HP-UX HB v13.00 Ch-20 - CIFS

HP-UX Handbook – Rev 13.00 Page 18 (of 40)
Chapter 20 CIFS
October 29, 2013
basic configuration:
Proceeding with samba_setup...
You now must choose a role for your server.
1) primary_domain_controller
2) backup_domain_controller
3) Windows_domain_member_server
4) ADS_member_server
5) workgroup
6) CANCEL
To understand what the script is about it is important to know what’s behind the concepts you
may choose:
 Samba can be a PDC or BDC (this does not yet allow synchronization to NT-BDCs)
 Samba can be a domain member server
 Samba can be a workgroup server, whereas the workgroup server offers itself three
different validation methods.
These different concepts are represented by the smb.conf parameter "security = …". In the
following context we will explain roughly what these parameters are about. For detailed reading
check out the O'Reilly book “Using Samba” (Chapter 6).
The WindowsNT domain model provides advantages like grouping workstations and servers
under the authority of a domain controller (DC) which allows central administration. The domain
controllers are the servers which perform all user logons and authentication. In Windows Active
Directory domains the domain controllers all share updates so that each DC contains the same
information in the accounts database. Domain trusts allow access to resources over domain
boarders. Microsoft provides graphical tools, such as Active Directory Users and Computers, to
administrate the domain.
Samba can be a PDC
PDC (Primary Domain Controller) is responsible for several tasks within the domain such as:
Authenticating user logons for users and workstations that are members of the domain. A PDC
acts as a centralized point for managing user account and group information for the domain. A
user logged on to the PDC as the domain administrator can add, remove or modify Windows
domain account information on any machine that is part of the domain.
HP CIFS Server provides the ability to act as a Primary Domain Controller for Windows 95, 98,
NT, 2000 and XP-clients including domain logon feature for Windows NT 4.0 SP3+ and
Windows 2000 clients. You can map built-in Windows groups and username to Unix groups. It
allows to view resources by the MS-server manager. It supports local and roaming profiles for
domainusers and with a specified logon home share for domainusers.
Features like SAM database (Security Accounts Manager database; containing NT user account