Step 2: Running the Configuration Script

Prior to running the configuration script, you must obtain the name of your domain or workgroup, choose either a “workgroup model” or “domain security model” role for your server and decide which security level you would like to use. After you have this information, run the samba_setup configuration script.

Run the Samba configuration script using the command below.
/opt/samba/bin/samba_setup
To specify a domain role and an authentication type, enter the number listed to the left of your choice. Answer the other questions prompted by the script. The questions will vary according to the workgroup or domain role that you selected.
Choose a domain role for your server.
With NT, Microsoft Corporation added the domain security model to the more primitive workgroup model. Domain security offers centralized administration and security. HP CIFS Servers not only support the workgroup model but can also play the role of Primary Domain Controller (PDC) or Domain Member Server in the domain security model.
Samba_setup will ask you to choose Primary Domain Controller, Domain Member Server, or Workgroup roles.
- Primary Domain Controllers perform the machine account and authentication services which enables domain-wide logons. Domain logons are convenient because users can log on to the domain with one logon and password rather than logging on to each individual server in the domain. See Chapters 4 and 5 for more information about HP CIFS Server PDC features. Samba_setup will configure HP CIFS Server PDCs to use user-level security for you.
- Domain Member Servers participate in domain security by forwarding logon requests to the PDC for authentication. Samba_setup will configure HP CIFS Server Domain Member Servers to use domain-level security for you.
- Workgroups do not utilized the centralized authentication of domains. Samba_setup will require workgroups to choose either server, share, or user-level security.
Since there are many important aspects of workgroup and domain architecture too lengthy to be discussed here, you should consult some of the many books or white papers available through the world-wide web and book stores if you are not already familiar with the subject.
Select your authentication security type.
Samba supports four types of security: Domain-level security, Server-level security, User-level security, and Share-level security. You must select one of these security types for your server prior to running the configuration script.
- Domain-level security: When this type of security is used, Samba responds as a member of a Windows domain and checks the password against the information contained in the Windows NT domain controller.
- Server-level security: When this security type is specified, password authentication is handled by another SMB password server. When a client attempts to access a specific share, Samba checks that the user is authorized to access the share. Samba then validates the password via the SMB password server.
- User-level security: When this security type is specified, each share is assigned specific users. When a request is made for access, Samba checks the user’s user name and password against a local list of authorized users and only gives access if a match is made.
- Share-level security: When this security type is specified, each share (directory) has at least one password associated with it. Anyone with a password will be able to access the share. There are no other access restrictions.
  You might use multiple passwords when you want different users to have different types of access (read-only, read-write, etc).
These security types are described in detail in “Chapter 6, Users, Security, and Domains” of Using Samba by Eckstein, Collier-Brown and Kelly.
This information will be requested by the configuration script in Step 4: Starting the HP CIFS Server, located later in this chapter.
Enter the name of the domain or workgroup that you want this server to be part of.

The script will modify the smb.conf file according to the information that you have entered.

For in-depth information about configuring disk shares; browsing; users, security and domains; and printing and name resolution; refer to chapters 4, 5, 6, and 7 in Using Samba by Eckstein, Collier-Brown and Kelly.

Step 2: Running the Configuration Script

Technical documentation

» Table of Contents

» Glossary

» Index