diff options
Diffstat (limited to 'docs/htmldocs/Samba3-ByExample')
101 files changed, 0 insertions, 74309 deletions
diff --git a/docs/htmldocs/Samba3-ByExample/Big500users.html b/docs/htmldocs/Samba3-ByExample/Big500users.html deleted file mode 100644 index bf1957171e..0000000000 --- a/docs/htmldocs/Samba3-ByExample/Big500users.html +++ /dev/null @@ -1,1162 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 4. The 500-User Office</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="secure.html" title="Chapter 3. Secure Office Networking"><link rel="next" href="happy.html" title="Chapter 5. Making Happy Users"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 4. The 500-User Office</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="secure.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="happy.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 4. The 500-User Office"><div class="titlepage"><div><div><h2 class="title"><a name="Big500users"></a>Chapter 4. The 500-User Office</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="Big500users.html#id336007">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#id336038">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id336113">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#id336141">Technical Issues</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id336318">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id336338">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#ch5-dnshcp-setup">Installation of DHCP, DNS, and Samba Control Files</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id337052">Server Preparation: All Servers</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id337568">Server-Specific Preparation</a></span></dt><dt><span class="sect2"><a href="Big500users.html#ch5-procstart">Process Startup Configuration</a></span></dt><dt><span class="sect2"><a href="Big500users.html#ch5wincfg">Windows Client Configuration</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id340544">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id340597">Questions and Answers</a></span></dt></dl></div><p> - The Samba-3 networking you explored in <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a> covers the finer points of - configuration of peripheral services such as DHCP and DNS, and WINS. You experienced - implementation of a simple configuration of the services that are important adjuncts - to successful deployment of Samba. - </p><p> - An analysis of the history of postings to the Samba mailing list easily demonstrates - that the two most prevalent Samba problem areas are - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Defective resolution of a NetBIOS name to its IP address - </p></li><li class="listitem"><p> - Printing problems - </p></li></ul></div><p> - The exercises - so far in this book have focused on implementation of the simplest printing processes - involving no print job processing intelligence. In this chapter, you maintain - that same approach to printing, but <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a> presents an opportunity - to make printing more complex for the administrator while making it easier for the user. - </p><p> - <a class="indexterm" name="id335954"></a> - <a class="indexterm" name="id335961"></a> - <a class="indexterm" name="id335967"></a> - <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a> demonstrates operation of a DHCP server and a DNS server - as well as a central WINS server. You validated the operation of these services and - saw an effective implementation of a Samba domain controller using the - <em class="parameter"><code>tdbsam</code></em> passdb backend. - </p><p> - The objective of this chapter is to introduce more complex techniques that can be used to - improve manageability of Samba as networking needs grow. In this chapter, you implement - a distributed DHCP server environment, a distributed DNS server arrangement, a centralized - WINS server, and a centralized Samba domain controller. - </p><p> - A note of caution is important regarding the Samba configuration that is used in this - chapter. The use of a single domain controller on a routed, multisegment network is - a poor design choice that leads to potential network user complaints. - This chapter demonstrates some successful - techniques in deployment and configuration management. This should be viewed as a - foundation chapter for complex Samba deployments. - </p><p> - As you master the techniques presented here, you may find much better methods to - improve network management and control while reducing human resource overheads. - You should take the opportunity to innovate and expand on the methods presented - here and explore them to the fullest. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id336007"></a>Introduction</h2></div></div></div><p> - Business continues to go well for Abmas. Mr. Meany is driving your success and the - network continues to grow thanks to the hard work Christine has done. You recently - hired Stanley Soroka as manager of information systems. Christine recommended Stan - to the role. She told you Stan is so good at handling Samba that he can make a cast - iron rocking horse that is embedded in concrete kick like a horse at a rodeo. You - need skills like his. Christine and Stan get along just fine. Let's see what - you can get out of this pair as they plot the next-generation networks. - </p><p> - Ten months ago Abmas closed an acquisition of a property insurance business. The - founder lost interest in the business and decided to sell it to Mr. Meany. Because - they were former university classmates, the purchase was concluded with mutual assent. - The acquired business is located at the other end of town in much larger facilities. - The old Abmas building has become too small. Located on the same campus as the newly - acquired business are two empty buildings that are ideal to provide Abmas with - opportunity for growth. - </p><p> - Abmas has now completed the purchase of the two empty buildings, and you are - to install a new network and relocate staff in nicely furnished new facilities. - The new network is to be used to fully integrate company operations. You have - decided to locate the new network operations control center in the larger building - in which the insurance group is located to take advantage of an ideal floor space - and to allow Stan and Christine to fully stage the new network and test it before - it is rolled out. Your strategy is to complete the new network so that it - is ready for operation when the old office moves into the new premises. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id336038"></a>Assignment Tasks</h3></div></div></div><p> - The acquired business had 280 network users. The old Abmas building housed - 220 network users in unbelievably cramped conditions. The network that - initially served 130 users now handles 220 users quite well. - </p><p> - The two businesses will be fully merged to create a single campus company. - The Property Insurance Group (PIG) houses 300 employees, the new Accounting - Services Group (ASG) will be in a small building (BLDG1) that houses 50 - employees, and the Financial Services Group (FSG) will be housed in a large - building that has capacity for growth (BLDG2). Building 2 houses 150 network - users. - </p><p> - You have decided to connect the building using fiber optic links between new - routers. As a backup, the buildings are interconnected using line-of-sight - high-speed infrared facilities. The infrared connection provides a - secondary route to be used during periods of high demand for network - bandwidth. - </p><p> - The Internet gateway is upgraded to 15 Mb/sec service. Your ISP - provides on your premises a fully managed Cisco PIX firewall. You no longer need - to worry about firewall facilities on your network. - </p><p> - Stanley and Christine have purchased new server hardware. Christine wants to - roll out a network that has whistles and bells. Stan wants to start off with - a simple to manage, not-too-complex network. He believes that network - users need to be gradually introduced to new features and capabilities and not - rushed into an environment that may cause disorientation and loss of productivity. - </p><p> - Your intrepid network team has decided to implement a network configuration - that closely mirrors the successful system you installed in the old Abmas building. - The new network infrastructure is owned by Abmas, but all desktop systems - are being procured through a new out-source services and leasing company. Under - the terms of a deal with Mr. M. Proper (CEO), DirectPointe, Inc., provides - all desktop systems and includes full level-one help desk support for - a flat per-machine monthly fee. The deal allows you to add workstations on demand. - This frees Stan and Christine to deal with deeper issues as they emerge and - permits Stan to work on creating new future value-added services. - </p><p> - DirectPointe Inc. receives from you a new standard desktop configuration - every four months. They automatically roll that out to each desktop system. - You must keep DirectPointe informed of all changes. - </p><p><a class="indexterm" name="id336088"></a> - The new network has a single Samba Primary Domain Controller (PDC) located in the - Network Operation Center (NOC). Buildings 1 and 2 each have a local server - for local application servicing. It is a domain member. The new system - uses the <em class="parameter"><code>tdbsam</code></em> passdb backend. - </p><p> - Printing is based on raw pass-through facilities just as it has been used so far. - All printer drivers are installed on the desktop and notebook computers. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id336113"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id336121"></a> - The example you are building in this chapter is of a network design that works, but this - does not make it a design that is recommended. As a general rule, there should be at least - one Backup Domain Controller (BDC) per 150 Windows network clients. The principle behind - this recommendation is that correct operation of MS Windows clients requires rapid - network response to all SMB/CIFS requests. The same rule says that if there are more than - 50 clients per domain controller, they are too busy to service requests. Let's put such - rules aside and recognize that network load affects the integrity of domain controller - responsiveness. This network will have 500 clients serviced by one central domain - controller. This is not a good omen for user satisfaction. You, of course, address this - very soon (see <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>). - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id336141"></a>Technical Issues</h3></div></div></div><p> - Stan has talked you into a horrible compromise, but it is addressed. Just make - certain that the performance of this network is well validated before going live. - </p><p> - Design decisions made in this design include the following: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id336161"></a> - <a class="indexterm" name="id336168"></a> - <a class="indexterm" name="id336174"></a> - A single PDC is being implemented. This limitation is based on the choice not to - use LDAP. Many network administrators fear using LDAP because of the perceived - complexity of implementation and management of an LDAP-based backend for all user - identity management as well as to store network access credentials. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id336188"></a> - <a class="indexterm" name="id336195"></a> - Because of the refusal to use an LDAP (ldapsam) passdb backend at this time, the - only choice that makes sense with 500 users is to use the tdbsam passwd backend. - This type of backend is not receptive to replication to BDCs. If the tdbsam - <code class="filename">passdb.tdb</code> file is replicated to BDCs using - <code class="literal">rsync</code>, there are two potential problems: (1) data that is in - memory but not yet written to disk will not be replicated, and (2) domain member - machines periodically change the secret machine password. When this happens, there - is no mechanism to return the changed password to the PDC. - </p></li><li class="listitem"><p> - All domain user, group, and machine accounts are managed on the PDC. This makes - for a simple mode of operation but has to be balanced with network performance and - integrity of operations considerations. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id336229"></a> - A single central WINS server is being used. The PDC is also the WINS server. - Any attempt to operate a routed network without a WINS server while using NetBIOS - over TCP/IP protocols does not work unless on each client the name resolution - entries for the PDC are added to the <code class="filename">LMHOSTS</code>. This file is - normally located on the Windows XP Professional client in the - <code class="filename">C:\WINDOWS\SYSTEM32\ETC\DRIVERS</code> directory. - </p></li><li class="listitem"><p> - At this time the Samba WINS database cannot be replicated. That is - why a single WINS server is being implemented. This should work without a problem. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id336261"></a> - BDCs make use of <code class="literal">winbindd</code> to provide - access to domain security credentials for file system access and object storage. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id336279"></a> - <a class="indexterm" name="id336288"></a> - Configuration of Windows XP Professional clients is achieved using DHCP. Each - subnet has its own DHCP server. Backup DHCP serving is provided by one - alternate DHCP server. This necessitates enabling of the DHCP Relay agent on - all routers. The DHCP Relay agent must be programmed to pass DHCP Requests from the - network directed at the backup DHCP server. - </p></li><li class="listitem"><p> - All network users are granted the ability to print to any printer that is - network-attached. All printers are available from each server. Print jobs that - are spooled to a printer that is not on the local network segment are automatically - routed to the print spooler that is in control of that printer. The specific details - of how this might be done are demonstrated for one example only. - </p></li><li class="listitem"><p> - The network address and subnetmask chosen provide 1022 usable IP addresses in - each subnet. If in the future more addresses are required, it would make sense - to add further subnets rather than change addressing. - </p></li></ul></div></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id336318"></a>Political Issues</h3></div></div></div><p> - This case gets close to the real world. You and I know the right way to implement - domain control. Politically, we have to navigate a minefield. In this case, the need is to - get the PDC rolled out in compliance with expectations and also to be ready to save the day - by having the real solution ready before it is needed. That real solution is presented in - <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>. - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id336338"></a>Implementation</h2></div></div></div><p> - The following configuration process begins following installation of Red Hat Fedora Core2 on the - three servers shown in the network topology diagram in <a class="link" href="Big500users.html#chap05net" title="Figure 4.1. Network Topology 500 User Network Using tdbsam passdb backend.">“Network Topology 500 User Network Using tdbsam passdb backend.”</a>. You have - selected hardware that is appropriate to the task. - </p><div class="figure"><a name="chap05net"></a><p class="title"><b>Figure 4.1. Network Topology 500 User Network Using tdbsam passdb backend.</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap5-net.png" width="270" alt="Network Topology 500 User Network Using tdbsam passdb backend."></div></div></div><br class="figure-break"><div class="sect2" title="Installation of DHCP, DNS, and Samba Control Files"><div class="titlepage"><div><div><h3 class="title"><a name="ch5-dnshcp-setup"></a>Installation of DHCP, DNS, and Samba Control Files</h3></div></div></div><p> - Carefully install the configuration files into the correct locations as shown in - <a class="link" href="Big500users.html#ch5-filelocations" title="Table 4.1. Domain: MEGANET, File Locations for Servers">“Domain: MEGANET, File Locations for Servers”</a>. You should validate that the full file path is - correct as shown. - </p><p> - The abbreviation shown in this table as <code class="constant">{VLN}</code> refers to - the directory location beginning with <code class="filename">/var/lib/named</code>. - </p><div class="table"><a name="ch5-filelocations"></a><p class="title"><b>Table 4.1. Domain: <code class="constant">MEGANET</code>, File Locations for Servers</b></p><div class="table-contents"><table summary="Domain: MEGANET, File Locations for Servers" border="1"><colgroup><col align="left"><col align="left"><col align="center"><col align="center"><col align="center"></colgroup><thead><tr><th colspan="2" align="center">File Information</th><th colspan="3" align="center">Server Name</th></tr><tr><th align="center">Source</th><th align="center">Target Location</th><th align="center">MASSIVE</th><th align="center">BLDG1</th><th align="center">BLDG2</th></tr></thead><tbody><tr><td align="left"><a class="link" href="Big500users.html#ch5-massivesmb" title="Example 4.1. Server: MASSIVE (PDC), File: /etc/samba/smb.conf">“Server: MASSIVE (PDC), File: /etc/samba/smb.conf”</a></td><td align="left"><code class="filename">/etc/samba/smb.conf</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#ch5-dc-common" title="Example 4.2. Server: MASSIVE (PDC), File: /etc/samba/dc-common.conf">“Server: MASSIVE (PDC), File: /etc/samba/dc-common.conf”</a></td><td align="left"><code class="filename">/etc/samba/dc-common.conf</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#ch5-commonsmb" title="Example 4.3. Common Samba Configuration File: /etc/samba/common.conf">“Common Samba Configuration File: /etc/samba/common.conf”</a></td><td align="left"><code class="filename">/etc/samba/common.conf</code></td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="Big500users.html#ch5-bldg1-smb" title="Example 4.4. Server: BLDG1 (Member), File: smb.conf">“Server: BLDG1 (Member), File: smb.conf”</a></td><td align="left"><code class="filename">/etc/samba/smb.conf</code></td><td align="center">No</td><td align="center">Yes</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#ch5-bldg2-smb" title="Example 4.5. Server: BLDG2 (Member), File: smb.conf">“Server: BLDG2 (Member), File: smb.conf”</a></td><td align="left"><code class="filename">/etc/samba/smb.conf</code></td><td align="center">No</td><td align="center">No</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="Big500users.html#ch5-dommem-smb" title="Example 4.6. Common Domain Member Include File: dom-mem.conf">“Common Domain Member Include File: dom-mem.conf”</a></td><td align="left"><code class="filename">/etc/samba/dommem.conf</code></td><td align="center">No</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="Big500users.html#massive-dhcp" title="Example 4.7. Server: MASSIVE, File: dhcpd.conf">“Server: MASSIVE, File: dhcpd.conf”</a></td><td align="left"><code class="filename">/etc/dhcpd.conf</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#bldg1dhcp" title="Example 4.8. Server: BLDG1, File: dhcpd.conf">“Server: BLDG1, File: dhcpd.conf”</a></td><td align="left"><code class="filename">/etc/dhcpd.conf</code></td><td align="center">No</td><td align="center">Yes</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#bldg2dhcp" title="Example 4.9. Server: BLDG2, File: dhcpd.conf">“Server: BLDG2, File: dhcpd.conf”</a></td><td align="left"><code class="filename">/etc/dhcpd.conf</code></td><td align="center">No</td><td align="center">No</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="Big500users.html#massive-nameda" title="Example 4.10. Server: MASSIVE, File: named.conf, Part: A">“Server: MASSIVE, File: named.conf, Part: A”</a></td><td align="left"><code class="filename">/etc/named.conf (part A)</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#massive-namedb" title="Example 4.11. Server: MASSIVE, File: named.conf, Part: B">“Server: MASSIVE, File: named.conf, Part: B”</a></td><td align="left"><code class="filename">/etc/named.conf (part B)</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#massive-namedc" title="Example 4.12. Server: MASSIVE, File: named.conf, Part: C">“Server: MASSIVE, File: named.conf, Part: C”</a></td><td align="left"><code class="filename">/etc/named.conf (part C)</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#abmasbizdns" title="Example 4.13. Forward Zone File: abmas.biz.hosts">“Forward Zone File: abmas.biz.hosts”</a></td><td align="left"><code class="filename">{VLN}/master/abmas.biz.hosts</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#abmasusdns" title="Example 4.14. Forward Zone File: abmas.biz.hosts">“Forward Zone File: abmas.biz.hosts”</a></td><td align="left"><code class="filename">{VLN}/master/abmas.us.hosts</code></td><td align="center">Yes</td><td align="center">No</td><td align="center">No</td></tr><tr><td align="left"><a class="link" href="Big500users.html#bldg12nameda" title="Example 4.15. Servers: BLDG1/BLDG2, File: named.conf, Part: A">“Servers: BLDG1/BLDG2, File: named.conf, Part: A”</a></td><td align="left"><code class="filename">/etc/named.conf (part A)</code></td><td align="center">No</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="Big500users.html#bldg12namedb" title="Example 4.16. Servers: BLDG1/BLDG2, File: named.conf, Part: B">“Servers: BLDG1/BLDG2, File: named.conf, Part: B”</a></td><td align="left"><code class="filename">/etc/named.conf (part B)</code></td><td align="center">No</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="appendix.html#loopback" title="Example 15.3. DNS Localhost Forward Zone File: /var/lib/named/localhost.zone">“DNS Localhost Forward Zone File: /var/lib/named/localhost.zone”</a></td><td align="left"><code class="filename">{VLN}/localhost.zone</code></td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="appendix.html#dnsloopy" title="Example 15.4. DNS Localhost Reverse Zone File: /var/lib/named/127.0.0.zone">“DNS Localhost Reverse Zone File: /var/lib/named/127.0.0.zone”</a></td><td align="left"><code class="filename">{VLN}/127.0.0.zone</code></td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td align="left"><a class="link" href="appendix.html#roothint" title="Example 15.5. DNS Root Name Server Hint File: /var/lib/named/root.hint">“DNS Root Name Server Hint File: /var/lib/named/root.hint”</a></td><td align="left"><code class="filename">{VLN}/root.hint</code></td><td align="center">Yes</td><td align="center">Yes</td><td align="center">Yes</td></tr></tbody></table></div></div><br class="table-break"></div><div class="sect2" title="Server Preparation: All Servers"><div class="titlepage"><div><div><h3 class="title"><a name="id337052"></a>Server Preparation: All Servers</h3></div></div></div><p> - The following steps apply to all servers. Follow each step carefully. - </p><div class="procedure" title="Procedure 4.1. Server Preparation Steps"><a name="id337062"></a><p class="title"><b>Procedure 4.1. Server Preparation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Using the UNIX/Linux system tools, set the name of the server as shown in the network - topology diagram in <a class="link" href="Big500users.html#chap05net" title="Figure 4.1. Network Topology 500 User Network Using tdbsam passdb backend.">“Network Topology 500 User Network Using tdbsam passdb backend.”</a>. For SUSE Linux products, the tool - that permits this is called <code class="literal">yast2</code>; for Red Hat Linux products, - you can use the <code class="literal">netcfg</code> tool. - Verify that your hostname is correctly set by running: -</p><pre class="screen"> -<code class="prompt">root# </code> uname -n -</pre><p> - An alternate method to verify the hostname is: -</p><pre class="screen"> -<code class="prompt">root# </code> hostname -f -</pre><p> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id337123"></a> - <a class="indexterm" name="id337130"></a> - Edit your <code class="filename">/etc/hosts</code> file to include the primary names and addresses - of all network interfaces that are on the host server. This is necessary so that during - startup the system is able to resolve all its own names to the IP address prior to - startup of the DNS server. You should check the startup order of your system. If the - CUPS print server is started before the DNS server (<code class="literal">named</code>), you - should also include an entry for the printers in the <code class="filename">/etc/hosts</code> file. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id337165"></a> - All DNS name resolution should be handled locally. To ensure that the server is configured - correctly to handle this, edit <code class="filename">/etc/resolv.conf</code> so it has the following - content: -</p><pre class="screen"> -search abmas.us abmas.biz -nameserver 127.0.0.1 -</pre><p> - This instructs the name resolver function (when configured correctly) to ask the DNS server - that is running locally to resolve names to addresses. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id337193"></a> - <a class="indexterm" name="id337200"></a> - Add the <code class="constant">root</code> user to the password backend: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -a root -New SMB password: XXXXXXXX -Retype new SMB password: XXXXXXXX -<code class="prompt">root# </code> -</pre><p> - The <code class="constant">root</code> account is the UNIX equivalent of the Windows domain administrator. - This account is essential in the regular maintenance of your Samba server. It must never be - deleted. If for any reason the account is deleted, you may not be able to recreate this account - without considerable trouble. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id337241"></a> - <a class="indexterm" name="id337248"></a> - Create the username map file to permit the <code class="constant">root</code> account to be called - <code class="constant">Administrator</code> from the Windows network environment. To do this, create - the file <code class="filename">/etc/samba/smbusers</code> with the following contents: -</p><pre class="screen"> -#### -# User mapping file -#### -# File Format -# ----------- -# Unix_ID = Windows_ID -# -# Examples: -# root = Administrator -# janes = "Jane Smith" -# jimbo = Jim Bones -# -# Note: If the name contains a space it must be double quoted. -# In the example above the name 'jimbo' will be mapped to Windows -# user names 'Jim' and 'Bones' because the space was not quoted. -####################################################################### -root = Administrator -#### -# End of File -#### -</pre><p> - </p></li><li class="step" title="Step 6"><p> - Configure all network-attached printers to have a fixed IP address. - </p></li><li class="step" title="Step 7"><p> - Create an entry in the DNS database on the server <code class="constant">MASSIVE</code> - in both the forward lookup database for the zone <code class="constant">abmas.biz.hosts</code> - and in the reverse lookup database for the network segment that the printer is - located in. Example configuration files for similar zones were presented in <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a>, - <a class="link" href="secure.html#abmasbiz" title="Example 3.14. DNS Abmas.biz Forward Zone File">“DNS Abmas.biz Forward Zone File”</a> and <a class="link" href="secure.html#eth2zone" title="Example 3.13. DNS 192.168.2 Reverse Zone File">“DNS 192.168.2 Reverse Zone File”</a>. - </p></li><li class="step" title="Step 8"><p> - Follow the instructions in the printer manufacturer's manuals to permit printing - to port 9100. Use any other port the manufacturer specifies for direct mode, - raw printing. This allows the CUPS spooler to print using raw mode protocols. - <a class="indexterm" name="id337328"></a> - <a class="indexterm" name="id337335"></a> - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id337348"></a> - Only on the server to which the printer is attached configure the CUPS Print - Queues as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> lpadmin -p <em class="parameter"><code>printque</code></em> -v socket://<em class="parameter"><code>printer-name</code></em>.abmas.biz:9100 -E -</pre><p> - <a class="indexterm" name="id337382"></a> - This step creates the necessary print queue to use no assigned print filter. This - is ideal for raw printing, that is, printing without use of filters. - The name <em class="parameter"><code>printque</code></em> is the name you have assigned for - the particular printer. - </p></li><li class="step" title="Step 10"><p> - Print queues may not be enabled at creation. Make certain that the queues - you have just created are enabled by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/bin/enable <em class="parameter"><code>printque</code></em> -</pre><p> - </p></li><li class="step" title="Step 11"><p> - Even though your print queue may be enabled, it is still possible that it - does not accept print jobs. A print queue services incoming printing - requests only when configured to do so. Ensure that your print queue is - set to accept incoming jobs by executing the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/bin/accept <em class="parameter"><code>printque</code></em> -</pre><p> - </p></li><li class="step" title="Step 12"><p> - <a class="indexterm" name="id337455"></a> - <a class="indexterm" name="id337461"></a> - <a class="indexterm" name="id337468"></a> - This step, as well as the next one, may be omitted where CUPS version 1.1.18 - or later is in use. Although it does no harm to follow it anyway, and may - help to avoid time spent later trying to figure out why print jobs may be - disappearing without a trace. Look at these two steps as <span class="emphasis"><em>insurance</em></span> - against lost time. Edit file <code class="filename">/etc/cups/mime.convs</code> to - uncomment the line: -</p><pre class="screen"> -application/octet-stream application/vnd.cups-raw 0 - -</pre><p> - </p></li><li class="step" title="Step 13"><p> - <a class="indexterm" name="id337500"></a> - Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream -</pre><p> - </p></li><li class="step" title="Step 14"><p> - Refer to the CUPS printing manual for instructions regarding how to configure - CUPS so that print queues that reside on CUPS servers on remote networks - route print jobs to the print server that owns that queue. The default setting - on your CUPS server may automatically discover remotely installed printers and - may permit this functionality without requiring specific configuration. - </p></li><li class="step" title="Step 15"><p> - As part of the roll-out program, you need to configure the application's - server shares. This can be done once on the central server and may then be - replicated using a tool such as <code class="literal">rsync</code>. Refer to the man - page for <code class="literal">rsync</code> for details regarding use. The notes in - <a class="link" href="secure.html#ch4appscfg" title="Application Share Configuration">“Application Share Configuration”</a> may help in your decisions to use an application - server facility. - </p></li></ol></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - Logon scripts that are run from a domain controller (PDC or BDC) are capable of using semi-intelligent - processes to automap Windows client drives to an application server that is nearest to the client. This - is considerably more difficult when a single PDC is used on a routed network. It can be done, but not - as elegantly as you see in the next chapter. - </p></div></div><div class="sect2" title="Server-Specific Preparation"><div class="titlepage"><div><div><h3 class="title"><a name="id337568"></a>Server-Specific Preparation</h3></div></div></div><p> - There are some steps that apply to particular server functionality only. Each step is critical - to correct server operation. The following step-by-step installation guidance will assist you - in working through the process of configuring the PDC and then both BDC's. - </p><div class="sect3" title="Configuration for Server: MASSIVE"><div class="titlepage"><div><div><h4 class="title"><a name="id337579"></a>Configuration for Server: <code class="constant">MASSIVE</code></h4></div></div></div><p> - The steps presented here attempt to implement Samba installation in a generic manner. While - some steps are clearly specific to Linux, it should not be too difficult to apply them to - your platform of choice. - </p><div class="procedure" title="Procedure 4.2. Primary Domain Controller Preparation"><a name="id337592"></a><p class="title"><b>Procedure 4.2. Primary Domain Controller Preparation</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id337603"></a> - <a class="indexterm" name="id337610"></a> - The host server acts as a router between the two internal network segments as well - as for all Internet access. This necessitates that IP forwarding be enabled. This can be - achieved by adding to the <code class="filename">/etc/rc.d/boot.local</code> an entry as follows: -</p><pre class="screen"> -echo 1 > /proc/sys/net/ipv4/ip_forward -</pre><p> - To ensure that your kernel is capable of IP forwarding during configuration, you may wish to execute - that command manually also. This setting permits the Linux system to act as a router. - </p></li><li class="step" title="Step 2"><p> - This server is dual hosted (i.e., has two network interfaces) one goes to the Internet - and the other to a local network that has a router that is the gateway to the remote networks. - You must therefore configure the server with route table entries so that it can find machines - on the remote networks. You can do this using the appropriate system tools for your Linux - server or using static entries that you place in one of the system startup files. It is best - to always use the tools that the operating system vendor provided. In the case of SUSE Linux, the - best tool to do this is YaST (refer to SUSE Administration Manual); in the case of Red Hat, - this is best done using the graphical system configuration tools (see the Red Hat documentation). - An example of how this may be done manually is as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> route add net 172.16.4.0 netmask 255.255.252.0 gw 172.16.0.128 -<code class="prompt">root# </code> route add net 172.16.8.0 netmask 255.255.252.0 gw 172.16.0.128 -</pre><p> - If you just execute these commands manually, the route table entries you have created are - not persistent across system reboots. You may add these commands directly to the local - startup files as follows: (SUSE) <code class="filename">/etc/rc.d/boot.local</code>, (Red Hat) - <code class="filename">/etc/rc.d/init.d/rc.local</code>. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id337688"></a> - The final step that must be completed is to edit the <code class="filename">/etc/nsswitch.conf</code> file. - This file controls the operation of the various resolver libraries that are part of the Linux - Glibc libraries. Edit this file so that it contains the following entries: -</p><pre class="screen"> -hosts: files dns wins -</pre><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id337715"></a> - Create and map Windows domain groups to UNIX groups. A sample script is provided in - <a class="link" href="Big500users.html#ch5-initgrps" title="Example 4.17. Initialize Groups Script, File: /etc/samba/initGrps.sh">“Initialize Groups Script, File: /etc/samba/initGrps.sh”</a>. Create a file containing this script. You called yours - <code class="filename">/etc/samba/initGrps.sh</code>. Set this file so it can be executed - and then execute the script. An example of the execution of this script as well as its - validation are shown in Section 4.3.2, Step 5. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id337743"></a> - <a class="indexterm" name="id337750"></a> - <a class="indexterm" name="id337759"></a> - For each user who needs to be given a Windows domain account, make an entry in the - <code class="filename">/etc/passwd</code> file as well as in the Samba password backend. - Use the system tool of your choice to create the UNIX system account, and use the Samba - <code class="literal">smbpasswd</code> to create a domain user account. - </p><p> - <a class="indexterm" name="id337784"></a> - <a class="indexterm" name="id337790"></a> - <a class="indexterm" name="id337797"></a> - There are a number of tools for user management under UNIX, such as - <code class="literal">useradd</code>, <code class="literal">adduser</code>, as well as a plethora of custom - tools. With the tool of your choice, create a home directory for each user. - </p></li><li class="step" title="Step 6"><p> - Using the preferred tool for your UNIX system, add each user to the UNIX groups created - previously as necessary. File system access control is based on UNIX group membership. - </p></li><li class="step" title="Step 7"><p> - Create the directory mount point for the disk subsystem that is to be mounted to provide - data storage for company files, in this case, the mount point indicated in the <code class="filename">smb.conf</code> - file is <code class="filename">/data</code>. Format the file system as required and mount the formatted - file system partition using appropriate system tools. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id337856"></a> - Create the top-level file storage directories for data and applications as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /data/{accounts,finsvcs,pidata} -<code class="prompt">root# </code> mkdir -p /apps -<code class="prompt">root# </code> chown -R root:root /data -<code class="prompt">root# </code> chown -R root:root /apps -<code class="prompt">root# </code> chown -R bjordan:accounts /data/accounts -<code class="prompt">root# </code> chown -R bjordan:finsvcs /data/finsvcs -<code class="prompt">root# </code> chown -R bjordan:finsvcs /data/pidata -<code class="prompt">root# </code> chmod -R ug+rwxs,o-rwx /data -<code class="prompt">root# </code> chmod -R ug+rwx,o+rx-w /apps -</pre><p> - Each department is responsible for creating its own directory structure within the departmental - share. The directory root of the <code class="literal">accounts</code> share is <code class="filename">/data/accounts</code>. - The directory root of the <code class="literal">finsvcs</code> share is <code class="filename">/data/finsvcs</code>. - The <code class="filename">/apps</code> directory is the root of the <code class="constant">apps</code> share - that provides the application server infrastructure. - </p></li><li class="step" title="Step 9"><p> - The <code class="filename">smb.conf</code> file specifies an infrastructure to support roaming profiles and network - logon services. You can now create the file system infrastructure to provide the - locations on disk that these services require. Adequate planning is essential - because desktop profiles can grow to be quite large. For planning purposes, a minimum of - 200 MB of storage should be allowed per user for profile storage. The following - commands create the directory infrastructure needed: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /var/spool/samba -<code class="prompt">root# </code> mkdir -p /var/lib/samba/{netlogon/scripts,profiles} -<code class="prompt">root# </code> chown -R root:root /var/spool/samba -<code class="prompt">root# </code> chown -R root:root /var/lib/samba -<code class="prompt">root# </code> chmod a+rwxt /var/spool/samba -</pre><p> - For each user account that is created on the system, the following commands should be - executed: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir /var/lib/samba/profiles/'username' -<code class="prompt">root# </code> chown 'username':users /var/lib/samba/profiles/'username' -<code class="prompt">root# </code> chmod ug+wrx,o+rx,-w /var/lib/samba/profiles/'username' -</pre><p> - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id338048"></a> - <a class="indexterm" name="id338055"></a> - Create a logon script. It is important that each line is correctly terminated with - a carriage return and line-feed combination (i.e., DOS encoding). The following procedure - works if the right tools (<code class="constant">unxi2dos</code> and <code class="constant">dos2unix</code>) are installed. - First, create a file called <code class="filename">/var/lib/samba/netlogon/scripts/logon.bat.unix</code> - with the following contents: -</p><pre class="screen"> -net time \\massive /set /yes -net use h: /home -</pre><p> - Convert the UNIX file to a DOS file: -</p><pre class="screen"> -<code class="prompt">root# </code> dos2unix < /var/lib/samba/netlogon/scripts/logon.bat.unix \ - > /var/lib/samba/netlogon/scripts/logon.bat -</pre><p> - </p></li><li class="step" title="Step 11"><p> - There is one preparatory step without which you cannot have a working Samba network - environment. You must add an account for each network user. You can do this by executing - the following steps for each user: -</p><pre class="screen"> -<code class="prompt">root# </code> useradd -m <em class="parameter"><code>username</code></em> -<code class="prompt">root# </code> passwd <em class="parameter"><code>username</code></em> -Changing password for <em class="parameter"><code>username</code></em>. -New password: XXXXXXXX -Re-enter new password: XXXXXXXX -Password changed -<code class="prompt">root# </code> smbpasswd -a <em class="parameter"><code>username</code></em> -New SMB password: XXXXXXXX -Retype new SMB password: XXXXXXXX -Added user <em class="parameter"><code>username</code></em>. -</pre><p> - You do, of course, use a valid user login ID in place of <em class="parameter"><code>username</code></em>. - </p></li><li class="step" title="Step 12"><p> - Follow the processes shown in <a class="link" href="Big500users.html#ch5-procstart" title="Process Startup Configuration">“Process Startup Configuration”</a> to start all services. - </p></li><li class="step" title="Step 13"><p> - Your server is ready for validation testing. Do not proceed with the steps in - <a class="link" href="Big500users.html#ch5-domsvrspec" title="Configuration Specific to Domain Member Servers: BLDG1, BLDG2">“Configuration Specific to Domain Member Servers: BLDG1, BLDG2”</a> until after the operation of the server has been - validated following the same methods as outlined in <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a>, <a class="link" href="secure.html#ch4valid" title="Validation">“Validation”</a>. - </p></li></ol></div></div><div class="sect3" title="Configuration Specific to Domain Member Servers: BLDG1, BLDG2"><div class="titlepage"><div><div><h4 class="title"><a name="ch5-domsvrspec"></a>Configuration Specific to Domain Member Servers: <code class="constant">BLDG1, BLDG2</code></h4></div></div></div><p> - The following steps will guide you through the nuances of implementing BDCs for the broadcast - isolated network segments. Remember that if the target installation platform is not Linux, it may - be necessary to adapt some commands to the equivalent on the target platform. - </p><div class="procedure" title="Procedure 4.3. Backup Domain Controller Configuration Steps"><a name="id338227"></a><p class="title"><b>Procedure 4.3. Backup Domain Controller Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id338238"></a> - The final step that must be completed is to edit the <code class="filename">/etc/nsswitch.conf</code> file. - This file controls the operation of the various resolver libraries that are part of the Linux - Glibc libraries. Edit this file so that it contains the following entries: -</p><pre class="screen"> -passwd: files winbind -group: files winbind -hosts: files dns wins -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Follow the steps outlined in <a class="link" href="Big500users.html#ch5-procstart" title="Process Startup Configuration">“Process Startup Configuration”</a> to start all services. Do not - start Samba at this time. Samba is controlled by the process called <code class="literal">smb</code>. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id338286"></a> - You must now attempt to join the domain member servers to the domain. The following - instructions should be executed to effect this: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -</pre><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id338316"></a> - You now start the Samba services by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> service smb start -</pre><p> - </p></li><li class="step" title="Step 5"><p> - Your server is ready for validation testing. Do not proceed with the steps in - <a class="link" href="Big500users.html#ch5-domsvrspec" title="Configuration Specific to Domain Member Servers: BLDG1, BLDG2">“Configuration Specific to Domain Member Servers: BLDG1, BLDG2”</a> until after the operation of the server has been - validated following the same methods as outlined in <a class="link" href="secure.html#ch4valid" title="Validation">“Validation”</a>. - </p></li></ol></div></div></div><div class="example"><a name="ch5-massivesmb"></a><p class="title"><b>Example 4.1. Server: MASSIVE (PDC), File: <code class="filename">/etc/samba/smb.conf</code></b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id338398"></a><em class="parameter"><code>workgroup = MEGANET</code></em></td></tr><tr><td><a class="indexterm" name="id338409"></a><em class="parameter"><code>netbios name = MASSIVE</code></em></td></tr><tr><td><a class="indexterm" name="id338421"></a><em class="parameter"><code>interfaces = eth1, lo</code></em></td></tr><tr><td><a class="indexterm" name="id338432"></a><em class="parameter"><code>bind interfaces only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id338444"></a><em class="parameter"><code>passdb backend = tdbsam</code></em></td></tr><tr><td><a class="indexterm" name="id338455"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id338467"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id338478"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id338490"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id338502"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id338514"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -G '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id338526"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id338538"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id338549"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id338560"></a><em class="parameter"><code>include = /etc/samba/dc-common.conf</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id338581"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id338593"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id338604"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[service]</code></em></td></tr><tr><td><a class="indexterm" name="id338624"></a><em class="parameter"><code>comment = Financial Services Files</code></em></td></tr><tr><td><a class="indexterm" name="id338636"></a><em class="parameter"><code>path = /data/service</code></em></td></tr><tr><td><a class="indexterm" name="id338648"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[pidata]</code></em></td></tr><tr><td><a class="indexterm" name="id338668"></a><em class="parameter"><code>comment = Property Insurance Files</code></em></td></tr><tr><td><a class="indexterm" name="id338680"></a><em class="parameter"><code>path = /data/pidata</code></em></td></tr><tr><td><a class="indexterm" name="id338691"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch5-dc-common"></a><p class="title"><b>Example 4.2. Server: MASSIVE (PDC), File: <code class="filename">/etc/samba/dc-common.conf</code></b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id338738"></a><em class="parameter"><code>shutdown script = /var/lib/samba/scripts/shutdown.sh</code></em></td></tr><tr><td><a class="indexterm" name="id338749"></a><em class="parameter"><code>abort shutdown script = /sbin/shutdown -c</code></em></td></tr><tr><td><a class="indexterm" name="id338761"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id338773"></a><em class="parameter"><code>logon path = \%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id338784"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id338796"></a><em class="parameter"><code>logon home = \%L\%U</code></em></td></tr><tr><td><a class="indexterm" name="id338807"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id338819"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id338830"></a><em class="parameter"><code>include = /etc/samba/common.conf</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id338851"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id338862"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id338874"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id338885"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id338906"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id338917"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id338929"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id338940"></a><em class="parameter"><code>locking = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id338961"></a><em class="parameter"><code>comment = Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id338972"></a><em class="parameter"><code>path = /var/lib/samba/profiles</code></em></td></tr><tr><td><a class="indexterm" name="id338984"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id338995"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch5-commonsmb"></a><p class="title"><b>Example 4.3. Common Samba Configuration File: <code class="filename">/etc/samba/common.conf</code></b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id339038"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id339050"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id339061"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id339073"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id339084"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id339096"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id339107"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id339119"></a><em class="parameter"><code>time server = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339130"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id339142"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id339154"></a><em class="parameter"><code>shutdown script = /var/lib/samba/scripts/shutdown.sh</code></em></td></tr><tr><td><a class="indexterm" name="id339165"></a><em class="parameter"><code>abort shutdown script = /sbin/shutdown -c</code></em></td></tr><tr><td><a class="indexterm" name="id339177"></a><em class="parameter"><code>utmp = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339188"></a><em class="parameter"><code>map acl inherit = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339200"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id339211"></a><em class="parameter"><code>veto files = /*.eml/*.nws/*.{*}/</code></em></td></tr><tr><td><a class="indexterm" name="id339223"></a><em class="parameter"><code>veto oplock files = /*.doc/*.xls/*.mdb/</code></em></td></tr><tr><td><a class="indexterm" name="id339235"></a><em class="parameter"><code>include = </code></em></td></tr><tr><td># Share and Service Definitions are common to all servers</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id339259"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id339270"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id339282"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339293"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339305"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339316"></a><em class="parameter"><code>default devmode = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339328"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[apps]</code></em></td></tr><tr><td><a class="indexterm" name="id339348"></a><em class="parameter"><code>comment = Application Files</code></em></td></tr><tr><td><a class="indexterm" name="id339360"></a><em class="parameter"><code>path = /apps</code></em></td></tr><tr><td><a class="indexterm" name="id339371"></a><em class="parameter"><code>admin users = bjordan</code></em></td></tr><tr><td><a class="indexterm" name="id339383"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch5-bldg1-smb"></a><p class="title"><b>Example 4.4. Server: BLDG1 (Member), File: smb.conf</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id339425"></a><em class="parameter"><code>workgroup = MEGANET</code></em></td></tr><tr><td><a class="indexterm" name="id339436"></a><em class="parameter"><code>netbios name = BLDG1</code></em></td></tr><tr><td><a class="indexterm" name="id339448"></a><em class="parameter"><code>include = /etc/samba/dom-mem.conf</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch5-bldg2-smb"></a><p class="title"><b>Example 4.5. Server: BLDG2 (Member), File: smb.conf</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id339490"></a><em class="parameter"><code>workgroup = MEGANET</code></em></td></tr><tr><td><a class="indexterm" name="id339501"></a><em class="parameter"><code>netbios name = BLDG2</code></em></td></tr><tr><td><a class="indexterm" name="id339512"></a><em class="parameter"><code>include = /etc/samba/dom-mem.conf</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch5-dommem-smb"></a><p class="title"><b>Example 4.6. Common Domain Member Include File: dom-mem.conf</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id339555"></a><em class="parameter"><code>shutdown script = /var/lib/samba/scripts/shutdown.sh</code></em></td></tr><tr><td><a class="indexterm" name="id339566"></a><em class="parameter"><code>abort shutdown script = /sbin/shutdown -c</code></em></td></tr><tr><td><a class="indexterm" name="id339578"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id339590"></a><em class="parameter"><code>wins server = 172.16.0.1</code></em></td></tr><tr><td><a class="indexterm" name="id339601"></a><em class="parameter"><code>idmap uid = 15000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id339613"></a><em class="parameter"><code>idmap gid = 15000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id339624"></a><em class="parameter"><code>include = /etc/samba/common.conf</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="massive-dhcp"></a><p class="title"><b>Example 4.7. Server: MASSIVE, File: dhcpd.conf</b></p><div class="example-contents"><pre class="screen"> -# Abmas Accounting Inc. - -default-lease-time 86400; -max-lease-time 172800; -default-lease-time 86400; -ddns-updates on; -ddns-update-style interim; - -option ntp-servers 172.16.0.1; -option domain-name "abmas.biz"; -option domain-name-servers 172.16.0.1, 172.16.4.1; -option netbios-name-servers 172.16.0.1; -option netbios-node-type 8; - -subnet 172.16.1.0 netmask 255.255.252.0 { - range dynamic-bootp 172.16.1.0 172.16.2.255; - option subnet-mask 255.255.252.0; - option routers 172.16.0.1, 172.16.0.128; - allow unknown-clients; - } -subnet 172.16.4.0 netmask 255.255.252.0 { - range dynamic-bootp 172.16.7.0 172.16.7.254; - option subnet-mask 255.255.252.0; - option routers 172.16.4.128; - allow unknown-clients; - } -subnet 172.16.8.0 netmask 255.255.252.0 { - range dynamic-bootp 172.16.11.0 172.16.11.254; - option subnet-mask 255.255.252.0; - option routers 172.16.4.128; - allow unknown-clients; - } -subnet 127.0.0.0 netmask 255.0.0.0 { - } -subnet 123.45.67.64 netmask 255.255.255.252 { - } -</pre></div></div><br class="example-break"><div class="example"><a name="bldg1dhcp"></a><p class="title"><b>Example 4.8. Server: BLDG1, File: dhcpd.conf</b></p><div class="example-contents"><pre class="screen"> -# Abmas Accounting Inc. - -default-lease-time 86400; -max-lease-time 172800; -default-lease-time 86400; -ddns-updates on; -ddns-update-style ad-hoc; - -option ntp-servers 172.16.0.1; -option domain-name "abmas.biz"; -option domain-name-servers 172.16.0.1, 172.16.4.1; -option netbios-name-servers 172.16.0.1; -option netbios-node-type 8; - -subnet 172.16.1.0 netmask 255.255.252.0 { - range dynamic-bootp 172.16.3.0 172.16.3.255; - option subnet-mask 255.255.252.0; - option routers 172.16.0.1, 172.16.0.128; - allow unknown-clients; - } -subnet 172.16.4.0 netmask 255.255.252.0 { - range dynamic-bootp 172.16.5.0 172.16.6.255; - option subnet-mask 255.255.252.0; - option routers 172.16.4.128; - allow unknown-clients; - } -subnet 127.0.0.0 netmask 255.0.0.0 { - } -</pre></div></div><br class="example-break"><div class="example"><a name="bldg2dhcp"></a><p class="title"><b>Example 4.9. Server: BLDG2, File: dhcpd.conf</b></p><div class="example-contents"><pre class="screen"> -# Abmas Accounting Inc. - -default-lease-time 86400; -max-lease-time 172800; -default-lease-time 86400; -ddns-updates on; -ddns-update-style interim; - -option ntp-servers 172.16.0.1; -option domain-name "abmas.biz"; -option domain-name-servers 172.16.0.1, 172.16.4.1; -option netbios-name-servers 172.16.0.1; -option netbios-node-type 8; - -subnet 172.16.8.0 netmask 255.255.252.0 { - range dynamic-bootp 172.16.9.0 172.16.10.255; - option subnet-mask 255.255.252.0; - option routers 172.16.8.128; - allow unknown-clients; - } -subnet 127.0.0.0 netmask 255.0.0.0 { - } -</pre></div></div><br class="example-break"><div class="example"><a name="massive-nameda"></a><p class="title"><b>Example 4.10. Server: MASSIVE, File: named.conf, Part: A</b></p><div class="example-contents"><pre class="screen"> -### -# Abmas Biz DNS Control File -### -# Date: November 15, 2003 -### -options { - directory "/var/lib/named"; - forwarders { - 123.45.12.23; - 123.45.54.32; - }; - forward first; - listen-on { - mynet; - }; - auth-nxdomain yes; - multiple-cnames yes; - notify no; -}; - -zone "." in { - type hint; - file "root.hint"; -}; - -zone "localhost" in { - type master; - file "localhost.zone"; -}; - -zone "0.0.127.in-addr.arpa" in { - type master; - file "127.0.0.zone"; -}; - -acl mynet { - 172.16.0.0/24; - 172.16.4.0/24; - 172.16.8.0/24; - 127.0.0.1; -}; - -acl seconddns { - 123.45.54.32; -}; -</pre></div></div><br class="example-break"><div class="example"><a name="massive-namedb"></a><p class="title"><b>Example 4.11. Server: MASSIVE, File: named.conf, Part: B</b></p><div class="example-contents"><pre class="screen"> -zone "abmas.biz" { - type master; - file "/var/lib/named/master/abmas.biz.hosts"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; - -zone "abmas.us" { - type master; - file "/var/lib/named/master/abmas.us.hosts"; - allow-query { - all; - }; - allow-transfer { - seconddns; - }; -}; -</pre></div></div><br class="example-break"><div class="example"><a name="massive-namedc"></a><p class="title"><b>Example 4.12. Server: MASSIVE, File: named.conf, Part: C</b></p><div class="example-contents"><pre class="screen"> -zone "0.16.172.in-addr.arpa" { - type master; - file "/var/lib/named/master/172.16.0.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; - -zone "4.16.172.in-addr.arpa" { - type master; - file "/var/lib/named/master/172.16.4.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; - -zone "8.16.172.in-addr.arpa" { - type master; - file "/var/lib/named/master/172.16.8.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; -</pre></div></div><br class="example-break"><div class="example"><a name="abmasbizdns"></a><p class="title"><b>Example 4.13. Forward Zone File: abmas.biz.hosts</b></p><div class="example-contents"><pre class="screen"> -$ORIGIN . -$TTL 38400 ; 10 hours 40 minutes -abmas.biz IN SOA massive.abmas.biz. root.abmas.biz. ( - 2003021833 ; serial - 10800 ; refresh (3 hours) - 3600 ; retry (1 hour) - 604800 ; expire (1 week) - 38400 ; minimum (10 hours 40 minutes) - ) - NS massive.abmas.biz. - NS bldg1.abmas.biz. - NS bldg2.abmas.biz. - MX 10 massive.abmas.biz. -$ORIGIN abmas.biz. -massive A 172.16.0.1 -router0 A 172.16.0.128 -bldg1 A 172.16.4.1 -router4 A 172.16.4.128 -bldg2 A 172.16.8.1 -router8 A 172.16.8.128 -</pre></div></div><br class="example-break"><div class="example"><a name="abmasusdns"></a><p class="title"><b>Example 4.14. Forward Zone File: abmas.biz.hosts</b></p><div class="example-contents"><pre class="screen"> -$ORIGIN . -$TTL 38400 ; 10 hours 40 minutes -abmas.us IN SOA server.abmas.us. root.abmas.us. ( - 2003021833 ; serial - 10800 ; refresh (3 hours) - 3600 ; retry (1 hour) - 604800 ; expire (1 week) - 38400 ; minimum (10 hours 40 minutes) - ) - NS dns.abmas.us. - NS dns2.abmas.us. - MX 10 mail.abmas.us. -$ORIGIN abmas.us. -server A 123.45.67.66 -dns2 A 123.45.54.32 -gw A 123.45.67.65 -www CNAME server -mail CNAME server -dns CNAME server -</pre></div></div><br class="example-break"><div class="example"><a name="bldg12nameda"></a><p class="title"><b>Example 4.15. Servers: BLDG1/BLDG2, File: named.conf, Part: A</b></p><div class="example-contents"><pre class="screen"> -### -# Abmas Biz DNS Control File -### -# Date: November 15, 2003 -### -options { - directory "/var/lib/named"; - forwarders { - 172.16.0.1; - }; - forward first; - listen-on { - mynet; - }; - auth-nxdomain yes; - multiple-cnames yes; - notify no; -}; - -zone "." in { - type hint; - file "root.hint"; -}; - -zone "localhost" in { - type master; - file "localhost.zone"; -}; - -zone "0.0.127.in-addr.arpa" in { - type master; - file "127.0.0.zone"; -}; - -acl mynet { - 172.16.0.0/24; - 172.16.4.0/24; - 172.16.8.0/24; - 127.0.0.1; -}; - -acl seconddns { - 123.45.54.32; -}; -</pre></div></div><br class="example-break"><div class="example"><a name="bldg12namedb"></a><p class="title"><b>Example 4.16. Servers: BLDG1/BLDG2, File: named.conf, Part: B</b></p><div class="example-contents"><pre class="screen"> -zone "abmas.biz" { - type slave; - file "/var/lib/named/slave/abmas.biz.hosts"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; -}; - -zone "0.16.172.in-addr.arpa" { - type slave; - file "/var/lib/slave/master/172.16.0.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; -}; - -zone "4.16.172.in-addr.arpa" { - type slave; - file "/var/lib/named/slave/172.16.4.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; -}; - -zone "8.16.172.in-addr.arpa" { - type slave; - file "/var/lib/named/slave/172.16.8.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; -}; -</pre></div></div><br class="example-break"><div class="example"><a name="ch5-initgrps"></a><p class="title"><b>Example 4.17. Initialize Groups Script, File: /etc/samba/initGrps.sh</b></p><div class="example-contents"><pre class="screen"> -#!/bin/bash - -# Create UNIX groups -groupadd acctsdep -groupadd finsrvcs -groupadd piops - -# Map Windows Domain Groups to UNIX groups -net groupmap add ntgroup="Domain Admins" unixgroup=root type=d -net groupmap add ntgroup="Domain Users" unixgroup=users type=d -net groupmap add ntgroup="Domain Guests" unixgroup=nobody type=d - -# Add Functional Domain Groups -net groupmap add ntgroup="Accounts Dept" unixgroup=acctsdep type=d -net groupmap add ntgroup="Financial Services" unixgroup=finsrvcs type=d -net groupmap add ntgroup="Insurance Group" unixgroup=piops type=d -</pre></div></div><br class="example-break"><div class="sect2" title="Process Startup Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ch5-procstart"></a>Process Startup Configuration</h3></div></div></div><p> - <a class="indexterm" name="id339909"></a> - <a class="indexterm" name="id339916"></a> - There are two essential steps to process startup configuration. A process - must be configured so that it is automatically restarted each time the server - is rebooted. This step involves use of the <code class="literal">chkconfig</code> tool that - created appropriate symbolic links from the master daemon control file that is - located in the <code class="filename">/etc/rc.d</code> directory to the <code class="filename">/etc/rc'x'.d</code> - directories. Links are created so that when the system run-level is changed, the - necessary start or kill script is run. - </p><p> - <a class="indexterm" name="id339948"></a> - In the event that a service is provided not as a daemon but via the internetworking - super daemon (<code class="literal">inetd</code> or <code class="literal">xinetd</code>), then the <code class="literal">chkconfig</code> - tool makes the necessary entries in the <code class="filename">/etc/xinetd.d</code> directory - and sends a hang-up (HUP) signal to the super daemon, thus forcing it to - re-read its control files. - </p><p> - Last, each service must be started to permit system validation to proceed. The following steps - are for a Red Hat Linux system, please adapt them to suit the target OS platform on which you - are installing Samba. - </p><div class="procedure" title="Procedure 4.4. Process Startup Configuration Steps"><a name="id339987"></a><p class="title"><b>Procedure 4.4. Process Startup Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Use the standard system tool to configure each service to restart - automatically at every system reboot. For example, - <a class="indexterm" name="id340000"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig dhpc on -<code class="prompt">root# </code> chkconfig named on -<code class="prompt">root# </code> chkconfig cups on -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> chkconfig swat on -</pre><p> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id340049"></a> - <a class="indexterm" name="id340056"></a> - <a class="indexterm" name="id340062"></a> - Now start each service to permit the system to be validated. - Execute each of the following in the sequence shown: - -</p><pre class="screen"> -<code class="prompt">root# </code> service dhcp restart -<code class="prompt">root# </code> service named restart -<code class="prompt">root# </code> service cups restart -<code class="prompt">root# </code> service smb restart -<code class="prompt">root# </code> service swat restart -</pre><p> - </p></li></ol></div></div><div class="sect2" title="Windows Client Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ch5wincfg"></a>Windows Client Configuration</h3></div></div></div><p> - The procedure for desktop client configuration for the network in this chapter is similar to - that used for the previous one. There are a few subtle changes that should be noted. - </p><div class="procedure" title="Procedure 4.5. Windows Client Configuration Steps"><a name="id340124"></a><p class="title"><b>Procedure 4.5. Windows Client Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Install MS Windows XP Professional. During installation, configure the client to use DHCP for - TCP/IP protocol configuration. - <a class="indexterm" name="id340136"></a> - <a class="indexterm" name="id340142"></a> - DHCP configures all Windows clients to use the WINS Server address that has been defined - for the local subnet. - </p></li><li class="step" title="Step 2"><p> - Join the Windows domain <code class="constant">MEGANET</code>. Use the domain administrator - username <code class="constant">root</code> and the SMB password you assigned to this account. - A detailed step-by-step procedure for joining a Windows 200x/XP Professional client to - a Windows domain is given in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. - Reboot the machine as prompted and then log on using the domain administrator account - (<code class="constant">root</code>). - </p></li><li class="step" title="Step 3"><p> - Verify that the server called <code class="constant">MEGANET</code> is visible in <span class="guimenu">My Network Places</span>, - that it is possible to connect to it and see the shares <span class="guimenuitem">accounts</span>, - <span class="guimenuitem">apps</span>, and <span class="guimenuitem">finsvcs</span>, - and that it is possible to open each share to reveal its contents. - </p></li><li class="step" title="Step 4"><p> - Create a drive mapping to the <code class="constant">apps</code> share on a server. At this time, it does - not particularly matter which application server is used. It is necessary to manually - set a persistent drive mapping to the local applications server on each workstation at the time of - installation. This step is avoided by the improvements to the design of the network configuration - in the next chapter. - </p></li><li class="step" title="Step 5"><p> - Perform an administrative installation of each application to be used. Select the options - that you wish to use. Of course, you choose to run applications over the network, correct? - </p></li><li class="step" title="Step 6"><p> - Now install all applications to be installed locally. Typical tools include Adobe Acrobat, - NTP-based time synchronization software, drivers for specific local devices such as fingerprint - scanners, and the like. Probably the most significant application to be locally installed - is antivirus software. - </p></li><li class="step" title="Step 7"><p> - Now install all four printers onto the staging system. The printers you install - include the accounting department HP LaserJet 6 and Minolta QMS Magicolor printers, and you - also configure use of the identical printers that are located in the financial services department. - Install printers on each machine using the following steps: - </p><div class="procedure" title="Procedure 4.6. Steps to Install Printer Drivers on Windows Clients"><a name="id340259"></a><p class="title"><b>Procedure 4.6. Steps to Install Printer Drivers on Windows Clients</b></p><ol class="procedure" type="1"><li class="step" title="Step 7.1"><p> - Click <span class="guimenu">Start</span> → <span class="guimenuitem">Settings</span> → <span class="guimenuitem">Printers</span>+<span class="guiicon">Add Printer</span>+<span class="guibutton">Next</span>. Do not click <span class="guimenuitem">Network printer</span>. - Ensure that <span class="guimenuitem">Local printer</span> is selected. - </p></li><li class="step" title="Step 7.2"><p> - Click <span class="guibutton">Next</span>. In the - <span class="guimenuitem">Manufacturer:</span> panel, select <code class="constant">HP</code>. - In the <span class="guimenuitem">Printers:</span> panel, select the printer called - <code class="constant">HP LaserJet 6</code>. Click <span class="guibutton">Next</span>. - </p></li><li class="step" title="Step 7.3"><p> - In the <span class="guimenuitem">Available ports:</span> panel, select - <code class="constant">FILE:</code>. Accept the default printer name by clicking - <span class="guibutton">Next</span>. When asked, <span class="quote">“<span class="quote">Would you like to print a - test page?