diff --git a/docs/Samba3-HOWTO/TOSHARG-AccessControls.xml b/docs/Samba3-HOWTO/TOSHARG-AccessControls.xml index 164356f5c42..f8bce9bc1c8 100644 --- a/docs/Samba3-HOWTO/TOSHARG-AccessControls.xml +++ b/docs/Samba3-HOWTO/TOSHARG-AccessControls.xml @@ -1576,10 +1576,10 @@ are examples recently taken from the mailing list. Set the ownership to whatever public user and group you want -&prompt;find `directory_name' -type d -exec chown user.group {}\; +&prompt;find `directory_name' -type d -exec chown user:group {}\; &prompt;find `directory_name' -type d -exec chmod 1775 {}\; &prompt;find `directory_name' -type f -exec chmod 0775 {}\; -&prompt;find `directory_name' -type f -exec chown user.group {}\; +&prompt;find `directory_name' -type f -exec chown user:group {}\; @@ -1593,7 +1593,7 @@ are examples recently taken from the mailing list. Directory is /foodbar: -&prompt;chown jack.engr /foodbar +&prompt;chown jack:engr /foodbar diff --git a/docs/Samba3-HOWTO/TOSHARG-AdvancedNetworkAdmin.xml b/docs/Samba3-HOWTO/TOSHARG-AdvancedNetworkAdmin.xml index 71d5f154d68..9930b4a7dea 100644 --- a/docs/Samba3-HOWTO/TOSHARG-AdvancedNetworkAdmin.xml +++ b/docs/Samba3-HOWTO/TOSHARG-AdvancedNetworkAdmin.xml @@ -416,7 +416,8 @@ See the documentation in the /dev/null | awk 'NF > 6 {print $1}' | sort | uniq -d) +RESULT=$(smbstatus -S -u $1 2> /dev/null | awk 'NF \ + > 6 {print $1}' | sort | uniq -d) if [ "X${RESULT}" == X ]; then exit 0 diff --git a/docs/Samba3-HOWTO/TOSHARG-CUPS-printing.xml b/docs/Samba3-HOWTO/TOSHARG-CUPS-printing.xml index 188c53258a6..ef5289d11ed 100644 --- a/docs/Samba3-HOWTO/TOSHARG-CUPS-printing.xml +++ b/docs/Samba3-HOWTO/TOSHARG-CUPS-printing.xml @@ -4430,7 +4430,7 @@ directly to the pstoraster stage). -From CUPS 1.1.16 onward, you can use the CUPS PostScript driver for Windows NT/200x/XP +From CUPS 1.1.16 and later releases, you can use the CUPS PostScript driver for Windows NT/200x/XP clients (which is tagged in the download area of http://www.cups.org/ as the cups-samba-1.1.16.tar.gz package). It does not work for Windows 9x/Me clients, but it guarantees: @@ -4871,7 +4871,7 @@ cupsomatic show how CUPS handles print jobs.
Filtering Chain with cupsomatic - cups2 + cups2
@@ -4923,14 +4923,12 @@ cupsomatic show how CUPS handles print jobs. message while PPD file is present. What might the problem be? - Have you enabled printer sharing on CUPS? This means, - do you have a <Location - /printers>....</Location> section in CUPS - server's cupsd.conf that does not deny access to - the host you run cupsaddsmb from? It could be - an issue if you use cupsaddsmb remotely, or if you use it with a - parameter: cupsaddsmb -H - sambaserver -h cupsserver -v printername. + + Have you enabled printer sharing on CUPS? This means, do you have a <Location + /printers>....</Location> section in CUPS server's cupsd.conf that + does not deny access to the host you run cupsaddsmb from? It could be an + issue if you use cupsaddsmb remotely, or if you use it with a parameter: + cupsaddsmb -H sambaserver -h cupsserver -v printername. Is your TempDir directive in @@ -5227,7 +5225,7 @@ Printing Overview diagram.
