Samba on NonStop User Manual

NOTE: While configuring NS-Samba using SWAT is convenient, it demands an appropriate
security setup. Without appropriate security mechanism in place, it might compromise the security
of the NonStop system. See section “Securing SWAT” (page 24) to know various steps to be taken
to secure SWAT.
File Shares
Each section in the configuration file (except for the [global] section) describes a shared resource
(known as a “share”), which in NS-Samba refers to file share service. To allow access to a portion
of NonStop file-system, you have to specify the name of the directory in the path parameter of a
share. The section “Quick Start” (page 25) provides an example. For more information and syntax
details, see the smb.conf manpage.
NOTE: Files on the Guardian personality of a NonStop system can be accessed through the OSS
file-system from the /G directory. For more information, see “NS-Samba Limitations” (page 10).
Users
You have to be a registered user with NS-Samba, to access the file share services provided by it.
Services configured as public/guest ok are exceptions to this rule. For more information, see
the smb.conf manpage.
NS-Samba adds/registers a user with itself by adding the user credentials to its user account
database, either smbpasswd or passdb.tdb, based on the configuration. The specified user
must have a corresponding user account in the NonStop system. To allow a user to access a share,
complete the following steps:
1. Add the user to NonStop system and assign aliases if you wish to, if it has not been added
already.
For more information, see the Security Management Guide.
2. Add the user and/or alias to the NS-Samba user account database.
See the manpages of smbpasswd and pdbedit tools. smbpasswd and pdbedit can also
be used for deleting, enabling, or disabling an NS-Samba user.
3. Configure file share services appropriately to provide access to the intended user and/or
aliases.
For more information, see the smb.conf manpage.
NOTE: NS-Samba treats a NonStop user and its aliases as separate entities. You can add the
username or an alias to that user as an NS-Samba user, but the username and an alias to that
name cannot be used interchangeably to access NS-Samba shares.
For more information on user, access and privilege management, see the Official Samba 3.5.x
HOWTO and Reference Guide.
Starting the NS-Samba Daemons
The NS-Samba daemons, namely, smbd and nmbd, must be running to provide the share services.
To start the NS-Samba daemons, use one of the following methods:
File Shares 17