</span>”</span>, click <span class="guimenuitem">No</span>. Click - <span class="guibutton">Finish</span>. - </p></li><li class="step" title="Step 7.4"><p> - You may be prompted for the name of a file to print to. If so, close the - dialog panel. Right-click <span class="guiicon">HP LaserJet 6</span> → <span class="guimenuitem">Properties</span> → <span class="guisubmenu">Details (Tab)</span>+<span class="guibutton">Add Port</span>. - </p></li><li class="step" title="Step 7.5"><p> - In the <span class="guimenuitem">Network</span> panel, enter the name of - the print queue on the Samba server as follows: <code class="constant">\\BLDG1\hplj6a</code>. - Click <span class="guibutton">OK</span>+<span class="guibutton">OK</span> to complete the installation. - </p></li><li class="step" title="Step 7.6"><p> - Repeat the printer installation steps above for both HP LaserJet 6 printers - as well as for both QMS Magicolor laser printers. Remember to install all - printers but to set the destination port for each to the server on the - local network. For example, a workstation in the accounting group should - have all printers directed at the server <code class="constant">BLDG1</code>. - You may elect to point all desktop workstation configurations at the - server called <code class="constant">MASSIVE</code> and then in your deployment - procedures, it would be wise to document the need to redirect the printer - configuration (as well as the applications server drive mapping) to the - server on the network segment on which the workstation is to be located. - </p></li></ol></div></li><li class="step" title="Step 8"><p> - When you are satisfied that the staging systems are complete, use the appropriate procedure to - remove the client from the domain. Reboot the system, and then log on as the local administrator - and clean out all temporary files stored on the system. Before shutting down, use the disk - defragmentation tool so that the file system is in optimal condition before replication. - </p></li><li class="step" title="Step 9"><p> - Boot the workstation using the Norton (Symantec) Ghosting disk (or CD-ROM) and image the - machine to a network share on the server. - </p></li><li class="step" title="Step 10"><p> - You may now replicate the image using the appropriate Norton Ghost procedure to the target - machines. Make sure to use the procedure that ensures each machine has a unique - Windows security identifier (SID). When the installation of the disk image is complete, boot the PC. - </p></li><li class="step" title="Step 11"><p> - Log onto the machine as the local Administrator (the only option), and join the machine to - the domain following the procedure set out in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. You must now set the - persistent drive mapping to the applications server that the user is to use. The system is now - ready for the user to log on, provided you have created a network logon account for that - user, of course. - </p></li><li class="step" title="Step 12"><p> - Instruct all users to log onto the workstation using their assigned username and password. - </p></li></ol></div></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id340544"></a>Key Points Learned</h3></div></div></div><p> - The network you have just deployed has been a valuable exercise in forced constraint. - You have deployed a network that works well, although you may soon start to see - performance problems, at which time the modifications demonstrated in <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a> - bring the network to life. The following key learning points were experienced: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - The power of using <code class="filename">smb.conf</code> include files - </p></li><li class="listitem"><p> - Use of a single PDC over a routed network - </p></li><li class="listitem"><p> - Joining a Samba-3 domain member server to a Samba-3 domain - </p></li><li class="listitem"><p> - Configuration of winbind to use domain users and groups for Samba access - to resources on the domain member servers - </p></li><li class="listitem"><p> - The introduction of roaming profiles - </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id340597"></a>Questions and Answers</h2></div></div></div><p> - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id340606"></a><dl><dt> <a href="Big500users.html#id340612"> - The example smb.conf files in this chapter make use of the include facility. - How may I get to see what the actual working smb.conf settings are? - </a></dt><dt> <a href="Big500users.html#id340660"> - Why does the include file common.conf have an empty include statement? - </a></dt><dt> <a href="Big500users.html#id340716"> - I accept that the simplest configuration necessary to do the job is the best. The use of tdbsam - passdb backend is much simpler than having to manage an LDAP-based ldapsam passdb backend. - I tried using rsync to replicate the passdb.tdb, and it seems to work fine! - So what is the problem? - </a></dt><dt> <a href="Big500users.html#id340766"> - You are using DHCP Relay enabled on the routers as well as a local DHCP server. Will this cause a clash? - </a></dt><dt> <a href="Big500users.html#id340791"> - How does the Windows client find the PDC? - </a></dt><dt> <a href="Big500users.html#id340811"> - Why did you enable IP forwarding (routing) only on the server called MASSIVE? - </a></dt><dt> <a href="Big500users.html#id340838"> - You did nothing special to implement roaming profiles. Why? - </a></dt><dt> <a href="Big500users.html#id340856"> - On the domain member computers, you configured winbind in the /etc/nsswitch.conf file. - You did not configure any PAM settings. Is this an omission? - </a></dt><dt> <a href="Big500users.html#id340883"> - You are starting SWAT up on this example but have not discussed that anywhere. Why did you do this? - </a></dt><dt> <a href="Big500users.html#id340920"> - The domain controller has an auto-shutdown script. Isn't that dangerous? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id340612"></a><a name="id340615"></a></td><td align="left" valign="top"><p> - The example <code class="filename">smb.conf</code> files in this chapter make use of the <em class="parameter"><code>include</code></em> facility. - How may I get to see what the actual working <code class="filename">smb.conf</code> settings are? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - You may readily see the net compound effect of the included files by running: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s | less -</pre><p> - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340660"></a><a name="id340662"></a></td><td align="left" valign="top"><p> - Why does the include file <code class="filename">common.conf</code> have an empty include statement? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The use of the empty include statement nullifies further includes. For example, let's say you - desire to have just an smb.conf file that is built from the array of include files of which the - master control file is called <code class="filename">master.conf</code>. The following command - produces a compound <code class="filename">smb.conf</code> file. -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s /etc/samba/master.conf > /etc/samba/smb.conf -</pre><p> - If the include parameter was not in the common.conf file, the final <code class="filename">smb.conf</code> file leaves - the include in place, even though the file it points to has already been included. This is a bug - that will be fixed at a future date. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340716"></a><a name="id340718"></a></td><td align="left" valign="top"><p> - I accept that the simplest configuration necessary to do the job is the best. The use of <em class="parameter"><code>tdbsam</code></em> - passdb backend is much simpler than having to manage an LDAP-based <em class="parameter"><code>ldapsam</code></em> passdb backend. - I tried using <code class="literal">rsync</code> to replicate the <code class="filename">passdb.tdb</code>, and it seems to work fine! - So what is the problem? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Replication of the <em class="parameter"><code>tdbsam</code></em> database file can result in loss of currency in its - contents between the PDC and BDCs. The most notable symptom is that workstations may not be able - to log onto the network following a reboot and may have to rejoin the domain to recover network - access capability. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340766"></a><a name="id340769"></a></td><td align="left" valign="top"><p> - You are using DHCP Relay enabled on the routers as well as a local DHCP server. Will this cause a clash? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - No. It is possible to have as many DHCP servers on a network segment as makes sense. A DHCP server - offers an IP address lease, but it is the client that determines which offer is accepted, no matter how many - offers are made. Under normal operation, the client accepts the first offer it receives. - </p><p> - The only exception to this rule is when the client makes a directed request from a specific DHCP server - for renewal of the lease it has. This means that under normal circumstances there is no risk of a clash. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340791"></a><a name="id340794"></a></td><td align="left" valign="top"><p> - How does the Windows client find the PDC? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The Windows client obtains the WINS server address from the DHCP lease information. It also - obtains from the DHCP lease information the parameter that causes it to use directed UDP (UDP Unicast) - to register itself with the WINS server and to obtain enumeration of vital network information to - enable it to operate successfully. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340811"></a><a name="id340813"></a></td><td align="left" valign="top"><p> - Why did you enable IP forwarding (routing) only on the server called <code class="constant">MASSIVE</code>? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The server called <code class="constant">MASSIVE</code> is acting as a router to the Internet. No other server - (BLDG1 or BLDG2) has any need for IP forwarding because they are attached only to their own network. - Route table entries are needed to direct MASSIVE to send all traffic intended for the remote network - segments to the router that is its gateway to them. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340838"></a><a name="id340840"></a></td><td align="left" valign="top"><p> - You did nothing special to implement roaming profiles. Why? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Unless configured to do otherwise, the default behavior with Samba-3 and Windows XP Professional - clients is to use roaming profiles. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340856"></a><a name="id340858"></a></td><td align="left" valign="top"><p> - On the domain member computers, you configured winbind in the <code class="filename">/etc/nsswitch.conf</code> file. - You did not configure any PAM settings. Is this an omission? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - PAM is needed only for authentication. When Samba is using Microsoft encrypted passwords, it makes only - marginal use of PAM. PAM configuration handles only authentication. If you want to log onto the domain - member servers using Windows networking usernames and passwords, it is necessary to configure PAM - to enable the use of winbind. Samba makes use only of the identity resolution facilities of the name - service switch (NSS). - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340883"></a><a name="id340885"></a></td><td align="left" valign="top"><p> - You are starting SWAT up on this example but have not discussed that anywhere. Why did you do this? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Oh, I did not think you would notice that. It is there so that it can be used. This is more fully discussed - in <span class="emphasis"><em>TOSHARG2</em></span>, which has a full chapter dedicated to the subject. While we are on the - subject, it should be noted that you should definitely not use SWAT on any system that makes use - of <code class="filename">smb.conf</code> <em class="parameter"><code>include</code></em> files because SWAT optimizes them out into an aggregated - file but leaves in place a broken reference to the top-layer include file. SWAT was not designed to - handle this functionality gracefully. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id340920"></a><a name="id340922"></a></td><td align="left" valign="top"><p> - The domain controller has an auto-shutdown script. Isn't that dangerous? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Well done, you spotted that! I guess it is dangerous. It is good to know that you can do this, though. - </p></td></tr></tbody></table></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="secure.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ExNetworks.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="happy.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 3. Secure Office Networking </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 5. Making Happy Users</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/DMSMig.html b/docs/htmldocs/Samba3-ByExample/DMSMig.html deleted file mode 100644 index 6a4bf3eec5..0000000000 --- a/docs/htmldocs/Samba3-ByExample/DMSMig.html +++ /dev/null @@ -1,10 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Part II. Domain Members, Updating Samba and Migration</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="net2000users.html" title="Chapter 6. A Distributed 2000-User Network"><link rel="next" href="unixclients.html" title="Chapter 7. Adding Domain Member Servers and Clients"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Part II. Domain Members, Updating Samba and Migration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="net2000users.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="unixclients.html">Next</a></td></tr></table><hr></div><div class="part" title="Part II. Domain Members, Updating Samba and Migration"><div class="titlepage"><div><div><h1 class="title"><a name="DMSMig"></a>Part II. Domain Members, Updating Samba and Migration</h1></div></div></div><div class="partintro" title="Domain Members, Updating Samba and Migration"><div><div><div><h1 class="title"><a name="id357819"></a>Domain Members, Updating Samba and Migration</h1></div></div></div><p> -This section <span class="emphasis"><em>Samba-3 by Example</em></span> covers two main topics: How to add -Samba Domain Member Servers and Samba Domain Member Clients to a Samba domain, the other -subject is that of how to migrate from and NT4 Domain, a NetWare server, or from an earlier -Samba version to environments that use the most recent Samba-3 release. -</p><p> -Those who are making use of the chapter on Adding UNIX clients and servers running Samba -to a Samba or a Windows networking domain may also benefit by referring to the book -<span class="emphasis"><em>The Official Samba-3 HOWTO and Reference Guide.</em></span> -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="chapter"><a href="unixclients.html">7. Adding Domain Member Servers and Clients</a></span></dt><dd><dl><dt><span class="sect1"><a href="unixclients.html#id357946">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#id357994">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id358022">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#id358046">Technical Issues</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id358646">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id358731">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></span></dt><dt><span class="sect2"><a href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></span></dt><dt><span class="sect2"><a href="unixclients.html#dcwonss">NT4/Samba Domain with Samba Domain Member Server without NSS Support</a></span></dt><dt><span class="sect2"><a href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id365002">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id365047">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="upgrades.html">8. Updating Samba-3</a></span></dt><dd><dl><dt><span class="sect1"><a href="upgrades.html#id366117">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#id366200">Cautions and Notes</a></span></dt></dl></dd><dt><span class="sect1"><a href="upgrades.html#id367413">Upgrading from Samba 1.x and 2.x to Samba-3</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368069">Samba-2.x with LDAP Support</a></span></dt></dl></dd><dt><span class="sect1"><a href="upgrades.html#id368184">Updating a Samba-3 Installation</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#id368281">Samba-3 to Samba-3 Updates on the Same Server</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368465">Migrating Samba-3 to a New Server</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368842">Migration of Samba Accounts to Active Directory</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="ntmigration.html">9. Migrating NT4 Domain to Samba-3</a></span></dt><dd><dl><dt><span class="sect1"><a href="ntmigration.html#id368988">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369064">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id369115">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369276">Technical Issues</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id369580">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id369600">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id372263">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id372297">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="nw4migration.html">10. Migrating NetWare Server to Samba-3</a></span></dt><dd><dl><dt><span class="sect1"><a href="nw4migration.html#id373183">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373282">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="nw4migration.html#id373359">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373431">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="nw4migration.html#id373599">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373608">NetWare Migration Using LDAP Backend</a></span></dt></dl></dd></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="net2000users.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="unixclients.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 6. A Distributed 2000-User Network </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 7. Adding Domain Member Servers and Clients</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/DomApps.html b/docs/htmldocs/Samba3-ByExample/DomApps.html deleted file mode 100644 index ae3c3ca68c..0000000000 --- a/docs/htmldocs/Samba3-ByExample/DomApps.html +++ /dev/null @@ -1,597 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 12. Integrating Additional Services</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="kerberos.html" title="Chapter 11. Active Directory, Kerberos, and Security"><link rel="next" href="HA.html" title="Chapter 13. Performance, Reliability, and Availability"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 12. Integrating Additional Services</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="kerberos.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="HA.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 12. Integrating Additional Services"><div class="titlepage"><div><div><h2 class="title"><a name="DomApps"></a>Chapter 12. Integrating Additional Services</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="DomApps.html#id382225">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#id382248">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id382338">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#id382367">Technical Issues</a></span></dt><dt><span class="sect2"><a href="DomApps.html#id382513">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id382530">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></span></dt><dt><span class="sect2"><a href="DomApps.html#id384281">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id384336">Questions and Answers</a></span></dt></dl></div><p> - <a class="indexterm" name="id382181"></a> - <a class="indexterm" name="id382187"></a> - <a class="indexterm" name="id382194"></a> - <a class="indexterm" name="id382201"></a> - <a class="indexterm" name="id382208"></a> - You've come a long way now. You have pretty much mastered Samba-3 for - most uses it can be put to. Up until now, you have cast Samba-3 in the leading - role, and where authentication was required, you have used one or another of - Samba's many authentication backends (from flat text files with smbpasswd - to LDAP directory integration with ldapsam). Now you can design a - solution for a new Abmas business. This business is running Windows Server - 2003 and Active Directory, and these are to stay. It's time to master - implementing Samba and Samba-supported services in a domain controlled by - the latest Windows authentication technologies. Let's get started this is - leading edge. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id382225"></a>Introduction</h2></div></div></div><p> - Abmas has continued its miraculous growth; indeed, nothing seems to be able - to stop its diversification into multiple (and seemingly unrelated) fields. - Its latest acquisition is Abmas Snack Foods, a big player in the snack-food - business. - </p><p> - With this acquisition comes new challenges for you and your team. Abmas Snack - Foods is a well-developed business with a huge and heterogeneous network. It - already has Windows, NetWare, and Proprietary UNIX, but as yet no Samba or Linux. - The network is mature and well-established, and there is no question of its chosen - user authentication scheme being changed for now. You need to take a wise new - approach. - </p><p> - You have decided to set the ball rolling by introducing Samba-3 into the network - gradually, taking over key services and easing the way to a full migration and, - therefore, integration into Abmas's existing business later. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id382248"></a>Assignment Tasks</h3></div></div></div><p> - <a class="indexterm" name="id382256"></a> - <a class="indexterm" name="id382264"></a> - You've promised the skeptical Abmas Snack Foods management team - that you can show them how Samba can ease itself and other Open Source - technologies into their existing infrastructure and deliver sound business - advantages. Cost cutting is high on their agenda (a major promise of the - acquisition). You have chosen Web proxying and caching as your proving ground. - </p><p> - <a class="indexterm" name="id382279"></a> - <a class="indexterm" name="id382286"></a> - Abmas Snack Foods has several thousand users housed at its head office - and multiple regional offices, plants, and warehouses. A high proportion of - the business's work is done online, so Internet access for most of these - users is essential. All Internet access, including for all regional offices, - is funneled through the head office and is the job of the (now your) networking - team. The bandwidth requirements were horrific (comparable to a small ISP), and - the team soon discovered proxying and caching. In fact, they became one of - the earliest commercial users of Microsoft ISA. - </p><p> - <a class="indexterm" name="id382301"></a> - <a class="indexterm" name="id382308"></a> - <a class="indexterm" name="id382315"></a> - The team is not happy with ISA. Because it never lived up to its marketing promises, - it underperformed and had reliability problems. You have pounced on the opportunity - to show what Open Source can do. The one thing they do like, however, is ISA's - integration with Active Directory. They like that their users, once logged on, - are automatically authenticated against the proxy. If your alternative to ISA - can operate completely seamlessly in their Active Directory domain, it will be - approved. - </p><p> - This is a hands-on exercise. You build software applications so - that you obtain the functionality Abmas needs. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id382338"></a>Dissection and Discussion</h2></div></div></div><p> - The key requirements in this business example are straightforward. You are not required - to do anything new, just to replicate an existing system, not lose any existing features, - and improve performance. The key points are: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Internet access for most employees - </p></li><li class="listitem"><p> - Distributed system to accommodate load and geographical distribution of users - </p></li><li class="listitem"><p> - Seamless and transparent interoperability with the existing Active Directory domain - </p></li></ul></div><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id382367"></a>Technical Issues</h3></div></div></div><p> - <a class="indexterm" name="id382375"></a> - <a class="indexterm" name="id382381"></a> - <a class="indexterm" name="id382388"></a> - <a class="indexterm" name="id382395"></a> - <a class="indexterm" name="id382402"></a> - <a class="indexterm" name="id382409"></a> - <a class="indexterm" name="id382415"></a> - <a class="indexterm" name="id382422"></a> - <a class="indexterm" name="id382429"></a> - <a class="indexterm" name="id382436"></a> - <a class="indexterm" name="id382443"></a> - <a class="indexterm" name="id382450"></a> - <a class="indexterm" name="id382459"></a><a class="indexterm" name="id382464"></a> - Functionally, the user's Internet Explorer requests a browsing session with the - Squid proxy, for which it offers its AD authentication token. Squid hands off - the authentication request to the Samba-3 authentication helper application - called <code class="literal">ntlm_auth</code>. This helper is a hook into winbind, the - Samba-3 NTLM authentication daemon. Winbind enables UNIX services to authenticate - against Microsoft Windows domains, including Active Directory domains. As Active - Directory authentication is a modified Kerberos authentication, winbind is assisted - in this by local Kerberos 5 libraries configured to check passwords with the Active - Directory server. Once the token has been checked, a browsing session is established. - This process is entirely transparent and seamless to the user. - </p><p> - Enabling this consists of: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Preparing the necessary environment using preconfigured packages - </p></li><li class="listitem"><p> - Setting up raw Kerberos authentication against the Active Directory domain - </p></li><li class="listitem"><p> - Configuring, compiling, and then installing the supporting Samba-3 components - </p></li><li class="listitem"><p> - Tying it all together - </p></li></ul></div></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id382513"></a>Political Issues</h3></div></div></div><p> - You are a stranger in a strange land, and all eyes are upon you. Some would even like to see - you fail. For you to gain the trust of your newly acquired IT people, it is essential that your - solution does everything the old one did, but does it better in every way. Only then - will the entrenched positions consider taking up your new way of doing things on a - wider scale. - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id382530"></a>Implementation</h2></div></div></div><p> - <a class="indexterm" name="id382538"></a> - First, your system needs to be prepared and in a known good state to proceed. This consists - of making sure that everything the system depends on is present and that everything that could - interfere or conflict with the system is removed. You will be configuring the Squid and Samba-3 - packages and updating them if necessary. If conflicting packages of these programs are installed, - they must be removed. - </p><p> - <a class="indexterm" name="id382552"></a> - The following packages should be available on your Red Hat Linux system: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id382566"></a> - <a class="indexterm" name="id382572"></a> - krb5-libs - </p></li><li class="listitem"><p> - krb5-devel - </p></li><li class="listitem"><p> - krb5-workstation - </p></li><li class="listitem"><p> - krb5-server - </p></li><li class="listitem"><p> - pam_krb5 - </p></li></ul></div><p> - <a class="indexterm" name="id382602"></a> - In the case of SUSE Linux, these packages are called: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - heimdal-lib - </p></li><li class="listitem"><p> - heimdal-devel - </p></li><li class="listitem"><p> - <a class="indexterm" name="id382625"></a> - heimdal - </p></li><li class="listitem"><p> - pam_krb5 - </p></li></ul></div><p> - If the required packages are not present on your system, you must install - them from the vendor's installation media. Follow the administrative guide - for your Linux system to ensure that the packages are correctly updated. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id382648"></a> - <a class="indexterm" name="id382655"></a> - <a class="indexterm" name="id382662"></a> - If the requirement is for interoperation with MS Windows Server 2003, it - will be necessary to ensure that you are using MIT Kerberos version 1.3.1 - or later. Red Hat Linux 9 ships with MIT Kerberos 1.2.7 and thus requires - updating. - </p><p> - <a class="indexterm" name="id382673"></a> - <a class="indexterm" name="id382680"></a> - Heimdal 0.6 or later is required in the case of SUSE Linux. SUSE Enterprise - Linux Server 8 ships with Heimdal 0.4. SUSE 9 ships with the necessary version. - </p></div><div class="sect2" title="Removal of Pre-Existing Conflicting RPMs"><div class="titlepage"><div><div><h3 class="title"><a name="ch10-one"></a>Removal of Pre-Existing Conflicting RPMs</h3></div></div></div><p> - <a class="indexterm" name="id382701"></a> - If Samba and/or Squid RPMs are installed, they should be updated. You can - build both from source. - </p><p> - <a class="indexterm" name="id382712"></a> - <a class="indexterm" name="id382719"></a> - <a class="indexterm" name="id382725"></a> - Locating the packages to be un-installed can be achieved by running: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -qa | grep -i samba -<code class="prompt">root# </code> rpm -qa | grep -i squid -</pre><p> - The identified packages may be removed using: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -e samba-common -</pre><p> - </p><div class="sect2" title="Kerberos Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="id382764"></a>Kerberos Configuration</h3></div></div></div><p> - <a class="indexterm" name="id382771"></a> - <a class="indexterm" name="id382778"></a> - <a class="indexterm" name="id382787"></a> - <a class="indexterm" name="id382794"></a> - The systems Kerberos installation must be configured to communicate with - your primary Active Directory server (ADS KDC). - </p><p> - Strictly speaking, MIT Kerberos version 1.3.4 currently gives the best results, - although the current default Red Hat MIT version 1.2.7 gives acceptable results - unless you are using Windows 2003 servers. - </p><p> - <a class="indexterm" name="id382810"></a> - <a class="indexterm" name="id382817"></a> - <a class="indexterm" name="id382824"></a> - <a class="indexterm" name="id382830"></a> - <a class="indexterm" name="id382837"></a> - <a class="indexterm" name="id382846"></a> - <a class="indexterm" name="id382853"></a> - Officially, neither MIT (1.3.4) nor Heimdal (0.63) Kerberos needs an <code class="filename">/etc/krb5.conf</code> - file in order to work correctly. All ADS domains automatically create SRV records in the - DNS zone <code class="constant">Kerberos.REALM.NAME</code> for each KDC in the realm. Since both - MIT and Heimdal, KRB5 libraries default to checking for these records, so they - automatically find the KDCs. In addition, <code class="filename">krb5.conf</code> allows - specifying only a single KDC, even if there is more than one. Using the DNS lookup - allows the KRB5 libraries to use whichever KDCs are available. - </p><div class="procedure" title="Procedure 12.1. Kerberos Configuration Steps"><a name="id382882"></a><p class="title"><b>Procedure 12.1. Kerberos Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id382893"></a> - If you find the need to manually configure the <code class="filename">krb5.conf</code>, you should edit it - to have the contents shown in <a class="link" href="DomApps.html#ch10-krb5conf" title="Example 12.1. Kerberos Configuration File: /etc/krb5.conf">“Kerberos Configuration File: /etc/krb5.conf”</a>. The final fully qualified path for this file - should be <code class="filename">/etc/krb5.conf</code>. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id382926"></a> - <a class="indexterm" name="id382933"></a> - <a class="indexterm" name="id382940"></a> - <a class="indexterm" name="id382947"></a> - <a class="indexterm" name="id382953"></a> - <a class="indexterm" name="id382960"></a> - <a class="indexterm" name="id382967"></a> - <a class="indexterm" name="id382974"></a> - <a class="indexterm" name="id382981"></a> - <a class="indexterm" name="id382990"></a> - <a class="indexterm" name="id382996"></a> - <a class="indexterm" name="id383003"></a> - <a class="indexterm" name="id383010"></a> - The following gotchas often catch people out. Kerberos is case sensitive. Your realm must - be in UPPERCASE, or you will get an error: <span class="quote">“<span class="quote">Cannot find KDC for requested realm while getting - initial credentials</span>”</span>. Kerberos is picky about time synchronization. The time - according to your participating servers must be within 5 minutes or you get an error: - <span class="quote">“<span class="quote">kinit(v5): Clock skew too great while getting initial credentials</span>”</span>. - Clock skew limits are, in fact, configurable in the Kerberos protocols (the default is - 5 minutes). A better solution is to implement NTP throughout your server network. - Kerberos needs to be able to do a reverse DNS lookup on the IP address of your KDC. - Also, the name that this reverse lookup maps to must either be the NetBIOS name of - the KDC (i.e., the hostname with no domain attached) or the - NetBIOS name followed by the realm. If all else fails, you can add a - <code class="filename">/etc/hosts</code> entry mapping the IP address of your KDC to its - NetBIOS name. If Kerberos cannot do this reverse lookup, you will get a local error - when you try to join the realm. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id383045"></a> - You are now ready to test your installation by issuing the command: -</p><pre class="screen"> -<code class="prompt">root# </code> kinit [USERNAME@REALM] -</pre><p> - You are asked for your password, which you should enter. The following - is a typical console sequence: -</p><pre class="screen"> -<code class="prompt">root# </code> kinit ADMINISTRATOR@LONDON.ABMAS.BIZ -Password for ADMINISTRATOR@LONDON.ABMAS.BIZ: -</pre><p> - Make sure that your password is accepted by the Active Directory KDC. - </p></li></ol></div><div class="example"><a name="ch10-krb5conf"></a><p class="title"><b>Example 12.1. Kerberos Configuration File: <code class="filename">/etc/krb5.conf</code></b></p><div class="example-contents"><pre class="screen"> -[libdefaults] - default_realm = LONDON.ABMAS.BIZ - -[realms] - LONDON.ABMAS.BIZ = { - kdc = w2k3s.london.abmas.biz - } -</pre></div></div><br class="example-break"><p><a class="indexterm" name="id383105"></a> - The command -</p><pre class="screen"> -<code class="prompt">root# </code> klist -e -</pre><p> - shows the Kerberos tickets cached by the system. - </p><div class="sect3" title="Samba Configuration"><div class="titlepage"><div><div><h4 class="title"><a name="id383127"></a>Samba Configuration</h4></div></div></div><p> - <a class="indexterm" name="id383135"></a> - Samba must be configured to correctly use Active Directory. Samba-3 must be used, since it - has the necessary components to interface with Active Directory. - </p><div class="procedure" title="Procedure 12.2. Securing Samba-3 With ADS Support Steps"><a name="id383144"></a><p class="title"><b>Procedure 12.2. Securing Samba-3 With ADS Support Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id383156"></a> - <a class="indexterm" name="id383162"></a> - <a class="indexterm" name="id383169"></a> - <a class="indexterm" name="id383176"></a> - <a class="indexterm" name="id383183"></a> - Download the latest stable Samba-3 for Red Hat Linux from the official Samba Team - <a class="ulink" href="http://ftp.samba.org" target="_top">FTP site.</a> The official Samba Team - RPMs for Red Hat Fedora Linux contain the <code class="literal">ntlm_auth</code> tool - needed, and are linked against MIT KRB5 version 1.3.1 and therefore are ready for use. - </p><p> - <a class="indexterm" name="id383207"></a> - <a class="indexterm" name="id383213"></a> - The necessary, validated RPM packages for SUSE Linux may be obtained from - the <a class="ulink" href="ftp://ftp.sernet.de/pub/samba" target="_top">SerNet</a> FTP site that - is located in Germany. All SerNet RPMs are validated, have the necessary - <code class="literal">ntlm_auth</code> tool, and are statically linked - against suitably patched Heimdal 0.6 libraries. - </p></li><li class="step" title="Step 2"><p> - Using your favorite editor, change the <code class="filename">/etc/samba/smb.conf</code> - file so it has contents similar to the example shown in <a class="link" href="DomApps.html#ch10-smbconf" title="Example 12.2. Samba Configuration File: /etc/samba/smb.conf">“Samba Configuration File: /etc/samba/smb.conf”</a>. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id383261"></a> - <a class="indexterm" name="id383268"></a> - <a class="indexterm" name="id383274"></a>i - <a class="indexterm" name="id383286"></a> - <a class="indexterm" name="id383293"></a> - Next you need to create a computer account in the Active Directory. - This sets up the trust relationship needed for other clients to - authenticate to the Samba server with an Active Directory Kerberos ticket. - This is done with the <span class="quote">“<span class="quote">net ads join -U [Administrator%Password]</span>”</span> - command, as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> net ads join -U administrator%vulcon -</pre><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id383324"></a> - <a class="indexterm" name="id383331"></a> - <a class="indexterm" name="id383337"></a> - <a class="indexterm" name="id383344"></a> - <a class="indexterm" name="id383351"></a> - Your new Samba binaries must be started in the standard manner as is applicable - to the platform you are running on. Alternatively, start your Active Directory-enabled Samba with the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> smbd -D -<code class="prompt">root# </code> nmbd -D -<code class="prompt">root# </code> winbindd -D -</pre><p> - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id383390"></a> - <a class="indexterm" name="id383396"></a> - <a class="indexterm" name="id383406"></a> - <a class="indexterm" name="id383412"></a> - <a class="indexterm" name="id383419"></a> - We now need to test that Samba is communicating with the Active - Directory domain; most specifically, we want to see whether winbind - is enumerating users and groups. Issue the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -t -checking the trust secret via RPC calls succeeded -</pre><p> - This tests whether we are authenticating against Active Directory: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -u -LONDON+Administrator -LONDON+Guest -LONDON+SUPPORT_388945a0 -LONDON+krbtgt -LONDON+jht -LONDON+xjht -</pre><p> - This enumerates all the users in your Active Directory tree: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -g -LONDON+Domain Computers -LONDON+Domain Controllers -LONDON+Schema Admins -LONDON+Enterprise Admins -LONDON+Domain Admins -LONDON+Domain Users -LONDON+Domain Guests -LONDON+Group Policy Creator Owners -LONDON+DnsUpdateProxy -</pre><p> - This enumerates all the groups in your Active Directory tree. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id383476"></a> - <a class="indexterm" name="id383483"></a> - Squid uses the <code class="literal">ntlm_auth</code> helper build with Samba-3. - You may test <code class="literal">ntlm_auth</code> with the command: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/bin/ntlm_auth --username=jht -password: XXXXXXXX -</pre><p> - You are asked for your password, which you should enter. You are rewarded with: -</p><pre class="screen"> -<code class="prompt">root# </code> NT_STATUS_OK: Success (0x0) -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id383533"></a> - <a class="indexterm" name="id383540"></a> - <a class="indexterm" name="id383547"></a> - <a class="indexterm" name="id383553"></a> - <a class="indexterm" name="id383560"></a> - <a class="indexterm" name="id383567"></a> - <a class="indexterm" name="id383574"></a> - <a class="indexterm" name="id383581"></a> - The <code class="literal">ntlm_auth</code> helper, when run from a command line as the user - <span class="quote">“<span class="quote">root</span>”</span>, authenticates against your Active Directory domain (with - the aid of winbind). It manages this by reading from the winbind privileged pipe. - Squid is running with the permissions of user <span class="quote">“<span class="quote">squid</span>”</span> and group - <span class="quote">“<span class="quote">squid</span>”</span> and is not able to do this unless we make a vital change. - Squid cannot read from the winbind privilege pipe unless you change the - permissions of its directory. This is the single biggest cause of failure in the - whole process. Remember to issue the following command (for Red Hat Linux): -</p><pre class="screen"> -<code class="prompt">root# </code> chgrp squid /var/cache/samba/winbindd_privileged -<code class="prompt">root# </code> chmod 750 /var/cache/samba/winbindd_privileged -</pre><p> - For SUSE Linux 9, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> chgrp squid /var/lib/samba/winbindd_privileged -<code class="prompt">root# </code> chmod 750 /var/lib/samba/winbindd_privileged -</pre><p> - </p></li></ol></div></div><div class="sect3" title="NSS Configuration"><div class="titlepage"><div><div><h4 class="title"><a name="id383649"></a>NSS Configuration</h4></div></div></div><p> - <a class="indexterm" name="id383656"></a> - <a class="indexterm" name="id383663"></a> - <a class="indexterm" name="id383670"></a> - For Squid to benefit from Samba-3, NSS must be updated to allow winbind as a valid route to user authentication. - </p><p> - Edit your <code class="filename">/etc/nsswitch.conf</code> file so it has the parameters shown - in <a class="link" href="DomApps.html#ch10-etcnsscfg" title="Example 12.3. NSS Configuration File Extract File: /etc/nsswitch.conf">“NSS Configuration File Extract File: /etc/nsswitch.conf”</a>. - </p><div class="example"><a name="ch10-smbconf"></a><p class="title"><b>Example 12.2. Samba Configuration File: <code class="filename">/etc/samba/smb.conf</code></b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id383726"></a><em class="parameter"><code>workgroup = LONDON</code></em></td></tr><tr><td><a class="indexterm" name="id383737"></a><em class="parameter"><code>netbios name = W2K3S</code></em></td></tr><tr><td><a class="indexterm" name="id383749"></a><em class="parameter"><code>realm = LONDON.ABMAS.BIZ</code></em></td></tr><tr><td><a class="indexterm" name="id383760"></a><em class="parameter"><code>security = ads</code></em></td></tr><tr><td><a class="indexterm" name="id383772"></a><em class="parameter"><code>encrypt passwords = yes</code></em></td></tr><tr><td><a class="indexterm" name="id383783"></a><em class="parameter"><code>password server = w2k3s.london.abmas.biz</code></em></td></tr><tr><td># separate domain and username with '/', like DOMAIN/username</td></tr><tr><td><a class="indexterm" name="id383799"></a><em class="parameter"><code>winbind separator = /</code></em></td></tr><tr><td># use UIDs from 10000 to 20000 for domain users</td></tr><tr><td><a class="indexterm" name="id383814"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td># use GIDs from 10000 to 20000 for domain groups</td></tr><tr><td><a class="indexterm" name="id383829"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td># allow enumeration of winbind users and groups</td></tr><tr><td><a class="indexterm" name="id383844"></a><em class="parameter"><code>winbind enum users = yes</code></em></td></tr><tr><td><a class="indexterm" name="id383856"></a><em class="parameter"><code>winbind enum groups = yes</code></em></td></tr><tr><td><a class="indexterm" name="id383868"></a><em class="parameter"><code>winbind user default domain = yes</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch10-etcnsscfg"></a><p class="title"><b>Example 12.3. NSS Configuration File Extract File: <code class="filename">/etc/nsswitch.conf</code></b></p><div class="example-contents"><pre class="screen"> -passwd: files winbind -shadow: files -group: files winbind -</pre></div></div><br class="example-break"></div><div class="sect3" title="Squid Configuration"><div class="titlepage"><div><div><h4 class="title"><a name="id383905"></a>Squid Configuration</h4></div></div></div><p> - <a class="indexterm" name="id383913"></a> - <a class="indexterm" name="id383920"></a> - Squid must be configured correctly to interact with the Samba-3 - components that handle Active Directory authentication. - </p></div></div><div class="sect2" title="Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="id383934"></a>Configuration</h3></div></div></div></div><div class="procedure" title="Procedure 12.3. Squid Configuration Steps"><a name="id383939"></a><p class="title"><b>Procedure 12.3. Squid Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id383950"></a> - <a class="indexterm" name="id383957"></a> - <a class="indexterm" name="id383965"></a> - If your Linux distribution is SUSE Linux 9, the version of Squid - supplied is already enabled to use the winbind helper agent. You - can therefore omit the steps that would build the Squid binary - programs. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id383980"></a> - <a class="indexterm" name="id383987"></a> - <a class="indexterm" name="id383994"></a> - <a class="indexterm" name="id384001"></a> - <a class="indexterm" name="id384007"></a> - Squid, by default, runs as the user <code class="constant">nobody</code>. You need to - add a system user <code class="constant">squid</code> and a system group - <code class="constant">squid</code> if they are not set up already (if the default - Red Hat squid rpms were installed, they will be). Set up a - <code class="constant">squid</code> user in <code class="filename">/etc/passwd</code> - and a <code class="constant">squid</code> group in <code class="filename">/etc/group</code> if these aren't there already. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id384053"></a> - <a class="indexterm" name="id384060"></a> - You now need to change the permissions on Squid's <code class="constant">var</code> - directory. Enter the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> chown -R squid /var/cache/squid -</pre><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id384089"></a> - <a class="indexterm" name="id384096"></a> - Squid must also have control over its logging. Enter the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> chown -R chown squid:squid /var/log/squid -<code class="prompt">root# </code> chmod 770 /var/log/squid -</pre><p> - </p></li><li class="step" title="Step 5"><p> - Finally, Squid must be able to write to its disk cache! - Enter the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> chown -R chown squid:squid /var/cache/squid -<code class="prompt">root# </code> chmod 770 /var/cache/squid -</pre><p> - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id384153"></a> - The <code class="filename">/etc/squid/squid.conf</code> file must be edited to include the lines from - <a class="link" href="DomApps.html#etcsquidcfg" title="Example 12.4. Squid Configuration File Extract /etc/squid.conf [ADMINISTRATIVE PARAMETERS Section]">“Squid Configuration File Extract /etc/squid.conf [ADMINISTRATIVE PARAMETERS Section]”</a> and <a class="link" href="DomApps.html#etcsquid2" title="Example 12.5. Squid Configuration File extract File: /etc/squid.conf [AUTHENTICATION PARAMETERS Section]">“Squid Configuration File extract File: /etc/squid.conf [AUTHENTICATION PARAMETERS Section]”</a>. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id384186"></a> - You must create Squid's cache directories before it may be run. Enter the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> squid -z -</pre><p> - </p></li><li class="step" title="Step 8"><p> - Finally, start Squid and enjoy transparent Active Directory authentication. - Enter the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> squid -</pre><p> - </p></li></ol></div><div class="example"><a name="etcsquidcfg"></a><p class="title"><b>Example 12.4. Squid Configuration File Extract <code class="filename">/etc/squid.conf</code> [ADMINISTRATIVE PARAMETERS Section]</b></p><div class="example-contents"><pre class="screen"> - cache_effective_user squid - cache_effective_group squid -</pre></div></div><br class="example-break"><div class="example"><a name="etcsquid2"></a><p class="title"><b>Example 12.5. Squid Configuration File extract File: <code class="filename">/etc/squid.conf</code> [AUTHENTICATION PARAMETERS Section]</b></p><div class="example-contents"><pre class="screen"> - auth_param ntlm program /usr/bin/ntlm_auth \ - --helper-protocol=squid-2.5-ntlmssp - auth_param ntlm children 5 - auth_param ntlm max_challenge_reuses 0 - auth_param ntlm max_challenge_lifetime 2 minutes - auth_param basic program /usr/bin/ntlm_auth \ - --helper-protocol=squid-2.5-basic - auth_param basic children 5 - auth_param basic realm Squid proxy-caching web server - auth_param basic credentialsttl 2 hours - acl AuthorizedUsers proxy_auth REQUIRED - http_access allow all AuthorizedUsers -</pre></div></div><br class="example-break"></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id384281"></a>Key Points Learned</h3></div></div></div><p> - <a class="indexterm" name="id384289"></a> - <a class="indexterm" name="id384296"></a> - <a class="indexterm" name="id384303"></a> - <a class="indexterm" name="id384310"></a> - <a class="indexterm" name="id384321"></a> - Microsoft Windows networking protocols permeate the spectrum of technologies that Microsoft - Windows clients use, even when accessing traditional services such as Web browsers. Depending - on whom you discuss this with, this is either good or bad. No matter how you might evaluate this, - the use of NTLMSSP as the authentication protocol for Web proxy access has some advantages over - the cookie-based authentication regime used by all competing browsers. It is Samba's implementation - of NTLMSSP that makes it attractive to implement the solution that has been demonstrated in this chapter. - </p></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id384336"></a>Questions and Answers</h2></div></div></div><p> - <a class="indexterm" name="id384344"></a> - <a class="indexterm" name="id384351"></a> - <a class="indexterm" name="id384358"></a> - <a class="indexterm" name="id384365"></a> - The development of the <code class="literal">ntlm_auth</code> module was first discussed in many Open Source circles - in 2002. At the SambaXP conference in Goettingen, Germany, Mr. Francesco Chemolli demonstrated the use of - <code class="literal">ntlm_auth</code> during one of the late developer meetings that took place. Since that time, the - adoption of <code class="literal">ntlm_auth</code> has spread considerably. - </p><p> - The largest report from a site that uses Squid with <code class="literal">ntlm_auth</code>-based authentication - support uses a dual processor server that has 2 GB of memory. It provides Web and FTP proxy services for 10,000 - users. Approximately 2,000 of these users make heavy use of the proxy services. According to the source, who - wishes to remain anonymous, the sustained transaction load on this server hovers around 140 hits/sec. The following - comments were made with respect to questions regarding the performance of this installation: - </p><div class="blockquote"><blockquote class="blockquote"><p> - [In our] EXTREMELY optimized environment . . . [the] performance impact is almost [nothing]. The <span class="quote">“<span class="quote">almost</span>”</span> - part is due to the brain damage of the ntlm-over-http protocol definition. Suffice to say that its worst-case - scenario triples the number of hits needed to perform the same transactions versus basic or digest auth[entication]. - </p></blockquote></div><p> - You would be well-advised to recognize that all cache-intensive proxying solutions demand a lot of memory. - Make certain that your Squid proxy server is equipped with sufficient memory to permit all proxy operations to run - out of memory without invoking the overheads involved in the use of memory that has to be swapped to disk. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id384423"></a><dl><dt> <a href="DomApps.html#id384430"> - What does Samba have to do with Web proxy serving? - </a></dt><dt> <a href="DomApps.html#id384585"> - What other services does Samba provide? - </a></dt><dt> <a href="DomApps.html#id384721"> - Does use of Samba (ntlm_auth) improve the performance of Squid? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id384430"></a><a name="id384432"></a></td><td align="left" valign="top"><p> - What does Samba have to do with Web proxy serving? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id384443"></a> - <a class="indexterm" name="id384450"></a> - <a class="indexterm" name="id384457"></a> - <a class="indexterm" name="id384466"></a> - <a class="indexterm" name="id384473"></a> - To provide transparent interoperability between Windows clients and the network services - that are used from them, Samba had to develop tools and facilities that deliver that feature. The benefit - of Open Source software is that it can readily be reused. The current <code class="literal">ntlm_auth</code> - module is basically a wrapper around authentication code from the core of the Samba project. - </p><p> - <a class="indexterm" name="id384492"></a> - <a class="indexterm" name="id384499"></a> - <a class="indexterm" name="id384508"></a> - <a class="indexterm" name="id384517"></a> - <a class="indexterm" name="id384526"></a> - <a class="indexterm" name="id384533"></a> - <a class="indexterm" name="id384540"></a> - <a class="indexterm" name="id384546"></a> - <a class="indexterm" name="id384553"></a> - The <code class="literal">ntlm_auth</code> module supports basic plain-text authentication and NTLMSSP - protocols. This module makes it possible for Web and FTP proxy requests to be authenticated without - the user being interrupted via his or her Windows logon credentials. This facility is available with - MS Windows Explorer and is one of the key benefits claimed for Microsoft Internet Information Server. - There are a few open source initiatives to provide support for these protocols in the Apache Web server - also. - </p><p> - <a class="indexterm" name="id384574"></a> - The short answer is that by adding a wrapper around key authentication components of Samba, other - projects (like Squid) can benefit from the labors expended in meeting user interoperability needs. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id384585"></a><a name="id384588"></a></td><td align="left" valign="top"><p> - What other services does Samba provide? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id384599"></a> - <a class="indexterm" name="id384606"></a> - <a class="indexterm" name="id384612"></a> - <a class="indexterm" name="id384619"></a> - <a class="indexterm" name="id384626"></a> - Samba-3 is a file and print server. The core components that provide this functionality are <code class="literal">smbd</code>, - <code class="literal">nmbd</code>, and the identity resolver daemon, <code class="literal">winbindd</code>. - </p><p> - <a class="indexterm" name="id384655"></a> - <a class="indexterm" name="id384662"></a> - Samba-3 is an SMB/CIFS client. The core component that provides this is called <code class="literal">smbclient</code>. - </p><p> - <a class="indexterm" name="id384679"></a> - <a class="indexterm" name="id384685"></a> - <a class="indexterm" name="id384692"></a> - <a class="indexterm" name="id384699"></a> - <a class="indexterm" name="id384706"></a> - Samba-3 includes a number of helper tools, plug-in modules, utilities, and test and validation facilities. - Samba-3 includes glue modules that help provide interoperability between MS Windows clients and UNIX/Linux - servers and clients. It includes Winbind agents that make it possible to authenticate UNIX/Linux access attempts - as well as logins to an SMB/CIFS authentication server backend. Samba-3 includes name service switch (NSS) modules - to permit identity resolution via SMB/CIFS servers (Windows NT4/200x, Samba, and a host of other commercial - server products). - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id384721"></a><a name="id384723"></a></td><td align="left" valign="top"><p> - Does use of Samba (<code class="literal">ntlm_auth</code>) improve the performance of Squid? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Not really. Samba's <code class="literal">ntlm_auth</code> module handles only authentication. It requires that - Squid make an external call to <code class="literal">ntlm_auth</code> and therefore actually incurs a - little more overhead. Compared with the benefit obtained, that overhead is well worth enduring. Since - Squid is a proxy server, and proxy servers tend to require lots of memory, it is good advice to provide - sufficient memory when using Squid. Just add a little more to accommodate <code class="literal">ntlm_auth</code>. - </p></td></tr></tbody></table></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="kerberos.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="HA.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 11. Active Directory, Kerberos, and Security </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 13. Performance, Reliability, and Availability</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/ExNetworks.html b/docs/htmldocs/Samba3-ByExample/ExNetworks.html deleted file mode 100644 index 6884a11f8d..0000000000 --- a/docs/htmldocs/Samba3-ByExample/ExNetworks.html +++ /dev/null @@ -1,23 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Part I. Example Network Configurations</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="preface.html" title="Preface"><link rel="next" href="simple.html" title="Chapter 1. No-Frills Samba Servers"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Part I. Example Network Configurations</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="preface.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="simple.html">Next</a></td></tr></table><hr></div><div class="part" title="Part I. Example Network Configurations"><div class="titlepage"><div><div><h1 class="title"><a name="ExNetworks"></a>Part I. Example Network Configurations</h1></div></div></div><div class="partintro" title="Example Network Configurations"><div><div><div><h1 class="title"><a name="id323031"></a>Example Network Configurations</h1></div></div></div><p> -This section of <span class="emphasis"><em>Samba-3 by Example</em></span> provides example network -configurations that can be copied, or modified as needed, and deployed as-is. -The contents have been marginally updated to reflect changes made in Samba=3.0.23. -</p><p> -Best use can be made of this book by finding in this section the network design and -layout that best approximates your estimated needs. It is recommended that you will -implement the design pattern exactly as it appears, then after the installation has -been proven to work make any changes or modifications needed at your site. -</p><p> -The examples have been tested with Red Hat Fedora Core 2, Novell SUSE Linux Professional -9.3 and Novell SUSE Linux Enterprise Server (SLES) 9. The principals of implementation -apply to all Linux and UNIX systems in general, though some system files and tools will -be different and the location of some Samba file locations will be different since these -are determined by the person who packages Samba for each platform. -</p><p> -If you are deploying Samba is a mission-critical environment, or if you simply want -to save time and get your Samba network operational with minimal fuss, there is the -option to purchase commercial, professional, Samba support. Information regarding -commercial support options may be obtained from the commercial -<a class="ulink" href="http://www.samba.org/samba/support/" target="_top">support</a> pages from -the Samba web site. -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="chapter"><a href="simple.html">1. No-Frills Samba Servers</a></span></dt><dd><dl><dt><span class="sect1"><a href="simple.html#id323089">Introduction</a></span></dt><dt><span class="sect1"><a href="simple.html#id323120">Assignment Tasks</a></span></dt><dd><dl><dt><span class="sect2"><a href="simple.html#id323158">Drafting Office</a></span></dt><dt><span class="sect2"><a href="simple.html#id323803">Charity Administration Office</a></span></dt><dt><span class="sect2"><a href="simple.html#AccountingOffice">Accounting Office</a></span></dt></dl></dd><dt><span class="sect1"><a href="simple.html#id326925">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="small.html">2. Small Office Networking</a></span></dt><dd><dl><dt><span class="sect1"><a href="small.html#id327308">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327326">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327371">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327416">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id327588">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327606">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id329058">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id329633">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id329652">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id329716">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="secure.html">3. Secure Office Networking</a></span></dt><dd><dl><dt><span class="sect1"><a href="secure.html#id330143">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#id330177">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id330386">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#id330398">Technical Issues</a></span></dt><dt><span class="sect2"><a href="secure.html#id330742">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id330776">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#ch4bsc">Basic System Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#id331530">Samba Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4ptrcfg">Printer Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#procstart">Process Startup Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4valid">Validation</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4appscfg">Application Share Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4wincfg">Windows Client Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#id335513">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id335566">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="Big500users.html">4. The 500-User Office</a></span></dt><dd><dl><dt><span class="sect1"><a href="Big500users.html#id336007">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#id336038">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id336113">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#id336141">Technical Issues</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id336318">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id336338">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#ch5-dnshcp-setup">Installation of DHCP, DNS, and Samba Control Files</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id337052">Server Preparation: All Servers</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id337568">Server-Specific Preparation</a></span></dt><dt><span class="sect2"><a href="Big500users.html#ch5-procstart">Process Startup Configuration</a></span></dt><dt><span class="sect2"><a href="Big500users.html#ch5wincfg">Windows Client Configuration</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id340544">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id340597">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="happy.html">5. Making Happy Users</a></span></dt><dd><dl><dt><span class="sect1"><a href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a></span></dt><dt><span class="sect1"><a href="happy.html#id341463">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id341540">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id341668">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id342070">Technical Issues</a></span></dt><dt><span class="sect2"><a href="happy.html#id343725">Political Issues</a></span></dt><dt><span class="sect2"><a href="happy.html#id343737">Installation Checklist</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id343908">Samba Server Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbeidealx">Install and Configure Idealx smbldap-tools Scripts</a></span></dt><dt><span class="sect2"><a href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-ptrcfg">Printer Configuration</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a></span></dt><dt><span class="sect1"><a href="happy.html#id350178">Miscellaneous Server Preparation Tasks</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id350194">Configuring Directory Share Point Roots</a></span></dt><dt><span class="sect2"><a href="happy.html#id350283">Configuring Profile Directories</a></span></dt><dt><span class="sect2"><a href="happy.html#id350512">Preparation of Logon Scripts</a></span></dt><dt><span class="sect2"><a href="happy.html#id350609">Assigning User Rights and Privileges</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id350723">Windows Client Configuration</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></span></dt><dt><span class="sect2"><a href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></span></dt><dt><span class="sect2"><a href="happy.html#id351724">Configure Delete Cached Profiles on Logout</a></span></dt><dt><span class="sect2"><a href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></span></dt><dt><span class="sect2"><a href="happy.html#id352365">Software Installation</a></span></dt><dt><span class="sect2"><a href="happy.html#id352391">Roll-out Image Creation</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id352420">Key Points Learned</a></span></dt><dt><span class="sect1"><a href="happy.html#id352508">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="net2000users.html">6. A Distributed 2000-User Network</a></span></dt><dd><dl><dt><span class="sect1"><a href="net2000users.html#id352846">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id352871">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id352928">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id353175">Technical Issues</a></span></dt><dt><span class="sect2"><a href="net2000users.html#id353997">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id354011">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id357027">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id357166">Questions and Answers</a></span></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="preface.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="simple.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Preface </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 1. No-Frills Samba Servers</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/HA.html b/docs/htmldocs/Samba3-ByExample/HA.html deleted file mode 100644 index 155f8b88a4..0000000000 --- a/docs/htmldocs/Samba3-ByExample/HA.html +++ /dev/null @@ -1,416 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 13. Performance, Reliability, and Availability</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="DomApps.html" title="Chapter 12. Integrating Additional Services"><link rel="next" href="ch14.html" title="Chapter 14. Samba Support"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 13. Performance, Reliability, and Availability</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="DomApps.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="ch14.