Only about 8 months from release of Samba 3.0.0, there is beginning to be the transition from 2.2.x. Here again, I will explain the Notes on new features and migration of Samba 3.0 series. (Editorial office)

The Samba Team as an Samba of developer, especially in Mr. currently Gerald (Jerry) Carter, has continued the development and release of Samba 3.0 series as a stable version. Samba 3.0 series, since Samba 3.0.0 is released on September 24, 2003, and upgraded to Samba 3.0.3 In time of writing (May 2004) (Editor's Note), bug fixes and small function and improvement have been made. Along with this, including the Red Hat Enterprise Linux (RHEL) 3.0, also distribution to adopt the Samba 3.0 series has been gradually increasing.

Editor's Note: Then, Samba 3.0.4 has been released by the end of this article the time of publication.

So far in the person who was using the Samba 2.2 series also, I think people who Ya you have already migrated you are considering a migration to Samba 3.0 series is increasing. So, in this article the whole picture of Samba 3.0 as revised, and then describes the notes during the transition from the feature and Samba 2.2 series of Samba 3.0 series.

New features and changes of Samba 3.0 series

First of all, I will list the main thing about the features that have been added or changed significantly in Samba 3.0 series. For a complete description of each feature, I will introduce later with the setting method.

1. change of internationalization (Japanese correspondence) function
To take advantage of the iconv () to the character code conversion, implementation has been changed significantly. In accordance with this, significant changes have occurred in the parameters.

2. internationalization of SWAT
Outcome of Samba Japanese version is shipped, SWAT became a multilingual.

3. Unicode support in communication path
You do not need to be aware of directly, but looks like communication on the network is carried out in a Windows NT-based OS (Note) and the same Unicode-based (UCS-2).

Note: such as Windows 2000 / XP / Windows Server 2003. Following the same.

4. Active Directory participation function
Support for Kerberos authentication, has become possible to participate in the Active Directory as well as the OS since Windows 2000.

5. Winbind enhancements
the mapping table between the uid and gid I can now centrally managed in the LDAP server.

6. of any of the global group support
In NT domain that was constructed in the Samba (Note), was now possible to create any of the global group.

Note: Windows domain the domain controller is configured with Windows NT or Samba. Following the same.

7. interdomain trust relationship
In NT domain that was constructed in the Samba, it is now possible to construct an explicit one-way trust relationship.

8. support of a variety of authentication database
In addition to the conventional smbpasswd file, it is now possible to use at the same time by combining a variety of authentication methods in any order.

9. extension of SMB security
Such as encryption of SMB signing and secure channel, was for many of the security features included in the Windows OS.

10. Expansion of management commands
Around the net command that is newly added, UNIX and Windows machines and Windows domain (Note) (if not otherwise specified is also included Linux. The following R) functions to manage the machines on the command line has not been greatly expanded you.

Note: is used as a generic term for NT domain and AD domain (Windows domain that has been configured with Windows 2000 Server and later domain controller). Following the same.

Installation of Samba 3.0 series

For installation of Samba 3.0 series, I will briefly describe.

Recently, because Samba 3.0 series as a package of OS and distributions have been increasing even if it is installed, please first try to check. For example, Samba package that comes with RHEL 3.0 and Fedora Core has become a Samba 3.0 series, also there are no Japanese file name support issues, which will be described later. However, because of the Japanese support issues some distributions, it does not necessarily and can be used as it is even if there is a package.

At least, if as Japanese file name is written in EUC by specifying the eucJP-ms as the value of the unix charset parameter, which will be described later, Japanese file name support you may believe that no problem.

■ Installing from informal package

Distributions not use the supplied package environment, if you want to easily try the Samba 3.0 series, the Linux has the following methods.

● Red Hat-based distributions

For Linux distributions Red Hat system, it is possible to make use of informal RPM package provides Japan Samba Users Group, which is available from the following URL.

http://ftp.samba.gr.jp/pub/samba-jp/samba-3.0-ja/
ftp://ftp.samba.gr.jp/pub/samba-jp/samba-3.0-ja/

From here to get the SRPM file, it would be better to create and use a RPM package and rebuild.

In addition, the package

  • those to replace the glibc
  • To install the GNU libiconv (or replace) those

There are two types of. Since the replacement of glibc large influence on the other, you may package to install the GNU libiconv If you want to try the time being.

Package of rebuilding from SRPM file, I done in the following command.

