diff options
Diffstat (limited to 'docs/htmldocs')
| -rw-r--r-- | docs/htmldocs/Samba-HOWTO-Collection.html | 231 |
1 files changed, 145 insertions, 86 deletions
diff --git a/docs/htmldocs/Samba-HOWTO-Collection.html b/docs/htmldocs/Samba-HOWTO-Collection.html index 67a5dac9682..401f4272159 100644 --- a/docs/htmldocs/Samba-HOWTO-Collection.html +++ b/docs/htmldocs/Samba-HOWTO-Collection.html @@ -396,173 +396,173 @@ HREF="#AEN900" ></DT ><DT >6.5. <A -HREF="#AEN928" +HREF="#AEN942" >System Policies and Profiles</A ></DT ><DT >6.6. <A -HREF="#AEN968" +HREF="#AEN982" >What other help can I get ?</A ></DT ><DD ><DL ><DT >6.6.1. <A -HREF="#AEN1015" +HREF="#AEN1029" >URLs and similar</A ></DT ><DT >6.6.2. <A -HREF="#AEN1039" +HREF="#AEN1053" >Mailing Lists</A ></DT ></DL ></DD ><DT >6.7. <A -HREF="#AEN1078" +HREF="#AEN1092" >DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A ></DT ></DL ></DD ><DT >7. <A -HREF="#AEN1102" +HREF="#AEN1116" >Unifed Logons between Windows NT and UNIX using Winbind</A ></DT ><DD ><DL ><DT >7.1. <A -HREF="#AEN1120" +HREF="#AEN1134" >Abstract</A ></DT ><DT >7.2. <A -HREF="#AEN1124" +HREF="#AEN1138" >Introduction</A ></DT ><DT >7.3. <A -HREF="#AEN1137" +HREF="#AEN1151" >What Winbind Provides</A ></DT ><DD ><DL ><DT >7.3.1. <A -HREF="#AEN1144" +HREF="#AEN1158" >Target Uses</A ></DT ></DL ></DD ><DT >7.4. <A -HREF="#AEN1148" +HREF="#AEN1162" >How Winbind Works</A ></DT ><DD ><DL ><DT >7.4.1. <A -HREF="#AEN1153" +HREF="#AEN1167" >Microsoft Remote Procedure Calls</A ></DT ><DT >7.4.2. <A -HREF="#AEN1157" +HREF="#AEN1171" >Name Service Switch</A ></DT ><DT >7.4.3. <A -HREF="#AEN1173" +HREF="#AEN1187" >Pluggable Authentication Modules</A ></DT ><DT >7.4.4. <A -HREF="#AEN1181" +HREF="#AEN1195" >User and Group ID Allocation</A ></DT ><DT >7.4.5. <A -HREF="#AEN1185" +HREF="#AEN1199" >Result Caching</A ></DT ></DL ></DD ><DT >7.5. <A -HREF="#AEN1188" +HREF="#AEN1202" >Installation and Configuration</A ></DT ><DT >7.6. <A -HREF="#AEN1194" +HREF="#AEN1208" >Limitations</A ></DT ><DT >7.7. <A -HREF="#AEN1206" +HREF="#AEN1220" >Conclusion</A ></DT ></DL ></DD ><DT >8. <A -HREF="#AEN1209" +HREF="#AEN1223" >UNIX Permission Bits and WIndows NT Access Control Lists</A ></DT ><DD ><DL ><DT >8.1. <A -HREF="#AEN1220" +HREF="#AEN1234" >Viewing and changing UNIX permissions using the NT security dialogs</A ></DT ><DT >8.2. <A -HREF="#AEN1229" +HREF="#AEN1243" >How to view file security on a Samba share</A ></DT ><DT >8.3. <A -HREF="#AEN1240" +HREF="#AEN1254" >Viewing file ownership</A ></DT ><DT >8.4. <A -HREF="#AEN1260" +HREF="#AEN1274" >Viewing file or directory permissions</A ></DT ><DD ><DL ><DT >8.4.1. <A -HREF="#AEN1275" +HREF="#AEN1289" >File Permissions</A ></DT ><DT >8.4.2. <A -HREF="#AEN1289" +HREF="#AEN1303" >Directory Permissions</A ></DT ></DL ></DD ><DT >8.5. <A -HREF="#AEN1296" +HREF="#AEN1310" >Modifying file or directory permissions</A ></DT ><DT >8.6. <A -HREF="#AEN1318" +HREF="#AEN1332" >Interaction with the standard Samba create mask parameters</A ></DT ><DT >8.7. <A -HREF="#AEN1382" +HREF="#AEN1396" >Interaction with the standard Samba file attribute mapping</A ></DT @@ -570,39 +570,39 @@ HREF="#AEN1382" ></DD ><DT >9. <A -HREF="#AEN1392" +HREF="#AEN1406" >OS2 Client HOWTO</A ></DT ><DD ><DL ><DT >9.1. <A -HREF="#AEN1403" +HREF="#AEN1417" >FAQs</A ></DT ><DD ><DL ><DT >9.1.1. <A -HREF="#AEN1405" +HREF="#AEN1419" >How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?</A ></DT ><DT >9.1.2. <A -HREF="#AEN1420" +HREF="#AEN1434" >How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?</A ></DT ><DT >9.1.3. <A -HREF="#AEN1429" +HREF="#AEN1443" >Are there any other issues when OS/2 (any version) is used as a client?</A ></DT ><DT >9.1.4. <A -HREF="#AEN1433" +HREF="#AEN1447" >How do I get printer driver download working for OS/2 clients?</A ></DT @@ -4187,14 +4187,22 @@ unique uid !</P ><P ><EM >I get told "You already have a connection to the Domain...." -when creating a machine account.</EM +or "Cannot join domain, the credentials supplied conflict with an +existing set.." when creating a machine account.