/[gentoo]/xml/htdocs/doc/en/quick-samba-howto.xml
Gentoo

Diff of /xml/htdocs/doc/en/quick-samba-howto.xml

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.9 Revision 1.41
1<?xml version='1.0' encoding='UTF-8'?> 1<?xml version='1.0' encoding='UTF-8'?>
2<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/quick-samba-howto.xml,v 1.9 2004/08/01 11:40:20 swift Exp $ --> 2<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/quick-samba-howto.xml,v 1.41 2009/01/26 07:30:42 nightmorph Exp $ -->
3<!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> 3<!DOCTYPE guide SYSTEM "/dtd/guide.dtd">
4
4<guide link="quick-samba-howto.xml"> 5<guide link="/doc/en/quick-samba-howto.xml">
6
5<title>Gentoo Samba3/CUPS/Clam AV HOWTO</title> 7<title>Gentoo Samba3/CUPS HOWTO</title>
8
6<author title="Author"> 9<author title="Author">
7 <mail link="daff at dword dot org">Andreas "daff" Ntaflos</mail> 10 Andreas "daff" Ntaflos <!--daff at dword dot org-->
8</author> 11</author>
9<author title="Author"> 12<author title="Author">
10 <mail link="joshua@sungentoo.homeunix.com">Joshua Preston</mail> 13 <mail link="joshua@sungentoo.homeunix.com">Joshua Preston</mail>
11</author> 14</author>
15<author title="Editor">
16 <mail link="nightmorph@gentoo.org">Joshua Saddler</mail>
17</author>
12 18
13<abstract> 19<abstract>
14Setup, install and configure a Samba Server under Gentoo that shares 20Setup, install and configure a Samba server under Gentoo that shares files and
15files, printers without the need to install drivers and provides 21printers without the need to install drivers.
16automatic virus scanning.
17</abstract> 22</abstract>
18 23
19<!-- The content of this document is licensed under the CC-BY-SA license --> 24<!-- The content of this document is licensed under the CC-BY-SA license -->
20<!-- See http://creativecommons.org/licenses/by-sa/1.0 --> 25<!-- See http://creativecommons.org/licenses/by-sa/2.5 -->
21<license/> 26<license/>
22 27
23<version>1.6</version> 28<version>1.26</version>
24<date>August 01, 2004</date> 29<date>2009-01-25</date>
25 30
26<chapter> 31<chapter>
27<title>Introduction to this HOWTO</title> 32<title>Introduction to this HOWTO</title>
28<section> 33<section>
29<title>Purpose</title> 34<title>Purpose</title>
30<body> 35<body>
31 36
32<p> 37<p>
33This HOWTO is designed to help you move a network from many different 38This HOWTO is designed to help you move a network from many different clients
34clients speaking different languages, to many different machines that 39speaking different languages, to many different machines that speak a common
35speak a common language. The ultimate goal is to help differing 40language. The ultimate goal is to help differing architectures and technologies,
36architectures and technologies, come together in a productive, 41come together in a productive, happily coexisting environment.
37happily coexisting environment.
38</p>
39
40<p> 42</p>
43
44<p>
41Following the directions outlined in this HOWTO should give you an 45Following the directions outlined in this HOWTO should give you an excellent
42excellent step towards a peaceful cohabitation between Windows, and 46step towards a peaceful cohabitation between Windows, and virtually all known
43virtually all known variations of *nix. 47variations of *nix.
44</p>
45
46<p> 48</p>
49
50<p>
47This HOWTO originally started not as a HOWTO, but as a FAQ. It was 51This HOWTO originally started not as a HOWTO, but as a FAQ. It was intended to
48intended to explore the functionality and power of the Gentoo system, 52explore the functionality and power of the Gentoo system, portage and the
49portage and the flexibility of USE flags. Like so many other projects, 53flexibility of USE flags. Like so many other projects, it was quickly discovered
50it was quickly discovered what was missing in the Gentoo realm: there 54what was missing in the Gentoo realm: there weren't any Samba HOWTOs catered
51weren't any Samba HOWTO's catered for Gentoo users. These users are 55for Gentoo users. These users are more demanding than most; they require
52more demanding than most; they require performance, flexibility and 56performance, flexibility and customization. This does not however imply that
53customization. This does not however imply that this HOWTO was not
54intended for other distributions; rather that it was designed to work 57this HOWTO was not intended for other distributions; rather that it was designed
55with a highly customized version of Samba. 58to work with a highly customized version of Samba.
56</p>
57
58<p> 59</p>
60
61<p>
59This HOWTO will describe how to share files and printers between Windows 62This HOWTO will describe how to share files and printers between Windows PCs and
60PCs and *nix PCs. It will also demonstrate the use of the VFS (Virtual
61File System) feature of Samba to incorporate automatic virus protection.
62As a finale, it will show you how to mount and manipulate shares. 63*nix PCs. It will also show you how to mount and manipulate shares.
63</p>
64
65<p> 64</p>
65
66<p>
66There are a few topics that will be mentioned, but are out of the 67There are a few topics that will be mentioned, but are out of the scope of this
67scope of this HOWTO. These will be noted as they are presented. 68HOWTO. These will be noted as they are presented.
68</p>
69
70<p> 69</p>
70
71<p>
71This HOWTO is based on a compilation and merge of an excellent HOWTO 72This HOWTO is based on a compilation and merge of an excellent HOWTO provided
72provided in the <uri link="http://forums.gentoo.org">Gentoo forums</uri> 73in the <uri link="http://forums.gentoo.org">Gentoo forums</uri> by Andreas
73by Andreas "daff" Ntaflos and the collected knowledge of Joshua Preston. 74"daff" Ntaflos and the collected knowledge of Joshua Preston. The link to this
74The link to this discussion is provided below for your reference: 75discussion is provided below for your reference:
75</p> 76</p>
76 77
77<ul> 78<ul>
78 <li> 79 <li>
79 <uri link="http://forums.gentoo.org/viewtopic.php?t=110931">HOWTO 80 <uri link="http://forums.gentoo.org/viewtopic.php?t=110931">HOWTO
80 CUPS+Samba: printing from Windows &amp; Linux</uri> 81 CUPS+Samba: printing from Windows &amp; Linux</uri>
81 </li> 82 </li>
82</ul> 83</ul>
83 84
84</body> 85</body>
87<title>Before you use this guide</title> 88<title>Before you use this guide</title>
88<body> 89<body>
89 90
90<p> 91<p>
91There are a several other guides for setting up CUPS and/or Samba, please read 92There are a several other guides for setting up CUPS and/or Samba, please read
92them as well, as they may tell you things left out of this HOWTO (intentional 93them as well, as they may tell you things left out of this HOWTO (intentional or
93or otherwise). One such document is the very useful and well written <uri 94otherwise). One such document is the very useful and well written <uri
94link="/doc/en/printing-howto.xml">Gentoo Printing Guide</uri>, as configuration 95link="/doc/en/printing-howto.xml">Gentoo Printing Guide</uri>, as configuration
95issues and specific printer setup is not discussed here. 96issues and specific printer setup is not discussed here.