CUPS Printing Overview. - a_small + a_small
diff --git a/docs/Samba3-HOWTO/TOSHARG-DomainMember.xml b/docs/Samba3-HOWTO/TOSHARG-DomainMember.xml index 2464d5a9948..48d8899b963 100644 --- a/docs/Samba3-HOWTO/TOSHARG-DomainMember.xml +++ b/docs/Samba3-HOWTO/TOSHARG-DomainMember.xml @@ -250,7 +250,8 @@ This can be done using vipw or another adduser that is normally used to create new UNIX accounts. The following is an example for a Linux-based Samba server: -&rootprompt;/usr/sbin/useradd -g machines -d /var/lib/nobody -c "machine nickname" \ +&rootprompt;/usr/sbin/useradd -g machines -d /var/lib/nobody \ + -c "machine nickname" \ -s /bin/false machine_name$ &rootprompt;passwd -l machine_name$ @@ -382,16 +383,9 @@ this platform. -Further information about these tools may be obtained from the following locations: - - - - -Knowledge -Base article 173673 -Knowledge -Base article 172540 - +Further information about these tools may be obtained from Knowledge Base articles +173673, and +172540 @@ -546,7 +540,7 @@ with the version of Windows. - Joining a Samba client to a domain is documented in the next section. + Joining a Samba client to a domain is documented in the next section. diff --git a/docs/Samba3-HOWTO/TOSHARG-Group-Mapping.xml b/docs/Samba3-HOWTO/TOSHARG-Group-Mapping.xml index fec70e5cfbf..e97b4d7606c 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Group-Mapping.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Group-Mapping.xml @@ -849,7 +849,7 @@ manually before putting it into active service. - Adding <emphasis>Domain Users</emphasis> to the <literal>Power Users</literal> Group + Adding Domain Users to the Workstation Power Users Group What must I do to add domain users to the Power Users group? diff --git a/docs/Samba3-HOWTO/TOSHARG-IDMAP.xml b/docs/Samba3-HOWTO/TOSHARG-IDMAP.xml index 19820d1679a..82dda47f6bd 100644 --- a/docs/Samba3-HOWTO/TOSHARG-IDMAP.xml +++ b/docs/Samba3-HOWTO/TOSHARG-IDMAP.xml @@ -172,10 +172,10 @@ on Server Types and Security Modes. SessionSetupAndX /etc/passwd - For example, if an incoming SessionSetupAndX request is owned by the user - BERYLIUM\WambatW, a system call will be made to look up - the user WambatW in the /etc/passwd - file. + For example, when the user BERYLIUM\WambatW tries to open a + connection to a Samba server the incoming SessionSetupAndX request will make a + system call to look up the user WambatW in the + /etc/passwd file. @@ -390,9 +390,9 @@ on Server Types and Security Modes. RID base For example, if a user has a UID of 4321, and the algorithmic RID base has a value of 1000, the RID will - be 1000 + (2 x 4321) = 9642. Thus, if the domain SID is - S-1-5-21-89238497-92787123-12341112, the resulting SID is - S-1-5-21-89238497-92787123-12341112-9642. + be 1000 + (2 x 4321) = 9642. Thus, if the domain SID is + S-1-5-21-89238497-92787123-12341112, the resulting SID is + S-1-5-21-89238497-92787123-12341112-9642. diff --git a/docs/Samba3-HOWTO/TOSHARG-InterdomainTrusts.xml b/docs/Samba3-HOWTO/TOSHARG-InterdomainTrusts.xml index 70e9814331c..89b24a98e27 100644 --- a/docs/Samba3-HOWTO/TOSHARG-InterdomainTrusts.xml +++ b/docs/Samba3-HOWTO/TOSHARG-InterdomainTrusts.xml @@ -528,12 +528,11 @@ distributed trusted domains. Browsing from a machine in a trusted Windows 200x domain to a Windows 200x member of a trusting Samba domain, I get the following error: - - -The system detected a possible attempt to compromise security. Please ensure that -you can contact the server that authenticated you. +The system detected a possible attempt to