</EM ></P ><P >This happens if you try to create a machine account from the -machine itself and use a user name that does not work (for whatever -reason) and then try another (possibly valid) user name. -Exit out of the network applet to close the initial connection -and try again.</P +machine itself and already have a connection (e.g. mapped drive) +to a share (or IPC$) on the Samba PDC. The following command +will remove all network drive connections:</P +><P +><TT +CLASS="PROMPT" +>C:\WINNT\></TT +> <B +CLASS="COMMAND" +>net use * /d</B +></P ><P >Further, if the machine is a already a 'member of a workgroup' that is the same name as the domain you are joining (bad idea) you will @@ -4202,14 +4210,6 @@ get this message. Change the workgroup name to something else, it does not matter what, reboot, and try again.</P ><P ><EM ->I get told "Cannot join domain, the credentials supplied -conflict with an existing set.."</EM -></P -><P ->This is the same basic problem as mentioned above, "You already -have a connection..."</P -><P -><EM >"The system can not log you on (C000019B)...."</EM ></P ><P @@ -4242,9 +4242,11 @@ for this computer either does not exist or is not accessible". Whats wrong ?</P ><P >This problem is caused by the PDC not having a suitable machine account. -If you are using the <B -CLASS="COMMAND" ->add user script =</B +If you are using the <TT +CLASS="PARAMETER" +><I +>add user script</I +></TT > method to create accounts then this would indicate that it has not worked. Ensure the domain admin user system is working.</P @@ -4259,13 +4261,70 @@ in both /etc/passwd and the smbpasswd file. Some people have reported that inconsistent subnet masks between the Samba server and the NT client have caused this problem. Make sure that these are consistent for both client and server.</P +><P +><EM +>When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</EM +></P +><P +>This problem is caused by a PAM related bug in Samba 2.2.0. This bug is +fixed in 2.2.1. Other symptoms could be unaccessible shares on +NT/W2K member servers in the domain or the following error in your smbd.log: +passdb/pampass.c:pam_account(268) PAM: UNKNOWN ERROR for User: %user%</P +><P +>At first be ensure to enable the useraccounts with <B +CLASS="COMMAND" +>smbpasswd -e +%user%</B +>, this is normaly done, when you create an account.</P +><P +>In order to work around this problem in 2.2.0, configure the +<TT +CLASS="PARAMETER" +><I +>account</I +></TT +> control flag in +<TT +CLASS="FILENAME" +>/etc/pam.d/samba</TT +> file as follows:</P +><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="100%" +><TR +><TD +><PRE +CLASS="PROGRAMLISTING" +>account required pam_permit.so</PRE +></TD +></TR +></TABLE +></P +><P +>If you want to remain backward compatibility to samba 2.0.x use +<TT +CLASS="FILENAME" +>pam_permit.so</TT +>, it's also possible to use +<TT +CLASS="FILENAME" +>pam_pwdb.so</TT +>. There are some bugs if you try to +use <TT +CLASS="FILENAME" +>pam_unix.so</TT +>, if you need this, be ensure to use +the most recent version of this file.</P ></DIV ><DIV CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN928" +NAME="AEN942" >6.5. System Policies and Profiles</A ></H1 ><P @@ -4403,7 +4462,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN968" +NAME="AEN982" >6.6. What other help can I get ?</A ></H1 ><P @@ -4584,7 +4643,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1015" +NAME="AEN1029" >6.6.1. URLs and similar</A ></H2 ><P @@ -4657,7 +4716,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1039" +NAME="AEN1053" >6.6.2. Mailing Lists</A ></H2 ><P @@ -4789,7 +4848,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1078" +NAME="AEN1092" >6.7. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A ></H1 ><P @@ -4890,7 +4949,7 @@ within its registry.