1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
|
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2010-10-22 00:23+0600\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(guide:link):5
msgid "/doc/en/articles/samba-p1.xml"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):6
msgid "Introduction to Samba, Part 1"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(author:title):8
msgid "Author"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(mail:link):9
msgid "drobbins@gentoo.org"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(mail):9
msgid "Daniel Robbins"
msgstr ""
#. <author title="Editor">
#. <mail link="nightmorph@gentoo.org">Joshua Saddler</mail>
#. </author>
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(abstract):15
msgid "Samba is an incredible tool for anyone who uses both Unix and Windows. By implementing the SMB/CIFS protocol for Unix, Samba allows Unix systems to share their resources with standard Windows clients. In this introductory article, Daniel Robbins introduces you to what Samba can do. The focus will be on key concepts. (He'll step you through the setup process in his next article.) By the end of this article, you'll have a good understanding of what Samba does, and how it goes about doing it."
msgstr ""
#. The original version of this article was first published on IBM
#. developerWorks, and is property of Westtech Information Services. This document
#. is an updated version of the original article, and contains various improvements
#. made by the Gentoo Linux Documentation team
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(version):30
msgid "1.0"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(date):31
msgid "2005-10-06"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):34
msgid "Key concepts"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):36
msgid "Show me Samba"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):39
msgid "First, I'm going to show you a bunch of screenshots from one of my Windows NT boxes named kompressor. These screenshots demonstrate what a fully-configured Samba system looks like from the Windows side. They'll give you a real-world grasp of what Samba can do."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):46
msgid "I currently have three machines set up on my internal LAN:"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):51
msgid "<b>ntbox</b> (a Windows NT Workstation)"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):52
msgid "<b>freebox</b> (a FreeBSD server)"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):53
msgid "<b>kompressor</b> (the Windows NT Workstation that I use as my primary desktop)"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):59
msgid "In this environment, I use Samba extensively to share files, print, and even run Windows applications directly from freebox (Unix). Here's a screenshot showing the contents of kompressor's Network Neighborhood:"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(figure:link):66
msgid "/images/docs/l-samba-1.gif"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(figure:caption):66
msgid "kompressor's Network Neighborhood"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):68
msgid "As you can see, both ntbox and kompressor are visible, which is no surprise since they are both NT Workstations. What is rather unusual, however, is the fact that I can see freebox as well. Because freebox is running Samba, I can see it under Network Neighborhood on every Windows machinethat is part of my \"GENTOO\" Windows workgroup."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):76
msgid "Now it's time to take a look at what's \"inside\" freebox. The following window pops up after double-clicking on the freebox icon:"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(figure:link):82
msgid "/images/docs/l-samba-2.gif"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(figure:caption):82
msgid "SMB/CIFS shares on freebox"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):84
msgid "In this window you can see a bunch of what are called \"shares\". More specifically, they're called SMB/CIFS shares and contain parts of freebox's file system that are accessible through the network."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(note):90
msgid "I should mention that SMB stands for Server Message Block, the original name for the protocol used to share files on Windows. CIFS stands for the Common Internet File System, Microsoft's new acronym describing the more recent version of this protocol."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):97
msgid "On freebox, Samba has been specifically configured to create only those particular shares that you see above. The drobbins share contains the contents of my home directory. I like to store all my files on freebox (under Unix) to keep things centralized and easy to manage. One of the wonderful things about Samba is that it allows administrators to centralize the storage of user files rather than providing each user with two separate file locations for Windows and Unix."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):110
msgid "Samba printing"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):113
msgid "In addition to standard shares (which act as virtual directories), you can also see a printer share called nec. Another really great feature of Samba is that you can share printers the same way you can from any Windows machine. Nec is my NEC SuperScript 870 laser printer, which is hooked up to freebox and set up as a standard Unix lpd-based printer. Samba allows this printer to be used by Windows clients just like a standard Windows network printer would."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):122
msgid "You may be wondering how the printer driver situation is handled since the printer is running under Unix. Good question. On freebox, nec is set up as a standard, parallel port-based printer running in \"raw\" mode. In other words, any print jobs sent to nec are handed directly to the printer as is, without any filtering or data massaging."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):130
msgid "On kompressor, nec is configured as an NEC SuperScript 870 network printer. When I print to it, the local NT printer driver generates the appropriate binary data for nec, which is then automatically spooled over the network to Samba running on freebox. Samba then automatically inserts this data untouched into nec's queue, and my printer begins printing the job."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):138
