 |
» |
|
|
|
The Samba/iX configuration file contains the runtime configuration information
for Samba/iX. This file contains the sections and parameters. There
are four special sections: the [global] section, the [printers] section, [homes] section and other sections. This file also contains the
information required for each share (service) and defines attributes
like associated directory path, read or write access for each share. The Samba/iX configuration file is named "smb.conf" which resides in the /usr/local/samba/lib directory on HP 3000 system. This chapter documents
the possible configuration options that the users can specify in
the "smb.conf" file. There are many configuration options available, but
only the configuration options and uses defined in this manual are supported
by HP. - [Global] Section
This section is for parameters which apply to the
server as a whole rather than to a specific service. It can also be
used to specify default values for service-specific parameters which
are then inherited by other services, referred to later in the configuration
file.
- [Printers] Section
This section works in conjunction with the printcap
file and allows it to configure a large number of printer shares
without having to add separate detailed sections for each of them.
The printer names and optional aliases are listed in the printcap
file; and the configuration parameters are defined in this section.
- [Homes] Section
This section provides access to the user's
home directories without having to add a separate section for each
of them. The share name is considered to be a valid user id and
the path defaults to that user's home directory.
- Other
Sections
These sections explicitly define the file and printer shares.
Global Configuration Options | |
The global configuration options can be defined in the [Global] Section in the "smb.conf" file, options cover the following configuration
options which are supported for use by HP: Configuration file option Network interface configuration Mapping PC usernames to MPE usernames Setting the maximum SMB packet size Disconnecting idle clients Setting logging behaviors Global printer service option
Configuration File Option- config file
The config file parameter allows you to specify
the pathname for the configuration file used by Samba/iX.
- Example:
config file = /usr/local/samba/lib/smb.conf
- workgroup
The workgroup parameter specifies the name of the workgroup;
the Samba/iX server will appear as part of the browse list. - Example:
workgroup = SambaiX - server string
The server string parameter defines the server's comment
string. This comment string will appear next to the machine name
in the browse lists, such as the network neighborhood. - Example:
server string = HP3000, File/Printer server - Default:
server string = samba 1.9.16p9 - default service
This parameter specifies the name of a service that a
client will be connected to, if the service actually requested doesn't
exist. Typically the default service is some sort of public, read-only
service. - Example:
default service = public - Default:
none
Mapping PC Usernames to MPE Usernames- username map
This username map parameter allows you to map PC style
usernames to MPE style usernames. You can specify the location of
your username map file with the username map parameters. - Example:
username map = /usr/location/samba/lib/user.map The syntax of the username map file is simple. Each line consists
of a MPE style name like manager.sys and a list of possible PC style username like webuser, separated by an equal sign. A sample username
map in the user.map file is defined as follows. - Example:
manager.sys = webuser
Network Interface Configuration- interfaces
The interfaces option allows you to inform Samba/iX
of each interface you wish it to provide services on, by supplying
IP address and subnet mask of your HP 3000 system. - Example:
interfaces = 192.1.2.3/255.255.0
Setting the Maximum SMB Packet Size- max xmit
The max xmit parameter allows you to set the maximum
packet size which Samba/iX can negotiate with a client. This is
the maximum packet size that SMBD will accept from a client, setting
an upper limit on the packet size that will be negotiated with a
client at session setup. - Example:
max xmit = 8000 - Default:
max xmit = 65535
Disconnecting Idle Clients Option- dead time
An inactive client will consume server resources
even though it is not doing anything. The dead time parameter defines
an integer value describing the number of minutes of inactivity
before a session is automatically disconnected. The "dead
time" is considered to begin when a client has no open
files. The default "dead time" of zero indicates
that no client should ever be dropped because of inactivity. - Example:
5 (in minutes) - Default:
0 (in minutes)
- max log size
The max log size option specifies the maximum size
in kilobytes to which log files can grow. The default value of the
maximum log file size is 5000 in kilobytes. If the file exceeds
the specified size, it is renamed by adding the .old extension. - Example:
max log size = 10000 (in kilobytes) - Default:
5000 (in kilobytes) - log file
The log file parameter allows you to specify the pathname
of log file used by SMBD and NMBD processes. - Example:
log file = /usr/local/samba/var/log.smb - debug level
The debug level parameter allows the debug logging level
to be specified in the Samba/iX configuration file. This option
defines the level of trace messages that you want to log into the
logfile. The typical range of the debug level can be from 0 to 5. Large
values cause more detailed information to be logged. Most of these
debug levels exist to help users to debug the server activity. - Example:
debug level = 3 - Default:
debug level = 0
- preexec
The preexec parameter allows you to specify a command
to be run whenever the service is connected. Example: callci /usr/local/samba/lib/tellop tcon %S %u %m %I Generates the following example output to the console: 9:41 #J36/50/FROM/MGR.SAMBA/tcon on IPC$ by MGR.SAMBA from rkm-nt - postexec
The postexec parameter allows you to specify a command
to be run whenever the service is disconnected. - Example:
callci /usr/local/samba/lib/tellop tdis %S %u %m %I
Generates the following example output to the console: 9:41 #J36/70/FROM/MGR.SAMBA/tdis
on IPC$by MGR.SAMBA from rkm-nt Global Printer Service Options | |
The global printer service options allows you to specify the
location of the "printcap", printer command parameter used by Samba/iX. The following global printer configuration options are supported
for use by HP: - load printers
The load printers parameter is used in conjunction with
printcap file and [printers] section. It is a boolean variable that controls whether
all printers in the "printcap" file will be loaded for browsing. If the load printers parameter is set to true, all printers defined
in the printcap file will be loaded for browsing by default. - Example:
load printers = yes - Default:
load printer = no - printcap name
The printcap name option specifies the location
of the printcap. Samba/iX uses the printcap to determine all printers available on the system
if the general [printers] service is used instead of defining each printer in its
own service. - Example:
printcap name = /usr/local/samba/lib/printcap - print command
The print command parameter defines the shell command
which Samba/iX will use to submit a print job. After Samba/iX has
finished spooling a print job to the disk, it calls this command.
After processing the file, this command must remove the spoolfile,
unless you don't mind spool files building up on your system. This parameter can use the following print-specific macros: - %s
The full path of the print spool file. - %p
The name of the printer to which the job is to be
submitted.
- Example:
print command = /usr/local/samba/lib/rawlp %s %p; rm %s On MPE/iX 6.0, the "rawlp" utility is available on the system and
is used to send the file contents to a spooler like "lp -oraw".
Controlling User Access Rights | |
- deny hosts
These parameters allow users to define a set of
client IP addresses which will be granted access to service. If
an allow hosts option is present, only hosts matching the pattern
are allowed to access the service. If a deny hosts option exists,
only hosts not matching the pattern will be granted access. - Example:
allow hosts = 192.1.2.3 - Default:
none
- invalid users
If neither of these parameters are set, then any authenticated
user will be granted access to the service. The valid users parameter
may contain a comma-delimited list of users who will be allowed
to access the service. The invalid users parameter may contain a
similar comma-delimited list of users who will never be granted
access to the service. These parameters use MPE style user syntax
(for example, user.acct) to specify users. The password format used when you log
on from a PC client should be userpassword, acctpassword. - Example:
valid users = mgr.samba - Default:
none
- guest account
The shares can be configured to accept connections without
a validated user ID and password, then you can use the "guest
account" parameter to assume the guest logon identify for
accessing files and printers. - Example:
guest account = mgr.samba - Default:
none
- revalidate
Forces the revalidation of password. When Samba/iX successfully
validates a clients password, it passes a token back to client.
This is used by the client to connect to other shares. If revalidate=true, then Samba/iX expects a valid username and password
pair again without just relying on the token. For example, after
connecting to "temp", if the client tries to connect to
another share, Samba/iX revalidates the password. - Example:
revalidate = yes - Default:
no
Share Configuration Options | |
This section covers the share configuration options that you
use when you configure for a specific disk or printer share in the
Samba/iX configuration file. Setting the Shared Directory- path
The path parameter specifies the pathname of the shared
directory. - Example:
path = /usr/local/samba/docs For printer services, this parameter describes the directory
used to temporarily spool files sent from clients for printing before
they are spooled to the local HP 3000 printer. - Example:
path = /usr/local/samba/spool
- browseable
This parameter controls whether this share is seen
in the list of available shares in the browse list. - Example:
browseable = yes - Default:
browseable = yes - Available
This parameter lets you remove a service from availability.