</P CLASS="CHAPTER" ><HR><H1 ><A -NAME="AEN1102" +NAME="AEN1116" >Chapter 7. Unifed Logons between Windows NT and UNIX using Winbind</A ></H1 ><DIV @@ -4898,7 +4957,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1120" +NAME="AEN1134" >7.1. Abstract</A ></H1 ><P @@ -4920,7 +4979,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1124" +NAME="AEN1138" >7.2. Introduction</A ></H1 ><P @@ -4974,7 +5033,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1137" +NAME="AEN1151" >7.3. What Winbind Provides</A ></H1 ><P @@ -5016,7 +5075,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1144" +NAME="AEN1158" >7.3.1. Target Uses</A ></H2 ><P @@ -5040,7 +5099,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1148" +NAME="AEN1162" >7.4. How Winbind Works</A ></H1 ><P @@ -5060,7 +5119,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1153" +NAME="AEN1167" >7.4.1. Microsoft Remote Procedure Calls</A ></H2 ><P @@ -5086,7 +5145,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1157" +NAME="AEN1171" >7.4.2. Name Service Switch</A ></H2 ><P @@ -5165,7 +5224,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1173" +NAME="AEN1187" >7.4.3. Pluggable Authentication Modules</A ></H2 ><P @@ -5214,7 +5273,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1181" +NAME="AEN1195" >7.4.4. User and Group ID Allocation</A ></H2 ><P @@ -5240,7 +5299,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1185" +NAME="AEN1199" >7.4.5. Result Caching</A ></H2 ><P @@ -5263,7 +5322,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1188" +NAME="AEN1202" >7.5. Installation and Configuration</A ></H1 ><P @@ -5294,7 +5353,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1194" +NAME="AEN1208" >7.6. Limitations</A ></H1 ><P @@ -5342,7 +5401,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1206" +NAME="AEN1220" >7.7. Conclusion</A ></H1 ><P @@ -5358,7 +5417,7 @@ NAME="AEN1206" CLASS="CHAPTER" ><HR><H1 ><A -NAME="AEN1209" +NAME="AEN1223" >Chapter 8. UNIX Permission Bits and WIndows NT Access Control Lists</A ></H1 ><DIV @@ -5366,7 +5425,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1220" +NAME="AEN1234" >8.1. Viewing and changing UNIX permissions using the NT security dialogs</A ></H1 @@ -5405,7 +5464,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1229" +NAME="AEN1243" >8.2. How to view file security on a Samba share</A ></H1 ><P @@ -5451,7 +5510,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1240" +NAME="AEN1254" >8.3. Viewing file ownership</A ></H1 ><P @@ -5537,7 +5596,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1260" +NAME="AEN1274" >8.4. Viewing file or directory permissions</A ></H1 ><P @@ -5599,7 +5658,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1275" +NAME="AEN1289" >8.4.1. File Permissions</A ></H2 ><P @@ -5661,7 +5720,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1289" +NAME="AEN1303" >8.4.2. Directory Permissions</A ></H2 ><P @@ -5693,7 +5752,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1296" +NAME="AEN1310" >8.5. Modifying file or directory permissions</A ></H1 ><P @@ -5791,7 +5850,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1318" +NAME="AEN1332" >8.6. Interaction with the standard Samba create mask parameters</A ></H1 @@ -6064,7 +6123,7 @@ CLASS="SECT1" ><HR><H1 CLASS="SECT1" ><A -NAME="AEN1382" +NAME="AEN1396" >8.7. Interaction with the standard Samba file attribute mapping</A ></H1 @@ -6111,7 +6170,7 @@ CLASS="COMMAND" CLASS="CHAPTER" ><HR><H1 ><A -NAME="AEN1392" +NAME="AEN1406" >Chapter 9. OS2 Client HOWTO</A ></H1 ><DIV @@ -6119,7 +6178,7 @@ CLASS="SECT1" ><H1 CLASS="SECT1" ><A -NAME="AEN1403" +NAME="AEN1417" >9.1. FAQs</A ></H1 ><DIV @@ -6127,7 +6186,7 @@ CLASS="SECT2" ><H2 CLASS="SECT2" ><A -NAME="AEN1405" +NAME="AEN1419" >9.1.1. How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?</A ></H2 @@ -6186,7 +6245,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1420" +NAME="AEN1434" >9.1.2. How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?</A ></H2 @@ -6239,7 +6298,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1429" +NAME="AEN1443" >9.1.3. Are there any other issues when OS/2 (any version) is used as a client?</A ></H2 @@ -6261,7 +6320,7 @@ CLASS="SECT2" ><HR><H2 CLASS="SECT2" ><A -NAME="AEN1433" +NAME="AEN1447" >9.1.4. How do I get printer driver download working for OS/2 clients?</A ></H2 |