mirror of
https://github.com/samba-team/samba.git
synced 2025-01-11 05:18:09 +03:00
1af74785f3
* regenerate the docs * add some files from SAMBA_3_0
566 lines
13 KiB
HTML
566 lines
13 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML
|
|
><HEAD
|
|
><TITLE
|
|
>Samba and other CIFS clients</TITLE
|
|
><META
|
|
NAME="GENERATOR"
|
|
CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
|
|
"><LINK
|
|
REL="HOME"
|
|
TITLE="SAMBA Project Documentation"
|
|
HREF="samba-howto-collection.html"><LINK
|
|
REL="UP"
|
|
TITLE="Appendixes"
|
|
HREF="appendixes.html"><LINK
|
|
REL="PREVIOUS"
|
|
TITLE="Portability"
|
|
HREF="portability.html"><LINK
|
|
REL="NEXT"
|
|
TITLE="Reporting Bugs"
|
|
HREF="bugreport.html"></HEAD
|
|
><BODY
|
|
CLASS="CHAPTER"
|
|
BGCOLOR="#FFFFFF"
|
|
TEXT="#000000"
|
|
LINK="#0000FF"
|
|
VLINK="#840084"
|
|
ALINK="#0000FF"
|
|
><DIV
|
|
CLASS="NAVHEADER"
|
|
><TABLE
|
|
SUMMARY="Header navigation table"
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TH
|
|
COLSPAN="3"
|
|
ALIGN="center"
|
|
>SAMBA Project Documentation</TH
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="left"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="portability.html"
|
|
ACCESSKEY="P"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="80%"
|
|
ALIGN="center"
|
|
VALIGN="bottom"
|
|
></TD
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="right"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="bugreport.html"
|
|
ACCESSKEY="N"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"></DIV
|
|
><DIV
|
|
CLASS="CHAPTER"
|
|
><H1
|
|
><A
|
|
NAME="OTHER-CLIENTS">Chapter 24. Samba and other CIFS clients</H1
|
|
><P
|
|
>This chapter contains client-specific information.</P
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="AEN3199">24.1. Macintosh clients?</H1
|
|
><P
|
|
>Yes. <A
|
|
HREF="http://www.thursby.com/"
|
|
TARGET="_top"
|
|
>Thursby</A
|
|
> now have a CIFS Client / Server called DAVE - see</P
|
|
><P
|
|
>They test it against Windows 95, Windows NT and samba for
|
|
compatibility issues. At the time of writing, DAVE was at version
|
|
1.0.1. The 1.0.0 to 1.0.1 update is available as a free download from
|
|
the Thursby web site (the speed of finder copies has been greatly
|
|
enhanced, and there are bug-fixes included).</P
|
|
><P
|
|
>
|
|
Alternatives - There are two free implementations of AppleTalk for
|
|
several kinds of UNIX machnes, and several more commercial ones.
|
|
These products allow you to run file services and print services
|
|
natively to Macintosh users, with no additional support required on
|
|
the Macintosh. The two free omplementations are
|
|
<A
|
|
HREF="http://www.umich.edu/~rsug/netatalk/"
|
|
TARGET="_top"
|
|
>Netatalk</A
|
|
>, and
|
|
<A
|
|
HREF="http://www.cs.mu.oz.au/appletalk/atalk.html"
|
|
TARGET="_top"
|
|
>CAP</A
|
|
>.
