HP CIFS Server 2.2i Administrator's Guide version A.01.11.01

Configuring HA HP CIFS
Special Notes for HA HP CIFS Server
Chapter 7 183
set to yes, then you have to use an smbpasswd file. By default, this
file is located in the path /var/opt/samba/private but you may
specify a different path with the smb passwd file parameter.
Another important security file used with domain level security is
the machine account file, <domain.server>.mac. Since this file will be
updated periodically (as defined in smb.conf by machine password
timeout, 604800 seconds by default), HP recommends that you
locate <domain.server>.mac on a shared logical volume. As with the
smbpasswd file, discussed above, the location of this file is defined by
the smb.conf parameter smb passwd file. For example, smb passwd
file = /var/opt/samba/shared_vol_1/private/smbpasswd will
result in the file
/var/opt/samba/shared_vol_1/private/<domain.server>.mac.
For both the machine account file and user password file, HP
recommends that you locate the files on a shared logical volume. Do
so by setting smb passwd file to a path within a logical shared
volume.
• Username Mapping File
If you configure your Samba server to use a username mapping file,
HP recommends that you configure it to be located on a shared
logical volume. This way, if changes are made, all the nodes will
always be up-to-date. The username mapping file location is defined
in smb.conf by the parameter username map, e.g. username map =
/var/opt/samba/shared_vol_1/username.map. There is no
username map file by default.
• Samba as a WINS Server
If you configure your Samba server to be a WINS server by setting
the wins support parameter to yes, it will store the WINS database
in the file /var/opt/samba/locks/WINS.DAT.
If this file is not on a logical shared volume, when a failover occurs,
there will be a short period of time when all the WINS clients update
the Samba WINS server with their address. However, if this short
period of time to restore the WINS database is not acceptable, you
can reduce the period of time to restore the full WINS service.