96</p> 97</p>
97 98
98</body> 99</body>
100<section> 101<section>
101<title>Brief Overview</title> 102<title>Brief Overview</title>
102<body> 103<body>
103 104
104<p> 105<p>
105After presenting the various USE flags, the following list will outline 106After presenting the various USE flags, the following list will outline all of
106all of the topics covered as they are presented: 107the topics covered as they are presented:
107</p> 108</p>
108 109
109<ul> 110<ul>
110 <li>On the Samba server: 111 <li>On the Samba server:
111 <ul> 112 <ul>
112 <li>Install and configure CLAM-AV</li>
113 <li>Install and configure Samba</li> 113 <li>Install and configure Samba</li>
114 <li>Install and configure CUPS</li> 114 <li>Install and configure CUPS</li>
115 <li>Adding the printer to CUPS</li> 115 <li>Adding the printer to CUPS</li>
116 <li>Adding the PS drivers for the Windows clients</li> 116 <li>Adding the PS drivers for the Windows clients</li>
117 </ul> 117 </ul>
141We will need the following: 141We will need the following:
142</p> 142</p>
143 143
144<ul> 144<ul>
145 <li>net-fs/samba</li> 145 <li>net-fs/samba</li>
146 <li>app-antivirus/clamav</li> 146 <li>net-print/cups (built with the <c>ppds</c> USE flag)</li>
147 <li>net-print/cups</li>
148 <li>net-print/foomatic</li>
149 <li>net-print/hpijs (if you have an HP printer)</li> 147 <li>net-print/hplip (if you have an HP printer)</li>
150 <li>A kernel of sorts (preferably 2.4.24+ or 2.6.x)</li> 148 <li>A kernel of sorts (2.6)</li>
151 <li>A printer (PS or non-PS, maybe not TOO new or fancy)</li> 149 <li>A printer (PS or non-PS)</li>
152 <li> 150 <li>
153 A working network (home/office/etc) consisting of more than one machine) 151 A working network (home/office/etc) consisting of more than one machine)
154 </li> 152 </li>
155</ul> 153</ul>
156 154
157<p> 155<p>
158The main package we use here is net-fs/samba, however, you will need 156The main package we use here is <c>net-fs/samba</c>, however, you will need a
159a kernel with smbfs support enabled in order to mount a samba or windows 157kernel with CIFS support enabled in order to mount a Samba or Windows share from
160share from another computer. CUPS will be emerged if it is not already. 158another computer. CUPS will be emerged if it is not already.
161app-antivirus/clamav will be used also, but others should be easily adapted
162to work with Samba.
163</p> 159</p>
164 160
165</body> 161</body>
166</section> 162</section>
167</chapter> 163</chapter>
171<section> 167<section>
172<title>The USE Flags</title> 168<title>The USE Flags</title>
173<body> 169<body>
174 170
175<p> 171<p>
176Before emerging anything, take a look at the various USE flags 172Before emerging anything, take a look at some of the various USE flags available
177available to Samba. 173to Samba.
178</p> 174</p>
179 175
180<pre caption="Samba uses the following USE Variables:"> 176<pre caption="Samba uses the following USE Variables:">
181kerberos mysql xml acl cups ldap pam readline python oav 177kerberos acl cups ldap pam readline python winbind
182</pre> 178</pre>
183 179
184<p> 180<p>
185Depending on the network topology and the specific requirements of 181Depending on the network topology and the specific requirements of the server,
186the server, the USE flags outlined below will define what to include or 182the USE flags outlined below will define what to include or exclude from the
187exclude from the emerging of Samba. 183emerging of Samba.
188</p> 184</p>
189 185
190<table> 186<table>
191<tr> 187<tr>
192 <th><b>USE flag</b></th> 188 <th><b>USE flag</b></th>
193 <th>Description</th> 189 <th>Description</th>
194</tr> 190</tr>
195<tr> 191<tr>
196 <th><b>kerberos</b></th> 192 <th><b>kerberos</b></th>
197 <ti> 193 <ti>
198 Include support for Kerberos. The server will need this if it is 194 Include support for Kerberos. The server will need this if it is intended
199 intended to join an existing domain or Active Directory. See the note 195 to join an existing domain or Active Directory. See the note below for more
200 below for more information. 196 information.
201 </ti>
202</tr>
203<tr>
204 <th><b>mysql</b></th>
205 <ti>
206 This will allow Samba to use MySQL in order to do password authentication.
207 It will store ACLs, usernames, passwords, etc in a database versus a
208 flat file. If Samba is needed to do password authentication, such as
209 acting as a password validation server or a Primary Domain Controller
210 (PDC).
211 </ti>
212</tr>
213<tr>
214 <th><b>xml</b></th>
215 <ti>
216 The xml USE option for Samba provides a password database backend allowing
217 Samba to store account details in XML files, for the same reasons listed in
218 the mysql USE flag description.
219 </ti> 197 </ti>
220</tr> 198</tr>
221<tr> 199<tr>
222 <th><b>acl</b></th> 200 <th><b>acl</b></th>
223 <ti> 201 <ti>
224 Enables Access Control Lists. The ACL support in Samba uses a patched 202 Enables Access Control Lists. The ACL support in Samba uses a patched
225 ext2/ext3, or SGI's XFS in order to function properly as it extends more 203 ext2/ext3, or SGI's XFS in order to function properly as it extends more
226 detailed access to files or directories; much more so than typical *nix 204 detailed access to files or directories; much more so than typical *nix
227 GID/UID schemas. 205 GID/UID schemas.
228 </ti> 206 </ti>
229</tr> 207</tr>
230<tr> 208<tr>
231 <th><b>cups</b></th> 209 <th><b>cups</b></th>
232 <ti> 210 <ti>
233 This enables support for the Common Unix Printing System. This 211 This enables support for the Common Unix Printing System. This provides an
234 provides an interface allowing local CUPS printers to be shared to 212 interface allowing local CUPS printers to be shared to other systems in the
235 other systems in the network. 213 network.
236 </ti> 214 </ti>
237</tr> 215</tr>
238<tr> 216<tr>
239 <th><b>ldap</b></th> 217 <th><b>ldap</b></th>
240 <ti> 218 <ti>
241 Enables the Lightweight Directory Access Protocol (LDAP). If Samba is 219 Enables the Lightweight Directory Access Protocol (LDAP). If Samba is
242 expected to use Active Directory, this option must be used. This would 220 expected to use Active Directory, this option must be used. This would be
243 be used in the event Samba needs to login to or provide login to 221 used in the event Samba needs to login to or provide login to a
244 a Domain/Active Directory Server. The kerberos USE flag is needed for 222 Domain/Active Directory Server. The kerberos USE flag is needed for proper
245 proper functioning of this option. 223 functioning of this option.
246 </ti> 224 </ti>
247</tr> 225</tr>
248<tr> 226<tr>
249 <th><b>pam</b></th> 227 <th><b>pam</b></th>
250 <ti> 228 <ti>
251 Include support for pluggable authentication modules (PAM). This 229 Include support for pluggable authentication modules (PAM). This provides
252 provides the ability to authenticate users on the Samba Server, which is 230 the ability to authenticate users on the Samba Server, which is required if
253 required if users have to login to your server. The kerberos USE flag 231 users have to login to your server. The kerberos USE flag is recommended
254 is recommended along with this option. 232 along with this option.
255 </ti> 233 </ti>
256</tr> 234</tr>
257<tr> 235<tr>
258 <th><b>readline</b></th> 236 <th><b>readline</b></th>
259 <ti> 237 <ti>
260 Link Samba again libreadline. This is highly recommended and should 238 Link Samba against libreadline. This is highly recommended and should
261 probably not be disabled 239 probably not be disabled.
262 </ti> 240 </ti>
263</tr> 241</tr>
264<tr> 242<tr>
265 <th><b>python</b></th> 243 <th><b>python</b></th>
266 <ti> 244 <ti>
267 Python bindings API. Provides an API that will allow Python to 245 Python bindings API. Provides an API that will allow Python to interface
268 interface with Samba. 246 with Samba.
269 </ti> 247 </ti>
270</tr> 248</tr>
271<tr> 249<tr>
272 <th><b>oav</b></th> 250 <th><b>winbind</b></th>
273 <ti> 251 <ti>
274 Provides on-access scanning of Samba shares with FRISK F-Prot 252 Winbind allows for a unified logon within a Samba environment. It uses a
275 Daemon, Kaspersky AntiVirus, OpenAntiVirus.org ScannerDaemon, Sophos Sweep 253 Unix implementation of Windows RPC calls, PAM and the name service switch
276 (SAVI), Symantec CarrierScan, and Trend Micro (VSAPI). 254 (supported by the c library) to enable Windows NT domain users to appear and
255 work as Unix users on a Unix system.