# cd /usr/src/redhat/SRPMS/
# rpm --rebuild libiconv-1.8-1.src.rpm
# rpm --rebuild samba-3.0.0-3iconv.src.rpm

Recompilation of SRPM
Note: In the case of Red Hat Linux 8 and later, that you run the rpmbuild command instead of the rpm command. In addition, SRPM file necessary, in advance / usr / src / redhat / SRPMS may want to copy below.

After a successful rebuild, / usr / Because src / redhat / RPM / RPMS / i386 RPM file below is created, please do the installation by using this. It should be noted that since the Samba compilation is performed at the time of rebuild, in addition to the general development environment, including the GCC, LDAP, the development environment, such as Kerberos must be installed.

● Debian

If you are using, such as Debian GNU / Linux 3.0, you can use the package that Mr. Saito has to offer. In an environment capable of communicating with the Internet, to the / etc / apt / sources.list file,

deb http://everybody.good-day.net/~nsaito samba3/

Fixes /etc/apt/sources.list file

Did on add a description like, please do the installation in the following manner.

# apt-get update
# apt-get install locales
# apt-get install samba

Commands that are required to install

■ Installing from source

The above method can not be used, or for example, if you want to use the latest version, it will be installed from the source. In this case, usually requires the installation of GNU libiconv prior to the installation of Samba. Also, if you want to enable support for LDAP authentication database or AD domain, you must also be installed LDAP and Kerberos development environment.

Installation of ● GNU libiconv

Character code conversion including Japanese Samba 3.0 in series, as described below, is achieved by Samba external iconv () function. The iconv () function, I present in glibc of various UNIX and Linux distributions, but most of the iconv () function,

  • Is not supported, such as machine-dependent character
  • Conversion table of character codes of the Unicode is not a Windows fully compatible

Such as there is a problem, there is a problem in order to use in Samba.

By the efforts of Mr. Moriyama, this point has been resolved in the glibc-2.3.3 or later. Even glibc-2.2.5 or later and GNU libiconv-1.8 or later, it is possible deal in which to apply the Japanese locale support patch, which also created Moriyama Mr.. However, for the replacement of glibc has a large influence, is basically a good idea that you have installed the GNU libiconv of applying the Japanese locale patch.

The latest version of the GNU libiconv in time of writing but is 1.9.2, the latest version of the Japanese locale patch, GNU libiconv-1.9 that have been published in Issues in iconv page of Miracle Linux's Samba 3.0 internationalization project. It becomes Japanese locale patch libiconv-1.9.1-cp932.patch.gz for 1.

In terms of acquired separately libiconv-1.9.1.tar.gz, please do the installation in the following manner. In order to install the Samba 3.0 series, specify the configure option is not required.

$ ls
libiconv-1.9.1.tar.gz libiconv-1.9.1-cp932-patch.gz
$ tar xf libiconv-1.9.1.tar.gz
$ cd libiconv-1.9.1
$ zcat ../libiconv-1.9.1-cp932-patch.gz | patch -p1
$ ./configure; make;
$ su
# make install

Patching and installation of the GNU libiconv-1.9.1

After the GNU libiconv installation is complete,

$ /usr/local/bin/iconv -l | grep -i EUCJP-MS
EUCJP-MS

Confirmation of EUCJP-MS locale
Note: it is sufficient line output that EUCJP-MS.

Run a, it's a good idea to check that the EUCJP-MS locale to be added has been recognized by the patch.

In addition, in the case of Linux for inclusion in the reference path of the shared library / usr / local / lib, in / etc / ld.so.conf,

/usr/local/lib

Add a single line, please sure you have run ldconfig command.

● installation of Samba 3.0 series

Once you have installed the GNU libiconv, it is finally the installation of Samba body.

From Samba 3.0 series, many features I now to enable or so can be set in the parameters in the smb.conf, the function to automatically detect the configure at environment. Therefore, configure option is not so much to consider. Of the Samba-specific configure options, it indicates that those who were conscious seems to be good in Table 1.

Is indispensable basically specified

--with-libiconv = <directory>
Specifies the installation of GNU libiconv

--with-pam
Enabling PAM support

Shall be specified as necessary

--with-ads
Active support of Directory corresponding function

--with-ldapsam
Support for LDAP authentication feature of Samba 2.2 series compatible

The main configure options in Table 1 Samba 3.0

In order to use the libiconv you just created, - with-libiconv option must be specified. If the system is to support the PAM is, - with-pam also a good idea you gave.

default of --with-ads has become the auto. For this reason, if the LDAP and Kerberos development environment if installed, automatically enabled Active Directory corresponding function. However, Active Directory support functions will be disabled without warning otherwise.