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 13. Performance, Reliability, and Availability"><div class="titlepage"><div><div><h2 class="title"><a name="HA"></a>Chapter 13. Performance, Reliability, and Availability</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="HA.html#id384815">Introduction</a></span></dt><dt><span class="sect1"><a href="HA.html#id384892">Dissection and Discussion</a></span></dt><dt><span class="sect1"><a href="HA.html#id385344">Guidelines for Reliable Samba Operation</a></span></dt><dd><dl><dt><span class="sect2"><a href="HA.html#id385369">Name Resolution</a></span></dt><dt><span class="sect2"><a href="HA.html#id385810">Samba Configuration</a></span></dt><dt><span class="sect2"><a href="HA.html#id386110">Use and Location of BDCs</a></span></dt><dt><span class="sect2"><a href="HA.html#id386178">Use One Consistent Version of MS Windows Client</a></span></dt><dt><span class="sect2"><a href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></span></dt><dt><span class="sect2"><a href="HA.html#id386240">Distribute Network Load with MSDFS</a></span></dt><dt><span class="sect2"><a href="HA.html#id386291">Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</a></span></dt><dt><span class="sect2"><a href="HA.html#id386332">Hardware Problems</a></span></dt><dt><span class="sect2"><a href="HA.html#id386465">Large Directories</a></span></dt></dl></dd><dt><span class="sect1"><a href="HA.html#id386548">Key Points Learned</a></span></dt></dl></div><p> - <a class="indexterm" name="id384782"></a> - <a class="indexterm" name="id384788"></a> - <a class="indexterm" name="id384795"></a> - Well, you have reached one of the last chapters of this book. It is customary to attempt - to wrap up the theme and contents of a book in what is generally regarded as the - chapter that should draw conclusions. This book is a suspense thriller, and since - the plot of the stories told mostly lead you to bigger, better Samba-3 networking - solutions, it is perhaps appropriate to close this book with a few pertinent comments - regarding some of the things everyone can do to deliver a reliable Samba-3 network. - </p><div class="blockquote"><table border="0" width="100%" cellspacing="0" cellpadding="0" class="blockquote" summary="Block quote"><tr><td width="10%" valign="top"> </td><td width="80%" valign="top"><p> - In a world so full of noise, how can the sparrow be heard? - </p></td><td width="10%" valign="top"> </td></tr><tr><td width="10%" valign="top"> </td><td colspan="2" align="right" valign="top">--<span class="attribution">Anonymous</span></td></tr></table></div><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id384815"></a>Introduction</h2></div></div></div><p> - <a class="indexterm" name="id384822"></a> - The sparrow is a small bird whose sounds are drowned out by the noise of the busy - world it lives in. Likewise, the simple steps that can be taken to improve the - reliability and availability of a Samba network are often drowned out by the volume - of discussions about grandiose Samba clustering designs. This is not intended to - suggest that clustering is not important, because clearly it is. This chapter does not devote - itself to discussion of clustering because each clustering methodology uses its own - custom tools and methods. Only passing comments are offered concerning these methods. - </p><p> - <a class="indexterm" name="id384837"></a> - <a class="indexterm" name="id384844"></a> - <a class="indexterm" name="id384851"></a> -<a class="ulink" href="http://www.google.com/search?hl=en&lr=&ie=ISO-8859-1&q=samba+cluster&btnG=Google+Search" target="_top">A search</a> - for <span class="quote">“<span class="quote">samba cluster</span>”</span> produced 71,600 hits. And a search for <span class="quote">“<span class="quote">highly available samba</span>”</span> - and <span class="quote">“<span class="quote">highly available windows</span>”</span> produced an amazing number of references. - It is clear from the resources on the Internet that Windows file and print services - availability, reliability, and scalability are of vital interest to corporate network users. - </p><p> - <a class="indexterm" name="id384882"></a> - So without further background, you can review a checklist of simple steps that - can be taken to ensure acceptable network performance while keeping costs of ownership - well under control. - </p></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id384892"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id384899"></a> - <a class="indexterm" name="id384906"></a> - If it is your purpose to get the best mileage out of your Samba servers, there is one rule that - must be obeyed. If you want the best, keep your implementation as simple as possible. You may - well be forced to introduce some complexities, but you should do so only as a last resort. - </p><p> - Simple solutions are likely to be easier to get right than are complex ones. They certainly - make life easier for your successor. Simple implementations can be more readily audited than can - complex ones. - </p><p> - <a class="indexterm" name="id384924"></a> - <a class="indexterm" name="id384931"></a> - Problems reported by users fall into three categories: configurations that do not work, those - that have broken behavior, and poor performance. The term <span class="emphasis"><em>broken behavior</em></span> - means that the function of a particular Samba component appears to work sometimes, but not at - others. The resulting intermittent operation is clearly unacceptable. An example of - <span class="emphasis"><em>broken behavior</em></span> known to many Windows networking users occurs when the - list of Windows machines in MS Explorer changes, sometimes listing machines that are running - and at other times not listing them even though the machines are in use on the network. - </p><p> - <a class="indexterm" name="id384953"></a> - <a class="indexterm" name="id384960"></a> - <a class="indexterm" name="id384966"></a> - <a class="indexterm" name="id384973"></a> - <a class="indexterm" name="id384980"></a> - <a class="indexterm" name="id384987"></a> - A significant number of reports concern problems with the <code class="literal">smbfs</code> file system - driver that is part of the Linux kernel, not part of Samba. Users continue to interpret that - <code class="literal">smbfs</code> is part of Samba, simply because Samba includes the front-end tools - that are used to manage <code class="literal">smbfs</code>-based file service connections. So, just - for the record, the tools <code class="literal">smbmnt</code>, <code class="literal">smbmount</code>, - <code class="literal">smbumount</code>, and <code class="literal">smbumnt</code> are front-end - facilities to core drivers that are supplied as part of the Linux kernel. These tools share a - common infrastructure with some Samba components, but they are not maintained as part of - Samba and are really foreign to it. - </p><p> - <a class="indexterm" name="id385043"></a> - The new project, <code class="literal">cifsfs</code>, is destined to replace <code class="literal">smbfs</code>. - It, too, is not part of Samba, even though one of the Samba Team members is a prime mover in - this project. - </p><p> - Table 13.1 lists typical causes of: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Not Working (NW)</p></li><li class="listitem"><p>Broken Behavior (BB)</p></li><li class="listitem"><p>Poor Performance (PP)</p></li></ul></div><div class="table"><a name="ProbList"></a><p class="title"><b>Table 13.1. Effect of Common Problems</b></p><div class="table-contents"><table summary="Effect of Common Problems" border="1"><colgroup><col align="left"><col align="center"><col align="center"><col align="center"></colgroup><thead><tr><th align="left"><p>Problem</p></th><th align="center"><p>NW</p></th><th align="center"><p>BB</p></th><th align="center"><p>PP</p></th></tr></thead><tbody><tr><td align="left"><p>File locking</p></td><td align="center"><p>-</p></td><td align="center"><p>X</p></td><td align="center"><p>-</p></td></tr><tr><td align="left"><p>Hardware problems</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td></tr><tr><td align="left"><p>Incorrect authentication</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>-</p></td></tr><tr><td align="left"><p>Incorrect configuration</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td></tr><tr><td align="left"><p>LDAP problems</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>-</p></td></tr><tr><td align="left"><p>Name resolution</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td></tr><tr><td align="left"><p>Printing problems</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>-</p></td></tr><tr><td align="left"><p>Slow file transfer</p></td><td align="center"><p>-</p></td><td align="center"><p>-</p></td><td align="center"><p>X</p></td></tr><tr><td align="left"><p>Winbind problems</p></td><td align="center"><p>X</p></td><td align="center"><p>X</p></td><td align="center"><p>-</p></td></tr></tbody></table></div></div><br class="table-break"><p> - <a class="indexterm" name="id385333"></a> - It is obvious to all that the first requirement (as a matter of network hygiene) is to eliminate - problems that affect basic network operation. This book has provided sufficient working examples - to help you to avoid all these problems. - </p></div><div class="sect1" title="Guidelines for Reliable Samba Operation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id385344"></a>Guidelines for Reliable Samba Operation</h2></div></div></div><p> - <a class="indexterm" name="id385352"></a> - <a class="indexterm" name="id385359"></a> - Your objective is to provide a network that works correctly, can grow at all times, is resilient - at times of extreme demand, and can scale to meet future needs. The following subject areas provide - pointers that can help you today. - </p><div class="sect2" title="Name Resolution"><div class="titlepage"><div><div><h3 class="title"><a name="id385369"></a>Name Resolution</h3></div></div></div><p> - There are three basic current problem areas: bad hostnames, routed networks, and network collisions. - These are covered in the following discussion. - </p><div class="sect3" title="Bad Hostnames"><div class="titlepage"><div><div><h4 class="title"><a name="id385379"></a>Bad Hostnames</h4></div></div></div><p> - <a class="indexterm" name="id385387"></a> - <a class="indexterm" name="id385396"></a> - <a class="indexterm" name="id385403"></a> - <a class="indexterm" name="id385409"></a> - <a class="indexterm" name="id385416"></a> - When configured as a DHCP client, a number of Linux distributions set the system hostname - to <code class="constant">localhost</code>. If the parameter <em class="parameter"><code>netbios name</code></em> is not - specified to something other than <code class="constant">localhost</code>, the Samba server appears - in the Windows Explorer as <code class="constant">LOCALHOST</code>. Moreover, the entry in the <code class="filename">/etc/hosts</code> - on the Linux server points to IP address <code class="constant">127.0.0.1</code>. This means that - when the Windows client obtains the IP address of the Samba server called <code class="constant">LOCALHOST</code>, - it obtains the IP address <code class="constant">127.0.0.1</code> and then proceeds to attempt to - set up a NetBIOS over TCP/IP connection to it. This cannot work, because that IP address is - the local Windows machine itself. Hostnames must be valid for Windows networking to function - correctly. - </p><p> - <a class="indexterm" name="id385465"></a> - A few sites have tried to name Windows clients and Samba servers with a name that begins - with the digits 1-9. This does not work either because it may result in the client or - server attempting to use that name as an IP address. - </p><p> - <a class="indexterm" name="id385477"></a> - <a class="indexterm" name="id385486"></a> - A Samba server called <code class="constant">FRED</code> in a NetBIOS domain called <code class="constant">COLLISION</code> - in a network environment that is part of the fully-qualified Internet domain namespace known - as <code class="constant">parrots.com</code>, results in DNS name lookups for <code class="constant">fred.parrots.com</code> - and <code class="constant">collision.parrots.com</code>. It is therefore a mistake to name the domain - (workgroup) <code class="constant">collision.parrots.com</code>, since this results in DNS lookup - attempts to resolve <code class="constant">fred.parrots.com.parrots.com</code>, which most likely - fails given that you probably do not have this in your DNS namespace. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id385526"></a> - <a class="indexterm" name="id385536"></a> - <a class="indexterm" name="id385542"></a> - An Active Directory realm called <code class="constant">collision.parrots.com</code> is perfectly okay, - although it too must be capable of being resolved via DNS, something that functions correctly - if Windows 200x ADS has been properly installed and configured. - </p></div></div><div class="sect3" title="Routed Networks"><div class="titlepage"><div><div><h4 class="title"><a name="id385556"></a>Routed Networks</h4></div></div></div><p> - <a class="indexterm" name="id385564"></a> - <a class="indexterm" name="id385571"></a> - <a class="indexterm" name="id385580"></a> - NetBIOS networks (Windows networking with NetBIOS over TCP/IP enabled) makes extensive use - of UDP-based broadcast traffic, as you saw during the exercises in <a class="link" href="primer.html" title="Chapter 16. Networking Primer">“Networking Primer”</a>. - </p><p> - <a class="indexterm" name="id385598"></a> - <a class="indexterm" name="id385605"></a> - <a class="indexterm" name="id385612"></a> - UDP broadcast traffic is not forwarded by routers. This means that NetBIOS broadcast-based - networking cannot function across routed networks (i.e., multi-subnet networks) unless - special provisions are made: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id385627"></a> - <a class="indexterm" name="id385634"></a> - <a class="indexterm" name="id385641"></a> - Either install on every Windows client an LMHOSTS file (located in the directory - <code class="filename">C:\windows\system32\drivers\etc</code>). It is also necessary to - add to the Samba server <code class="filename">smb.conf</code> file the parameters <em class="parameter"><code>remote announce</code></em> - and <em class="parameter"><code>remote browse sync</code></em>. For more information, refer to the online - manual page for the <code class="filename">smb.conf</code> file. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id385684"></a> - Or configure Samba as a WINS server, and configure all network clients to use that - WINS server in their TCP/IP configuration. - </p></li></ul></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id385700"></a> - <a class="indexterm" name="id385709"></a> - The use of DNS is not an acceptable substitute for WINS. DNS does not store specific - information regarding NetBIOS networking particulars that get stored in the WINS - name resolution database and that Windows clients require and depend on. - </p></div></div><div class="sect3" title="Network Collisions"><div class="titlepage"><div><div><h4 class="title"><a name="id385720"></a>Network Collisions</h4></div></div></div><p> - <a class="indexterm" name="id385727"></a> - <a class="indexterm" name="id385737"></a> - <a class="indexterm" name="id385746"></a> - <a class="indexterm" name="id385753"></a> - Excessive network activity causes NetBIOS network timeouts. Timeouts may result in - blue screen of death (BSOD) experiences. High collision rates may be caused by excessive - UDP broadcast activity, by defective networking hardware, or through excessive network - loads (another way of saying that the network is poorly designed). - </p><p> - The use of WINS is highly recommended to reduce network broadcast traffic, as outlined - in <a class="link" href="primer.html" title="Chapter 16. Networking Primer">“Networking Primer”</a>. - </p><p> - <a class="indexterm" name="id385778"></a> - <a class="indexterm" name="id385784"></a> - <a class="indexterm" name="id385791"></a> - Under no circumstances should the facility be supported by many routers, known as <code class="constant">NetBIOS - forwarding</code>, unless you know exactly what you are doing. Inappropriate use of this - facility can result in UDP broadcast storms. In one case in 1999, a university network became - unusable due to NetBIOS forwarding being enabled on all routers. The problem was discovered during performance - testing of a Samba server. The maximum throughput on a 100-Base-T (100 MB/sec) network was - less than 15 KB/sec. After the NetBIOS forwarding was turned off, file transfer performance - immediately returned to 11 MB/sec. - </p></div></div><div class="sect2" title="Samba Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="id385810"></a>Samba Configuration</h3></div></div></div><p> - As a general rule, the contents of the <code class="filename">smb.conf</code> file should be kept as simple as possible. - No parameter should be specified unless you know it is essential to operation. - </p><p> - <a class="indexterm" name="id385828"></a> - <a class="indexterm" name="id385835"></a> - <a class="indexterm" name="id385842"></a> - Many UNIX administrators like to fully document the settings in the <code class="filename">smb.conf</code> file. This is a - bad idea because it adds content to the file. The <code class="filename">smb.conf</code> file is re-read by every <code class="literal">smbd</code> - process every time the file timestamp changes (or, on systems where this does not work, every 20 seconds or so). - </p><p> - As the size of the <code class="filename">smb.conf</code> file grows, the risk of introducing parsing errors also increases. - It is recommended to keep a fully documented <code class="filename">smb.conf</code> file on hand, and then to operate Samba only - with an optimized file. - </p><p><a class="indexterm" name="id385888"></a> - The preferred way to maintain a documented file is to call it something like <code class="filename">smb.conf.master</code>. - You can generate the optimized file by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s smb.conf.master > smb.conf -</pre><p> - You should carefully observe all warnings issued. It is also a good practice to execute the following - command to confirm correct interpretation of the <code class="filename">smb.conf</code> file contents: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -Load smb config files from /etc/samba/smb.conf -Can't find include file /etc/samba/machine. -Processing section "[homes]" -Processing section "[print$]" -Processing section "[netlogon]" -Processing section "[Profiles]" -Processing section "[printers]" -Processing section "[media]" -Processing section "[data]" -Processing section "[cdr]" -Processing section "[apps]" -Loaded services file OK. -'winbind separator = +' might cause problems with group membership. -Server role: ROLE_DOMAIN_PDC -Press enter to see a dump of your service definitions -</pre><p> - <a class="indexterm" name="id385939"></a> - You now, of course, press the enter key to complete the command, or else abort it by pressing Ctrl-C. - The important thing to note is the noted Server role, as well as warning messages. Noted configuration - conflicts must be remedied before proceeding. For example, the following error message represents a - common fatal problem: -</p><pre class="screen"> -ERROR: both 'wins support = true' and 'wins server = <server list>' -cannot be set in the smb.conf file. nmbd will abort with this setting. -</pre><p> - </p><p> - <a class="indexterm" name="id385960"></a> - <a class="indexterm" name="id385967"></a> - <a class="indexterm" name="id385974"></a> - There are two parameters that can cause severe network performance degradation: <em class="parameter"><code>socket options</code></em> - and <em class="parameter"><code>socket address</code></em>. The <em class="parameter"><code>socket options</code></em> parameter was often necessary - when Samba was used with the Linux 2.2.x kernels. Later kernels are largely self-tuning and seldom benefit from - this parameter being set. Do not use either parameter unless it has been proven necessary to use them. - </p><p> - <a class="indexterm" name="id386005"></a> - <a class="indexterm" name="id386012"></a> - <a class="indexterm" name="id386018"></a> - <a class="indexterm" name="id386025"></a> - Another <code class="filename">smb.conf</code> parameter that may cause severe network performance degradation is the - <em class="parameter"><code>strict sync</code></em> parameter. Do not use this at all. There is no good reason - to use this with any modern Windows client. The <em class="parameter"><code>strict sync</code></em> is often - used with the <em class="parameter"><code>sync always</code></em> parameter. This, too, can severely - degrade network performance, so do not set it; if you must, do so with caution. - </p><p> - <a class="indexterm" name="id386064"></a> - <a class="indexterm" name="id386071"></a> - <a class="indexterm" name="id386078"></a> - <a class="indexterm" name="id386085"></a> - Finally, many network administrators deliberately disable opportunistic locking support. While this - does not degrade Samba performance, it significantly degrades Windows client performance because - this disables local file caching on Windows clients and forces every file read and written to - invoke a network read or write call. If for any reason you must disable oplocks (opportunistic locking) - support, do so only on the share on which it is required. That way, all other shares can provide - oplock support for operations that are tolerant of it. See <a class="link" href="appendix.html#ch12dblck" title="Shared Data Integrity">“Shared Data Integrity”</a> for more - information. - </p></div><div class="sect2" title="Use and Location of BDCs"><div class="titlepage"><div><div><h3 class="title"><a name="id386110"></a>Use and Location of BDCs</h3></div></div></div><p> - <a class="indexterm" name="id386118"></a> - <a class="indexterm" name="id386125"></a> - <a class="indexterm" name="id386131"></a> - <a class="indexterm" name="id386138"></a> - <a class="indexterm" name="id386145"></a> - On a network segment where there is a PDC and a BDC, the BDC carries the bulk of the network logon - processing. If the BDC is a heavily loaded server, the PDC carries a greater proportion of - authentication and logon processing. When a sole BDC on a routed network segment gets heavily - loaded, it is possible that network logon requests and authentication requests may be directed - to a BDC on a distant network segment. This significantly hinders WAN operations - and is undesirable. - </p><p> - <a class="indexterm" name="id386159"></a> - <a class="indexterm" name="id386166"></a> - As a general guide, instead of adding domain member servers to a network, you would be better advised - to add BDCs until there are fewer than 30 Windows clients per BDC. Beyond that ratio, you should add - domain member servers. This practice ensures that there are always sufficient domain controllers - to handle logon requests and authentication traffic. - </p></div><div class="sect2" title="Use One Consistent Version of MS Windows Client"><div class="titlepage"><div><div><h3 class="title"><a name="id386178"></a>Use One Consistent Version of MS Windows Client</h3></div></div></div><p> - Every network client has its own peculiarities. From a management perspective, it is easier to deal - with one version of MS Windows that is maintained to a consistent update level than it is to deal - with a mixture of clients. - </p><p> - On a number of occasions, particular Microsoft service pack updates of a Windows server or client - have necessitated special handling from the Samba server end. If you want to remain sane, keep you - client workstation configurations consistent. - </p></div><div class="sect2" title="For Scalability, Use SAN-Based Storage on Samba Servers"><div class="titlepage"><div><div><h3 class="title"><a name="id386195"></a>For Scalability, Use SAN-Based Storage on Samba Servers</h3></div></div></div><p> - <a class="indexterm" name="id386203"></a> - <a class="indexterm" name="id386210"></a> - Many SAN-based storage systems permit more than one server to share a common data store. - Use of a shared SAN data store means that you do not need to use time- and resource-hungry data - synchronization techniques. - </p><p> - <a class="indexterm" name="id386222"></a> - <a class="indexterm" name="id386229"></a> - The use of a collection of relatively low-cost front-end Samba servers that are coupled to - a shared backend SAN data store permits load distribution while containing costs below that - of installing and managing a complex clustering facility. - </p></div><div class="sect2" title="Distribute Network Load with MSDFS"><div class="titlepage"><div><div><h3 class="title"><a name="id386240"></a>Distribute Network Load with MSDFS</h3></div></div></div><p> - <a class="indexterm" name="id386248"></a> - <a class="indexterm" name="id386255"></a> - Microsoft DFS (distributed file system) technology has been implemented in Samba. MSDFS permits - data to be accessed from a single share and yet to actually be distributed across multiple actual - servers. Refer to <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 19, for information regarding - implementation of an MSDFS installation. - </p><p> - <a class="indexterm" name="id386271"></a> - <a class="indexterm" name="id386280"></a> - The combination of multiple backend servers together with a front-end server and use of MSDFS - can achieve almost the same as you would obtain with a clustered Samba server. - </p></div><div class="sect2" title="Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth"><div class="titlepage"><div><div><h3 class="title"><a name="id386291"></a>Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</h3></div></div></div><p> - <a class="indexterm" name="id386299"></a> - <a class="indexterm" name="id386306"></a> - <a class="indexterm" name="id386313"></a> - Consider using <code class="literal">rsync</code> to replicate data across the WAN during times - of low utilization. Users can then access the replicated data store rather than needing to do so - across the WAN. This works best for read-only data, but with careful planning can be - implemented so that modified files get replicated back to the point of origin. Be careful with your - implementation if you choose to permit modification and return replication of the modified file; - otherwise, you may inadvertently overwrite important data. - </p></div><div class="sect2" title="Hardware Problems"><div class="titlepage"><div><div><h3 class="title"><a name="id386332"></a>Hardware Problems</h3></div></div></div><p> - <a class="indexterm" name="id386340"></a> - <a class="indexterm" name="id386346"></a> - <a class="indexterm" name="id386353"></a> - <a class="indexterm" name="id386360"></a> - <a class="indexterm" name="id386369"></a> - <a class="indexterm" name="id386378"></a> - Networking hardware prices have fallen sharply over the past 5 years. A surprising number - of Samba networking problems over this time have been traced to defective network interface - cards (NICs) or defective HUBs, switches, and cables. - </p><p> - <a class="indexterm" name="id386393"></a> - Not surprising is the fact that network administrators do not like to be shown to have made - a bad decision. Money saved in buying low-cost hardware may result in high costs incurred - in corrective action. - </p><p> - <a class="indexterm" name="id386405"></a> - <a class="indexterm" name="id386412"></a> - <a class="indexterm" name="id386418"></a> - <a class="indexterm" name="id386425"></a> - <a class="indexterm" name="id386432"></a> - Defective NICs, HUBs, and switches may appear as intermittent network access problems, intermittent - or persistent data corruption, slow network throughput, low performance, or even as BSOD - problems with MS Windows clients. In one case, a company updated several workstations with newer, faster - Windows client machines that triggered problems during logon as well as data integrity problems on - an older PC that was unaffected so long as the new machines were kept shut down. - </p><p> - Defective hardware problems may take patience and persistence before the real cause can be discovered. - </p><p> - <a class="indexterm" name="id386450"></a> - Networking hardware defects can significantly impact perceived Samba performance, but defective - RAID controllers as well as SCSI and IDE hard disk controllers have also been known to impair Samba server - operations. One business came to this realization only after replacing a Samba installation with MS - Windows Server 2000 running on the same hardware. The root of the problem completely eluded the network - administrator until the entire server was replaced. While you may well think that this would never - happen to you, experience shows that given the right (unfortunate) circumstances, this can happen to anyone. - </p></div><div class="sect2" title="Large Directories"><div class="titlepage"><div><div><h3 class="title"><a name="id386465"></a>Large Directories</h3></div></div></div><p> - There exist applications that create or manage directories containing many thousands of files. Such - applications typically generate many small files (less than 100 KB). At the best of times, under UNIX, - listing of the files in a directory that contains many files is slow. By default, Windows NT, 200x, - and XP Pro cause network file system directory lookups on a Samba server to be performed for both - the case preserving file name as well as for the mangled (8.3) file name. This incurs a huge overhead - on the Samba server that may slow down the system dramatically. - </p><p> - In an extreme case, the performance impact was dramatic. File transfer from the Samba server to a Windows - XP Professional workstation over 1 Gigabit Ethernet for 250-500 KB files was measured at approximately - 30 MB/sec. But when tranferring a directory containing 120,000 files, all from 50KB to 60KB in size, the - transfer rate to the same workstation was measured at approximately 1.5 KB/sec. The net transfer was - on the order of a factor of 20-fold slower. - </p><p> - The symptoms that will be observed on the Samba server when a large directory is accessed will be that - aggregate I/O (typically blocks read) will be relatively low, yet the wait I/O times will be incredibly - long while at the same time the read queue is large. Close observation will show that the hard drive - that the file system is on will be thrashing wildly. - </p><p> - Samba-3.0.12 and later, includes new code that radically improves Samba perfomance. The secret to this is - really in the <a class="link" href="smb.conf.5.html#CASESENSITIVE" target="_top">case sensitive = True</a> line. This tells smbd never to scan - for case-insensitive versions of names. So if an application asks for a file called <code class="filename">FOO</code>, - and it can not be found by a simple stat call, then smbd will return "file not found" immediately without - scanning the containing directory for a version of a different case. - </p><p> - Canonicalize all the files in the directory to have one case, upper or lower - either will do. Then set up - a new custom share for the application as follows: - </p><pre class="screen"> - [bigshare] - path = /data/xrayfiles/neurosurgeons/ - read only = no - case sensitive = True - default case = upper - preserve case = no - short preserve case = no - </pre><p> - </p><p> - All files and directories under the <em class="parameter"><code>path</code></em> directory must be in the same case - as specified in the <code class="filename">smb.conf</code> stanza. This means that smbd will not be able to find lower case - filenames with these settings. Note, this is done on a per-share basis. - </p></div></div><div class="sect1" title="Key Points Learned"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id386548"></a>Key Points Learned</h2></div></div></div><p> - This chapter has touched in broad sweeps on a number of simple steps that can be taken - to ensure that your Samba network is resilient, scalable, and reliable, and that it - performs well. - </p><p> - Always keep in mind that someone is responsible to maintain and manage your design. - In the long term, that may not be you. Spare a thought for your successor and give him or - her an even break. - </p><p> - <a class="indexterm" name="id386565"></a> - Last, but not least, you should not only keep the network design simple, but also be sure it is - well documented. This book may serve as your pattern for documenting every - aspect of your design, its implementation, and particularly the objects and assumptions - that underlie it. - </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="DomApps.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ch14.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 12. Integrating Additional Services </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 14. Samba Support</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/RefSection.html b/docs/htmldocs/Samba3-ByExample/RefSection.html deleted file mode 100644 index b3edaf37aa..0000000000 --- a/docs/htmldocs/Samba3-ByExample/RefSection.html +++ /dev/null @@ -1,52 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Part III. Reference Section</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="nw4migration.html" title="Chapter 10. Migrating NetWare Server to Samba-3"><link rel="next" href="kerberos.html" title="Chapter 11. Active Directory, Kerberos, and Security"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Part III. Reference Section</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="nw4migration.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="kerberos.html">Next</a></td></tr></table><hr></div><div class="part" title="Part III. Reference Section"><div class="titlepage"><div><div><h1 class="title"><a name="RefSection"></a>Part III. Reference Section</h1></div></div></div><div class="partintro" title="Reference Section"><div><div><div><h1 class="title"><a name="id377046"></a>Reference Section</h1></div></div></div><p> -This section <span class="emphasis"><em>Samba-3 by Example</em></span> provides important reference material -that may help you to solve network performance issues, to answer some of the critiques -published regarding Samba, or just to gain a more broad understanding of how Samba can -play in a Windows networking world. -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="chapter"><a href="kerberos.html">11. Active Directory, Kerberos, and Security</a></span></dt><dd><dl><dt><span class="sect1"><a href="kerberos.html#id377126">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id377710">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#id377723">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id378089">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#ch10expl">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id379573">Share Access Controls</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id379908">Share Definition Controls</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id380465">Share Point Directory and File Permissions</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id380830">Managing Windows 200x ACLs</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id381514">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#id381636">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="DomApps.html">12. Integrating Additional Services</a></span></dt><dd><dl><dt><span class="sect1"><a href="DomApps.html#id382225">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#id382248">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id382338">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#id382367">Technical Issues</a></span></dt><dt><span class="sect2"><a href="DomApps.html#id382513">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id382530">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></span></dt><dt><span class="sect2"><a href="DomApps.html#id384281">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id384336">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="HA.html">13. Performance, Reliability, and Availability</a></span></dt><dd><dl><dt><span class="sect1"><a href="HA.html#id384815">Introduction</a></span></dt><dt><span class="sect1"><a href="HA.html#id384892">Dissection and Discussion</a></span></dt><dt><span class="sect1"><a href="HA.html#id385344">Guidelines for Reliable Samba Operation</a></span></dt><dd><dl><dt><span class="sect2"><a href="HA.html#id385369">Name Resolution</a></span></dt><dt><span class="sect2"><a href="HA.html#id385810">Samba Configuration</a></span></dt><dt><span class="sect2"><a href="HA.html#id386110">Use and Location of BDCs</a></span></dt><dt><span class="sect2"><a href="HA.html#id386178">Use One Consistent Version of MS Windows Client</a></span></dt><dt><span class="sect2"><a href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></span></dt><dt><span class="sect2"><a href="HA.html#id386240">Distribute Network Load with MSDFS</a></span></dt><dt><span class="sect2"><a href="HA.html#id386291">Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</a></span></dt><dt><span class="sect2"><a href="HA.html#id386332">Hardware Problems</a></span></dt><dt><span class="sect2"><a href="HA.html#id386465">Large Directories</a></span></dt></dl></dd><dt><span class="sect1"><a href="HA.html#id386548">Key Points Learned</a></span></dt></dl></dd><dt><span class="chapter"><a href="ch14.html">14. Samba Support</a></span></dt><dd><dl><dt><span class="sect1"><a href="ch14.html#id386696">Free Support</a></span></dt><dt><span class="sect1"><a href="ch14.html#id386894">Commercial Support</a></span></dt></dl></dd><dt><span class="chapter"><a href="appendix.html">15. A Collection of Useful Tidbits</a></span></dt><dd><dl><dt><span class="sect1"><a href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></span></dt><dt><span class="sect1"><a href="appendix.html#id387559">Samba System File Location</a></span></dt><dt><span class="sect1"><a href="appendix.html#id387952">Starting Samba</a></span></dt><dt><span class="sect1"><a href="appendix.html#id388254">DNS Configuration Files</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id388264">The Forward Zone File for the Loopback Adaptor</a></span></dt><dt><span class="sect2"><a href="appendix.html#id388308">The Reverse Zone File for the Loopback Adaptor</a></span></dt><dt><span class="sect2"><a href="appendix.html#id388408">DNS Root Server Hint File</a></span></dt></dl></dd><dt><span class="sect1"><a href="appendix.html#altldapcfg">Alternative LDAP Database Initialization</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id388463">Initialization of the LDAP Database</a></span></dt></dl></dd><dt><span class="sect1"><a href="appendix.html#id388919">The LDAP Account Manager</a></span></dt><dt><span class="sect1"><a href="appendix.html#id389839">IDEALX Management Console</a></span></dt><dt><span class="sect1"><a href="appendix.html#ch12-SUIDSGID">Effect of Setting File and Directory SUID/SGID Permissions Explained</a></span></dt><dt><span class="sect1"><a href="appendix.html#ch12dblck">Shared Data Integrity</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id390270">Microsoft Access</a></span></dt><dt><span class="sect2"><a href="appendix.html#id390409">Act! Database Sharing</a></span></dt><dt><span class="sect2"><a href="appendix.html#id390484">Opportunistic Locking Controls</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="primer.html">16. Networking Primer</a></span></dt><dd><dl><dt><span class="sect1"><a href="primer.html#id390627">Requirements and Notes</a></span></dt><dt><span class="sect1"><a href="primer.html#id390763">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id390813">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#id390920">Exercises</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id391033">Single-Machine Broadcast Activity</a></span></dt><dt><span class="sect2"><a href="primer.html#secondmachine">Second Machine Startup Broadcast Interaction</a></span></dt><dt><span class="sect2"><a href="primer.html#id392130">Simple Windows Client Connection Characteristics</a></span></dt><dt><span class="sect2"><a href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></span></dt><dt><span class="sect2"><a href="primer.html#id393121">Conclusions to Exercises</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#chap01conc">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id393223">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#chap01qa">Questions and Answers</a></span></dt></dl></dd><dt><span class="appendix"><a href="apa.html">A. - <acronym class="acronym">GNU</acronym> General Public License version 3 - </a></span></dt><dd><dl><dt><span class="bridgehead"><a href="apa.html#id393828">A. - Preamble - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id393937">A. - TERMS AND CONDITIONS - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id393940">A. - 0. Definitions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394004">A. - 1. Source Code. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394066">A. - 2. Basic Permissions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394094">A. - 3. Protecting Users’ Legal Rights From Anti-Circumvention Law. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394116">A. - 4. Conveying Verbatim Copies. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394135">A. - 5. Conveying Modified Source Versions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394207">A. - 6. Conveying Non-Source Forms. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394339">A. - 7. Additional Terms. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394444">A. - 8. Termination. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394476">A. - 9. Acceptance Not Required for Having Copies. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394495">A. - 10. Automatic Licensing of Downstream Recipients. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394529">A. - 11. Patents. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394618">A. - 12. No Surrender of Others’ Freedom. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394633">A. - 13. Use with the ???TITLE??? Affero General Public License. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394657">A. - 14. Revised Versions of this License. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394704">A. - 15. Disclaimer of Warranty. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394722">A. - 16. Limitation of Liability. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394736">A. - 17. Interpretation of Sections 15 and 16. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394749">A. - END OF TERMS AND CONDITIONS - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394752">A. - How to Apply These Terms to Your New Programs - </a></span></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="nw4migration.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="kerberos.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 10. Migrating NetWare Server to Samba-3 </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 11. Active Directory, Kerberos, and Security</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/apa.html b/docs/htmldocs/Samba3-ByExample/apa.html deleted file mode 100644 index 10d0689173..0000000000 --- a/docs/htmldocs/Samba3-ByExample/apa.html +++ /dev/null @@ -1,719 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix A. GNU General Public License version 3</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="primer.html" title="Chapter 16. Networking Primer"><link rel="next" href="go01.html" title="Glossary"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix A. - <acronym class="acronym">GNU</acronym> General Public License version 3 - </th></tr><tr><td width="20%" align="left"><a accesskey="p" href="primer.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="go01.html">Next</a></td></tr></table><hr></div><div class="appendix" title="Appendix A. GNU General Public License version 3"><div class="titlepage"><div><div><h2 class="title"><a name="id393802"></a>Appendix A. - <acronym class="acronym">GNU</acronym> General Public License version 3 - </h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="bridgehead"><a href="apa.html#id393828">A. - Preamble - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id393937">A. - TERMS AND CONDITIONS - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id393940">A. - 0. Definitions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394004">A. - 1. Source Code. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394066">A. - 2. Basic Permissions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394094">A. - 3. Protecting Users’ Legal Rights From Anti-Circumvention Law. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394116">A. - 4. Conveying Verbatim Copies. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394135">A. - 5. Conveying Modified Source Versions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394207">A. - 6. Conveying Non-Source Forms. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394339">A. - 7. Additional Terms. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394444">A. - 8. Termination. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394476">A. - 9. Acceptance Not Required for Having Copies. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394495">A. - 10. Automatic Licensing of Downstream Recipients. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394529">A. - 11. Patents. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394618">A. - 12. No Surrender of Others’ Freedom. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394633">A. - 13. Use with the ???TITLE??? Affero General Public License. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394657">A. - 14. Revised Versions of this License. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394704">A. - 15. Disclaimer of Warranty. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394722">A. - 16. Limitation of Liability. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394736">A. - 17. Interpretation of Sections 15 and 16. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394749">A. - END OF TERMS AND CONDITIONS - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394752">A. - How to Apply These Terms to Your New Programs - </a></span></dt></dl></div><p> - Version 3, 29 June 2007 - </p><p> - Copyright © 2007 Free Software Foundation, Inc. - <a class="ulink" href="http://fsf.org/" target="_top">http://fsf.org/</a> - </p><p> - Everyone is permitted to copy and distribute verbatim copies of this license - document, but changing it is not allowed. - </p><h2><a name="id393828"></a> - Preamble - </h2><p> - The <acronym class="acronym">GNU</acronym> General Public License is a free, copyleft - license for software and other kinds of works. - </p><p> - The licenses for most software and other practical works are designed to - take away your freedom to share and change the works. By contrast, the - <acronym class="acronym">GNU</acronym> General Public License is intended to guarantee your - freedom to share and change all versions of a program—to make sure it - remains free software for all its users. We, the Free Software Foundation, - use the <acronym class="acronym">GNU</acronym> General Public License for most of our - software; it applies also to any other work released this way by its - authors. You can apply it to your programs, too. - </p><p> - When we speak of free software, we are referring to freedom, not price. Our - General Public Licenses are designed to make sure that you have the freedom - to distribute copies of free software (and charge for them if you wish), - that you receive source code or can get it if you want it, that you can - change the software or use pieces of it in new free programs, and that you - know you can do these things. - </p><p> - To protect your rights, we need to prevent others from denying you these - rights or asking you to surrender the rights. Therefore, you have certain - responsibilities if you distribute copies of the software, or if you modify - it: responsibilities to respect the freedom of others. - </p><p> - For example, if you distribute copies of such a program, whether gratis or - for a fee, you must pass on to the recipients the same freedoms that you - received. You must make sure that they, too, receive or can get the source - code. And you must show them these terms so they know their rights. - </p><p> - Developers that use the <acronym class="acronym">GNU</acronym> <acronym class="acronym">GPL</acronym> - protect your rights with two steps: (1) assert copyright on the software, - and (2) offer you this License giving you legal permission to copy, - distribute and/or modify it. - </p><p> - For the developers’ and authors’ protection, the - <acronym class="acronym">GPL</acronym> clearly explains that there is no warranty for this - free software. For both users’ and authors’ sake, the - <acronym class="acronym">GPL</acronym> requires that modified versions be marked as changed, - so that their problems will not be attributed erroneously to authors of - previous versions. - </p><p> - Some devices are designed to deny users access to install or run modified - versions of the software inside them, although the manufacturer can do so. - This is fundamentally incompatible with the aim of protecting users’ - freedom to change the software. The systematic pattern of such abuse occurs - in the area of products for individuals to use, which is precisely where it - is most unacceptable. Therefore, we have designed this version of the - <acronym class="acronym">GPL</acronym> to prohibit the practice for those products. If such - problems arise substantially in other domains, we stand ready to extend this - provision to those domains in future versions of the <acronym class="acronym">GPL</acronym>, - as needed to protect the freedom of users. - </p><p> - Finally, every program is threatened constantly by software patents. States - should not allow patents to restrict development and use of software on - general-purpose computers, but in those that do, we wish to avoid the - special danger that patents applied to a free program could make it - effectively proprietary. To prevent this, the <acronym class="acronym">GPL</acronym> - assures that patents cannot be used to render the program non-free. - </p><p> - The precise terms and conditions for copying, distribution and modification - follow. - </p><h2><a name="id393937"></a> - TERMS AND CONDITIONS - </h2><h2><a name="id393940"></a> - 0. Definitions. - </h2><p> - “This License” refers to version 3 of the <acronym class="acronym">GNU</acronym> - General Public License. - </p><p> - “Copyright” also means copyright-like laws that apply to other - kinds of works, such as semiconductor masks. - </p><p> - “The Program” refers to any copyrightable work licensed under - this License. Each licensee is addressed as “you”. - “Licensees” and “recipients” may be individuals or - organizations. - </p><p> - To “modify” a work means to copy from or adapt all or part of - the work in a fashion requiring copyright permission, other than the making - of an exact copy. The resulting work is called a “modified - version” of the earlier work or a work “based on” the - earlier work. - </p><p> - A “covered work” means either the unmodified Program or a work - based on the Program. - </p><p> - To “propagate” a work means to do anything with it that, without - permission, would make you directly or secondarily liable for infringement - under applicable copyright law, except executing it on a computer or - modifying a private copy. Propagation includes copying, distribution (with - or without modification), making available to the public, and in some - countries other activities as well. - </p><p> - To “convey” a work means any kind of propagation that enables - other parties to make or receive copies. Mere interaction with a user - through a computer network, with no transfer of a copy, is not conveying. - </p><p> - An interactive user interface displays “Appropriate Legal - Notices” to the extent that it includes a convenient and prominently - visible feature that (1) displays an appropriate copyright notice, and (2) - tells the user that there is no warranty for the work (except to the extent - that warranties are provided), that licensees may convey the work under this - License, and how to view a copy of this License. If the interface presents - a list of user commands or options, such as a menu, a prominent item in the - list meets this criterion. - </p><h2><a name="id394004"></a> - 1. Source Code. - </h2><p> - The “source code” for a work means the preferred form of the - work for making modifications to it. “Object code” means any - non-source form of a work. - </p><p> - A “Standard Interface” means an interface that either is an - official standard defined by a recognized standards body, or, in the case of - interfaces specified for a particular programming language, one that is - widely used among developers working in that language. - </p><p> - The “System Libraries” of an executable work include anything, - other than the work as a whole, that (a) is included in the normal form of - packaging a Major Component, but which is not part of that Major Component, - and (b) serves only to enable use of the work with that Major Component, or - to implement a Standard Interface for which an implementation is available - to the public in source code form. A “Major Component”, in this - context, means a major essential component (kernel, window system, and so - on) of the specific operating system (if any) on which the executable work - runs, or a compiler used to produce the work, or an object code interpreter - used to run it. - </p><p> - The “Corresponding Source” for a work in object code form means - all the source code needed to generate, install, and (for an executable - work) run the object code and to modify the work, including scripts to - control those activities. However, it does not include the work’s - System Libraries, or general-purpose tools or generally available free - programs which are used unmodified in performing those activities but which - are not part of the work. For example, Corresponding Source includes - interface definition files associated with source files for the work, and - the source code for shared libraries and dynamically linked subprograms that - the work is specifically designed to require, such as by intimate data - communication or control flow between those subprograms and other parts of - the work. - </p><p> - The Corresponding Source need not include anything that users can regenerate - automatically from other parts of the Corresponding Source. - </p><p> - The Corresponding Source for a work in source code form is that same work. - </p><h2><a name="id394066"></a> - 2. Basic Permissions. - </h2><p> - All rights granted under this License are granted for the term of copyright - on the Program, and are irrevocable provided the stated conditions are met. - This License explicitly affirms your unlimited permission to run the - unmodified Program. The output from running a covered work is covered by - this License only if the output, given its content, constitutes a covered - work. This License acknowledges your rights of fair use or other - equivalent, as provided by copyright law. - </p><p> - You may make, run and propagate covered works that you do not convey, - without conditions so long as your license otherwise remains in force. You - may convey covered works to others for the sole purpose of having them make - modifications exclusively for you, or provide you with facilities for - running those works, provided that you comply with the terms of this License - in conveying all material for which you do not control copyright. Those - thus making or running the covered works for you must do so exclusively on - your behalf, under your direction and control, on terms that prohibit them - from making any copies of your copyrighted material outside their - relationship with you. - </p><p> - Conveying under any other circumstances is permitted solely under the - conditions stated below. Sublicensing is not allowed; section 10 makes it - unnecessary. - </p><h2><a name="id394094"></a> - 3. Protecting Users’ Legal Rights From Anti-Circumvention Law. - </h2><p> - No covered work shall be deemed part of an effective technological measure - under any applicable law fulfilling obligations under article 11 of the WIPO - copyright treaty adopted on 20 December 1996, or similar laws prohibiting or - restricting circumvention of such measures. - </p><p> - When you convey a covered work, you waive any legal power to forbid - circumvention of technological measures to the extent such circumvention is - effected by exercising rights under this License with respect to the covered - work, and you disclaim any intention to limit operation or modification of - the work as a means of enforcing, against the work’s users, your or - third parties’ legal rights to forbid circumvention of technological - measures. - </p><h2><a name="id394116"></a> - 4. Conveying Verbatim Copies. - </h2><p> - You may convey verbatim copies of the Program’s source code as you - receive it, in any medium, provided that you conspicuously and appropriately - publish on each copy an appropriate copyright notice; keep intact all - notices stating that this License and any non-permissive terms added in - accord with section 7 apply to the code; keep intact all notices of the - absence of any warranty; and give all recipients a copy of this License - along with the Program. - </p><p> - You may charge any price or no price for each copy that you convey, and you - may offer support or warranty protection for a fee. - </p><h2><a name="id394135"></a> - 5. Conveying Modified Source Versions. - </h2><p> - You may convey a work based on the Program, or the modifications to produce - it from the Program, in the form of source code under the terms of section - 4, provided that you also meet all of these conditions: - </p><div class="orderedlist"><ol class="orderedlist" type="a"><li class="listitem"><p> - The work must carry prominent notices stating that you modified it, and - giving a relevant date. - </p></li><li class="listitem"><p> - The work must carry prominent notices stating that it is released under - this License and any conditions added under section 7. This requirement - modifies the requirement in section 4 to “keep intact all - notices”. - </p></li><li class="listitem"><p> - You must license the entire work, as a whole, under this License to - anyone who comes into possession of a copy. This License will therefore - apply, along with any applicable section 7 additional terms, to the - whole of the work, and all its parts, regardless of how they are - packaged. This License gives no permission to license the work in any - other way, but it does not invalidate such permission if you have - separately received it. - </p></li><li class="listitem"><p> - If the work has interactive user interfaces, each must display - Appropriate Legal Notices; however, if the Program has interactive - interfaces that do not display Appropriate Legal Notices, your work need - not make them do so. - </p></li></ol></div><p> - A compilation of a covered work with other separate and independent works, - which are not by their nature extensions of the covered work, and which are - not combined with it such as to form a larger program, in or on a volume of - a storage or distribution medium, is called an “aggregate” if - the compilation and its resulting copyright are not used to limit the access - or legal rights of the compilation’s users beyond what the individual works - permit. Inclusion of a covered work in an aggregate does not cause - this License to apply to the other parts of the aggregate. - </p><h2><a name="id394207"></a> - 6. Conveying Non-Source Forms. - </h2><p> - You may convey a covered work in object code form under the terms of - sections 4 and 5, provided that you also convey the machine-readable - Corresponding Source under the terms of this License, in one of these ways: - </p><div class="orderedlist"><ol class="orderedlist" type="a"><li class="listitem"><p> - Convey the object code in, or embodied in, a physical product (including - a physical distribution medium), accompanied by the Corresponding Source - fixed on a durable physical medium customarily used for software - interchange. - </p></li><li class="listitem"><p> - Convey the object code in, or embodied in, a physical product (including - a physical distribution medium), accompanied by a written offer, valid - for at least three years and valid for as long as you offer spare parts - or customer support for that product model, to give anyone who possesses - the object code either (1) a copy of the Corresponding Source for all - the software in the product that is covered by this License, on a - durable physical medium customarily used for software interchange, for a - price no more than your reasonable cost of physically performing this - conveying of source, or (2) access to copy the Corresponding Source from - a network server at no charge. - </p></li><li class="listitem"><p> - Convey individual copies of the object code with a copy of the written - offer to provide the Corresponding Source. This alternative is allowed - only occasionally and noncommercially, and only if you received the - object code with such an offer, in accord with subsection 6b. - </p></li><li class="listitem"><p> - Convey the object code by offering access from a designated place - (gratis or for a charge), and offer equivalent access to the - Corresponding Source in the same way through the same place at no - further charge. You need not require recipients to copy the - Corresponding Source along with the object code. If the place to copy - the object code is a network server, the Corresponding Source may be on - a different server (operated by you or a third party) that supports - equivalent copying facilities, provided you maintain clear directions - next to the object code saying where to find the Corresponding Source. - Regardless of what server hosts the Corresponding Source, you remain - obligated to ensure that it is available for as long as needed to - satisfy these requirements. - </p></li><li class="listitem"><p> - Convey the object code using peer-to-peer transmission, provided you - inform other peers where the object code and Corresponding Source of the - work are being offered to the general public at no charge under - subsection 6d. - </p></li></ol></div><p> - A separable portion of the object code, whose source code is excluded from - the Corresponding Source as a System Library, need not be included in - conveying the object code work. - </p><p> - A “User Product” is either (1) a “consumer product”, - which means any tangible personal property which is normally used for - personal, family, or household purposes, or (2) anything designed or sold - for incorporation into a dwelling. In determining whether a product is a - consumer product, doubtful cases shall be resolved in favor of coverage. - For a particular product received by a particular user, “normally - used” refers to a typical or common use of that class of product, - regardless of the status of the particular user or of the way in which the - particular user actually uses, or expects or is expected to use, the - product. A product is a consumer product regardless of whether the product - has substantial commercial, industrial or non-consumer uses, unless such - uses represent the only significant mode of use of the product. - </p><p> - “Installation Information” for a User Product means any methods, - procedures, authorization keys, or other information required to install and - execute modified versions of a covered work in that User Product from a - modified version of its Corresponding Source. The information must suffice - to ensure that the continued functioning of the modified object code is in - no case prevented or interfered with solely because modification has been - made. - </p><p> - If you convey an object code work under this section in, or with, or - specifically for use in, a User Product, and the conveying occurs as part of - a transaction in which the right of possession and use of the User Product - is transferred to the recipient in perpetuity or for a fixed term - (regardless of how the transaction is characterized), the Corresponding - Source conveyed under this section must be accompanied by the Installation - Information. But this requirement does not apply if neither you nor any - third party retains the ability to install modified object code on the User - Product (for example, the work has been installed in - <acronym class="acronym">ROM</acronym>). - </p><p> - The requirement to provide Installation Information does not include a - requirement to continue to provide support service, warranty, or updates for - a work that has been modified or installed by the recipient, or for the User - Product in which it has been modified or installed. Access to a network may - be denied when the modification itself materially and adversely affects the - operation of the network or violates the rules and protocols for - communication across the network. - </p><p> - Corresponding Source conveyed, and Installation Information provided, in - accord with this section must be in a format that is publicly documented - (and with an implementation available to the public in source code form), - and must require no special password or key for unpacking, reading or - copying. - </p><h2><a name="id394339"></a> - 7. Additional Terms. - </h2><p> - “Additional permissions” are terms that supplement the terms of - this License by making exceptions from one or more of its conditions. - Additional permissions that are applicable to the entire Program shall be - treated as though they were included in this License, to the extent that - they are valid under applicable law. If additional permissions apply only - to part of the Program, that part may be used separately under those - permissions, but the entire Program remains governed by this License - without regard to the additional permissions. - </p><p> - When you convey a copy of a covered work, you may at your option remove any - additional permissions from that copy, or from any part of it. (Additional - permissions may be written to require their own removal in certain cases - when you modify the work.) You may place additional permissions on - material, added by you to a covered work, for which you have or can give - appropriate copyright permission. - </p><p> - Notwithstanding any other provision of this License, for material you add - to a covered work, you may (if authorized by the copyright holders of that - material) supplement the terms of this License with terms: - </p><div class="orderedlist"><ol class="orderedlist" type="a"><li class="listitem"><p> - Disclaiming warranty or limiting liability differently from the terms - of sections 15 and 16 of this License; or - </p></li><li class="listitem"><p> - Requiring preservation of specified reasonable legal notices or author - attributions in that material or in the Appropriate Legal Notices - displayed by works containing it; or - </p></li><li class="listitem"><p> - Prohibiting misrepresentation of the origin of that material, or - requiring that modified versions of such material be marked in - reasonable ways as different from the original version; or - </p></li><li class="listitem"><p> - Limiting the use for publicity purposes of names of licensors or - authors of the material; or - </p></li><li class="listitem"><p> - Declining to grant rights under trademark law for use of some trade - names, trademarks, or service marks; or - </p></li><li class="listitem"><p> - Requiring indemnification of licensors and authors of that material by - anyone who conveys the material (or modified versions of it) with - contractual assumptions of liability to the recipient, for any - liability that these contractual assumptions directly impose on those - licensors and authors. - </p></li></ol></div><p> - All other non-permissive additional terms are considered “further - restrictions” within the meaning of section 10. If the Program as - you received it, or any part of it, contains a notice stating that it is - governed by this License along with a term that is a further restriction, - you may remove that term. If a license document contains a further - restriction but permits relicensing or conveying under this License, you - may add to a covered work material governed by the terms of that license - document, provided that the further restriction does not survive such - relicensing or conveying. - </p><p> - If you add terms to a covered work in accord with this section, you must - place, in the relevant source files, a statement of the additional terms - that apply to those files, or a notice indicating where to find the - applicable terms. - </p><p> - Additional terms, permissive or non-permissive, may be stated in the form - of a separately written license, or stated as exceptions; the above - requirements apply either way. - </p><h2><a name="id394444"></a> - 8. Termination. - </h2><p> - You may not propagate or modify a covered work except as expressly provided - under this License. Any attempt otherwise to propagate or modify it is - void, and will automatically terminate your rights under this License - (including any patent licenses granted under the third paragraph of section - 11). - </p><p> - However, if you cease all violation of this License, then your license from - a particular copyright holder is reinstated (a) provisionally, unless and - until the copyright holder explicitly and finally terminates your license, - and (b) permanently, if the copyright holder fails to notify you of the - violation by some reasonable means prior to 60 days after the cessation. - </p><p> - Moreover, your license from a particular copyright holder is reinstated - permanently