HP CIFS Server Administrator's Guide Version A.03.01.04 (5900-2303), April 2012

Roaming profiles....................................................................................................................64
Configuring roaming profiles...............................................................................................64
Configuring user logon scripts..................................................................................................65
Running logon scripts when logging on.................................................................................65
Home drive mapping support...................................................................................................65
Trust relationships...................................................................................................................66
Configuring smb.conf for trusted users..................................................................................66
Establishing a trust relationship on an HP CIFS PDC with another Samba Domain......................66
Establishing a trust relationship on an HP CIFS PDC with an NT domain....................................67
Trusting an NT Domain from a Samba Domain.................................................................67
Trusting a Samba Domain from an NT domain..................................................................67
Establishing a trust relationship on an HP CIFS member server of a Samba Domain or an NT
domain............................................................................................................................67
5 Windows 2003 and Windows 2008 domains.............................................68
Introduction............................................................................................................................68
HP CIFS and other HP-UX Kerberos applications co-existence........................................................68
HP-UX Kerberos client software and LDAP integration software dependencies..................................68
Strong authentication support ..................................................................................................69
Steps to install Certification Authority (CA) on a Windows ADS server......................................69
Steps to download the CA certificates from Windows CA server..............................................70
Configuring HP CIFS server to enable startTLS........................................................................70
Joining an HP CIFS server to a Windows 2000, Windows 2003, and Windows 2008 domain........71
Configuration parameters....................................................................................................71
Setting permissions for a user..............................................................................................72
Step-by-step procedure.......................................................................................................73
Trust relationships...................................................................................................................75
Establishing external trust relationships between HP CIFS PDCs and Windows 2003 and Windows
2008 domains..................................................................................................................75
Establishing a trust relationship on an HP CIFS member server of a Windows 2003 or Windows
2008 domain...................................................................................................................77
6 LDAP integration support...........................................................................78
Overview..............................................................................................................................78
HP CIFS server advantages.................................................................................................79
Network environments.............................................................................................................79
Domain model networks.....................................................................................................79
CIFS Server acting as the Primary Domain Controller (PDC)................................................79
CIFS Server acting as the member server..........................................................................79
CIFS Server acting as Backup Domain Controller (BDC) to Samba PDC................................79
CIFS server acting as an Active Directory Service (ADS) member server................................79
Workgroup model networks................................................................................................80
UNIX user authentication - /etc/passwd, NIS migration..........................................................80
The CIFS authentication with LDAP integration........................................................................80
Summary of installing and configuring......................................................................................81
Installing and configuring your directory server...........................................................................81
Installing the directory server...............................................................................................81
Configuring your directory server.........................................................................................82
Verifying the directory server...............................................................................................82
Installing LDAP-UX client services on an HP CIFS server................................................................82
Configuring the LDAP-UX client services.....................................................................................82
Quick configuration............................................................................................................83
Enabling Secure Sockets Layer (SSL)..........................................................................................86
Configuring the directory server to enable SSL.......................................................................86
Configuring the LDAP-UX client to use SSL..............................................................................87
Configuring HP CIFS Server to enable SSL.............................................................................87
Contents 5