Hi Folks:
I am continuing to work with samba on FC3 for use as a file server etc.
I have set up my server according to the instructions on
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html#id2535778
Here is my smb.conf file
[root@srvfs-01 conf]# cat smb.conf
[global]
workgroup = MCASCHOOL
netbios name = SRVFS-01
server string = MCA File Server
security = DOMAIN
winbind separator = \
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
printcap name = cups
disable spoolss = Yes
show add printer wizard = No
idmap uid = 15000-20000
idmap gid = 15000-20000
winbind use default domain = Yes
use sendfile = Yes
printing = cups
[home]
writable = true
path = /home
comment = Home Directories
browsable = yes
[public]
# delete readonly = yes
writeable = yes
path = /home/public
# force directory mode = 777
# force group = nobody
# force user = nobody
# public = yes
# create mode = 777
# directory mode = 777
[pictures]
# delete readonly = yes
writeable = yes
path = /home/pictures
# force directory mode = 777
# force group = nobody
# force user = nobody
# public = yes
# create mode = 777
# directory mode = 777
[iso]
path = /home/iso
# delete readonly = yes
writeable = yes
# force directory mode = 777
# force group = nobody
# force user = nobody
# public = yes
# create mode = 777
# directory mode = 777
[ghost_images]
path = /home/ghost
# delete readonly = yes
writeable = yes
# force directory mode = 777
# force group = nobody
# force user = nobody
# public = yes
# create mode = 777
# directory mode = 777
[rpms]
path = /home/rpms
# delete readonly = yes
writeable = yes
# force directory mode = 777
# force group = nobody
# force user = nobody
# public = yes
# create mode = 777
# directory mode = 777
[webroot]
path = /home/www
# delete readonly = yes
writeable = yes
# force directory mode = 777
# force group = nobody
# force user = nobody
# public = yes
# create mode = 777
# directory mode = 777
[profile]
path =/home/profile
writeable = yes
Please note that a number of things are commented out -- those were experiments
that did not work
The process that I use to create a samba user is as follows
1. Create windows account
2. Have the user change their password
3. Create a samba user using the windows user (I use the system-config-samba
applet)
4. get their password from them to input into the samba user (Yes, I know this
is terrible security procedure, but it's the only way I can get the blasted
thing to work)
5. Create their home directory
6. Create internal folders (like public_html)(once I get it all working right I
will use skel
7. chown to their username and group
8. chmod to 755
There has got to be a better way -- fortunately I am on summer break right now
so there are no students in my network, so thankfully all this is theroretical
right now, but in 2 months I will have 200+ students needing to use the system,
so I have to get this resolved.
The specific problems that I am having are:
1. User authentication against the domain
2. User creation etc - long and convuluded process
3. Profile directory for windows (to store roaming profiles WILL NOT WORK --
even if it has 777 permissions -- I have absolutely no clue on that one)
Comments or suggestions are most welcome
If anyone prefers to work with me directly via phone or IM, that can be arranged
as well
The domain is a Windows 2003 Active Directory Domain
Thanks again for all your help
TIM
Timothy A. Holmes
?
IT Manager / Webmaster / Science Teacher
?
Medina Christian Academy
A Higher Standard...
?
Jeremiah 33:3
Jeremiah 29:11
Esther 4:14
Tim Holmes wrote:>Hi Folks: > >I am continuing to work with samba on FC3 for use as a file server etc. > >I have set up my server according to the instructions on http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html#id2535778 > >Here is my smb.conf file > > [root@srvfs-01 conf]# cat smb.conf >[global] > workgroup = MCASCHOOL > netbios name = SRVFS-01 > server string = MCA File Server > security = DOMAIN > winbind separator = \ > idmap uid = 10000-20000 > idmap gid = 10000-20000 > winbind enum users = yes > winbind enum groups = yes > printcap name = cups > disable spoolss = Yes > show add printer wizard = No > idmap uid = 15000-20000 > idmap gid = 15000-20000 > winbind use default domain = Yes > use sendfile = Yes > printing = cups > >[home] > writable = true > path = /home > comment = Home Directories > browsable = yes > >[public] ># delete readonly = yes > writeable = yes > path = /home/public ># force directory mode = 777 ># force group = nobody ># force user = nobody ># public = yes ># create mode = 777 ># directory mode = 777 > >[pictures] ># delete readonly = yes > writeable = yes > path = /home/pictures ># force directory mode = 777 ># force group = nobody ># force user = nobody ># public = yes ># create mode = 777 ># directory mode = 777 > >[iso] > path = /home/iso ># delete readonly = yes > writeable = yes ># force directory mode = 777 ># force group = nobody ># force user = nobody ># public = yes ># create mode = 777 ># directory mode = 777 > >[ghost_images] > path = /home/ghost ># delete readonly = yes > writeable = yes ># force directory mode = 777 ># force group = nobody ># force user = nobody ># public = yes ># create mode = 777 ># directory mode = 777 > >[rpms] > path = /home/rpms ># delete readonly = yes > writeable = yes ># force directory mode = 777 ># force group = nobody ># force user = nobody ># public = yes ># create mode = 777 ># directory mode = 777 > >[webroot] > path = /home/www ># delete readonly = yes > writeable = yes ># force directory mode = 777 ># force group = nobody ># force user = nobody ># public = yes ># create mode = 777 ># directory mode = 777 > >[profile] > path =/home/profile > writeable = yes > > >Please note that a number of things are commented out -- those were experiments that did not work > >The process that I use to create a samba user is as follows > >1. Create windows account >2. Have the user change their password >3. Create a samba user using the windows user (I use the system-config-samba applet) >4. get their password from them to input into the samba user (Yes, I know this is terrible security procedure, but it's the only way I can get the blasted thing to work) >5. Create their home directory >6. Create internal folders (like public_html)(once I get it all working right I will use skel >7. chown to their username and group >8. chmod to 755 > >There has got to be a better way -- fortunately I am on summer break right now so there are no students in my network, so thankfully all this is theroretical right now, but in 2 months I will have 200+ students needing to use the system, so I have to get this resolved. > >The specific problems that I am having are: > >1. User authentication against the domain >2. User creation etc - long and convuluded process >3. Profile directory for windows (to store roaming profiles WILL NOT WORK -- even if it has 777 permissions -- I have absolutely no clue on that one) > > >Comments or suggestions are most welcome > >If anyone prefers to work with me directly via phone or IM, that can be arranged as well > >The domain is a Windows 2003 Active Directory Domain > >Thanks again for all your help > >TIM > >Timothy A. Holmes > >IT Manager / Webmaster / Science Teacher > >Medina Christian Academy >A Higher Standard... > >Jeremiah 33:3 >Jeremiah 29:11 >Esther 4:14 > > >http://www.redmondmag.com/columns/article.asp?EditorialsID=858