samba - Oct 2009 - TOSHAG-Winbind.xml translate finished and some bug found

Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base).
And some bug found.

<indexterm><primary>UID</primary></indexterm>
<indexterm><primary>GID</primary></indexterm>
<indexterm><primary>SID</primary></indexterm>
<indexterm><primary>idmap uid</primary></indexterm>
<indexterm><primary>idmap gid</primary></indexterm>
<indexterm><primary>idmap backend</primary></indexterm>
<indexterm><primary></primary>LDAP</indexterm>
----------------------------------------------
 is <indexterm><primary>LDAP</primary></indexterm>?

                Winbind maintains a database called winbind_idmap.tdb in which
it stores
                mappings between UNIX UIDs, GIDs, and NT SIDs. This mapping is
used only
                for users and groups that do not have a local UID/GID. It stores
the UID/GID
                allocated from the idmap uid/gid range that it has mapped to the
NT SID.


	  Users on the UNIX machine can then use NT user and group
        names as they would <quote>native</quote> UNIX names. They
can chown files
        so they are owned by NT domain users or even login to the
        UNIX machine and run a UNIX X-Window session as a domain
user.</para>
                                    --------
                                    X Window System (See man X)


<indexterm><primary>boot disk`</primary></indexterm>
                             - typo?
If you have a Samba configuration file that you are currently using,
<emphasis>BACK IT UP!</emphasis>
If your system already uses PAM, <emphasis>back up the
<filename>/etc/pam.d</filename> directory
contents!</emphasis> If you haven't already made a boot disk,
<emphasis>MAKE ONE NOW!</emphasis>
</para>


To allow domain users the ability to access Samba shares and files, as well as
potentially other services
provided by your Samba machine, PAM must be set up properly on your
machine. In order to compile the Winbind modules, you should have at least the
PAM development libraries installed
on your system. Please refer to the PAM Web site <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>.

is this?

Please refer to the <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>PAM Web
site</ulink>.


<indexterm><primary>winbindd
daemon</primary></indexterm>
<indexterm><primary>smbd</primary></indexterm>
<indexterm><primary>nmbd</primary></indexterm>
<indexterm><primary>/etc/init.d/smb</primary></indexterm>
<indexterm><primary>/etc/init.d/samba</primary></indexterm>
<indexterm><primary>/usr/local/samba/bin</primary></indexterm>
<indexterm><primary></primary></indexterm> |
<indexterm><primary></primary></indexterm> |unneceasary
<indexterm><primary></primary></indexterm> |


<para>
Again, if you would like to run Samba in dual daemon mode, replace:
                                -----winbindd?
<programlisting>
/usr/local/samba/sbin/winbindd
</programlisting>
in the script above with:
<programlisting>
/usr/local/samba/sbin/winbindd -D
</programlisting>


The <filename>/etc/pam.d/ftp</filename> file can be changed to allow
Winbind ftp access in a manner similar to
the samba file. My <filename>/etc/pam.d/ftp</filename> file was
changed to look like this:
    ----- smb.conf?

<programlisting>
auth       required     /lib/security/pam_listfile.so item=user sense=deny \
         file=/etc/ftpusers onerr=succeed

--
--- Oota Toshiya ---  t-oota at dh.jp.nec.com
NEC Systems Software Operations Unit      Shiba,Minato,Tokyo
IT Platform Solutions Division            Japan,Earth,Solar system
(samba-jp/ldap-jp Staff,mutt-j/samba-jp postmaster)

