Samba

1
Samba

• Faking it in a Windows world

2
In a perfect world

• Everybody would be running OpenBSD
• alas

3
Setup

• FreeBSD 7.0-STABLE
• samba 3.0.28
• cups 1.3.5
• gutenprint 5.1.3

4
Installation

• portinstall -RP net/samba3
• This will install cups as a dependency.
• portinstall -RP print/gutenprint-cups
• This will install an insane amount of
  dependencies.

5
/etc/rc.conf

• cupsd_enableYES
• samba_enableYES
• winbindd_enableYES
• inetd_enableYES
• This is only if you want swat

6
/etc/group

• vi /etc/group
• add
• ntadmins1006
• domusers1007

7
Add ntgroups

• net groupmap add ntgroup"Domain Admins"
  unixgroupntadmins rid512 typed
• net groupmap add ntgroup"Domain Users"
  unixgroupdomusers rid513 typed
• net groupmap add ntgroup"Domain Guests"
  unixgroupnobody rid514 typed

8
/usr/local/etc/smb.conf

• global
• workgroup XASTHUR
• netbios name ABSU
• passdb backend tdbsam
• printcap name cups
• add user script /usr/sbin/pw user add 'u' -m
• delete user script /usr/sbin/pw user del 'u'
  -r
• add group script /usr/sbin/pw group add 'g'
• delete group script /usr/sbin/pw group del
  'g'
• add user to group script /usr/sbin/pw user mod
  'u' -G 'g'
• add machine script /usr/sbin/pw user add 'u'
  -s /bin/false -d /var/lib/nobody
• logon script scripts\logon.bat
• logon path \\L\Profiles\U

9
Continued

• logon drive Z
• logon home \\L\U
• domain logons Yes
• os level 35
• preferred master Yes
• domain master Yes
• idmap uid 15000-20000
• idmap gid 15000-20000
• printing cups

10
Continued

• homes
• comment Home Directories
• valid users S
• read only No
• browseable No
• printers
• comment SMB Print Spool
• path /var/spool/samba
• guest ok Yes
• printable Yes
• use client driver Yes
• browseable No

11
Continued

• netlogon
• comment Network Logon Service
• path /var/db/samba/netlogon/U
• admin users Administrator, root, user1,
  user2
• guest ok Yes
• locking No
• profiles
• comment User Profiles
• path /var/db/samba/profiles
• read only No
• profile acls Yes

12
Continued

• files
• path /ftp/files
• valid users U
• read only No
• create mask 0664
• directory mask 0775
• inherit permissions Yes

13
Continued

• canon900
• comment Canon S900 Color
• path /var/spool/samba
• read only No
• guest ok Yes
• printable Yes
• printer name canon900
• use client driver Yes
• oplocks No
• share modes No

14
Missing directories

• mkdir -p /var/db/samba/netlogon/scripts
• mkdir -p /var/db/samba/profiles/user1user2

15
Add users

• smbpasswd a root
• smbpasswd a user1
• smbpasswd a user2

16
Join the domain

• /usr/local/etc/rc.d/samba start
• /usr/local/etc/rc.d/cupsd start
• net rpc join -UrootsecretPassw0rd' -S ABSU

17
Joined

• root_at_absu smbclient -L localhost -U
• DomainXASTHUR OSUnix ServerSamba 3.0.28
• Sharename Type Comment
• --------- ---- -------
• netlogon Disk Network Logon
  Service
• profiles Disk User
  Profiles
• canon900 Printer Canon S900
  Color
• IPC IPC IPC Service
  (Samba 3.0.28)
• DomainXASTHUR OSUnix ServerSamba 3.0.28
• Server Comment
• --------- -------
• ABSU Samba 3.0.28
• ARCHGOAT ARGH
• Workgroup Master
• --------- -------

18
Printing

• /usr/local/etc/cups/cupsd.conf
• Add your IP to all relevant ltLocation /gt
• ltLocation /gt
• Order allow,deny
• Allow localhost
• Allow 192.168.100.2
• lt/Locationgt

19
Printing

• CUPS Web interface (https//absu631)
• Add your printers

20
Credits

• http//www.samba.org
• http//www.freebsd.org