HP CIFS Server Administrator's Guide Version A.03.01.01 (5900-1282, May 2011)

Roaming Profiles.....................................................................................................................64
Configuring Roaming Profiles...............................................................................................64
Configuring User Logon Scripts.................................................................................................65
Running Logon Scripts When Logging On.............................................................................65
Home Drive Mapping Support..................................................................................................65
Trust Relationships...................................................................................................................66
Configuring smb.conf for Trusted Users.................................................................................66
Establishing a Trust Relationship on an HP CIFS PDC With Another Samba Domain....................66
Establishing a Trust Relationship on an HP CIFS PDC With an NT Domain.................................67
Trusting an NT Domain from a Samba Domain.................................................................67
Trusting a Samba Domain from an NT Domain.................................................................67
Establishing a Trust Relationship on an HP CIFS Member Server of a Samba Domain or an NT
Domain............................................................................................................................67
5 Windows 2003 and Windows 2008 Domains............................................68
Introduction............................................................................................................................68
HP CIFS and Other HP-UX Kerberos Applications Co-existence.....................................................68
HP-UX Kerberos Client Software and LDAP Integration Software Dependencies................................68
Strong Authentication Support .................................................................................................69
Steps to install Certification Authority (CA) on a Windows ADS Server......................................69
Steps to Download the CA Certificates From Windows CA Server............................................70
Configuring HP CIFS Server to Enable startTLS.......................................................................70
Joining an HP CIFS Server to a Windows 2000, Windows 2003, and Windows 2008 Domain.......71
Configuration Parameters....................................................................................................71
Setting Permissions for a User..............................................................................................72
Step-by-step Procedure........................................................................................................73
Trust Relationships...................................................................................................................75
Establishing External Trust Relationships between HP CIFS PDCs and Windows 2003 and Windows
2008 Domains..................................................................................................................75
Establishing a Trust Relationship on an HP CIFS Member Server of a Windows 2003 or Windows
2008 Domain...................................................................................................................77
6 LDAP Integration Support...........................................................................78
Overview..............................................................................................................................78
HP CIFS Server Advantages................................................................................................79
Network Environments.............................................................................................................79
Domain Model Networks....................................................................................................79
CIFS Server Acting as the Primary Domain Controller (PDC)................................................79
CIFS Server Acting as the Member Server........................................................................79
CIFS Server Acting as Backup Domain Controller (BDC) to Samba PDC................................79
CIFS Server acting as an Active Directory Service (ADS) Member Server..............................80
Workgroup Model Networks...............................................................................................80
UNIX User Authentication - /etc/passwd, NIS Migration.........................................................80
The CIFS Authentication with LDAP Integration.......................................................................80
Summary of Installing and Configuring......................................................................................81
Installing and Configuring Your Directory Server.........................................................................81
Installing the Directory Server..............................................................................................81
Configuring Your Directory Server........................................................................................82
Verifying the Directory Server..............................................................................................82
Installing LDAP-UX Client Services on an HP CIFS Server..............................................................82
Configuring the LDAP-UX Client Services....................................................................................82
Quick Configuration...........................................................................................................83
Enabling Secure Sockets Layer (SSL)..........................................................................................86
Configuring the Directory Server to enable SSL......................................................................86
Configuring the LDAP-UX Client to Use SSL............................................................................87
Configuring HP CIFS Server to enable SSL.............................................................................88
Contents 5