If available is no, all attempts to connect to the service will
fail. Using this option preserves the service's settings
and is usually more convenient than commenting out the service. - Example:
available = no - Default:
available = yes
- comment
The "comment" parameter specifies
the comment message in the share services. - Example:
comment = share "public" service for guest users.
- print ok
The "print ok" option is specified
in the [prints] section to enable the share for printing access.
Controlling Read/Write Access- guest ok
If guest ok is true, then guest access will be allowed. The
access rights of a client connecting as guest will be those of the
username set in the "guest account." - Example:
guest ok = yes - Default:
guest ok = no - guest only
If guest only is true, then access of service/share
is only granted with the rights of usernames given in the "guest
account" parameter. - Example:
guest only = yes - Default:
guest only = no - create mode
The "create mode" is used to define
the permission used by share services. This option sets an octal value representing
the file permissions available to a file created by Samba/iX. - Example:
create mode = 0744 The value of 0744 causes the group and other write and execute bit
to be removed from a file created by Samba. - read only
Example: read only = yes Default: read only = yes - write ok
The read only = yes is identical to write ok = no. If write ok is true, clients will be granted read/write access
to a share. The same effect can be achieved by setting read only
to false. - Example:
write ok = no - Default:
write ok = no
Sample Configuration File — samp-smb.confWhen you want to use Samba/iX, you should copy the Samba/iX
sample configuration file to /usr/local/samba/lib/smb.conf and adjust this file as needed. The sample configuration
file samp-smb.conf resides in the /usr/local/samba/lib directory. Please refer to Appendix A “Samba/iX Sample Comfiguration File” Configuring the Shares for File Sharing | |
The PCs can access the server side filespaces using Samba/iX. Whenever
the clients want to connect to the server, the server side validates
the username and password which are sent by the client and grants
access to the requests share if it is appropriate. You can configure the file service with guest access and the
Samba/iX server can grant to the guest users without a validated
user ID and password. Share level security is the default security level in Samba/iX.
The following example shows the configuration steps you can use
to configure with [global] and [service] section with security = share: Add in the [global] section the following parameter: security = share To add a share, the entries can be given in the
example below: [sample shares] Add a username mapping in "user.map" file. For example: mgr.sample = pcusername When you connect a share from a PC, the password
format that you enter from a PC should be userpassword, acctpassword.
| | | |  | NOTE: For accessing share/user security modes, both SAMBA account and MGR.SAMBA user should have PM capabilities. | | | | |
Configuring a Printer Section for Printer Sharing | |
The PCs can access the server side printer using Samba/iX.
With printer sharing the client creates a file on the server directory associated
with the printer, and then lets the server process trigger a configurable
command to push the file into the MPE spooler. The [printers] section works in conjunction with the printcap file and allows
to configure a large number of printer shares without having to add
separate detailed sections for each of them. The printer names and option
aliases are listed in the printcap file.Here is an sample example of printer names
in the samp-printcap file which resides in /usr/local/samba/lib: samp-printcap file: LP|6|HP3000 System LP Here is a sample example for the configuration option that
you may configure with [global] and [printers] sections in the Samba/iX configuration file — smb-conf: # You need supply IP address and subnet mask of your 3000 with the interface parameter |
interface = ip address/subnet mask |
# printcap file lists printer names for use by [printer] section |
printcap name = /usr/local/samba/lib/printcap |
# shares may be configured to accept connections without a validated user id and password, and then it assumes the guest logon for accessing the printers. |
guest account = mgr.samba |
# enable this service for printing but not for file access |
# current version of Samba/iX only allows guest users for printer sharing |
# the "staging" directory for print requests |
path = /user/local/samba/spool |
# The rawlp utility sends file contents to spooler like "lp -oraw" |
print command = /usr/local/samba/lib/rawlp %s %p; rm %s |
Add a printer, as shown in Figure 7-6 “ADD a Printer”. With
printer sharing, the printers are accessible to HP 3000. You can connect your server shares using the NT explorer,
as shown in Figure 7-7 “Connect to the HP 3000 Shares”. The menu tool includes a "map network drive" which
brings up the small windows shown in Figure 7-7 “Connect to the HP 3000 Shares”.
You connect a network driver by typing in a share name with
\\servername\sharename syntax in the "path" box. You can view the contents of the share from NT explorer, as
shown in Figure 7-8 “View the HP 3000 Share”. Click the share name at NT
explorer window, it will list the files residing in this share |
Printable version