277 </ti> 256 </ti>
278</tr> 257</tr>
279</table> 258</table>
280 259
281<p> 260<p>
283Samba functions include: 262Samba functions include:
284</p> 263</p>
285 264
286<ul> 265<ul>
287 <li> 266 <li>
288 ACLs on ext2/3 are implemented through extended attributes (EAs). EA and 267 ACLs on ext2/3 are implemented through extended attributes (EAs). EA and
289 ACL kernel options for ext2 and/or ext3 will need to be enabled 268 ACL kernel options for ext2 and/or ext3 will need to be enabled (depending
290 (depending on which file system is being used - both can be enabled). 269 on which file system is being used - both can be enabled).
291 </li> 270 </li>
292 <li> 271 <li>
293 While Active Directory, ACL, and PDC functions are out of the intended 272 While Active Directory, ACL, and PDC functions are out of the intended
294 scope of this HOWTO, you may find these links as helpful to your cause: 273 scope of this HOWTO, you may find these links as helpful to your cause:
295 <ul> 274 <ul>
296 <li><uri>http://www.bluelightning.org/linux/samba_acl_howto/</uri></li> 275 <li><uri>http://www.bluelightning.org/linux/samba_acl_howto/</uri></li>
297 <li><uri>http://open-projects.linuxcare.com/research-papers/winbind-08162000.html</uri></li>
298 <li><uri>http://www.wlug.org.nz/HowtoSamba3AndActiveDirectory</uri></li> 276 <li><uri>http://www.wlug.org.nz/HowtoSamba3AndActiveDirectory</uri></li>
299 </ul> 277 </ul>
300 </li> 278 </li>
301</ul> 279</ul>
302 280
309<section> 287<section>
310<title>Emerging Samba</title> 288<title>Emerging Samba</title>
311<body> 289<body>
312 290
313<p> 291<p>
314First of all: be sure that all your hostnames resolve correctly. 292First of all: be sure that all your hostnames resolve correctly. Either have a
315Either have a working domain name system running on your network 293working domain name system running on your network or appropriate entries in
316or appropriate entries in your <path>/etc/hosts</path> file. 294your <path>/etc/hosts</path> file. <c>cupsaddsmb</c> often borks if hostnames
317<c>cupsaddsmb</c> often borks if hostnames don't point to the correct 295don't point to the correct machines.
318machines.
319</p>
320
321<p> 296</p>
297
298<p>
322Hopefully now you can make an assessment of what you'll actually need in 299Hopefully now you can make an assessment of what you'll actually need in order
323order to use Samba with your particular setup. The setup used for this 300to use Samba with your particular setup. The setup used for this HOWTO is:
324HOWTO is:
325</p> 301</p>
326 302
327<ul> 303<ul>
328 <li>oav</li>
329 <li>cups</li> 304 <li>cups</li>
330 <li>readline</li> 305 <li>readline</li>
331 <li>pam</li> 306 <li>pam</li>
332</ul> 307</ul>
333 308
334<p> 309<p>
335To optimize performance, size and the time of the build, the 310To optimize performance, size and the time of the build, the USE flags are
336USE flags are specifically included or excluded. 311specifically included or excluded.
312</p>
313
314<p>
315First, add <c>ppds</c> to your USE flags to make sure that when CUPS is built,
316it has proper foomatic support:
317</p>
318
319<pre caption="Adding ppds">
320# <i>echo "net-print/cups ppds" &gt;&gt; /etc/portage/package.use</i>
321</pre>
322
323<p>
324Now, emerge Samba:
337</p> 325</p>
338 326
339<pre caption="Emerge Samba"> 327<pre caption="Emerge Samba">
340<comment>(Note the USE flags!)</comment> 328# <i>echo "net-fs/samba readline cups pam" &gt;&gt; /etc/portage/package.use</i>
341# <i>USE=&quot;oav readline cups pam -python -ldap -kerberos -xml -acl -mysql&quot; emerge net-fs/samba</i> 329# <i>emerge net-fs/samba</i>
342</pre> 330</pre>
343 331
344<note>
345The following archs will need to add <e>~</e> to their <e>KEYWORDS</e>: x86,
346ppc, sparc, hppa, ia64 and alpha
347</note>
348
349<p>
350This will emerge Samba and CUPS (if CUPS is not already emerged).
351</p> 332<p>
333This will emerge Samba and CUPS.
334</p>
352 335
353</body> 336</body>
354</section>
355<section> 337</section>
356<title>Emerging Clam AV</title>
357<body>
358
359<p>
360Because the <e>oav</e> USE flag only provides an interface to allow on access
361virus scanning, the actual virus scanner must be emerged. The scanner
362used in this HOWTO is Clam AV.
363</p>
364
365<pre caption="Emerge clam-av">
366# <i>emerge app-antivirus/clamav</i>
367</pre>
368
369</body>
370</section> 338<section>
371<section>
372<title>Emerging foomatic</title>
373<body>
374
375<pre caption="Emerge foomatic">
376# <i>emerge net-print/foomatic</i>
377</pre>
378
379</body>
380</section>
381<section>
382<title>Emerging net-print/hpijs</title> 339<title>Emerging net-print/hplip</title>
383<body> 340<body>
384 341
385<p> 342<p>
386You only need to emerge this if you use an HP printer. 343You only need to emerge this if you use an HP printer.
387</p> 344</p>
388 345
389<pre caption="Emerge hpijs"> 346<pre caption="Emerge hplip">
390# <i>emerge net-print/hpijs</i> 347# <i>emerge net-print/hplip</i>
391</pre> 348</pre>
392 349
393</body> 350</body>
394</section> 351</section>
395</chapter> 352</chapter>
399<section> 356<section>
400<title>Configuring Samba</title> 357<title>Configuring Samba</title>
401<body> 358<body>
402 359
403<p> 360<p>
404The main Samba configuration file is <path>/etc/samba/smb.conf</path>. 361The main Samba configuration file is <path>/etc/samba/smb.conf</path>. It is
405It is divided in sections indicated by [sectionname]. Comments are either 362divided in sections indicated by [sectionname]. Comments are either
406# or ;. A sample <path>smb.conf</path> is included below with comments and 363# or ;. A sample <path>smb.conf</path> is included below with comments and
407suggestions for modifications. If more details are required, see the 364suggestions for modifications. If more details are required, see the man page
408man page for <path>smb.conf</path>, the installed 365for <path>smb.conf</path>, the installed <path>smb.conf.example</path>, the
409<path>smb.conf.example</path>, the Samba Web site or any of the 366Samba Web site or any of the numerous Samba books available.
410numerous Samba books available.
411</p> 367</p>
412 368
413<pre caption="A Sample /etc/samba/smb.conf"> 369<pre caption="A Sample /etc/samba/smb.conf">
414[global] 370[global]
415<comment># Replace MYWORKGROUPNAME with your workgroup/domain</comment> 371<comment># Replace MYWORKGROUPNAME with your workgroup/domain</comment>
416workgroup = <comment>MYWORKGROUPNAME</comment> 372workgroup = <comment>MYWORKGROUPNAME</comment>
417<comment># Of course this has no REAL purpose other than letting 373<comment># Of course this has no REAL purpose other than letting
418# everyone know its not Windows! 374# everyone knows it's not Windows!
419# %v prints the version of Samba we are using.</comment> 375# %v prints the version of Samba we are using.</comment>
420server string = Samba Server %v 376server string = Samba Server %v
421<comment># We are going to use cups, so we are going to put it in here ;-)</comment> 377<comment># We are going to use cups, so we are going to put it in here ;-)</comment>
422printcap name = cups 378printcap name = cups
423printing = cups 379printing = cups
439hosts deny = 0.0.0.0/0 395hosts deny = 0.0.0.0/0
440<comment># Other options for this are USER, DOMAIN, ADS, and SERVER 396<comment># Other options for this are USER, DOMAIN, ADS, and SERVER
441# The default is user</comment> 397# The default is user</comment>
442security = share 398security = share
443<comment># No passwords, so we're going to use a guest account!</comment> 399<comment># No passwords, so we're going to use a guest account!</comment>
444guest account = samba
445guest ok = yes 400guest ok = yes
446<comment># We now will implement the on access virus scanner.