if the copyright holder notifies you of the violation by some - reasonable means, this is the first time you have received notice of - violation of this License (for any work) from that copyright holder, and - you cure the violation prior to 30 days after your receipt of the notice. - </p><p> - Termination of your rights under this section does not terminate the - licenses of parties who have received copies or rights from you under this - License. If your rights have been terminated and not permanently - reinstated, you do not qualify to receive new licenses for the same - material under section 10. - </p><h2><a name="id394476"></a> - 9. Acceptance Not Required for Having Copies. - </h2><p> - You are not required to accept this License in order to receive or run a - copy of the Program. Ancillary propagation of a covered work occurring - solely as a consequence of using peer-to-peer transmission to receive a - copy likewise does not require acceptance. However, nothing other than - this License grants you permission to propagate or modify any covered work. - These actions infringe copyright if you do not accept this License. - Therefore, by modifying or propagating a covered work, you indicate your - acceptance of this License to do so. - </p><h2><a name="id394495"></a> - 10. Automatic Licensing of Downstream Recipients. - </h2><p> - Each time you convey a covered work, the recipient automatically receives a - license from the original licensors, to run, modify and propagate that - work, subject to this License. You are not responsible for enforcing - compliance by third parties with this License. - </p><p> - An “entity transaction” is a transaction transferring control - of an organization, or substantially all assets of one, or subdividing an - organization, or merging organizations. If propagation of a covered work - results from an entity transaction, each party to that transaction who - receives a copy of the work also receives whatever licenses to the work the - party’s predecessor in interest had or could give under the previous - paragraph, plus a right to possession of the Corresponding Source of the - work from the predecessor in interest, if the predecessor has it or can get - it with reasonable efforts. - </p><p> - You may not impose any further restrictions on the exercise of the rights - granted or affirmed under this License. For example, you may not impose a - license fee, royalty, or other charge for exercise of rights granted under - this License, and you may not initiate litigation (including a cross-claim - or counterclaim in a lawsuit) alleging that any patent claim is infringed - by making, using, selling, offering for sale, or importing the Program or - any portion of it. - </p><h2><a name="id394529"></a> - 11. Patents. - </h2><p> - A “contributor” is a copyright holder who authorizes use under - this License of the Program or a work on which the Program is based. The - work thus licensed is called the contributor’s “contributor - version”. - </p><p> - A contributor’s “essential patent claims” are all patent - claims owned or controlled by the contributor, whether already acquired or - hereafter acquired, that would be infringed by some manner, permitted by - this License, of making, using, or selling its contributor version, but do - not include claims that would be infringed only as a consequence of further - modification of the contributor version. For purposes of this definition, - “control” includes the right to grant patent sublicenses in a - manner consistent with the requirements of this License. - </p><p> - Each contributor grants you a non-exclusive, worldwide, royalty-free patent - license under the contributor’s essential patent claims, to make, use, - sell, offer for sale, import and otherwise run, modify and propagate the - contents of its contributor version. - </p><p> - In the following three paragraphs, a “patent license” is any - express agreement or commitment, however denominated, not to enforce a - patent (such as an express permission to practice a patent or covenant not - to sue for patent infringement). To “grant” such a patent - license to a party means to make such an agreement or commitment not to - enforce a patent against the party. - </p><p> - If you convey a covered work, knowingly relying on a patent license, and the - Corresponding Source of the work is not available for anyone to copy, free - of charge and under the terms of this License, through a publicly available - network server or other readily accessible means, then you must either (1) - cause the Corresponding Source to be so available, or (2) arrange to deprive - yourself of the benefit of the patent license for this particular work, or - (3) arrange, in a manner consistent with the requirements of this License, - to extend the patent license to downstream recipients. “Knowingly - relying” means you have actual knowledge that, but for the patent - license, your conveying the covered work in a country, or your - recipient’s use of the covered work in a country, would infringe one - or more identifiable patents in that country that you have reason to believe - are valid. - </p><p> - If, pursuant to or in connection with a single transaction or arrangement, - you convey, or propagate by procuring conveyance of, a covered work, and - grant a patent license to some of the parties receiving the covered work - authorizing them to use, propagate, modify or convey a specific copy of the - covered work, then the patent license you grant is automatically extended to - all recipients of the covered work and works based on it. - </p><p> - A patent license is “discriminatory” if it does not include - within the scope of its coverage, prohibits the exercise of, or is - conditioned on the non-exercise of one or more of the rights that are - specifically granted under this License. You may not convey a covered work - if you are a party to an arrangement with a third party that is in the - business of distributing software, under which you make payment to the third - party based on the extent of your activity of conveying the work, and under - which the third party grants, to any of the parties who would receive the - covered work from you, a discriminatory patent license (a) in connection - with copies of the covered work conveyed by you (or copies made from those - copies), or (b) primarily for and in connection with specific products or - compilations that contain the covered work, unless you entered into that - arrangement, or that patent license was granted, prior to 28 March 2007. - </p><p> - Nothing in this License shall be construed as excluding or limiting any - implied license or other defenses to infringement that may otherwise be - available to you under applicable patent law. - </p><h2><a name="id394618"></a> - 12. No Surrender of Others’ Freedom. - </h2><p> - If conditions are imposed on you (whether by court order, agreement or - otherwise) that contradict the conditions of this License, they do not - excuse you from the conditions of this License. If you cannot convey a - covered work so as to satisfy simultaneously your obligations under this - License and any other pertinent obligations, then as a consequence you may - not convey it at all. For example, if you agree to terms that obligate you - to collect a royalty for further conveying from those to whom you convey the - Program, the only way you could satisfy both those terms and this License - would be to refrain entirely from conveying the Program. - </p><h2><a name="id394633"></a> - 13. Use with the <acronym class="acronym">GNU</acronym> Affero General Public License. - </h2><p> - Notwithstanding any other provision of this License, you have permission to - link or combine any covered work with a work licensed under version 3 of the - <acronym class="acronym">GNU</acronym> Affero General Public License into a single combined - work, and to convey the resulting work. The terms of this License will - continue to apply to the part which is the covered work, but the special - requirements of the <acronym class="acronym">GNU</acronym> Affero General Public License, - section 13, concerning interaction through a network will apply to the - combination as such. - </p><h2><a name="id394657"></a> - 14. Revised Versions of this License. - </h2><p> - The Free Software Foundation may publish revised and/or new versions of the - <acronym class="acronym">GNU</acronym> General Public License from time to time. Such new - versions will be similar in spirit to the present version, but may differ in - detail to address new problems or concerns. - </p><p> - Each version is given a distinguishing version number. If the Program - specifies that a certain numbered version of the <acronym class="acronym">GNU</acronym> - General Public License “or any later version” applies to it, you - have the option of following the terms and conditions either of that - numbered version or of any later version published by the Free Software - Foundation. If the Program does not specify a version number of the - <acronym class="acronym">GNU</acronym> General Public License, you may choose any version - ever published by the Free Software Foundation. - </p><p> - If the Program specifies that a proxy can decide which future versions of - the <acronym class="acronym">GNU</acronym> General Public License can be used, that - proxy’s public statement of acceptance of a version permanently - authorizes you to choose that version for the Program. - </p><p> - Later license versions may give you additional or different permissions. - However, no additional obligations are imposed on any author or copyright - holder as a result of your choosing to follow a later version. - </p><h2><a name="id394704"></a> - 15. Disclaimer of Warranty. - </h2><p> - THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE - LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR - OTHER PARTIES PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF - ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE - IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. - THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH - YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL - NECESSARY SERVICING, REPAIR OR CORRECTION. - </p><h2><a name="id394722"></a> - 16. Limitation of Liability. - </h2><p> - IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL - ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE - PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY - GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE - OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA - OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD - PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), - EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF - SUCH DAMAGES. - </p><h2><a name="id394736"></a> - 17. Interpretation of Sections 15 and 16. - </h2><p> - If the disclaimer of warranty and limitation of liability provided above - cannot be given local legal effect according to their terms, reviewing - courts shall apply local law that most closely approximates an absolute - waiver of all civil liability in connection with the Program, unless a - warranty or assumption of liability accompanies a copy of the Program in - return for a fee. - </p><h2><a name="id394749"></a> - END OF TERMS AND CONDITIONS - </h2><h2><a name="id394752"></a> - How to Apply These Terms to Your New Programs - </h2><p> - If you develop a new program, and you want it to be of the greatest possible - use to the public, the best way to achieve this is to make it free software - which everyone can redistribute and change under these terms. - </p><p> - To do so, attach the following notices to the program. It is safest to - attach them to the start of each source file to most effectively state the - exclusion of warranty; and each file should have at least the - “copyright” line and a pointer to where the full notice is - found. - </p><pre class="screen"> -<em class="replaceable"><code>one line to give the program’s name and a brief idea of what it does.</code></em> -Copyright (C) <em class="replaceable"><code>year</code></em> <em class="replaceable"><code>name of author</code></em> - -This program is free software: you can redistribute it and/or modify -it under the terms of the <acronym class="acronym">GNU</acronym> General Public License as published by -the Free Software Foundation, either version 3 of the License, or -(at your option) any later version. - -This program is distributed in the hope that it will be useful, -but WITHOUT ANY WARRANTY; without even the implied warranty of -MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -<acronym class="acronym">GNU</acronym> General Public License for more details. - -You should have received a copy of the <acronym class="acronym">GNU</acronym> General Public License -along with this program. If not, see <a class="ulink" href="http://www.gnu.org/licenses/" target="_top">http://www.gnu.org/licenses/</a>. - </pre><p> - Also add information on how to contact you by electronic and paper mail. - </p><p> - If the program does terminal interaction, make it output a short notice like - this when it starts in an interactive mode: - </p><pre class="screen"> -<em class="replaceable"><code>program</code></em> Copyright (C) <em class="replaceable"><code>year</code></em> <em class="replaceable"><code>name of author</code></em> -This program comes with ABSOLUTELY NO WARRANTY; for details type ‘<code class="literal">show w</code>’. -This is free software, and you are welcome to redistribute it -under certain conditions; type ‘<code class="literal">show c</code>’ for details. - </pre><p> - The hypothetical commands ‘<code class="literal">show w</code>’ and - ‘<code class="literal">show c</code>’ should show the appropriate parts of - the General Public License. Of course, your program’s commands might be - different; for a GUI interface, you would use an “about box”. - </p><p> - You should also get your employer (if you work as a programmer) or school, - if any, to sign a “copyright disclaimer” for the program, if - necessary. For more information on this, and how to apply and follow the - <acronym class="acronym">GNU</acronym> <acronym class="acronym">GPL</acronym>, see <a class="ulink" href="http://www.gnu.org/licenses/" target="_top">http://www.gnu.org/licenses/</a>. - </p><p> - The <acronym class="acronym">GNU</acronym> General Public License does not permit - incorporating your program into proprietary programs. If your program is a - subroutine library, you may consider it more useful to permit linking - proprietary applications with the library. If this is what you want to do, - use the <acronym class="acronym">GNU</acronym> Lesser General Public License instead of this - License. But first, please read <a class="ulink" href="http://www.gnu.org/philosophy/why-not-lgpl.html" target="_top">http://www.gnu.org/philosophy/why-not-lgpl.html</a>. - </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="primer.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="go01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 16. Networking Primer </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Glossary</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/appendix.html b/docs/htmldocs/Samba3-ByExample/appendix.html deleted file mode 100644 index 88e5fc2e48..0000000000 --- a/docs/htmldocs/Samba3-ByExample/appendix.html +++ /dev/null @@ -1,1065 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 15. A Collection of Useful Tidbits</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="ch14.html" title="Chapter 14. Samba Support"><link rel="next" href="primer.html" title="Chapter 16. Networking Primer"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 15. A Collection of Useful Tidbits</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ch14.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="primer.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 15. A Collection of Useful Tidbits"><div class="titlepage"><div><div><h2 class="title"><a name="appendix"></a>Chapter 15. A Collection of Useful Tidbits</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></span></dt><dt><span class="sect1"><a href="appendix.html#id387559">Samba System File Location</a></span></dt><dt><span class="sect1"><a href="appendix.html#id387952">Starting Samba</a></span></dt><dt><span class="sect1"><a href="appendix.html#id388254">DNS Configuration Files</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id388264">The Forward Zone File for the Loopback Adaptor</a></span></dt><dt><span class="sect2"><a href="appendix.html#id388308">The Reverse Zone File for the Loopback Adaptor</a></span></dt><dt><span class="sect2"><a href="appendix.html#id388408">DNS Root Server Hint File</a></span></dt></dl></dd><dt><span class="sect1"><a href="appendix.html#altldapcfg">Alternative LDAP Database Initialization</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id388463">Initialization of the LDAP Database</a></span></dt></dl></dd><dt><span class="sect1"><a href="appendix.html#id388919">The LDAP Account Manager</a></span></dt><dt><span class="sect1"><a href="appendix.html#id389839">IDEALX Management Console</a></span></dt><dt><span class="sect1"><a href="appendix.html#ch12-SUIDSGID">Effect of Setting File and Directory SUID/SGID Permissions Explained</a></span></dt><dt><span class="sect1"><a href="appendix.html#ch12dblck">Shared Data Integrity</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id390270">Microsoft Access</a></span></dt><dt><span class="sect2"><a href="appendix.html#id390409">Act! Database Sharing</a></span></dt><dt><span class="sect2"><a href="appendix.html#id390484">Opportunistic Locking Controls</a></span></dt></dl></dd></dl></div><p> - <a class="indexterm" name="id387011"></a> - <a class="indexterm" name="id387018"></a> - Information presented here is considered to be either basic or well-known material that is informative - yet helpful. Over the years, I have observed an interesting behavior. There is an expectation that - the process for joining a Windows client to a Samba-controlled Windows domain may somehow involve steps - different from doing so with Windows NT4 or a Windows ADS domain. Be assured that the steps are identical, - as shown in the example given below. - </p><div class="sect1" title="Joining a Domain: Windows 200x/XP Professional"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="domjoin"></a>Joining a Domain: Windows 200x/XP Professional</h2></div></div></div><p> - <a class="indexterm" name="id387044"></a> - Microsoft Windows NT/200x/XP Professional platforms can participate in Domain Security. - This section steps through the process for making a Windows 200x/XP Professional machine a - member of a Domain Security environment. It should be noted that this process is identical - when joining a domain that is controlled by Windows NT4/200x as well as a Samba PDC. - </p><div class="procedure" title="Procedure 15.1. Steps to Join a Domain"><a name="id387055"></a><p class="title"><b>Procedure 15.1. Steps to Join a Domain</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Click <span class="guimenu">Start</span>. - </p></li><li class="step" title="Step 2"><p> - Right-click <span class="guimenu">My Computer</span>, and then select <span class="guimenuitem">Properties</span>. - </p></li><li class="step" title="Step 3"><p> - The opening panel is the same one that can be reached by clicking <span class="guimenu">System</span> on the Control Panel. - See <a class="link" href="appendix.html#swxpp001" title="Figure 15.1. The General Panel.">“The General Panel.”</a>. - </p><div class="figure"><a name="swxpp001"></a><p class="title"><b>Figure 15.1. The General Panel.</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/wxpp001.png" alt="The General Panel."></div></div></div><p><br class="figure-break"> - </p></li><li class="step" title="Step 4"><p> - Click the <span class="guimenu">Computer Name</span> tab. - This panel shows the <span class="guimenuitem">Computer Description</span>, the <span class="guimenuitem">Full computer name</span>, - and the <span class="guimenuitem">Workgroup</span> or <span class="guimenuitem">Domain name</span>. - </p><p> - Clicking the <span class="guimenu">Network ID</span> button launches the configuration wizard. Do not use this with - Samba-3. If you wish to change the computer name, or join or leave the domain, click the <span class="guimenu">Change</span> button. - See <a class="link" href="appendix.html#swxpp004" title="Figure 15.2. The Computer Name Panel.">“The Computer Name Panel.”</a>. - </p><div class="figure"><a name="swxpp004"></a><p class="title"><b>Figure 15.2. The Computer Name Panel.</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/wxpp004.png" alt="The Computer Name Panel."></div></div></div><p><br class="figure-break"> - </p></li><li class="step" title="Step 5"><p> - Click on <span class="guimenu">Change</span>. This panel shows that our example machine (TEMPTATION) is in a workgroup called WORKGROUP. - We join the domain called MIDEARTH. See <a class="link" href="appendix.html#swxpp006" title="Figure 15.3. The Computer Name Changes Panel">“The Computer Name Changes Panel”</a>. - </p><div class="figure"><a name="swxpp006"></a><p class="title"><b>Figure 15.3. The Computer Name Changes Panel</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/wxpp006.png" alt="The Computer Name Changes Panel"></div></div></div><p><br class="figure-break"> - </p></li><li class="step" title="Step 6"><p> - Enter the name <span class="guimenu">MIDEARTH</span> in the field below the Domain radio button. - </p><p> - This panel shows that our example machine (TEMPTATION) is set to join the domain called MIDEARTH. See <a class="link" href="appendix.html#swxpp007" title="Figure 15.4. The Computer Name Changes Panel Domain MIDEARTH">“The Computer Name Changes Panel Domain MIDEARTH”</a>. - </p><div class="figure"><a name="swxpp007"></a><p class="title"><b>Figure 15.4. The Computer Name Changes Panel Domain MIDEARTH</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/wxpp007.png" alt="The Computer Name Changes Panel Domain MIDEARTH"></div></div></div><p><br class="figure-break"> - </p></li><li class="step" title="Step 7"><p> - Now click the <span class="guimenu">OK</span> button. A dialog box should appear to allow you to provide the credentials (username and password) - of a domain administrative account that has the rights to add machines to the domain. - </p><p> - Enter the name <span class="quote">“<span class="quote">root</span>”</span> and the root password from your Samba-3 server. See <a class="link" href="appendix.html#swxpp008" title="Figure 15.5. Computer Name Changes User name and Password Panel">“Computer Name Changes User name and Password Panel”</a>. - </p><div class="figure"><a name="swxpp008"></a><p class="title"><b>Figure 15.5. Computer Name Changes User name and Password Panel</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/wxpp008.png" alt="Computer Name Changes User name and Password Panel"></div></div></div><p><br class="figure-break"> - </p></li><li class="step" title="Step 8"><p> - Click <span class="guimenu">OK</span>. - </p><p> - The <span class="quote">“<span class="quote">Welcome to the MIDEARTH domain</span>”</span> dialog box should appear. At this point, the machine must be rebooted. - Joining the domain is now complete. - </p></li></ol></div><p> - <a class="indexterm" name="id387460"></a> - <a class="indexterm" name="id387466"></a> - The screen capture shown in <a class="link" href="appendix.html#swxpp007" title="Figure 15.4. The Computer Name Changes Panel Domain MIDEARTH">“The Computer Name Changes Panel Domain MIDEARTH”</a> has a button labeled <span class="guimenu">More...</span>. This button opens a - panel in which you can set (or change) the Primary DNS suffix of the computer. This is a parameter that mainly affects members - of Microsoft Active Directory. Active Directory is heavily oriented around the DNS namespace. - </p><p> - <a class="indexterm" name="id387490"></a> - <a class="indexterm" name="id387497"></a> - Where NetBIOS technology uses WINS as well as UDP broadcast as key mechanisms for name resolution, Active Directory servers - register their services with the Microsoft Dynamic DNS server. Windows clients must be able to query the correct DNS server - to find the services (like which machines are domain controllers or which machines have the Netlogon service running). - </p><p> - <a class="indexterm" name="id387512"></a> - The default setting of the Primary DNS suffix is the Active Directory domain name. When you change the Primary DNS suffix, - this does not affect domain membership, but it can break network browsing and the ability to resolve your computer name to - a valid IP address. - </p><p> - The Primary DNS suffix parameter principally affects MS Windows clients that are members of an Active Directory domain. - Where the client is a member of a Samba domain, it is preferable to leave this field blank. - </p><p> - <a class="indexterm" name="id387534"></a> - According to Microsoft documentation, <span class="quote">“<span class="quote">If this computer belongs to a group with <code class="constant">Group Policy</code> - enabled on <code class="literal">Primary DNS suffice of this computer</code>, the string specified in the Group Policy is used - as the primary DNS suffix and you might need to restart your computer to view the correct setting. The local setting is - used only if Group Policy is disabled or unspecified.</span>”</span> - </p></div><div class="sect1" title="Samba System File Location"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id387559"></a>Samba System File Location</h2></div></div></div><p><a class="indexterm" name="id387566"></a><a class="indexterm" name="id387574"></a><a class="indexterm" name="id387581"></a> - One of the frustrations expressed by subscribers to the Samba mailing lists revolves around the choice of where the default Samba Team - build and installation process locates its Samba files. The location, chosen in the early 1990s, for the default installation is - in the <code class="filename">/usr/local/samba</code> directory. This is a perfectly reasonable location, particularly given all the other - Open Source software that installs into the <code class="filename">/usr/local</code> subdirectories. - </p><p> - Several UNIX vendors, and Linux vendors in particular, elected to locate the Samba files in a location other than the Samba Team - default. - </p><p><a class="indexterm" name="id387612"></a><a class="indexterm" name="id387624"></a><a class="indexterm" name="id387631"></a><a class="indexterm" name="id387643"></a><a class="indexterm" name="id387650"></a><a class="indexterm" name="id387662"></a><a class="indexterm" name="id387670"></a><a class="indexterm" name="id387677"></a><a class="indexterm" name="id387685"></a><a class="indexterm" name="id387693"></a><a class="indexterm" name="id387701"></a><a class="indexterm" name="id387709"></a><a class="indexterm" name="id387717"></a><a class="indexterm" name="id387725"></a><a class="indexterm" name="id387732"></a><a class="indexterm" name="id387740"></a> - Linux vendors, working in conjunction with the Free Standards Group (FSG), Linux Standards Base (LSB), and File Hierarchy - System (FHS), have elected to locate the configuration files under the <code class="filename">/etc/samba</code> directory, common binary - files (those used by users) in the <code class="filename">/usr/bin</code> directory, and the administrative files (daemons) in the - <code class="filename">/usr/sbin</code> directory. Support files for the Samba Web Admin Tool (SWAT) are located under the - <code class="filename">/usr/share</code> directory, either in <code class="filename">/usr/share/samba/swat</code> or in - <code class="filename">/usr/share/swat</code>. There are additional support files for <code class="literal">smbd</code> in the - <code class="filename">/usr/lib/samba</code> directory tree. The files located there include the dynamically loadable modules for the - passdb backend as well as for the VFS modules. - </p><p><a class="indexterm" name="id387804"></a><a class="indexterm" name="id387812"></a><a class="indexterm" name="id387820"></a> - Samba creates runtime control files and generates log files. The runtime control files (tdb and dat files) are stored in - the <code class="filename">/var/lib/samba</code> directory. Log files are created in <code class="filename">/var/log/samba.</code> - </p><p> - When Samba is built and installed using the default Samba Team process, all files are located under the - <code class="filename">/usr/local/samba</code> directory tree. This makes it simple to find the files that Samba owns. - </p><p><a class="indexterm" name="id387854"></a> - One way to find the Samba files that are installed on your UNIX/Linux system is to search for the location - of all files called <code class="literal">smbd</code>. Here is an example: -</p><pre class="screen"> -<code class="prompt">root# </code> find / -name smbd -print -</pre><p> - You can find the location of the configuration files by running: -</p><pre class="screen"> -<code class="prompt">root# </code> /path-to-binary-file/smbd -b | more -... -Paths: - SBINDIR: /usr/sbin - BINDIR: /usr/bin - SWATDIR: /usr/share/samba/swat - CONFIGFILE: /etc/samba/smb.conf - LOGFILEBASE: /var/log/samba - LMHOSTSFILE: /etc/samba/lmhosts - LIBDIR: /usr/lib/samba - SHLIBEXT: so - LOCKDIR: /var/lib/samba - PIDDIR: /var/run/samba - SMB_PASSWD_FILE: /etc/samba/smbpasswd - PRIVATE_DIR: /etc/samba -... -</pre><p> - If you wish to locate the Samba version, just run: -</p><pre class="screen"> -<code class="prompt">root# </code> /path-to-binary-file/smbd -V -Version 3.0.20-SUSE -</pre><p> - </p><p> - Many people have been caught by installation of Samba using the default Samba Team process when it was already installed - by the platform vendor's method. If your platform uses RPM format packages, you can check to see if Samba is installed by - executing:<a class="indexterm" name="id387919"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -qa | grep samba -samba3-pdb-3.0.20-1 -samba3-vscan-0.3.6-0 -samba3-winbind-3.0.20-1 -samba3-3.0.20-1 -samba3-python-3.0.20-1 -samba3-utils-3.0.20-1 -samba3-doc-3.0.20-1 -samba3-client-3.0.20-1 -samba3-cifsmount-3.0.20-1 - </pre><p><a class="indexterm" name="id387940"></a> - The package names, of course, vary according to how the vendor, or the binary package builder, prepared them. - </p></div><div class="sect1" title="Starting Samba"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id387952"></a>Starting Samba</h2></div></div></div><p><a class="indexterm" name="id387958"></a> - Samba essentially consists of two or three daemons. A daemon is a UNIX application that runs in the background and provides services. - An example of a service is the Apache Web server for which the daemon is called <code class="literal">httpd</code>. In the case of Samba, there - are three daemons, two of which are needed as a minimum. - </p><p> - The Samba server is made up of the following daemons: - </p><div class="example"><a name="ch12SL"></a><p class="title"><b>Example 15.1. A Useful Samba Control Script for SUSE Linux</b></p><div class="example-contents"><pre class="screen"> -#!/bin/bash -# -# Script to start/stop samba -# Locate this in /sbin as a file called 'samba' - -RCD=/etc/rc.d - -if [ z$1 == 'z' ]; then - echo $0 - No arguments given; must be start or stop. - exit -fi - -if [ $1 == 'start' ]; then - ${RCD}/nmb start - ${RCD}/smb start - ${RCD}/winbind start - -fi -if [ $1 == 'stop' ]; then - ${RCD}/smb stop - ${RCD}/winbind stop - ${RCD}/nmb stop -fi -if [ $1 == 'restart' ]; then - ${RCD}/smb stop - ${RCD}/winbind stop - ${RCD}/nmb stop - sleep 5 - ${RCD}/nmb start - ${RCD}/smb start - ${RCD}/winbind start -fi -exit 0 -</pre></div></div><br class="example-break"><div class="variablelist"><dl><dt><span class="term">nmbd</span></dt><dd><p> - <a class="indexterm" name="id388017"></a> - <a class="indexterm" name="id388024"></a> - This daemon handles all name registration and resolution requests. It is the primary vehicle involved - in network browsing. It handles all UDP-based protocols. The <code class="literal">nmbd</code> daemon should - be the first command started as part of the Samba startup process. - </p></dd><dt><span class="term">smbd</span></dt><dd><p> - <a class="indexterm" name="id388051"></a> - <a class="indexterm" name="id388058"></a> - This daemon handles all TCP/IP-based connection services for file- and print-based operations. It also - manages local authentication. It should be started immediately following the startup of <code class="literal">nmbd</code>. - </p></dd><dt><span class="term">winbindd</span></dt><dd><p> - <a class="indexterm" name="id388085"></a> - <a class="indexterm" name="id388092"></a> - This daemon should be started when Samba is a member of a Windows NT4 or ADS domain. It is also needed when - Samba has trust relationships with another domain. The <code class="literal">winbindd</code> daemon will check the - <code class="filename">smb.conf</code> file for the presence of the <em class="parameter"><code>idmap uid</code></em> and <em class="parameter"><code>idmap gid</code></em> - parameters. If they are not found, <code class="literal">winbindd</code> bails out and refuses to start. - </p></dd></dl></div><p> - When Samba has been packaged by an operating system vendor, the startup process is typically a custom feature of its - integration into the platform as a whole. Please refer to your operating system platform administration manuals for - specific information pertaining to correct management of Samba startup. - </p><div class="example"><a name="ch12RHscript"></a><p class="title"><b>Example 15.2. A Sample Samba Control Script for Red Hat Linux</b></p><div class="example-contents"><pre class="screen"> -#!/bin/sh -# -# chkconfig: 345 81 35 -# description: Starts and stops the Samba smbd and nmbd daemons \ -# used to provide SMB network services. - -# Source function library. -. /etc/rc.d/init.d/functions -# Source networking configuration. -. /etc/sysconfig/network -# Check that networking is up. -[ ${NETWORKING} = "no" ] && exit 0 -CONFIG=/etc/samba/smb.conf -# Check that smb.conf exists. -[ -f $CONFIG ] || exit 0 - -# See how we were called. -case "$1" in - start) - echo -n "Starting SMB services: " - daemon smbd -D; daemon nmbd -D; echo; - touch /var/lock/subsys/smb - ;; - stop) - echo -n "Shutting down SMB services: " - smbdpids=`ps guax | grep smbd | grep -v grep | awk '{print $2}'` - for pid in $smbdpids; do - kill -TERM $pid - done - killproc nmbd -TERM; rm -f /var/lock/subsys/smb - echo "" - ;; - status) - status smbd; status nmbd; - ;; - restart) - echo -n "Restarting SMB services: " - $0 stop; $0 start; - echo "done." - ;; - *) - echo "Usage: smb {start|stop|restart|status}" - exit 1 -esac -</pre></div></div><br class="example-break"><p><a class="indexterm" name="id388184"></a> - SUSE Linux implements individual control over each Samba daemon. A Samba control script that can be conveniently - executed from the command line is shown in <a class="link" href="appendix.html#ch12SL" title="Example 15.1. A Useful Samba Control Script for SUSE Linux">“A Useful Samba Control Script for SUSE Linux”</a>. This can be located in the directory - <code class="filename">/sbin</code> in a file called <code class="filename">samba</code>. This type of control script should be - owned by user root and group root, and set so that only root can execute it. - </p><p><a class="indexterm" name="id388216"></a> - A sample startup script for a Red Hat Linux system is shown in <a class="link" href="appendix.html#ch12RHscript" title="Example 15.2. A Sample Samba Control Script for Red Hat Linux">“A Sample Samba Control Script for Red Hat Linux”</a>. - This file could be located in the directory <code class="filename">/etc/rc.d</code> and can be called - <code class="filename">samba</code>. A similar startup script is required to control <code class="literal">winbind</code>. - If you want to find more information regarding startup scripts please refer to the packaging section of - the Samba source code distribution tarball. The packaging files for each platform include a - startup control file. - </p></div><div class="sect1" title="DNS Configuration Files"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id388254"></a>DNS Configuration Files</h2></div></div></div><p> - The following files are common to all DNS server configurations. Rather than repeat them multiple times, they - are presented here for general reference. - </p><div class="sect2" title="The Forward Zone File for the Loopback Adaptor"><div class="titlepage"><div><div><h3 class="title"><a name="id388264"></a>The Forward Zone File for the Loopback Adaptor</h3></div></div></div><p> - The forward zone file for the loopback address never changes. An example file is shown - in <a class="link" href="appendix.html#loopback" title="Example 15.3. DNS Localhost Forward Zone File: /var/lib/named/localhost.zone">“DNS Localhost Forward Zone File: /var/lib/named/localhost.zone”</a>. All traffic destined for an IP address that is hosted on a - physical interface on the machine itself is routed to the loopback adaptor. This is - a fundamental design feature of the TCP/IP protocol implementation. The loopback adaptor - is called <code class="constant">localhost</code>. - </p><div class="example"><a name="loopback"></a><p class="title"><b>Example 15.3. DNS Localhost Forward Zone File: <code class="filename">/var/lib/named/localhost.zone</code></b></p><div class="example-contents"><pre class="screen"> -$TTL 1W -@ IN SOA @ root ( - 42 ; serial - 2D ; refresh - 4H ; retry - 6W ; expiry - 1W ) ; minimum - - IN NS @ - IN A 127.0.0.1 -</pre></div></div><br class="example-break"></div><div class="sect2" title="The Reverse Zone File for the Loopback Adaptor"><div class="titlepage"><div><div><h3 class="title"><a name="id388308"></a>The Reverse Zone File for the Loopback Adaptor</h3></div></div></div><p> - The reverse zone file for the loopback address as shown in <a class="link" href="appendix.html#dnsloopy" title="Example 15.4. DNS Localhost Reverse Zone File: /var/lib/named/127.0.0.zone">“DNS Localhost Reverse Zone File: /var/lib/named/127.0.0.zone”</a> - is necessary so that references to the address <code class="constant">127.0.0.1</code> can be - resolved to the correct name of the interface. - </p><div class="example"><a name="dnsloopy"></a><p class="title"><b>Example 15.4. DNS Localhost Reverse Zone File: <code class="filename">/var/lib/named/127.0.0.zone</code></b></p><div class="example-contents"><pre class="screen"> -$TTL 1W -@ IN SOA localhost. root.localhost. ( - 42 ; serial - 2D ; refresh - 4H ; retry - 6W ; expiry - 1W ) ; minimum - - IN NS localhost. -1 IN PTR localhost. -</pre></div></div><br class="example-break"><div class="example"><a name="roothint"></a><p class="title"><b>Example 15.5. DNS Root Name Server Hint File: <code class="filename">/var/lib/named/root.hint</code></b></p><div class="example-contents"><pre class="screen"> -; This file is made available by InterNIC under anonymous FTP as -; file /domain/named.root -; on server FTP.INTERNIC.NET -; last update: Nov 5, 2002. Related version of root zone: 2002110501 -; formerly NS.INTERNIC.NET -. 3600000 IN NS A.ROOT-SERVERS.NET. -A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4 -; formerly NS1.ISI.EDU -. 3600000 NS B.ROOT-SERVERS.NET. -B.ROOT-SERVERS.NET. 3600000 A 128.9.0.107 -; formerly C.PSI.NET -. 3600000 NS C.ROOT-SERVERS.NET. -C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12 -; formerly TERP.UMD.EDU -. 3600000 NS D.ROOT-SERVERS.NET. -D.ROOT-SERVERS.NET. 3600000 A 128.8.10.90 -; formerly NS.NASA.GOV -. 3600000 NS E.ROOT-SERVERS.NET. -E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10 -; formerly NS.ISC.ORG -. 3600000 NS F.ROOT-SERVERS.NET. -F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241 -; formerly NS.NIC.DDN.MIL -. 3600000 NS G.ROOT-SERVERS.NET. -G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4 -; formerly AOS.ARL.ARMY.MIL -. 3600000 NS H.ROOT-SERVERS.NET. -H.ROOT-SERVERS.NET. 3600000 A 128.63.2.53 -; formerly NIC.NORDU.NET -. 3600000 NS I.ROOT-SERVERS.NET. -I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17 -; operated by VeriSign, Inc. -. 3600000 NS J.ROOT-SERVERS.NET. -J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30 -; housed in LINX, operated by RIPE NCC -. 3600000 NS K.ROOT-SERVERS.NET. -K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129 -; operated by IANA -. 3600000 NS L.ROOT-SERVERS.NET. -L.ROOT-SERVERS.NET. 3600000 A 198.32.64.12 -; housed in Japan, operated by WIDE -. 3600000 NS M.ROOT-SERVERS.NET. -M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33 -; End of File -</pre></div></div><br class="example-break"></div><div class="sect2" title="DNS Root Server Hint File"><div class="titlepage"><div><div><h3 class="title"><a name="id388408"></a>DNS Root Server Hint File</h3></div></div></div><p> - The content of the root hints file as shown in <a class="link" href="appendix.html#roothint" title="Example 15.5. DNS Root Name Server Hint File: /var/lib/named/root.hint">“DNS Root Name Server Hint File: /var/lib/named/root.hint”</a> changes slowly over time. - Periodically this file should be updated from the source shown. Because - of its size, this file is located at the end of this chapter. - </p></div></div><div class="sect1" title="Alternative LDAP Database Initialization"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="altldapcfg"></a>Alternative LDAP Database Initialization</h2></div></div></div><p><a class="indexterm" name="id388437"></a><a class="indexterm" name="id388448"></a> - The following procedure may be used as an alternative means of configuring - the initial LDAP database. Many administrators prefer to have greater control - over how system files get configured. - </p><div class="sect2" title="Initialization of the LDAP Database"><div class="titlepage"><div><div><h3 class="title"><a name="id388463"></a>Initialization of the LDAP Database</h3></div></div></div><p><a class="indexterm" name="id388470"></a><a class="indexterm" name="id388478"></a><a class="indexterm" name="id388489"></a> - The first step to get the LDAP server ready for action is to create the LDIF file from - which the LDAP database will be preloaded. This is necessary to create the containers - into which the user, group, and other accounts are written. It is also necessary to - preload the well-known Windows NT Domain Groups, as they must have the correct SID so - that they can be recognized as special NT Groups by the MS Windows clients. - </p><div class="procedure" title="Procedure 15.2. LDAP Directory Pre-Load Steps"><a name="ldapinit"></a><p class="title"><b>Procedure 15.2. LDAP Directory Pre-Load Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Create a directory in which to store the files you use to generate - the LDAP LDIF file for your system. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir /etc/openldap/SambaInit -<code class="prompt">root# </code> chown root:root /etc/openldap/SambaInit -<code class="prompt">root# </code> chmod 700 /etc/openldap/SambaInit -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Install the files shown in <a class="link" href="appendix.html#sbehap-ldapreconfa" title="Example 15.6. LDAP Pre-configuration Script: SMBLDAP-ldif-preconfig.sh Part A">“LDAP Pre-configuration Script: SMBLDAP-ldif-preconfig.sh Part A”</a>, <a class="link" href="appendix.html#sbehap-ldapreconfb" title="Example 15.7. LDAP Pre-configuration Script: SMBLDAP-ldif-preconfig.sh Part B">“LDAP Pre-configuration Script: SMBLDAP-ldif-preconfig.sh Part B”</a>, - and <a class="link" href="appendix.html#sbehap-ldapreconfc" title="Example 15.8. LDAP Pre-configuration Script: SMBLDAP-ldif-preconfig.sh Part C">“LDAP Pre-configuration Script: SMBLDAP-ldif-preconfig.sh Part C”</a> into the directory - <code class="filename">/etc/openldap/SambaInit/SMBLDAP-ldif-preconfig.sh.</code> These three files are, - respectively, parts A, B, and C of the <code class="filename">SMBLDAP-ldif-preconfig.sh</code> file. - </p></li><li class="step" title="Step 3"><p> - Install the files shown in <a class="link" href="appendix.html#sbehap-ldifpata" title="Example 15.9. LDIF Pattern File Used to Pre-configure LDAP Part A">“LDIF Pattern File Used to Pre-configure LDAP Part A”</a> and <a class="link" href="appendix.html#sbehap-ldifpatb" title="Example 15.10. LDIF Pattern File Used to Pre-configure LDAP Part B">“LDIF Pattern File Used to Pre-configure LDAP Part B”</a> into the directory - <code class="filename">/etc/openldap/SambaInit/.</code> These two files are - parts A and B, respectively, of the <code class="filename">init-ldif.pat</code> file. - </p></li><li class="step" title="Step 4"><p> - Change to the <code class="filename">/etc/openldap/SambaInit</code> directory. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> sh SMBLDAP-ldif-preconfig.sh - -How do you wish to refer to your organization? -Suggestions: - Black Tire Company, Inc. - Cat With Hat Ltd. -How would you like your organization name to appear? -Your organization name is: My Organization -Enter a new name is this is not what you want, press Enter to Continue. -Name [My Organization]: Abmas Inc. - -Samba Config File Location [/etc/samba/smb.conf]: -Enter a new full path or press Enter to continue. -Samba Config File Location [/etc/samba/smb.conf]: -Domain Name: MEGANET2 -Domain SID: S-1-5-21-3504140859-1010554828-2431957765 - -The name of your Internet domain is now needed in a special format -as follows, if your domain name is mydomain.org, what we need is -the information in the form of: - Domain ID: mydomain - Top level: org -If your fully qualified hostname is: snoopy.bazaar.garagesale.net -where "snoopy" is the name of the machine, -Then the information needed is: - Domain ID: garagesale - Top Level: net - -Found the following domain name: abmas.biz -I think the bit we are looking for might be: abmas -Enter the domain name or press Enter to continue: - -The top level organization name I will use is: biz -Enter the top level org name or press Enter to continue: -<code class="prompt">root# </code> -</pre><p> - This creates a file called <code class="filename">MEGANET2.ldif</code>. - </p></li><li class="step" title="Step 5"><p> - It is now time to preload the LDAP database with the following - command: -</p><pre class="screen"> -<code class="prompt">root# </code> slapadd -v -l MEGANET2.ldif -added: "dc=abmas,dc=biz" (00000001) -added: "cn=Manager,dc=abmas,dc=biz" (00000002) -added: "ou=People,dc=abmas,dc=biz" (00000003) -added: "ou=Computers,dc=abmas,dc=biz" (00000004) -added: "ou=Groups,dc=abmas,dc=biz" (00000005) -added: "ou=Domains,dc=abmas,dc=biz" (00000006) -added: "sambaDomainName=MEGANET2,ou=Domains,dc=abmas,dc=biz" (00000007) -added: "cn=domadmins,ou=Groups,dc=abmas,dc=biz" (00000008) -added: "cn=domguests,ou=Groups,dc=abmas,dc=biz" (00000009) -added: "cn=domusers,ou=Groups,dc=abmas,dc=biz" (0000000a) -</pre><p> - You should verify that the account information was correctly loaded by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat -dn: dc=abmas,dc=biz -objectClass: dcObject -objectClass: organization -dc: abmas -o: Abmas Inc. -description: Posix and Samba LDAP Identity Database -structuralObjectClass: organization -entryUUID: af552f8e-c4a1-1027-9002-9421e01bf474 -creatorsName: cn=manager,dc=abmas,dc=biz -modifiersName: cn=manager,dc=abmas,dc=biz -createTimestamp: 20031217055747Z -modifyTimestamp: 20031217055747Z -entryCSN: 2003121705:57:47Z#0x0001#0#0000 -... - -dn: cn=domusers,ou=Groups,dc=abmas,dc=biz -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 513 -cn: domusers -sambaSID: S-1-5-21-3504140859-1010554828-2431957765-513 -sambaGroupType: 2 -displayName: Domain Users -description: Domain Users -structuralObjectClass: posixGroup -entryUUID: af7e98ba-c4a1-1027-900b-9421e01bf474 -creatorsName: cn=manager,dc=abmas,dc=biz -modifiersName: cn=manager,dc=abmas,dc=biz -createTimestamp: 20031217055747Z -modifyTimestamp: 20031217055747Z -entryCSN: 2003121705:57:47Z#0x000a#0#0000 -</pre><p> - </p></li><li class="step" title="Step 6"><p> - Your LDAP database is ready for testing. You can now start the LDAP server - using the system tool for your Linux operating system. For SUSE Linux, you can - do this as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap start -</pre><p> - </p></li><li class="step" title="Step 7"><p> - It is now a good idea to validate that the LDAP server is running correctly. - Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> ldapsearch -x -b "dc=abmas,dc=biz" "(ObjectClass=*)" -# extended LDIF -# -# LDAPv3 -# base <dc=abmas,dc=biz> with scope sub -# filter: (ObjectClass=*) -# requesting: ALL -# - -# abmas.biz -dn: dc=abmas,dc=biz -objectClass: dcObject -objectClass: organization -dc: abmas -o: Abmas Inc. -description: Posix and Samba LDAP Identity Database -... -# domusers, Groups, abmas.biz -dn: cn=domusers,ou=Groups,dc=abmas,dc=biz -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 513 -cn: domusers -sambaSID: S-1-5-21-3504140859-1010554828-2431957765-513 -sambaGroupType: 2 -displayName: Domain Users -description: Domain Users - -# search result -search: 2 -result: 0 Success - -# numResponses: 11 -# numEntries: 10 -</pre><p> - Your LDAP server is ready for creation of additional accounts. - </p></li></ol></div></div><div class="example"><a name="sbehap-ldapreconfa"></a><p class="title"><b>Example 15.6. LDAP Pre-configuration Script: <code class="filename">SMBLDAP-ldif-preconfig.sh</code> Part A</b></p><div class="example-contents"><pre class="screen"> -#!/bin/bash -# -# This script prepares the ldif LDAP load file only -# - -# Pattern File Name -file=init-ldif.pat - -# The name of my organization -ORGNAME="My Organization" - -# My Internet domain. ie: if my domain is: buckets.org, INETDOMAIN="buckets" -INETDOMAIN="my-domain" - -# In the above case, md domain is: buckets.org, TLDORG="org" -TLDORG="org" - -# This is the Samba Domain/Workgroup Name -DOMNAME="MYWORKGROUP" - -# -# Here We Go ... -# - -cat <<EOF - -How do you wish to refer to your organization? - -Suggestions: - Black Tire Company, Inc. - Cat With Hat Ltd. - -How would you like your organization name to appear? - -EOF - -echo "Your organization name is: $ORGNAME" -echo -echo "Enter a new name or, press Enter to Continue." -echo -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-ldapreconfb"></a><p class="title"><b>Example 15.7. LDAP Pre-configuration Script: <code class="filename">SMBLDAP-ldif-preconfig.sh</code> Part B</b></p><div class="example-contents"><pre class="screen"> -echo -e -n "Name [$ORGNAME]: " - read name - -if [ ! -z "$name" ]; then - ORGNAME=${name} -fi -echo -sed "s/ORGNAME/${ORGNAME}/g" < $file > $file.tmp1 - -# Try to find smb.conf - -if [ -e /usr/local/samba/lib/smb.conf ]; then - CONF=/usr/local/samba/lib/smb.conf -elif [ -e /etc/samba/smb.conf ]; then - CONF=/etc/samba/smb.conf -fi - -echo "Samba Config File Location [$CONF]: " -echo -echo "Enter a new full path or press Enter to continue." -echo -echo -n "Samba Config File Location [$CONF]: " - read name -if [ ! -z "$name" ]; then - CONF=$name -fi -echo - -# Find the name of our Domain/Workgroup -DOMNAME=`grep -i workgroup ${CONF} | sed "s/ //g" | cut -f2 -d=` -echo Domain Name: $DOMNAME -echo - -sed "s/DOMNAME/${DOMNAME}/g" < $file.tmp1 > $file.tmp2 - -DOMSID=`net getlocalsid ${DOMNAME} | cut -f2 -d: | sed "s/ //g"` -echo Domain SID: $DOMSID - -sed "s/DOMSID/${DOMSID}/g" < $file.tmp2 > $file.tmp1 -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-ldapreconfc"></a><p class="title"><b>Example 15.8. LDAP Pre-configuration Script: <code class="filename">SMBLDAP-ldif-preconfig.sh</code> Part C</b></p><div class="example-contents"><pre class="screen"> -cat <<EOL -The name of your Internet domain is now needed in a special format -as follows, if your domain name is mydomain.org, what we need is -the information in the form of: - Domain ID: mydomain - Top level: org - -If your fully qualified hostname is: snoopy.bazaar.garagesale.net -where "snoopy" is the name of the machine, -Then the information needed is: - Domain ID: garagesale - Top Level: net - -EOL -INETDOMAIN=`hostname -d | cut -f1 -d.` -echo Found the following domain name: `hostname -d` -echo "I think the bit we are looking for might be: $INETDOMAIN" -echo -echo -n "Enter the domain name or press Enter to continue: " - read domnam -if [ ! -z $domnam ]; then - INETDOMAIN=$domnam -fi -echo -sed "s/INETDOMAIN/${INETDOMAIN}/g" < $file.tmp1 > $file.tmp2 -TLDORG=`hostname -d | sed "s/${INETDOMAIN}.//g"` -echo "The top level organization name I will use is: ${TLDORG}" -echo -echo -n "Enter the top level org name or press Enter to continue: " - read domnam -if [ ! -z $domnam ]; then - TLDORG=$domnam -fi -sed "s/TLDORG/${TLDORG}/g" < $file.tmp2 > $DOMNAME.ldif -rm $file.tmp* -exit 0 -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-ldifpata"></a><p class="title"><b>Example 15.9. LDIF Pattern File Used to Pre-configure LDAP Part A</b></p><div class="example-contents"><pre class="screen"> -dn: dc=INETDOMAIN,dc=TLDORG -objectClass: dcObject -objectClass: organization -dc: INETDOMAIN -o: ORGNAME -description: Posix and Samba LDAP Identity Database - -dn: cn=Manager,dc=INETDOMAIN,dc=TLDORG -objectClass: organizationalRole -cn: Manager -description: Directory Manager - -dn: ou=People,dc=INETDOMAIN,dc=TLDORG -objectClass: top -objectClass: organizationalUnit -ou: People - -dn: ou=Computers,dc=INETDOMAIN,dc=TLDORG -objectClass: top -objectClass: organizationalUnit -ou: Computers - -dn: ou=Groups,dc=INETDOMAIN,dc=TLDORG -objectClass: top -objectClass: organizationalUnit -ou: Groups - -dn: ou=Idmap,dc=INETDOMAIN,dc=TLDORG -objectClass: top -objectClass: organizationalUnit -ou: Idmap - -dn: ou=Domains,dc=INETDOMAIN,dc=TLDORG -objectClass: top -objectClass: organizationalUnit -ou: Domains - -dn: sambaDomainName=DOMNAME,ou=Domains,dc=INETDOMAIN,dc=TLDORG -objectClass: sambaDomain -sambaDomainName: DOMNAME -sambaSID: DOMSID -sambaAlgorithmicRidBase: 1000 -structuralObjectClass: sambaDomain -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-ldifpatb"></a><p class="title"><b>Example 15.10. LDIF Pattern File Used to Pre-configure LDAP Part B</b></p><div class="example-contents"><pre class="screen"> -dn: cn=domadmins,ou=Groups,dc=INETDOMAIN,dc=TLDORG -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 512 -cn: domadmins -sambaSID: DOMSID-512 -sambaGroupType: 2 -displayName: Domain Admins -description: Domain Administrators - -dn: cn=domguests,ou=Groups,dc=INETDOMAIN,dc=TLDORG -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 514 -cn: domguests -sambaSID: DOMSID-514 -sambaGroupType: 2 -displayName: Domain Guests -description: Domain Guests Users - -dn: cn=domusers,ou=Groups,dc=INETDOMAIN,dc=TLDORG -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 513 -cn: domusers -sambaSID: DOMSID-513 -sambaGroupType: 2 -displayName: Domain Users -description: Domain Users -</pre></div></div><br class="example-break"></div><div class="sect1" title="The LDAP Account Manager"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id388919"></a>The LDAP Account Manager</h2></div></div></div><p> -<a class="indexterm" name="id388927"></a> -<a class="indexterm" name="id388934"></a> -<a class="indexterm" name="id388943"></a> -<a class="indexterm" name="id388949"></a> -<a class="indexterm" name="id388956"></a> -<a class="indexterm" name="id388963"></a> -<a class="indexterm" name="id388970"></a> -The LDAP Account Manager (LAM) is an application suite that has been written in PHP. -LAM can be used with any Web server that has PHP4 support. It connects to the LDAP -server either using unencrypted connections or via SSL/TLS. LAM can be used to manage -Posix accounts as well as SambaSAMAccounts for users, groups, and Windows machines -(hosts). -</p><p> -LAM is available from the <a class="ulink" href="http://sourceforge.net/projects/lam/" target="_top">LAM</a> -home page and from its mirror sites. LAM has been released under the GNU GPL version 2. -The current version of LAM is 0.4.9. Release of version 0.5 is expected in the third quarter -of 2005. -</p><p> -<a class="indexterm" name="id388996"></a> -<a class="indexterm" name="id389003"></a> -<a class="indexterm" name="id389010"></a> -Requirements: -</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>A web server that will work with PHP4.</p></li><li class="listitem"><p>PHP4 (available from the <a class="ulink" href="http://www.php.net/" target="_top">PHP</a> home page.)</p></li><li class="listitem"><p>OpenLDAP 2.0 or later.</p></li><li class="listitem"><p>A Web browser that supports CSS.</p></li><li class="listitem"><p>Perl.</p></li><li class="listitem"><p>The gettext package.</p></li><li class="listitem"><p>mcrypt + mhash (optional).</p></li><li class="listitem"><p>It is also a good idea to install SSL support.</p></li></ul></div><p> -LAM is a useful tool that provides a simple Web-based device that can be used to -manage the contents of the LDAP directory to: -<a class="indexterm" name="id389067"></a> -<a class="indexterm" name="id389074"></a> -<a class="indexterm" name="id389081"></a> -</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Display user/group/host and Domain entries.</p></li><li class="listitem"><p>Manage entries (Add/Delete/Edit).</p></li><li class="listitem"><p>Filter and sort entries.</p></li><li class="listitem"><p>Store and use multiple operating profiles.</p></li><li class="listitem"><p>Edit organizational units (OUs).</p></li><li class="listitem"><p>Upload accounts from a file.</p></li><li class="listitem"><p>Is compatible with Samba-2.2.x and Samba-3.</p></li></ul></div><p> -When correctly configured, LAM allows convenient management of UNIX (Posix) and Samba -user, group, and windows domain member machine accounts. -</p><p> -<a class="indexterm" name="id389132"></a> -<a class="indexterm" name="id389139"></a> -<a class="indexterm" name="id389145"></a> -<a class="indexterm" name="id389152"></a> -The default password is <span class="quote">“<span class="quote">lam.</span>”</span> It is highly recommended that you use only -an SSL connection to your Web server for all remote operations involving LAM. If you -want secure connections, you must configure your Apache Web server to permit connections -to LAM using only SSL. -</p><div class="procedure" title="Procedure 15.3. Apache Configuration Steps for LAM"><a name="sbehap-laminst"></a><p class="title"><b>Procedure 15.3. Apache Configuration Steps for LAM</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Extract the LAM package by untarring it as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> tar xzf ldap-account-manager_0.4.9.tar.gz -</pre><p> - Alternatively, install the LAM DEB for your system using the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> dpkg -i ldap-account-manager_0.4.9.all.deb -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Copy the extracted files to the document root directory of your Web server. - For example, on SUSE Linux Enterprise Server 9, copy to the - <code class="filename">/srv/www/htdocs</code> directory. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id389226"></a> - Set file permissions using the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> chown -R wwwrun:www /srv/www/htdocs/lam -<code class="prompt">root# </code> chmod 755 /srv/www/htdocs/lam/sess -<code class="prompt">root# </code> chmod 755 /srv/www/htdocs/lam/tmp -<code class="prompt">root# </code> chmod 755 /srv/www/htdocs/lam/config -<code class="prompt">root# </code> chmod 755 /srv/www/htdocs/lam/lib/*pl -</pre><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id389276"></a> - Using your favorite editor create the following <code class="filename">config.cfg</code> - LAM configuration file: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /srv/www/htdocs/lam/config -<code class="prompt">root# </code> cp config.cfg_sample config.cfg -<code class="prompt">root# </code> vi config.cfg -</pre><p> - <a class="indexterm" name="id389315"></a> - <a class="indexterm" name="id389324"></a> - An example file is shown in <a class="link" href="appendix.html#lamcfg" title="Example 15.11. Example LAM Configuration File config.cfg">“Example LAM Configuration File config.cfg”</a>. - This is the minimum configuration that must be completed. The LAM profile - file can be created using a convenient wizard that is part of the LAM - configuration suite. - </p></li><li class="step" title="Step 5"><p> - Start your Web server then, using your Web browser, connect to - <a class="ulink" href="http://localhost/lam" target="_top">LAM</a> URL. Click on the - the <em class="parameter"><code>Configuration Login</code></em> link then click on the - Configuration Wizard link to begin creation of the default profile so that - LAM can connect to your LDAP server. Alternately, copy the - <code class="filename">lam.conf_sample</code> file to a file called - <code class="filename">lam.conf</code> then, using your favorite editor, - change the settings to match local site needs. - </p></li></ol></div><p> - <a class="indexterm" name="id389379"></a> - An example of a working file is shown here in <a class="link" href="appendix.html#lamconf" title="Example 15.12. LAM Profile Control File lam.conf">“LAM Profile Control File lam.conf”</a>. - This file has been stripped of comments to keep the size small. The comments - and help information provided in the profile file that the wizard creates - is very useful and will help many administrators to avoid pitfalls. - Your configuration file obviously reflects the configuration options that - are preferred at your site. - </p><p> - <a class="indexterm" name="id389399"></a> - It is important that your LDAP server is running at the time that LAM is - being configured. This permits you to validate correct operation. - An example of the LAM login screen is provided in <a class="link" href="appendix.html#lam-login" title="Figure 15.6. The LDAP Account Manager Login Screen">“The LDAP Account Manager Login Screen”</a>. - </p><div class="figure"><a name="lam-login"></a><p class="title"><b>Figure 15.6. The LDAP Account Manager Login Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/lam-login.png" width="270" alt="The LDAP Account Manager Login Screen"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id389458"></a> - The LAM configuration editor has a number of options that must be managed correctly. - An example of use of the LAM configuration editor is shown in <a class="link" href="appendix.html#lam-config" title="Figure 15.7. The LDAP Account Manager Configuration Screen">“The LDAP Account Manager Configuration Screen”</a>. - It is important that you correctly set the minimum and maximum UID/GID values that are - permitted for use at your site. The default values may not be compatible with a need to - modify initial default account values for well-known Windows network users and groups. - The best work-around is to temporarily set the minimum values to zero (0) to permit - the initial settings to be made. Do not forget to reset these to sensible values before - using LAM to add additional users and groups. - </p><div class="figure"><a name="lam-config"></a><p class="title"><b>Figure 15.7. The LDAP Account Manager Configuration Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/lam-config.png" width="270" alt="The LDAP Account Manager Configuration Screen"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id389523"></a> - LAM has some nice, but unusual features. For example, one unexpected feature in most application - screens permits the generation of a PDF file that lists configuration information. This is a well - thought out facility. This option has been edited out of the following screen shots to conserve - space. - </p><p> - <a class="indexterm" name="id389536"></a> - When you log onto LAM the opening screen drops you right into the user manager as shown in - <a class="link" href="appendix.html#lam-user" title="Figure 15.8. The LDAP Account Manager User Edit Screen">“The LDAP Account Manager User Edit Screen”</a>. This is a logical action as it permits the most-needed facility - to be used immediately. The editing of an existing user, as with the addition of a new user, - is easy to follow and very clear in both layout and intent. It is a simple matter to edit - generic settings, UNIX specific parameters, and then Samba account requirements. Each step - involves clicking a button that intuitively drives you through the process. When you have - finished editing simply press the <span class="guimenu">Final</span> button. - </p><div class="figure"><a name="lam-user"></a><p class="title"><b>Figure 15.8. The LDAP Account Manager User Edit Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/lam-users.png" width="270" alt="The LDAP Account Manager User Edit Screen"></div></div></div><br class="figure-break"><p> - The edit screen for groups is shown in <a class="link" href="appendix.html#lam-group" title="Figure 15.9. The LDAP Account Manager Group Edit Screen">“The LDAP Account Manager Group Edit Screen”</a>. As with the edit screen - for user accounts, group accounts may be rapidly dealt with. <a class="link" href="appendix.html#lam-group-mem" title="Figure 15.10. The LDAP Account Manager Group Membership Edit Screen">“The LDAP Account Manager Group Membership Edit Screen”</a> - shows a sub-screen from the group editor that permits users to be assigned secondary group - memberships. - </p><div class="figure"><a name="lam-group"></a><p class="title"><b>Figure 15.9. The LDAP Account Manager Group Edit Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/lam-groups.png" width="270" alt="The LDAP Account Manager Group Edit Screen"></div></div></div><br class="figure-break"><div class="figure"><a name="lam-group-mem"></a><p class="title"><b>Figure 15.10. The LDAP Account Manager Group Membership Edit Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/lam-group-members.png" width="270" alt="The LDAP Account Manager Group Membership Edit Screen"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id389704"></a><a class="indexterm" name="id389710"></a> - The final screen presented here is one that you should not normally need to use. Host accounts will - be automatically managed using the smbldap-tools scripts. This means that the screen <a class="link" href="appendix.html#lam-host" title="Figure 15.11. The LDAP Account Manager Host Edit Screen">“The LDAP Account Manager Host Edit Screen”</a> - will, in most cases, not be used. - </p><div class="figure"><a name="lam-host"></a><p class="title"><b>Figure 15.11. The LDAP Account Manager Host Edit Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/lam-hosts.png" width="270" alt="The LDAP Account Manager Host Edit Screen"></div></div></div><br class="figure-break"><p> - One aspect of LAM that may annoy some users is the way it forces certain conventions on - the administrator. For example, LAM does not permit the creation of Windows user and group - accounts that contain spaces even though the underlying UNIX/Linux - operating system may exhibit no problems with them. Given the propensity for using upper-case - characters and spaces (particularly in the default Windows account names) this may cause - some annoyance. For the rest, LAM is a very useful administrative tool. - </p><p> - The next major release, LAM 0.5, will have fewer restrictions and support the latest Samba features - (e.g., logon hours). The new plugin-based architecture also allows management of much more different - account types like plain UNIX accounts. The upload can now handle groups and hosts, too. Another - important point is the tree view which allows browsing and editing LDAP objects directly. - </p><div class="example"><a name="lamcfg"></a><p class="title"><b>Example 15.11. Example LAM Configuration File <code class="filename">config.cfg</code></b></p><div class="example-contents"><pre class="screen"> -# password to add/delete/rename configuration profiles -password: not24get - -# default profile, without ".conf" -default: lam -</pre></div></div><br class="example-break"><div class="example"><a name="lamconf"></a><p class="title"><b>Example 15.12. LAM Profile Control File <code class="filename">lam.conf</code></b></p><div class="example-contents"><pre class="screen"> -ServerURL: ldap://massive.abmas.org:389 -Admins: cn=Manager,dc=abmas,dc=biz -Passwd: not24get -usersuffix: ou=People,dc=abmas,dc=biz -groupsuffix: ou=Groups,dc=abmas,dc=biz -hostsuffix: ou=Computers,dc=abmas,dc=biz -domainsuffix: ou=Domains,dc=abmas,dc=biz -MinUID: 0 -MaxUID: 65535 -MinGID: 0 -MaxGID: 65535 -MinMachine: 20000 -MaxMachine: 25000 -userlistAttributes: #uid;#givenName;#sn;#uidNumber;#gidNumber -grouplistAttributes: #cn;#gidNumber;#memberUID;#description -hostlistAttributes: #cn;#description;#uidNumber;#gidNumber -maxlistentries: 30 -defaultLanguage: en_GB:ISO-8859-1:English (Great Britain) -scriptPath: -scriptServer: -samba3: yes -cachetimeout: 5 -pwdhash: SSHA -</pre></div></div><br class="example-break"></div><div class="sect1" title="IDEALX Management Console"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id389839"></a>IDEALX Management Console</h2></div></div></div><p> - IMC (the IDEALX Mamagement Console) is a tool that can be used as the basis for a comprehensive - web-based management interface for UNIX and Linux systems. - </p><p> - The Samba toolset is the first console developped for IMC. It offers a simple and ergonomic - interface for managing a Samba domain controler. The goal is to give Linux administrators who - need to manage production Samba servers an effective, intuitive and consistent management - experience. An IMC screenshot of the user management tool is shown in <a class="link" href="appendix.html#imcidealx" title="Figure 15.12. The IMC Samba User Account Screen">“The IMC Samba User Account Screen”</a>. - </p><div class="figure"><a name="imcidealx"></a><p class="title"><b>Figure 15.12. The IMC Samba User Account Screen</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/imc-usermanager2.png" width="216" alt="The IMC Samba User Account Screen"></div></div></div><br class="figure-break"><p> - IMC is built on a set of Perl modules. Most modules are standard CPAN modules. Some are bundled with IMC, - but will soon to be hosted on the CPAN independently, like Struts4P, a port of Struts to the Perl language. - </p><p> - For further information regarding IMC refer to the web <a class="ulink" href="http://imc.sourceforge.net/" target="_top">site.