MySQL, Java, JSP, Servlet, Tomcat and Jboss Web Hosting Blog

742 Part V . Running Servers to start the smbd and nmbd daemons is to set up the smb service to start automatically. Type chkconfig smb on to set the service to start at boot time.) Working with Samba Files and Commands Although you can set up Samba through the Samba Server Configuration window or SWAT, many administrators prefer to edit the /etc/samba/smb.conf directly. As root user, you can view the contents of this file and make needed changes. If you selected User security (as recommended), you will also be interested in the smbusers and smbpasswd files (in the /etc/samba directory). These files, as well as commands such as testparm and smbstatus, are described in the following sections. Editing the smb.conf File Changes you make using the Samba Server Configuration window or SWAT Web interface are reflected in your /etc/samba/smb.conf file. Here s an example of a smb.conf file (with comments removed): [global] workgroup = ESTREET server string = Samba Server on Maple hosts allow = 192.168.0. printcap name = /etc/printcap load printers = yes printing = cups log file = /var/log/samba/%m.log max log size = 0 smb passwd file = /etc/samba/smbpasswd security = user encrypt passwords = Yes unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %nn *Retype*new*password* %nn *passwd: *all*authentication*tokens*updated*successfully* pam password change = yes obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 username map = /etc/samba/smbusers dns proxy = no [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775
In case you need affordable webhost to host your website, our recommendation is ecommerce web host services.

Chapter 27 . Running a File Servers 741 Guest account If Guest OK is selected, the username that is defined here is assigned to users accessing the file system. No password will be required to access the share. The nobody user account (used only by users who access your computer remotely) is the default name used. (The FTP user is also a recommended value.) Read only If Yes, files can only be read from this file system, but no remote user can save or modify files on the file system. Select No if you want users to be allowed to save files to this directory over the network. Guest ok Select Yes to enable anyone access to this directory without requiring a password. Hosts allow Add the names of the computers that will be allowed to access this file system. Separate host names by commas, spaces, or tabs. Here are some valid ways of entering host names: localhost Allows access to the local host. 192.168.12.125 IP address. Enter an individual IP address. 192.168.12. Enter a network address to include all hosts on a network. (Be sure to put a dot at the end of the network number or it won t work!) pcren, pcstimpy Enables access to individual hosts by name. EXCEPT host If you are allowing access to a group of hosts (such as by entering a network address), use EXCEPT to specifically deny access from one host from that group. Hosts deny Denies access to specific computers by placing their names here. By default, no particular computers are excluded. Enter host names in the same forms you used for Hosts Allow. Browseable Indicates whether you can view this directory on the list of shared directories. This is on (Yes) by default. Available Enables you to leave this entry intact but turns off the service. This is useful if you want to close access to a directory temporarily. This is on (Yes) by default. Select No to turn it off. 4. Select Commit Changes. At this point, the shared file systems should be available to the Samba client computers (Windows 9x, Windows NT, Windows 2000, OS/2, Linux, and so on) that have access to your Linux Samba server. Before you try that, however, you can check your Samba configuration. Checking Your Samba Setup with SWAT From the SWAT window, select the STATUS button. From this window, you can restart your smbd and nmbd processes. Likewise, you can see lists of active connections, active shares, and open files. (The preferred way
We recommend high quality webhost to host and run your jsp application: christian web host services.

