HP CIFS Server Administrator Guide Version A.03.01.03 (5900-2006, October 2011)
Table Of Contents
- HP CIFS Server Administrator Guide Version A.03.01.03
- Contents
- About this document
- 1 Introduction to the HP CIFS Server
- 2 Installing and configuring HP CIFS Server
- HP CIFS Server requirements and limitations
- Step 1: Installing HP CIFS Server software
- Step 2: Running the configuration script
- Step 3: Modify the configuration
- Step 4: Starting HP CIFS Server
- Other Samba configuration issues
- 3 Managing HP-UX file access permissions from Windows NT/XP/2000/Vista/Windows 7
- Introduction
- UNIX file permissions and POSIX ACLs
- Using the Windows NT Explorer GUI to create ACLs
- Using the Windows Vista Explorer GUI to create ACLs
- POSIX ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- HP CIFS Server Directory ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- In conclusion
- 4 Windows style domains
- Introduction
- Configure HP CIFS Server as a PDC
- Configure HP CIFS Server as a BDC
- Domain member server
- Create the Machine Trust Accounts
- Configure domain users
- Join a Windows client to a Samba domain
- Roaming profiles
- Configuring user logon scripts
- Home drive mapping support
- Trust relationships
- 5 Windows 2003 and Windows 2008 domains
- 6 LDAP integration support
- Overview
- Network environments
- Summary of installing and configuring
- Installing and configuring your Directory Server
- Installing LDAP-UX Client Services on an HP CIFS Server
- Configuring the LDAP-UX Client Services
- Enabling Secure Sockets Layer (SSL)
- Extending the Samba subschema into your Directory Server
- Migrating your data to the Directory Server
- Configuring the HP CIFS Server
- Creating Samba users in directory
- Management tools
- 7 Winbind support
- 8 Kerberos support
- 9 HP CIFS deployment models
- Introduction
- Samba Domain Model
- Windows Domain Model
- Unified Domain Model
- 10 Securing HP CIFS Server
- 11 Configuring HA HP CIFS
- 12 HP-UX configuration for HP CIFS
- 13 Tool reference
- Glossary
- Index

• init logon delay (G)
This parameter specifies the delay in milliseconds for the configured hosts for the initial
samlogon parameter with init logon delayed hosts. The default setting for this
parameter is init logon delay = 100.
• kerberos method (G)
This parameter specifies how Kerberos tickets are verified. You can use the following values
for the kerberos method (G) parameter:
secrets only Use secrets.tdb for ticket verification.
system keytab Use system keytab for ticket verification.
dedicated keytab Use dedicated keytab for ticket verification.
NOTE: While using the dedicated keytab value, ensure the dedicated keytab file
specifies the location of the keytab file.
The main difference between the system keytab and dedicated keytab is that the
latter depends on Kerberos to find the correct keytab instead of filtering based on principles.
secrets and keytab Use the secrets.tdb first, then the system keytab.
The default setting for this parameter is kerberos method = secrets only.
• map untrusted to domain (G)
This parameter specifies the legacy behavior of mapping untrusty domain names to the primary
domain. When you set the value to yes for map untrusted to domain (G), smbd
provides the legacy behavior of mapping untrusted domain names to domain server. For
example, if a client connects to smbd using an untrusted domain name such as BOGUS\user,
smbd replaces the BOGUS domain with its SAM name before authenticating that user. When
smbd functions as a PDC, it is Domain\user. When smbd functions as a domain member
server, it is WORKSTATION\user.
The default setting for this parameter is map untrusted to domain = no.
• min receivefile size (G)
This parameter modifies the behavior of smbd(8) when it processes SMBwriteX calls. If an
incoming SMBwriterX call on a non-signed SMB/CIFS connection is greater than the value
specified in min receivefile size (G), it will not process the call and pass it to any
underlying kernel.
If you set the value as 0 for min receivefile size (G), Samba processes SMBwrite X
calls in specified manner. To enable Samba to process large write support, set the value of
min receivefile size (G) as non zero. You can set the maximum value to128 K.
The default setting for this parameter is min receivefile size = 0.
• registry shares (G)
This parameter specifies the support for the share definitions read from registry. Shares defined
in the smb.conf are given priority over the same shares defined in the registry.
The default setting for this parameter is registry shares = No.
152 HP-UX configuration for HP CIFS