Chapter 2. Configuring Server Settings
The first step in configuring a Samba server is to configure the
basic settings for the server and a few security options. After
starting the application, select =>
from the pulldown
menu. The Basic tab is displayed as shown in
Figure 2-1.
On the Basic tab, specify which workgroup the
computer should be in as well as a brief description of the
computer. They correspond to the workgroup and
server string options in
smb.conf.
The Security tab contains the following
options:
Authentication Mode — This
corresponds to the security option. Select
one of the following types of authentication.
ADS — The Samba server acts
as a domain member in an Active Directory Domain (ADS)
realm. For this option, Kerberos must be installed and
configured on the server, and Samba must become a member of
the ADS realm using the net utility, which
is part of the samba-client
package. Refer to the net man page for
details. This option does not configure Samba to be an ADS
Controller.
Domain — The Samba server
relies on a Windows NT Primary or Backup Domain Controller to
verify the user. The server passes the username and password
to the Controller and waits for it to return. Specify the
NetBIOS name of the Primary or Backup Domain Controller in the
Authentication Server field.
The Encrypted Passwords option must
be set to Yes if this is selected.
Server — The Samba server
tries to verify the username and password combination by
passing them to another Samba server. If it can not, the
server tries to verify using the user authentication
mode. Specify the NetBIOS name of the other Samba server in
the Authentication Server field.
Share — Samba users do not
have to enter a username and password combination on a per
Samba server basis. They are not prompted for a username and
password until they try to connect to a specific shared
directory from a Samba server.
User — (Default) Samba users
must provide a valid username and password on a per Samba
server basis. Select this option if you want the
Windows Username option to work. Refer
to Chapter 3 Managing Samba Users for details.
Encrypt Passwords — This option
must be enabled if the clients are connecting from a Windows 98,
Windows NT 4.0 with Service Pack 3, or other more recent
versions of Microsoft Windows. The passwords are transfered
between the server and the client in an encrypted format instead
of in as a plain-text word that can be intercepted. This
corresponds to the encrypted passwords
option.
Guest Account — When users or
guest users log into a Samba server, they must be mapped to a
valid user on the server. Select one of the existing usernames on
the system to be the guest Samba account. When guests logs in to
the Samba server, they have the same privileges as this
user. This corresponds to the guest account
option.
After clicking OK, the changes are written to
the configuration file and the daemon is restart; thus, the changes
take effect immediately.
