mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
188 lines
18 KiB
HTML
188 lines
18 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
|
||
<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 38. Samba and other CIFS clients</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="Part VI. Appendixes"><link rel="previous" href="Portability.html" title="Chapter 37. Portability"><link rel="next" href="speed.html" title="Chapter 39. Samba Performance Tuning"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 38. Samba and other CIFS clients</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Portability.html">Prev</a> </td><th width="60%" align="center">Part VI. Appendixes</th><td width="20%" align="right"> <a accesskey="n" href="speed.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter 38. Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Other-Clients.html#id3013776">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3013848">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013855">How can I configure OS/2 Warp Connect or
|
||
OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3013471">How can I configure OS/2 Warp 3 (not Connect),
|
||
OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3013530">How do I get printer driver download working
|
||
for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013628">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013090">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3013179">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3013210">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3013255">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3013285">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3013303">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013349">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3014379">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3014403">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3014514">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013776"></a>Macintosh clients?</h2></div></div><div></div></div><p>
|
||
Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a>
|
||
</p><p>
|
||
They test it against Windows 95, Windows NT and samba for
|
||
compatibility issues. At the time of writing, DAVE was at version
|
||
1.0.1. The 1.0.0 to 1.0.1 update is available as a free download from
|
||
the Thursby web site (the speed of finder copies has been greatly
|
||
enhanced, and there are bug-fixes included).
|
||
</p><p>
|
||
Alternatives - There are two free implementations of AppleTalk for
|
||
several kinds of UNIX machines, and several more commercial ones.
|
||
These products allow you to run file services and print services
|
||
natively to Macintosh users, with no additional support required on
|
||
the Macintosh. The two free implementations are
|
||
<a href="http://www.umich.edu/~rsug/netatalk/" target="_top">Netatalk</a>, and
|
||
<a href="http://www.cs.mu.oz.au/appletalk/atalk.html" target="_top">CAP</a>.
|
||
What Samba offers MS
|
||
Windows users, these packages offer to Macs. For more info on these
|
||
packages, Samba, and Linux (and other UNIX-based systems) see
|
||
<a href="http://www.eats.com/linux_mac_win.html" target="_top">http://www.eats.com/linux_mac_win.html</a>
|
||
</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013848"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013855"></a>How can I configure OS/2 Warp Connect or
|
||
OS/2 Warp 4 as a client for Samba?</h3></div></div><div></div></div><p>A more complete answer to this question can be
|
||
found on <a href="http://carol.wins.uva.nl/~leeuw/samba/warp.html" target="_top">
|
||
http://carol.wins.uva.nl/~leeuw/samba/warp.html</a>.</p><p>Basically, you need three components:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The File and Print Client ('IBM Peer')</td></tr><tr><td>TCP/IP ('Internet support') </td></tr><tr><td>The "NetBIOS over TCP/IP" driver ('TCPBEUI')</td></tr></table><p>Installing the first two together with the base operating
|
||
system on a blank system is explained in the Warp manual. If Warp
|
||
has already been installed, but you now want to install the
|
||
networking support, use the "Selective Install for Networking"
|
||
object in the "System Setup" folder.</p><p>Adding the "NetBIOS over TCP/IP" driver is not described
|
||
in the manual and just barely in the online documentation. Start
|
||
MPTS.EXE, click on OK, click on "Configure LAPS" and click
|
||
on "IBM OS/2 NETBIOS OVER TCP/IP" in 'Protocols'. This line
|
||
is then moved to 'Current Configuration'. Select that line,
|
||
click on "Change number" and increase it from 0 to 1. Save this
|
||
configuration.</p><p>If the Samba server(s) is not on your local subnet, you
|
||
can optionally add IP names and addresses of these servers
|
||
to the "Names List", or specify a WINS server ('NetBIOS
|
||
Nameserver' in IBM and RFC terminology). For Warp Connect you
|
||
may need to download an update for 'IBM Peer' to bring it on
|
||
the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013471"></a>How can I configure OS/2 Warp 3 (not Connect),
|
||
OS/2 1.2, 1.3 or 2.x for Samba?</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client
|
||
for OS/2 from
|
||
<a href="ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/" target="_top">
|
||
ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/</a>.