msgid "I should note that unfortunately my NEC SuperScript 870 is not a Postscript printer; it uses Adobe's proprietary PrintGear technology. While my printer is not fully supported under Unix, it still works perfectly when printing from Windows (this is because all the printer-specific data is generated on the Windows side, using the Windows driver). Ironically, since GhostScript (a freely-available PostScript-compatible interpreter available for Unix) does not know how to produce PrintGear output, I can only print plain ASCII text or 300 dpi PCL4-based documents from the Unix side; but from the Windows side, the Windows NT driver allows me to print at a full 600 dpi. I don't find this cumbersome at the moment because I do most of my printing from Windows. Although in the future it would be nice to have a printer that has Postscript built-in so that I can use the printer's full functionality from Unix as well."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):156
msgid "Samba shares"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):159
msgid "OK, now it's time to move on to the next screen shot. This one illustrates the contents of the drobbins share on freebox, which is configured to share my Unix home directory. All the files listed in the window actually reside on freebox but are directly accessible from my Windows NT client machines. Being able to integrate Windows and Unix is wonderful stuff!"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(figure:link):168
msgid "/images/docs/l-samba-3.gif"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(figure:caption):168
msgid "My home directory on freebox, accessed from kompressor"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):173
msgid "Understanding Samba"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):176
msgid "To show you more about how Samba works internally, I'm going to give you a very simplified explanation of what happened behind the scenes when I poked around in the Network Neighborhood. I should first explain something about my current Windows session. Since I am running Windows NT Workstation, I had to log in to gain access to the machine. For this NT session I logged in to the local machine with the username \"Administrator\" and the password \"mypass\". If I were running Windows 95 or 98, the standard Windows networking drivers would have asked me for a username or password as well. Under Windows 95 and 98, this password isn't really used to determine who can access the local machine; rather, it is cached and used to connect to network resources."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):189
msgid "Of course, Windows NT is extremely secure compared to Windows 95 and 98 and will not allow you to use the machine unless you supply a valid username and password. After kompressor validated my username and password against its local security database, it allowed me to begin using Windows. Kompressor will also use my username and password to try to automatically authenticate itself when I connect to password-protected network resources."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):201
msgid "Browsing the network"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):204
msgid "When I clicked on Network Neighborhood, a window containing a list of all Windows-compatible machines on my network popped up. For this to happen, kompressor contacted freebox behind the scenes to obtain a \"browse list\" of all the Windows-compatible machines on the current subnet. Kompressor contacted freebox because I configured freebox's Samba so that it would become \"local master browser\" on my network (which means that freebox manages the list of network resources that appear in Network Neighborhood)."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):214
msgid "The next thing I did was double-click on freebox, which caused a new window to appear and display all of the shares on freebox. For kompressor to receive this information it connected to a special hidden share on freebox (called IPC$) as the guest user, and downloaded the names and types of all the available shares. In the next article, when we configure Samba, we will need to put an option in Samba's configuration file that specifies which Unix account is equivalent to NT's \"guest\" user. If this isn't set up correctly, you will not be able to browse any of the resources on a Samba machine. This is also worth mentioning because it shows that you don't need any special permission to view the SMB/CIFS shares on a Samba server, noteworthy for security purposes."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):227
msgid "I was now able to click on the drobbins share to display the contents of my home directory. While this happened automatically and without any fuss, it's important to understand the hidden conversation between freebox and kompressor that ultimately granted me access to the drobbins share. But before we get into that, let's quickly discuss some Samba security issues."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):238
msgid "Samba security"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):241
msgid "When I configured Samba I set up the drobbins share to be password protected; even though I'm on my own private LAN, I still like to keep things locked down to a certain extent. At the same time I set up two Samba users: drobbins and administrator. I set their passwords to match those on my NT Workstations for consistency. For the drobbins share, my security policy is as follows: if you are a valid Samba user, and you supply the correct password for that user, you will be allowed access to the drobbins share. So, both administrator and drobbins will be granted access as long as the user also supplies the correct password for their account."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):253
msgid "Now, back to the conversation between freebox and kompressor. Because I logged in as administrator, double-clicking on the drobbins share caused Windows NT to automatically try to authenticate me to Samba by sending the username \"administrator\" and the password \"mypass\" to freebox. Samba then checked these values against its internal security database (which is separate from the standard Unix <c>passwd</c> database), thereby verifying the username and password. After seeing that the username/password combo checked out, Samba granted me access."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):264
msgid "You may be wondering why Samba has its own unique password database. Why doesn't it just use the standard Unix password to authenticate the administrator user? While it used to be possible to do this when Windows transmitted passwords in plain-text, all modern versions of Windows now transmit SMB/CIFS passwords in an encrypted form that is not compatible with the standard Unix password hash. In other words, there is no way for Samba to use the standard Unix <c>passwd</c> hash to verify that a Windows encrypted password is correct. Fortunately, Samba provides numerous ways to synchronize these two databases so that a system administrator's life doesn't get too confusing."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):279
msgid "Samba from the Unix side"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):282