By specifying explicitly this option, since LDAP and Kerberos development environment is to configure error if not installed, you can avoid the trouble that the "this function within do not know had been disabled" .

For other options, please set as necessary. Author used, such as during verification, all the major features I shows the configure option to support below.

./configure --with-libiconv=/usr/local --with-automount --with-smbmount --with-pam --with-pam_smbpass --with-ldapsam --with-syslog --with-quotas --with-utmp --with-winbind --with-ldap --with-ads --with-smbwrapper

Note: However, - with-ldapsam If you give the order to the default authentication database is no longer smbpasswd, this option would be better I do not give unless really necessary.

If you especially do not perform the specified destination, will be installed Samba is below If you do make install / usr / local / samba. I shows the flow of up to install the following from configure.

$ tar xjf samba-3.0.3.tar.bz2
$ cd samba-3.0.3/source
$ ./configure --with-libiconv=< ディレクトリ > --with-pam < そのほかのオプション >
$ make
$ su
# make install

Configure and installation instructions of Samba 3.0.3

Internationalization features and character code support

■ Changing the internationalization (Japanese correspondence) function

We as a large point of most impact for the Japanese, you include change of character code-related parameters, including the Japanese. To Samba 2.2 series, the conversion of the so-called character code (encoding format) Samba himself had done. In Samba 3.0 series, except for Unicode (UCS-2, UTF-8) and some of the character code such as CP850, implementation to take advantage of the standard iconv () function has been significantly changed.

For up to Samba 2.2 series dealing with Japanese correctly,

[global]
client code page = 932
coding system = SJIS／EUC／CAP／HEXなど

There was a need to properly set the two parameters. On the other hand, the conventional parameters in Samba 3.0 series is obsolete and has been newly added on behalf of,

[global]
unix charset = CP932／EUCJP-MS／UTF-8など
dos charset = CP932
display charset = CP932／EUCJP-MS／UTF-8など

You control the character code using the three parameters. This will have a meaning, such as each Table 2.

unix charset
Character codes are used in a file system on UNIX (coding format). However, to change the character code of the various configuration files, including the character code and smb.conf that Samba will use internally at the same time

dos charset
Specifies the character code that is available in the Windows side. When using the Japanese, set the CP932 or equivalent character codes

display charset
Specifies the character code that is displayed in the SWAT of the screen. Character code that you specify if you want to use the Japanese language, different depending on the version of Samba

Table 2 character code-related parameters

The value of each parameter, please specify the various locale names that are supported by the iconv () function (Note).

Note: Due to the implementation of iconv () function, locale names that are supported will vary. In this paper, I will describe what the application of the Japanese corresponding patch described above to GNU libiconv and glibc included iconv () as an example.

A typical configuration of the case of using a Japanese file name is as follows.

[global]
unix charset = EUCJP-MS／CP932／UTF-8 （1）
dos charset = CP932
display charset = CP932 （2）

Typical settings in using Japanese file name

(1)
Each (including the EUC3) value of coding system parameters EUC in Samba 2.2 series, corresponding to the case of SJIS, UTF8.

(2)
In the case of Samba 3.0.2 or later, there is a need to set to the same value as the unix charset.

■ CAP and HEX of support

To Samba 2.2 series has a value such as CAP and HEX to coding system parameters, are widely used. However, these was because it is not supported in the personality on the iconv () function, so as to support using the VFS function of Samba 3.0 series.

For CAP,

[global]
unix charset = CP932
…
[cap_share1]
vfs objects = cap （1）

Support of CAP (and HEX) in Samba 3.0 series

(1)
vfs_cap I want to enable the module. cap always be specified in lowercase. Note that the HEX module enable HEX installation environment may be hex and specified instead of cap.

Of way, and then achieved by the combined use of VFS module called vfs_cap to share units after you have specified the CP932 as unix charset.

For HEX, because it is not shipped with Samba body, you must use the HEX modules that are shipped with the artifacts of Samba 3.0 internationalization project. Such as setting method is similar to the CAP.

Considerations of ■ Migration

For technical reasons, in the Samba 2.2 series and the Samba 3.0 series, different positions that are mapped in the part of the machine-dependent characters (Note).

Note: However, this is only a story about the implementation of iconv () function that is included in the glibc and GNU libiconv. In theory, all of iconv () function does not necessarily applicable.