447# NOTE: By putting this in our [Global] section, we enable
448# scanning of ALL shares, you could optionally move
449# these to a specific share and only scan it.</comment>
450
451<comment># For Samba 3.x</comment>
452vfs object = vscan-clamav
453vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
454
455<comment># For Samba 2.2.x</comment>
456vfs object = /usr/lib/samba/vfs/vscan-clamav.so
457vfs options = config-file = /etc/samba/vscan-clamav.conf
458 401
459<comment># Now we setup our print drivers information!</comment> 402<comment># Now we setup our print drivers information!</comment>
460[print$] 403[print$]
461comment = Printer Drivers 404comment = Printer Drivers
462path = /etc/samba/printer <comment># this path holds the driver structure</comment> 405path = /etc/samba/printer <comment># this path holds the driver structure</comment>
463guest ok = no 406guest ok = yes
464browseable = yes 407browseable = yes
465read only = yes 408read only = yes
466<comment># Modify this to "username,root" if you don't want root to 409<comment># Modify this to "username,root" if you don't want root to
467# be the only printer admin)</comment> 410# be the only printer admin)</comment>
468write list = <i>root</i> 411write list = <i>root</i>
477guest ok = yes 420guest ok = yes
478<comment># Modify this to "username,root" if you don't want root to 421<comment># Modify this to "username,root" if you don't want root to
479# be the only printer admin)</comment> 422# be the only printer admin)</comment>
480printer admin = <i>root</i> 423printer admin = <i>root</i>
481 424
482<comment># Now we setup our printers share. This should be 425<comment># Now we setup our printers share. This should be
483# browseable, printable, public.</comment> 426# browseable, printable, public.</comment>
484[printers] 427[printers]
485comment = All Printers 428comment = All Printers
486browseable = yes 429browseable = no
487printable = yes 430printable = yes
431writable = no
488public = yes 432public = yes
489guest ok = yes 433guest ok = yes
490path = /var/spool/samba 434path = /var/spool/samba
491<comment># Modify this to "username,root" if you don't want root to 435<comment># Modify this to "username,root" if you don't want root to
492# be the only printer admin)</comment> 436# be the only printer admin)</comment>
493printer admin = <i>root</i> 437printer admin = <i>root</i>
503guest ok = yes 447guest ok = yes
504path = /home/samba/public 448path = /home/samba/public
505</pre> 449</pre>
506 450
507<warn> 451<warn>
508If you like to use Samba's guest account to do anything concerning 452If you like to use Samba's guest account to do anything concerning printing from
509printing from Windows clients: don't set <c>guest only = yes</c> in 453Windows clients: don't set <c>guest only = yes</c> in the <c>[global]</c>
510the <c>[global]</c> section. The guest account seems to cause 454section. The guest account seems to cause problems when running
511problems when running <c>cupsaddsmb</c> sometimes when trying to 455<c>cupsaddsmb</c> sometimes when trying to connect from Windows machines. See
512connect from Windows machines. See below, too, when we talk about 456below, too, when we talk about <c>cupsaddsmb</c> and the problems that can
513<c>cupsaddsmb</c> and the problems that can arise. Use a dedicated
514printer user, like <c>printeruser</c> or <c>printer</c> or 457arise. Use a dedicated printer user, like <c>printeruser</c> or <c>printer</c>
515<c>printme</c> or whatever. It doesn't hurt and it will certainly 458or <c>printme</c> or whatever. It doesn't hurt and it will certainly protect you
516protect you from a lot of problems. 459from a lot of problems.
517</warn> 460</warn>
518 461
519<p> 462<p>
520Now create the directories required for the minimum configuration of 463Now create the directories required for the minimum configuration of Samba to
521Samba to share the installed printer throughout the network. 464share the installed printer throughout the network.
522</p> 465</p>
523 466
524<pre caption="Create the directories"> 467<pre caption="Create the directories">
525# <i>mkdir /etc/samba/printer</i> 468# <i>mkdir /etc/samba/printer</i>
526# <i>mkdir /var/spool/samba</i> 469# <i>mkdir /var/spool/samba</i>
527# <i>mkdir /home/samba/public</i> 470# <i>mkdir /home/samba/public</i>
528</pre> 471</pre>
529 472
530<p> 473<p>
531At least one Samba user is required in order to install the printer 474At least one Samba user is required in order to install the printer drivers and
532drivers and to allow users to connect to the printer. Users must 475to allow users to connect to the printer. Users must exist in the system's
533exist in the system's <path>/etc/passwd</path> file. 476<path>/etc/passwd</path> file.
534</p> 477</p>
535 478
536<pre caption="Creating the users"> 479<pre caption="Creating the users">
537# <i>smbpasswd -a root</i> 480# <i>smbpasswd -a root</i>
538 481
539<comment>(If another user is to be a printer admin)</comment> 482<comment>(If another user is to be a printer admin)</comment>
540# <i>smbpasswd -a username</i> 483# <i>smbpasswd -a username</i>
541</pre> 484</pre>
542 485
543<p> 486<p>
544The Samba passwords need not be the same as the system passwords 487The Samba passwords need not be the same as the system passwords
545in <path>/etc/passwd</path>. 488in <path>/etc/passwd</path>.
546</p> 489</p>
547 490
548<p> 491<p>
549You will also need to update <path>/etc/nsswitch.conf</path> so that Windows 492You will also need to update <path>/etc/nsswitch.conf</path> so that Windows
557</pre> 500</pre>
558 501
559</body> 502</body>
560</section> 503</section>
561<section> 504<section>
562<title>Configuring Clam AV</title>
563<body>
564
565<p>
566The configuration file specified to be used in <path>smb.conf</path> is
567<path>/etc/samba/vscan-clamav.conf</path>. While these options are set
568to the defaults, the infected file action may need to be changed.
569</p>
570
571<pre caption="/etc/samba/vscan-clamav.conf">
572[samba-vscan]
573<comment>; run-time configuration for vscan-samba using
574; clamd
575; all options are set to default values</comment>
576
577<comment>; do not scan files larger than X bytes. If set to 0 (default),
578; this feature is disable (i.e. all files are scanned)</comment>
579max file size = 0
580
581<comment>; log all file access (yes/no). If set to yes, every access will
582; be logged. If set to no (default), only access to infected files
583; will be logged</comment>
584verbose file logging = no
585
586<comment>; if set to yes (default), a file will be scanned while opening</comment>
587scan on open = yes
588<comment>; if set to yes, a file will be scanned while closing (default is yes)</comment>
589scan on close = yes
590
591<comment>; if communication to clamd fails, should access to file denied?
592; (default: yes)</comment>
593deny access on error = yes
594
595<comment>; if daemon fails with a minor error (corruption, etc.),
596; should access to file denied?
597; (default: yes)</comment>
598deny access on minor error = yes
599
600<comment>; send a warning message via Windows Messenger service
601; when virus is found?
602; (default: yes)</comment>
603send warning message = yes
604
605<comment>; what to do with an infected file
606; quarantine: try to move to quantine directory; delete it if moving fails
607; delete: delete infected file
608; nothing: do nothing</comment>
609infected file action = <comment>delete</comment>
610
611<comment>; where to put infected files - you really want to change this!
612; it has to be on the same physical device as the share!</comment>
613quarantine directory = /tmp
614<comment>; prefix for files in quarantine</comment>
615quarantine prefix = vir-
616
617<comment>; as Windows tries to open a file multiple time in a (very) short time
618; of period, samba-vscan use a last recently used file mechanism to avoid
619; multiple scans of a file. This setting specified the maximum number of
620; elements of the last recently used file list. (default: 100)</comment>
621max lru files entries = 100
622
623<comment>; an entry is invalidated after lru file entry lifetime (in seconds).
624; (Default: 5)</comment>
625lru file entry lifetime = 5
626
627<comment>; socket name of clamd (default: /var/run/clamd)</comment>
628clamd socket name = /var/run/clamd
629</pre>
630
631<p>
632It is generally a good idea to start the virus scanner immediately. Add
633it to the <e>default</e> runlevel and then start the <c>clamd</c> service immediately.