</a> - Prebuilt RPM packages are also <a class="ulink" href="http://imc.sourceforge.net/download.html" target="_top">available.</a> - </p></div><div class="sect1" title="Effect of Setting File and Directory SUID/SGID Permissions Explained"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ch12-SUIDSGID"></a>Effect of Setting File and Directory SUID/SGID Permissions Explained</h2></div></div></div><a class="indexterm" name="id389935"></a><a class="indexterm" name="id389942"></a><p> - The setting of the SUID/SGID bits on the file or directory permissions flag has particular - consequences. If the file is executable and the SUID bit is set, it executes with the privilege - of (with the UID of) the owner of the file. For example, if you are logged onto a system as - a normal user (let's say as the user <code class="constant">bobj</code>), and you execute a file that is owned - by the user <code class="constant">root</code> (uid = 0), and the file has the SUID bit set, then the file is - executed as if you had logged in as the user <code class="constant">root</code> and then executed the file. - The SUID bit effectively gives you (as <code class="constant">bobj</code>) administrative privilege for the - use of that executable file. - </p><p> - The setting of the SGID bit does precisely the same as the effect of the SUID bit, except that it - applies the privilege to the UNIX group setting. In other words, the file executes with the force - of capability of the group. - </p><p> - When the SUID/SGID permissions are set on a directory, all files that are created within that directory - are automatically given the ownership of the SUID user and the SGID group, as per the ownership - of the directory in which the file is created. This means that the system level <code class="literal">create()</code> - function executes with the SUID user and/or SGID group of the directory in which the file is - created. - </p><p> - If you want to obtain the SUID behavior, simply execute the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod u+s file-or-directory -</pre><p> - To set the SGID properties on a file or a directory, execute this command: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod g+s file-or-directory -</pre><p> - And to set both SUID and SGID properties, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod ug+s file-or-directory -</pre><p> - </p><p> - Let's consider the example of a directory <code class="filename">/data/accounts</code>. The permissions on this - directory before setting both SUID and SGID on this directory are: -</p><pre class="screen"> -<code class="prompt">root# </code> ls -al /data/accounts -total 1 -drwxr-xr-x 10 root root 232 Dec 18 17:08 . -drwxr-xr-x 21 root root 600 Dec 17 23:15 .. -drwxrwxrwx 2 bobj Domain Users 48 Dec 18 17:08 accounts/ -drwx------ 2 root root 48 Jan 26 2002 lost+found -</pre><p> - In this example, if the user <code class="constant">maryv</code> creates a file, it is owned by her. - If <code class="constant">maryv</code> has the primary group of <code class="constant">Accounts</code>, the file is - owned by the group <code class="constant">Accounts</code>, as shown in this listing: -</p><pre class="screen"> -<code class="prompt">root# </code> ls -al /data/accounts/maryvfile.txt -drw-rw-r-- 2 maryv Accounts 12346 Dec 18 17:53 -</pre><p> - </p><p> - Now you set the SUID and SGID and check the result as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod ug+s /data/accounts -<code class="prompt">root# </code> ls -al /data/accounts -total 1 -drwxr-xr-x 10 root root 232 Dec 18 17:08 . -drwxr-xr-x 21 root root 600 Dec 17 23:15 .. -drwsrwsr-x 2 bobj Domain Users 48 Dec 18 17:08 accounts -drwx------ 2 root root 48 Jan 26 2002 lost+found -</pre><p> - If <code class="constant">maryv</code> creates a file in this directory after this change has been made, the - file is owned by the user <code class="constant">bobj</code>, and the group is set to the group - <code class="constant">Domain Users</code>, as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod ug+s /data/accounts -<code class="prompt">root# </code> ls -al /data/accounts/maryvfile.txt -total 1 -drw-rw-r-- 2 bobj Domain Users 12346 Dec 18 18:11 maryvfile.txt -</pre><p> - </p></div><div class="sect1" title="Shared Data Integrity"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ch12dblck"></a>Shared Data Integrity</h2></div></div></div><p><a class="indexterm" name="id390147"></a><a class="indexterm" name="id390155"></a> - The integrity of shared data is often viewed as a particularly emotional issue, especially where - there are concurrent problems with multiuser data access. Contrary to the assertions of some who have - experienced problems in either area, the cause has nothing to do with the phases of the moons of Jupiter. - </p><p> - The solution to concurrent multiuser data access problems must consider three separate areas - from which the problem may stem:<a class="indexterm" name="id390175"></a><a class="indexterm" name="id390186"></a><a class="indexterm" name="id390197"></a> - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>application-level locking controls</p></li><li class="listitem"><p>client-side locking controls</p></li><li class="listitem"><p>server-side locking controls</p></li></ul></div><p><a class="indexterm" name="id390229"></a><a class="indexterm" name="id390237"></a> - Many database applications use some form of application-level access control. An example of one - well-known application that uses application-level locking is Microsoft Access. Detailed guidance - is provided here because this is the most common application for which problems have been reported. - </p><p><a class="indexterm" name="id390251"></a><a class="indexterm" name="id390259"></a> - Common applications that are affected by client- and server-side locking controls include MS - Excel and Act!. Important locking guidance is provided here. - </p><div class="sect2" title="Microsoft Access"><div class="titlepage"><div><div><h3 class="title"><a name="id390270"></a>Microsoft Access</h3></div></div></div><p> - The best advice that can be given is to carefully read the Microsoft knowledgebase articles that - cover this area. Examples of relevant documents include: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>http://support.microsoft.com/default.aspx?scid=kb;en-us;208778</p></li><li class="listitem"><p>http://support.microsoft.com/default.aspx?scid=kb;en-us;299373</p></li></ul></div><p><a class="indexterm" name="id390294"></a><a class="indexterm" name="id390306"></a> - Make sure that your MS Access database file is configured for multiuser access (not set for - exclusive open). Open MS Access on each client workstation, then set the following: <span class="guimenu">(Menu bar) Tools</span>+<span class="guimenu">Options</span>+<span class="guimenu">[tab] General</span>. Set network path to Default database folder: <code class="filename">\\server\share\folder</code>. - </p><p> - You can configure MS Access file sharing behavior as follows: click <span class="guimenu">[tab] Advanced</span>. - Set:<a class="indexterm" name="id390353"></a> - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Default open mode: Shared</p></li><li class="listitem"><p>Default Record Locking: Edited Record</p></li><li class="listitem"><p>Open databases using record_level locking</p></li></ul></div><p><a class="indexterm" name="id390382"></a> - You must now commit the changes so that they will take effect. To do so, click - <span class="guimenu">Apply</span><span class="guimenu">Ok</span>. At this point, you should exit MS Access, restart - it, and then validate that these settings have not changed. - </p></div><div class="sect2" title="Act! Database Sharing"><div class="titlepage"><div><div><h3 class="title"><a name="id390409"></a>Act! Database Sharing</h3></div></div></div><p><a class="indexterm" name="id390415"></a><a class="indexterm" name="id390423"></a> - Where the server sharing the ACT! database(s) is running Samba,or Windows NT, 200x, or XP, you - must disable opportunistic locking on the server and all workstations. Failure to do so - results in data corruption. This information is available from the Act! Web site - knowledgebase articles - <a class="ulink" href="http://itdomino.saleslogix.com/act.nsf/docid/1998223162925" target="_top">1998223162925</a> - as well as from article - <a class="ulink" href="http://itdomino.saleslogix.com/act.nsf/docid/200110485036" target="_top">200110485036</a>. - </p><p><a class="indexterm" name="id390449"></a><a class="indexterm" name="id390457"></a> - These documents clearly state that opportunistic locking must be disabled on both - the server (Samba in the case we are interested in here), as well as on every workstation - from which the centrally shared Act! database will be accessed. Act! provides - a tool called <code class="literal">Act!Diag</code> that may be used to disable all workstation - registry settings that may otherwise interfere with the operation of Act! - Registered Act! users may download this utility from the Act! Web - <a class="ulink" href="http://www.act.com/support/updates/index.cfm" target="_top">site.</a> - </p></div><div class="sect2" title="Opportunistic Locking Controls"><div class="titlepage"><div><div><h3 class="title"><a name="id390484"></a>Opportunistic Locking Controls</h3></div></div></div><p><a class="indexterm" name="id390491"></a> - Third-party Windows applications may not be compatible with the use of opportunistic file - and record locking. For applications that are known not to be compatible,<sup>[<a name="id390501" href="#ftn.id390501" class="footnote">14</a>]</sup> oplock - support may need to be disabled both on the Samba server and on the Windows workstations. - </p><p><a class="indexterm" name="id390512"></a><a class="indexterm" name="id390520"></a><a class="indexterm" name="id390528"></a> - Oplocks enable a Windows client to cache parts of a file that are being - edited. Another windows client may then request to open the file with the - ability to write to it. The server will then ask the original workstation - that had the file open with a write lock to release its lock. Before - doing so, that workstation must flush the file from cache memory to the - disk or network drive. - </p><p><a class="indexterm" name="id390546"></a> - Disabling of Oplocks usage may require server and client changes. - Oplocks may be disabled by file, by file pattern, on the share, or on the - Samba server. - </p><p> - The following are examples showing how Oplock support may be managed using - Samba <code class="filename">smb.conf</code> file settings: -</p><pre class="screen"> -By file: veto oplock files = myfile.mdb - -By Pattern: veto oplock files = /*.mdb/ - -On the Share: oplocks = No - level2 oplocks = No - -On the server: -(in [global]) oplocks = No - level2 oplocks = No -</pre><p> - </p><p> - The following registry entries on Microsoft Windows XP Professional, 2000 Professional, and Windows NT4 - workstation clients must be configured as shown here: -</p><pre class="screen"> -REGEDIT4 - -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ - Services\LanmanServer\Parameters] - "EnableOplocks"=dword:00000000 - -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ - Services\LanmanWorkstation\Parameters] - "UseOpportunisticLocking"=dword:00000000 -</pre><p> - </p><p> - Comprehensive coverage of file and record-locking controls is provided in TOSHARG2, Chapter 13. - The information in that chapter was obtained from a wide variety of sources. - </p></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id390501" href="#id390501" class="para">14</a>] </sup>Refer to - the application manufacturer's installation guidelines and knowledge base for specific - information regarding compatibility. It is often safe to assume that if the software - manufacturer does not specifically mention incompatibilities with opportunistic file - and record locking, or with Windows client file caching, the application is probably - compatible with Windows (as well as Samba) default settings.</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ch14.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="primer.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 14. Samba Support </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 16. Networking Primer</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/ch14.html b/docs/htmldocs/Samba3-ByExample/ch14.html deleted file mode 100644 index 711dd4b11d..0000000000 --- a/docs/htmldocs/Samba3-ByExample/ch14.html +++ /dev/null @@ -1,106 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 14. Samba Support</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="HA.html" title="Chapter 13. Performance, Reliability, and Availability"><link rel="next" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 14. Samba Support</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="HA.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="appendix.html">Next</a></td></tr></table><hr></div><div lang="en-US" class="chapter" title="Chapter 14. Samba Support"><div class="titlepage"><div><div><h2 class="title"><a name="id386581"></a>Chapter 14. Samba Support</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="ch14.html#id386696">Free Support</a></span></dt><dt><span class="sect1"><a href="ch14.html#id386894">Commercial Support</a></span></dt></dl></div><p> -<a class="indexterm" name="id386590"></a> -One of the most difficult to answer questions in the information technology industry is, <span class="quote">“<span class="quote">What is -support?</span>”</span>. That question irritates some folks, as much as common answers may annoy others. -</p><p> -<a class="indexterm" name="id386604"></a> -The most aggravating situation pertaining to support is typified when, as a Linux user, a call is made to -an Internet service provider who, instead of listening to the problem to find a solution, blandly replies: -<span class="quote">“<span class="quote">Oh, Linux? We do not support Linux!</span>”</span>. It has happened to me, and similar situations happen -through-out the IT industry. Answers like that are designed to inform us that there are some customers -that a business just does not want to deal with, and well may we feel the anguish of the rejection that -is dished out. -</p><p> -One way to consider support is to view it as consisting of the right answer, in the right place, -at the right time, no matter the situation. Support is all that it takes to take away pain, disruption, -inconvenience, loss of productivity, disorientation, uncertainty, and real or perceived risk. -</p><p> -<a class="indexterm" name="id386628"></a> -<a class="indexterm" name="id386635"></a> -<a class="indexterm" name="id386642"></a> -One of the forces that has become a driving force for the adoption of open source software is the fact that -many IT businesses have provided services that have perhaps failed to deliver what the customer expected, or -that have been found wanting for other reasons. -</p><p> -<a class="indexterm" name="id386654"></a> -<a class="indexterm" name="id386661"></a> -In recognition of the need for needs satisfaction as the primary experience an information technology user or -consumer expects, the information provided in this chapter may help someone to avoid an unpleasant experience -in respect of problem resolution. -</p><p> -<a class="indexterm" name="id386673"></a> -<a class="indexterm" name="id386680"></a> -<a class="indexterm" name="id386687"></a> -In the open source software arena there are two support options: free support and paid-for (commercial) -support. -</p><div class="sect1" title="Free Support"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id386696"></a>Free Support</h2></div></div></div><p> -<a class="indexterm" name="id386704"></a> -<a class="indexterm" name="id386710"></a> -<a class="indexterm" name="id386717"></a> -<a class="indexterm" name="id386724"></a> -<a class="indexterm" name="id386731"></a> -<a class="indexterm" name="id386738"></a> - Free support may be obtained from friends, colleagues, user groups, mailing lists, and interactive help - facilities. An example of an interactive dacility is the Internet relay chat (IRC) channels that host user - supported mutual assistance. - </p><p> -<a class="indexterm" name="id386750"></a> -<a class="indexterm" name="id386756"></a> -<a class="indexterm" name="id386763"></a> -<a class="indexterm" name="id386770"></a> -<a class="indexterm" name="id386777"></a> - The Samba project maintains a mailing list that is commonly used to discuss solutions to Samba deployments. - Information regarding subscription to the Samba mailing list can be found on the Samba <a class="ulink" href="https://lists.samba.org/mailman/" target="_top">web</a> site. The public mailing list that can be used to obtain - free, user contributed, support is called the <code class="literal">samba</code> list. The email address for this list - is at <code class="literal">mail:samba@samba.org</code>. Information regarding the Samba IRC channels may be found on - the Samba <a class="ulink" href="http://www.samba.org/samba.irc.html" target="_top">IRC</a> web page. - </p><p> -<a class="indexterm" name="id386814"></a> -<a class="indexterm" name="id386821"></a> -<a class="indexterm" name="id386828"></a> -<a class="indexterm" name="id386834"></a> - As a general rule, it is considered poor net behavior to contact a Samba Team member directly - for free support. Most active members of the Samba Team work exceptionally long hours to assist - users who have demonstrated a qualified problem. Some team members may respond to direct email - or telephone contact, with requests for assistance, by requesting payment. A few of the Samba - Team members actually provide professional paid-for Samba support and it is therefore wise - to show appropriate discretion and reservation in all direct contact. - </p><p> -<a class="indexterm" name="id386849"></a> -<a class="indexterm" name="id386856"></a> -<a class="indexterm" name="id386863"></a> - When you stumble across a Samba bug, often the quickest way to get it resolved is by posting - a bug <a class="ulink" href="https://bugzilla.samba.org/" target="_top">report</a>. All such reports are mailed to - the responsible code maintainer for action. The better the report, and the more serious it is, - the sooner it will be dealt with. On the other hand, if the responsible person can not duplicate - the reported bug it is likely to be rejected. It is up to you to provide sufficient information - that will permit the problem to be reproduced. - </p><p> -<a class="indexterm" name="id386883"></a> - We all recognize that sometimes free support does not provide the answer that is sought within - the time-frame required. At other times the problem is elusive and you may lack the experience - necessary to isolate the problem and thus to resolve it. This is a situation where is may be - prudent to purchase paid-for support. - </p></div><div class="sect1" title="Commercial Support"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id386894"></a>Commercial Support</h2></div></div></div><p> - There are six basic support oriented services that are most commonly sought by Samba sites: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Assistance with network design</p></li><li class="listitem"><p>Staff Training</p></li><li class="listitem"><p>Assistance with Samba network deployment and installation</p></li><li class="listitem"><p>Priority telephone or email Samba configuration assistance</p></li><li class="listitem"><p>Trouble-shooting and diagnostic assistance</p></li><li class="listitem"><p>Provision of quality assured ready-to-install Samba binary packages</p></li></ul></div><p> -<a class="indexterm" name="id386938"></a> -<a class="indexterm" name="id386945"></a> - Information regarding companies that provide professional Samba support can be obtained by performing a Google - search, as well as by reference to the Samba <a class="ulink" href="http://www.samba.org/samba/support.html" target="_top">Support</a> web page. Companies who notify the Samba Team - that they provide commercial support are given a free listing that is sorted by the country of origin. - Multiple listings are permitted, however no guarantee is offered. It is left to you to qualify a support - provider and to satisfy yourself that both the company and its staff are able to deliver what is required of - them. - </p><p> -<a class="indexterm" name="id386966"></a> - The policy within the Samba Team is to treat all commercial support providers equally and to show no - preference. As a result, Samba Team members who provide commercial support are lumped in with everyone else. - You are encouraged to obtain the services needed from a company in your local area. The open source movement - is pro-community; so do what you can to help a local business to prosper. - </p><p> -<a class="indexterm" name="id386982"></a> - Open source software support can be found in any quality, at any price and in any place you can - to obtain it. Over 180 companies around the world provide Samba support, there is no excuse for - suffering in the mistaken belief that Samba is unsupported software it is supported. - </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="HA.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="appendix.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 13. Performance, Reliability, and Availability </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 15. A Collection of Useful Tidbits</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/go01.html b/docs/htmldocs/Samba3-ByExample/go01.html deleted file mode 100644 index 4365c9dbe0..0000000000 --- a/docs/htmldocs/Samba3-ByExample/go01.html +++ /dev/null @@ -1,115 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Glossary</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="apa.html" title="Appendix A. GNU General Public License version 3"><link rel="next" href="ix01.html" title="Index"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Glossary</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apa.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="ix01.html">Next</a></td></tr></table><hr></div><div class="glossary" title="Glossary"><div class="titlepage"><div><div><h2 class="title"><a name="id394912"></a>Glossary</h2></div></div></div><dl><dt>Access Control List</dt><dd><p> - A detailed list of permissions granted to users or groups with respect to file and network - resource access. - </p></dd><dt>Active Directory Service</dt><dd><p> - A service unique to Microsoft Windows 200x servers that provides a centrally managed - directory for management of user identities and computer objects, as well as the - permissions each user or computer may be granted to access distributed network resources. - ADS uses Kerberos-based authentication and LDAP over Kerberos for directory access. - </p></dd><dt>Common Internet File System</dt><dd><p> - The new name for SMB. Microsoft renamed the SMB protocol to CIFS during - the Internet hype in the 1990s. At about the time that the SMB protocol was renamed - to CIFS, an additional dialect of the SMB protocol was in development. The need for the - deployment of the NetBIOS layer was also removed, thus paving the way for use of the SMB - protocol natively over TCP/IP (known as NetBIOS-less SMB or <span class="quote">“<span class="quote">naked</span>”</span> TCP - transport). - </p></dd><dt>Common UNIX Printing System</dt><dd><p> - A recent implementation of a high-capability printing system for UNIX developed by - <a class="ulink" href="http://www.easysw.com/" target="_top">Easy Software Inc.</a>. The design objective - of CUPS was to provide a rich print processing system that has built-in intelligence - that is capable of correctly rendering (processing) a file that is submitted for - printing even if it was formatted for an entirely different printer. - </p></dd><dt>Domain Master Browser</dt><dd><p> - The Domain Master Browser maintains a list of all the servers that - have announced their services within a given workgroup or NT domain. - </p></dd><dt>Domain Name Service</dt><dd><p> - A protocol by which computer hostnames may be resolved to the matching IP address/es. - DNS is implemented by the Berkeley Internet Name Daemon. There exists a recent version - of DNS that allows dynamic name registration by network clients or by a DHCP server. - This recent protocol is known as dynamic DNS (DDNS). - </p></dd><dt>Dynamic Host Configuration Protocol</dt><dd><p> - A protocol that was based on the BOOTP protocol that may be used to dynamically assign - an IP address, from a reserved pool of addresses, to a network client or device. - Additionally, DHCP may assign all network configuration settings and may be used to - register a computer name and its address with a dynamic DNS server. - </p></dd><dt>Group IDentifier</dt><dd><p> - The UNIX system group identifier; on older systems, a 32-bit unsigned integer, and on - newer systems, an unsigned 64-bit integer. The GID is used in UNIX-like operating systems - for all group-level access control. - </p></dd><dt>Key Distribution Center</dt><dd><p> - The Kerberos authentication protocol makes use of security keys (also called a ticket) - by which access to network resources is controlled. The issuing of Kerberos tickets - is effected by a KDC. - </p></dd><dt>Lightweight Directory Access Protocol</dt><dd><p> - The Lightweight Directory Access Protocol is a technology that - originated from the development of X.500 protocol specifications and - implementations. LDAP was designed as a means of rapidly searching - through X.500 information. Later LDAP was adapted as an engine that - could drive its own directory database. LDAP is not a database per - se; rather it is a technology that enables high-volume search and - locate activity from clients that wish to obtain simply defined - information about a subset of records that are stored in a - database. LDAP does not have a particularly efficient mechanism for - storing records in the database, and it has no concept of transaction - processing nor of mechanisms for preserving data consistency. LDAP is - premised around the notion that the search and read activity far - outweigh any need to add, delete, or modify records. LDAP does - provide a means for replication of the database to keep slave - servers up to date with a master. It also has built-in capability to - handle external references and deferral. - </p></dd><dt>Local Master Browser</dt><dd><p> - The Local Master Browser maintains a list of all servers that have announced themselves - within a given workgroup or NT domain on a particular broadcast isolated subnet. - </p></dd><dt>Media Access Control</dt><dd><p> - The hard-coded address of the physical-layer device that is attached to the network. - All network interface controllers must have a hard-coded and unique MAC address. The - MAC address is 48 bits long. - </p></dd><dt>NetBIOS Extended User Interface</dt><dd><p> - Very simple network protocol invented by IBM and Microsoft. It is used to do NetBIOS - over Ethernet with low overhead. NetBEUI is a non-routable protocol. - </p></dd><dt>Network Address Translation</dt><dd><p> - Network address translation is a form of IP address masquerading. It ensures that internal - private (RFC1918) network addresses from packets inside the network are rewritten so - that TCP/IP packets that leave the server over a public connection are seen to come only - from the external network address. - </p></dd><dt>Network Basic Input/Output System</dt><dd><p> - NetBIOS is a simple application programming interface (API) invented in the 1980s - that allows programs to send data to certain network names. NetBIOS is always run over - another network protocol such as IPX/SPX, TCP/IP, or Logical Link Control (LLC). - NetBIOS run over LLC is best known as NetBEUI (the NetBIOS Extended User Interface - a complete misnomer!). - </p></dd><dt>NetBT</dt><dd><p> - Protocol for transporting NetBIOS frames over TCP/IP. Uses ports 137, 138, and 139. - NetBT is a fully routable protocol. - </p></dd><dt>NT/LanManager Security Support Provider</dt><dd><p> - The NTLM Security Support Provider (NTLMSSP) service in Windows NT4/200x/XP is responsible for - handling all NTLM authentication requests. It is the front end for protocols such as SPNEGO, - Schannel, and other technologies. The generic protocol family supported by NTLMSSP is known as - GSSAPI, the Generic Security Service Application Program Interface specified in RFC2078. - </p></dd><dt>Server Message Block</dt><dd><p> - SMB was the original name of the protocol spoken by Samba. It was invented in the 1980s - by IBM and adopted and extended further by Microsoft. Microsoft renamed the protocol to - CIFS during the Internet hype in the 1990s. - </p></dd><dt>The Simple and Protected GSS-API Negotiation</dt><dd><p> - The purpose of SPNEGO is to allow a client and server to negotiate a security mechanism for - authentication. The protocol is specified in RFC2478 and uses tokens as built via ASN.1 DER. - DER refers to Distinguished Encoding Rules. These are a set of common rules for creating - binary encodings in a platform-independent manner. Samba has support for SPNEGO. - </p></dd><dt>The Official Samba-3 HOWTO and Reference Guide, Second Edition</dt><dd><p> - This book makes repeated reference to <span class="quote">“<span class="quote">The Official Samba-3 HOWTO and Reference Guide, Second - Edition</span>”</span> by John H. Terpstra and Jelmer R. Vernooij. This publication is available from - Amazon.com. Publisher: Prentice Hall PTR (August 2005), - ISBN: 013122282. - </p></dd><dt>User IDentifier</dt><dd><p> - The UNIX system user identifier; on older systems, a 32-bit unsigned integer, and on newer systems, - an unsigned 64-bit integer. The UID is used in UNIX-like operating systems for all user-level access - control. - </p></dd><dt>Universal Naming Convention</dt><dd><p>A syntax for specifying the location of network resources (such as file shares). - The UNC syntax was developed in the early days of MS DOS 3.x and is used internally by the SMB protocol. - </p></dd><dt>Wireshark</dt><dd><p> - A network analyzer, also known as a network sniffer or a protocol analyzer. Formerly known as Ethereal, Wireshark is - freely available for UNIX/Linux and Microsoft Windows systems from - <a class="ulink" href="http://www.wireshark.org" target="_top">the Wireshark Web site</a>. - </p></dd></dl></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apa.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="ix01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Appendix A. - <acronym class="acronym">GNU</acronym> General Public License version 3 - </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Index</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/happy.html b/docs/htmldocs/Samba3-ByExample/happy.html deleted file mode 100644 index 24c7b0118e..0000000000 --- a/docs/htmldocs/Samba3-ByExample/happy.html +++ /dev/null @@ -1,2878 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 5. Making Happy Users</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="Big500users.html" title="Chapter 4. The 500-User Office"><link rel="next" href="net2000users.html" title="Chapter 6. A Distributed 2000-User Network"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 5. Making Happy Users</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Big500users.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="net2000users.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 5. Making Happy Users"><div class="titlepage"><div><div><h2 class="title"><a name="happy"></a>Chapter 5. Making Happy Users</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a></span></dt><dt><span class="sect1"><a href="happy.html#id341463">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id341540">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id341668">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id342070">Technical Issues</a></span></dt><dt><span class="sect2"><a href="happy.html#id343725">Political Issues</a></span></dt><dt><span class="sect2"><a href="happy.html#id343737">Installation Checklist</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id343908">Samba Server Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbeidealx">Install and Configure Idealx smbldap-tools Scripts</a></span></dt><dt><span class="sect2"><a href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-ptrcfg">Printer Configuration</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a></span></dt><dt><span class="sect1"><a href="happy.html#id350178">Miscellaneous Server Preparation Tasks</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id350194">Configuring Directory Share Point Roots</a></span></dt><dt><span class="sect2"><a href="happy.html#id350283">Configuring Profile Directories</a></span></dt><dt><span class="sect2"><a href="happy.html#id350512">Preparation of Logon Scripts</a></span></dt><dt><span class="sect2"><a href="happy.html#id350609">Assigning User Rights and Privileges</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id350723">Windows Client Configuration</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></span></dt><dt><span class="sect2"><a href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></span></dt><dt><span class="sect2"><a href="happy.html#id351724">Configure Delete Cached Profiles on Logout</a></span></dt><dt><span class="sect2"><a href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></span></dt><dt><span class="sect2"><a href="happy.html#id352365">Software Installation</a></span></dt><dt><span class="sect2"><a href="happy.html#id352391">Roll-out Image Creation</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id352420">Key Points Learned</a></span></dt><dt><span class="sect1"><a href="happy.html#id352508">Questions and Answers</a></span></dt></dl></div><p> - It is said that <span class="quote">“<span class="quote">a day that is without troubles is not fulfilling. Rather, give - me a day of troubles well handled so that I can be content with my achievements.</span>”</span> - </p><p> - In the world of computer networks, problems are as varied as the people who create them - or experience them. The design of the network implemented in <a class="link" href="Big500users.html" title="Chapter 4. The 500-User Office">“The 500-User Office”</a> - may create problems for some network users. The following lists some of the problems that - may occur: - </p><a class="indexterm" name="id340972"></a><a class="indexterm" name="id340978"></a><a class="indexterm" name="id340987"></a><a class="indexterm" name="id340994"></a><a class="indexterm" name="id341000"></a><div class="caution" title="Caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p> -A significant number of network administrators have responded to the guidance given -here. It should be noted that there are sites that have a single PDC for many hundreds of -concurrent network clients. Network bandwidth, network bandwidth utilization, and server load -are among the factors that determine the maximum number of Windows clients that -can be served by a single domain controller (PDC or BDC) on a network segment. It is possible -to operate with only a single PDC over a routed network. What is possible is not necessarily -<span class="emphasis"><em>best practice</em></span>. When Windows client network logons begin to fail with -the message that the domain controller cannot be found or that the user account cannot -be found (when you know it exists), that may be an indication that the domain controller is -overloaded or network bandwidth is overloaded. The guidance given for PDC/BDC ratio to Windows -clients is conservative and if followed will minimize problems but it is not absolute. -</p></div><div class="variablelist"><dl><dt><span class="term">Users experiencing difficulty logging onto the network</span></dt><dd><p> - <a class="indexterm" name="id341038"></a> - <a class="indexterm" name="id341046"></a> - When a Windows client logs onto the network, many data packets are exchanged - between the client and the server that is providing the network logon services. - Each request between the client and the server must complete within a specific - time limit. This is one of the primary factors that govern the installation of - multiple domain controllers (usually called secondary or backup controllers). - As a rough rule, there should be one such backup controller for every - 30 to 150 clients. The actual limits are determined by network operational - characteristics. - </p><p> - <a class="indexterm" name="id341061"></a> - <a class="indexterm" name="id341068"></a> - <a class="indexterm" name="id341074"></a> - If the domain controller provides only network logon services - and all file and print activity is handled by domain member servers, one domain - controller per 150 clients on a single network segment may suffice. In any - case, it is highly recommended to have a minimum of one domain controller (PDC or BDC) - per network segment. It is better to have at least one BDC on the network - segment that has a PDC. If the domain controller is also used as a file and - print server, the number of clients it can service reliably is reduced, - and generally for low powered hardware should not exceed 30 machines (Windows - workstations plus domain member servers) per domain controller. Many sites are - able to operate with more clients per domain controller, the number of clients - that can be supported is limited by the CPU speed, memory and the workload on - the Samba server as well as network bandwidth utilization. - </p></dd><dt><span class="term">Slow logons and log-offs</span></dt><dd><p> - <a class="indexterm" name="id341100"></a> - Slow logons and log-offs may be caused by many factors that include: - - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id341113"></a> - <a class="indexterm" name="id341125"></a> - Excessive delays in the resolution of a NetBIOS name to its IP - address. This may be observed when an overloaded domain controller - is also the WINS server. Another cause may be the failure to use - a WINS server (this assumes that there is a single network segment). - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341141"></a> - <a class="indexterm" name="id341147"></a> - <a class="indexterm" name="id341154"></a> - Network traffic collisions due to overloading of the network - segment. One short-term workaround to this may be to replace - network HUBs with Ethernet switches. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341167"></a> - Defective networking hardware. Over the past few years, we have seen - on the Samba mailing list a significant increase in the number of - problems that were traced to a defective network interface controller, - a defective HUB or Ethernet switch, or defective cabling. In most cases, - it was the erratic nature of the problem that ultimately pointed to - the cause of the problem. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341184"></a> - <a class="indexterm" name="id341193"></a> - Excessively large roaming profiles. This type of problem is typically - the result of poor user education as well as poor network management. - It can be avoided by users not storing huge quantities of email in - MS Outlook PST files as well as by not storing files on the desktop. - These are old bad habits that require much discipline and vigilance - on the part of network management. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341210"></a> - You should verify that the Windows XP WebClient service is not running. - The use of the WebClient service has been implicated in many Windows - networking-related problems. - </p></li></ul></div><p> - </p></dd><dt><span class="term">Loss of access to network drives and printer resources</span></dt><dd><p> - Loss of access to network resources during client operation may be caused by a number - of factors, including: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id341240"></a> - Network overload (typically indicated by a high network collision rate) - </p></li><li class="listitem"><p> - Server overload - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341258"></a> - Timeout causing the client to close a connection that is in use but has - been latent (no traffic) for some time (5 minutes or more) - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341273"></a> - Defective networking hardware - </p></li></ul></div><p> - <a class="indexterm" name="id341287"></a> - No matter what the cause, a sudden loss of access to network resources can - result in BSOD (blue screen of death) situations that necessitate rebooting of the client - workstation. In the case of a mild problem, retrying to access the network drive of the printer - may restore operations, but in any case this is a serious problem that may lead to the next - problem, data corruption. - </p></dd><dt><span class="term">Potential data corruption</span></dt><dd><p> - <a class="indexterm" name="id341314"></a> - Data corruption is one of the most serious problems. It leads to uncertainty, anger, and - frustration, and generally precipitates immediate corrective demands. Management response - to this type of problem may be rational, as well as highly irrational. There have been - cases where management has fired network staff for permitting this situation to occur without - immediate correction. There have been situations where perfectly functional hardware was thrown - out and replaced, only to find the problem caused by a low-cost network hardware item. There - have been cases where server operating systems were replaced, or where Samba was updated, - only to later isolate the problem due to defective client software. - </p></dd></dl></div><p> - In this chapter, you can work through a number of measures that significantly arm you to - anticipate and combat network performance issues. You can work through complex and thorny - methods to improve the reliability of your network environment, but be warned that all such steps - demand the price of complexity. - </p><div class="sect1" title="Regarding LDAP Directories and Windows Computer Accounts"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id341339"></a>Regarding LDAP Directories and Windows Computer Accounts</h2></div></div></div><p> - <a class="indexterm" name="id341347"></a> - Computer (machine) accounts can be placed wherever you like in an LDAP directory subject to some - constraints that are described in this section. - </p><p> - <a class="indexterm" name="id341361"></a> - <a class="indexterm" name="id341367"></a> - <a class="indexterm" name="id341374"></a> - <a class="indexterm" name="id341381"></a> - The POSIX and SambaSAMAccount components of computer (machine) accounts are both used by Samba. - That is, machine accounts are treated inside Samba in the same way that Windows NT4/200X treats - them. A user account and a machine account are indistinguishable from each other, except that - the machine account ends in a $ character, as do trust accounts. - </p><p> - <a class="indexterm" name="id341394"></a> - <a class="indexterm" name="id341401"></a> - The need for Windows user, group, machine, trust, and other such accounts to be tied to a valid UNIX UID - is a design decision that was made a long way back in the history of Samba development. It is - unlikely that this decision will be reversed or changed during the remaining life of the - Samba-3.x series. - </p><p> - <a class="indexterm" name="id341414"></a> - <a class="indexterm" name="id341420"></a> - The resolution of a UID from the Windows SID is achieved within Samba through a mechanism that - must refer back to the host operating system on which Samba is running. The name service - switch (NSS) is the preferred mechanism that shields applications (like Samba) from the - need to know everything about every host OS it runs on. - </p><p> - Samba asks the host OS to provide a UID via the <span class="quote">“<span class="quote">passwd</span>”</span>, <span class="quote">“<span class="quote">shadow</span>”</span> - and <span class="quote">“<span class="quote">group</span>”</span> facilities in the NSS control (configuration) file. The best tool - for achieving this is left up to the UNIX administrator to determine. It is not imposed by - Samba. Samba provides winbindd together with its support libraries as one method. It is - possible to do this via LDAP, and for that Samba provides the appropriate hooks so that - all account entities can be located in an LDAP directory. - </p><p> - <a class="indexterm" name="id341451"></a> - For many the weapon of choice is to use the PADL nss_ldap utility. This utility must - be configured so that computer accounts can be resolved to a POSIX/UNIX account UID. That - is fundamentally an LDAP design question. The information provided on the Samba list and - in the documentation is directed at providing working examples only. The design - of an LDAP directory is a complex subject that is beyond the scope of this documentation. - </p></div><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id341463"></a>Introduction</h2></div></div></div><p> - You just opened an email from Christine that reads: - </p><p> - Good morning, - </p><div class="blockquote"><table border="0" width="100%" cellspacing="0" cellpadding="0" class="blockquote" summary="Block quote"><tr><td width="10%" valign="top"> </td><td width="80%" valign="top"><p> - A few months ago we sat down to design the network. We discussed the challenges ahead and we all - agreed to compromise our design to keep it simple. We knew there would be problems, but anticipated - that we would have some time to resolve any issues that might be encountered. - </p><p> - As you now know, we started off on the wrong foot. We have a lot of unhappy users. One of them - resigned yesterday afternoon because she was under duress to complete some critical projects. She - suffered a blue screen of death situation just as she was finishing four hours of intensive work, all - of which was lost. She has a unique requirement that involves storing large files on her desktop. - Mary's desktop profile is nearly 1 GB in size. As a result of her desktop configuration, it - takes her nearly 15 minutes just to log onto her workstation. But that is not enough. Because all - network logon traffic passes over the network links between our buildings, logging on may take - three or four attempts due to blue screen problems associated with network timeouts. - </p><p> - A few of us worked to help her out of trouble. We convinced her to stay and promised to fully - resolve the difficulties she is facing. We have no choice. We must implement LDAP and set hard - limits on what our users can do with their desktops. Otherwise, we face staff losses - that can surely do harm to our growth as well as to staff morale. I am sure we can better deal - with the consequences of what we know we must do than we can with the unrest we have now. - </p><p> - Stan and I have discussed the current situation. We are resolved to help our users and protect - the well being of Abmas. Please acknowledge this advice with consent to proceed as required to - regain control of our vital IT operations. - </p></td><td width="10%" valign="top"> </td></tr><tr><td width="10%" valign="top"> </td><td colspan="2" align="right" valign="top">--<span class="attribution">Christine</span></td></tr></table></div><p> - </p><p> - <a class="indexterm" name="id341510"></a> - <a class="indexterm" name="id341517"></a> - Every compromise has consequences. Having a large routed (i.e., multisegment) network with only a - single domain controller is a poor design that has obvious operational effects that may - frustrate users. Here is your reply: - </p><div class="blockquote"><table border="0" width="100%" cellspacing="0" cellpadding="0" class="blockquote" summary="Block quote"><tr><td width="10%" valign="top"> </td><td width="80%" valign="top"><p> - Christine, Your diligence and attention to detail are much valued. Stan and I fully support your - proposals to resolve the issues. I am confident that your plans fully realized will significantly - boost staff morale. Please go ahead with your plans. If you have any problems, please let me know. - Please let Stan know what the estimated cost will be so I can approve the expense. Do not wait - for approval; I appreciate the urgency. - </p></td><td width="10%" valign="top"> </td></tr><tr><td width="10%" valign="top"> </td><td colspan="2" align="right" valign="top">--<span class="attribution">Bob</span></td></tr></table></div><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id341540"></a>Assignment Tasks</h3></div></div></div><p> - The priority of assigned tasks in this chapter is: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p> - <a class="indexterm" name="id341559"></a> - <a class="indexterm" name="id341568"></a> - <a class="indexterm" name="id341575"></a> - <a class="indexterm" name="id341582"></a><a class="indexterm" name="id341587"></a> - Implement Backup Domain Controllers (BDCs) in each building. This involves - a change from a <span class="emphasis"><em>tdbsam</em></span> backend that was used in the previous - chapter to an LDAP-based backend. - </p><p> - You can implement a single central LDAP server for this purpose. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341608"></a> - <a class="indexterm" name="id341614"></a> - <a class="indexterm" name="id341621"></a> - <a class="indexterm" name="id341628"></a> - Rectify the problem of excessive logon times. This involves redirection of - folders to network shares as well as modification of all user desktops to - exclude the redirected folders from being loaded at login time. You can also - create a new default profile that can be used for all new users. - </p></li></ol></div><p> - <a class="indexterm" name="id341644"></a> - You configure a new MS Windows XP Professional workstation disk image that you roll out - to all desktop users. The instructions you have created are followed on a staging machine - from which all changes can be carefully tested before inflicting them on your network users. - </p><p> - <a class="indexterm" name="id341657"></a> - This is the last network example in which specific mention of printing is made. The example - again makes use of the CUPS printing system. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id341668"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id341676"></a> - <a class="indexterm" name="id341682"></a> - <a class="indexterm" name="id341689"></a> - The implementation of Samba BDCs necessitates the installation and configuration of LDAP. - For this site, you use OpenLDAP, the open source software LDAP server platform. Commercial - LDAP servers in current use with Samba-3 include: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id341704"></a> - Novell <a class="ulink" href="http://www.novell.com/products/edirectory/" target="_top">eDirectory</a> - is being successfully used by some sites. Information on how to use eDirectory can be - obtained from the Samba mailing lists or from Novell. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341723"></a> - IBM <a class="ulink" href="http://www-306.ibm.com/software/tivoli/products/directory-server/" target="_top">Tivoli - Directory Server</a> can be used to provide the Samba LDAP backend. Example schema - files are provided in the Samba source code tarball under the directory - <code class="filename">~samba/example/LDAP.</code> - </p></li><li class="listitem"><p> - <a class="indexterm" name="id341748"></a> - Sun <a class="ulink" href="http://www.sun.com/software/software/products/identity_srvr/home_identity.xml" target="_top">ONE Identity - Server product suite</a> provides an LDAP server that can be used for Samba. - Example schema files are provided in the Samba source code tarball under the directory - <code class="filename">~samba/example/LDAP.</code> - </p></li></ul></div><p> - A word of caution is fully in order. OpenLDAP is purely an LDAP server, and unlike commercial - offerings, it requires that you manually edit the server configuration files and manually - initialize the LDAP directory database. OpenLDAP itself has only command-line tools to - help you to get OpenLDAP and Samba-3 running as required, albeit with some learning curve challenges. - </p><p> - <a class="indexterm" name="id341780"></a> - For most sites, the deployment of Microsoft Active Directory from the shrink-wrapped installation is quite - adequate. If you are migrating from Microsoft Active Directory, be warned that OpenLDAP does not include - GUI-based directory management tools. Even a simple task such as adding users to the OpenLDAP database - requires an understanding of what you are doing, why you are doing it, and the tools that you must use. - </p><p> - <a class="indexterm" name="id341793"></a> - <a class="indexterm" name="id341800"></a> - <a class="indexterm" name="id341807"></a> - <a class="indexterm" name="id341816"></a> - <a class="indexterm" name="id341825"></a> - <a class="indexterm" name="id341832"></a> - <a class="indexterm" name="id341841"></a> - When installed and configured, an OpenLDAP Identity Management backend for Samba functions well. - High availability operation may be obtained through directory replication/synchronization and - master/slave server configurations. OpenLDAP is a mature platform to host the organizational - directory infrastructure that can include all UNIX accounts, directories for electronic mail, and much more. - The price paid through learning how to design an LDAP directory schema in implementation and configuration - of management tools is well rewarded by performance and flexibility and the freedom to manage directory - contents with greater ability to back up, restore, and modify the directory than is generally possible - with Microsoft Active Directory. - </p><p> - <a class="indexterm" name="id341860"></a> - <a class="indexterm" name="id341869"></a> - <a class="indexterm" name="id341876"></a> - <a class="indexterm" name="id341883"></a> - A comparison of OpenLDAP with Microsoft Active Directory does not do justice to either. OpenLDAP is an LDAP directory - tool-set. Microsoft Active Directory Server is an implementation of an LDAP server that is largely preconfigured - for a specific task orientation. It comes with a set of administrative tools that is entirely customized - for the purpose of running MS Windows applications that include file and print services, Microsoft Exchange - server, Microsoft SQL server, and more. The complexity of OpenLDAP is highly valued by the UNIX administrator - who wants to build a custom directory solution. Microsoft provides an application called - <a class="ulink" href="http://www.microsoft.com/windowsserver2003/adam/default.mspx" target="_top"> - MS ADAM</a> that provides more generic LDAP services, yet it does not have the vanilla-like services - of OpenLDAP. - </p><p> - <a class="indexterm" name="id341906"></a> - <a class="indexterm" name="id341915"></a> - You may wish to consider outsourcing the development of your OpenLDAP directory to an expert, particularly - if you find the challenge of learning about LDAP directories, schemas, configuration, and management - tools and the creation of shell and Perl scripts a bit - challenging. OpenLDAP can be easily customized, though it includes - many ready-to-use schemas. Samba-3 provides an OpenLDAP schema file - that is required for use as a passdb backend. - </p><p> - <a class="indexterm" name="id341929"></a> - For those who are willing to brave the process of installing and configuring LDAP and Samba-3 interoperability, - there are a few nice Web-based tools that may help you to manage your users and groups more effectively. - The Web-based tools you might like to consider include the - <a class="ulink" href="http://lam.sourceforge.net/" target="_top">LDAP Account Manager</a> (LAM) and the Webmin-based - <a class="ulink" href="http://www.webmin.com" target="_top">Webmin</a> Idealx - <a class="ulink" href="http://webmin.idealx.org/index.en.html" target="_top">CGI tools</a>. - </p><p> - Some additional LDAP tools should be mentioned. Every so often a Samba user reports using one of - these, so it may be useful to them: - <a class="ulink" href="http://biot.com/gq" target="_top">GQ</a>, a GTK-based LDAP browser; - LDAP <a class="ulink" href="http://www.iit.edu/~gawojar/ldap/" target="_top">Browser/Editor</a> - <a class="ulink" href="http://www.jxplorer.org/" target="_top">; JXplorer</a> (by Computer Associates); - and <a class="ulink" href="http://phpldapadmin.sourceforge.net/" target="_top">phpLDAPadmin</a>. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - The following prescriptive guidance is not an LDAP tutorial. The LDAP implementation expressly uses minimal - security controls. No form of secure LDAP communications is attempted. The LDAP configuration information provided - is considered to consist of the barest essentials only. You are strongly encouraged to learn more about - LDAP before attempting to deploy it in a business-critical environment. - </p></div><p> - Information to help you get started with OpenLDAP is available from the - <a class="ulink" href="http://www.openldap.org/pub/" target="_top">OpenLDAP web site</a>. Many people have found the book - <a class="ulink" href="http://www.oreilly.com/catalog/ldapsa/index.html" target="_top"><span class="emphasis"><em>LDAP System Administration</em></span>,</a> - by Jerry Carter quite useful. - </p><p> - <a class="indexterm" name="id342015"></a> - <a class="indexterm" name="id342022"></a> - <a class="indexterm" name="id342031"></a> - <a class="indexterm" name="id342038"></a> - Mary's problems are due to two factors. First, the absence of a domain controller on the local network is the - main cause of the errors that result in blue screen crashes. Second, Mary has a large profile that must - be loaded over the WAN connection. The addition of BDCs on each network segment significantly - improves overall network performance for most users, but it is not enough. You must gain control over - user desktops, and this must be done in a way that wins their support and does not cause further loss of - staff morale. The following procedures solve this problem. - </p><p> - <a class="indexterm" name="id342055"></a> - There is also an opportunity to implement smart printing features. You add this to the Samba configuration - so that future printer changes can be managed without need to change desktop configurations. - </p><p> - You add the ability to automatically download new printer drivers, even if they are not installed - in the default desktop profile. Only one example of printing configuration is given. It is assumed that - you can extrapolate the principles and use them to install all printers that may be needed. - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id342070"></a>Technical Issues</h3></div></div></div><p> - <a class="indexterm" name="id342078"></a> - <a class="indexterm" name="id342087"></a> - <a class="indexterm" name="id342097"></a> - The solution provided is a minimal approach to getting OpenLDAP running as an identity management directory - server for UNIX system accounts as well as for Samba. From the OpenLDAP perspective, UNIX system - accounts are stored POSIX schema extensions. Samba provides its own schema to permit storage of account - attributes Samba needs. Samba-3 can use the LDAP backend to store: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Windows Networking User Accounts</p></li><li class="listitem"><p>Windows NT Group Accounts</p></li><li class="listitem"><p>Mapping Information between UNIX Groups and Windows NT Groups</p></li><li class="listitem"><p>ID Mappings for SIDs to UIDs (also for foreign Domain SIDs)</p></li></ul></div><p> - <a class="indexterm" name="id342133"></a> - <a class="indexterm" name="id342140"></a> - <a class="indexterm" name="id342146"></a> - <a class="indexterm" name="id342153"></a> - <a class="indexterm" name="id342160"></a> - <a class="indexterm" name="id342167"></a> - <a class="indexterm" name="id342176"></a> - <a class="indexterm" name="id342182"></a> - <a class="indexterm" name="id342189"></a> - The use of LDAP with Samba-3 makes it necessary to store UNIX accounts as well as Windows Networking - accounts in the LDAP backend. This implies the need to use the - <a class="ulink" href="http://www.padl.com/Contents/OpenSourceSoftware.html" target="_top">PADL LDAP tools</a>. The resolution - of the UNIX group name to its GID must be enabled from either the <code class="filename">/etc/group</code> - or from the LDAP backend. This requires the use of the PADL <code class="filename">nss_ldap</code> tool-set - that integrates with the NSS. The same requirements exist for resolution - of the UNIX username to the UID. The relationships are demonstrated in <a class="link" href="happy.html#sbehap-LDAPdiag" title="Figure 5.1. The Interaction of LDAP, UNIX Posix Accounts and Samba Accounts">“The Interaction of LDAP, UNIX Posix Accounts and Samba Accounts”</a>. - </p><div class="figure"><a name="sbehap-LDAPdiag"></a><p class="title"><b>Figure 5.1. The Interaction of LDAP, UNIX Posix Accounts and Samba Accounts</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/UNIX-Samba-and-LDAP.png" width="270" alt="The Interaction of LDAP, UNIX Posix Accounts and Samba Accounts"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id342269"></a> - <a class="indexterm" name="id342275"></a> - You configure OpenLDAP so that it is operational. Before deploying the OpenLDAP, you really - ought to learn how to configure secure communications over LDAP so that site security is not - at risk. This is not covered in the following guidance. - </p><p> - <a class="indexterm" name="id342290"></a> - <a class="indexterm" name="id342296"></a> - <a class="indexterm" name="id342306"></a> - <a class="indexterm" name="id342312"></a> - When OpenLDAP has been made operative, you configure the PDC called <code class="constant">MASSIVE</code>. - You initialize the Samba <code class="filename">secrets.tdb<sub></sub></code> file. Then you - create the LDAP Interchange Format (LDIF) file from which the LDAP database can be initialized. - You need to decide how best to create user and group accounts. A few hints are, of course, provided. - You can also find on the enclosed CD-ROM, in the <code class="filename">Chap06</code> directory, a few tools - that help to manage user and group configuration. - </p><p> - <a class="indexterm" name="id342343"></a> - <a class="indexterm" name="id342350"></a> - <a class="indexterm" name="id342356"></a> - In order to effect folder redirection and to add robustness to the implementation, - create a network default profile. All network users workstations are configured to use - the new profile. Roaming profiles will automatically be deleted from the workstation - when the user logs off. - </p><p> - <a class="indexterm" name="id342369"></a> - The profile is configured so that users cannot change the appearance - of their desktop. This is known as a mandatory profile. You make certain that users - are able to use their computers efficiently. - </p><p> - <a class="indexterm" name="id342381"></a> - A network logon script is used to deliver flexible but consistent network drive - connections. - </p><div class="sect3" title="Addition of Machines to the Domain"><div class="titlepage"><div><div><h4 class="title"><a name="sbehap-ppc"></a>Addition of Machines to the Domain</h4></div></div></div><p> - <a class="indexterm" name="id342401"></a> - <a class="indexterm" name="id342406"></a> - <a class="indexterm" name="id342412"></a> - <a class="indexterm" name="id342417"></a> - Samba versions prior to 3.0.11 necessitated the use of a domain administrator account - that maps to the UNIX UID=0. The UNIX operating system permits only the <code class="constant">root</code> - user to add user and group accounts. Samba 3.0.11 introduced a new facility known as - <code class="constant">Privileges</code>, which provides five new privileges that - can be assigned to users and/or groups; see Table 5.1. - </p><div class="table"><a name="sbehap-privs"></a><p class="title"><b>Table 5.1. Current Privilege Capabilities</b></p><div class="table-contents"><table summary="Current Privilege Capabilities" border="1"><colgroup><col align="left"><col align="left"></colgroup><thead><tr><th align="left">Privilege</th><th align="left">Description</th></tr></thead><tbody><tr><td align="left"><p>SeMachineAccountPrivilege</p></td><td align="left"><p>Add machines to domain</p></td></tr><tr><td align="left"><p>SePrintOperatorPrivilege</p></td><td align="left"><p>Manage printers</p></td></tr><tr><td align="left"><p>SeAddUsersPrivilege</p></td><td align="left"><p>Add users and groups to the domain</p></td></tr><tr><td align="left"><p>SeRemoteShutdownPrivilege</p></td><td align="left"><p>Force shutdown from a remote system</p></td></tr><tr><td align="left"><p>SeDiskOperatorPrivilege</p></td><td align="left"><p>Manage disk share</p></td></tr></tbody></table></div></div><br class="table-break"><p> - In this network example use is made of one of the supported privileges purely to demonstrate - how any user can now be given the ability to add machines to the domain using a normal user account - that has been given the appropriate privileges. - </p></div><div class="sect3" title="Roaming Profile Background"><div class="titlepage"><div><div><h4 class="title"><a name="id342548"></a>Roaming Profile Background</h4></div></div></div><p> - As XP roaming profiles grow, so does the amount of time it takes to log in and out. - </p><p> - <a class="indexterm" name="id342560"></a> - <a class="indexterm" name="id342566"></a> - <a class="indexterm" name="id342573"></a> - <a class="indexterm" name="id342580"></a> - An XP roaming profile consists of the <code class="constant">HKEY_CURRENT_USER</code> hive file - <code class="filename">NTUSER.DAT</code> and a number of folders (My Documents, Application Data, - Desktop, Start Menu, Templates, NetHood, Favorites, and so on). When a user logs onto the - network with the default configuration of MS Windows NT/200x/XPP, all this data is - copied to the local machine under the <code class="filename">C:\Documents and Settings\%USERNAME%</code> - directory. While the user is logged in, any changes made to any of these folders or to the - <code class="constant">HKEY_CURRENT_USER</code> branch of the registry are made to the local copy - of the profile. At logout the profile data is copied back to the server. This behavior - can be changed through appropriate registry changes and/or through changes to the default - user profile. In the latter case, it updates the registry with the values that are set in the - profile <code class="filename">NTUSER.DAT</code> - file. - </p><p> - The first challenge is to reduce the amount of data that must be transferred to and - from the profile server as roaming profiles are processed. This includes removing - all the shortcuts in the Recent directory, making sure the cache used by the Web browser - is not being dumped into the <code class="filename">Application Data</code> folder, removing the - Java plug-ins cache (the .jpi_cache directory in the profile), as well as training the - user to not place large files on the desktop and to use his or her mapped home directory - instead of the <code class="filename">My Documents</code> folder for saving documents. - </p><p> - <a class="indexterm" name="id342644"></a> - Using a folder other than <code class="filename">My Documents</code> is a nuisance for - some users, since many applications use it by default. - </p><p> - <a class="indexterm" name="id342661"></a> - <a class="indexterm" name="id342668"></a> - <a class="indexterm" name="id342675"></a> - The secret to rapid loading of roaming profiles is to prevent unnecessary data from - being copied back and forth, without losing any functionality. This is not difficult; - it can be done by making changes to the Local Group Policy on each client as well - as changing some paths in each user's <code class="filename">NTUSER.DAT</code> hive. - </p><p> - <a class="indexterm" name="id342693"></a> - <a class="indexterm" name="id342700"></a> - Every user profile has its own <code class="filename">NTUSER.DAT</code> file. This means - you need to edit every user's profile, unless a better method can be - followed. Fortunately, with the right preparations, this is not difficult. - It is possible to remove the <code class="filename">NTUSER.DAT</code> file from each - user's profile. Then just create a Network Default Profile. Of course, it is - necessary to copy all files from redirected folders to the network share to which - they are redirected. - </p></div><div class="sect3" title="The Local Group Policy"><div class="titlepage"><div><div><h4 class="title"><a name="sbehap-locgrppol"></a>The Local Group Policy</h4></div></div></div><p> - <a class="indexterm" name="id342736"></a> - <a class="indexterm" name="id342742"></a> - <a class="indexterm" name="id342749"></a> - <a class="indexterm" name="id342756"></a> - Without an Active Directory PDC, you cannot take full advantage of Group Policy - Objects. However, you can still make changes to the Local Group Policy by using - the Group Policy editor (<code class="literal">gpedit.msc</code>). - </p><p> - The <span class="emphasis"><em>Exclude directories in roaming profile</em></span> settings can - be found under - <span class="guimenu">User Configuration</span> → <span class="guimenuitem">Administrative Templates</span> → <span class="guimenuitem">System</span> → <span class="guimenuitem">User Profiles</span>. - By default this setting contains - <span class="quote">“<span class="quote">Local Settings; Temporary Internet Files; History; Temp</span>”</span>. - </p><p> - Simply add the folders you do not wish to be copied back and forth to this - semicolon-separated list. Note that this change must be made on all clients - that are using roaming profiles. - </p></div><div class="sect3" title="Profile Changes"><div class="titlepage"><div><div><h4 class="title"><a name="id342818"></a>Profile Changes</h4></div></div></div><p> - <a class="indexterm" name="id342826"></a> - <a class="indexterm" name="id342832"></a> - There are two changes that should be done to each user's profile. Move each of - the directories that you have excluded from being copied back and forth out of - the usual profile path. Modify each user's <code class="filename">NTUSER.DAT</code> file - to point to the new paths that are shared over the network instead of to the default - path (<code class="filename">C:\Documents and Settings\%USERNAME%</code>). - </p><p> - <a class="indexterm" name="id342857"></a> - <a class="indexterm" name="id342864"></a> - The above modifies existing user profiles. So that newly created profiles have - these settings, you need to modify the <code class="filename">NTUSER.DAT</code> in - the <code class="filename">C:\Documents and Settings\Default User</code> folder on each - client machine, changing the same registry keys. You could do this by copying - <code class="filename">NTUSER.DAT</code> to a Linux box and using <code class="literal">regedt32</code>. - The basic method is described under <a class="link" href="happy.html#redirfold" title="Configuration of Default Profile with Folder Redirection">“Configuration of Default Profile with Folder Redirection”</a>. - </p></div><div class="sect3" title="Using a Network Default User Profile"><div class="titlepage"><div><div><h4 class="title"><a name="id342906"></a>Using a Network Default User Profile</h4></div></div></div><p> - <a class="indexterm" name="id342914"></a> - <a class="indexterm" name="id342921"></a> - If you are using Samba as your PDC, you should create a file share called - <code class="constant">NETLOGON</code> and within that create a directory called - <code class="filename">Default User</code>, which is a copy of the desired default user - configuration (including a copy of <code class="filename">NTUSER.DAT</code>). - If this share exists and the <code class="filename">Default User</code> folder exists, - the first login from a new account pulls its configuration from it. - See also <a class="ulink" href="http://isg.ee.ethz.ch/tools/realmen/det/skel.en.html" target="_top"> - the Real Men Don't Click</a> Web site. - </p></div><div class="sect3" title="Installation of Printer Driver Auto-Download"><div class="titlepage"><div><div><h4 class="title"><a name="id342960"></a>Installation of Printer Driver Auto-Download</h4></div></div></div><p> - <a class="indexterm" name="id342968"></a> - <a class="indexterm" name="id342977"></a> - <a class="indexterm" name="id342984"></a> - The subject of printing is quite topical. Printing problems run second place to name - resolution issues today. So far in this book, you have experienced only what is generally - known as <span class="quote">“<span class="quote">dumb</span>”</span> printing. Dumb printing is the arrangement by which all drivers - are manually installed on each client and the printing subsystems perform no filtering - or intelligent processing. Dumb printing is easily understood. It usually works without - many problems, but it has its limitations also. Dumb printing is better known as - <code class="literal">Raw-Print-Through</code> printing. - </p><p> - <a class="indexterm" name="id343008"></a> - <a class="indexterm" name="id343017"></a> - Samba permits the configuration of <code class="literal">smart</code> printing using the Microsoft - Windows point-and-click (also called drag-and-drop) printing. What this provides is - essentially the ability to print to any printer. If the local client does not yet have a - driver installed, the driver is automatically downloaded from the Samba server and - installed on the client. Drag-and-drop printing is neat; it means the user never needs - to fuss with driver installation, and that is a <span class="trademark">Good Thing,</span>™ - isn't it? - </p><p> - There is a further layer of print job processing that is known as <code class="literal">intelligent</code> - printing that automatically senses the file format of data submitted for printing and - then invokes a suitable print filter to convert the incoming data stream into a format - suited to the printer to which the job is dispatched. - </p><p> - <a class="indexterm" name="id343057"></a> - <a class="indexterm" name="id343064"></a> - <a class="indexterm" name="id343071"></a> - The CUPS printing subsystem is capable of intelligent printing. It has the capacity to - detect the data format and apply a print filter. This means that it is feasible to install - on all Windows clients a single printer driver for use with all printers that are routed - through CUPS. The most sensible driver to use is one for a PostScript printer. Fortunately, - <a class="ulink" href="http://www.easysw.com" target="_top">Easy Software Products</a>, the authors of CUPS, have - released a PostScript printing driver for Windows. It can be installed into the Samba - printing backend so that it automatically downloads to the client when needed. - </p><p> - This means that so long as there is a CUPS driver for the printer, all printing from Windows - software can use PostScript, no matter what the actual printer language for the physical - device is. It also means that the administrator can swap out a printer with a totally - different type of device without ever needing to change a client workstation driver. - </p><p> - This book is about Samba-3, so you can confine the printing style to just the smart - style of installation. Those interested in further information regarding intelligent - printing should review documentation on the Easy Software Products Web site. - </p></div><div class="sect3" title="Avoiding Failures: Solving Problems Before They Happen"><div class="titlepage"><div><div><h4 class="title"><a name="sbeavoid"></a>Avoiding Failures: Solving Problems Before They Happen</h4></div></div></div><p> - It has often been said that there are three types of people in the world: those who - have sharp minds and those who forget things. Please do not ask what the third group - is like! Well, it seems that many of us have company in the second group. There must - be a good explanation why so many network administrators fail to solve apparently - simple problems efficiently and effectively. - </p><p> - Here are some diagnostic guidelines that can be referred to when things go wrong: - </p><div class="sect4" title="Preliminary Advice: Dangers Can Be Avoided"><div class="titlepage"><div><div><h5 class="title"><a name="id343123"></a>Preliminary Advice: Dangers Can Be Avoided</h5></div></div></div><p> - The best advice regarding how to mend a broken leg is <span class="quote">“<span class="quote">Never break a leg!