67 lines
2.4 KiB
Plaintext
67 lines
2.4 KiB
Plaintext
$OpenBSD: README-main,v 1.4 2011/01/17 17:58:04 ajacoutot Exp $
|
|
|
|
Using samba package in an OpenBSD environment:
|
|
|
|
1. Edit ${SYSCONFDIR}/samba/smb.conf to suit your needs.
|
|
|
|
Steps 2 and 3 are only necessary if you want to enable swat (Samba
|
|
Web Administration Tool). Please note that administering the server
|
|
with swat over a network is inadvisable as passwords are passed in
|
|
the clear. You can avoid this problem by using ssh forwarding to
|
|
port 901.
|
|
|
|
2. add the following entry to /etc/inetd.conf:
|
|
|
|
...
|
|
swat stream tcp nowait.400 root ${TRUEPREFIX}/libexec/swat swat
|
|
...
|
|
|
|
3. add the following entry to /etc/services:
|
|
|
|
...
|
|
swat 901/tcp # samba admin service
|
|
...
|
|
|
|
Install the samba-docs package and see documentation files in
|
|
${PREFIX}/share/doc/samba and example config files in
|
|
${PREFIX}/share/examples/samba for more information.
|
|
|
|
Winbind on OpenBSD does not support local user logins as there
|
|
is no nsswitch support.
|
|
|
|
Winbind support is included for external systems like Dovecot or
|
|
Squid that are able to use it to authenticate users.
|
|
|
|
!!! ATTENTION !!!
|
|
The default passdb backend has been changed to 'tdbsam'! That breaks
|
|
existing setups using the 'smbpasswd' backend without explicit
|
|
declaration! Please use 'passdb backend = smbpasswd' if you would like
|
|
to stick to the 'smbpasswd' backend or convert your smbpasswd entries
|
|
using e.g. 'pdbedit -i smbpasswd -e tdbsam'.
|
|
|
|
The 'tdbsam' backend is much more flexible concerning per user settings
|
|
like 'profile path' or 'home directory' and there are some commands which
|
|
do not work with the 'smbpasswd' backend at all.
|
|
|
|
The configuration file, found at ${CONFDIR}/smb.conf can be used right
|
|
away for simple configurations. Local users must be added to the Samba user
|
|
database using the pdbedit utility in order to use the Samba server.
|
|
|
|
$ sudo pdbedit -a -u <username>
|
|
or the old way if for smbpasswd
|
|
$ sudo smbpasswd -a <username>
|
|
|
|
An EXPERIMENTAL implementation of the SMB2 protocol has been added.
|
|
SMB2 can be enabled by setting "max protocol = smb2". SMB2 is a new
|
|
implementation of the SMB protocol used by Windows Vista and higher.
|
|
|
|
To use Samba as a PDC the values of openfiles-max in /etc/login.conf
|
|
and kern.maxfiles should be increased to 16384.
|
|
|
|
Rebuild the login.conf.db file if necessary:
|
|
|
|
# cap_mkdb /etc/login.conf
|
|
|
|
Don't forget to add the entry kern.maxfiles=16384 to the /etc/sysctl.conf
|
|
file to keep the change across reboots.
|