HP CIFS Server Administrator Guide Version A.03.01.03 (5900-2006, October 2011)
Table Of Contents
- HP CIFS Server Administrator Guide Version A.03.01.03
- Contents
- About this document
- 1 Introduction to the HP CIFS Server
- 2 Installing and configuring HP CIFS Server
- HP CIFS Server requirements and limitations
- Step 1: Installing HP CIFS Server software
- Step 2: Running the configuration script
- Step 3: Modify the configuration
- Step 4: Starting HP CIFS Server
- Other Samba configuration issues
- 3 Managing HP-UX file access permissions from Windows NT/XP/2000/Vista/Windows 7
- Introduction
- UNIX file permissions and POSIX ACLs
- Using the Windows NT Explorer GUI to create ACLs
- Using the Windows Vista Explorer GUI to create ACLs
- POSIX ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- HP CIFS Server Directory ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- In conclusion
- 4 Windows style domains
- Introduction
- Configure HP CIFS Server as a PDC
- Configure HP CIFS Server as a BDC
- Domain member server
- Create the Machine Trust Accounts
- Configure domain users
- Join a Windows client to a Samba domain
- Roaming profiles
- Configuring user logon scripts
- Home drive mapping support
- Trust relationships
- 5 Windows 2003 and Windows 2008 domains
- 6 LDAP integration support
- Overview
- Network environments
- Summary of installing and configuring
- Installing and configuring your Directory Server
- Installing LDAP-UX Client Services on an HP CIFS Server
- Configuring the LDAP-UX Client Services
- Enabling Secure Sockets Layer (SSL)
- Extending the Samba subschema into your Directory Server
- Migrating your data to the Directory Server
- Configuring the HP CIFS Server
- Creating Samba users in directory
- Management tools
- 7 Winbind support
- 8 Kerberos support
- 9 HP CIFS deployment models
- Introduction
- Samba Domain Model
- Windows Domain Model
- Unified Domain Model
- 10 Securing HP CIFS Server
- 11 Configuring HA HP CIFS
- 12 HP-UX configuration for HP CIFS
- 13 Tool reference
- Glossary
- Index

kickoffTime: 2147483647
pwdCanChange: 0
pwdMustChange: 2147483647
rid: 1206
primaryGroupID: 1041
lmPassword: E0AFF63989B8FA6576549A685C6AFAF1
ntPassword: E0AFF63989B8FA6576549A685C6AFAF1
acctFlags: [W ]
displayName: client1$
NOTE: You can also use utilities including pdbedit, net commands to create the machine
trust accounts. The net commands provide numerous new utility operations. For more
information on how to create machine trust accounts using pdbedit and net commands, see
SWAT help text for pdbedit, net commands.
Configure domain users
The following examples show the commands used to configure Domain Users, Domain Administrators
and Domain Guests on a HP CIFS Server configured as a PDC.
• If you are a root-level user, create a Domain User in the group named "users", located in the
/sbin/sh directory. For example:
useradd -g users -c "Domain Users" -s /sbin/sh domuser
If you are not a root-level user, create a Domain User in the group named "users", located in
the /usr/bin/sh directory. For example:
useradd -g users -c "Domain Users" -s /usr/bin/sh domuser
where domuser is the name of a Domain User.
• If you are a root-level user, create a Domain Administrator in the group named "adm", located
in the /sbin/sh directory. For example:
useradd -g adm -c "Domain Administrators" -s /sbin/sh domadmin
If you are not a root-level user, create a Domain Administrator in the group named "adm",
located in the /usr/bin/sh directory. For example:
useradd -g adm -c "Domain Administrators" -s /usr/bin/sh domadmin
where domadmin is the name of a Domain Administrator.
• If you are a root-level user, create a Domain Guest in a group named "users", located in the
/sbin/sh directory. For example:
useradd -g users -c "Domain Guest" -s /sbin/sh domguest
If you are not a root-level user, create a Domain Guest in a group named "users", located in
the /usr/bin/sh directory. For example:
useradd -g users -c "Domain Guest" -s /usr/bin/sh domguest
where domguest is the name of a Domain Guest.
Be sure that all of the users that were created (see the example above) have been added to the
/etc/passwd file.
Join a Windows client to a Samba domain
1. Verify the following parameters in the smb.conf file:
Set the security parameter to "user."
Set the workgroup parameter to the name of the domain.
Set the encrypt passwords parameter to "yes."
Configure domain users 61