compromise security. Please +ensure that you can contact the server that authenticated you. + The event logs on the box I'm trying to connect to have entries regarding group diff --git a/docs/Samba3-HOWTO/TOSHARG-NetworkBrowsing.xml b/docs/Samba3-HOWTO/TOSHARG-NetworkBrowsing.xml index 496ec457a20..3c8321723c4 100644 --- a/docs/Samba3-HOWTO/TOSHARG-NetworkBrowsing.xml +++ b/docs/Samba3-HOWTO/TOSHARG-NetworkBrowsing.xml @@ -491,7 +491,7 @@ and MS DNS. _ldap._tcp.Site.gc._msdcs.DomainTree - Used by MS Windows clients to locate site configuration-dependent global catalog server. + Used by Microsoft Windows clients to locate the site configuration-dependent global catalog server. diff --git a/docs/Samba3-HOWTO/TOSHARG-PDC.xml b/docs/Samba3-HOWTO/TOSHARG-PDC.xml index dc090d876fc..3a85e336459 100644 --- a/docs/Samba3-HOWTO/TOSHARG-PDC.xml +++ b/docs/Samba3-HOWTO/TOSHARG-PDC.xml @@ -36,7 +36,7 @@ network clients.
An Example Domain. - domain + domain
diff --git a/docs/Samba3-HOWTO/TOSHARG-Passdb.xml b/docs/Samba3-HOWTO/TOSHARG-Passdb.xml index 4ff0e842de0..191eb3ab790 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Passdb.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Passdb.xml @@ -230,6 +230,7 @@ Samba-3 introduces a number of new password backend capabilities. MySQL-based SAM database backend +mysqlsam It is expected that the MySQL-based SAM will be very popular in some corners. This database backend will be of considerable interest to sites that want to leverage existing MySQL technology. @@ -242,7 +243,7 @@ Samba-3 introduces a number of new password backend capabilities. PostgreSQL database mysqlsam - Stores user information in a PostgreSQL database. This backend is largely undocumented at + Makes use of a PostgreSQL database to store account information. This backend is largely undocumented at the moment, though its configuration is very similar to that of the mysqlsam backend. diff --git a/docs/Samba3-HOWTO/TOSHARG-Printing.xml b/docs/Samba3-HOWTO/TOSHARG-Printing.xml index 7b82190398a..5446268396a 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Printing.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Printing.xml @@ -304,9 +304,8 @@ with settings shown in the example above: -You can easily verify which settings were implicitly added by Samba's -default behavior. Remember: it may -be important in your future dealings with Samba. +You can easily verify which settings were implicitly added by Samba's default behavior. Remember: it +may be important in your future dealings with Samba. @@ -1253,13 +1252,17 @@ site). See [print\$] Example. -[print\$] Example +[print$] Example members of the ntadmin group should be able to add drivers and set printer properties. root is implicitly always a 'printer admin'. @ntadmin +... + +... + Printer Driver Download Area /etc/samba/drivers @@ -1278,10 +1281,11 @@ Of course, you also need to ensure that the directory named by the -[print$] Section Parameters +[print$] Stanza Parameters special section +special stanza potential printer driver download local print driver @@ -1308,8 +1312,11 @@ The following parameters are frequently needed in this share section: no Makes the share invisible to clients from the - Network Neighborhood. However, you can still mount it from any client - using the net use g:\\sambaserver\print$ command in a DOS box or the + Network Neighborhood. By excuting from a cmd shell: + +&dosprompt; net use g:\\sambaserver\print$ + + you can still mount it from any client. This can also be done from the Connect network drive