|
|
What Samba offers MS
|
|
Windows users, these packages offer to Macs. For more info on these
|
|
packages, Samba, and Linux (and other UNIX-based systems) see
|
|
<A
|
|
HREF="http://www.eats.com/linux_mac_win.html"
|
|
TARGET="_top"
|
|
>http://www.eats.com/linux_mac_win.html</A
|
|
></P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="AEN3208">24.2. OS2 Client</H1
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3210">24.2.1. How can I configure OS/2 Warp Connect or
|
|
OS/2 Warp 4 as a client for Samba?</H2
|
|
><P
|
|
>A more complete answer to this question can be
|
|
found on <A
|
|
HREF="http://carol.wins.uva.nl/~leeuw/samba/warp.html"
|
|
TARGET="_top"
|
|
> http://carol.wins.uva.nl/~leeuw/samba/warp.html</A
|
|
>.</P
|
|
><P
|
|
>Basically, you need three components:</P
|
|
><P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
>The File and Print Client ('IBM Peer')
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>TCP/IP ('Internet support')
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>The "NetBIOS over TCP/IP" driver ('TCPBEUI')
|
|
</P
|
|
></LI
|
|
></UL
|
|
><P
|
|
>Installing the first two together with the base operating
|
|
system on a blank system is explained in the Warp manual. If Warp
|
|
has already been installed, but you now want to install the
|
|
networking support, use the "Selective Install for Networking"
|
|
object in the "System Setup" folder.</P
|
|
><P
|
|
>Adding the "NetBIOS over TCP/IP" driver is not described
|
|
in the manual and just barely in the online documentation. Start
|
|
MPTS.EXE, click on OK, click on "Configure LAPS" and click
|
|
on "IBM OS/2 NETBIOS OVER TCP/IP" in 'Protocols'. This line
|
|
is then moved to 'Current Configuration'. Select that line,
|
|
click on "Change number" and increase it from 0 to 1. Save this
|
|
configuration.</P
|
|
><P
|
|
>If the Samba server(s) is not on your local subnet, you
|
|
can optionally add IP names and addresses of these servers
|
|
to the "Names List", or specify a WINS server ('NetBIOS
|
|
Nameserver' in IBM and RFC terminology). For Warp Connect you
|
|
may need to download an update for 'IBM Peer' to bring it on
|
|
the same level as Warp 4. See the webpage mentioned above.</P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3225">24.2.2. How can I configure OS/2 Warp 3 (not Connect),
|
|
OS/2 1.2, 1.3 or 2.x for Samba?</H2
|
|
><P
|
|
>You can use the free Microsoft LAN Manager 2.2c Client
|
|
for OS/2 from
|
|
<A
|
|
HREF="ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/"
|
|
TARGET="_top"
|
|
> ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/</A
|
|
>.
|
|
See <A
|
|
HREF="http://carol.wins.uva.nl/~leeuw/lanman.html"
|
|
TARGET="_top"
|
|
> http://carol.wins.uva.nl/~leeuw/lanman.html</A
|
|
> for
|
|
more information on how to install and use this client. In
|
|
a nutshell, edit the file \OS2VER in the root directory of
|
|
the OS/2 boot partition and add the lines:</P
|
|
><P
|
|
><PRE
|
|
CLASS="PROGRAMLISTING"
|
|
> 20=setup.exe
|
|
20=netwksta.sys
|
|
20=netvdd.sys
|
|
</PRE
|
|
></P
|
|
><P
|
|
>before you install the client. Also, don't use the
|
|
included NE2000 driver because it is buggy. Try the NE2000
|
|
or NS2000 driver from
|
|
<A
|
|
HREF="ftp://ftp.cdrom.com/pub/os2/network/ndis/"
|
|
TARGET="_top"
|
|
> ftp://ftp.cdrom.com/pub/os2/network/ndis/</A
|
|
> instead.
|
|
</P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3234">24.2.3. Are there any other issues when OS/2 (any version)
|
|
is used as a client?</H2
|
|
><P
|
|
>When you do a NET VIEW or use the "File and Print
|
|
Client Resource Browser", no Samba servers show up. This can
|
|
be fixed by a patch from <A
|
|
HREF="http://carol.wins.uva.nl/~leeuw/samba/fix.html"
|
|
TARGET="_top"
|
|
> http://carol.wins.uva.nl/~leeuw/samba/fix.html</A
|
|
>.