Simply if you have upgraded Samba, if there is a file name that uses a model dependent characters corresponding to Table 3, is a problem in such will not be able to access the file may occur.

List of characters Table 3 problem

Source: how to migrate to Samba 3 of Japanese file name of the Samba 2 Japanese version ( Http://Www.Miraclelinux.Com/technet/samba30/migration.Html )

If you are using these characters, you must perform the migration of file name during the migration. One of the migration method is, once you copy the files from the problem on Windows, after Samba version up, it is that written back again to share on the Samba.

If you do the conversion of the file name on the server side, you can either use the SMBCHARTOOL 3.0 that Samba 3.0 internationalization project has to offer, you can create a script with the same function, please do the migration of file name.

If you use the SMBCHARTOOL 3.0,

$ smbfnconv -f euc3 -t eucjp-ms

Example of the use of SMBCHARTOOL

euc3
:
The value of the coding system parameters in Samba 2.2 series

eucjp-ms
:
Value of unix charset parameter in the Samba 3.0 series

Through the like, it can migrate a file name on the server.

For more information on how to use SMBCHARTOOL is,

Please refer to the.

■ internationalization of SWAT

In Samba 3.0 series, internationalization features of SWAT, which is implemented in Samba Japanese version has been integrated. As a result, the Japanese display of SWAT screen has been implemented as standard in screen 1 in Samba 3.0.1 or later.

Screen 1 SWAT of Japanese screen

In order to ensure that Japanese is properly displayed, the value of the display charset parameters as described above

  • Until Samba 3.0.1 is CP932
  • Samba 3.0.2 and later the same value as the unix charset parameter

Must be set to.

Of change Samba 3.0.2 or later, is due to the fact that Samba Team does not understand this function adequately, we believe as the author to be a bug. Also, originally this feature by reference to the value of the Accept-Language header Web browser sends out (only), was intended to be to change the language to dynamically display. However, there is also such as at the time of the author's misunderstanding, status quo because it is necessary to set the display charset parameters statically, it has become a half-hearted implementation as a result. Therefore, we believe that there is a high possibility that you want to change the setting method in accordance with the version up in the future.

If this feature you do not want to use the, please delete the * .msg file that is installed by default in the same directory as the smb.conf. In addition, lang_ <language name> .tdb file that is generated from this file if (in the case of Japanese is that lang_ja.tdb) there is (Note), it also please delete.

Note: This file is, by default, is generated in the / usr / local / samba / var / locks directory.

It should be noted that, although not directly related to the SWAT internationalization, until Samba 3.0.3 and account creation and password change from the SWAT of PASSWORD screen was not functioning properly. In this regard, it has been confirmed that it has been fixed in Samba 3.0.4.

■ Unicode support in communication path

As major changes while sober, character code flowing over the network, from the national character code, such as the same shift JIS and Windows 9x series, will include that it has become the same Unicode and Windows NT series (UCS-2) ( Fig. 1).

But until Samba 2.2 series is sent in the Shift-JIS was done, character code that is sent for some of the characters in the Windows 9x system and the Windows NT system there was a problem that different. Therefore, it was not forced to support in Samba side using very tricky means in Samba Japanese version.

With this Unicode reduction, this problem should naturally disappear. It also enables the use of Japanese from SMB client file name of non-ASCII, which are supported by only communication in Unicode (such as SMB feature of Mac OS X).

Figure 1 letter code used in Samba

current status of the installation and the internationalization of Samba 3.0的更多相关文章

  1. CPU acceleration status:HAXM must be updated(version 1.1.1<6.0.1)

    终于上手as了,感觉很爽 但是感觉也特闹心啊 还好有stackoverflow(这特么才是一个神奇的网站好吗) 废话少说 记录一下: 前面历经的磨难暂时不说了,就这个CPU acceleration ...

  2. 启动安卓模拟器报错 emulator: ERROR: x86_64 emulation currently requires hardware acceleration! CPU acceleration status:HAXM must be updated(version 1.1.1<6.0.1) 解决办法

    启动安卓模拟器报错 emulator: ERROR: x86_64 emulation currently requires hardware acceleration!  CPU accelerat ...

  3. ASP.NET多线程下使用HttpContext.Current为null解决方案 2015-01-22 15:23 349人阅读 评论(0) 收藏

    问题一:多线程下获取文件绝对路径 当我们使用HttpContext.Current.Server.MapPath(strPath)获取绝对路径时HttpContext.Current为null,解决办 ...