menu> from Windows Explorer. @@ -3231,13 +3238,12 @@ form of a one-way hash in a file named /etc/shadow), with t authenticate against Samba. Samba does not know the UNIX password. Root access to Samba resources requires that a Samba account for root must first be created. This is done with the smbpasswd command as follows: - - - + &rootprompt; smbpasswd -a root New SMB password: secret Retype new SMB password: secret - + + @@ -3246,7 +3252,18 @@ Retype new SMB password: secret Do not use the existing UNIX print system spool directory for the Samba spool directory. It may seem -convenient and a savings of space, but it only leads to problems. The two must be separate. +convenient and a savings of space, but it only leads to problems. The two must be separate. The UNIX/Linux +system print spool directory (e.g., /var/spool/cups) is typically owned by a +non-privileged user such as cups or lp. Additionally. the permissions on +the spool directory are typically restrictive to the owner and/or group. On the other hand, the Samba +spool directory must be world writable, and should have the 't' bit set to ensure that only a temporary +spool file owner can change or delete the file. + + + +Depending on the type of print spooling system in use on the UNIX/Linux host, files that the spool +management application finds and that are not currently part of job queue that it is managing can be deleted. +This may explain the observation that jobs are spooled (by Samba) into this directory and just disappear. diff --git a/docs/Samba3-HOWTO/TOSHARG-ProfileMgmt.xml b/docs/Samba3-HOWTO/TOSHARG-ProfileMgmt.xml index d5cc6e93aac..c4915640165 100644 --- a/docs/Samba3-HOWTO/TOSHARG-ProfileMgmt.xml +++ b/docs/Samba3-HOWTO/TOSHARG-ProfileMgmt.xml @@ -142,7 +142,7 @@ specified \\%L\%U for . -Mixed Windows 9x/Me and Windows NT4/200x User Profiles +Mixed Windows Windows 9x/Me and NT4/200x User Profiles You can support profiles for Windows 9x and Windows NT clients by setting both the diff --git a/docs/Samba3-HOWTO/TOSHARG-VFS.xml b/docs/Samba3-HOWTO/TOSHARG-VFS.xml index 78fecb3a542..1ed9cddd83e 100644 --- a/docs/Samba3-HOWTO/TOSHARG-VFS.xml +++ b/docs/Samba3-HOWTO/TOSHARG-VFS.xml @@ -525,8 +525,11 @@ shown in the smb.conf with multiple VFS modulesmkdir permissions chmod - Now we need to prepare the directory with something like mkdir -p /data/shadow_share or - whatever you want to name your shadow copy enabled Samba share. Make sure you set the permissions such that + Now we need to prepare the directory with something like + +&rootprompt; mkdir -p /data/shadow_share + + or whatever you want to name your shadow copy enabled Samba share. Make sure you set the permissions such that you can use it. If in doubt, use chmod 777 /data/shadow_share and tighten the permissions once you get things working. @@ -589,7 +592,8 @@ xfs_freeze -f /data/shadow_share/ lvcreate -L10M -s -n $SNAPNAME /dev/shadowvol/sh_test xfs_freeze -u /data/shadow_share/ mkdir /data/shadow_share/@GMT-$SNAPNAME -mount /dev/shadowvol/$SNAPNAME /data/shadow_share/@GMT-$SNAPNAME -onouuid,ro +mount /dev/shadowvol/$SNAPNAME \ + /data/shadow_share/@GMT-$SNAPNAME -onouuid,ro Note that the script does not handle other things like remounting snapshots on reboot. diff --git a/docs/Samba3-HOWTO/TOSHARG-Winbind.xml b/docs/Samba3-HOWTO/TOSHARG-Winbind.xml index af2e3d9af31..6637a32715c 100644 --- a/docs/Samba3-HOWTO/TOSHARG-Winbind.xml +++ b/docs/Samba3-HOWTO/TOSHARG-Winbind.xml @@ -25,7 +25,6 @@
jtrostel@snapserver.com
- &author.jelmer; &author.jht; June 15, 2005