|
|
The patch will be included in a later version of Samba. It also
|
|
fixes a couple of other problems, such as preserving long
|
|
filenames when objects are dragged from the Workplace Shell
|
|
to the Samba server. </P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3238">24.2.4. How do I get printer driver download working
|
|
for OS/2 clients?</H2
|
|
><P
|
|
>First, create a share called [PRINTDRV] that is
|
|
world-readable. Copy your OS/2 driver files there. Note
|
|
that the .EA_ files must still be separate, so you will need
|
|
to use the original install files, and not copy an installed
|
|
driver from an OS/2 system.</P
|
|
><P
|
|
>Install the NT driver first for that printer. Then,
|
|
add to your smb.conf a parameter, os2 driver map =
|
|
<TT
|
|
CLASS="REPLACEABLE"
|
|
><I
|
|
>filename</I
|
|
></TT
|
|
>". Then, in the file
|
|
specified by <TT
|
|
CLASS="REPLACEABLE"
|
|
><I
|
|
>filename</I
|
|
></TT
|
|
>, map the
|
|
name of the NT driver name to the OS/2 driver name as
|
|
follows:</P
|
|
><P
|
|
><B
|
|
CLASS="COMMAND"
|
|
>nt driver name = os2 "driver
|
|
name"."device name"</B
|
|
>, e.g.:
|
|
HP LaserJet 5L = LASERJET.HP LaserJet 5L</P
|
|
><P
|
|
>You can have multiple drivers mapped in this file.</P
|
|
><P
|
|
>If you only specify the OS/2 driver name, and not the
|
|
device name, the first attempt to download the driver will
|
|
actually download the files, but the OS/2 client will tell
|
|
you the driver is not available. On the second attempt, it
|
|
will work. This is fixed simply by adding the device name
|
|
to the mapping, after which it will work on the first attempt.
|
|
</P
|
|
></DIV
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="AEN3248">24.3. Windows for Workgroups</H1
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3250">24.3.1. Use latest TCP/IP stack from Microsoft</H2
|
|
><P
|
|
>Use the latest TCP/IP stack from microsoft if you use Windows
|
|
for workgroups.</P
|
|
><P
|
|
>The early TCP/IP stacks had lots of bugs.</P
|
|
><P
|
|
>
|
|
Microsoft has released an incremental upgrade to their TCP/IP 32-Bit
|
|
VxD drivers. The latest release can be found on their ftp site at
|
|
ftp.microsoft.com, located in /peropsys/windows/public/tcpip/wfwt32.exe.
|
|
There is an update.txt file there that describes the problems that were
|
|
fixed. New files include WINSOCK.DLL, TELNET.EXE, WSOCK.386, VNBT.386,
|
|
WSTCP.386, TRACERT.EXE, NETSTAT.EXE, and NBTSTAT.EXE.</P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3255">24.3.2. Delete .pwl files after password change</H2
|
|
><P
|
|
>WfWg does a lousy job with passwords. I find that if I change my
|
|
password on either the unix box or the PC the safest thing to do is to
|
|
delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password.</P
|
|
><P
|
|
>
|
|
If you don't do this you may find that WfWg remembers and uses the old
|
|
password, even if you told it a new one.</P
|
|
><P
|
|
>
|
|
Often WfWg will totally ignore a password you give it in a dialog box.</P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3260">24.3.3. Configure WfW password handling</H2
|
|
><P
|
|
>There is a program call admincfg.exe
|
|
on the last disk (disk 8) of the WFW 3.11 disk set. To install it
|
|
type EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE Then add an icon
|
|
for it via the "Progam Manager" "New" Menu. This program allows you
|
|
to control how WFW handles passwords. ie disable Password Caching etc
|
|
for use with <B
|
|
CLASS="COMMAND"
|
|
>security = user</B
|
|
></P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN3264">24.3.4. Case handling of passwords</H2
|
|
><P
|
|
>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <A
|
|
HREF="smb.conf.5.html"
|
|
TARGET="_top"
|
|
>smb.conf(5)</A
|
|
> information on <B
|
|
CLASS="COMMAND"
|
|
>password level</B
|
|
> to specify what characters samba should try to uppercase when checking.</P
|
|
></DIV
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="AEN3269">24.4. Windows '95/'98</H1
|
|
><P
|
|
>When using Windows 95 OEM SR2 the following updates are recommended where Samba
|
|
