[Samba] TOSHAG-Winbind.xml translate finished and some bug found

ITPFS oota t-oota at dh.jp.nec.com
Thu Oct 8 02:01:26 MDT 2009


Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base).
And some bug found.

<indexterm><primary>UID</primary></indexterm>
<indexterm><primary>GID</primary></indexterm>
<indexterm><primary>SID</primary></indexterm>
<indexterm><primary>idmap uid</primary></indexterm>
<indexterm><primary>idmap gid</primary></indexterm>
<indexterm><primary>idmap backend</primary></indexterm>
<indexterm><primary></primary>LDAP</indexterm>
----------------------------------------------
 is <indexterm><primary>LDAP</primary></indexterm>?

                Winbind maintains a database called winbind_idmap.tdb in which it stores
                mappings between UNIX UIDs, GIDs, and NT SIDs. This mapping is used only
                for users and groups that do not have a local UID/GID. It stores the UID/GID
                allocated from the idmap uid/gid range that it has mapped to the NT SID.


	  Users on the UNIX machine can then use NT user and group
        names as they would <quote>native</quote> UNIX names. They can chown files
        so they are owned by NT domain users or even login to the
        UNIX machine and run a UNIX X-Window session as a domain user.</para>
                                    --------
                                    X Window System (See man X)


<indexterm><primary>boot disk`</primary></indexterm>
                             - typo?
If you have a Samba configuration file that you are currently using, <emphasis>BACK IT UP!</emphasis>
If your system already uses PAM, <emphasis>back up the <filename>/etc/pam.d</filename> directory
contents!</emphasis> If you haven't already made a boot disk, <emphasis>MAKE ONE NOW!</emphasis>
</para>


To allow domain users the ability to access Samba shares and files, as well as potentially other services
provided by your Samba machine, PAM must be set up properly on your
machine. In order to compile the Winbind modules, you should have at least the PAM development libraries installed
on your system. Please refer to the PAM Web site <ulink url="http://www.kernel.org/pub/linux/libs/pam/"/>.

is this?

Please refer to the <ulink url="http://www.kernel.org/pub/linux/libs/pam/"/>PAM Web site</ulink>.


<indexterm><primary>winbindd daemon</primary></indexterm>
<indexterm><primary>smbd</primary></indexterm>
<indexterm><primary>nmbd</primary></indexterm>
<indexterm><primary>/etc/init.d/smb</primary></indexterm>
<indexterm><primary>/etc/init.d/samba</primary></indexterm>
<indexterm><primary>/usr/local/samba/bin</primary></indexterm>
<indexterm><primary></primary></indexterm> |
<indexterm><primary></primary></indexterm> |unneceasary
<indexterm><primary></primary></indexterm> |


<para>
Again, if you would like to run Samba in dual daemon mode, replace:
                                -----winbindd?
<programlisting>
/usr/local/samba/sbin/winbindd
</programlisting>
in the script above with:
<programlisting>
/usr/local/samba/sbin/winbindd -D
</programlisting>


The <filename>/etc/pam.d/ftp</filename> file can be changed to allow Winbind ftp access in a manner similar to
the samba file. My <filename>/etc/pam.d/ftp</filename> file was changed to look like this:
    ----- smb.conf?

<programlisting>
auth       required     /lib/security/pam_listfile.so item=user sense=deny \
         file=/etc/ftpusers onerr=succeed

--
--- Oota Toshiya ---  t-oota at dh.jp.nec.com
NEC Systems Software Operations Unit      Shiba,Minato,Tokyo
IT Platform Solutions Division            Japan,Earth,Solar system
(samba-jp/ldap-jp Staff,mutt-j/samba-jp postmaster)


More information about the samba mailing list