634</p>
635
636<pre caption="Add clamd to bootup and start it">
637# <i>rc-update add clamd default</i>
638# <i>/etc/init.d/clamd start</i>
639</pre>
640
641</body>
642</section>
643<section>
644<title>Configuring CUPS</title> 505<title>Configuring CUPS</title>
645<body> 506<body>
646 507
647<p> 508<p>
648This is a little more complicated. CUPS' main config file is 509This is a little more complicated. CUPS' main config file is
649<path>/etc/cups/cupsd.conf</path>. It's structure is similar to Apache's 510<path>/etc/cups/cupsd.conf</path>. It's structure is similar to Apache's
650<path>httpd.conf</path> file, so many you may find it familiar. Outlined 511<path>httpd.conf</path> file, so many you may find it familiar. Outlined in the
651in the example are the directives that need to be changed: 512example are the directives that need to be changed:
652</p> 513</p>
653 514
654<pre caption="/etc/cups/cupsd.conf"> 515<pre caption="/etc/cups/cupsd.conf">
655ServerName <i>PrintServer</i> <comment># your printserver name</comment> 516ServerName <i>PrintServer</i> <comment># your printserver name</comment>
656ServerAdmin <i>root@PrintServer</i> <comment># the person for printer-related hate-mail, eg you</comment> 517ServerAdmin <i>root@PrintServer</i> <comment># the person for printer-related hate-mail, e.g. you</comment>
657 518
658AccessLog /var/log/cups/access_log <comment># probably doesn't need changing</comment> 519AccessLog /var/log/cups/access_log <comment># probably doesn't need changing</comment>
659ErrorLog /var/log/cups/error_log <comment># doesn't really need changing either</comment> 520ErrorLog /var/log/cups/error_log <comment># doesn't really need changing either</comment>
660 521
661LogLevel debug <comment># only while isntalling and testing, should later be 522LogLevel debug <comment># only while installing and testing, should later be
662 # changed to 'info'</comment> 523 # changed to 'info'</comment>
663 524
664MaxClients 100 <comment># I've had to set this to 1000000000 or so because some time back, 525MaxClients 100 <comment># I've had to set this to 1000000000 or so because some time back,
665 # there seemed to be a bug in CUPS' controlling of the web interface, 526 # there seemed to be a bug in CUPS' controlling of the web interface,
666 # making CUPS think a denial of service attack was in progress when 527 # making CUPS think a denial of service attack was in progress when
667 # I tried to configure a printer with the web interface. weird.</comment> 528 # I tried to configure a printer with the web interface. weird.</comment>
668 529
669BrowseAddress @IF(<i>eth0</i>) <comment># Change this to your internal net interface</comment> 530BrowseAddress @IF(<i>eth0</i>) <comment># Change this to your internal net interface</comment>
670 531
671&lt;Location /&gt; 532&lt;Location /&gt;
672Order Deny,Allow 533Order Deny,Allow
673Deny From All 534Deny From All
674Allow From <i>192.168.1.*</i> <comment># the addresses of your internel network 535Allow From <i>192.168.1.*</i> <comment># the addresses of your internel network
675 # eg 192.168.1.* will allow connections from any host on 536 # e.g. 192.168.1.* will allow connections from any host on
676 # the 192.168.1.0 network. change to whatever suits you</comment> 537 # the 192.168.1.0 network. change to whatever suits you</comment>
677&lt;/Location&gt; 538&lt;/Location&gt;
678 539
679&lt;Location /admin&gt; 540&lt;Location /admin&gt;
680AuthType Basic 541AuthType Basic
681AuthClass System 542AuthClass System
682Allow From <i>192.168.1.*</i> <comment># same as above, allow any host on the 543Allow From <i>192.168.1.*</i> <comment># same as above, allow any host on the
683 # 192.168.1.0 network to connect and do 544 # 192.168.1.0 network to connect and do
684 # administrative tasks after authenticating</comment> 545 # administrative tasks after authenticating</comment>
685Order Deny,Allow 546Order Deny,Allow
686Deny From All 547Deny From All
687&lt;/Location&gt; 548&lt;/Location&gt;
688</pre> 549</pre>
689 550
690<p> 551<p>
691Edit <path>/etc/cups/mime.convs</path> to uncomment some lines. 552Edit <path>/etc/cups/mime.convs</path> to uncomment some lines. The changes to
692The changes to <path>mime.convs</path> and <path>mime.types</path> are 553<path>mime.convs</path> and <path>mime.types</path> are needed to make CUPS
693needed to make CUPS print Microsoft Office document files. 554print Microsoft Office document files.
694</p> 555</p>
695 556
696<pre caption="/etc/cups/mime.convs"> 557<pre caption="/etc/cups/mime.convs">
697<comment>(The following line is found near the end of the file. Uncomment it)</comment> 558<comment>(The following line is found near the end of the file. Uncomment it)</comment>
698application/octet-stream application/vnd.cups-raw 0 559application/octet-stream application/vnd.cups-raw 0
699</pre> 560</pre>
700 561
701<p> 562<p>
702Edit <path>/etc/cups/mime.convs</path> to uncomment some lines. 563Edit <path>/etc/cups/mime.types</path> to uncomment some lines.
703</p> 564</p>
704 565
705<pre caption="/etc/cups/mime.types"> 566<pre caption="/etc/cups/mime.types">
706<comment>(The following line is found near the end of the file. Uncomment it)</comment> 567<comment>(The following line is found near the end of the file. Uncomment it)</comment>
707application/octet-stream 568application/octet-stream
708</pre> 569</pre>
709 570
710<p> 571<p>
711CUPS needs to be started on boot, and started immediately. 572CUPS needs to be started on boot, and started immediately.
712</p> 573</p>
713 574
714<pre caption="Setting up the CUPS service" > 575<pre caption="Setting up the CUPS service" >
715<comment>(To start CUPS on boot)</comment> 576<comment>(To start CUPS on boot)</comment>
716# <i>rc-update add cupsd default</i> 577# <i>rc-update add cupsd default</i>
717<comment>(To start CUPS if it isn't started)</comment> 578<comment>(To start or restart CUPS now)</comment>
718# <i>/etc/init.d/cupsd start</i>
719<comment>(If CUPS is already started we'll need to restart it!)</comment>
720# <i>/etc/init.d/cupsd restart</i> 579# <i>/etc/init.d/cupsd restart</i>
721</pre> 580</pre>
722 581
723</body> 582</body>
724</section> 583</section>
728 587
729<p> 588<p>
730First, go to <uri link="http://linuxprinting.org">LinuxPrinting.Org</uri> to 589First, go to <uri link="http://linuxprinting.org">LinuxPrinting.Org</uri> to
731find and download the correct PPD file for your printer and CUPS. To do so, 590find and download the correct PPD file for your printer and CUPS. To do so,
732click the link Printer Listings to the left. Select your printers manufacturer 591click the link Printer Listings to the left. Select your printers manufacturer
733and the model in the pulldown menu, eg HP and DeskJet 930C. Click "Show". On 592and the model in the pulldown menu, e.g. HP and DeskJet 930C. Click "Show". On
734the page coming up click the "recommended driver" link after reading the 593the page coming up click the "recommended driver" link after reading the various
735various notes and information. Then fetch the PPD file from the next page, 594notes and information. Then fetch the PPD file from the next page, again after
736again after reading the notes and introductions there. You may have to select 595reading the notes and introductions there. You may have to select your printers
737your printers manufacturer and model again. Reading the <uri 596manufacturer and model again. Reading the <uri
738link="http://www.linuxprinting.org/cups-doc.html">CUPS quickstart guide</uri> 597link="http://www.linuxprinting.org/cups-doc.html">CUPS quickstart guide</uri> is
739is also very helpful when working with CUPS. 598also very helpful when working with CUPS.
740</p>
741
742<p> 599</p>
600
601<p>
743Now you have a PPD file for your printer to work with CUPS. Place it in 602Now you have a PPD file for your printer to work with CUPS. Place it in
744<path>/usr/share/cups/model</path>. The PPD for the HP DeskJet 930C was 603<path>/usr/share/cups/model</path>. The PPD for the HP DeskJet 930C was named
745named <path>HP-DeskJet_930C-hpijs.ppd</path>. You should now install the printer. 604<path>HP-DeskJet_930C-hpijs.ppd</path>. You should now install the printer.