</span>”</span> - </p><p> - <a class="indexterm" name="id343138"></a> - Newcomers to Samba and LDAP seem to struggle a great deal at first. If you want advice - regarding the best way to remedy LDAP and Samba problems: <span class="quote">“<span class="quote">Avoid them like the plague!</span>”</span> - </p><p> - If you are now asking yourself how problems can be avoided, the best advice is to start - out your learning experience with a <span class="emphasis"><em>known-good configuration.</em></span> After - you have seen a fully working solution, a good way to learn is to make slow and progressive - changes that cause things to break, then observe carefully how and why things ceased to work. - </p><p> - The examples in this chapter (also in the book as a whole) are known to work. That means - that they could serve as the kick-off point for your journey through fields of knowledge. - Use this resource carefully; we hope it serves you well. - </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> - Do not be lulled into thinking that you can easily adopt the examples in this - book and adapt them without first working through the examples provided. A little - thing overlooked can cause untold pain and may permanently tarnish your experience. - </p></div></div><div class="sect4" title="The Name Service Caching Daemon"><div class="titlepage"><div><div><h5 class="title"><a name="id343173"></a>The Name Service Caching Daemon</h5></div></div></div><p> - The name service caching daemon (nscd) is a primary cause of difficulties with name - resolution, particularly where <code class="literal">winbind</code> is used. Winbind does its - own caching, thus nscd causes double caching which can lead to peculiar problems during - debugging. As a rule, it is a good idea to turn off the name service caching daemon. - </p><p> - Operation of the name service caching daemon is controlled by the - <code class="filename">/etc/nscd.conf</code> file. Typical contents of this file are as follows: -</p><pre class="screen"> -# /etc/nscd.conf -# An example Name Service Cache config file. This file is needed by nscd. -# Legal entries are: -# logfile <file> -# debug-level <level> -# threads <threads to use> -# server-user <user to run server as instead of root> -# server-user is ignored if nscd is started with -S parameters -# stat-user <user who is allowed to request statistics> -# reload-count unlimited|<number> -# -# enable-cache <service> <yes|no> -# positive-time-to-live <service> <time in seconds> -# negative-time-to-live <service> <time in seconds> -# suggested-size <service> <prime number> -# check-files <service> <yes|no> -# persistent <service> <yes|no> -# shared <service> <yes|no> -# Currently supported cache names (services): passwd, group, hosts -# logfile /var/log/nscd.log -# threads 6 -# server-user nobody -# stat-user somebody - debug-level 0 -# reload-count 5 - enable-cache passwd yes - positive-time-to-live passwd 600 - negative-time-to-live passwd 20 - suggested-size passwd 211 - check-files passwd yes - persistent passwd yes - shared passwd yes - enable-cache group yes - positive-time-to-live group 3600 - negative-time-to-live group 60 - suggested-size group 211 - check-files group yes - persistent group yes - shared group yes -# !!!!!WARNING!!!!! Host cache is insecure!!! The mechanism in nscd to -# cache hosts will cause your local system to not be able to trust -# forward/reverse lookup checks. DO NOT USE THIS if your system relies on -# this sort of security mechanism. Use a caching DNS server instead. - enable-cache hosts no - positive-time-to-live hosts 3600 - negative-time-to-live hosts 20 - suggested-size hosts 211 - check-files hosts yes - persistent hosts yes - shared hosts yes -</pre><p> - It is feasible to comment out the <code class="constant">passwd</code> and <code class="constant">group</code> - entries so they will not be cached. Alternatively, it is often simpler to just disable the - <code class="literal">nscd</code> service by executing (on Novell SUSE Linux): -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig nscd off -<code class="prompt">root# </code> rcnscd off -</pre><p> - </p></div><div class="sect4" title="Debugging LDAP"><div class="titlepage"><div><div><h5 class="title"><a name="id343291"></a>Debugging LDAP</h5></div></div></div><p> - <a class="indexterm" name="id343298"></a> - <a class="indexterm" name="id343305"></a> - <a class="indexterm" name="id343312"></a> - In the example <code class="filename">/etc/openldap/slapd.conf</code> control file - (see <a class="link" href="happy.html#sbehap-dbconf" title="Example 5.1. LDAP DB_CONFIG File">“LDAP DB_CONFIG File”</a>) there is an entry for <code class="constant">loglevel 256</code>. - To enable logging via the syslog infrastructure, it is necessary to uncomment this parameter - and restart <code class="literal">slapd</code>. - </p><p> - <a class="indexterm" name="id343346"></a> - <a class="indexterm" name="id343352"></a> - LDAP log information can be directed into a file that is separate from the normal system - log files by changing the <code class="filename">/etc/syslog.conf</code> file so it has the following - contents: -</p><pre class="screen"> -# Some foreign boot scripts require local7 -# -local0,local1.* -/var/log/localmessages -local2,local3.* -/var/log/localmessages -local5.* -/var/log/localmessages -local6,local7.* -/var/log/localmessages -local4.* -/var/log/ldaplogs -</pre><p> - In this case, all LDAP-related logs will be directed to the file - <code class="filename">/var/log/ldaplogs</code>. This makes it easy to track LDAP errors. - The snippet provides a simple example of usage that can be modified to suit - local site needs. The configuration used later in this chapter reflects such - customization with the intent that LDAP log files will be stored at a location - that meets local site needs and wishes more fully. - </p></div><div class="sect4" title="Debugging NSS_LDAP"><div class="titlepage"><div><div><h5 class="title"><a name="id343386"></a>Debugging NSS_LDAP</h5></div></div></div><p> - The basic mechanism for diagnosing problems with the nss_ldap utility involves adding to the - <code class="filename">/etc/ldap.conf</code> file the following parameters: -</p><pre class="screen"> -debug 256 -logdir /data/logs -</pre><p> - Create the log directory as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir /data/logs -</pre><p> - </p><p> - The diagnostic process should follow these steps: - </p><div class="procedure" title="Procedure 5.1. NSS_LDAP Diagnostic Steps"><a name="id343427"></a><p class="title"><b>Procedure 5.1. NSS_LDAP Diagnostic Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Verify the <code class="constant">nss_base_passwd, nss_base_shadow, nss_base_group</code> entries - in the <code class="filename">/etc/ldap.conf</code> file and compare them closely with the directory - tree location that was chosen when the directory was first created. - </p><p> - One way this can be done is by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat | grep Group | grep dn -dn: ou=Groups,dc=abmas,dc=biz -dn: cn=Domain Admins,ou=Groups,dc=abmas,dc=biz -dn: cn=Domain Users,ou=Groups,dc=abmas,dc=biz -dn: cn=Domain Guests,ou=Groups,dc=abmas,dc=biz -dn: cn=Domain Computers,ou=Groups,dc=abmas,dc=biz -dn: cn=Administrators,ou=Groups,dc=abmas,dc=biz -dn: cn=Print Operators,ou=Groups,dc=abmas,dc=biz -dn: cn=Backup Operators,ou=Groups,dc=abmas,dc=biz -dn: cn=Replicators,ou=Groups,dc=abmas,dc=biz -</pre><p> - The first line is the DIT entry point for the container for POSIX groups. The correct entry - for the <code class="filename">/etc/ldap.conf</code> for the <code class="constant">nss_base_group</code> - parameter therefore is the distinguished name (dn) as applied here: -</p><pre class="screen"> -nss_base_group ou=Groups,dc=abmas,dc=biz?one -</pre><p> - The same process may be followed to determine the appropriate dn for user accounts. - If the container for computer accounts is not the same as that for users (see the <code class="filename">smb.conf</code> - file entry for <code class="constant">ldap machine suffix</code>), it may be necessary to set the - following DIT dn in the <code class="filename">/etc/ldap.conf</code> file: -</p><pre class="screen"> -nss_base_passwd dc=abmas,dc=biz?sub -</pre><p> - This instructs LDAP to search for machine as well as user entries from the top of the DIT - down. This is inefficient, but at least should work. Note: It is possible to specify multiple - <code class="constant">nss_base_passwd</code> entries in the <code class="filename">/etc/ldap.conf</code> file; they - will be evaluated sequentially. Let us consider an example of use where the following DIT - has been implemented: - </p><p> - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>User accounts are stored under the DIT: ou=Users, dc=abmas, dc=biz</p></li><li class="listitem"><p>User login accounts are under the DIT: ou=People, ou-Users, dc=abmas, dc=biz</p></li><li class="listitem"><p>Computer accounts are under the DIT: ou=Computers, ou=Users, dc=abmas, dc=biz</p></li></ul></div><p> - </p><p> - The appropriate multiple entry for the <code class="constant">nss_base_passwd</code> directive - in the <code class="filename">/etc/ldap.conf</code> file may be: -</p><pre class="screen"> -nss_base_passwd ou=People,ou=Users,dc=abmas,dc=org?one -nss_base_passwd ou=Computers,ou=Users,dc=abmas,dc=org?one -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Perform lookups such as: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -</pre><p> - Each such lookup will create an entry in the <code class="filename">/data/log</code> directory - for each such process executed. The contents of each file created in this directory - may provide a hint as to the cause of the a problem that is under investigation. - </p></li><li class="step" title="Step 3"><p> - For additional diagnostic information, check the contents of the <code class="filename">/var/log/messages</code> - to see what error messages are being generated as a result of the LDAP lookups. Here is an example of - a successful lookup: -</p><pre class="screen"> -slapd[12164]: conn=0 fd=10 ACCEPT from IP=127.0.0.1:33539 -(IP=0.0.0.0:389) -slapd[12164]: conn=0 op=0 BIND dn="" method=128 -slapd[12164]: conn=0 op=0 RESULT tag=97 err=0 text= -slapd[12164]: conn=0 op=1 SRCH base="" scope=0 deref=0 -filter="(objectClass=*)" -slapd[12164]: conn=0 op=1 SEARCH RESULT tag=101 err=0 -nentries=1 text= -slapd[12164]: conn=0 op=2 UNBIND -slapd[12164]: conn=0 fd=10 closed -slapd[12164]: conn=1 fd=10 ACCEPT from -IP=127.0.0.1:33540 (IP=0.0.0.0:389) -slapd[12164]: conn=1 op=0 BIND -dn="cn=Manager,dc=abmas,dc=biz" method=128 -slapd[12164]: conn=1 op=0 BIND -dn="cn=Manager,dc=abmas,dc=biz" mech=SIMPLE ssf=0 -slapd[12164]: conn=1 op=0 RESULT tag=97 err=0 text= -slapd[12164]: conn=1 op=1 SRCH -base="ou=People,dc=abmas,dc=biz" scope=1 deref=0 -filter="(objectClass=posixAccount)" -slapd[12164]: conn=1 op=1 SRCH attr=uid userPassword -uidNumber gidNumber cn -homeDirectory loginShell gecos description objectClass -slapd[12164]: conn=1 op=1 SEARCH RESULT tag=101 err=0 -nentries=2 text= -slapd[12164]: conn=1 fd=10 closed - -</pre><p> - </p></li><li class="step" title="Step 4"><p> - Check that the bindpw entry in the <code class="filename">/etc/ldap.conf</code> or in the - <code class="filename">/etc/ldap.secrets</code> file is correct, as specified in the - <code class="filename">/etc/openldap/slapd.conf</code> file. - </p></li></ol></div></div><div class="sect4" title="Debugging Samba"><div class="titlepage"><div><div><h5 class="title"><a name="id343646"></a>Debugging Samba</h5></div></div></div><p> - The following parameters in the <code class="filename">smb.conf</code> file can be useful in tracking down Samba-related problems: -</p><pre class="screen"> -[global] - ... - log level = 5 - log file = /var/log/samba/%m.log - max log size = 0 - ... -</pre><p> - This will result in the creation of a separate log file for every client from which connections - are made. The log file will be quite verbose and will grow continually. Do not forget to - change these lines to the following when debugging has been completed: -</p><pre class="screen"> -[global] - ... - log level = 1 - log file = /var/log/samba/%m.log - max log size = 50 - ... -</pre><p> - </p><p> - The log file can be analyzed by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /var/log/samba -<code class="prompt">root# </code> grep -v "^\[200" machine_name.log -</pre><p> - </p><p> - Search for hints of what may have failed by looking for the words <span class="emphasis"><em>fail</em></span> - and <span class="emphasis"><em>error</em></span>. - </p></div><div class="sect4" title="Debugging on the Windows Client"><div class="titlepage"><div><div><h5 class="title"><a name="id343710"></a>Debugging on the Windows Client</h5></div></div></div><p> - MS Windows 2000 Professional and Windows XP Professional clients can be configured - to create a netlogon.log file that can be very helpful in diagnosing network logon problems. Search - the Microsoft knowledge base for detailed instructions. The techniques vary a little with each - version of MS Windows. - </p></div></div></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id343725"></a>Political Issues</h3></div></div></div><p> - MS Windows network users are generally very sensitive to limits that may be imposed when - confronted with locked-down workstation configurations. The challenge you face must - be promoted as a choice between reliable, fast network operation and a constant flux - of problems that result in user irritation. - </p></div><div class="sect2" title="Installation Checklist"><div class="titlepage"><div><div><h3 class="title"><a name="id343737"></a>Installation Checklist</h3></div></div></div><p> - You are starting a complex project. Even though you went through the installation of a complex - network in <a class="link" href="Big500users.html" title="Chapter 4. The 500-User Office">“The 500-User Office”</a>, this network is a bigger challenge because of the - large number of complex applications that must be configured before the first few steps - can be validated. Take stock of what you are about to undertake, prepare yourself, and - frequently review the steps ahead while making at least a mental note of what has already - been completed. The following task list may help you to keep track of the task items - that are covered: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Samba-3 PDC Server Configuration</p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>DHCP and DNS servers</p></li><li class="listitem"><p>OpenLDAP server</p></li><li class="listitem"><p>PAM and NSS client tools</p></li><li class="listitem"><p>Samba-3 PDC</p></li><li class="listitem"><p>Idealx smbldap scripts</p></li><li class="listitem"><p>LDAP initialization</p></li><li class="listitem"><p>Create user and group accounts</p></li><li class="listitem"><p>Printers</p></li><li class="listitem"><p>Share point directory roots</p></li><li class="listitem"><p>Profile directories</p></li><li class="listitem"><p>Logon scripts</p></li><li class="listitem"><p>Configuration of user rights and privileges</p></li></ol></div></li><li class="listitem"><p>Samba-3 BDC Server Configuration</p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>DHCP and DNS servers</p></li><li class="listitem"><p>PAM and NSS client tools</p></li><li class="listitem"><p>Printers</p></li><li class="listitem"><p>Share point directory roots</p></li><li class="listitem"><p>Profiles directories</p></li></ol></div></li><li class="listitem"><p>Windows XP Client Configuration</p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Default profile folder redirection</p></li><li class="listitem"><p>MS Outlook PST file relocation</p></li><li class="listitem"><p>Delete roaming profile on logout</p></li><li class="listitem"><p>Upload printer drivers to Samba servers</p></li><li class="listitem"><p>Install software</p></li><li class="listitem"><p>Creation of roll-out images</p></li></ol></div></li></ul></div></div></div><div class="sect1" title="Samba Server Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id343908"></a>Samba Server Implementation</h2></div></div></div><p> - <a class="indexterm" name="id343916"></a> - <a class="indexterm" name="id343923"></a> - The network design shown in <a class="link" href="happy.html#chap6net" title="Figure 5.2. Network Topology 500 User Network Using ldapsam passdb backend">“Network Topology 500 User Network Using ldapsam passdb backend”</a> is not comprehensive. It is assumed - that you will install additional file servers and possibly additional BDCs. - </p><div class="figure"><a name="chap6net"></a><p class="title"><b>Figure 5.2. Network Topology 500 User Network Using ldapsam passdb backend</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap6-net.png" width="270" alt="Network Topology 500 User Network Using ldapsam passdb backend"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id343983"></a> - <a class="indexterm" name="id343990"></a> - All configuration files and locations are shown for SUSE Linux 9.2 and are equally valid for SUSE - Linux Enterprise Server 9. The file locations for Red Hat Linux are similar. You may need to - adjust the locations for your particular Linux system distribution/implementation. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> -The following information applies to Samba-3.0.20 when used with the Idealx smbldap-tools -scripts version 0.9.1. If using a different version of Samba or of the smbldap-tools tarball, -please verify that the versions you are about to use are matching. The smbldap-tools package -uses counter-entries in the LDAP directory to avoid duplication of the UIDs and GIDs that are -issued for POSIX accounts. The LDAP rdn under which this information is stored are called -<code class="constant">uidNumber</code> and <code class="constant">gidNumber</code> respectively. These may be -located in any convenient part of the directory information tree (DIT). In the examples that -follow they have been located under <code class="constant">dn=sambaDomainName=MEGANET2,dc=abmas,dc=org</code>. -They could just as well be located under the rdn <code class="constant">cn=NextFreeUnixId</code>. -</p></div><p> - The steps in the process involve changes from the network configuration shown in - <a class="link" href="Big500users.html" title="Chapter 4. The 500-User Office">“The 500-User Office”</a>. Before implementing the following steps, you must - have completed the network implementation shown in that chapter. If you are starting - with newly installed Linux servers, you must complete the steps shown in - <a class="link" href="Big500users.html#ch5-dnshcp-setup" title="Installation of DHCP, DNS, and Samba Control Files">“Installation of DHCP, DNS, and Samba Control Files”</a> before commencing at <a class="link" href="happy.html#ldapsetup" title="OpenLDAP Server Configuration">“OpenLDAP Server Configuration”</a>. - </p><div class="sect2" title="OpenLDAP Server Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ldapsetup"></a>OpenLDAP Server Configuration</h3></div></div></div><p> - <a class="indexterm" name="id344059"></a> - <a class="indexterm" name="id344066"></a> - <a class="indexterm" name="id344073"></a> - Confirm that the packages shown in <a class="link" href="happy.html#oldapreq" title="Table 5.2. Required OpenLDAP Linux Packages">“Required OpenLDAP Linux Packages”</a> are installed on your system. - </p><div class="table"><a name="oldapreq"></a><p class="title"><b>Table 5.2. Required OpenLDAP Linux Packages</b></p><div class="table-contents"><table summary="Required OpenLDAP Linux Packages" border="1"><colgroup><col align="left"><col align="left"><col align="left"></colgroup><thead><tr><th align="center">SUSE Linux 8.x</th><th align="center">SUSE Linux 9.x</th><th align="center">Red Hat Linux</th></tr></thead><tbody><tr><td align="left">nss_ldap</td><td align="left">nss_ldap</td><td align="left">nss_ldap</td></tr><tr><td align="left">pam_ldap</td><td align="left">pam_ldap</td><td align="left">pam_ldap</td></tr><tr><td align="left">openldap2</td><td align="left">openldap2</td><td align="left">openldap</td></tr><tr><td align="left">openldap2-client</td><td align="left">openldap2-client</td><td align="left"> </td></tr></tbody></table></div></div><br class="table-break"><p> - Samba-3 and OpenLDAP will have a degree of interdependence that is unavoidable. The method - for bootstrapping the LDAP and Samba-3 configuration is relatively straightforward. If you - follow these guidelines, the resulting system should work fine. - </p><div class="procedure" title="Procedure 5.2. OpenLDAP Server Configuration Steps"><a name="id344202"></a><p class="title"><b>Procedure 5.2. OpenLDAP Server Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id344213"></a> - Install the file shown in <a class="link" href="happy.html#sbehap-slapdconf" title="Example 5.2. LDAP Master Configuration File /etc/openldap/slapd.conf Part A">“LDAP Master Configuration File /etc/openldap/slapd.conf Part A”</a> in the directory - <code class="filename">/etc/openldap</code>. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id344240"></a> - <a class="indexterm" name="id344247"></a> - <a class="indexterm" name="id344253"></a> - Remove all files from the directory <code class="filename">/data/ldap</code>, making certain that - the directory exists with permissions: -</p><pre class="screen"> -<code class="prompt">root# </code> ls -al /data | grep ldap -drwx------ 2 ldap ldap 48 Dec 15 22:11 ldap -</pre><p> - This may require you to add a user and a group account for LDAP if they do not exist. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id344286"></a> - Install the file shown in <a class="link" href="happy.html#sbehap-dbconf" title="Example 5.1. LDAP DB_CONFIG File">“LDAP DB_CONFIG File”</a> in the directory - <code class="filename">/data/ldap</code>. In the event that this file is added after <code class="constant">ldap</code> - has been started, it is possible to cause the new settings to take effect by shutting down - the <code class="constant">LDAP</code> server, executing the <code class="literal">db_recover</code> command inside the - <code class="filename">/data/ldap</code> directory, and then restarting the <code class="constant">LDAP</code> server. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id344336"></a> - Performance logging can be enabled and should preferably be sent to a file on - a file system that is large enough to handle significantly sized logs. To enable - the logging at a verbose level to permit detailed analysis, uncomment the entry in - the <code class="filename">/etc/openldap/slapd.conf</code> shown as <span class="quote">“<span class="quote">loglevel 256</span>”</span>. - </p><p> - Edit the <code class="filename">/etc/syslog.conf</code> file to add the following at the end - of the file: -</p><pre class="screen"> -local4.* -/data/ldap/log/openldap.log -</pre><p> - Note: The path <code class="filename">/data/ldap/log</code> should be set at a location - that is convenient and that can store a large volume of data. - </p></li></ol></div><div class="example"><a name="sbehap-dbconf"></a><p class="title"><b>Example 5.1. LDAP DB_CONFIG File</b></p><div class="example-contents"><pre class="screen"> -set_cachesize 0 150000000 1 -set_lg_regionmax 262144 -set_lg_bsize 2097152 -#set_lg_dir /var/log/bdb -set_flags DB_LOG_AUTOREMOVE -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-slapdconf"></a><p class="title"><b>Example 5.2. LDAP Master Configuration File <code class="filename">/etc/openldap/slapd.conf</code> Part A</b></p><div class="example-contents"><pre class="screen"> -include /etc/openldap/schema/core.schema -include /etc/openldap/schema/cosine.schema -include /etc/openldap/schema/inetorgperson.schema -include /etc/openldap/schema/nis.schema -include /etc/openldap/schema/samba3.schema - -pidfile /var/run/slapd/slapd.pid -argsfile /var/run/slapd/slapd.args - -access to dn.base="" - by self write - by * auth - -access to attr=userPassword - by self write - by * auth - -access to attr=shadowLastChange - by self write - by * read - -access to * - by * read - by anonymous auth - -#loglevel 256 - -schemacheck on -idletimeout 30 -backend bdb -database bdb -checkpoint 1024 5 -cachesize 10000 - -suffix "dc=abmas,dc=biz" -rootdn "cn=Manager,dc=abmas,dc=biz" - -# rootpw = not24get -rootpw {SSHA}86kTavd9Dw3FAz6qzWTrCOKX/c0Qe+UV - -directory /data/ldap -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-slapdconf2"></a><p class="title"><b>Example 5.3. LDAP Master Configuration File <code class="filename">/etc/openldap/slapd.conf</code> Part B</b></p><div class="example-contents"><pre class="screen"> -# Indices to maintain -index objectClass eq -index cn pres,sub,eq -index sn pres,sub,eq -index uid pres,sub,eq -index displayName pres,sub,eq -index uidNumber eq -index gidNumber eq -index memberUID eq -index sambaSID eq -index sambaPrimaryGroupSID eq -index sambaDomainName eq -index default sub -</pre></div></div><br class="example-break"></div><div class="sect2" title="PAM and NSS Client Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="sbehap-PAM-NSS"></a>PAM and NSS Client Configuration</h3></div></div></div><p> - <a class="indexterm" name="id344468"></a> - <a class="indexterm" name="id344474"></a> - <a class="indexterm" name="id344481"></a> - The steps that follow involve configuration of LDAP, NSS LDAP-based resolution of users and - groups. Also, so that LDAP-based accounts can log onto the system, the steps ahead configure - the Pluggable Authentication Modules (PAM) to permit LDAP-based authentication. - </p><p> - <a class="indexterm" name="id344493"></a> - <a class="indexterm" name="id344502"></a> - Since you have chosen to put UNIX user and group accounts into the LDAP database, it is likely - that you may want to use them for UNIX system (Linux) local machine logons. This necessitates - correct configuration of PAM. The <code class="literal">pam_ldap</code> open source package provides the - PAM modules that most people would use. On SUSE Linux systems, the <code class="literal">pam_unix2.so</code> - module also has the ability to redirect authentication requests through LDAP. - </p><p> - <a class="indexterm" name="id344527"></a> - <a class="indexterm" name="id344534"></a> - <a class="indexterm" name="id344541"></a> - <a class="indexterm" name="id344548"></a> - You have chosen to configure these services by directly editing the system files, but of course, you - know that this configuration can be done using system tools provided by the Linux system vendor. - SUSE Linux has a facility in YaST (the system admin tool) through <span class="guimenu">yast</span> → <span class="guimenuitem">system</span> → <span class="guimenuitem">ldap-client</span> that permits - configuration of SUSE Linux as an LDAP client. Red Hat Linux provides the <code class="literal">authconfig</code> - tool for this. - </p><div class="procedure" title="Procedure 5.3. PAM and NSS Client Configuration Steps"><a name="id344584"></a><p class="title"><b>Procedure 5.3. PAM and NSS Client Configuration Steps</b></p><div class="example"><a name="sbehap-nss01"></a><p class="title"><b>Example 5.4. Configuration File for NSS LDAP Support <code class="filename">/etc/ldap.conf</code></b></p><div class="example-contents"><pre class="screen"> -host 127.0.0.1 - -base dc=abmas,dc=biz - -binddn cn=Manager,dc=abmas,dc=biz -bindpw not24get - -timelimit 50 -bind_timelimit 50 -bind_policy hard - -idle_timelimit 3600 - -pam_password exop - -nss_base_passwd ou=People,dc=abmas,dc=biz?one -nss_base_shadow ou=People,dc=abmas,dc=biz?one -nss_base_group ou=Groups,dc=abmas,dc=biz?one - -ssl off -</pre></div></div><br class="example-break"><div class="example"><a name="sbehap-nss02"></a><p class="title"><b>Example 5.5. Configuration File for NSS LDAP Clients Support <code class="filename">/etc/ldap.conf</code></b></p><div class="example-contents"><pre class="screen"> -host 172.16.0.1 - -base dc=abmas,dc=biz - -binddn cn=Manager,dc=abmas,dc=biz -bindpw not24get - -timelimit 50 -bind_timelimit 50 -bind_policy hard - -idle_timelimit 3600 - -pam_password exop - -nss_base_passwd ou=People,dc=abmas,dc=biz?one -nss_base_shadow ou=People,dc=abmas,dc=biz?one -nss_base_group ou=Groups,dc=abmas,dc=biz?one - -ssl off -</pre></div></div><br class="example-break"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id344595"></a> - <a class="indexterm" name="id344602"></a> - <a class="indexterm" name="id344609"></a> - Execute the following command to find where the <code class="filename">nss_ldap</code> module - expects to find its control file: -</p><pre class="screen"> -<code class="prompt">root# </code> strings /lib/libnss_ldap.so.2 | grep conf -</pre><p> - The preferred and usual location is <code class="filename">/etc/ldap.conf</code>. - </p></li><li class="step" title="Step 2"><p> - On the server <code class="constant">MASSIVE</code>, install the file shown in - <a class="link" href="happy.html#sbehap-nss01" title="Example 5.4. Configuration File for NSS LDAP Support /etc/ldap.conf">“Configuration File for NSS LDAP Support /etc/ldap.conf”</a> into the path that was obtained from the step above. - On the servers called <code class="constant">BLDG1</code> and <code class="constant">BLDG2</code>, install the file shown in - <a class="link" href="happy.html#sbehap-nss02" title="Example 5.5. Configuration File for NSS LDAP Clients Support /etc/ldap.conf">“Configuration File for NSS LDAP Clients Support /etc/ldap.conf”</a> into the path that was obtained from the step above. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id344734"></a> - Edit the NSS control file (<code class="filename">/etc/nsswitch.conf</code>) so that the lines that - control user and group resolution will obtain information from the normal system files as - well as from <code class="literal">ldap</code>: -</p><pre class="screen"> -passwd: files ldap -shadow: files ldap -group: files ldap -hosts: files dns wins -</pre><p> - Later, when the LDAP database has been initialized and user and group accounts have been - added, you can validate resolution of the LDAP resolver process. The inclusion of - WINS-based hostname resolution is deliberate so that all MS Windows client hostnames can be - resolved to their IP addresses, whether or not they are DHCP clients. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - Some Linux systems (Novell SUSE Linux in particular) add entries to the <code class="filename">nsswitch.conf</code> - file that may cause operational problems with the configuration methods adopted in this book. It is - advisable to comment out the entries <code class="constant">passwd_compat</code> and <code class="constant">group_compat</code> - where they are found in this file. - </p></div><p> - Even at the risk of overstating the issue, incorrect and inappropriate configuration of the - <code class="filename">nsswitch.conf</code> file is a significant cause of operational problems with LDAP. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id344800"></a> - For PAM LDAP configuration on this SUSE Linux 9.0 system, the simplest solution is to edit the following - files in the <code class="filename">/etc/pam.d</code> directory: <code class="literal">login</code>, <code class="literal">password</code>, - <code class="literal">samba</code>, <code class="literal">sshd</code>. In each file, locate every entry that has the - <code class="literal">pam_unix2.so</code> entry and add to the line the entry <code class="literal">use_ldap</code> as shown - for the <code class="literal">login</code> module in this example: -</p><pre class="screen"> -#%PAM-1.0 -auth requisite pam_unix2.so nullok use_ldap #set_secrpc -auth required pam_securetty.so -auth required pam_nologin.so -#auth required pam_homecheck.so -auth required pam_env.so -auth required pam_mail.so -account required pam_unix2.so use_ldap -password required pam_pwcheck.s nullok -password required pam_unix2.so nullok use_first_pass \ - use_authtok use_ldap -session required pam_unix2.so none use_ldap # debug or trace -session required pam_limits.so -</pre><p> - </p><p> - <a class="indexterm" name="id344872"></a> - On other Linux systems that do not have an LDAP-enabled <code class="literal">pam_unix2.so</code> module, - you must edit these files by adding the <code class="literal">pam_ldap.so</code> modules as shown here: -</p><pre class="screen"> -#%PAM-1.0 -auth required pam_securetty.so -auth required pam_nologin.so -auth sufficient pam_ldap.so -auth required pam_unix2.so nullok try_first_pass #set_secrpc -account sufficient pam_ldap.so -account required pam_unix2.so -password required pam_pwcheck.so nullok -password required pam_ldap.so use_first_pass use_authtok -password required pam_unix2.so nullok use_first_pass use_authtok -session required pam_unix2.so none # debug or trace -session required pam_limits.so -session required pam_env.so -session optional pam_mail.so -</pre><p> - This example does have the LDAP-enabled <code class="literal">pam_unix2.so</code>, but simply - demonstrates the use of the <code class="literal">pam_ldap.so</code> module. You can use either - implementation, but if the <code class="literal">pam_unix2.so</code> on your system supports - LDAP, you probably want to use it rather than add an additional module. - </p></li></ol></div></div><div class="sect2" title="Samba-3 PDC Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="sbehap-massive"></a>Samba-3 PDC Configuration</h3></div></div></div><p> - <a class="indexterm" name="id344942"></a> - Verify that the Samba-3.0.20 (or later) packages are installed on each SUSE Linux server - before following the steps below. If Samba-3.0.20 (or later) is not installed, you have the - choice to either build your own or obtain the packages from a dependable source. - Packages for SUSE Linux 8.x, 9.x, and SUSE Linux Enterprise Server 9, as well as for - Red Hat Fedora Core and Red Hat Enterprise Linux Server 3 and 4, are included on the CD-ROM that - is included with this book. - </p><div class="procedure" title="Procedure 5.4. Configuration of PDC Called MASSIVE"><a name="id344954"></a><p class="title"><b>Procedure 5.4. Configuration of PDC Called <code class="constant">MASSIVE</code></b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Install the files in <a class="link" href="happy.html#sbehap-massive-smbconfa" title="Example 5.6. LDAP Based smb.conf File, Server: MASSIVE global Section: Part A">“LDAP Based smb.conf File, Server: MASSIVE global Section: Part A”</a>, - <a class="link" href="happy.html#sbehap-massive-smbconfb" title="Example 5.7. LDAP Based smb.conf File, Server: MASSIVE global Section: Part B">“LDAP Based smb.conf File, Server: MASSIVE global Section: Part B”</a>, <a class="link" href="happy.html#sbehap-shareconfa" title="Example 5.10. LDAP Based smb.conf File, Shares Section Part A">“LDAP Based smb.conf File, Shares Section Part A”</a>, - and <a class="link" href="happy.html#sbehap-shareconfb" title="Example 5.11. LDAP Based smb.conf File, Shares Section Part B">“LDAP Based smb.conf File, Shares Section Part B”</a> into the <code class="filename">/etc/samba/</code> - directory. The three files should be added together to form the <code class="filename">smb.conf</code> - master file. It is a good practice to call this file something like - <code class="filename">smb.conf.master</code> and then to perform all file edits - on the master file. The operational <code class="filename">smb.conf</code> is then generated as shown in - the next step. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id345025"></a> - Create and verify the contents of the <code class="filename">smb.conf</code> file that is generated by: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s smb.conf.master > smb.conf -</pre><p> - Immediately follow this with the following: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -</pre><p> - The output that is created should be free from errors, as shown here: - -</p><pre class="screen"> -Load smb config files from /etc/samba/smb.conf -Processing section "[accounts]" -Processing section "[service]" -Processing section "[pidata]" -Processing section "[homes]" -Processing section "[printers]" -Processing section "[apps]" -Processing section "[netlogon]" -Processing section "[profiles]" -Processing section "[profdata]" -Processing section "[print$]" -Loaded services file OK. -Server role: ROLE_DOMAIN_PDC -Press enter to see a dump of your service definitions -</pre><p> - </p></li><li class="step" title="Step 3"><p> - Delete all runtime files from prior Samba operation by executing (for SUSE - Linux): -</p><pre class="screen"> -<code class="prompt">root# </code> rm /etc/samba/*tdb -<code class="prompt">root# </code> rm /var/lib/samba/*tdb -<code class="prompt">root# </code> rm /var/lib/samba/*dat -<code class="prompt">root# </code> rm /var/log/samba/* -</pre><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id345117"></a> - <a class="indexterm" name="id345124"></a> - Samba-3 communicates with the LDAP server. The password that it uses to - authenticate to the LDAP server must be stored in the <code class="filename">secrets.tdb</code> - file. Execute the following to create the new <code class="filename">secrets.tdb</code> files - and store the password for the LDAP Manager: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w not24get -</pre><p> - The expected output from this command is: -</p><pre class="screen"> -Setting stored password for "cn=Manager,dc=abmas,dc=biz" in secrets.tdb -</pre><p> - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id345169"></a> - <a class="indexterm" name="id345176"></a> - Samba-3 generates a Windows Security Identifier (SID) only when <code class="literal">smbd</code> - has been started. For this reason, you start Samba. After a few seconds delay, - execute: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient -L localhost -U% -<code class="prompt">root# </code> net getlocalsid -</pre><p> - A report such as the following means that the domain SID has not yet - been written to the <code class="filename">secrets.tdb</code> or to the LDAP backend: -</p><pre class="screen"> -[2005/03/03 23:19:34, 0] lib/smbldap.c:smbldap_connect_system(852) - failed to bind to server ldap://massive.abmas.biz -with dn="cn=Manager,dc=abmas,dc=biz" Error: Can't contact LDAP server - (unknown) -[2005/03/03 23:19:48, 0] lib/smbldap.c:smbldap_search_suffix(1169) - smbldap_search_suffix: Problem during the LDAP search: - (unknown) (Timed out) -</pre><p> - The attempt to read the SID will cause and attempted bind to the LDAP server. Because the LDAP server - is not running, this operation will fail by way of a timeout, as shown previously. This is - normal output; do not worry about this error message. When the domain has been created and - written to the <code class="filename">secrets.tdb</code> file, the output should look like this: -</p><pre class="screen"> -SID for domain MASSIVE is: S-1-5-21-3504140859-1010554828-2431957765 -</pre><p> - If, after a short delay (a few seconds), the domain SID has still not been written to - the <code class="filename">secrets.tdb</code> file, it is necessary to investigate what - may be misconfigured. In this case, carefully check the <code class="filename">smb.conf</code> file for typographical - errors (the most common problem). The use of the <code class="literal">testparm</code> is highly - recommended to validate the contents of this file. - </p></li><li class="step" title="Step 6"><p> - When a positive domain SID has been reported, stop Samba. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id345275"></a> - <a class="indexterm" name="id345281"></a> - <a class="indexterm" name="id345288"></a> - <a class="indexterm" name="id345295"></a> - Configure the NFS server for your Linux system. So you can complete the steps that - follow, enter into the <code class="filename">/etc/exports</code> the following entry: -</p><pre class="screen"> -/home *(rw,root_squash,sync) -</pre><p> - This permits the user home directories to be used on the BDC servers for testing - purposes. You, of course, decide what is the best way for your site to distribute - data drives, and you create suitable backup and restore procedures for Abmas - I'd strongly recommend that for normal operation the BDC is completely independent - of the PDC. rsync is a useful tool here, as it resembles the NT replication service quite - closely. If you do use NFS, do not forget to start the NFS server as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> rcnfsserver start -</pre><p> - </p></li></ol></div><p> - Your Samba-3 PDC is now ready to communicate with the LDAP password backend. Let's get on with - configuration of the LDAP server. - </p><div class="example"><a name="sbehap-massive-smbconfa"></a><p class="title"><b>Example 5.6. LDAP Based <code class="filename">smb.conf</code> File, Server: MASSIVE global Section: Part A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id345373"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id345384"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id345396"></a><em class="parameter"><code>netbios name = MASSIVE</code></em></td></tr><tr><td><a class="indexterm" name="id345407"></a><em class="parameter"><code>interfaces = eth1, lo</code></em></td></tr><tr><td><a class="indexterm" name="id345418"></a><em class="parameter"><code>bind interfaces only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345430"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id345442"></a><em class="parameter"><code>enable privileges = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345453"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id345465"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id345476"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id345488"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id345499"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id345511"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id345522"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id345534"></a><em class="parameter"><code>time server = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345545"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id345557"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id345568"></a><em class="parameter"><code>add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"</code></em></td></tr><tr><td><a class="indexterm" name="id345580"></a><em class="parameter"><code>delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"</code></em></td></tr><tr><td><a class="indexterm" name="id345592"></a><em class="parameter"><code>add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id345604"></a><em class="parameter"><code>delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id345616"></a><em class="parameter"><code>add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id345628"></a><em class="parameter"><code>delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id345640"></a><em class="parameter"><code>set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"</code></em></td></tr><tr><td><a class="indexterm" name="id345652"></a><em class="parameter"><code>add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbehap-massive-smbconfb"></a><p class="title"><b>Example 5.7. LDAP Based <code class="filename">smb.conf</code> File, Server: MASSIVE global Section: Part B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td><a class="indexterm" name="id345688"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id345700"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id345711"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id345723"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345734"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345746"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345757"></a><em class="parameter"><code>ldap suffix = dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id345769"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id345780"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id345792"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id345804"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id345815"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id345827"></a><em class="parameter"><code>idmap backend = ldap:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id345839"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id345850"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id345862"></a><em class="parameter"><code>map acl inherit = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id345873"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id345884"></a><em class="parameter"><code>printer admin = root, chrisr</code></em></td></tr></table></div></div><br class="example-break"></div><div class="sect2" title="Install and Configure Idealx smbldap-tools Scripts"><div class="titlepage"><div><div><h3 class="title"><a name="sbeidealx"></a>Install and Configure Idealx smbldap-tools Scripts</h3></div></div></div><p> - <a class="indexterm" name="id345910"></a> - The Idealx scripts, or equivalent, are necessary to permit Samba-3 to manage accounts - on the LDAP server. You have chosen the Idealx scripts because they are the best-known - LDAP configuration scripts. The use of these scripts will help avoid the necessity - to create custom scripts. It is easy to download them from the Idealx - <a class="ulink" href="http://samba.idealx.org/index.en.html" target="_top">Web site</a>. The tarball may - be directly <a class="ulink" href="http://samba.idealx.org/dist/smbldap-tools-0.9.1.tgz" target="_top">downloaded</a> - from this site also. Alternatively, you may obtain the - <a class="ulink" href="http://samba.idealx.org/dist/smbldap-tools-0.9.1-1.src.rpm" target="_top">smbldap-tools-0.9.1-1.src.rpm</a> - file that may be used to build an installable RPM package for your Linux system. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> -The smbldap-tools scripts can be installed in any convenient directory of your choice, in which case you must -change the path to them in your <code class="filename">smb.conf</code> file on the PDC (<code class="constant">MASSIVE</code>). -</p></div><p> - The smbldap-tools are located in <code class="filename">/opt/IDEALX/sbin</code>. - The scripts are not needed on BDC machines because all LDAP updates are handled by - the PDC alone. - </p><div class="sect3" title="Installation of smbldap-tools from the Tarball"><div class="titlepage"><div><div><h4 class="title"><a name="id345968"></a>Installation of smbldap-tools from the Tarball</h4></div></div></div><p> - To perform a manual installation of the smbldap-tools scripts, the following procedure may be used: - </p><div class="procedure" title="Procedure 5.5. Unpacking and Installation Steps for the smbldap-tools Tarball"><a name="idealxscript"></a><p class="title"><b>Procedure 5.5. Unpacking and Installation Steps for the <code class="constant">smbldap-tools</code> Tarball</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Create the <code class="filename">/opt/IDEALX/sbin</code> directory, and set its permissions - and ownership as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /opt/IDEALX/sbin -<code class="prompt">root# </code> chown root:root /opt/IDEALX/sbin -<code class="prompt">root# </code> chmod 755 /opt/IDEALX/sbin -<code class="prompt">root# </code> mkdir -p /etc/smbldap-tools -<code class="prompt">root# </code> chown root:root /etc/smbldap-tools -<code class="prompt">root# </code> chmod 755 /etc/smbldap-tools -</pre><p> - </p></li><li class="step" title="Step 2"><p> - If you wish to use the downloaded tarball, unpack the smbldap-tools in a suitable temporary location. - Change into either the directory extracted from the tarball or the smbldap-tools - directory in your <code class="filename">/usr/share/doc/packages</code> directory tree. - </p></li><li class="step" title="Step 3"><p> - Copy all the <code class="filename">smbldap-*</code> and the <code class="filename">configure.pl</code> files into the - <code class="filename">/opt/IDEALX/sbin</code> directory, as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> cd smbldap-tools-0.9.1/ -<code class="prompt">root# </code> cp smbldap-* configure.pl *pm /opt/IDEALX/sbin/ -<code class="prompt">root# </code> cp smbldap*conf /etc/smbldap-tools/ -<code class="prompt">root# </code> chmod 750 /opt/IDEALX/sbin/smbldap-* -<code class="prompt">root# </code> chmod 750 /opt/IDEALX/sbin/configure.pl -<code class="prompt">root# </code> chmod 640 /etc/smbldap-tools/smbldap.conf -<code class="prompt">root# </code> chmod 600 /etc/smbldap-tools/smbldap_bind.conf -</pre><p> - </p></li><li class="step" title="Step 4"><p> - The smbldap-tools scripts master control file must now be configured. - Change to the <code class="filename">/opt/IDEALX/sbin</code> directory, then edit the - <code class="filename">smbldap_tools.pm</code> to affect the changes - shown here: -</p><pre class="screen"> -... -# ugly funcs using global variables and spawning openldap clients - -my $smbldap_conf="/etc/smbldap-tools/smbldap.conf"; -my $smbldap_bind_conf="/etc/smbldap-tools/smbldap_bind.conf"; -... -</pre><p> - </p></li><li class="step" title="Step 5"><p> - To complete the configuration of the smbldap-tools, set the permissions and ownership - by executing the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> chown root:root /opt/IDEALX/sbin/* -<code class="prompt">root# </code> chmod 755 /opt/IDEALX/sbin/smbldap-* -<code class="prompt">root# </code> chmod 640 /opt/IDEALX/sbin/smb*pm -</pre><p> - The smbldap-tools scripts are now ready for the configuration step outlined in - <a class="link" href="happy.html#smbldap-init" title="Configuration of smbldap-tools">“Configuration of smbldap-tools”</a>. - </p></li></ol></div></div><div class="sect3" title="Installing smbldap-tools from the RPM Package"><div class="titlepage"><div><div><h4 class="title"><a name="id346204"></a>Installing smbldap-tools from the RPM Package</h4></div></div></div><p> - In the event that you have elected to use the RPM package provided by Idealx, download the - source RPM <code class="filename">smbldap-tools-0.9.1-1.src.rpm</code>, then follow this procedure: - </p><div class="procedure" title="Procedure 5.6. Installation Steps for smbldap-tools RPM's"><a name="id346220"></a><p class="title"><b>Procedure 5.6. Installation Steps for <code class="constant">smbldap-tools</code> RPM's</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Install the source RPM that has been downloaded as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -i smbldap-tools-0.9.1-1.src.rpm -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Change into the directory in which the SPEC files are located. On SUSE Linux: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /usr/src/packages/SPECS -</pre><p> - On Red Hat Linux systems: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /usr/src/redhat/SPECS -</pre><p> - </p></li><li class="step" title="Step 3"><p> - Edit the <code class="filename">smbldap-tools.spec</code> file to change the value of the - <code class="constant">_sysconfig</code> macro as shown here: -</p><pre class="screen"> -%define _prefix /opt/IDEALX -%define _sysconfdir /etc -</pre><p> - Note: Any suitable directory can be specified. - </p></li><li class="step" title="Step 4"><p> - Build the package by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> rpmbuild -ba -v smbldap-tools.spec -</pre><p> - A build process that has completed without error will place the installable binary - files in the directory <code class="filename">../RPMS/noarch</code>. - </p></li><li class="step" title="Step 5"><p> - Install the binary package by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -Uvh ../RPMS/noarch/smbldap-tools-0.9.1-1.noarch.rpm -</pre><p> - </p></li></ol></div><p> - The Idealx scripts should now be ready for configuration using the steps outlined in - <a class="link" href="happy.html#smbldap-init" title="Configuration of smbldap-tools">Configuration of smbldap-tools</a>. - </p></div><div class="sect3" title="Configuration of smbldap-tools"><div class="titlepage"><div><div><h4 class="title"><a name="smbldap-init"></a>Configuration of smbldap-tools</h4></div></div></div><p> - Prior to use, the smbldap-tools must be configured to match the settings in the <code class="filename">smb.conf</code> file - and to match the settings in the <code class="filename">/etc/openldap/slapd.conf</code> file. The assumption - is made that the <code class="filename">smb.conf</code> file has correct contents. The following procedure ensures that - this is completed correctly: - </p><p> - The smbldap-tools require that the NetBIOS name (machine name) of the Samba server be included - in the <code class="filename">smb.conf</code> file. - </p><div class="procedure" title="Procedure 5.7. Configuration Steps for smbldap-tools to Enable Use"><a name="id346402"></a><p class="title"><b>Procedure 5.7. Configuration Steps for <code class="constant">smbldap-tools</code> to Enable Use</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Change into the directory that contains the <code class="filename">configure.pl</code> script. -</p><pre class="screen"> -<code class="prompt">root# </code> cd /opt/IDEALX/sbin -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Execute the <code class="filename">configure.pl</code> script as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> ./configure.pl -</pre><p> - The interactive use of this script for the PDC is demonstrated here: -</p><pre class="screen"> -<code class="prompt">root# </code> /opt/IDEALX/sbin/configure.pl --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= - smbldap-tools script configuration - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Before starting, check - . if your samba controller is up and running. - . if the domain SID is defined (you can get it with the - 'net getlocalsid') - - . you can leave the configuration using the Crtl-c key combination - . empty value can be set with the "." character --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Looking for configuration files... - -Samba Config File Location [/etc/samba/smb.conf] > -smbldap-tools configuration file Location (global parameters) - [/etc/opt/IDEALX/smbldap-tools/smbldap.conf] > -smbldap Config file Location (bind parameters) - [/etc/opt/IDEALX/smbldap-tools/smbldap_bind.conf] > --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Let's start configuring the smbldap-tools scripts ... - -. workgroup name: name of the domain Samba act as a PDC - workgroup name [MEGANET2] > -. netbios name: netbios name of the samba controler - netbios name [MASSIVE] > -. logon drive: local path to which the home directory - will be connected (for NT Workstations). Ex: 'H:' - logon drive [H:] > -. logon home: home directory location (for Win95/98 or NT Workstation) - (use %U as username) Ex:'\\MASSIVE\%U' - logon home (press the "." character if you don't want homeDirectory) - [\\MASSIVE\%U] > -. logon path: directory where roaming profiles are stored. - Ex:'\\MASSIVE\profiles\%U' - logon path (press the "." character - if you don't want roaming profile) [\\%L\profiles\%U] > -. home directory prefix (use %U as username) - [/home/%U] > /data/users/%U -. default users' homeDirectory mode [700] > -. default user netlogon script (use %U as username) - [scripts\logon.bat] > - default password validation time (time in days) [45] > 900 -. ldap suffix [dc=abmas,dc=biz] > -. ldap group suffix [ou=Groups] > -. ldap user suffix [ou=People,ou=Users] > -. ldap machine suffix [ou=Computers,ou=Users] > -. Idmap suffix [ou=Idmap] > -. sambaUnixIdPooldn: object where you want to store the next uidNumber - and gidNumber available for new users and groups - sambaUnixIdPooldn object (relative to ${suffix}) - [sambaDomainName=MEGANET2] > -. ldap master server: IP adress or DNS name of the master - (writable) ldap server - ldap master server [massive.abmas.biz] > -. ldap master port [389] > -. ldap master bind dn [cn=Manager,dc=abmas,dc=biz] > -. ldap master bind password [] > -. ldap slave server: IP adress or DNS name of the slave ldap server: - can also be the master one - ldap slave server [massive.abmas.biz] > -. ldap slave port [389] > -. ldap slave bind dn [cn=Manager,dc=abmas,dc=biz] > -. ldap slave bind password [] > -. ldap tls support (1/0) [0] > -. SID for domain MEGANET2: SID of the domain - (can be obtained with 'net getlocalsid MASSIVE') - SID for domain MEGANET2 - [S-1-5-21-3504140859-1010554828-2431957765]] > -. unix password encryption: encryption used for unix passwords - unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA) [SSHA] > MD5 -. default user gidNumber [513] > -. default computer gidNumber [515] > -. default login shell [/bin/bash] > -. default skeleton directory [/etc/skel] > -. default domain name to append to mail adress [] > abmas.biz --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -backup old configuration files: - /etc/opt/IDEALX/smbldap-tools/smbldap.conf-> - /etc/opt/IDEALX/smbldap-tools/smbldap.conf.old - /etc/opt/IDEALX/smbldap-tools/smbldap_bind.conf-> - /etc/opt/IDEALX/smbldap-tools/smbldap_bind.conf.old -writing new configuration file: - /etc/opt/IDEALX/smbldap-tools/smbldap.conf done. - /etc/opt/IDEALX/smbldap-tools/smbldap_bind.conf done. -</pre><p> - Since a slave LDAP server has not been configured, it is necessary to specify the IP - address of the master LDAP server for both the master and the slave configuration - prompts. - </p></li><li class="step" title="Step 3"><p> - Change to the directory that contains the <code class="filename">smbldap.conf</code> file, - then verify its contents. - </p></li></ol></div><p> - The smbldap-tools are now ready for use. - </p></div></div><div class="sect2" title="LDAP Initialization and Creation of User and Group Accounts"><div class="titlepage"><div><div><h3 class="title"><a name="id346546"></a>LDAP Initialization and Creation of User and Group Accounts</h3></div></div></div><p> - The LDAP database must be populated with well-known Windows domain user accounts and domain group - accounts before Samba can be used. The following procedures step you through the process. - </p><p> - At this time, Samba-3 requires that on a PDC all UNIX (POSIX) group accounts that are - mapped (linked) to Windows domain group accounts must be in the LDAP database. It does not - hurt to have UNIX user and group accounts in both the system files as well as in the LDAP - database. From a UNIX system perspective, the NSS resolver checks system files before - referring to LDAP. If the UNIX system can resolve (find) an account in the system file, it - does not need to ask LDAP. - </p><p> - Addition of an account to the LDAP backend can be done in two ways: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id346574"></a> - <a class="indexterm" name="id346580"></a> - <a class="indexterm" name="id346587"></a> - <a class="indexterm" name="id346594"></a> - <a class="indexterm" name="id346601"></a> - <a class="indexterm" name="id346608"></a> - If you always have a user account in the <code class="filename">/etc/passwd</code> on every - server or in a NIS(+) backend, it is not necessary to add POSIX accounts for them in - LDAP. In this case, you can add Windows domain user accounts using the - <code class="literal">pdbedit</code> utility. Use of this tool from the command line adds the - SambaSamAccount entry for the user, but does not add the PosixAccount entry for the user. - </p><p> - This is the least desirable method because when LDAP is used as the passwd backend Samba - expects the POSIX account to be in LDAP also. It is possible to use the PADL account - migration tool to migrate all system accounts from either the <code class="filename">/etc/passwd</code> - files, or from NIS, to LDAP. - </p></li><li class="listitem"><p> - If you decide that it is probably a good idea to add both the PosixAccount attributes - as well as the SambaSamAccount attributes for each user, then a suitable script is needed. - In the example system you are installing in this exercise, you are making use of the - Idealx smbldap-tools scripts. A copy of these tools, preconfigured for this system, - is included on the enclosed CD-ROM under <code class="filename">Chap06/Tools.</code> - </p></li></ul></div><p> - <a class="indexterm" name="id346659"></a> - If you wish to have more control over how the LDAP database is initialized or - if you don't want to use the Idealx smbldap-tools, you should refer to - <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#altldapcfg" title="Alternative LDAP Database Initialization">“Alternative LDAP Database Initialization”</a>. - </p><p> - <a class="indexterm" name="id346685"></a> - The following steps initialize the LDAP database, and then you can add user and group - accounts that Samba can use. You use the <code class="literal">smbldap-populate</code> to - seed the LDAP database. You then manually add the accounts shown in <a class="link" href="happy.html#sbehap-bigacct" title="Table 5.3. Abmas Network Users and Groups">“Abmas Network Users and Groups”</a>. - The list of users does not cover all 500 network users; it provides examples only. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id346712"></a> - <a class="indexterm" name="id346720"></a> - <a class="indexterm" name="id346730"></a> - In the following examples, as the LDAP database is initialized, we do create a container - for Computer (machine) accounts. In the Samba-3 <code class="filename">smb.conf</code> files, specific use is made - of the People container, not the Computers container, for domain member accounts. This is not a - mistake; it is a deliberate action that is necessitated by the fact that the resolution of - a machine (computer) account to a UID is done via NSS. The only way this can be handled is - using the NSS (<code class="filename">/etc/nsswitch.conf</code>) entry for <code class="constant">passwd</code>, - which is resolved using the <code class="filename">nss_ldap</code> library. The configuration file for - the <code class="filename">nss_ldap</code> library is the file <code class="filename">/etc/ldap.conf</code> that - provides only one possible LDAP search command that is specified by the entry called - <code class="constant">nss_base_passwd</code>. This means that the search path must take into account - the directory structure so that the LDAP search will commence at a level that is above - both the Computers container and the Users (or People) container. If this is done, it is - necessary to use a search that will descend the directory tree so that the machine account - can be found. Alternatively, by placing all machine accounts in the People container, we - are able to sidestep this limitation. This is the simpler solution that has been adopted - in this chapter. - </p></div><div class="table"><a name="sbehap-bigacct"></a><p class="title"><b>Table 5.3. Abmas Network Users and Groups</b></p><div class="table-contents"><table summary="Abmas Network Users and Groups" border="1"><colgroup><col align="left"><col align="left"><col align="left"><col align="left"></colgroup><thead><tr><th align="center">Account Name</th><th align="center">Type</th><th align="center">ID</th><th align="center">Password</th></tr></thead><tbody><tr><td align="left">Robert Jordan</td><td align="left">User</td><td align="left">bobj</td><td align="left">n3v3r2l8</td></tr><tr><td align="left">Stanley Soroka</td><td align="left">User</td><td align="left">stans</td><td align="left">impl13dst4r</td></tr><tr><td align="left">Christine Roberson</td><td align="left">User</td><td align="left">chrisr</td><td align="left">S9n0nw4ll</td></tr><tr><td align="left">Mary Vortexis</td><td align="left">User</td><td align="left">maryv</td><td align="left">kw13t0n3</td></tr><tr><td align="left">Accounts</td><td align="left">Group</td><td align="left">Accounts</td><td align="left"> </td></tr><tr><td align="left">Finances</td><td align="left">Group</td><td align="left">Finances</td><td align="left"> </td></tr><tr><td align="left">Insurance</td><td align="left">Group</td><td align="left">PIOps</td><td align="left"> </td></tr></tbody></table></div></div><br class="table-break"><div class="procedure" title="Procedure 5.8. LDAP Directory Initialization Steps"><a name="creatacc"></a><p class="title"><b>Procedure 5.8. LDAP Directory Initialization Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Start the LDAP server by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap start -Starting ldap-server done -</pre><p> - </p></li><li class="step" title="Step 2"><p> - Change to the <code class="filename">/opt/IDEALX/sbin</code> directory. - </p></li><li class="step" title="Step 3"><p> - Execute the script that will populate the LDAP database as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> ./smbldap-populate -a root -k 0 -m 0 -</pre><p> - The expected output from this is: -</p><pre class="screen"> -Using workgroup name from smb.conf: sambaDomainName=MEGANET2 --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=> Warning: you must update smbldap.conf configuration file to : -=> sambaUnixIdPooldn parameter must be set - to "sambaDomainName=MEGANET2,dc=abmas,dc=biz" --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Using builtin directory structure -adding new entry: dc=abmas,dc=biz -adding new entry: ou=People,dc=abmas,dc=biz -adding new entry: ou=Groups,dc=abmas,dc=biz -entry ou=People,dc=abmas,dc=biz already exist. -adding new entry: ou=Idmap,dc=abmas,dc=biz -adding new entry: sambaDomainName=MEGANET2,dc=abmas,dc=biz -adding new entry: uid=root,ou=People,dc=abmas,dc=biz -adding new entry: uid=nobody,ou=People,dc=abmas,dc=biz -adding new entry: cn=Domain Admins,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Domain Users,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Domain Guests,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Domain Computers,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Administrators,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Print Operators,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Backup Operators,ou=Groups,dc=abmas,dc=biz -adding new entry: cn=Replicators,ou=Groups,dc=abmas,dc=biz -</pre><p> - </p></li><li class="step" title="Step 4"><p> - Edit the <code class="filename">/etc/smbldap-tools/smbldap.conf</code> file so that the following - information is changed from: -</p><pre class="screen"> -# Where to store next uidNumber and gidNumber available -sambaUnixIdPooldn="cn=NextFreeUnixId,${suffix}" -</pre><p> - to read, after modification: -</p><pre class="screen"> -# Where to store next uidNumber and gidNumber available -#sambaUnixIdPooldn="cn=NextFreeUnixId,${suffix}" -sambaUnixIdPooldn="sambaDomainName=MEGANET2,dc=abmas,dc=biz" -</pre><p> - </p></li><li class="step" title="Step 5"><p> - It is necessary to restart the LDAP server as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap restart -Shutting down ldap-server done -Starting ldap-server done -</pre><p> - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id347108"></a> - So that we can use a global IDMAP repository, the LDAP directory must have a container object for IDMAP data. - There are several ways you can check that your LDAP database is able to receive IDMAP information. One of - the simplest is to execute: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat | grep -i idmap -dn: ou=Idmap,dc=abmas,dc=biz -ou: idmap -</pre><p> - <a class="indexterm" name="id347129"></a> - If the execution of this command does not return IDMAP entries, you need to create an LDIF - template file (see <a class="link" href="happy.html#sbehap-ldifadd" title="Example 5.12. LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF">“LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF”</a>). You can add the required entries using - the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> ldapadd -x -D "cn=Manager,dc=abmas,dc=biz" \ - -w not24get < /etc/openldap/idmap.LDIF -</pre><p> - Samba automatically populates this LDAP directory container when it needs to. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id347164"></a> - It looks like all has gone well, as expected. Let's confirm that this is the case - by running a few tests. First we check the contents of the database directly - by running <code class="literal">slapcat</code> as follows (the output has been cut down): -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat -dn: dc=abmas,dc=biz -objectClass: dcObject -objectClass: organization -dc: abmas -o: abmas -structuralObjectClass: organization -entryUUID: 5ab02bf6-c536-1027-9d29-b1f32350fb43 -creatorsName: cn=Manager,dc=abmas,dc=biz -createTimestamp: 20031217234200Z -entryCSN: 2003121723:42:00Z#0x0001#0#0000 -modifiersName: cn=Manager,dc=abmas,dc=biz -modifyTimestamp: 20031217234200Z -... -dn: cn=Domain Computers,ou=Groups,dc=abmas,dc=biz -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 553 -cn: Domain Computers -description: Netbios Domain Computers accounts -sambaSID: S-1-5-21-3504140859-1010554828-2431957765-553 -sambaGroupType: 2 -displayName: Domain Computers -structuralObjectClass: posixGroup -entryUUID: 5e0a41d8-c536-1027-9d3b-b1f32350fb43 -creatorsName: cn=Manager,dc=abmas,dc=biz -createTimestamp: 20031217234206Z -entryCSN: 2003121723:42:06Z#0x0002#0#0000 -modifiersName: cn=Manager,dc=abmas,dc=biz -modifyTimestamp: 20031217234206Z -</pre><p> - This looks good so far. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id347205"></a> - The next step is to prove that the LDAP server is running and responds to a - search request. Execute the following as shown (output has been cut to save space): -</p><pre class="screen"> -<code class="prompt">root# </code> ldapsearch -x -b "dc=abmas,dc=biz" "(ObjectClass=*)" -# extended LDIF -# -# LDAPv3 -# base <dc=abmas,dc=biz> with scope sub -# filter: (ObjectClass=*) -# requesting: ALL -# - -# abmas.biz -dn: dc=abmas,dc=biz -objectClass: dcObject -objectClass: organization -dc: abmas -o: abmas - -# People, abmas.biz -dn: ou=People,dc=abmas,dc=biz -objectClass: organizationalUnit -ou: People -... -# Domain Computers, Groups, abmas.biz -dn: cn=Domain Computers,ou=Groups,dc=abmas,dc=biz -objectClass: posixGroup -objectClass: sambaGroupMapping -gidNumber: 553 -cn: Domain Computers -description: Netbios Domain Computers accounts -sambaSID: S-1-5-21-3504140859-1010554828-2431957765-553 -sambaGroupType: 2 -displayName: Domain Computers - -# search result -search: 2 -result: 0 Success - -# numResponses: 20 -# numEntries: 19 -</pre><p> - Good. It is all working just fine. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id347246"></a> - You must now make certain that the NSS resolver can interrogate LDAP also. - Execute the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd | grep root -root:x:998:512:Netbios Domain Administrator:/home:/bin/false - -<code class="prompt">root# </code> getent group | grep Domain -Domain Admins:x:512:root -Domain Users:x:513: -Domain Guests:x:514: -Domain Computers:x:553: -</pre><p> - <a class="indexterm" name="id347273"></a> - This demonstrates that the <code class="literal">nss_ldap</code> library is functioning - as it should. If these two steps fail to produce this information, refer to - <a class="link" href="happy.html#sbeavoid" title="Avoiding Failures: Solving Problems Before They Happen">“Avoiding Failures: Solving Problems Before They Happen”</a> for diagnostic procedures that can be followed to - isolate the cause of the problem. Proceed to the next step only when the previous steps - have been successfully completed. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id347301"></a> - <a class="indexterm" name="id347308"></a> - <a class="indexterm" name="id347314"></a> - Our database is now ready for the addition of network users. For each user for - whom an account must be created, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> ./smbldap-useradd -m -a <code class="constant">username</code> -<code class="prompt">root# </code> ./smbldap-passwd <code class="constant">username</code> -Changing password for <code class="constant">username</code> -New password : XXXXXXXX -Retype new password : XXXXXXXX - -<code class="prompt">root# </code> smbpasswd <code class="constant">username</code> -New SMB password: XXXXXXXX -Retype new SMB password: XXXXXXXX -</pre><p> - where <code class="constant">username</code> is the login ID for each user. - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id347372"></a> - Now verify that the UNIX (POSIX) accounts can be resolved via NSS by executing the - following: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -root:x:0:0:root:/root:/bin/bash -bin:x:1:1:bin:/bin:/bin/bash -... -root:x:0:512:Netbios Domain Administrator:/home:/bin/false -nobody:x:999:514:nobody:/dev/null:/bin/false -bobj:x:1000:513:System User:/home/bobj:/bin/bash -stans:x:1001:513:System User:/home/stans:/bin/bash -chrisr:x:1002:513:System User:/home/chrisr:/bin/bash -maryv:x:1003:513:System User:/home/maryv:/bin/bash -</pre><p> - This demonstrates that user account resolution via LDAP is working. - </p></li><li class="step" title="Step 12"><p> - This step will determine whether or not identity resolution is working correctly. - Do not procede is this step fails, rather find the cause of the failure. The - <code class="literal">id</code> command may be used to validate your configuration so far, - as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> id chrisr -uid=1002(chrisr) gid=513(Domain Users) groups=513(Domain Users) -</pre><p> - This confirms that the UNIX (POSIX) user account information can be resolved from LDAP - by system tools that make a getentpw() system call. - </p></li><li class="step" title="Step 13"><p> - <a class="indexterm" name="id347429"></a> - The root account must have UID=0; if not, this means that operations conducted from - a Windows client using tools such as the Domain User Manager fails under UNIX because - the management of user and group accounts requires that the UID=0. Additionally, it is - a good idea to make certain that no matter how root account credentials are resolved, - the home directory and shell are valid. You decide to effect this immediately - as demonstrated here: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /opt/IDEALX/sbin -<code class="prompt">root# </code> ./smbldap-usermod -u 0 -d /root -s /bin/bash root -</pre><p> - </p></li><li class="step" title="Step 14"><p> - Verify that the changes just made to the <code class="constant">root</code> account were - accepted by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd | grep root -root:x:0:0:root:/root:/bin/bash -root:x:0:512:Netbios Domain Administrator:/root:/bin/bash -</pre><p> - This demonstrates that the changes were accepted. - </p></li><li class="step" title="Step 15"><p> - Make certain that a home directory has been created for every user by listing the - directories in <code class="filename">/home</code> as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> ls -al /home -drwxr-xr-x 8 root root 176 Dec 17 18:50 ./ -drwxr-xr-x 21 root root 560 Dec 15 22:19 ../ -drwx------ 7 bobj Domain Users 568 Dec 17 01:16 bobj/ -drwx------ 7 chrisr Domain Users 568 Dec 17 01:19 chrisr/ -drwx------ 7 maryv Domain Users 568 Dec 17 01:27 maryv/ -drwx------ 7 stans Domain Users 568 Dec 17 01:43 stans/ -</pre><p> - This is precisely what we want to see. - </p></li><li class="step" title="Step 16"><p> - <a class="indexterm" name="id347517"></a> - <a class="indexterm" name="id347524"></a> - The final validation step involves making certain that Samba-3 can obtain the user - accounts from the LDAP ldapsam passwd backend. Execute the following command as shown: -</p><pre class="screen"> -<code class="prompt">root# </code> pdbedit -Lv chrisr -Unix username: chrisr -NT username: chrisr -Account Flags: [U ] -User SID: S-1-5-21-3504140859-1010554828-2431957765-3004 -Primary Group SID: S-1-5-21-3504140859-1010554828-2431957765-513 -Full Name: System User -Home Directory: \\MASSIVE\homes -HomeDir Drive: H: -Logon Script: scripts\login.cmd -Profile Path: \\MASSIVE\profiles\chrisr -Domain: MEGANET2 -Account desc: System User -Workstations: -Munged dial: -Logon time: 0 -Logoff time: Mon, 18 Jan 2038 20:14:07 GMT -Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT -Password last set: Wed, 17 Dec 2003 17:17:40 GMT -Password can change: Wed, 17 Dec 2003 17:17:40 GMT -Password must change: Mon, 18 Jan 2038 20:14:07 GMT -Last bad password : 0 -Bad password count : 0 -Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF -</pre><p> - This looks good. Of course, you fully expected that it would all work, didn't you? - </p></li><li class="step" title="Step 17"><p> - <a class="indexterm" name="id347558"></a> - Now you add the group accounts that are used on the Abmas network. Execute - the following exactly as shown: -</p><pre class="screen"> -<code class="prompt">root# </code> ./smbldap-groupadd -a Accounts -<code class="prompt">root# </code> ./smbldap-groupadd -a Finances -<code class="prompt">root# </code> ./smbldap-groupadd -a PIOps -</pre><p> - The addition of groups does not involve keyboard interaction, so the lack of console - output is of no concern. - </p></li><li class="step" title="Step 18"><p> - <a class="indexterm" name="id347598"></a> - You really do want to confirm that UNIX group resolution from LDAP is functioning - as it should. Let's do this as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> getent group -... -Domain Admins:x:512:root -Domain Users:x:513:bobj,stans,chrisr,maryv -Domain Guests:x:514: -... -Accounts:x:1000: -Finances:x:1001: -PIOps:x:1002: -</pre><p> - The well-known special accounts (Domain Admins, Domain Users, Domain Guests), as well - as our own site-specific group accounts, are correctly listed. This is looking good. - </p></li><li class="step" title="Step 19"><p> - <a class="indexterm" name="id347627"></a> - The final step we need to validate is that Samba can see all the Windows domain groups - and that they are correctly mapped to the respective UNIX group account. To do this, - just execute the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> net groupmap list -Domain Admins (S-1-5-21-3504140859-...-2431957765-512) -> Domain Admins -Domain Users (S-1-5-21-3504140859-...-2431957765-513) -> Domain Users -Domain Guests (S-1-5-21-3504140859-...-2431957765-514) -> Domain Guests -... -Accounts (S-1-5-21-3504140859-1010554828-2431957765-3001) -> Accounts -Finances (S-1-5-21-3504140859-1010554828-2431957765-3003) -> Finances -PIOps (S-1-5-21-3504140859-1010554828-2431957765-3005) -> PIOps -</pre><p> - This is looking good. Congratulations it works! Note that in the above output - the lines were shortened by replacing the middle value (1010554828) of the SID with the - ellipsis (...). - </p></li><li class="step" title="Step 20"><p> - The server you have so carefully built is now ready for another important step. You - start the Samba-3 server and validate its operation. Execute the following to render all - the processes needed fully operative so that, on system reboot, they are automatically - started: -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig named on -<code class="prompt">root# </code> chkconfig dhcpd on -<code class="prompt">root# </code> chkconfig ldap on -<code class="prompt">root# </code> chkconfig nmb on -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> chkconfig winbind on -<code class="prompt">root# </code> rcnmb start -<code class="prompt">root# </code> rcsmb start -<code class="prompt">root# </code> rcwinbind start -</pre><p> - </p></li><li class="step" title="Step 21"><p> - The next step might seem a little odd at this point, but take note that you are about to - start <code class="literal">winbindd</code>, which must be able to authenticate to the PDC via the - localhost interface with the <code class="literal">smbd</code> process. This account can be - easily created by joining the PDC to the domain by executing the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -S MASSIVE -U root%not24get -</pre><p> - Note: Before executing this command on the PDC, both <code class="literal">nmbd</code> and - <code class="literal">smbd</code> must be started so that the <code class="literal">net</code> command - can communicate with <code class="literal">smbd</code>. The expected output is as follows: -</p><pre class="screen"> -Joined domain MEGANET2. -</pre><p> - This indicates that the domain security account for the PDC has been correctly created. - </p></li><li class="step" title="Step 22"><p> - At this time it is necessary to restart <code class="literal">winbindd</code> so that it can - correctly authenticate to the PDC. The following command achieves that: -</p><pre class="screen"> -<code class="prompt">root# </code> rcwinbind restart -</pre><p> - </p></li><li class="step" title="Step 23"><p> - <a class="indexterm" name="id347824"></a> - You may now check Samba-3 operation as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient -L massive -U% - - Sharename Type Comment - --------- ---- ------- - IPC$ IPC IPC Service (Samba 3.0.20) - accounts Disk Accounting Files - service Disk Financial Services Files - pidata Disk Property Insurance Files - apps Disk Application Files - netlogon Disk Network Logon Service - profiles Disk Profile Share - profdata Disk Profile Data Share - ADMIN$ IPC IPC Service (Samba 3.0.20) - - Server Comment - --------- ------- - MASSIVE Samba 3.0.20 - - Workgroup Master - --------- ------- - MEGANET2 MASSIVE -</pre><p> - This shows that an anonymous connection is working. - </p></li><li class="step" title="Step 24"><p> - For your finale, let's try an authenticated connection: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient //massive/bobj -Ubobj%n3v3r2l8 -smb: \> dir - . D 0 Wed Dec 17 01:16:19 2003 - .. D 0 Wed Dec 17 19:04:42 2003 - bin D 0 Tue Sep 2 04:00:57 2003 - Documents D 0 Sun Nov 30 07:28:20 2003 - public_html D 0 Sun Nov 30 07:28:20 2003 - .urlview H 311 Fri Jul 7 06:55:35 2000 - .dvipsrc H 208 Fri Nov 17 11:22:02 1995 - - 57681 blocks of size 524288. 57128 blocks available -smb: \> q -</pre><p> - Well done. All is working fine. - </p></li></ol></div><p> - The server <code class="constant">MASSIVE</code> is now configured, and it is time to move onto the next task. - </p></div><div class="sect2" title="Printer Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="sbehap-ptrcfg"></a>Printer Configuration</h3></div></div></div><p> - <a class="indexterm" name="id347908"></a> - The configuration for Samba-3 to enable CUPS raw-print-through printing has already been - taken care of in the <code class="filename">smb.conf</code> file. The only preparation needed for <code class="constant">smart</code> - printing to be possible involves creation of the directories in which Samba-3 stores - Windows printing driver files. - </p><div class="procedure" title="Procedure 5.9. Printer Configuration Steps"><a name="id347927"></a><p class="title"><b>Procedure 5.9. Printer Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure all network-attached printers to have a fixed IP address. - </p></li><li class="step" title="Step 2"><p> - Create an entry in the DNS database on the server <code class="constant">MASSIVE</code> - in both the forward lookup database for the zone <code class="constant">abmas.biz.hosts</code> - and in the reverse lookup database for the network segment that the printer is to - be located in. Example configuration files for similar zones were presented in <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a>, - <a class="link" href="secure.html#abmasbiz" title="Example 3.14. DNS Abmas.biz Forward Zone File">“DNS Abmas.biz Forward Zone File”</a> and in <a class="link" href="secure.html#eth2zone" title="Example 3.13. DNS 192.168.2 Reverse Zone File">“DNS 192.168.2 Reverse Zone File”</a>. - </p></li><li class="step" title="Step 3"><p> - Follow the instructions in the printer manufacturers' manuals to permit printing - to port 9100. Use any other port the manufacturer specifies for direct mode, - raw printing. This allows the CUPS spooler to print using raw mode protocols. - <a class="indexterm" name="id347982"></a> - <a class="indexterm" name="id347989"></a> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id348002"></a> - <a class="indexterm" name="id348009"></a> - Only on the server to which the printer is attached, configure the CUPS Print - Queues as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> lpadmin -p <em class="parameter"><code>printque</code></em> - -v socket://<em class="parameter"><code>printer-name</code></em>.abmas.biz:9100 -E -</pre><p> - <a class="indexterm" name="id348043"></a> - This step creates the necessary print queue to use no assigned print filter. This - is ideal for raw printing, that is, printing without use of filters. - The name <em class="parameter"><code>printque</code></em> is the name you have assigned for - the particular printer. - </p></li><li class="step" title="Step 5"><p> - Print queues may not be enabled at creation. Make certain that the queues - you have just created are enabled by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/bin/enable <em class="parameter"><code>printque</code></em> -</pre><p> - </p></li><li class="step" title="Step 6"><p> - Even though your print queue may be enabled, it is still possible that it - may not accept print jobs. A print queue will service incoming printing - requests only when configured to do so. Ensure that your print queue is - set to accept incoming jobs by executing the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/bin/accept <em class="parameter"><code>printque</code></em> -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id348117"></a> - <a class="indexterm" name="id348124"></a> - <a class="indexterm" name="id348130"></a> - Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream application/vnd.cups-raw 0 - -</pre><p> - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id348157"></a> - Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream -</pre><p> - </p></li><li class="step" title="Step 9"><p> - Refer to the CUPS printing manual for instructions regarding how to configure - CUPS so that print queues that reside on CUPS servers on remote networks - route print jobs to the print server that owns that queue. The default setting - on your CUPS server may automatically discover remotely installed printers and - may permit this functionality without requiring specific configuration. - </p></li><li class="step" title="Step 10"><p> - The following action creates the necessary directory subsystem. Follow these - steps to printing heaven: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /var/lib/samba/drivers/{W32ALPHA,W32MIPS,W32X86,WIN40} -<code class="prompt">root# </code> chown -R root:root /var/lib/samba/drivers -<code class="prompt">root# </code> chmod -R ug=rwx,o=rx /var/lib/samba/drivers -</pre><p> - </p></li></ol></div></div></div><div class="sect1" title="Samba-3 BDC Configuration"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sbehap-bldg1"></a>Samba-3 BDC Configuration</h2></div></div></div><div class="procedure" title="Procedure 5.10. Configuration of BDC Called: BLDG1"><a name="id348233"></a><p class="title"><b>Procedure 5.10. Configuration of BDC Called: <code class="constant">BLDG1</code></b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Install the files in <a class="link" href="happy.html#sbehap-bldg1-smbconf" title="Example 5.8. LDAP Based smb.conf File, Server: BLDG1">“LDAP Based smb.conf File, Server: BLDG1”</a>, - <a class="link" href="happy.html#sbehap-shareconfa" title="Example 5.10. LDAP Based smb.conf File, Shares Section Part A">“LDAP Based smb.conf File, Shares Section Part A”</a>, and <a class="link" href="happy.html#sbehap-shareconfb" title="Example 5.11. LDAP Based smb.conf File, Shares Section Part B">“LDAP Based smb.conf File, Shares Section Part B”</a> - into the <code class="filename">/etc/samba/</code> directory. The three files - should be added together to form the <code class="filename">smb.conf</code> file. - </p></li><li class="step" title="Step 2"><p> - Verify the <code class="filename">smb.conf</code> file as in step 2 of <a class="link" href="happy.html#sbehap-massive" title="Samba-3 PDC Configuration">“Samba-3 PDC Configuration”</a>. - </p></li><li class="step" title="Step 3"><p> - Carefully follow the steps outlined in <a class="link" href="happy.html#sbehap-PAM-NSS" title="PAM and NSS Client Configuration">“PAM and NSS Client Configuration”</a>, taking - particular note to install the correct <code class="filename">ldap.conf</code>. - </p></li><li class="step" title="Step 4"><p> - Verify that the NSS resolver is working. You may need to cycle the run level - to 1 and back to 5 before the NSS LDAP resolver functions. Follow these - commands: -</p><pre class="screen"> -<code class="prompt">root# </code> init 1 -</pre><p> - After the run level has been achieved, you are prompted to provide the - <code class="constant">root</code> password. Log on, and then execute: -</p><pre class="screen"> -<code class="prompt">root# </code> init 5 -</pre><p> - When the normal logon prompt appears, log into the system as <code class="constant">root</code> - and then execute these commands: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -root:x:0:0:root:/root:/bin/bash -bin:x:1:1:bin:/bin:/bin/bash -daemon:x:2:2:Daemon:/sbin:/bin/bash -lp:x:4:7:Printing daemon:/var/spool/lpd:/bin/bash -mail:x:8:12:Mailer daemon:/var/spool/clientmqueue:/bin/false -... -root:x:0:512:Netbios Domain Administrator:/root:/bin/bash -nobody:x:999:514:nobody:/dev/null:/bin/false -bobj:x:1000:513:System User:/home/bobj:/bin/bash -stans:x:1001:513:System User:/home/stans:/bin/bash -chrisr:x:1002:513:System User:/home/chrisr:/bin/bash -maryv:x:1003:513:System User:/home/maryv:/bin/bash -vaioboss$:x:1005:553:vaioboss$:/dev/null:/bin/false -bldg1$:x:1006:553:bldg1$:/dev/null:/bin/false -</pre><p> - This is the correct output. If the accounts that have UIDs above 512 are not shown, there is a problem. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id348380"></a> - The next step in the verification process involves testing the operation of UNIX group - resolution via the NSS LDAP resolver. Execute these commands: -</p><pre class="screen"> -<code class="prompt">root# </code> getent group -root:x:0: -bin:x:1:daemon -daemon:x:2: -sys:x:3: -... -Domain Admins:x:512:root -Domain Users:x:513:bobj,stans,chrisr,maryv,jht -Domain Guests:x:514: -Administrators:x:544: -Users:x:545: -Guests:x:546:nobody -Power Users:x:547: -Account Operators:x:548: -Server Operators:x:549: -Print Operators:x:550: -Backup Operators:x:551: -Replicator:x:552: -Domain Computers:x:553: -Accounts:x:1000: -Finances:x:1001: -PIOps:x:1002: -</pre><p> - This is also the correct and desired output, because it demonstrates that the LDAP client - is able to communicate correctly with the LDAP server (<code class="constant">MASSIVE</code>). - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id348415"></a> - You must now set the LDAP administrative password into the Samba-3 <code class="filename">secrets.tdb</code> - file by executing this command: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w not24get -Setting stored password for "cn=Manager,dc=abmas,dc=biz" in secrets.tdb -</pre><p> - </p></li><li class="step" title="Step 7"><p> - Now you must obtain the domain SID from the PDC and store it into the - <code class="filename">secrets.tdb</code> file also. This step is not necessary with an LDAP - passdb backend because Samba-3 obtains the domain SID from the - sambaDomain object it automatically stores in the LDAP backend. It does not hurt to - add the SID to the <code class="filename">secrets.tdb</code>, and if you wish to do so, this - command can achieve that: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc getsid MEGANET2 -Storing SID S-1-5-21-3504140859-1010554828-2431957765 \ - for Domain MEGANET2 in secrets.tdb -</pre><p> - When configuring a Samba-3 BDC that has an LDAP backend, there is no need to take - any special action to join it to the domain. However, winbind communicates with the - domain controller that is running on the localhost and must be able to authenticate, - thus requiring that the BDC should be joined to the domain. The process of joining - the domain creates the necessary authentication accounts. - </p></li><li class="step" title="Step 8"><p> - To join the Samba BDC to the domain, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -U root%not24get -Joined domain MEGANET2. -</pre><p> - This indicates that the domain security account for the BDC has been correctly created. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id348504"></a> - Verify that user and group account resolution works via Samba-3 tools as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> pdbedit -L -root:0:root -nobody:65534:nobody -bobj:1000:System User -stans:1001:System User -chrisr:1002:System User -maryv:1003:System User -bldg1$:1006:bldg1$ - -<code class="prompt">root# </code> net groupmap list -Domain Admins (S-1-5-21-3504140859-...-2431957765-512) -> - Domain Admins -Domain Users (S-1-5-21-3504140859-...-2431957765-513) -> Domain Users -Domain Guests (S-1-5-21-3504140859-...-2431957765-514) -> - Domain Guests -Administrators (S-1-5-21-3504140859-...-2431957765-544) -> - Administrators -... -Accounts (S-1-5-21-3504140859-1010554828-2431957765-3001) -> Accounts -Finances (S-1-5-21-3504140859-1010554828-2431957765-3003) -> Finances -PIOps (S-1-5-21-3504140859-1010554828-2431957765-3005) -> PIOps -</pre><p> - These results show that all things are in order. - </p></li><li class="step" title="Step 10"><p> - The server you have so carefully built is now ready for another important step. Now - start the Samba-3 server and validate its operation. Execute the following to render all - the processes needed fully operative so that, upon system reboot, they are automatically - started: -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig named on -<code class="prompt">root# </code> chkconfig dhcpd on -<code class="prompt">root# </code> chkconfig nmb on -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> chkconfig winbind on -<code class="prompt">root# </code> rcnmb start -<code class="prompt">root# </code> rcsmb start -<code class="prompt">root# </code> rcwinbind start -</pre><p> - Samba-3 should now be running and is ready for a quick test. But not quite yet! - </p></li><li class="step" title="Step 11"><p> - Your new <code class="constant">BLDG1, BLDG2</code> servers do not have home directories for users. - To rectify this using the SUSE yast2 utility or by manually editing the <code class="filename">/etc/fstab</code> - file, add a mount entry to mount the <code class="constant">home</code> directory that has been exported - from the <code class="constant">MASSIVE</code> server. Mount this resource before proceeding. An alternate - approach could be to create local home directories for users who are to use these machines. - This is a choice that you, as system administrator, must make. The following entry in the - <code class="filename">/etc/fstab</code> file suffices for now: -</p><pre class="screen"> -massive.abmas.biz:/home /home nfs rw 0 0 -</pre><p> - To mount this resource, execute: -</p><pre class="screen"> -<code class="prompt">root# </code> mount -a -</pre><p> - Verify that the home directory has been mounted as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> df | grep home -massive:/home 29532988 283388 29249600 1% /home -</pre><p> - </p></li><li class="step" title="Step 12"><p> - Implement a quick check using one of the users that is in the LDAP database. Here you go: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient //bldg1/bobj -Ubobj%n3v3r2l8 -smb: \> dir - . D 0 Wed Dec 17 01:16:19 2003 - .. D 0 Wed Dec 17 19:04:42 2003 - bin D 0 Tue Sep 2 04:00:57 2003 - Documents D 0 Sun Nov 30 07:28:20 2003 - public_html D 0 Sun Nov 30 07:28:20 2003 - .urlview H 311 Fri Jul 7 06:55:35 2000 - .dvipsrc H 208 Fri Nov 17 11:22:02 1995 - - 57681 blocks of size 524288. 57128 blocks available -smb: \> q -</pre><p> - </p></li></ol></div><p> - Now that the first BDC (<code class="constant">BDLG1</code>) has been configured it is time to build - and configure the second BDC server (<code class="constant">BLDG2</code>) as follows: - </p><div class="procedure" title="Procedure 5.11. Configuration of BDC Called BLDG2"><a name="sbehap-bldg2"></a><p class="title"><b>Procedure 5.11. Configuration of BDC Called <code class="constant">BLDG2</code></b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Install the files in <a class="link" href="happy.html#sbehap-bldg2-smbconf" title="Example 5.9. LDAP Based smb.conf File, Server: BLDG2">“LDAP Based smb.conf File, Server: BLDG2”</a>, - <a class="link" href="happy.html#sbehap-shareconfa" title="Example 5.10. LDAP Based smb.conf File, Shares Section Part A">“LDAP Based smb.conf File, Shares Section Part A”</a>, and <a class="link" href="happy.html#sbehap-shareconfb" title="Example 5.11. LDAP Based smb.conf File, Shares Section Part B">“LDAP Based smb.conf File, Shares Section Part B”</a> - into the <code class="filename">/etc/samba/</code> directory. The three files - should be added together to form the <code class="filename">smb.conf</code> file. - </p></li><li class="step" title="Step 2"><p> - Follow carefully the steps shown in <a class="link" href="happy.html#sbehap-bldg1" title="Samba-3 BDC Configuration">“Samba-3 BDC Configuration”</a>, starting at step 2. - </p></li></ol></div><div class="example"><a name="sbehap-bldg1-smbconf"></a><p class="title"><b>Example 5.8. LDAP Based <code class="filename">smb.conf</code> File, Server: BLDG1</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id348810"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id348821"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id348832"></a><em class="parameter"><code>netbios name = BLDG1</code></em></td></tr><tr><td><a class="indexterm" name="id348844"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id348856"></a><em class="parameter"><code>enable privileges = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id348867"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id348879"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id348890"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id348902"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id348913"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id348925"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id348936"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id348948"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id348959"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id348971"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id348982"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id348994"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id349006"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id349017"></a><em class="parameter"><code>domain master = No</code></em></td></tr><tr><td><a class="indexterm" name="id349028"></a><em class="parameter"><code>wins server = 172.16.0.1</code></em></td></tr><tr><td><a class="indexterm" name="id349040"></a><em class="parameter"><code>ldap suffix = dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id349052"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id349063"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id349075"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id349086"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id349098"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id349110"></a><em class="parameter"><code>idmap backend = ldap:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id349122"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id349133"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id349144"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id349156"></a><em class="parameter"><code>printer admin = root, chrisr</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbehap-bldg2-smbconf"></a><p class="title"><b>Example 5.9. LDAP Based <code class="filename">smb.conf</code> File, Server: BLDG2</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id349201"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id349213"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id349224"></a><em class="parameter"><code>netbios name = BLDG2</code></em></td></tr><tr><td><a class="indexterm" name="id349236"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id349247"></a><em class="parameter"><code>enable privileges = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id349259"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id349270"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id349282"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id349293"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id349305"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id349316"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id349328"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id349339"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id349351"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id349362"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id349374"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id349386"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id349397"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id349409"></a><em class="parameter"><code>domain master = No</code></em></td></tr><tr><td><a class="indexterm" name="id349420"></a><em class="parameter"><code>wins server = 172.16.0.1</code></em></td></tr><tr><td><a class="indexterm" name="id349432"></a><em class="parameter"><code>ldap suffix = dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id349443"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id349455"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id349466"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id349478"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id349490"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id349501"></a><em class="parameter"><code>idmap backend = ldap:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id349513"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id349525"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id349536"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id349548"></a><em class="parameter"><code>printer admin = root, chrisr</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbehap-shareconfa"></a><p class="title"><b>Example 5.10. LDAP Based <code class="filename">smb.conf</code> File, Shares Section Part A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id349592"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id349604"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id349615"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[service]</code></em></td></tr><tr><td><a class="indexterm" name="id349635"></a><em class="parameter"><code>comment = Financial Services Files</code></em></td></tr><tr><td><a class="indexterm" name="id349647"></a><em class="parameter"><code>path = /data/service</code></em></td></tr><tr><td><a class="indexterm" name="id349658"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[pidata]</code></em></td></tr><tr><td><a class="indexterm" name="id349679"></a><em class="parameter"><code>comment = Property Insurance Files</code></em></td></tr><tr><td><a class="indexterm" name="id349690"></a><em class="parameter"><code>path = /data/pidata</code></em></td></tr><tr><td><a class="indexterm" name="id349702"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id349722"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id349734"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id349745"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id349757"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id349777"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id349789"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id349800"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id349812"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id349823"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbehap-shareconfb"></a><p class="title"><b>Example 5.11. LDAP Based <code class="filename">smb.conf</code> File, Shares Section Part B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[apps]</code></em></td></tr><tr><td><a class="indexterm" name="id349868"></a><em class="parameter"><code>comment = Application Files</code></em></td></tr><tr><td><a class="indexterm" name="id349879"></a><em class="parameter"><code>path = /apps</code></em></td></tr><tr><td><a class="indexterm" name="id349891"></a><em class="parameter"><code>admin users = bjordan</code></em></td></tr><tr><td><a class="indexterm" name="id349902"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id349922"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id349934"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id349946"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id349957"></a><em class="parameter"><code>locking = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id349978"></a><em class="parameter"><code>comment = Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id349989"></a><em class="parameter"><code>path = /var/lib/samba/profiles</code></em></td></tr><tr><td><a class="indexterm" name="id350001"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id350012"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profdata]</code></em></td></tr><tr><td><a class="indexterm" name="id350032"></a><em class="parameter"><code>comment = Profile Data Share</code></em></td></tr><tr><td><a class="indexterm" name="id350044"></a><em class="parameter"><code>path = /var/lib/samba/profdata</code></em></td></tr><tr><td><a class="indexterm" name="id350056"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id350067"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id350088"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id350099"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id350111"></a><em class="parameter"><code>browseable = yes</code></em></td></tr><tr><td><a class="indexterm" name="id350122"></a><em class="parameter"><code>guest ok = no</code></em></td></tr><tr><td><a class="indexterm" name="id350134"></a><em class="parameter"><code>read only = yes</code></em></td></tr><tr><td><a class="indexterm" name="id350145"></a><em class="parameter"><code>write list = root, chrisr</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbehap-ldifadd"></a><p class="title"><b>Example 5.12. LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF</b></p><div class="example-contents"><pre class="screen"> -dn: ou=Idmap,dc=abmas,dc=biz -objectClass: organizationalUnit -ou: idmap -structuralObjectClass: organizationalUnit -</pre></div></div><br class="example-break"></div><div class="sect1" title="Miscellaneous Server Preparation Tasks"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id350178"></a>Miscellaneous Server Preparation Tasks</h2></div></div></div><p> - My father would say, <span class="quote">“<span class="quote">Dinner is not over until the dishes have been done.</span>”</span> - The makings of a great network environment take a lot of effort and attention to detail. - So far, you have completed most of the complex (and to many administrators, the interesting - part of server configuration) steps, but remember to tie it all together. Here are - a few more steps that must be completed so that your network runs like a well-rehearsed - orchestra. - </p><div class="sect2" title="Configuring Directory Share Point Roots"><div class="titlepage"><div><div><h3 class="title"><a name="id350194"></a>Configuring Directory Share Point Roots</h3></div></div></div><p> - In your <code class="filename">smb.conf</code> file, you have specified Windows shares. Each has a <em class="parameter"><code>path</code></em> - parameter. Even though it is obvious to all, one of the common Samba networking problems is - caused by forgetting to verify that every such share root directory actually exists and that it - has the necessary permissions and ownership. - </p><p> - Here is an example, but remember to create the directory needed for every share: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /data/{accounts,finsvcs,piops} -<code class="prompt">root# </code> mkdir -p /apps -<code class="prompt">root# </code> chown -R root:root /data -<code class="prompt">root# </code> chown -R root:root /apps -<code class="prompt">root# </code> chown -R bobj:Accounts /data/accounts -<code class="prompt">root# </code> chown -R bobj:Finances /data/finsvcs -<code class="prompt">root# </code> chown -R bobj:PIOps /data/piops -<code class="prompt">root# </code> chmod -R ug+rwxs,o-rwx /data -<code class="prompt">root# </code> chmod -R ug+rwx,o+rx-w /apps -</pre><p> - </p></div><div class="sect2" title="Configuring Profile Directories"><div class="titlepage"><div><div><h3 class="title"><a name="id350283"></a>Configuring Profile Directories</h3></div></div></div><p> - You made a conscious decision to do everything it would take to improve network client - performance. One of your decisions was to implement folder redirection. This means that Windows - user desktop profiles are now made up of two components: a dynamically loaded part and a set of file - network folders. - </p><p> - For this arrangement to work, every user needs a directory structure for the network folder - portion of his or her profile as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /var/lib/samba/profdata -<code class="prompt">root# </code> chown root:root /var/lib/samba/profdata -<code class="prompt">root# </code> chmod 755 /var/lib/samba/profdata - -# Per user structure -<code class="prompt">root# </code> cd /var/lib/samba/profdata -<code class="prompt">root# </code> mkdir -p <span class="emphasis"><em>username</em></span> -<code class="prompt">root# </code> for i in InternetFiles Cookies History AppData \ - LocalSettings MyPictures MyDocuments Recent -<code class="prompt">root# </code> do -<code class="prompt">root# </code> mkdir <span class="emphasis"><em>username</em></span>/$i -<code class="prompt">root# </code> done -<code class="prompt">root# </code> chown -R <span class="emphasis"><em>username</em></span>:Domain\ Users <span class="emphasis"><em>username</em></span> -<code class="prompt">root# </code> chmod -R 750 <span class="emphasis"><em>username</em></span> -</pre><p> - </p><p> - <a class="indexterm" name="id350393"></a> - <a class="indexterm" name="id350399"></a> - You have three options insofar as the dynamically loaded portion of the roaming profile - is concerned: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>You may permit the user to obtain a default profile.</p></li><li class="listitem"><p>You can create a mandatory profile.</p></li><li class="listitem"><p>You can create a group profile (which is almost always a mandatory profile).</p></li></ul></div><p> - Mandatory profiles cannot be overwritten by a user. The change from a user profile to a mandatory - profile is effected by renaming the <code class="filename">NTUSER.DAT</code> to <code class="filename">NTUSER.MAN</code>, - that is, just by changing the filename extension. - </p><p> - <a class="indexterm" name="id350445"></a> - <a class="indexterm" name="id350452"></a> - The location of the profile that a user can obtain is set in the user's account in the LDAP passdb backend. - You can manage this using the Idealx smbldap-tools or using the - <a class="ulink" href="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE" target="_top">Windows NT4 Domain User Manager</a>. - </p><p> - It may not be obvious that you must ensure that the root directory for the user's profile exists - and has the needed permissions. Use the following commands to create this directory: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /var/lib/samba/profiles/<span class="emphasis"><em>username</em></span> -<code class="prompt">root# </code> chown <span class="emphasis"><em>username</em></span>:Domain\ Users - /var/lib/samba/profiles/<span class="emphasis"><em>username</em></span> -<code class="prompt">root# </code> chmod 700 /var/lib/samba/profiles/<span class="emphasis"><em>username</em></span> -</pre><p> - </p></div><div class="sect2" title="Preparation of Logon Scripts"><div class="titlepage"><div><div><h3 class="title"><a name="id350512"></a>Preparation of Logon Scripts</h3></div></div></div><p> - <a class="indexterm" name="id350519"></a> - The use of a logon script with Windows XP Professional is an option that every site should consider. - Unless you have locked down the desktop so the user cannot change anything, there is risk that - a vital network drive setting may be broken or that printer connections may be lost. Logon scripts - can help to restore persistent network folder (drive) and printer connections in a predictable - manner. One situation in which such breakage may occur in particular is when a mobile PC (notebook) - user attaches to another company's network that forces environment changes that are alien to your - network. - </p><p> - If you decide to use network logon scripts, by reference to the <code class="filename">smb.conf</code> files for the domain - controllers, you see that the path to the share point for the <code class="constant">NETLOGON</code> - share defined is <code class="filename">/var/lib/samba/netlogon</code>. The path defined for the logon - script inside that share is <code class="filename">scripts\logon.bat</code>. This means that as a Windows - NT/200x/XP client logs onto the network, it tries to obtain the file <code class="filename">logon.bat</code> - from the fully qualified path <code class="filename">/var/lib/samba/netlogon/scripts</code>. This fully - qualified path should therefore exist whether you install the <code class="filename">logon.bat</code>. - </p><p> - You can, of course, create the fully qualified path by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /var/lib/samba/netlogon/scripts -</pre><p> - </p><p> - You should research the options for logon script implementation by referring to <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 24, - Section 24.4. A quick Web search will bring up a host of options. One of the most popular logon - facilities in use today is called <a class="ulink" href="http://www.kixtart.org" target="_top">KiXtart</a>. - </p></div><div class="sect2" title="Assigning User Rights and Privileges"><div class="titlepage"><div><div><h3 class="title"><a name="id350609"></a>Assigning User Rights and Privileges</h3></div></div></div><p> - The ability to perform tasks such as joining Windows clients to the domain can be assigned to - normal user accounts. By default, only the domain administrator account (<code class="constant">root</code> on UNIX - systems because it has UID=0) can add accounts. New to Samba 3.0.11 is the ability to grant - this privilege in a very limited fashion to particular accounts. - </p><p> - By default, even Samba-3.0.11 does not grant any rights even to the <code class="constant">Domain Admins</code> - group. Here we grant this group all privileges. - </p><p> - Samba limits privileges on a per-server basis. This is a deliberate limitation so that users who - are granted rights can be restricted to particular machines. It is left to the network administrator - to determine which rights should be provided and to whom. - </p><div class="procedure" title="Procedure 5.12. Steps for Assignment of User Rights and Privileges"><a name="id350638"></a><p class="title"><b>Procedure 5.12. Steps for Assignment of User Rights and Privileges</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Log onto the PDC as the <code class="constant">root</code> account. - </p></li><li class="step" title="Step 2"><p> - Execute the following command to grant the <code class="constant">Domain Admins</code> group all - rights and privileges: -</p><pre class="screen"> -<code class="prompt">root# </code> net -S MASSIVE -U root%not24get rpc rights grant \ - "MEGANET2\Domain Admins" SeMachineAccountPrivilege \ - SePrintOperatorPrivilege SeAddUsersPrivilege \ - SeDiskOperatorPrivilege SeRemoteShutdownPrivilege -Successfully granted rights. -</pre><p> - Repeat this step on each domain controller, in each case substituting the name of the server - (e.g., BLDG1, BLDG2) in place of the PDC called MASSIVE. - </p></li><li class="step" title="Step 3"><p> - In this step the privilege will be granted to Bob Jordan (bobj) to add Windows workstations - to the domain. Execute the following only on the PDC. It is not necessary to do this on - BDCs or on DMS machines because machine accounts are only ever added by the PDC: -</p><pre class="screen"> -<code class="prompt">root# </code> net -S MASSIVE -U root%not24get rpc rights grant \ - "MEGANET2\bobj" SeMachineAccountPrivilege -Successfully granted rights. -</pre><p> - </p></li><li class="step" title="Step 4"><p> - Verify that privilege assignments have been correctly applied by executing: -</p><pre class="screen"> -net rpc rights list accounts -Uroot%not24get -MEGANET2\bobj -SeMachineAccountPrivilege - -S-0-0 -No privileges assigned - -BUILTIN\Print Operators -No privileges assigned - -BUILTIN\Account Operators -No privileges assigned - -BUILTIN\Backup Operators -No privileges assigned - -BUILTIN\Server Operators -No privileges assigned - -BUILTIN\Administrators -No privileges assigned - -Everyone -No privileges assigned - -MEGANET2\Domain Admins -SeMachineAccountPrivilege -SePrintOperatorPrivilege -SeAddUsersPrivilege -SeRemoteShutdownPrivilege -SeDiskOperatorPrivilege -</pre><p> - </p></li></ol></div></div></div><div class="sect1" title="Windows Client Configuration"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id350723"></a>Windows Client Configuration</h2></div></div></div><p> - <a class="indexterm" name="id350731"></a> - In the next few sections, you can configure a new Windows XP Professional disk image on a staging - machine. You will configure all software, printer settings, profile and policy handling, and desktop - default profile settings on this system. When it is complete, you copy the contents of the - <code class="filename">C:\Documents and Settings\Default User</code> directory to a directory with the same - name in the <code class="constant">NETLOGON</code> share on the domain controllers. - </p><p> - Much can be learned from the Microsoft Support site regarding how best to set up shared profiles. - One knowledge-base article in particular stands out: - "<a class="ulink" href="http://support.microsoft.com/default.aspx?scid=kb;EN-US;168475" target="_top">How to Create a - Base Profile for All Users."</a> - - </p><div class="sect2" title="Configuration of Default Profile with Folder Redirection"><div class="titlepage"><div><div><h3 class="title"><a name="redirfold"></a>Configuration of Default Profile with Folder Redirection</h3></div></div></div><p> - <a class="indexterm" name="id350774"></a> - Log onto the Windows XP Professional workstation as the local <code class="constant">Administrator</code>. - It is necessary to expose folders that are generally hidden to provide access to the - <code class="constant">Default User</code> folder. - </p><div class="procedure" title="Procedure 5.13. Expose Hidden Folders"><a name="id350791"></a><p class="title"><b>Procedure 5.13. Expose Hidden Folders</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Launch the Windows Explorer by clicking - <span class="guimenu">Start</span> → <span class="guimenuitem">My Computer</span> → <span class="guimenuitem">Tools</span> → <span class="guimenuitem">Folder Options</span> → <span class="guimenuitem">View Tab</span>. - Select <span class="guilabel">Show hidden files and folders</span>, - and click <span class="guibutton">OK</span>. Exit Windows Explorer. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id350856"></a> - Launch the Registry Editor. Click - <span class="guimenu">Start</span> → <span class="guimenuitem">Run</span>. Key in <code class="literal">regedt32</code>, and click - <span class="guibutton">OK</span>. - </p></li></ol></div><p> - </p><div class="procedure" title="Procedure 5.14. Redirect Folders in Default System User Profile"><a name="sbehap-rdrfldr"></a><p class="title"><b>Procedure 5.14. Redirect Folders in Default System User Profile</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id350912"></a> - <a class="indexterm" name="id350919"></a> - Give focus to <code class="constant">HKEY_LOCAL_MACHINE</code> hive entry in the left panel. - Click <span class="guimenu">File</span> → <span class="guimenuitem">Load Hive...</span> → <span class="guimenuitem">Documents and Settings</span> → <span class="guimenuitem">Default User</span> → <span class="guimenuitem">NTUSER</span> → <span class="guimenuitem">Open</span>. In the dialog box that opens, enter the key name - <code class="constant">Default</code> and click <span class="guibutton">OK</span>. - </p></li><li class="step" title="Step 2"><p> - Browse inside the newly loaded Default folder to: -</p><pre class="screen"> -HKEY_LOCAL_MACHINE\Default\Software\Microsoft\Windows\ - CurrentVersion\Explorer\User Shell Folders\ -</pre><p> - The right panel reveals the contents as shown in <a class="link" href="happy.html#XP-screen001" title="Figure 5.3. Windows XP Professional User Shared Folders">“Windows XP Professional User Shared Folders”</a>. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id351008"></a> - <a class="indexterm" name="id351015"></a> - You edit hive keys. Acceptable values to replace the - <code class="constant">%USERPROFILE%</code> variable includes: - - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>A drive letter such as <code class="constant">U:</code></p></li><li class="listitem"><p>A direct network path such as - <code class="constant">\\MASSIVE\profdata</code></p></li><li class="listitem"><p>A network redirection (UNC name) that contains a macro such as </p><p><code class="constant">%LOGONSERVER%\profdata\</code></p></li></ul></div><p> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id351059"></a> - Set the registry keys as shown in <a class="link" href="happy.html#proffold" title="Table 5.4. Default Profile Redirections">“Default Profile Redirections”</a>. Your implementation makes the assumption - that users have statically located machines. Notebook computers (mobile users) need to be - accommodated using local profiles. This is not an uncommon assumption. - </p></li><li class="step" title="Step 5"><p> - Click back to the root of the loaded hive <code class="constant">Default</code>. - Click <span class="guimenu">File</span> → <span class="guimenuitem">Unload Hive...</span> → <span class="guimenuitem">Yes</span>. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id351112"></a> - Click <span class="guimenu">File</span> → <span class="guimenuitem">Exit</span>. This exits the - Registry Editor. - </p></li><li class="step" title="Step 7"><p> - Now follow the procedure given in <a class="link" href="happy.html#sbehap-locgrppol" title="The Local Group Policy">“The Local Group Policy”</a>. Make sure that each folder you - have redirected is in the exclusion list. - </p></li><li class="step" title="Step 8"><p> - You are now ready to copy<sup>[<a name="id351153" href="#ftn.id351153" class="footnote">11</a>]</sup> - the Default User profile to the Samba domain controllers. Launch Microsoft Windows Explorer, - and use it to copy the full contents of the directory <code class="filename">Default User</code> that - is in the <code class="filename">C:\Documents and Settings</code> to the root directory of the - <code class="constant">NETLOGON</code> share. If the <code class="constant">NETLOGON</code> share has the defined - UNIX path of <code class="filename">/var/lib/samba/netlogon</code>, when the copy is complete there must - be a directory in there called <code class="filename">Default User</code>. - </p></li></ol></div><p> - Before punching out new desktop images for the client workstations, it is perhaps a good idea that - desktop behavior should be returned to the original Microsoft settings. The following steps achieve - that ojective: - </p><div class="procedure" title="Procedure 5.15. Reset Folder Display to Original Behavior"><a name="id351213"></a><p class="title"><b>Procedure 5.15. Reset Folder Display to Original Behavior</b></p><ul class="procedure"><li class="step" title="Step 1"><p> - To launch the Windows Explorer, click - <span class="guimenu">Start</span> → <span class="guimenuitem">My Computer</span> → <span class="guimenuitem">Tools</span> → <span class="guimenuitem">Folder Options</span> → <span class="guimenuitem">View Tab</span>. - Deselect <span class="guilabel">Show hidden files and folders</span>, and click <span class="guibutton">OK</span>. - Exit Windows Explorer. - </p></li></ul></div><div class="figure"><a name="XP-screen001"></a><p class="title"><b>Figure 5.3. Windows XP Professional User Shared Folders</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/XP-screen001.png" width="351" alt="Windows XP Professional User Shared Folders"></div></div></div><br class="figure-break"><div class="table"><a name="proffold"></a><p class="title"><b>Table 5.4. Default Profile Redirections</b></p><div class="table-contents"><table summary="Default Profile Redirections" border="1"><colgroup><col align="left"><col align="left"></colgroup><thead><tr><th align="left">Registry Key</th><th align="left">Redirected Value</th></tr></thead><tbody><tr><td align="left">Cache</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\InternetFiles</td></tr><tr><td align="left">Cookies</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\Cookies</td></tr><tr><td align="left">History</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\History</td></tr><tr><td align="left">Local AppData</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\AppData</td></tr><tr><td align="left">Local Settings</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\LocalSettings</td></tr><tr><td align="left">My Pictures</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\MyPictures</td></tr><tr><td align="left">Personal</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\MyDocuments</td></tr><tr><td align="left">Recent</td><td align="left">%LOGONSERVER%\profdata\%USERNAME%\Recent</td></tr></tbody></table></div></div><br class="table-break"></div><div class="sect2" title="Configuration of MS Outlook to Relocate PST File"><div class="titlepage"><div><div><h3 class="title"><a name="id351441"></a>Configuration of MS Outlook to Relocate PST File</h3></div></div></div><p> - <a class="indexterm" name="id351449"></a> - <a class="indexterm" name="id351458"></a> - Microsoft Outlook can store a Personal Storage file, generally known as a PST file. - It is the nature of email storage that this file grows, at times quite rapidly. - So that users' email is available to them at every workstation they may log onto, - it is common practice in well-controlled sites to redirect the PST folder to the - users' home directory. Follow these steps for each user who wishes to do this. - </p><p> - To redirect the Outlook PST file in Outlook 2003 (older versions of Outlook behave - slightly differently), follow these steps: - </p><div class="procedure" title="Procedure 5.16. Outlook PST File Relocation"><a name="id351476"></a><p class="title"><b>Procedure 5.16. Outlook PST File Relocation</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Close Outlook if it is open. - </p></li><li class="step" title="Step 2"><p> - From the <span class="guimenu">Control Panel</span>, launch the Mail icon. - </p></li><li class="step" title="Step 3"><p> - Click <span class="guimenu">Email Accounts.</span> - </p></li><li class="step" title="Step 4"><p> - Make a note of the location of the PST file(s). From this location, move - the files to the desired new target location. The most desired new target location - may well be the users' home directory. - </p></li><li class="step" title="Step 5"><p> - Add a new data file, selecting the PST file in the new desired target location. - Give this entry (not the filename) a new name such as <span class="quote">“<span class="quote">Personal Mail Folders.</span>”</span> - </p><p> - Note: If MS Outlook has been configured to use an IMAP account configuration there may be problems - following these instructions. Feedback from users suggests that where IMAP is used the PST - file is used to store rules and filters. When the PST store is relocated it appears to break - MS Outlook's Send/Receive button. If anyone has successfully relocated PST files where IMAP is - used please email <code class="literal">jht@samba.org</code> with useful tips and suggestions so that - this warning can be removed or modified. - </p></li><li class="step" title="Step 6"><p> - Close the <span class="guimenu">Date Files</span> windows, then click <span class="guimenu">Email Accounts</span>. - </p></li><li class="step" title="Step 7"><p> - Select <span class="guimenu">View of Change</span> exiting email accounts, click <span class="guibutton">Next.