msgid "Now that we've seen Samba from the Windows side, it's time to take a look at Samba from the Unix side. First some general information. The main Web site for Samba is <uri>http://fi.samba.org</uri>, and the current production version of Samba is 2.0.7, as of April 25, 2000, which we will be using in this series. Since some of you may be installing Samba from RPM, others may be trying to get Samba to run under FreeBSD or Solaris (rather than Linux), and a good number of you may be compiling Samba from scratch, there is likely to be some variability in file locations. (Samba's default file locations are configurable at compile-time.) On some systems certain files will be in <path>/usr/local/</path>, while on other systems they may end up somewhere else. I will be referring to configuration files by their filename (rather than their full path) to avoid any inconsistencies."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):297
msgid "If you compile and install Samba from the original sources, Samba's configuration file can be found at <path>/usr/local/samba/etc/smb.conf</path>. However, if you install the software from binary RPM or another Linux packaging format, you'll likely find <path>smb.conf</path> in <path>/etc</path>. This all gets confusing very fast. In order to make things easier I'll review the locations of files when Samba is compiled from sources and everything is installed into its default location in <path>/usr/local/samba</path>. Please note that the purpose of this section is simply to get you familiar with the Unix-side configuration of Samba and is not intended to step you through the compilation process, which will be covered in the next article. Right now we're just getting you warmed up! Here are the default locations of files after a clean Samba compile and install:"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):312
msgid "<path>/usr/local/samba/bin</path> contains all the Samba binary executables. In 2.0.7, the main Samba executables are called <c>smbd</c> and <c>nmbd</c>. <c>smbd</c> is designed to provide SMB/CIFS file-sharing services, while <c>nmbd</c> performs WINS-related functions by facilitating IP address lookups for NetBIOS names. There are also a host of other utilities, including <c>smbclient</c>, an ftp-like tool that can be used to connect and interact with SMB/CIFS shares, and <c>testparm</c>, a handy utility that checks to make sure that Samba's main configuration file has correct syntax."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):323
msgid "<path>/usr/local/samba/etc</path> contains <path>smb.conf</path>, the main Samba configuration file. <path>smb.conf</path> is a very important file, containing almost all of Samba's configuration options. In this file you'll find settings to control global Samba functionality as well as configuration options to enable the sharing of specific directory trees and printers. As you gain experience with Samba, you'll supplement your <path>smb.conf</path> file with additional configuration options that fine-tune Samba to your particular site."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):333
msgid "One of the major complaints about Samba is that the smb.conf file has a relatively high learning curve. While this is true, remember that Samba is not just a simple network file sharing program. It has the responsibility of sensibly integrating two significantly different systems: Windows and Unix. Sometimes the configuration process will seem tricky, but do not fear. When you have everything working perfectly, it will all be worth it!"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):342
msgid "<path>/usr/local/samba/private</path> contains <path>smbpasswd</path>, Samba's encrypted password file."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(note):347
msgid "In <path>smb.conf</path>, Samba can be configured so that it will only listen for connections on particular network interfaces or accept connections only from particular subnets or IP addresses. These methods can be used to enhance security even further."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):354
msgid "I mentioned earlier that Samba has its own password store that is unique from the standard Unix <c>passwd</c> database. In the <path>smbpasswd</path> file Samba stores all users and workstations (and their associated passwords) that are allowed to access Samba's shares. Individual shares can be further locked down to particular users and groups. To modify the <path>smbpasswd</path> file, the identically-named binary executable <c>smbpasswd</c> is used."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):363
msgid "<path>/usr/local/samba/var</path> contains Samba's two log files, <path>log.smb</path> and <path>log.nmb</path>. As you may have guessed, <path>log.smb</path> is the log file for <c>smbd</c> while <path>log.nmb</path> is <c>nmbd</c>'s log file."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):370
msgid "<path>/usr/local/samba/swat</path> contains files used for SWAT. SWAT is the Samba Web Administration Tool, and is a neat little web application that allows administrators to remotely manage their Samba network. We won't be covering SWAT in this series, but you can find more information on SWAT in SWAT's main page (see <uri link=\"#resources\">Resources</uri>)."
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):381
msgid "What's next"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(p):384
msgid "We've covered a lot of Samba's key functionality and key concepts. We've also seen an overview of Samba's Unix-side file structure. In my next article I'll walk you through the process of setting up Samba on your own system. Unlike this article, which focused more on concepts, the <uri link=\"/doc/en/articles/samba-p2.xml\">next article</uri> will have more of a HOWTO style. Now that we've covered key concepts, it's time to pick up the pace. See you then!"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(title):398
msgid "Resources"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):402
msgid "The main <uri link=\"http://fi.samba.org\">Samba</uri> web site"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):403
msgid "<uri link=\"http://linuxguy.net/samba.htm\">Samba</uri> by Ed Weinberg"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):404
msgid "<e><uri link=\"http://www.amazon.com/exec/obidos/ASIN/0672318628/\">Samba Unleashed</uri></e>, by Steve Litt, with contributions from Daniel Robbins"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):408
msgid "<e><uri link=\"http://www.oreilly.com/catalog/samba/\">Using Samba</uri></e> (O'Reilly Publishing; 1999)"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):412
msgid "<uri link=\"http://jazz.external.hp.com/src/samba/\">Samba/iX</uri>: Samba support on MPE/iX 6.0"
msgstr ""
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(li):416
msgid "The <uri link=\"http://fi.samba.org/docs/swat_ssl.html\">SWAT</uri> main page"
msgstr ""
#. Place here names of translator, one per line. Format should be NAME; ROLE; E-MAIL
#: ../../gentoo/xml/htdocs/doc/en/articles/samba-p1.xml(None):0
msgid "translator-credits"
msgstr ""
|