diff --git a/docs/Samba-HOWTO-Collection/TOSHARG-TheNetCommand.xml b/docs/Samba-HOWTO-Collection/TOSHARG-TheNetCommand.xml index fcf4af47c29..698294e27fe 100644 --- a/docs/Samba-HOWTO-Collection/TOSHARG-TheNetCommand.xml +++ b/docs/Samba-HOWTO-Collection/TOSHARG-TheNetCommand.xml @@ -28,11 +28,204 @@ should look at the net command before searching elsewhere. - +A Samba-3 administrator can not afford to gloss over this chapter because to do so will almost certainly cause +the infliction of self induced pain, agony and desperation. Be warned, this is an important chapter. - Stuff + Self-Defense Overview + + + The tasks that follow the installation of a Samba-3 server, whether Stand-Alone, Domain Member, of a + Domain Controller (PDC or BDC) begins with the need to create administrative rights. Of course, the + creation of user and group accounts is essential for both a Stand-Alone server as well as for a PDC. + In the case of a BDC or a Domain Member server (DMS) Domain user and group accounts are obtained from + the central domain authentication backend. + + + + Regardless of the type of server being installed, local UNIX groups must be mapped to the Windows + networking domain global group accounts. Do you ask, why? Because Samba always limits its access to + the resources of the host server by way of traditional UNIX UID/GID controls. This means that local + groups must be mapped to domain global groups so that domain users who are members of the domain + global groups can be given access rights based on UIDs and GIDs local to the server that is hosting + Samba. Such mappings are implemented using the net command. + + + + UNIX systems that are hosting a Samba-3 server that is running as a member (PDC, BDC, or DMS) must have + a machine security account in the domain authentication database (or directory). The creation of such + security (or trust) accounts is also handled using the net command. + + + + The establishment of interdomain trusts is achieved using the net command also, as + may a plethora of typical administrative duties such as: user management, group management, share and + printer management, file and printer migration, security identifier management, and so on. + + + + The over-all picture should be clear now, the net command plays a central role + on the Samba-3 stage. This role will continue to be developed. The inclusion of this chapter is + evidence of its importance, one that has grown in complexity to the point that it is no longer considered + prudent to cover its use fully in the on-line UNIX man pages. + + + + + + + Administrative Tasks And Methods + + + Stuff goes here - this is a work in progress. + + + + UNIX and Windows Group Management + + + More stuff. + + + + Create, Change, Delete Group Accounts + + + + + + + + Manipulating Group Memberships + + + + + + + + + + + UNIX and Windows User Management + + + + + + + + Administering User Rights and Privileges + + + + + + + + Managing Trust Relationships + + + + + + Machine Trust Accounts + + + + + + + + Inter-Domain Trusts + + + + + + + + + + Managing Security Identifiers (SIDS) + + + + + + + + Share Management + + + + + + Creating, Editing, and Removing Shares + + + + + + + + Creating and Changing Share ACLs + + + + + + + + Migration of Files Across Servers + + + + + + + + + + Controlling Open Files + + + + + + + + Session and Connection Management + + + + + + + + Printers and ADS + + + + + + + + Manipulating the Samba Cache + + + + + + + + Other Miscellaneous Operations + + + + + diff --git a/docs/Samba-HOWTO-Collection/index.xml b/docs/Samba-HOWTO-Collection/index.xml index a8101082680..7ccbb834d36 100644 --- a/docs/Samba-HOWTO-Collection/index.xml +++ b/docs/Samba-HOWTO-Collection/index.xml @@ -97,8 +97,8 @@ The chapters in this part each cover specific Samba features. - +