746This can be done via the CUPS web interface or via command line. The web 605This can be done via the CUPS web interface or via command line. The web
747interface is found at <path>http://PrintServer:631</path> once CUPS is running. 606interface is found at <path>http://PrintServer:631</path> once CUPS is running.
748</p> 607</p>
749 608
750<pre caption="Install the printer via command line"> 609<pre caption="Install the printer via command line">
751# <i>lpadmin -p HPDeskJet930C -E -v usb:/dev/ultp0 -m HP-DeskJet_930C-hpijs.ppd</i> 610# <i>lpadmin -p HPDeskJet930C -E -v usb:/dev/ultp0 -m HP-DeskJet_930C-hpijs.ppd</i>
611# <i>/etc/init.d/cupsd restart</i>
752</pre> 612</pre>
753 613
754<p> 614<p>
755Remember to adjust to what you have. Be sure to have the name 615Remember to adjust to what you have. Be sure to have the name (<c>-p</c>
756(<c>-p</c> argument) right (the name you set above during the Samba 616argument) right (the name you set above during the Samba configuration!) and to
757configuration!) and to put in the correct <c>usb:/dev/usb/blah</c>, 617put in the correct <c>usb:/dev/usb/blah</c>, <c>parallel:/dev/blah</c> or
758<c>parallel:/dev/blah</c> or whatever device you are using for your 618whatever device you are using for your printer.
759printer.
760</p>
761
762<p> 619</p>
620
621<p>
763You should now be able to access the printer from the web interface 622You should now be able to access the printer from the web interface and be able
764and be able to print a test page. 623to print a test page.
765</p> 624</p>
766 625
767</body> 626</body>
768</section> 627</section>
769<section> 628<section>
770<title>Installing the Windows printer drivers</title> 629<title>Installing the Windows printer drivers</title>
771<body> 630<body>
772 631
773<p> 632<p>
774Now that the printer should be working it is time to install the drivers 633Now that the printer should be working it is time to install the drivers for
775for the Windows clients to work. Samba 2.2 introduced this functionality. 634the Windows clients to work. Samba 2.2 introduced this functionality. Browsing
776Browsing to the print server in the Network Neighbourhood, right-clicking 635to the print server in the Network Neighbourhood, right-clicking on the
777on the printershare and selecting "connect" downloads the appropriate 636printershare and selecting "connect" downloads the appropriate drivers
778drivers automagically to the connecting client, avoiding the hassle of 637automagically to the connecting client, avoiding the hassle of manually
779manually installing printer drivers locally. 638installing printer drivers locally.
780</p>
781
782<p> 639</p>
640
641<p>
783There are two sets of printer drivers for this. First, the Adobe PS 642There are two sets of printer drivers for this. First, the Adobe PS drivers
784drivers which can be obtained from <uri 643which can be obtained from <uri
785link="http://www.adobe.com/support/downloads/main.html">Adobe</uri> 644link="http://www.adobe.com/support/downloads/main.html">Adobe</uri> (PostScript
786(PostScript printer drivers). Second, there are the CUPS PS drivers, 645printer drivers). Second, there are the CUPS PS drivers, to be obtained by
787to be obtained from <uri link="http://www.cups.org/software.php">the 646emerging <c>net-print/cups-windows</c>. Note that it may still be marked ~arch,
788CUPS homepage</uri> and selecting "CUPS Driver for Windows" from the 647so you may need to add it to <path>/etc/portage/package.keywords</path>. There
789pull down menu. There doesn't seem to be a difference between the 648doesn't seem to be a difference between the functionality of the two, but the
790functionality of the two, but the Adobe PS drivers need to be extracted 649Adobe PS drivers need to be extracted on a Windows System since it's a Windows
791on a Windows System since it's a Windows binary. Also the whole procedure 650binary. Also the whole procedure of finding and copying the correct files is a
792of finding and copying the correct files is a bit more hassle. The CUPS 651bit more hassle. The CUPS drivers support some options the Adobe drivers
793drivers seem to support some options the Adobe drivers don't. 652don't.
794</p>
795
796<p> 653</p>
797This HOWTO uses the CUPS drivers for Windows. The downloaded file is 654
798called <path>cups-samba-5.0rc2.tar.gz</path>. Extract the files
799contained into a directory.
800</p> 655<p>
801 656This HOWTO uses the CUPS drivers for Windows. Install them as shown:
802<pre caption="Extract the drivers and run the install">
803# <i>tar -xzf cups-samba-5.0rc2.tar.gz</i>
804# <i>cd cups-samba-5.0rc2</i>
805<comment>(Only use this script if CUPS resides in /usr/share/cups)</comment>
806# <i>./cups-samba.install</i>
807</pre>
808
809<p> 657</p>
810<path>cups-samba.ss</path> is a TAR archive containing three files: 658
811<path>cups5.hlp</path>, <path>cupsdrvr5.dll</path> and 659<pre caption="Install the drivers">
812<path>cupsui5.dll</path>. These are the actual driver files. 660# <i>emerge -av cups-windows</i>
661</pre>
662
813</p> 663<p>
814
815<warn>
816The script <c>cups-samba.install</c> may not work for all *nixes (ie FreeBSD)
817because almost everything which is not part of the base system is
818installed somewhere under the prefix <path>/usr/local/</path>. This
819seems not to be the case for most things you install under GNU/Linux.
820However, if your CUPS installation is somewhere other than
821<path>/usr/share/cups/</path> see the example below.
822</warn>
823
824<p>
825Suppose your CUPS installation resides under
826<path>/usr/local/share/cups/</path>, and you want to install the drivers there.
827Do the following:
828</p>
829
830<pre caption="Manually installing the drivers">
831# <i>cd /path/you/extracted/the/CUPS-driver/tarball/into</i>
832# <i>tar -xf cups-samba.ss</i>
833<comment>(This extracts the files to usr/share/cups/drivers under the CURRENT WORKING DIRECTORY)</comment>
834# <i>cd usr/share/cups/drivers</i>
835<comment>(no leading / !)</comment>
836# <i>cp cups* /usr/local/share/cups/drivers</i>
837</pre>
838
839<p>
840Now we'll use the script <c>cupsaddsmb</c> provided by the CUPS 664Now we'll use the script <c>cupsaddsmb</c> provided by the CUPS distribution.
841distribution. It's man page is an interesting read. 665Be sure to read its manpage (<c>man cupsaddsmb</c>), as it will tell you which
666Windows drivers you'll need to copy to the proper CUPS directory. Once you've
667copied the drivers, restart CUPS by running <c>/etc/init.d/cupsd restart</c>.
668Next, run <c>cupsaddsmb</c> as shown:
842</p> 669</p>
843 670
844<pre caption="Run cupsaddsmb"> 671<pre caption="Run cupsaddsmb">
845# <i>cupsaddsmb -H PrintServer -U root -h PrintServer -v HPDeskJet930C</i> 672# <i>cupsaddsmb -H PrintServer -U root -h PrintServer -v HPDeskJet930C</i>
846<comment>(Instead of HPDeskJet930C you could also specify "-a", which will 673<comment>(Instead of HPDeskJet930C you could also specify "-a", which will
847"export all known printers".)</comment> 674"export all known printers".)</comment>
848# <i>cupsaddsmb -H PrintServer -U root -h PrintServer -a</i> 675# <i>cupsaddsmb -H PrintServer -U root -h PrintServer -a</i>
849</pre> 676</pre>
850 677
851<warn> 678<warn>
852The execution of this command often causes the most trouble. 679The execution of this command often causes the most trouble. Read through the
853Reading through the <uri
854link="http://forums.gentoo.org/viewtopic.php?t=110931">posts in this 680<uri link="http://forums.gentoo.org/viewtopic.php?t=110931">posts in this
855thread</uri>. 681thread</uri> for some troubleshooting tips.