On 10/08/2009 03:01 AM, ITPFS oota wrote:
> Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base).
> And some bug found.
> 
> <indexterm><primary>UID</primary></indexterm>
> <indexterm><primary>GID</primary></indexterm>
> <indexterm><primary>SID</primary></indexterm>
> <indexterm><primary>idmap uid</primary></indexterm>
> <indexterm><primary>idmap gid</primary></indexterm>
> <indexterm><primary>idmap
backend</primary></indexterm>
> <indexterm><primary></primary>LDAP</indexterm>
> ----------------------------------------------
>  is <indexterm><primary>LDAP</primary></indexterm>?
That is a bogus entry.  I removed it.
> 
>                 Winbind maintains a database called winbind_idmap.tdb in
which it stores
>                 mappings between UNIX UIDs, GIDs, and NT SIDs. This mapping
is used only
>                 for users and groups that do not have a local UID/GID. It
stores the UID/GID
>                 allocated from the idmap uid/gid range that it has mapped
to the NT SID.
> 
> 
> 	  Users on the UNIX machine can then use NT user and group
>         names as they would <quote>native</quote> UNIX names.
They can chown files
>         so they are owned by NT domain users or even login to the
>         UNIX machine and run a UNIX X-Window session as a domain
user.</para>
>                                     --------
>                                     X Window System (See man X)
Not sure what to do with that.  I removed the '-', but the word session
seems appropriate, so I left it as it was.
> 
> <indexterm><primary>boot
disk`</primary></indexterm>
>                              - typo?
Typo fixed. Thanks.
> If you have a Samba configuration file that you are currently using,
<emphasis>BACK IT UP!</emphasis>
> If your system already uses PAM, <emphasis>back up the
<filename>/etc/pam.d</filename> directory
> contents!</emphasis> If you haven't already made a boot disk,
<emphasis>MAKE ONE NOW!</emphasis>
> </para>
> 
> 
> To allow domain users the ability to access Samba shares and files, as well
as potentially other services
> provided by your Samba machine, PAM must be set up properly on your
> machine. In order to compile the Winbind modules, you should have at least
the PAM development libraries installed
> on your system. Please refer to the PAM Web site <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>.
> 
> is this?
Yes. I do believe that to compile Samba with PAM support the pam
development libraries are needed.
> Please refer to the <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>PAM Web
site</ulink>.
> 
> 
> <indexterm><primary>winbindd
daemon</primary></indexterm>
> <indexterm><primary>smbd</primary></indexterm>
> <indexterm><primary>nmbd</primary></indexterm>
>
<indexterm><primary>/etc/init.d/smb</primary></indexterm>
>
<indexterm><primary>/etc/init.d/samba</primary></indexterm>
>
<indexterm><primary>/usr/local/samba/bin</primary></indexterm>
> <indexterm><primary></primary></indexterm> |
> <indexterm><primary></primary></indexterm>
|unneceasary
> <indexterm><primary></primary></indexterm> |
Removed.
> 
> <para>
> Again, if you would like to run Samba in dual daemon mode, replace:
>                                 -----winbindd?
Fixed. Thanks for finding that.
> <programlisting>
> /usr/local/samba/sbin/winbindd
> </programlisting>
> in the script above with:
> <programlisting>
> /usr/local/samba/sbin/winbindd -D
> </programlisting>
> 
> 
> The <filename>/etc/pam.d/ftp</filename> file can be changed to
allow Winbind ftp access in a manner similar to
> the samba file. My <filename>/etc/pam.d/ftp</filename> file was
changed to look like this:
>     ----- smb.conf?
Fixed. That word samba should have been:
	<filename>/etc/pam.d/samba</filename>
> <programlisting>
> auth       required     /lib/security/pam_listfile.so item=user sense=deny
\
>          file=/etc/ftpusers onerr=succeed
> 
> --
> --- Oota Toshiya ---  t-oota at dh.jp.nec.com
> NEC Systems Software Operations Unit      Shiba,Minato,Tokyo
> IT Platform Solutions Division            Japan,Earth,Solar system
> (samba-jp/ldap-jp Staff,mutt-j/samba-jp postmaster)


The changes were committed to the master GIT branch.

Cheers,
John T.

Hi

2009/10/8 John H Terpstra - Samba Team <jht at
samba.org>:
> On 10/08/2009 03:01 AM, ITPFS oota wrote:
>> Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base).
>> And some bug found.
[...]
>> on your system. Please refer to the PAM Web site <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>.
>>
>> is this?
>
> Yes. I do believe that to compile Samba with PAM support the pam
> development libraries are needed.
>
>> Please refer to the <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>PAM Web
site</ulink>.
I think he was proposing to replace:
<ulink url="http://www.kernel.org/pub/linux/libs/pam/"/>

with:
<ulink url="http://www.kernel.org/pub/linux/libs/pam/">PAM Web
site</ulink>

-- 
Michael Wood <esiotrot at gmail.com>

On 10/09/2009 01:51 AM, Michael Wood wrote:
> Hi
> 
> 2009/10/8 John H Terpstra - Samba Team <jht at samba.org>:
>> On 10/08/2009 03:01 AM, ITPFS oota wrote:
>>> Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base).
>>> And some bug found.
> [...]
>>> on your system. Please refer to the PAM Web site <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>.
>>>
>>> is this?
>>
>> Yes. I do believe that to compile Samba with PAM support the pam
>> development libraries are needed.
>>
>>> Please refer to the <ulink
url="http://www.kernel.org/pub/linux/libs/pam/"/>PAM Web
site</ulink>.
> 
> I think he was proposing to replace:
> <ulink url="http://www.kernel.org/pub/linux/libs/pam/"/>
> 
> with:
> <ulink url="http://www.kernel.org/pub/linux/libs/pam/">PAM
Web site</ulink>
> 
Thanks for the clue-bat! I needed that.  I have committed that change to
the GIT tree.

Thanks so much oota-san.

- John T.