LI ><P -> If you run one of those niffy 'I'm on holidays' things when +> If you run one of those nifty 'I'm on holidays' things when you are away, make sure its configured to not answer mailing lists. </P ></LI ><LI ><P > Don't cross post. Work out which is the best list to post to - and see what happens, ie don't post to both samba-ntdom and samba-technical. + and see what happens, i.e. don't post to both samba-ntdom and samba-technical. Many people active on the lists subscribe to more than one list and get annoyed to see the same message two or more times. Often someone will see a message and thinking it would be better dealt @@ -1943,7 +1943,7 @@ TARGET="_top" ></P ><P > Please don't post messages to the list asking to be removed, you will just - be refered to the above address (unless that process failed in some way...) + be referred to the above address (unless that process failed in some way...) </P ></DIV ></DIV |