740 Part V . Running Servers . Domain master Set this to Yes if you want the Samba server (nmbd daemon) to identify itself as the domain master browser for its workgroup. This list will then allow client computers assigned to the workgroup to use SMB-shared files and printers from subnetworks that are outside their own subnetwork. This is set to No by default. If browsing isn t working, check the nmbd log file (/var/log/samba/log.nmbd). To get more detail, increase the debug information level to 2 or 3 (described earlier in this section) and restart Samba. The log can tell you if your Samba server is the master browser and, if so, which computers are on its list. WINS Options Use the WINS options if you want to have a particular WINS server provide the name-to-address translation of NetBIOS names used by SMB clients: . Wins server If there is a WINS server on your network that you want to use to resolve the NetBIOS names for your workgroup, enter that server s IP address here. Again, you probably want to use a WINS server if your workgroup extends outside the local subnetwork. . Wins support Set this value to Yes if you want your Samba server to act as a WINS server. (It s No by default.) Again, this is not needed if all the computers in your workgroup are on the same subnetwork. Only one computer on your network should be assigned as the WINS server. In addition to the values described here, you can access dozens more options by clicking the Advanced View button. When you have filled in all the fields you need, click Commit Changes on the screen to have the changes written to the /etc/ samba/smb.conf file. Configuring Shared Directories with SWAT To make your shared directory available to others, add an entry to the SWAT window. To use SWAT to set up Samba to share directories, do the following: You may see one or more security warnings during the course of this procedure. These messages warn you that someone can potentially view the data you are sending to SWAT. If you are working on your local host or on a private LAN, the risk is minimal. 1. From the main SWAT window, click the SHARES button. 2. Type the name of the directory that you want to share in the Create Share box, and then click Create Share. 3. Add any of these options: Comment A few words to describe the shared directory (optional). Path The path name of the directory you are sharing. Note Note
Check Tomcat Web Hosting services for best quality webspace to host your web application.

Chapter 27 . Running a File Servers 739 . Samba can be configured as a master browser, which allows it to gather lists of computers from local browse masters to form a wide-area server list. (Browse masters keep track of available shared directories and printers on the network of Samba systems and broadcast information about those resources as necessary.) . If Samba is acting as a domain master browser, Samba should use a WINS server to help browse clients resolve the names from this list. . Samba can be used as a WINS server, although it can also rely on other types of operating systems to provide that service. . There should be only one domain master browser for each workgroup. Don t use Samba as a domain master for a workgroup with the same name as an NT domain. If you are working in an environment that has a mix of Samba and Windows NT servers, use an NT server as your WINS server. If Samba is your only file server, choose a single Samba server (nmbd daemon) to supply the WINS services. A WINS server is basically a name server for NetBIOS names. It provides the same service that a DNS server does with TCP/IP domain names: It can translate names into addresses. A WINS server is particularly useful for allowing computers to communicate with SMB across multiple subnetworks where information is not being broadcast across the subnetworks boundaries. To configure the browsing feature in Samba, you must have the workgroup named properly (described earlier in this section). Here are the global options related to SMB browsing: . OS level Set a value to control whether your Samba server (nmbd daemon) may become the local master browser for your workgroup. Raising this setting increases the Samba server s chance to control the browser list for the workgroup in the local broadcast area. If the value is 0, a Windows machine will probably be selected. A value of 60 ensures that the Samba server is chosen over an NT server. The default is 20. . Preferred master Set this to Yes if you want to force selection of a master browser and give the Samba server a better chance of being selected. (Setting Domain Master to Yes along with this option ensures that the Samba server will be selected.) This is set to Auto by default, which causes Samba to try to detect the current master browser before taking that responsibility. . Local master Set this to Yes if you want the Samba server to become the local browser master. (This is not a guarantee, but gives it a chance.) Set the value to No if you do not want your Samba server selected as the local master. Local Master is Auto by default. Note
From our experience, we are can tell you that you can find a reliable and cheap webhost service at Java Web Hosting services.

