Veritas Storage Foundation 5.1 SP1 Cluster File System Administrator"s Guide (5900-1738, April 2011)

To complete the CIFS configuration when using the -n option
1
Copy the following lines to your smb.conf file:
security = domain
workgroup = domainname
password server = Domain_Controller_of_the_domain
2
Run the following command to backup your existing secrets.tdb file:
# mv -f pvtdir/secrets.tdb pvtdir/secrets.tdb.OLD
where pvtdir is the private directory of your Samba installation.
3
Copy the secrets.tdb file created in the locks file system to the private
directory of your Samba installation:
# cp -f mntpt/cifs/secrets.tdb pvtdir/secrets.tdb
where mntpt is the mount point.
To unconfigure CIFS run the following command:
# cfsshare unconfig -p cifs
The unconfigure operation fails if any file systems are being shared via CIFS
protocol.
You can configure both CNFS and CIFS at the same time by running the cfsshare
config -p all command.
# cfsshare config -p all -m domain -l \
/var/run -c /etc/samba/smb.conf -t /usr -s sfstest-ad \
-d SFSTEST-AD2 -u Administrator lockdg vollocks /locks
Configuring Common Internet File System in ads mode
This section describes how to configure CIFS in ads mode.
In this mode, user authentication happens on the active directory using Kerberos.
The cluster nodes act as member servers in the domain. You must have performed
additional steps to make user and group mapping via winbind work.
A shared file system needs to be specified during the config operation. This file
system is used to replicate the secrets.tdb file (machine password file) across
all cluster nodes. Only one of the cluster nodes joins the domain using the cluster
name. Once you have copied this file to all the cluster nodes, the Domain controller
sees all cluster nodes as one member server.
Common Internet File System
Configuring Common Internet File System in ads mode
164