svn commit: samba-docs r289 - in trunk: Samba-Guide
Samba-HOWTO-Collection smbdotconf/logon smbdotconf/security
smbdotconf/tuning
jht at samba.org
jht at samba.org
Tue Nov 23 18:03:33 GMT 2004
Author: jht
Date: 2004-11-23 18:03:33 +0000 (Tue, 23 Nov 2004)
New Revision: 289
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=289
Log:
Fixes and updates.
Modified:
trunk/Samba-Guide/Chap07-2000UserNetwork.xml
trunk/Samba-HOWTO-Collection/Group-Mapping.xml
trunk/Samba-HOWTO-Collection/ServerType.xml
trunk/smbdotconf/logon/logonpath.xml
trunk/smbdotconf/security/encryptpasswords.xml
trunk/smbdotconf/tuning/hostnamelookups.xml
Changeset:
Modified: trunk/Samba-Guide/Chap07-2000UserNetwork.xml
===================================================================
--- trunk/Samba-Guide/Chap07-2000UserNetwork.xml 2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/Samba-Guide/Chap07-2000UserNetwork.xml 2004-11-23 18:03:33 UTC (rev 289)
@@ -899,6 +899,31 @@
matches the content of <link linkend="ch7-LDAP-master"/>.
</para></step>
+ <step><para>
+ Create a file called <filename>admin-accts.ldif</filename> with the following contents:
+<screen>
+dn: cn=updateuser,dc=abmas,dc=biz
+objectClass: person
+cn: updateuser
+sn: updateuser
+userpaddword: not24get
+
+dn: cn=sambaadmin,dc=abmas,dc=biz
+objectClass: person
+cn: sambaadmin
+sn: sambaadmin
+userpaddword: buttercup
+</screen>
+ </para></step>
+
+ <step><para>
+ Add an account called <quote>updateuser</quote> to the master LDAP server
+ as shown here:
+<screen>
+&rootprompt; slapadd -v -l admin-accts.ldif
+</screen>
+ <para></step>
+
<step><para><indexterm>
<primary>LDIF</primary>
</indexterm><indexterm>
@@ -1112,7 +1137,6 @@
updatedn cn=updateuser,dc=abmas,dc=biz
updateref ldap://massive.abmas.biz
-replogfile /var/lib/ldap/replogfile
directory /var/lib/ldap
Modified: trunk/Samba-HOWTO-Collection/Group-Mapping.xml
===================================================================
--- trunk/Samba-HOWTO-Collection/Group-Mapping.xml 2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/Samba-HOWTO-Collection/Group-Mapping.xml 2004-11-23 18:03:33 UTC (rev 289)
@@ -477,8 +477,14 @@
<title>Sample &smb.conf; Add Group Script</title>
<para>
+ <indexterm><primary>smbgrpadd.sh</primary></indexterm>
+ <indexterm><primary>groupadd limitations</primary></indexterm>
A script to create complying group names for use by the Samba group interfaces
- is provided in <link linkend="smbgrpadd.sh">smbgrpadd.sh</link>.
+ is provided in <link linkend="smbgrpadd.sh">smbgrpadd.sh</link>. This script will
+ add a temporary entry in the <filename>/etc/group</filename> file and then rename
+ it to to the desired name. This is an example of a method to get around operating
+ system maintenance tool limititations such as that present in some version of the
+ <command>groupadd</command> tool.
</para>
<indexterm><primary>smbgrpadd.sh</primary></indexterm>
Modified: trunk/Samba-HOWTO-Collection/ServerType.xml
===================================================================
--- trunk/Samba-HOWTO-Collection/ServerType.xml 2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/Samba-HOWTO-Collection/ServerType.xml 2004-11-23 18:03:33 UTC (rev 289)
@@ -260,11 +260,6 @@
<smbconfoption><name>security</name><value>share</value></smbconfoption>
</smbconfblock></para>
-<para>
-There are reports that recent MS Windows clients do not like to work
-with share mode security servers. You are strongly discouraged from using Share Level security.
-</para>
-
</sect3>
</sect2>
Modified: trunk/smbdotconf/logon/logonpath.xml
===================================================================
--- trunk/smbdotconf/logon/logonpath.xml 2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/smbdotconf/logon/logonpath.xml 2004-11-23 18:03:33 UTC (rev 289)
@@ -40,6 +40,10 @@
<para>This option takes the standard substitutions, allowing
you to have separate logon scripts for each user or machine.</para>
+ <para>
+ Do not quote the value. Setting this as <quote>\\%N\profile\%U</quote>
+ will break profile handling.
+
<para>Note that this option is only useful if Samba is set up
as a logon server.</para>
</description>
Modified: trunk/smbdotconf/security/encryptpasswords.xml
===================================================================
--- trunk/smbdotconf/security/encryptpasswords.xml 2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/smbdotconf/security/encryptpasswords.xml 2004-11-23 18:03:33 UTC (rev 289)
@@ -8,8 +8,24 @@
will be negotiated with the client. Note that Windows NT 4.0 SP3 and
above and also Windows 98 will by default expect encrypted passwords
unless a registry entry is changed. To use encrypted passwords in
- Samba see the chapter "User Database" in the Samba HOWTO Collection. </para>
+ Samba see the chapter "User Database" in the Samba HOWTO Collection.
+ </para>
+ <para>
+ MS Windows clients that expect Microsoft encrypted passwords and that
+ do not have plain text password support enabled will be able to
+ connect only to a Samba server that has encypted password support
+ enabled and for which the user accounts have a valid encrypted password.
+ Refer to the smbpasswd command man page for information regarding the
+ creation of encrypted passwords for user accounts.
+ </para>
+
+ <para>
+ The use of plain text passwords is NOT advised as support for this feature
+ is no longer maintained in Microsoft Windows products. If you want to use
+ plain text passwords you must set this parameter to no.
+ </para>
+
<para>In order for encrypted passwords to work correctly
<citerefentry><refentrytitle>smbd</refentrytitle>
<manvolnum>8</manvolnum></citerefentry> must either
Modified: trunk/smbdotconf/tuning/hostnamelookups.xml
===================================================================
--- trunk/smbdotconf/tuning/hostnamelookups.xml 2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/smbdotconf/tuning/hostnamelookups.xml 2004-11-23 18:03:33 UTC (rev 289)
@@ -11,6 +11,6 @@
</para>
</description>
-<value type="default">yes</value>
-<value type="example">no</value>
+<value type="default">no</value>
+<value type="example">yes</value>
</samba:parameter>
More information about the samba-cvs
mailing list