738 Part V . Running Servers Performance Options The Socket Options option lets you pass options to the protocols Samba uses to communicate. The following options are set by default: TCP_NODELAY, SO_RCVBUF= 8192, and SO_SNDBUF=8192. The first option disables Nagle s algorithm, which is used to manage the transmission of TCP/IP packets. The other two options set the maximum size of the sockets receive buffer and sockets send buffer to 8192, respectively. These options are set to improve performance (reportedly up to ten times faster than without setting these options). In general, you shouldn t change these options. Printing Options The printing options are used to define how printer status information is presented. For the overwhelming majority of Linux systems, the printing value is set to cups. You can use printing styles from other types of operating systems, such as UNIX System V (sysv), AIX (aix), HP UNIX (hpux), and Berkeley UNIX (bsd), to name a few. LPRng (lprng), offered by many UNIX systems, is also included. Other printing options enable you to redefine the location of basic printing commands (lpq, lprm, and so on) and printing files (such as the name of the printcap file). Browse Options A browse list is a list of computers that are available on the network to SMB services. Clients use this list to find computers that are on their own LAN and also computers in their workgroups that may be on other reachable networks. In Samba, browsing is configured by options described later in this section and implemented by the nmbd daemon. If you are using Samba for a workgroup within a single LAN, you probably don t need to concern yourself with the browsing options. However, if you are using Samba to provide services across several physical subnetworks, you might want to consider configuring Samba as a domain master browser. Here are some points to think about: Assigning Guest Accounts Samba always assigns the permissions level of a valid user on the Linux system to clients who use the server. In the case of share security, the user is assigned a guest account (the nobody user account by default). If the guest account value isn t set, Samba goes through a fairly complex set of rules to determine which user account to use. The result is that it can be hard to ensure which user permissions will be assigned in each case. That s why user security is recommended if you want to provide more specific user access to your Samba server.
Please visit our professional web hosting services to find out about cheap and reliable webhost service that will surely answer all your demands.

Chapter 27 . Running a File Servers 737 . Passwd program Indicates which password program to use to change Linux user passwords. By default, /usr/bin/passwd is used, with the current username (%u) inserted. . Passwd chat Sets the chat that goes on between the Samba daemon (smbd) and the Linux password program (/usr/bin/passwd by default) when smbd tries to synchronize SMB passwords with Linux user passwords. . Username map Sets the file used to map Samba usernames. By default, this file is /etc/samba/smbusers. . UNIX password sync With this on (Yes), Samba tries to update a user s Linux user password with his or her SMB password when the SMB password is changed. To do this, SMB runs the passwd command as the root user. This is on by default. . Guest account Specifies the username for the guest account. When a service is specified as Guest OK, the name entered here is used to access that service. The account is usually the nobody username. Make sure that the guest account is a valid user. (The default of nobody should already be set up to work.) With an invalid user as the guest account, the IPC$ connection that lists the shared resources fails. . Hosts allow Contains a list of one or more hosts that are allowed to use your computer s Samba services. By default, users from any computer can connect to the Samba server (of course, they still have to provide valid usernames and passwords). Generally, you use this option to allow connections from specific computers (such as 10.0.0.1) or computer networks (such as 10.0.0.) that are excluded by the hosts deny option. . Hosts deny Contains a list of one or more hosts from which users are not allowed to use your computer s Samba services. You can make this option fairly restrictive, and then add the specific hosts and networks you want to use the Samba server. By default, no hosts are denied. Logging Options The following options help define how logging is done on your Samba server: . Log level Sets the debug level used when logging Samba activity. Raise the level from the default (0) to log more Samba activity. . Log file Defines the location of the Samba smb log file. By default, Samba log files are contained in /var/log/samba (with file names log.nmbd, log.smbd, and smb.log). In this option, the %m is replaced by smb to set the smb log file as /var/log/samba/smb.log. . Max log size Sets the maximum amount of space, in kilobytes, that the log files can consume. By default, the value is set to 0 (no limit). Tip
In case you need affordable webhost to host your website, our recommendation is ecommerce web host services.

