HP CIFS Server 3.0f Administrator's Guide verison A.02.03

idmap Backend Support in Winbind......................................................................................................111
idmap_rid Backend Support ...........................................................................................................111
Limitations Using idmap_rid............................................................................................................111
Configuring and Using idmap_rid....................................................................................................111
LDAP Backend Support ..................................................................................................................112
Configuring the LDAP Backend........................................................................................................112
wbinfo Utility......................................................................................................................................113
Syntax..........................................................................................................................................113
Examples......................................................................................................................................113
8 Kerberos Support...................................................................................115
Introduction........................................................................................................................................115
Kerberos Overview..............................................................................................................................115
Kerberos CIFS Authentication Example..............................................................................................116
HP-UX Kerberos Application Co-existence...............................................................................................116
Components for Kerberos Configuration............................................................................................117
Configuring kerb5.keytab................................................................................................................117
Kerberos Modification for Internet Services........................................................................................119
9 HP CIFS Deployment Models....................................................................121
Introduction........................................................................................................................................121
Samba Domain Model........................................................................................................................121
Samba Domain Components...........................................................................................................123
HP CIFS Server Acting as a PDC.................................................................................................124
HP CIFS Server Acting as a BDC................................................................................................124
HP CIFS Acting as the Member Server.........................................................................................124
An example of the Samba Domain Model.........................................................................................125
A Sample smb.conf File For a PDC..............................................................................................125
Configuration Options...............................................................................................................126
A Sample smb.conf File For a BDC.............................................................................................126
Configuration Options...............................................................................................................127
A Sample smb.conf File for a Domain Member Server...................................................................127
Configuration Options...............................................................................................................128
A Sample /etc/nsswitch.ldap File...............................................................................................128
Windows Domain Model.....................................................................................................................129
Components for Windows Domain Model.........................................................................................129
An Example of the ADS Domain Model............................................................................................130
A sample smb.conf file For an HP CIFS ADS Member Server..........................................................130
A Sample /etc/krb5.conf File....................................................................................................132
A Sample /etc/nsswitch.conf File...............................................................................................132
An Example of Windows NT Domain Model.....................................................................................134
A Sample smb.conf File for an HP CIFS Member Server.................................................................134
Unified Domain Model........................................................................................................................136
Unified Domain Components...........................................................................................................136
HP CIFS Acting as a Windows 200x ADS Member Server.............................................................136
Setting up the Unified Domain Model...............................................................................................137
Setting up LDAP-UX Client Services on an HP CIFS Server....................................................................137
Installing and Configuring LDAP-UX Client Services on an HP CIFS Server........................................137
Configuring /etc/krb5.conf to Authenticate Using Kerberos............................................................137
Installing SFU 3.5 on a Window 2000 or 2003 Domain Controller.....................................................138
An Example of the Unified Domain Model........................................................................................138
A sample smb.conf file For an HP CIFS Member Server.................................................................138
A Sample /etc/krb5.conf File....................................................................................................139
A Sample /etc/nsswitch.conf File...............................................................................................140
10 Securing HP CIFS Server.......................................................................141
Security Protection Methods..................................................................................................................141
Table of Contents 7