svn commit: samba-docs r289 - in trunk: Samba-Guide Samba-HOWTO-Collection smbdotconf/logon smbdotconf/security smbdotconf/tuning

jht at samba.org jht at samba.org
Tue Nov 23 18:03:33 GMT 2004


Author: jht
Date: 2004-11-23 18:03:33 +0000 (Tue, 23 Nov 2004)
New Revision: 289

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=289

Log:
Fixes and updates.
Modified:
   trunk/Samba-Guide/Chap07-2000UserNetwork.xml
   trunk/Samba-HOWTO-Collection/Group-Mapping.xml
   trunk/Samba-HOWTO-Collection/ServerType.xml
   trunk/smbdotconf/logon/logonpath.xml
   trunk/smbdotconf/security/encryptpasswords.xml
   trunk/smbdotconf/tuning/hostnamelookups.xml


Changeset:
Modified: trunk/Samba-Guide/Chap07-2000UserNetwork.xml
===================================================================
--- trunk/Samba-Guide/Chap07-2000UserNetwork.xml	2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/Samba-Guide/Chap07-2000UserNetwork.xml	2004-11-23 18:03:33 UTC (rev 289)
@@ -899,6 +899,31 @@
 		matches the content of <link linkend="ch7-LDAP-master"/>.
 		</para></step>
 
+	<step><para>
+		Create a file called <filename>admin-accts.ldif</filename> with the following contents:
+<screen>
+dn: cn=updateuser,dc=abmas,dc=biz
+objectClass: person
+cn: updateuser
+sn: updateuser
+userpaddword: not24get
+
+dn: cn=sambaadmin,dc=abmas,dc=biz
+objectClass: person
+cn: sambaadmin
+sn: sambaadmin
+userpaddword: buttercup
+</screen>
+	</para></step>
+
+	<step><para>
+		Add an account called <quote>updateuser</quote> to the master LDAP server
+		as shown here:
+<screen>
+&rootprompt; slapadd -v -l admin-accts.ldif
+</screen>
+	<para></step>
+
 	<step><para><indexterm>
 	      <primary>LDIF</primary>
 	    </indexterm><indexterm>
@@ -1112,7 +1137,6 @@
 
 updatedn    cn=updateuser,dc=abmas,dc=biz
 updateref   ldap://massive.abmas.biz
-replogfile  /var/lib/ldap/replogfile
 
 directory   /var/lib/ldap
 

Modified: trunk/Samba-HOWTO-Collection/Group-Mapping.xml
===================================================================
--- trunk/Samba-HOWTO-Collection/Group-Mapping.xml	2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/Samba-HOWTO-Collection/Group-Mapping.xml	2004-11-23 18:03:33 UTC (rev 289)
@@ -477,8 +477,14 @@
 	<title>Sample &smb.conf; Add Group Script</title>
 
 		<para>
+		<indexterm><primary>smbgrpadd.sh</primary></indexterm>
+		<indexterm><primary>groupadd limitations</primary></indexterm>
 		A script to create complying group names for use by the Samba group interfaces
-		is provided in <link linkend="smbgrpadd.sh">smbgrpadd.sh</link>.
+		is provided in <link linkend="smbgrpadd.sh">smbgrpadd.sh</link>. This script will
+		add a temporary entry in the <filename>/etc/group</filename> file and then rename
+		it to to the desired name. This is an example of a method to get around operating
+		system maintenance tool limititations such as that present in some version of the
+		<command>groupadd</command> tool.
 		</para>
 
 <indexterm><primary>smbgrpadd.sh</primary></indexterm>

Modified: trunk/Samba-HOWTO-Collection/ServerType.xml
===================================================================
--- trunk/Samba-HOWTO-Collection/ServerType.xml	2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/Samba-HOWTO-Collection/ServerType.xml	2004-11-23 18:03:33 UTC (rev 289)
@@ -260,11 +260,6 @@
 <smbconfoption><name>security</name><value>share</value></smbconfoption>
 </smbconfblock></para>
 
-<para>
-There are reports that recent MS Windows clients do not like to work
-with share mode security servers. You are strongly discouraged from using Share Level security.
-</para>
-
 </sect3>
 </sect2>
 

Modified: trunk/smbdotconf/logon/logonpath.xml
===================================================================
--- trunk/smbdotconf/logon/logonpath.xml	2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/smbdotconf/logon/logonpath.xml	2004-11-23 18:03:33 UTC (rev 289)
@@ -40,6 +40,10 @@
 	<para>This option takes the standard substitutions, allowing 
 	you to have separate logon scripts for each user or machine.</para>
 
+        <para>
+        Do not quote the value. Setting this as <quote>\\%N\profile\%U</quote>
+        will break profile handling.
+
 	<para>Note that this option is only useful if Samba is set up 
 	as a logon server.</para>
 </description>

Modified: trunk/smbdotconf/security/encryptpasswords.xml
===================================================================
--- trunk/smbdotconf/security/encryptpasswords.xml	2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/smbdotconf/security/encryptpasswords.xml	2004-11-23 18:03:33 UTC (rev 289)
@@ -8,8 +8,24 @@
     will be negotiated with the client. Note that Windows NT 4.0 SP3 and 
     above and also Windows 98 will by default expect encrypted passwords 
     unless a registry entry is changed. To use encrypted passwords in 
-	Samba see the chapter "User Database" in the Samba HOWTO Collection. </para>
+    Samba see the chapter "User Database" in the Samba HOWTO Collection.
+    </para>
 
+    <para>
+    MS Windows clients that expect Microsoft encrypted passwords and that
+    do not have plain text password support enabled will be able to
+    connect only to a Samba server that has encypted password support
+    enabled and for which the user accounts have a valid encrypted password.
+    Refer to the smbpasswd command man page for information regarding the
+    creation of encrypted passwords for user accounts.
+    </para>
+
+    <para>
+    The use of plain text passwords is NOT advised as support for this feature
+    is no longer maintained in Microsoft Windows products. If you want to use
+    plain text passwords you must set this parameter to no.
+    </para>
+
     <para>In order for encrypted passwords to work correctly
     <citerefentry><refentrytitle>smbd</refentrytitle>
     <manvolnum>8</manvolnum></citerefentry> must either 

Modified: trunk/smbdotconf/tuning/hostnamelookups.xml
===================================================================
--- trunk/smbdotconf/tuning/hostnamelookups.xml	2004-11-23 16:25:57 UTC (rev 288)
+++ trunk/smbdotconf/tuning/hostnamelookups.xml	2004-11-23 18:03:33 UTC (rev 289)
@@ -11,6 +11,6 @@
     </para>
 </description>
 
-<value type="default">yes</value>
-<value type="example">no</value>
+<value type="default">no</value>
+<value type="example">yes</value>
 </samba:parameter>



More information about the samba-cvs mailing list