Deploying Suse Linux Enterprise Server
 |
Purchase "Deploying Suse Linux Enterprise Server" at Lulu.com |
Configuring the Samba Server
- Introduction & Samba Configuration
- Samba Server Roles & Backends
- Users, Groups & Computer Accounts
- Samba Shares
- Sharing Printers through Samba
- Additional Domain Controller Functions
- Relevant Samba Parameter Reference
Samba Parameters
Samba Separates it's configuration file into a "Global Section" and a section for each "Share". This is not a complete reference and does not include the parameters that have been covered within the Samba Chapter, but it does include the ones that may pertain to most networks. Also remember that you can utilize what are called "variable substitutions", some of these include:
- %U - session username
- %m - the NetBIOS name of the client machine
- %L - the NetBIOS name of the server
- %a - the architecture of the remote machine
- %I - the IP address of the client machine
Useful Global Samba Parameters
- bind interfaces only
- Allows you to limit which interfaces will serve SMB requests (yes or no)
- deadtime
- The number of minutes of inactivity before a connection is considered dead, and it is disconnected. This can be useful to reduce the amount of connections to your server. Most clients will auto-reconnect if needed so this is safe to implement. (deadtime = 15)
- default service
- Allows you to specifies the name of a share which will be connected to if the share that was actually requested cannot be found. This is useful if you wish to utilize a "help" share to feed information to users. (default service = help)
- include
- Allows you to include the contents of another configuration file.
- interfaces
- Allows you to specify which interfaces will server SMB requests, this can be specified as IP Addresses or Interface Names. (interfaces = eth0 192.168.1.0/24 10.0.0.0/8)
- ldap passwd sync
- Set's whether or not Samba should sync the LDAP password with the User's Windows Password. Useful if you wish your users to have separate passwords (for Windows and other Server Resources) or not.
- log level
- Allows you to control how much information Samba will log. This is normally a number, such as 3 where the higher the number the more information that will be logged, however you can now specify different numbers to different functions. (log level = 3 passdb:5 auth:10)
- null passwords
- Allows you to control whether or not users with null passwords are granted access to the server (yes or no, the default is no)
- server string
- Allows you to set what appears in browse lists next to the machine name. By default this is set to Samba and it's version (server string = Suse Linux Enterprise)
Useful Samba Share Parameters
- admin users
- Allows you to create a list of users who will be granted administrative privileges on the share.
- available
- Allows you to turn off a share without deleting it or commenting it out within smb.conf (available = no)
- browseable
- Allows you to control whether this share is seen in the list of available shares or not
- comment
- Allows you to specify a comment that is shown within Network Neighborhood when browsing the server's shares.
- create mask
- Allows you to specify the default Unix Permissions for files that are created through the Samba share. (create mask = 664)
- delete readonly
- Allows you to specify whether or not a user is able to delete a read-only file or directory (delete readonly = yes)
- directory mask
- Allows you to specify the default Unix Permissions for directories that are created through the Samba Share. (directory mask = 775)
- follow symlinks
- Allows you to specify whether or not Samba will follow symbolic Links on the Unix filesystem when accessed through the Share.
- force create mode
- Allows you to force the default Unix Permissions for files that are created through the Samba share. (force create mode = 664)
- force directory mode
- Allows you to force the default Unix Permissions for directories that are created through the Samba Share. (force directory mode = 775)
- force group
- Allows you to specify a group name that will be assigned as the default primary group for all users connecting to the share.
- force user
- Allows you to specify a user name that will be assigned for all users connecting to the share.
- guest ok
- Allows you to specify whether a username/password is required to access the share.
- guest only
- Allows you to specify that only guest connections are permitted to the share.
- hide files
- Allows you to specify a list of files and directories that will be marked as hidden by default. (hide files = /desktop.ini/*utloo*.lnk/.*/*riefcas*/)
- invalid users
- Allows you to specify users and groups that are not allowed to access the share.
- level2 oplocks
- Allows you to disable level 2 oplocks on a share (not recommended).
- max connections
- Allows you to limit the number of simultaneous connections to a share.
- nt acl support
- Allows you to control whether or not the "security" tab of the Windows Explorer file/directory properties dialog are available to the user.
- profile acls
- Allows you to set correct permissions on a "profile" share (profile acls = yes)
- valid users
- Allows you to specify which users or groups are allowed to access a share.
- veto oplock files
- Provides an easy way to fix locking problems with certain applications. An example: veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/
- write list
- Allows you to specify which users and groups can write to a share.
|
Purchase "Deploying Suse Linux Enterprise Server" at Lulu.com |
