HP CIFS Server 3.0a Administrator's Guide version A.02.01

HP CIFS Deployment Models
Samba Domain Model
Chapter 11 193
Samba Domain Components
As demand requires multiple servers, this model makes use of a
directory server and LDAP access. You must install and configure
LDAP-UX Client Services software on all nodes for centralization of both
POSIX and Windows user data. See Chapter 8, “LDAP Integration
Support,” on page 113 for detailed information on how to set up LDAP.
WINS is used for multi-subnetted environments. Multi-subnetted
environments require name-to-IP-address mapping to go beyond
broadcast limits of a single LAN segment. HP CIFS Server provides
WINS server capabilities, which can be enabled on one node (usually the
PDC) for the domain and whose address needs to be specified in the
configuration of the remaining nodes (usually BDCs and member
servers). PC client configurations also can specify the WINS server
address to ensure that they are able to join the domain. Set wins
support = yes in smb.conf on one HP CIFS Server to be the WINS
server. Set "wins server = <ip address>" in smb.conf on the rest of
the HP CIFS Servers. Because Samba supplied WINS does not provide
for replication, the WINS server can be a single point of failure in the
network. Consider using Serviceguard on the WINS server, using client
host files or static caches of NetBIOS names in DNS servers if high
availability requirements are needed.
HP CIFS Server Acting as a PDC
HP CIFS Server configured as a PDC is responsible for Windows
authentication throughout the domain. “security = user” and
“domain logons = yes" smb.conf parameters force this behavior.
Single server installations may use smbpasswd or tdbsam password
backends, but large installations should use the LDAP backend to
provide centralized management of both Posix users and Windows users.
Configure LDAP with passdb backend = ldapsam:ldap://<ldap
server name> or passdb backend = ldapsam_compat:ldap://<ldap
server name>.
An important characteristic of a CIFS PDC is browsing control. The
parameter, domain master = yes, causes the server to register the
NetBIOS name <pdc name>1B, where 1B is reserved for the domain
master browser. This name will be recognized by other servers.
When you integrate the HP CIFS Server acting as a PDC with the LDAP
directory, you must install the HP LDAP-UX Integration software and
configure the LDAP-UX client. This permits the consolidation of POSIX