Datasheet

“main” (Installation and Administration) — 2004/6/25 — 13:29 — page 582 — #608

Note

For simple administration tasks with the Samba server, there

is also the program swat. It provides a simple web interface

with which to conﬁgure the Samba server conveniently. In a

web browser, open http://localhost:901 and log in as

user root. However, swat must also be activated in the ﬁles

/etc/xinetd.d/samba and /etc/services. To do so in

/etc/xinetd.d/samba, edit the disable line so it reads

disable = no. More information about swat is provided in the

man page.

Note

24.1.3 Samba as Login Server

In networks where predominantly Windows clients are found, it is of-

ten preferable that users may only register with a valid account and pass-

word. This can done with the help of a Samba server. In a Windows-based

network, this task is handled by a Windows NT server conﬁgured as a

primary domain controller (PDC). The entries that must be made in the

[global] section of smb.conf are shown in Example 24.3.

Example 24.3: Global Section in smb.conf

[global]

workgroup = TUX-NET

domain logons = Yes

domain master = Yes

If encrypted passwords are used for veriﬁcation purposes — this is

the default setting with well-maintained MS Windows 9x installa-

tions, MS Windows NT 4.0 from service pack 3, and all later prod-

ucts — the Samba server must be able to handle these. The entry

encrypt passwords = yes in the [global] section enables this (with

Samba version 3, this is now the default). In addition, it is necessary to

prepare user accounts and passwords in an encryption format that con-

forms with Windows. Do this with the command smbpasswd -a name.

Create the domain account for the computers, required by the Windows NT

domain concept, with the following commands:

582 24.1. Samba