736 Part V . Running Servers user account to every client user who will use the Samba server, therefore providing basically the same file permissions to a user account through Samba as the same user would get if he or she were logged in directly to Linux. share The share value for security works best for just print sharing or for providing file access that is more public (guest sharing). A client doesn t need to provide a valid username and password to access the server. However, the user typically has a guest level of permission to access and change files. See the Assigning Guest Accounts sidebar in this chapter for further information. server From the client s point of view, this is the same as user security in that the client still has to provide a valid username/password combination to use the Samba server at all. The difference is on the server side. With server security, the username/password is sent to another SMB server for validation. If that fails, Samba tries to validate the client using user security. domain From the client s point of view, this also looks the same as user security. This setting is used only if the Samba server has been added to a Windows NT domain (using the smbpasswd command). When a client tries to connect to the Samba server in this mode, its username and password are sent to a Windows NT Primary or Backup Domain controller. This is accomplished the same way that a Windows NT server would perform validation. Valid Linux user accounts must still be set up. . Encrypt passwords Controls whether encrypted passwords can be negotiated with the client. This is on (Yes) by default. For domain security, this value must be Yes. Later versions of Windows NT (4.0 SP3 or later) and Windows 98 and Windows 2000 expect encrypted passwords to be on. . Update encrypted Allows users who log in with a plain-text password to automatically have their passwords updated to encrypted passwords when they log in. Normally, this option is off. Turn it on when you want an installation using plain-text passwords to have everyone updated to encrypted password authentication. It saves users the trouble of running the smbpasswd command directly from the server. After everyone is updated, this feature can be turned off. When this option is on, the Encrypt passwords option should be set to No. . Obey PAM restrictions Turn this on (Yes) if you want to use PAM for account and session management. Even if activated, PAM is not used if the encrypted passwords feature is turned on (encrypt passwords = yes). (PAM stands for Pluggable Authentication Modules and is used for authenticating host computers and users.) . PAM password change Indicates to use the PAM password change control flag for Samba. If this is on (Yes), SMB clients will use PAM instead of the program listed in the Password Program value for changing SMB passwords.
We would like to recommend you tested and proved virtual web hosting services, which you will surely find to be of great quality.

Chapter 27 . Running a File Servers 735 Base Options The following options relate to basic information associated with your Samba server: . Workgroup The name of the workgroup associated with the group of SMB hosts. By default, the value for this field is WORKGROUP. . Realm If you are using kerberos authentication, this value indicates the kerberos realm to use. Typically, that is reflected by the host name of the server providing the service. . NetBIOS name The name assigned to this Samba server. You can use the same name as your DNS host name or make it blank, in which case the DNS host name is used automatically. Your DNS host name is filled in for you by default. . NetBIOS alias Enables you to set a way of referring to a host computer (an alias) that is different from the host s TCP/IP DNS name. . Server string A string of text identifying the server. This name appears in places such as the printer comment box. By default, it says Samba and the version number. . Interfaces Enables you to set up more than one network interface and let Samba browse several different subnetworks. The form of this field can be IP Address/Subnetwork Mask. Or, you could identify a network interface (such as eth0 for the first Ethernet card on your computer). For example, a Class C network address may appear as: 192.168.24.11/255.255.255.0 Security Options Of the security options settings, the first (security) is the most important one to get right. It defines the type of security used to give access to the shared file systems and printers to the client computers. (To see some of the fields described here, you need to click the Advanced view.) . Security Sets how password and user information is transferred to the Samba server from the client computer. As noted earlier, it s important to get this value right. Samba 2.0 and later has a different default value for security (security=user) than the earlier versions of Samba do (security=share). If you are coming from an earlier version of Samba and clients are failing to access your server, this setting is a good place to start. Here are your options: user The most common type of security used to share files and printers to Windows 95/98/2000/NT/XP clients. It is the default set with Samba in the current release. This setting is appropriate if users are doing a lot of file sharing (as opposed to a Samba server used mostly as a print server). It requires that a user provide a username/password before using the server. The easiest way to get this method working is to give a Linux
You need excellent and relaible webhost company to host your web applications? Then pay a visit to Inexpensive Web Hosting services.