856</warn> 682</warn>
857 683
858<p> 684<p>
859Here are common errors that may happen: 685Here are common errors that may happen:
860</p> 686</p>
861 687
862<ul> 688<ul>
863 <li> 689 <li>
864 The hostname given as a parameter for <c>-h</c> and <c>-H</c> 690 The hostname given as a parameter for <c>-h</c> and <c>-H</c>
865 (<c>PrintServer</c>) often does not resolve correctly and doesn't 691 (<c>PrintServer</c>) often does not resolve correctly and doesn't identify
866 identify the print server for CUPS/Samba interaction. If an error 692 the print server for CUPS/Samba interaction. If an error like: <b>Warning:
867 like: <b>Warning: No PPD file for printer "CUPS_PRINTER_NAME" - 693 No PPD file for printer "CUPS_PRINTER_NAME" - skipping!</b> occurs, the
868 skipping!</b> occurs, the first thing you should do is substitute 694 first thing you should do is substitute <c>PrintServer</c> with
869 <c>PrintServer</c> with <c>localhost</c> and try it again. 695 <c>localhost</c> and try it again.
870 </li> 696 </li>
871 <li> 697 <li>
872 The command fails with an <b>NT_STATUS_UNSUCCESSFUL</b>. This error message 698 The command fails with an <b>NT_STATUS_UNSUCCESSFUL</b>. This error message
873 is quite common, but can be triggered by many problems. It's unfortunately 699 is quite common, but can be triggered by many problems. It's unfortunately
874 not very helpful. One thing to try is to temporarily set <c>security = 700 not very helpful. One thing to try is to temporarily set <c>security =
875 user</c> in your <path>smb.conf</path>. After/if the installation completes 701 user</c> in your <path>smb.conf</path>. After/if the installation completes
876 successfully, you should set it back to share, or whatever it was set to 702 successfully, you should set it back to share, or whatever it was set to
877 before. 703 before.
878 </li> 704 </li>
879</ul> 705</ul>
880 706
881<p> 707<p>
882This should install the correct driver directory structure under 708This should install the correct driver directory structure under
883<path>/etc/samba/printer</path>. That would be 709<path>/etc/samba/printer</path>. That would be
884<path>/etc/samba/printer/W32X86/2/</path>. The files contained should 710<path>/etc/samba/printer/W32X86/2/</path>. The files contained should be the 3
885be the 3 driver files and the PPD file, renamed to YourPrinterName.ppd 711driver files and the PPD file, renamed to <path>YourPrinterName.ppd</path> (the
886(the name which you gave the printer when installing it (see above). 712name which you gave the printer when installing it (see above).
887</p>
888
889<p> 713</p>
714
715<p>
890Pending no errors or other complications, your drivers are now 716Pending no errors or other complications, your drivers are now installed.
891installed.
892</p> 717</p>
893 718
894</body> 719</body>
895</section> 720</section>
896<section> 721<section>
914<title>Testing our Samba configuration</title> 739<title>Testing our Samba configuration</title>
915<body> 740<body>
916 741
917<p> 742<p>
918We will want to test our configuration file to ensure that it is formatted 743We will want to test our configuration file to ensure that it is formatted
919properly and all of our options have at least the correct syntax. To do 744properly and all of our options have at least the correct syntax. To do this we
920this we run <c>testparm</c>. 745run <c>testparm</c>.
921</p> 746</p>
922 747
923<pre caption="Running the testparm"> 748<pre caption="Running the testparm">
924<comment>(By default, testparm checks /etc/samba/smb.conf)</comment> 749<comment>(By default, testparm checks /etc/samba/smb.conf)</comment>
925# <i>/usr/bin/testparm</i> 750# <i>/usr/bin/testparm</i>
955<section> 780<section>
956<title>Checking our services</title> 781<title>Checking our services</title>
957<body> 782<body>
958 783
959<p> 784<p>
960It would probably be prudent to check our logs at this time also. 785It would probably be prudent to check our logs at this time also. We will also
961We will also want to take a peak at our Samba shares using 786want to take a peak at our Samba shares using <c>smbclient</c>.
962<c>smbclient</c>.
963</p> 787</p>
964 788
965<pre caption="Checking the shares with smbclient"> 789<pre caption="Checking the shares with smbclient">
966# <i>smbclient -L localhost</i> 790# <i>smbclient -L localhost</i>
967Password: 791Password:
977<section> 801<section>
978<title>Printer configuration of *nix based clients</title> 802<title>Printer configuration of *nix based clients</title>
979<body> 803<body>
980 804
981<p> 805<p>
982Despite the variation or distribution, the only thing needed is CUPS. 806Despite the variation or distribution, the only thing needed is CUPS. Do the
983Do the equivalent on any other UNIX/Linux/BSD client. 807equivalent on any other UNIX/Linux/BSD client.
984</p> 808</p>
985 809
986<pre caption="Configuring a Gentoo system"> 810<pre caption="Configuring a Gentoo system">
987# <i>emerge cups</i> 811# <i>emerge cups</i>
988# <i>/etc/init.d/cupsd start</i> 812# <i>nano -w /etc/cups/client.conf</i>
989# <i>rc-update add cupsd default</i> 813ServerName <i>PrintServer</i> <comment># your printserver name</comment>
990</pre> 814</pre>
991 815
992<p>
993That should be it. Nothing else will be needed. Just point your web
994browser to <c>http://localhost:631</c> on the client and you'll see that
995PrintServer broadcasts all available printers to all CUPS clients.
996</p> 816<p>
997 817That should be it. Nothing else will be needed.
998<p> 818</p>
999To print, use for example 819
1000</p> 820<p>
821If you use only one printer, it will be your default printer. If your print
822server manages several printers, your administrator will have defined a default
823printer on the server. If you want to define a different default printer for
824yourself, use the <c>lpoptions</c> command.
825</p>
826
827<pre caption="Setting your default printer">
828<comment>(List available printers)</comment>
829# <i>lpstat -a</i>
830<comment>(Sample output, yours will differ)</comment>
831HPDeskJet930C accepting requests since Jan 01 00:00
832laser accepting requests since Jan 01 00:00
833<comment>(Define HPDeskJet930C as your default printer)</comment>
834# <i>lpoptions -d HPDeskJet930C</i>
835</pre>
1001 836
1002<pre caption="Printing in *nix"> 837<pre caption="Printing in *nix">
838<comment>(Specify the printer to be used)</comment>
1003# <i>lpr -pHPDeskJet930C anything.txt</i> 839# <i>lp -d HPDeskJet930C anything.txt</i>
1004# <i>lpr -PHPDeskJet930C foobar.whatever.ps</i> 840<comment>(Use your default printer)</comment>
1005</pre>
1006
1007<p>
1008In order to setup a default printer, you have to edit
1009<path>/etc/cups/client.conf</path> and set the directive
1010<c>ServerName</c> to your printserver. In the case of this guide that
1011would be the following example.
1012</p>
1013
1014<pre caption="/etc/cups/client.conf">
1015ServerName PrintServer
1016</pre>
1017
1018<p>
1019The following will print <path>foorbar.whatever.ps</path> directly to the print
1020server.
1021</p>
1022
1023<pre caption="Printing to the default printer">
1024$ <i>lpr foobar.whatever.ps</i> 841# <i>lp foobar.whatever.ps</i>
1025</pre> 842</pre>
1026 843
1027<p>
1028Some common observations when setting a default printer in this manner
1029include the following:
1030</p> 844<p>
1031 845Just point your web browser to <c>http://printserver:631</c> on the client if
1032<ul> 846you want to manage your printers and their jobs with a nice web interface.
1033 <li> 847Replace <c>printserver</c> with the name of the <e>machine</e> that acts as your
1034 Setting the <c>ServerName</c> in <path>client.conf</path> seems to 848print server, not the name you gave to the cups print server if you used
1035 work well for only one printer, there may be yet another way to 849different names.
1036 set a client's default remote printer. 850</p>
1037 </li>
1038 <li>
1039 Also, when accessing <c>http://localhost:631</c> on the client
1040 now, no printers seem to be "found" by the client-CUPS. This is to
1041 be expected when setting <c>ServerName</c> in
1042 <path>client.conf</path>.