|
||
See <a href="http://carol.wins.uva.nl/~leeuw/lanman.html" target="_top">
|
||
http://carol.wins.uva.nl/~leeuw/lanman.html</a> for
|
||
more information on how to install and use this client. In
|
||
a nutshell, edit the file \OS2VER in the root directory of
|
||
the OS/2 boot partition and add the lines:</p><pre class="programlisting">
|
||
20=setup.exe
|
||
20=netwksta.sys
|
||
20=netvdd.sys
|
||
</pre><p>before you install the client. Also, don't use the
|
||
included NE2000 driver because it is buggy. Try the NE2000
|
||
or NS2000 driver from
|
||
<a href="ftp://ftp.cdrom.com/pub/os2/network/ndis/" target="_top">
|
||
ftp://ftp.cdrom.com/pub/os2/network/ndis/</a> instead.
|
||
</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013530"></a>How do I get printer driver download working
|
||
for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is
|
||
world-readable. Copy your OS/2 driver files there. Note
|
||
that the .EA_ files must still be separate, so you will need
|
||
to use the original install files, and not copy an installed
|
||
driver from an OS/2 system.</p><p>Install the NT driver first for that printer. Then,
|
||
add to your <tt class="filename">smb.conf</tt> a parameter, <i class="parameter"><tt>os2 driver map =
|
||
<i class="replaceable"><tt>filename</tt></i></tt></i>. Then, in the file
|
||
specified by <i class="replaceable"><tt>filename</tt></i>, map the
|
||
name of the NT driver name to the OS/2 driver name as
|
||
follows:</p><p><i class="parameter"><tt><i class="replaceable"><tt>nt driver name</tt></i> = <i class="replaceable"><tt>os2 driver name</tt></i>.<i class="replaceable"><tt>device name</tt></i></tt></i>, e.g.:</p><p><i class="parameter"><tt>
|
||
HP LaserJet 5L = LASERJET.HP LaserJet 5L</tt></i></p><p>You can have multiple drivers mapped in this file.</p><p>If you only specify the OS/2 driver name, and not the
|
||
device name, the first attempt to download the driver will
|
||
actually download the files, but the OS/2 client will tell
|
||
you the driver is not available. On the second attempt, it
|
||
will work. This is fixed simply by adding the device name
|
||
to the mapping, after which it will work on the first attempt.
|
||
</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013628"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013090"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows
|
||
for Workgroups.
|
||
</p><p>The early TCP/IP stacks had lots of bugs.</p><p>
|
||
Microsoft has released an incremental upgrade to their TCP/IP 32-Bit
|
||
VxD drivers. The latest release can be found on their ftp site at
|
||
ftp.microsoft.com, located in <tt class="filename">/peropsys/windows/public/tcpip/wfwt32.exe</tt>.
|
||
There is an update.txt file there that describes the problems that were
|
||
fixed. New files include <tt class="filename">WINSOCK.DLL</tt>,
|
||
<tt class="filename">TELNET.EXE</tt>,
|
||
<tt class="filename">WSOCK.386</tt>,
|
||
<tt class="filename">VNBT.386</tt>,
|
||
<tt class="filename">WSTCP.386</tt>,
|
||
<tt class="filename">TRACERT.EXE</tt>,
|
||
<tt class="filename">NETSTAT.EXE</tt>, and
|
||
<tt class="filename">NBTSTAT.EXE</tt>.
|
||
</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013179"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p>
|
||
WfWg does a lousy job with passwords. I find that if I change my
|
||
password on either the unix box or the PC the safest thing to do is to
|
||
delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password.
|
||
</p><p>
|
||
If you don't do this you may find that WfWg remembers and uses the old
|
||
password, even if you told it a new one.
|
||
</p><p>
|
||
Often WfWg will totally ignore a password you give it in a dialog box.
|
||
</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013210"></a>Configure WfW password handling</h3></div></div><div></div></div><p>
|
||
There is a program call admincfg.exe
|
||
on the last disk (disk 8) of the WFW 3.11 disk set. To install it
|
||
type <b class="userinput"><tt>EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE</tt></b>.
|
||
Then add an icon
|
||
for it via the <span class="application">Program Manager</span> <span class="guimenu">New</span> Menu.
|
||
This program allows you to control how WFW handles passwords. ie disable Password Caching etc
|
||
for use with <i class="parameter"><tt>security = user</tt></i>
|
||
</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013255"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013285"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find
|
||
that you have to use TCP/IP as the default protocol under
|
||
WfWg. For some reason if you leave NetBEUI as the default
|
||
it may break the print queue reporting on some systems.