is being used. Please NOTE that the above change will affect you once these
|
|
updates have been installed.</P
|
|
><P
|
|
>
|
|
There are more updates than the ones mentioned here. You are referred to the
|
|
Microsoft Web site for all currently available updates to your specific version
|
|
of Windows 95.</P
|
|
><P
|
|
></P
|
|
><OL
|
|
TYPE="1"
|
|
><LI
|
|
><P
|
|
>Kernel Update: KRNLUPD.EXE</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>Ping Fix: PINGUPD.EXE</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>RPC Update: RPCRTUPD.EXE</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>TCP/IP Update: VIPUPD.EXE</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>Redirector Update: VRDRUPD.EXE</P
|
|
></LI
|
|
></OL
|
|
><P
|
|
>Also, if using MS OutLook it is desirable to install the OLEUPD.EXE fix. This
|
|
fix may stop your machine from hanging for an extended period when exiting
|
|
OutLook and you may also notice a significant speedup when accessing network
|
|
neighborhood services.</P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="AEN3285">24.5. Windows 2000 Service Pack 2</H1
|
|
><P
|
|
>
|
|
There are several annoyances with Windows 2000 SP2. One of which
|
|
only appears when using a Samba server to host user profiles
|
|
to Windows 2000 SP2 clients in a Windows domain. This assumes
|
|
that Samba is a member of the domain, but the problem will
|
|
likely occur if it is not.</P
|
|
><P
|
|
>
|
|
In order to server profiles successfully to Windows 2000 SP2
|
|
clients (when not operating as a PDC), Samba must have
|
|
<B
|
|
CLASS="COMMAND"
|
|
>nt acl support = no</B
|
|
>
|
|
added to the file share which houses the roaming profiles.
|
|
If this is not done, then the Windows 2000 SP2 client will
|
|
complain about not being able to access the profile (Access
|
|
Denied) and create multiple copies of it on disk (DOMAIN.user.001,
|
|
DOMAIN.user.002, etc...). See the
|
|
<A
|
|
HREF="smb.conf.5.html"
|
|
TARGET="_top"
|
|
>smb.conf(5)</A
|
|
> man page
|
|
for more details on this option. Also note that the
|
|
<B
|
|
CLASS="COMMAND"
|
|
>nt acl support</B
|
|
> parameter was formally a global parameter in
|
|
releases prior to Samba 2.2.2.</P
|
|
><P
|
|
>
|
|
The following is a minimal profile share:</P
|
|
><P
|
|
><PRE
|
|
CLASS="PROGRAMLISTING"
|
|
> [profile]
|
|
path = /export/profile
|
|
create mask = 0600
|
|
directory mask = 0700
|
|
nt acl support = no
|
|
read only = no</PRE
|
|
></P
|
|
><P
|
|
>The reason for this bug is that the Win2k SP2 client copies
|
|
the security descriptor for the profile which contains
|
|
the Samba server's SID, and not the domain SID. The client
|
|
compares the SID for SAMBA\user and realizes it is
|
|
different that the one assigned to DOMAIN\user. Hence the reason
|
|
for the "access denied" message.</P
|
|
><P
|
|
>By disabling the <B
|
|
CLASS="COMMAND"
|
|
>nt acl support</B
|
|
> parameter, Samba will send
|
|
the Win2k client a response to the QuerySecurityDescriptor
|
|
trans2 call which causes the client to set a default ACL
|
|
for the profile. This default ACL includes </P
|
|
><P
|
|
><B
|
|
CLASS="COMMAND"
|
|
>DOMAIN\user "Full Control"</B
|
|
></P
|
|
><P
|
|
><SPAN
|
|
CLASS="emphasis"
|
|
><I
|
|
CLASS="EMPHASIS"
|
|
>NOTE : This bug does not occur when using winbind to
|
|
create accounts on the Samba host for Domain users.</I
|
|
></SPAN
|
|
></P
|
|
></DIV
|
|
></DIV
|
|
><DIV
|
|
CLASS="NAVFOOTER"
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"><TABLE
|
|
SUMMARY="Footer navigation table"
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="portability.html"
|
|
ACCESSKEY="P"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="samba-howto-collection.html"
|
|
ACCESSKEY="H"
|
|
>Home</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="bugreport.html"
|
|
ACCESSKEY="N"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
>Portability</TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="appendixes.html"
|
|
ACCESSKEY="U"
|
|
>Up</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
>Reporting Bugs</TD
|
|
></TR
|
|
></TABLE
|
|
></DIV
|
|
></BODY
|
|
></HTML
|
|
> |