HP CIFS Server 3.0a Administrator's Guide version A.02.01

Configuring HA HP CIFS
Special Notes for HA HP CIFS Server
Chapter 13 251
set to yes, then you have to use an smbpasswd file. By default, this
file is located in the path /var/opt/samba/private but you may
specify a different path with the smb passwd file parameter.
Another important security file used with domain level security is
the machine account file, <domain.server>.mac. Since this file will be
updated periodically (as defined in smb.conf by machine password
timeout, 604800 seconds by default), HP recommends that you
locate <domain.server>.mac on a shared logical volume. As with the
smbpasswd file, discussed above, the location of this file is defined by
the smb.conf parameter smb passwd file. For example, smb passwd
file = /var/opt/samba/shared_vol_1/private/smbpasswd will
result in the file
/var/opt/samba/shared_vol_1/private/<domain.server>.mac.
For both the machine account file and user password file, HP
recommends that you locate the files on a shared logical volume. Do
so by setting smb passwd file to a path within a logical shared
volume.
• Username Mapping File
If you configure your Samba server to use a username mapping file,
HP recommends that you configure it to be located on a shared
logical volume. This way, if changes are made, all the nodes will
always be up-to-date. The username mapping file location is defined
in smb.conf by the parameter username map, e.g. username map =
/var/opt/samba/shared_vol_1/username.map. There is no
username map file by default.
• Winbind Configurations
Add the commented winbind lines in samba.mon and samba.cntl as
reviously described.
Winbind makes use of several files winbindd.pid,
winbindd_cache.tdb, winbindd_idmap.tdb, and directory
winbindd_privileged, in the /var/opt/samba/locks directory.
You may want to put the entire /var/opt/samba/locks directory on a
logical shared volume but the locking data may not be correctly
interpreted after a failover. You may want to add a line to your
startup script to remove the locking data file .../locks/locking.tdb.
• Samba as a WINS Server