  4. ASP.NET多线程下使用HttpContext.Current为null解决方案 2015-01-22 15:23 350人阅读 评论(0) 收藏

    问题一:多线程下获取文件绝对路径 当我们使用HttpContext.Current.Server.MapPath(strPath)获取绝对路径时HttpContext.Current为null,解决办 ...

  5. Android studio 中，遇到报错：ERROR: x86_64 emulation currently requires hardware acceleration! CPU acceleration status:HAXM must be updated(version 1.1.1<6.0.1)的解决方法

    在 Android SDK 的安装目录下找到intelhaxm-android.exe安装即可.忘记目录位置直接在“计算机”中搜索,如果没有,返回Android studio 的“设置”,找到 这个图 ...

  6. HTTP Status 500：报错Unsupported major.minor version 51.0(unable to load class XXX)

    这个是jdk版本和JRE不匹配导致的. 报错信息: 问题详解:(待填) 处理: 1.检查jdk和jre版本是否匹配 ——打开命令行界面(cmd),分别输入java -version 和javac -v ...

  7. oracle_hc.sql

    select event,count(1) from gv$session group by event order by 2;exec dbms_workload_repository.create ...

  8. 云中树莓派（3）：通过 AWS IoT 控制树莓派上的 Led

    云中树莓派(1):环境准备 云中树莓派(2):将传感器数据上传到AWS IoT 并利用Kibana进行展示 云中树莓派(3):通过 AWS IoT 控制树莓派上的Led 云中树莓派(4):利用声音传感 ...

  9. P6 Professional Installation and Configuration Guide (Microsoft SQL Server Database) 16 R1

    P6 Professional Installation and Configuration Guide (Microsoft SQL Server Database) 16 R1       May ...

随机推荐

  1. 一百一十九：CMS系统之将短信验证码和图形验证码放到memcached缓存中

    将两个验证码的视图都放到common蓝图下 from flask import Blueprint, request, make_responsefrom exts import alidayufro ...

  2. [Distributed ML] Yi WANG's talk

    王益,分布式机器学习的践行者,他的足迹值得后来者学习. 膜拜策略: LinkedIn高级分析师王益:大数据时代的理想主义和现实主义(图灵访谈)[心路历程] 分布式机器学习的故事-王益[历史由来] 分布 ...

  3. 从源码看 Vue 中的 Mixin

    最近在做项目的时候碰到了一个奇怪的问题,通过 Vue.mixin 方法注入到 Vue 实例的一个方法不起作用了,后来经过仔细排查发现这个实例自己实现了一个同名方法,导致了 Vue.mixin 注入方法 ...

  4. ceph报错

    [ceph_deploy.mon][ERROR ] RuntimeError: config file /etc/ceph/ceph.conf exists with different conten ...

  5. Elasticsearch常见错误与配置简介

    一.常见错误 1.1 root用户启动elasticsearch报错 Elasticsearch为了安全考虑,不让使用root启动,解决方法新建一个用户,用此用户进行相关的操作.如果你用root启动, ...

  6. Java内部类(5)：应用例

    例1-闭包(Closure) 闭包是一个可调用的对象(通过Callback),它记录了一些信息,这些信息来自于创建它的作用域 interface Incrementable { void increm ...

  7. Google 搜索语法

    1. 逻辑与/或:AND/OR注意 AND.OR 必须大写OR 指令优先于 AND 指令AND 指令一般以space或+代替OR 指令可用 | 代替2. 逻辑非:-3. 完整匹配:" &qu ...

  8. python3 速查参考- python基础 8 -> 面向对象基础：类的创建与基础使用，类属性，property、类方法、静态方法、常用知识点概念（封装、继承等等见下一章）

    基础概念 1.速查笔记: #-- 最普通的类 class C1(C2, C3): spam = 42 # 数据属性 def __init__(self, name): # 函数属性:构造函数 self ...

  9. DFS,DP————N皇后问题

    C++代码 #include <iostream> using namespace std; const int N=20; int n; char g[N][N]; bool col[N ...

  10. Java垃圾收集算法1

    Java垃圾收集算法 由于垃圾收集算法的实现涉及大量的程序细节,而且每个平台的虚拟机操作内存的方法又各不相同,因此博客中不过多的讨论算法的实现,只是介绍几种算法的思想以及发展. 相关阅读: 1.深入理 ...