1043 </li>
1044</ul>
1045 851
1046</body> 852</body>
1047</section> 853</section>
1048<section> 854<section>
1049<title>Mounting a Windows or Samba share in GNU/Linux</title> 855<title>Mounting a Windows or Samba share in GNU/Linux</title>
1050<body> 856<body>
1051 857
858<note>
859Don't forget to install <c>net-fs/mount-cifs</c> or <c>net-fs/samba</c> on the
860client(s) that will be accessing the shares.
861</note>
862
1052<p> 863<p>
1053Now is time to configure our kernel to support smbfs. Since I'm assumming we've 864Now is time to configure our kernel to support CIFS. Since I'm assuming
1054all compiled at least one kernel, we'll need to make sure we have all the right 865we've all compiled at least one kernel, we'll need to make sure we have all the
1055options selected in our kernel. For simplicity sake, make it a module for ease 866right options selected in our kernel. For simplicity's sake, make it a module
1056of use. It is the author's opinion that kernel modules are a good thing and 867for ease of use. It is the author's opinion that kernel modules are a good thing
1057should be used whenever possible. 868and should be used whenever possible.
1058</p>
1059
1060<pre caption="Relevant kernel options" >
1061CONFIG_SMB_FS=m
1062CONFIG_SMB_UNIX=y
1063</pre>
1064
1065<p> 869</p>
870
871<pre caption="Kernel support" >
872CONFIG_CIFS=m
873</pre>
874
875<p>
1066Then make the module/install it; insert them with: 876Then make the module/install it; insert it with:
1067</p> 877</p>
1068 878
1069<pre caption="Loading the kernel module"> 879<pre caption="Loading the kernel module">
1070# <i>modprobe smbfs</i> 880# <i>modprobe cifs</i>
1071</pre> 881</pre>
1072 882
1073<p> 883<p>
1074Once the modules is loaded, mounting a Windows or Samba share is 884Once the module is loaded, mounting a Windows or Samba share is possible. Use
1075possible. Use <c>mount</c> to accomplish this, as detailed below: 885<c>mount</c> to accomplish this, as detailed below:
1076</p> 886</p>
1077 887
1078<pre caption="Mounting a Windows/Samba share"> 888<pre caption="Mounting a Windows/Samba share">
1079<comment>(The syntax for mounting a Windows/Samba share is: 889<comment>(The syntax for mounting a Windows/Samba share is:
1080 mount -t smbfs [-o username=xxx,password=xxx] //server/share /mnt/point 890 mount -t cifs [-o username=xxx,password=xxx] //server/share /mnt/point
1081If we are not using passwords or a password is not needed)</comment> 891If we are not using passwords or a password is not needed)</comment>
1082 892
1083# <i>mount -t smbfs //PrintServer/public /mnt/public</i> 893# <i>mount -t cifs //PrintServer/public /mnt/public</i>
1084 894
1085<comment>(If a password is needed)</comment> 895<comment>(If a password is needed)</comment>
1086# <i>mount -t smbfs -o username=USERNAME,password=PASSWORD //PrintServer/public /mnt/public</i> 896# <i>mount -t cifs -o username=USERNAME,password=PASSWORD //PrintServer/public /mnt/public</i>
1087</pre> 897</pre>
1088 898
1089<p> 899<p>
1090After you mount the share, you would access it as if it were a local 900After you mount the share, you would access it as if it were a local drive.
1091drive.
1092</p> 901</p>
1093 902
1094</body> 903</body>
1095</section> 904</section>
1096<section> 905<section>
1097<title>Printer Configuration for Windows NT/2000/XP clients</title> 906<title>Printer Configuration for Windows NT/2000/XP clients</title>
1098<body> 907<body>
1099 908
1100<p> 909<p>
1101That's just a bit of point-and-click. Browse to 910That's just a bit of point-and-click. Browse to <path>\\PrintServer</path> and
1102<path>\\PrintServer</path> and right click on the printer 911right click on the printer (HPDeskJet930C) and click connect. This will download
1103(HPDeskJet930C) and click connect. This will download the drivers to
1104the Windows client and now every application (such as Word or Acrobat) 912the drivers to the Windows client and now every application (such as Word or
1105will offer HPDeskJet930C as an available printer to print to. :-) 913Acrobat) will offer HPDeskJet930C as an available printer to print to. :-)
1106</p> 914</p>
1107 915
1108</body> 916</body>
1109</section> 917</section>
1110</chapter> 918</chapter>
1114<section> 922<section>
1115<title>A Fond Farewell</title> 923<title>A Fond Farewell</title>
1116<body> 924<body>
1117 925
1118<p> 926<p>
1119Well that should be it. You should now have a successful printing enviroment 927That should be it. You should now have a successful printing enviroment that is
1120that is friendly to both Windows and *nix as well as a fully virus-free working 928friendly to both Windows and *nix as well as a working share!
1121share!
1122</p> 929</p>
1123 930
1124</body> 931</body>
1125</section> 932</section>
1126</chapter> 933</chapter>
1136troubleshooting your installation: 943troubleshooting your installation:
1137</p> 944</p>
1138 945
1139<ul> 946<ul>
1140 <li><uri link="http://www.cups.org/">CUPS Homepage</uri></li> 947 <li><uri link="http://www.cups.org/">CUPS Homepage</uri></li>
948 <li>
1141 <li><uri link="http://www.samba.org/">Samba Homepage</uri></li> 949 <uri link="http://www.samba.org/">Samba Homepage</uri>, especially the <uri
950 link="http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/CUPS-printing.html">chapter
951 on Samba/CUPS configuration</uri>
952 </li>
1142 <li><uri link="http://linuxprinting.org/">LinuxPrinting dot Org</uri></li> 953 <li><uri link="http://linuxprinting.org/">LinuxPrinting dot Org</uri></li>
1143 <li> 954 <li>
1144 <uri link="http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/">Kurt 955 <uri link="http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/">Kurt
1145 Pfeifle's Samba Print HOWTO</uri> ( 956 Pfeifle's Samba Print HOWTO</uri> ( This HOWTO really covers <e>ANYTHING</e>
1146 This HOWTO really covers <e>ANYTHING</e> and <e>EVERYTHING</e>
1147 I've written here, plus a LOT more concerning CUPS and Samba, and 957 and <e>EVERYTHING</e> I've written here, plus a LOT more concerning CUPS and
1148 generally printing support on networks. A really interesting read, 958 Samba, and generally printing support on networks. A really interesting
1149 with lots and lots of details) 959 read, with lots and lots of details.)
1150 </li> 960 </li>
1151 <li><uri link="http://www.freebsddiary.org/cups.php">FreeBSD Diary's CUPS Topic</uri></li> 961 <li><uri link="http://www.freebsddiary.org/cups.php">FreeBSD Diary's CUPS Topic</uri></li>
1152</ul> 962</ul>
1153 963
1154</body> 964</body>
1156<section> 966<section>
1157<title>Troubleshooting</title> 967<title>Troubleshooting</title>
1158<body> 968<body>
1159 969
1160<p> 970<p>
971See <uri
1161See <uri link="http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/Samba-HOWTO-Collection-3.0-PrintingChapter-11th-draft.html#37">this 972link="http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/Samba-HOWTO-Collection-3.0-PrintingChapter-11th-draft.html#37">this
1162page</uri> from Kurt Pfeifle's "Printing Support in Samba 3.0" 973page</uri> from Kurt Pfeifle's "Printing Support in Samba 3.0" manual. Lots of
1163manual. Lots of useful tips there! Be sure to look this one up 974useful tips there! Be sure to look this one up first, before posting questions
1164first, before posting questions and problems! Maybe the solution 975and problems! Maybe the solution you're looking for is right there.
1165you're looking for is right there.
1166</p> 976</p>
1167 977
1168</body> 978</body>
1169</section> 979</section>
1170</chapter> 980</chapter>

Legend:
Removed from v.1.9  
changed lines
  Added in v.1.41

  ViewVC Help
Powered by ViewVC 1.1.20