|
||
It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013303"></a>Speed improvement</h3></div></div><div></div></div><p>
|
||
Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in
|
||
the <i class="parameter"><tt>[MSTCP]</tt></i> section of the
|
||
<tt class="filename">SYSTEM.INI</tt> file under WfWg to 3072 gives a
|
||
big improvement. I don't know why.
|
||
</p><p>
|
||
My own experience with DefaultRcvWindow is that I get much better
|
||
performance with a large value (16384 or larger). Other people have
|
||
reported that anything over 3072 slows things down enormously. One
|
||
person even reported a speed drop of a factor of 30 when he went from
|
||
3072 to 8192. I don't know why.
|
||
</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013349"></a>Windows '95/'98</h2></div></div><div></div></div><p>
|
||
When using Windows 95 OEM SR2 the following updates are recommended where Samba
|
||
is being used. Please NOTE that the above change will affect you once these
|
||
updates have been installed.
|
||
</p><p>
|
||
There are more updates than the ones mentioned here. You are referred to the
|
||
Microsoft Web site for all currently available updates to your specific version
|
||
of Windows 95.
|
||
</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Kernel Update: KRNLUPD.EXE</td></tr><tr><td>Ping Fix: PINGUPD.EXE</td></tr><tr><td>RPC Update: RPCRTUPD.EXE</td></tr><tr><td>TCP/IP Update: VIPUPD.EXE</td></tr><tr><td>Redirector Update: VRDRUPD.EXE</td></tr></table><p>
|
||
Also, if using <span class="application">MS Outlook</span> it is desirable to
|
||
install the <b class="command">OLEUPD.EXE</b> fix. This
|
||
fix may stop your machine from hanging for an extended period when exiting
|
||
Outlook and you may also notice a significant speedup when accessing network
|
||
neighborhood services.
|
||
</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3014379"></a>Speed improvement</h3></div></div><div></div></div><p>
|
||
Configure the win95 TCPIP registry settings to give better
|
||
performance. I use a program called <b class="command">MTUSPEED.exe</b> which I got off the
|
||
net. There are various other utilities of this type freely available.
|
||
</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014403"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p>
|
||
There are several annoyances with Windows 2000 SP2. One of which
|
||
only appears when using a Samba server to host user profiles
|
||
to Windows 2000 SP2 clients in a Windows domain. This assumes
|
||
that Samba is a member of the domain, but the problem will
|
||
likely occur if it is not.
|
||
</p><p>
|
||
In order to serve profiles successfully to Windows 2000 SP2
|
||
clients (when not operating as a PDC), Samba must have
|
||
<i class="parameter"><tt>nt acl support = no</tt></i>
|
||
added to the file share which houses the roaming profiles.
|
||
If this is not done, then the Windows 2000 SP2 client will
|
||
complain about not being able to access the profile (Access
|
||
Denied) and create multiple copies of it on disk (DOMAIN.user.001,
|
||
DOMAIN.user.002, etc...). See the
|
||
<a href="smb.conf.5.html" target="_top">smb.conf(5)</a> man page
|
||
for more details on this option. Also note that the
|
||
<i class="parameter"><tt>nt acl support</tt></i> parameter was formally a global parameter in
|
||
releases prior to Samba 2.2.2.
|
||
</p><p>
|
||
The following is a minimal profile share:
|
||
</p><pre class="programlisting">
|
||
[profile]
|
||
path = /export/profile
|
||
create mask = 0600
|
||
directory mask = 0700
|
||
nt acl support = no
|
||
read only = no
|
||
</pre><p>
|
||
The reason for this bug is that the Win2k SP2 client copies
|
||
the security descriptor for the profile which contains
|
||
the Samba server's SID, and not the domain SID. The client
|
||
compares the SID for SAMBA\user and realizes it is
|
||
different that the one assigned to DOMAIN\user. Hence the reason
|
||
for the <span class="errorname">access denied</span> message.
|
||
</p><p>
|
||
By disabling the <i class="parameter"><tt>nt acl support</tt></i> parameter, Samba will send
|
||
the Win2k client a response to the QuerySecurityDescriptor
|
||
trans2 call which causes the client to set a default ACL
|
||
for the profile. This default ACL includes
|
||
</p><p><span class="emphasis"><em>DOMAIN\user "Full Control"</em></span>></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This bug does not occur when using winbind to
|
||
create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014514"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows
|
||
NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q103765" target="_top">this Microsoft Knowledge Base article</a>.
|
||
|
||
</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Portability.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="speed.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 37. Portability </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 39. Samba Performance Tuning</td></tr></table></div></body></html>
|