</span> - </p></li><li class="step" title="Step 8"><p> - Change the <span class="guimenu">Mail Delivery Location</span> so as to use the data file in the new - target location. - </p></li><li class="step" title="Step 9"><p> - Go back to the <span class="guimenu">Data Files</span> window, then delete the old data file entry. - </p></li></ol></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id351615"></a> - You may have to remove and reinstall the Outlook Address Book (Contacts) entries, otherwise - the user may be not be able to retrieve contacts when addressing a new email message. - </p></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id351628"></a> - Outlook Express is not at all like MS OutLook. It stores file very differently also. Outlook - Express storage files can not be redirected to network shares. The options panel will not permit - this, but they can be moved to folders outside of the user's profile. They can also be excluded - from folder synchronization as part of the roaming profile. - </p><p> - While it is possible to redirect the data stores for Outlook Express data stores by editing the - registry, experience has shown that data corruption and loss of email messages will result. - </p><p> - <a class="indexterm" name="id351646"></a> - <a class="indexterm" name="id351653"></a> - In the same vane as MS Outlook, Outlook Express data stores can become very large. When used with - roaming profiles this can result in excruciatingly long login and logout behavior will files are - synchronized. For this reason, it is highly recommended not to use Outlook Express where roaming - profiles are used. - </p></div><p> - <a class="indexterm" name="id351665"></a> - Microsoft does not support storing PST files on network shares, although the practice does appear - to be rather popular. Anyone who does relocation the PST file to a network resource should refer - the Microsoft <a class="ulink" href="http://support.microsoft.com/kb/297019/" target="_top">reference</a> to better - understand the issues. - </p><p> - <a class="indexterm" name="id351684"></a> - Apart from manually moving PST files to a network share, it is possible to set the default PST - location for new accounts by following the instructions at the WindowsITPro <a class="ulink" href="http://www.windowsitpro.com/Windows/Article/ArticleID/48228/48228.html" target="_top">web</a> site. - </p><p> - <a class="indexterm" name="id351701"></a> - User feedback suggests that disabling of oplocks on PST files will significantly improve - network performance by reducing locking overheads. One way this can be done is to add to the - <code class="filename">smb.conf</code> file stanza for the share the PST file the following: -</p><pre class="screen"> -veto oplock files = /*.pdf/*.PST/ -</pre><p> - </p></div><div class="sect2" title="Configure Delete Cached Profiles on Logout"><div class="titlepage"><div><div><h3 class="title"><a name="id351724"></a>Configure Delete Cached Profiles on Logout</h3></div></div></div><p> - Configure the Windows XP Professional client to auto-delete roaming profiles on logout: - </p><p> - <a class="indexterm" name="id351736"></a> - Click - <span class="guimenu">Start</span> → <span class="guimenuitem">Run</span>. In the dialog box, enter <code class="literal">MMC</code> and click <span class="guibutton">OK</span>. - </p><p> - Follow these steps to set the default behavior of the staging machine so that all roaming - profiles are deleted as network users log out of the system. Click - <span class="guimenu">File</span> → <span class="guimenuitem">Add/Remove Snap-in</span> → <span class="guimenuitem">Add</span> → <span class="guimenuitem">Group Policy</span> → <span class="guimenuitem">Add</span> → <span class="guimenuitem">Finish</span> → <span class="guimenuitem">Close</span> → <span class="guimenuitem">OK</span>. - </p><p> - <a class="indexterm" name="id351830"></a> - The Microsoft Management Console now shows the <span class="guimenu">Group Policy</span> - utility that enables you to set the policies needed. In the left panel, click - <span class="guimenuitem">Local Computer Policy</span> → <span class="guimenuitem">Administrative Templates</span> → <span class="guimenuitem">System</span> → <span class="guimenuitem">User Profiles</span>. In the right panel, set the properties shown here by double-clicking on each - item as shown: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Do not check for user ownership of Roaming Profile Folders = Enabled</p></li><li class="listitem"><p>Delete cached copies of roaming profiles = Enabled</p></li></ul></div><p> - Close the Microsoft Management Console. The settings take immediate effect and persist onto all image copies - made of this system to deploy the new standard desktop system. - </p></div><div class="sect2" title="Uploading Printer Drivers to Samba Servers"><div class="titlepage"><div><div><h3 class="title"><a name="id351896"></a>Uploading Printer Drivers to Samba Servers</h3></div></div></div><p> - <a class="indexterm" name="id351904"></a> - Users want to be able to use network printers. You have a vested interest in making - it easy for them to print. You have chosen to install the printer drivers onto the Samba - servers and to enable point-and-click (drag-and-drop) printing. This process results in - Samba being able to automatically provide the Windows client with the driver necessary to - print to the printer chosen. The following procedure must be followed for every network - printer: - </p><div class="procedure" title="Procedure 5.17. Steps to Install Printer Drivers on the Samba Servers"><a name="id351918"></a><p class="title"><b>Procedure 5.17. Steps to Install Printer Drivers on the Samba Servers</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Join your Windows XP Professional workstation (the staging machine) to the - <code class="constant">MEGANET2</code> domain. If you are not sure of the procedure, - follow the guidance given in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. - </p></li><li class="step" title="Step 2"><p> - After the machine has rebooted, log onto the workstation as the domain - <code class="constant">root</code> (this is the Administrator account for the - operating system that is the host platform for this implementation of Samba. - </p></li><li class="step" title="Step 3"><p> - Launch MS Windows Explorer. Navigate in the left panel. Click - <span class="guimenu">My Network Places</span> → <span class="guimenuitem">Entire Network</span> → <span class="guimenuitem">Microsoft Windows Network</span> → <span class="guimenuitem">Meganet2</span> → <span class="guimenuitem">Massive</span>. Click on <span class="guimenu">Massive</span> - <span class="guimenu">Printers and Faxes</span>. - </p></li><li class="step" title="Step 4"><p> - Identify a printer that is shown in the right panel. Let us assume the printer is called - <code class="constant">ps01-color</code>. Right-click on the <span class="guimenu">ps01-color</span> icon - and select the <span class="guimenu">Properties</span> entry. This opens a dialog box that indicates - that <span class="quote">“<span class="quote">The printer driver is not installed on this computer. Some printer properties - will not be accessible unless you install the printer driver. Do you want to install the - driver now?</span>”</span> It is important at this point you answer <span class="guimenu">No</span>. - </p></li><li class="step" title="Step 5"><p> - The printer properties panel for the <span class="guimenu">ps01-color</span> printer on the server - <code class="constant">MASSIVE</code> is displayed. Click the <span class="guimenu">Advanced</span> tab. - Note that the box labeled <span class="guimenu">Driver</span> is empty. Click the <span class="guimenu">New Driver</span> - button that is next to the <span class="guimenu">Driver</span> box. This launches the <span class="quote">“<span class="quote">Add Printer Wizard</span>”</span>. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id352097"></a> - <a class="indexterm" name="id352106"></a> - The <span class="quote">“<span class="quote">Add Printer Driver Wizard on <code class="constant">MASSIVE</code></span>”</span> panel - is now presented. Click <span class="guimenu">Next</span> to continue. From the left panel, select the - printer manufacturer. In your case, you are adding a driver for a printer manufactured by - Lexmark. In the right panel, select the printer (Lexmark Optra Color 40 PS). Click - <span class="guimenu">Next</span>, and then <span class="guimenu">Finish</span> to commence driver upload. A - progress bar appears and instructs you as each file is being uploaded and that it is being - directed at the network server <code class="constant">\\massive\ps01-color</code>. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id352150"></a> - <a class="indexterm" name="id352160"></a> - <a class="indexterm" name="id352169"></a> - <a class="indexterm" name="id352178"></a> - <a class="indexterm" name="id352187"></a> - <a class="indexterm" name="id352196"></a> - The driver upload completes in anywhere from a few seconds to a few minutes. When it completes, - you are returned to the <span class="guimenu">Advanced</span> tab in the <span class="guimenu">Properties</span> panel. - You can set the Location (under the <span class="guimenu">General</span> tab) and Security settings (under - the <span class="guimenu">Security</span> tab). Under the <span class="guimenu">Sharing</span> tab it is possible to - load additional printer drivers; there is also a check-box in this tab called <span class="quote">“<span class="quote">List in the - directory</span>”</span>. When this box is checked, the printer will be published in Active Directory - (Applicable to Active Directory use only.) - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id352247"></a> - Click <span class="guimenu">OK</span>. It will take a minute or so to upload the settings to the server. - You are now returned to the <span class="guimenu">Printers and Faxes on Massive</span> monitor. - Right-click on the printer, click <span class="guimenu">Properties</span> → <span class="guimenuitem">Device Settings</span>. Now change the settings to suit - your requirements. BE CERTAIN TO CHANGE AT LEAST ONE SETTING and apply the changes even if - you need to reverse the changes back to their original settings. - </p></li><li class="step" title="Step 9"><p> - This is necessary so that the printer settings are initialized in the Samba printers - database. Click <span class="guimenu">Apply</span> to commit your settings. Revert any settings you changed - just to initialize the Samba printers database entry for this printer. If you need to revert a setting, - click <span class="guimenu">Apply</span> again. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id352314"></a> - Verify that all printer settings are at the desired configuration. When you are satisfied that they are, - click the <span class="guimenu">General</span> tab. Now click the <span class="guimenu">Print Test Page</span> button. - A test page should print. Verify that it has printed correctly. Then click <span class="guimenu">OK</span> - in the panel that is newly presented. Click <span class="guimenu">OK</span> on the <span class="guimenu">ps01-color on - massive Properties</span> panel. - </p></li><li class="step" title="Step 11"><p> - You must repeat this process for all network printers (i.e., for every printer on each server). - When you have finished uploading drivers to all printers, close all applications. The next task - is to install software your users require to do their work. - </p></li></ol></div></div><div class="sect2" title="Software Installation"><div class="titlepage"><div><div><h3 class="title"><a name="id352365"></a>Software Installation</h3></div></div></div><p> - Your network has both fixed desktop workstations as well as notebook computers. As a general rule, it is - a good idea to not tamper with the operating system that is provided by the notebook computer manufacturer. - Notebooks require special handling that is beyond the scope of this chapter. - </p><p> - For desktop systems, the installation of software onto administratively centralized application servers - make a lot of sense. This means that you can manage software maintenance from a central - perspective and that only minimal application stubware needs to be installed onto the desktop - systems. You should proceed with software installation and default configuration as far as is humanly - possible and so long as it makes sense to do so. Make certain to thoroughly test and validate every aspect - of software operations and configuration. - </p><p> - When you believe that the overall configuration is complete, be sure to create a shared group profile - and migrate that to the Samba server for later reuse when creating custom mandatory profiles, just in - case a user may have specific needs you had not anticipated. - </p></div><div class="sect2" title="Roll-out Image Creation"><div class="titlepage"><div><div><h3 class="title"><a name="id352391"></a>Roll-out Image Creation</h3></div></div></div><p> - The final steps before preparing the distribution Norton Ghost image file you might follow are: - </p><div class="blockquote"><blockquote class="blockquote"><p> - Unjoin the domain Each workstation requires a unique name and must be independently - joined into domain membership. - </p></blockquote></div><div class="blockquote"><blockquote class="blockquote"><p> - Defragment the hard disk While not obvious to the uninitiated, defragmentation results - in better performance and often significantly reduces the size of the compressed disk image. That - also means it will take less time to deploy the image onto 500 workstations. - </p></blockquote></div></div></div><div class="sect1" title="Key Points Learned"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id352420"></a>Key Points Learned</h2></div></div></div><p> - This chapter introduced many new concepts. Is it a sad fact that the example presented deliberately - avoided any consideration of security. Security does not just happen; you must design it into your total - network. Security begins with a systems design and implementation that anticipates hostile behavior from - users both inside and outside the organization. Hostile and malicious intruders do not respect barriers; - they accept them as challenges. For that reason, if not simply from a desire to establish safe networking - practices, you must not deploy the design presented in this book in an environment where there is risk - of compromise. - </p><p> - <a class="indexterm" name="id352437"></a> - <a class="indexterm" name="id352445"></a> - As a minimum, the LDAP server must be protected by way of Access Control Lists (ACLs), and it must be - configured to use secure protocols for all communications over the network. Of course, secure networking - does not result just from systems design and implementation but involves constant user education - training and, above all, disciplined attention to detail and constant searching for signs of unfriendly - or alien activities. Security is itself a topic for a whole book. Please do consult appropriate sources. - Jerry Carter's book <a class="ulink" href="http://www.booksense.com/product/info.jsp&isbn=1565924916" target="_top"> - <span class="emphasis"><em>LDAP System Administration</em></span></a> is a good place to start reading about OpenLDAP - as well as security considerations. - </p><p> - The substance of this chapter that has been deserving of particular attention includes: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Implementation of an OpenLDAP-based passwd backend, necessary to support distributed - domain control. - </p></li><li class="listitem"><p> - Implementation of Samba primary and secondary domain controllers with a common LDAP backend - for user and group accounts that is shared with the UNIX system through the PADL nss_ldap and - pam_ldap tool-sets. - </p></li><li class="listitem"><p> - Use of the Idealx smbldap-tools scripts for UNIX (POSIX) account management as well as - to manage Samba Windows user and group accounts. - </p></li><li class="listitem"><p> - The basics of implementation of Group Policy controls for Windows network clients. - </p></li><li class="listitem"><p> - Control over roaming profiles, with particular focus on folder redirection to network drives. - </p></li><li class="listitem"><p> - Use of the CUPS printing system together with Samba-based printer driver auto-download. - </p></li></ul></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id352508"></a>Questions and Answers</h2></div></div></div><p> - Well, here we are at the end of this chapter and we have only ten questions to help you to - remember so much. There are bound to be some sticky issues here. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id352518"></a><dl><dt> <a href="happy.html#id352525"> - Why did you not cover secure practices? Isn't it rather irresponsible to instruct - network administrators to implement insecure solutions? - </a></dt><dt> <a href="happy.html#id352558"> - You have focused much on SUSE Linux and little on the market leader, Red Hat. Do - you have a problem with Red Hat Linux? Doesn't that make your guidance irrelevant - to the Linux I might be using? - </a></dt><dt> <a href="happy.html#id352600"> - You did not use SWAT to configure Samba. Is there something wrong with it? - </a></dt><dt> <a href="happy.html#id352635"> - You have exposed a well-used password not24get. Is that - not irresponsible? - </a></dt><dt> <a href="happy.html#id352657"> - The Idealx smbldap-tools create many domain group accounts that are not used. Is that - a good thing? - </a></dt><dt> <a href="happy.html#id352681"> - Can I use LDAP just for Samba accounts and not for UNIX system accounts? - </a></dt><dt> <a href="happy.html#id352701"> - Why are the Windows domain RID portions not the same as the UNIX UID? - </a></dt><dt> <a href="happy.html#id352732"> - Printer configuration examples all show printing to the HP port 9100. Does this - mean that I must have HP printers for these solutions to work? - </a></dt><dt> <a href="happy.html#id352757"> - Is folder redirection dangerous? I've heard that you can lose your data that way. - </a></dt><dt> <a href="happy.html#id352779"> - Is it really necessary to set a local Group Policy to exclude the redirected - folders from the roaming profile? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id352525"></a><a name="id352527"></a></td><td align="left" valign="top"><p> - Why did you not cover secure practices? Isn't it rather irresponsible to instruct - network administrators to implement insecure solutions? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Let's get this right. This is a book about Samba, not about OpenLDAP and secure - communication protocols for subjects other than Samba. Earlier on, you note, - that the dynamic DNS and DHCP solutions also used no protective secure communications - protocols. The reason for this is simple: There are so many ways of implementing - secure protocols that this book would have been even larger and more complex. - </p><p> - The solutions presented here all work (at least they did for me). Network administrators - have the interest and the need to be better trained and instructed in secure networking - practices and ought to implement safe systems. I made the decision, right or wrong, - to keep this material as simple as possible. The intent of this book is to demonstrate - a working solution and not to discuss too many peripheral issues. - </p><p> - This book makes little mention of backup techniques. Does that mean that I am recommending - that you should implement a network without provision for data recovery and for disaster - management? Back to our focus: The deployment of Samba has been clearly demonstrated. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352558"></a><a name="id352561"></a></td><td align="left" valign="top"><p> - You have focused much on SUSE Linux and little on the market leader, Red Hat. Do - you have a problem with Red Hat Linux? Doesn't that make your guidance irrelevant - to the Linux I might be using? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Both Red Hat Linux and SUSE Linux comply with the Linux Standards Base specifications - for a standard Linux distribution. The differences are marginal. Surely you know - your Linux platform, and you do have access to administration manuals for it. This - book is not a Linux tutorial; it is a Samba tutorial. Let's keep the focus on - the Samba part of the book; all the other bits are peripheral (but important) to - creation of a total network solution. - </p><p> - What I find interesting is the attention reviewers give to Linux installation and to - the look and feel of the desktop, but does that make for a great server? In this book, - I have paid particular attention to the details of creating a whole solution framework. - I have not tightened every nut and bolt, but I have touched on all the issues you - need to be familiar with. Over the years many people have approached me wanting to - know the details of exactly how to implement a DHCP and dynamic DNS server with Samba - and WINS. In this chapter, it is plain to see what needs to be configured to provide - transparent interoperability. Likewise for CUPS and Samba interoperation. These are - key stumbling areas for many people. - </p><p> - At every critical junction, I have provided comparative guidance for both SUSE and - Red Hat Linux. Both manufacturers have done a great job in furthering the cause - of open source software. I favor neither and respect both. I like particular - features of both products (companies also). No bias in presentation is intended. - Oh, before I forget, I particularly like Debian Linux; that is my favorite playground. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352600"></a><a name="id352603"></a></td><td align="left" valign="top"><p> - You did not use SWAT to configure Samba. Is there something wrong with it? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - That is a good question. As it is, the <code class="filename">smb.conf</code> file configurations are presented - in as direct a format as possible. Adding SWAT into the equation would have complicated - matters. I sought simplicity of implementation. The fact is that I did use SWAT to - create the files in the first place. - </p><p> - There are people in the Linux and open source community who feel that SWAT is dangerous - and insecure. Many will not touch it with a barge-pole. By not introducing SWAT, I - hope to have brought their interests on board. SWAT is well covered is <span class="emphasis"><em>TOSHARG2</em></span>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352635"></a><a name="id352637"></a></td><td align="left" valign="top"><p> - You have exposed a well-used password <span class="emphasis"><em>not24get</em></span>. Is that - not irresponsible? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Well, I had to use a password of some sort. At least this one has been consistently - used throughout. I guess you can figure out that in a real deployment it would make - sense to use a more secure and original password. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352657"></a><a name="id352660"></a></td><td align="left" valign="top"><p> - The Idealx smbldap-tools create many domain group accounts that are not used. Is that - a good thing? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - I took this up with Idealx and found them most willing to change that in the next version. - Let's give Idealx some credit for the contribution they have made. I appreciate their work - and, besides, it does no harm to create accounts that are not now used at some time - Samba may well use them. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352681"></a><a name="id352683"></a></td><td align="left" valign="top"><p> - Can I use LDAP just for Samba accounts and not for UNIX system accounts? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes, you can do that for user accounts only. Samba requires there to be a POSIX (UNIX) - group account for every Windows domain group account. But if you put your users into - the system password account, how do you plan to keep all domain controller system - password files in sync? I think that having everything in LDAP makes a lot of sense - for the UNIX administrator who is still learning the craft and is migrating from MS Windows. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352701"></a><a name="id352703"></a></td><td align="left" valign="top"><p> - Why are the Windows domain RID portions not the same as the UNIX UID? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Samba uses a well-known public algorithm for assigning RIDs from UIDs and GIDs. - This algorithm ought to ensure that there will be no clashes with well-known RIDs. - Well-known RIDs have special significance to MS Windows clients. The automatic - assignment used the calculation: RID = UID x 2 + 1000. Of course, Samba does - permit you to override that to some extent. See the <code class="filename">smb.conf</code> man page entry - for <em class="parameter"><code>algorithmic rid base</code></em>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352732"></a><a name="id352735"></a></td><td align="left" valign="top"><p> - Printer configuration examples all show printing to the HP port 9100. Does this - mean that I must have HP printers for these solutions to work? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - No. You can use any type of printer and must use the interfacing protocol supported - by the printer. Many networks use LPR/LPD print servers to which are attached - PCL printers, inkjet printers, plotters, and so on. At home I use a USB-attached - inkjet printer. Use the appropriate device URI (Universal Resource Interface) - argument to the <code class="constant">lpadmin -v</code> option that is right for your - printer. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352757"></a><a name="id352759"></a></td><td align="left" valign="top"><p> - Is folder redirection dangerous? I've heard that you can lose your data that way. - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The only loss of data I know of that involved folder redirection was caused by - manual misuse of the redirection tool. The administrator redirected a folder to - a network drive and said he wanted to migrate (move) the data over. Then he - changed his mind, so he moved the folder back to the roaming profile. This time, - he declined to move the data because he thought it was still in the local profile - folder. That was not the case, so by declining to move the data back, he wiped out - the data. You cannot hold the tool responsible for that. Caveat emptor still applies. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id352779"></a><a name="id352781"></a></td><td align="left" valign="top"><p> - Is it really necessary to set a local Group Policy to exclude the redirected - folders from the roaming profile? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes. If you do not do this, the data will still be copied from the network folder - (share) to the local cached copy of the profile. - </p></td></tr></tbody></table></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id351153" href="#id351153" class="para">11</a>] </sup> - There is an alternate method by which a default user profile can be added to the - <code class="constant">NETLOGON</code> share. This facility in the Windows System tool - permits profiles to be exported. The export target may be a particular user or - group profile share point or else the <code class="constant">NETLOGON</code> share. - In this case, the profile directory must be named <code class="constant">Default User</code>. - </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Big500users.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ExNetworks.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="net2000users.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 4. The 500-User Office </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 6. A Distributed 2000-User Network</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/images/AccountingNetwork.png b/docs/htmldocs/Samba3-ByExample/images/AccountingNetwork.png Binary files differdeleted file mode 100644 index 8594d85d54..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/AccountingNetwork.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/AccountingNetwork.svg b/docs/htmldocs/Samba3-ByExample/images/AccountingNetwork.svg deleted file mode 100644 index 7cf31f70fe..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/AccountingNetwork.svg +++ /dev/null @@ -1,1588 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="12.034cm" - height="10.095cm" - viewBox="1.1 0.162 13.134 10.258" - id="svg2"> - <defs - id="defs439" /> - <text - x="4.2160001" - y="1.6" - id="text4" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Workgroup: BILLMORE</text> - <rect - width="1.5" - height="3" - x="1.15" - y="4.6500001" - id="rect6" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.5" - height="3" - x="1.15" - y="4.6500001" - id="rect8" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.5" - height="3" - x="1.15" - y="4.6500001" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.2" - height="1.2" - x="1.3" - y="4.8000002" - id="rect12" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.2" - height="1.2" - x="1.3" - y="4.8000002" - id="rect14" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.2" - height="1.2" - x="1.3" - y="4.8000002" - id="rect16" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.5" - y1="5.0999999" - x2="1.3" - y2="5.0999999" - stroke="#000000" - stroke-width="0.010" - id="line18" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.3" - y1="5.4000001" - x2="2.5" - y2="5.4000001" - stroke="#000000" - stroke-width="0.010" - id="line20" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.5" - y1="5.625" - x2="1.3" - y2="5.625" - stroke="#000000" - stroke-width="0.010" - id="line22" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.82499999" - height="0.44999999" - x="1.3" - y="6.1500001" - id="rect24" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.82499999" - height="0.44999999" - x="1.3" - y="6.1500001" - id="rect26" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.82499999" - height="0.44999999" - x="1.3" - y="6.1500001" - id="rect28" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="1.15" - y1="6.6750002" - x2="2.6500001" - y2="6.6750002" - stroke="#000000" - stroke-width="0.010" - id="line30" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="1.825" - y="6.8249998" - id="rect32" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="1.825" - y="6.8249998" - id="rect34" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="1.825" - y="6.8249998" - id="rect36" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="2.125" - y="6.8249998" - id="rect38" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="2.125" - y="6.8249998" - id="rect40" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="2.125" - y="6.8249998" - id="rect42" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="2.425" - y="6.8249998" - id="rect44" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="2.425" - y="6.8249998" - id="rect46" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="2.425" - y="6.8249998" - id="rect48" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.15000001" - height="0.075000003" - x="2.3499999" - y="6.375" - id="rect50" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.15000001" - height="0.075000003" - x="2.3499999" - y="6.375" - id="rect52" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.15000001" - height="0.075000003" - x="2.3499999" - y="6.375" - id="rect54" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="1.3" - y1="6.375" - x2="2.125" - y2="6.375" - stroke="#000000" - stroke-width="0.010" - id="line56" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.22499999" - height="0.22499999" - x="1.3" - y="6.75" - id="rect58" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.22499999" - height="0.22499999" - x="1.3" - y="6.75" - id="rect60" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.22499999" - height="0.22499999" - x="1.3" - y="6.75" - id="rect62" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.05" - height="0.075000003" - x="1.375" - y="5.6999998" - id="rect64" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.05" - height="0.075000003" - x="1.375" - y="5.6999998" - id="rect66" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.05" - height="0.075000003" - x="1.375" - y="5.6999998" - id="rect68" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="1.375" - y1="6.2249999" - x2="2.05" - y2="6.2249999" - stroke="#000000" - stroke-width="0.010" - id="line70" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.05" - y1="6.3000002" - x2="1.975" - y2="6.3000002" - stroke="#000000" - stroke-width="0.010" - id="line72" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.375" - y1="6.3000002" - x2="1.45" - y2="6.3000002" - stroke="#000000" - stroke-width="0.010" - id="line74" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.375" - height="0.075000003" - x="1.525" - y="6.2249999" - id="rect76" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.375" - height="0.075000003" - x="1.525" - y="6.2249999" - id="rect78" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.375" - height="0.075000003" - x="1.525" - y="6.2249999" - id="rect80" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="1.375" - y1="5.8499999" - x2="1.45" - y2="5.8499999" - stroke="#000000" - stroke-width="0.010" - id="line82" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.525" - y1="5.8499999" - x2="1.6" - y2="5.8499999" - stroke="#000000" - stroke-width="0.010" - id="line84" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.2750001" - y1="5.8499999" - x2="2.425" - y2="5.8499999" - stroke="#000000" - stroke-width="0.010" - id="line86" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.575" - y1="7.5749998" - x2="1.225" - y2="7.5749998" - stroke="#000000" - stroke-width="0.010" - id="line88" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.225" - y1="7.5" - x2="2.575" - y2="7.5" - stroke="#000000" - stroke-width="0.010" - id="line90" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.575" - y1="7.4250002" - x2="1.225" - y2="7.4250002" - stroke="#000000" - stroke-width="0.010" - id="line92" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.225" - y1="7.3499999" - x2="2.575" - y2="7.3499999" - stroke="#000000" - stroke-width="0.010" - id="line94" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.575" - y1="7.2750001" - x2="1.225" - y2="7.2750001" - stroke="#000000" - stroke-width="0.010" - id="line96" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.225" - y1="7.1999998" - x2="2.575" - y2="7.1999998" - stroke="#000000" - stroke-width="0.010" - id="line98" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.575" - y1="7.125" - x2="1.225" - y2="7.125" - stroke="#000000" - stroke-width="0.010" - id="line100" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="1.3329999" - height="4" - x="3.733" - y="3.688" - id="rect102" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.3329999" - height="4" - x="3.733" - y="3.688" - id="rect104" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.3329999" - height="4" - x="3.733" - y="3.688" - id="rect106" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.067" - height="1.6" - x="3.8670001" - y="3.8210001" - id="rect108" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.067" - height="1.6" - x="3.8670001" - y="3.8210001" - id="rect110" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.067" - height="1.6" - x="3.8670001" - y="3.8210001" - id="rect112" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8670001" - y1="4.0879998" - x2="4.9330001" - y2="4.0879998" - stroke="#000000" - stroke-width="0.010" - id="line114" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.9330001" - y1="4.3540001" - x2="3.8670001" - y2="4.3540001" - stroke="#000000" - stroke-width="0.010" - id="line116" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8670001" - y1="4.6209998" - x2="4.9330001" - y2="4.6209998" - stroke="#000000" - stroke-width="0.010" - id="line118" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8670001" - y1="4.888" - x2="4.9330001" - y2="4.888" - stroke="#000000" - stroke-width="0.010" - id="line120" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.9330001" - y1="5.1539998" - x2="3.8670001" - y2="5.1539998" - stroke="#000000" - stroke-width="0.010" - id="line122" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.73299998" - height="0.40000001" - x="3.8670001" - y="5.5539999" - id="rect124" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.73299998" - height="0.40000001" - x="3.8670001" - y="5.5539999" - id="rect126" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.73299998" - height="0.40000001" - x="3.8670001" - y="5.5539999" - id="rect128" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.733" - y1="6.2210002" - x2="5.0669999" - y2="6.2210002" - stroke="#000000" - stroke-width="0.010" - id="line130" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.3330002" - y="6.3540001" - id="rect132" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.3330002" - y="6.3540001" - id="rect134" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.3330002" - y="6.3540001" - id="rect136" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.5999999" - y="6.3540001" - id="rect138" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.5999999" - y="6.3540001" - id="rect140" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.5999999" - y="6.3540001" - id="rect142" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.8670001" - y="6.3540001" - id="rect144" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.8670001" - y="6.3540001" - id="rect146" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.067000002" - height="0.067000002" - x="4.8670001" - y="6.3540001" - id="rect148" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.133" - height="0.133" - x="4.8000002" - y="5.954" - id="rect150" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.133" - height="0.133" - x="4.8000002" - y="5.954" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.133" - height="0.133" - x="4.8000002" - y="5.954" - id="rect154" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8670001" - y1="5.7540002" - x2="4.5999999" - y2="5.7540002" - stroke="#000000" - stroke-width="0.010" - id="line156" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.2" - height="0.2" - x="3.8670001" - y="6.2870002" - id="rect158" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.2" - height="0.2" - x="3.8670001" - y="6.2870002" - id="rect160" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.2" - height="0.2" - x="3.8670001" - y="6.2870002" - id="rect162" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.93300003" - height="0.067000002" - x="3.9330001" - y="5.2210002" - id="rect164" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.93300003" - height="0.067000002" - x="3.9330001" - y="5.2210002" - id="rect166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.93300003" - height="0.067000002" - x="3.9330001" - y="5.2210002" - id="rect168" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.9330001" - y1="5.6209998" - x2="4.533" - y2="5.6209998" - stroke="#000000" - stroke-width="0.010" - id="line170" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.533" - y1="5.6880002" - x2="4.467" - y2="5.6880002" - stroke="#000000" - stroke-width="0.010" - id="line172" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.9330001" - y1="5.6880002" - x2="4" - y2="5.6880002" - stroke="#000000" - stroke-width="0.010" - id="line174" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.333" - height="0.067000002" - x="4.0669999" - y="5.6209998" - id="rect176" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.333" - height="0.067000002" - x="4.0669999" - y="5.6209998" - id="rect178" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.333" - height="0.067000002" - x="4.0669999" - y="5.6209998" - id="rect180" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.9330001" - y1="5.3540001" - x2="4" - y2="5.3540001" - stroke="#000000" - stroke-width="0.010" - id="line182" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.0669999" - y1="5.3540001" - x2="4.1329999" - y2="5.3540001" - stroke="#000000" - stroke-width="0.010" - id="line184" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.7329998" - y1="5.3540001" - x2="4.8670001" - y2="5.3540001" - stroke="#000000" - stroke-width="0.010" - id="line186" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="7.6209998" - x2="5" - y2="7.6209998" - stroke="#000000" - stroke-width="0.010" - id="line188" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="7.5539999" - x2="3.8" - y2="7.5539999" - stroke="#000000" - stroke-width="0.010" - id="line190" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="7.487" - x2="5" - y2="7.487" - stroke="#000000" - stroke-width="0.010" - id="line192" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="7.421" - x2="3.8" - y2="7.421" - stroke="#000000" - stroke-width="0.010" - id="line194" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="7.3540001" - x2="5" - y2="7.3540001" - stroke="#000000" - stroke-width="0.010" - id="line196" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="7.2870002" - x2="3.8" - y2="7.2870002" - stroke="#000000" - stroke-width="0.010" - id="line198" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="7.2210002" - x2="5" - y2="7.2210002" - stroke="#000000" - stroke-width="0.010" - id="line200" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="7.1539998" - x2="3.8" - y2="7.1539998" - stroke="#000000" - stroke-width="0.010" - id="line202" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="7.0879998" - x2="5" - y2="7.0879998" - stroke="#000000" - stroke-width="0.010" - id="line204" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="7.0209999" - x2="3.8" - y2="7.0209999" - stroke="#000000" - stroke-width="0.010" - id="line206" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="6.954" - x2="5" - y2="6.954" - stroke="#000000" - stroke-width="0.010" - id="line208" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="6.888" - x2="3.8" - y2="6.888" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8" - y1="6.8210001" - x2="5" - y2="6.8210001" - stroke="#000000" - stroke-width="0.010" - id="line212" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5" - y1="6.7540002" - x2="3.8" - y2="6.7540002" - stroke="#000000" - stroke-width="0.010" - id="line214" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="4" - height="1.3329999" - x="5.9749999" - y="6.3330002" - id="rect216" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="4" - height="1.3329999" - x="5.9749999" - y="6.3330002" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="4" - height="1.3329999" - x="5.9749999" - y="6.3330002" - id="rect220" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.524" - height="0.76200002" - x="8.3559999" - y="6.7140002" - id="rect222" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.524" - height="0.76200002" - x="8.3559999" - y="6.7140002" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.524" - height="0.76200002" - x="8.3559999" - y="6.7140002" - id="rect226" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.8800001" - y1="7.0949998" - x2="8.3559999" - y2="7.0949998" - stroke="#000000" - stroke-width="0.010" - id="line228" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="1.048" - x="7.9749999" - y="6.4289999" - id="rect230" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="1.048" - x="7.9749999" - y="6.4289999" - id="rect232" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="1.048" - x="7.9749999" - y="6.4289999" - id="rect234" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.094999999" - height="0.094999999" - x="6.927" - y="6.5240002" - id="rect236" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.094999999" - height="0.094999999" - x="6.927" - y="6.5240002" - id="rect238" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.094999999" - height="0.094999999" - x="6.927" - y="6.5240002" - id="rect240" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.094999999" - height="0.094999999" - x="7.118" - y="6.5240002" - id="rect242" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.094999999" - height="0.094999999" - x="7.118" - y="6.5240002" - id="rect244" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.094999999" - height="0.094999999" - x="7.118" - y="6.5240002" - id="rect246" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.094999999" - height="0.094999999" - x="7.3080001" - y="6.5240002" - id="rect248" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.094999999" - height="0.094999999" - x="7.3080001" - y="6.5240002" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.094999999" - height="0.094999999" - x="7.3080001" - y="6.5240002" - id="rect252" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.19" - height="0.19" - x="7.5939999" - y="6.4289999" - id="rect254" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.19" - height="0.19" - x="7.5939999" - y="6.4289999" - id="rect256" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.19" - height="0.19" - x="7.5939999" - y="6.4289999" - id="rect258" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.28600001" - x="6.165" - y="6.4289999" - id="rect260" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.28600001" - x="6.165" - y="6.4289999" - id="rect262" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.28600001" - x="6.165" - y="6.4289999" - id="rect264" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.3329999" - height="0.094999999" - x="8.4510002" - y="7.1900001" - id="rect266" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.3329999" - height="0.094999999" - x="8.4510002" - y="7.1900001" - id="rect268" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.3329999" - height="0.094999999" - x="8.4510002" - y="7.1900001" - id="rect270" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.0699997" - y1="6.5240002" - x2="8.0699997" - y2="7.381" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.094999999" - height="0.47600001" - x="8.0699997" - y="6.7140002" - id="rect274" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.094999999" - height="0.47600001" - x="8.0699997" - y="6.7140002" - id="rect276" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.094999999" - height="0.47600001" - x="8.0699997" - y="6.7140002" - id="rect278" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.5939999" - y1="7.381" - x2="9.7849998" - y2="7.381" - stroke="#000000" - stroke-width="0.010" - id="line280" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.0700002" - y1="7" - x2="7.7849998" - y2="7" - stroke="#000000" - stroke-width="0.010" - id="line282" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.7849998" - y1="7.0949998" - x2="6.0700002" - y2="7.0949998" - stroke="#000000" - stroke-width="0.010" - id="line284" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.0700002" - y1="7.1900001" - x2="7.7849998" - y2="7.1900001" - stroke="#000000" - stroke-width="0.010" - id="line286" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.7849998" - y1="7.4759998" - x2="6.0700002" - y2="7.4759998" - stroke="#000000" - stroke-width="0.010" - id="line288" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.0700002" - y1="7.381" - x2="7.7849998" - y2="7.381" - stroke="#000000" - stroke-width="0.010" - id="line290" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.7849998" - y1="7.2859998" - x2="6.0700002" - y2="7.2859998" - stroke="#000000" - stroke-width="0.010" - id="line292" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.4510002" - y1="7.381" - x2="8.5459995" - y2="7.381" - stroke="#000000" - stroke-width="0.010" - id="line294" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6420002" - y1="7.381" - x2="8.7370005" - y2="7.381" - stroke="#000000" - stroke-width="0.010" - id="line296" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.165" - y1="7.381" - x2="8.165" - y2="7.2859998" - stroke="#000000" - stroke-width="0.010" - id="line298" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.165" - y1="6.619" - x2="8.165" - y2="6.5240002" - stroke="#000000" - stroke-width="0.010" - id="line300" - style="stroke:#000000;stroke-width:0.01" /> - <polygon - points="11.127,6.517 11.039,6.554 10.775,7.214 10.775,7.544 10.907,7.654 12.843,7.654 12.975,7.544 12.975,7.214 12.711,6.554 12.623,6.517 11.127,6.517 " - id="polygon302" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="11.127,6.517 11.039,6.554 10.775,7.214 10.775,7.544 10.907,7.654 12.843,7.654 12.975,7.544 12.975,7.214 12.711,6.554 12.623,6.517 11.127,6.517 " - id="polygon304" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 10.819,7.104 L 10.907,7.141 L 12.843,7.141 L 12.931,7.104" - id="path306" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 12.843,7.141 L 12.975,7.214" - id="path308" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 10.775,7.214 L 10.907,7.141" - id="path310" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="11.391,5.821 11.347,6.701 12.403,6.701 12.359,5.821 11.391,5.821 " - id="polygon312" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="11.391,5.821 11.347,6.701 12.403,6.701 12.359,5.821 11.391,5.821 " - id="polygon314" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="11.215,6.701 11.127,6.957 12.623,6.957 12.535,6.701 11.215,6.701 " - id="polygon316" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="11.215,6.701 11.127,6.957 12.623,6.957 12.535,6.701 11.215,6.701 " - id="polygon318" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="11.215" - cy="7.2690001" - rx="0.022" - ry="0.022" - id="ellipse320" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.215" - cy="7.2690001" - rx="0.022" - ry="0.022" - id="ellipse322" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.435" - cy="7.2690001" - rx="0.022" - ry="0.022" - id="ellipse324" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.435" - cy="7.2690001" - rx="0.022" - ry="0.022" - id="ellipse326" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.655" - cy="7.2690001" - rx="0.022" - ry="0.022" - id="ellipse328" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.655" - cy="7.2690001" - rx="0.022" - ry="0.022" - id="ellipse330" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.215" - cy="7.3610001" - rx="0.022" - ry="0.022" - id="ellipse332" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.215" - cy="7.3610001" - rx="0.022" - ry="0.022" - id="ellipse334" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.435" - cy="7.3610001" - rx="0.022" - ry="0.022" - id="ellipse336" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.435" - cy="7.3610001" - rx="0.022" - ry="0.022" - id="ellipse338" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.655" - cy="7.3610001" - rx="0.022" - ry="0.022" - id="ellipse340" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.655" - cy="7.3610001" - rx="0.022" - ry="0.022" - id="ellipse342" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.215" - cy="7.4520001" - rx="0.022" - ry="0.022" - id="ellipse344" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.215" - cy="7.4520001" - rx="0.022" - ry="0.022" - id="ellipse346" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.435" - cy="7.4520001" - rx="0.022" - ry="0.022" - id="ellipse348" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.435" - cy="7.4520001" - rx="0.022" - ry="0.022" - id="ellipse350" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.655" - cy="7.4520001" - rx="0.022" - ry="0.022" - id="ellipse352" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.655" - cy="7.4520001" - rx="0.022" - ry="0.022" - id="ellipse354" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.215" - cy="7.5440001" - rx="0.022" - ry="0.022" - id="ellipse356" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.215" - cy="7.5440001" - rx="0.022" - ry="0.022" - id="ellipse358" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.435" - cy="7.5440001" - rx="0.022" - ry="0.022" - id="ellipse360" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.435" - cy="7.5440001" - rx="0.022" - ry="0.022" - id="ellipse362" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.655" - cy="7.5440001" - rx="0.022" - ry="0.022" - id="ellipse364" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="11.655" - cy="7.5440001" - rx="0.022" - ry="0.022" - id="ellipse366" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="11.875" - cy="7.2870002" - rx="0.27500001" - ry="0.088" - id="ellipse368" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="11.875" - cy="7.2870002" - rx="0.27500001" - ry="0.088" - id="ellipse370" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="12.425" - cy="7.2870002" - rx="0.27500001" - ry="0.088" - id="ellipse372" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="12.425" - cy="7.2870002" - rx="0.27500001" - ry="0.088" - id="ellipse374" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="2" - height="1.6670001" - x="6.9250002" - y="4.237" - id="rect376" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="2" - height="1.6670001" - x="6.9250002" - y="4.237" - id="rect378" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2" - height="1.6670001" - x="6.9250002" - y="4.237" - id="rect380" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.778" - height="1.3329999" - x="7.0359998" - y="4.349" - id="rect382" - style="fill:#a1a1a1;stroke:none;stroke-width:0" /> - <rect - width="1.778" - height="1.3329999" - x="7.0359998" - y="4.349" - id="rect384" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.778" - height="1.3329999" - x="7.0359998" - y="4.349" - id="rect386" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="7.258,5.904 8.592,5.904 8.258,6.015 7.592,6.015 7.258,5.904 " - id="polygon388" - style="fill:#d9d9cd;stroke:none;stroke-width:0.1" /> - <polygon - points="7.258,5.904 8.592,5.904 8.258,6.015 7.592,6.015 7.258,5.904 " - id="polygon390" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="7.258,5.904 8.592,5.904 8.258,6.015 7.592,6.015 7.258,5.904 " - id="polygon392" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.667" - height="0.111" - x="7.592" - y="6.0149999" - id="rect394" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.667" - height="0.111" - x="7.592" - y="6.0149999" - id="rect396" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.667" - height="0.111" - x="7.592" - y="6.0149999" - id="rect398" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.3329999" - height="0.111" - x="7.2579999" - y="6.1259999" - id="rect400" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.3329999" - height="0.111" - x="7.2579999" - y="6.1259999" - id="rect402" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.3329999" - height="0.111" - x="7.2579999" - y="6.1259999" - id="rect404" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="1.863,7.675 1.863,9.350 12.012,9.350 12.012,7.662 " - id="polyline406" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="4.4000001" - y1="7.6880002" - x2="4.4120002" - y2="9.3380003" - stroke="#000000" - stroke-width="0.100" - id="line408" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="7.9749999" - y1="7.6669998" - x2="7.987" - y2="9.3249998" - stroke="#000000" - stroke-width="0.100" - id="line410" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="5.4250002" - y="9.9750004" - id="text412" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 192.168.1.0/24</text> - <text - x="2.165" - y="8.2250004" - id="text414" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.1</text> - <text - x="4.6900001" - y="8.2290001" - id="text416" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.3</text> - <text - x="12.305" - y="8.1660004" - id="text418" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.10</text> - <text - x="8.5109997" - y="8.2379999" - id="text420" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.100+n</text> - <text - x="1.3200001" - y="2.875" - id="text422" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">stable</text> - <text - x="1.34" - y="3.4749999" - id="text424" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(NT4)</text> - <text - x="3.6670001" - y="2.8469999" - id="text426" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">cashpool</text> - <text - x="3.6949999" - y="3.447" - id="text428" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(Samba)</text> - <text - x="7.5609999" - y="2.872" - id="text430" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PCn</text> - <text - x="7.3260002" - y="3.4719999" - id="text432" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(n=1-9)</text> - <text - x="11.643" - y="4.3119998" - id="text434" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">hplj</text> - <text - x="10.716" - y="4.9120002" - id="text436" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(HPLaserJet 4)</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/Charity-Network.png b/docs/htmldocs/Samba3-ByExample/images/Charity-Network.png Binary files differdeleted file mode 100644 index a763e1c220..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/Charity-Network.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/Charity-Network.svg b/docs/htmldocs/Samba3-ByExample/images/Charity-Network.svg deleted file mode 100644 index 12905c8018..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/Charity-Network.svg +++ /dev/null @@ -1,1039 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="11.88cm" - height="9.4849997cm" - viewBox="0.827 -0.889 12.708 8.596" - id="svg2"> - <defs - id="defs353" /> - <rect - width="1.077" - height="2.5120001" - x="1.051" - y="0.93599999" - id="rect4" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.077" - height="2.5120001" - x="1.051" - y="0.93599999" - id="rect6" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <rect - width="0.861" - height="0.287" - x="1.158" - y="1.087" - id="rect8" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.861" - height="0.287" - x="1.158" - y="1.374" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.861" - height="0.287" - x="1.158" - y="1.661" - id="rect12" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.861" - height="0.287" - x="1.158" - y="1.948" - id="rect14" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.53799999" - height="0.17200001" - x="1.158" - y="2.293" - id="rect16" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="1.966" - cy="2.322" - rx="0.037999999" - ry="0.037999999" - id="ellipse18" - style="fill:#00ff00;stroke:none" /> - <ellipse - cx="1.966" - cy="2.322" - rx="0.037999999" - ry="0.037999999" - id="ellipse20" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="1.966" - cy="2.4360001" - rx="0.037999999" - ry="0.037999999" - id="ellipse22" - style="fill:#ffff00;stroke:none" /> - <ellipse - cx="1.966" - cy="2.4360001" - rx="0.037999999" - ry="0.037999999" - id="ellipse24" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.12899999" - height="0.115" - x="1.751" - y="2.3499999" - id="rect26" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.12899999" - height="0.115" - x="1.751" - y="2.3499999" - id="rect28" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 1.23,2.695 L 1.23,3.323" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 1.41,2.695 L 1.41,3.323" - id="path32" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 1.589,2.695 L 1.589,3.323" - id="path34" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 1.769,2.695 L 1.769,3.323" - id="path36" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 1.948,2.695 L 1.948,3.323" - id="path38" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 2.127,2.695 L 2.127,3.323" - id="path40" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="0.836,3.664 1.051,3.233 1.051,3.448 2.127,3.448 2.127,3.233 2.414,3.664 0.836,3.664 " - id="polygon42" - style="fill:#999999;stroke:none;stroke-width:0.01" /> - <polygon - points="0.836,3.664 1.051,3.233 1.051,3.448 2.127,3.448 2.127,3.233 2.414,3.664 0.836,3.664 " - id="polygon44" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="1.587" - y1="4.487" - x2="11.412" - y2="4.4629998" - stroke="#000000" - stroke-width="0.100" - id="line46" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="1.625" - y1="3.664" - x2="1.624" - y2="4.5240002" - stroke="#000000" - stroke-width="0.100" - id="line48" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="2.017" - height="1.513" - x="2.9289999" - y="1.6210001" - id="rect50" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="2.017" - height="1.513" - x="2.9289999" - y="1.6210001" - id="rect52" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.58" - height="1.0420001" - x="3.148" - y="1.839" - id="rect54" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="3.202,3.134 4.24,3.134 4.24,3.369 3.257,3.369 3.202,3.134 " - id="polygon56" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="3.202,3.134 4.24,3.134 4.24,3.369 3.257,3.369 3.202,3.134 " - id="polygon58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="4.24,3.134 4.673,3.134 4.618,3.369 4.24,3.369 4.24,3.134 " - id="polygon60" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.24,3.134 4.673,3.134 4.618,3.369 4.24,3.369 4.24,3.134 " - id="polygon62" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.093999997" - height="0.093999997" - x="4.3109999" - y="3.204" - id="rect64" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.093999997" - height="0.093999997" - x="4.3109999" - y="3.204" - id="rect66" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="3.736,3.369 4.139,3.369 4.139,3.487 4.341,3.487 4.341,3.604 3.534,3.604 3.534,3.487 3.736,3.487 3.736,3.369 " - id="polygon68" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="3.736,3.369 4.139,3.369 4.139,3.487 4.341,3.487 4.341,3.604 3.534,3.604 3.534,3.487 3.736,3.487 3.736,3.369 " - id="polygon70" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="2.017" - height="1.513" - x="5.5040002" - y="1.633" - id="rect72" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="2.017" - height="1.513" - x="5.5040002" - y="1.633" - id="rect74" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.58" - height="1.0420001" - x="5.723" - y="1.852" - id="rect76" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="5.777,3.146 6.815,3.146 6.815,3.381 5.832,3.381 5.777,3.146 " - id="polygon78" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.777,3.146 6.815,3.146 6.815,3.381 5.832,3.381 5.777,3.146 " - id="polygon80" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.815,3.146 7.248,3.146 7.193,3.381 6.815,3.381 6.815,3.146 " - id="polygon82" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.815,3.146 7.248,3.146 7.193,3.381 6.815,3.381 6.815,3.146 " - id="polygon84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.093999997" - height="0.093999997" - x="6.8860002" - y="3.217" - id="rect86" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.093999997" - height="0.093999997" - x="6.8860002" - y="3.217" - id="rect88" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.311,3.381 6.714,3.381 6.714,3.499 6.916,3.499 6.916,3.617 6.109,3.617 6.109,3.499 6.311,3.499 6.311,3.381 " - id="polygon90" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.311,3.381 6.714,3.381 6.714,3.499 6.916,3.499 6.916,3.617 6.109,3.617 6.109,3.499 6.311,3.499 6.311,3.381 " - id="polygon92" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="2.017" - height="1.513" - x="7.9169998" - y="1.658" - id="rect94" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="2.017" - height="1.513" - x="7.9169998" - y="1.658" - id="rect96" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.58" - height="1.0420001" - x="8.1350002" - y="1.877" - id="rect98" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="8.19,3.171 9.228,3.171 9.228,3.406 8.244,3.406 8.19,3.171 " - id="polygon100" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.19,3.171 9.228,3.171 9.228,3.406 8.244,3.406 8.19,3.171 " - id="polygon102" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.228,3.171 9.66,3.171 9.606,3.406 9.228,3.406 9.228,3.171 " - id="polygon104" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.228,3.171 9.66,3.171 9.606,3.406 9.228,3.406 9.228,3.171 " - id="polygon106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.093999997" - height="0.093999997" - x="9.2980003" - y="3.2420001" - id="rect108" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.093999997" - height="0.093999997" - x="9.2980003" - y="3.2420001" - id="rect110" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.723,3.406 9.127,3.406 9.127,3.524 9.328,3.524 9.328,3.642 8.522,3.642 8.522,3.524 8.723,3.524 8.723,3.406 " - id="polygon112" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.723,3.406 9.127,3.406 9.127,3.524 9.328,3.524 9.328,3.642 8.522,3.642 8.522,3.524 8.723,3.524 8.723,3.406 " - id="polygon114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="2.017" - height="1.513" - x="10.342" - y="1.658" - id="rect116" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="2.017" - height="1.513" - x="10.342" - y="1.658" - id="rect118" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.58" - height="1.0420001" - x="10.56" - y="1.877" - id="rect120" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="10.615,3.171 11.653,3.171 11.653,3.406 10.669,3.406 10.615,3.171 " - id="polygon122" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.615,3.171 11.653,3.171 11.653,3.406 10.669,3.406 10.615,3.171 " - id="polygon124" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="11.653,3.171 12.085,3.171 12.031,3.406 11.653,3.406 11.653,3.171 " - id="polygon126" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.653,3.171 12.085,3.171 12.031,3.406 11.653,3.406 11.653,3.171 " - id="polygon128" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.093999997" - height="0.093999997" - x="11.723" - y="3.2420001" - id="rect130" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.093999997" - height="0.093999997" - x="11.723" - y="3.2420001" - id="rect132" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="11.148,3.406 11.552,3.406 11.552,3.524 11.753,3.524 11.753,3.642 10.947,3.642 10.947,3.524 11.148,3.524 11.148,3.406 " - id="polygon134" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.148,3.406 11.552,3.406 11.552,3.524 11.753,3.524 11.753,3.642 10.947,3.642 10.947,3.524 11.148,3.524 11.148,3.406 " - id="polygon136" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="3.938" - y1="3.6040001" - x2="3.9389999" - y2="5.2309999" - stroke="#000000" - stroke-width="0.100" - id="line138" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.513" - y1="3.6170001" - x2="6.513" - y2="5.237" - stroke="#000000" - stroke-width="0.100" - id="line140" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.9250002" - y1="3.642" - x2="8.9329996" - y2="4.5" - stroke="#000000" - stroke-width="0.100" - id="line142" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="11.396" - y1="3.654" - x2="11.4" - y2="5.362" - stroke="#000000" - stroke-width="0.100" - id="line144" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="2.017" - height="1.513" - x="10.442" - y="5.3460002" - id="rect146" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="2.017" - height="1.513" - x="10.442" - y="5.3460002" - id="rect148" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.58" - height="1.0420001" - x="10.66" - y="5.5640001" - id="rect150" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="10.715,6.859 11.753,6.859 11.753,7.094 10.769,7.094 10.715,6.859 " - id="polygon152" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.715,6.859 11.753,6.859 11.753,7.094 10.769,7.094 10.715,6.859 " - id="polygon154" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="11.753,6.859 12.185,6.859 12.131,7.094 11.753,7.094 11.753,6.859 " - id="polygon156" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.753,6.859 12.185,6.859 12.131,7.094 11.753,7.094 11.753,6.859 " - id="polygon158" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.093999997" - height="0.093999997" - x="11.823" - y="6.9289999" - id="rect160" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.093999997" - height="0.093999997" - x="11.823" - y="6.9289999" - id="rect162" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="11.248,7.094 11.652,7.094 11.652,7.212 11.853,7.212 11.853,7.329 11.047,7.329 11.047,7.212 11.248,7.212 11.248,7.094 " - id="polygon164" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.248,7.094 11.652,7.094 11.652,7.212 11.853,7.212 11.853,7.329 11.047,7.329 11.047,7.212 11.248,7.212 11.248,7.094 " - id="polygon166" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="3.171,5.92 3.083,5.956 2.819,6.616 2.819,6.946 2.951,7.056 4.887,7.056 5.019,6.946 5.019,6.616 4.755,5.956 4.667,5.92 3.171,5.92 " - id="polygon168" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="3.171,5.92 3.083,5.956 2.819,6.616 2.819,6.946 2.951,7.056 4.887,7.056 5.019,6.946 5.019,6.616 4.755,5.956 4.667,5.92 3.171,5.92 " - id="polygon170" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 2.863,6.506 L 2.951,6.543 L 4.887,6.543 L 4.975,6.506" - id="path172" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.887,6.543 L 5.019,6.616" - id="path174" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 2.819,6.616 L 2.951,6.543" - id="path176" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.435,5.223 3.391,6.103 4.447,6.103 4.403,5.223 3.435,5.223 " - id="polygon178" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="3.435,5.223 3.391,6.103 4.447,6.103 4.403,5.223 3.435,5.223 " - id="polygon180" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.259,6.103 3.171,6.36 4.667,6.36 4.579,6.103 3.259,6.103 " - id="polygon182" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="3.259,6.103 3.171,6.36 4.667,6.36 4.579,6.103 3.259,6.103 " - id="polygon184" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="3.2590001" - cy="6.671" - rx="0.022" - ry="0.022" - id="ellipse186" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.2590001" - cy="6.671" - rx="0.022" - ry="0.022" - id="ellipse188" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.4790001" - cy="6.671" - rx="0.022" - ry="0.022" - id="ellipse190" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.4790001" - cy="6.671" - rx="0.022" - ry="0.022" - id="ellipse192" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.6989999" - cy="6.671" - rx="0.022" - ry="0.022" - id="ellipse194" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.6989999" - cy="6.671" - rx="0.022" - ry="0.022" - id="ellipse196" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.2590001" - cy="6.763" - rx="0.022" - ry="0.022" - id="ellipse198" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.2590001" - cy="6.763" - rx="0.022" - ry="0.022" - id="ellipse200" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.4790001" - cy="6.763" - rx="0.022" - ry="0.022" - id="ellipse202" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.4790001" - cy="6.763" - rx="0.022" - ry="0.022" - id="ellipse204" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.6989999" - cy="6.763" - rx="0.022" - ry="0.022" - id="ellipse206" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.6989999" - cy="6.763" - rx="0.022" - ry="0.022" - id="ellipse208" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.2590001" - cy="6.855" - rx="0.022" - ry="0.022" - id="ellipse210" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.2590001" - cy="6.855" - rx="0.022" - ry="0.022" - id="ellipse212" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.4790001" - cy="6.855" - rx="0.022" - ry="0.022" - id="ellipse214" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.4790001" - cy="6.855" - rx="0.022" - ry="0.022" - id="ellipse216" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.6989999" - cy="6.855" - rx="0.022" - ry="0.022" - id="ellipse218" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.6989999" - cy="6.855" - rx="0.022" - ry="0.022" - id="ellipse220" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.2590001" - cy="6.9460001" - rx="0.022" - ry="0.022" - id="ellipse222" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.2590001" - cy="6.9460001" - rx="0.022" - ry="0.022" - id="ellipse224" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.4790001" - cy="6.9460001" - rx="0.022" - ry="0.022" - id="ellipse226" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.4790001" - cy="6.9460001" - rx="0.022" - ry="0.022" - id="ellipse228" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.6989999" - cy="6.9460001" - rx="0.022" - ry="0.022" - id="ellipse230" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.6989999" - cy="6.9460001" - rx="0.022" - ry="0.022" - id="ellipse232" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.9189999" - cy="6.6900001" - rx="0.27500001" - ry="0.088" - id="ellipse234" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="3.9189999" - cy="6.6900001" - rx="0.27500001" - ry="0.088" - id="ellipse236" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.4689999" - cy="6.6900001" - rx="0.27500001" - ry="0.088" - id="ellipse238" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="4.4689999" - cy="6.6900001" - rx="0.27500001" - ry="0.088" - id="ellipse240" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="5.807,5.902 5.719,5.939 5.455,6.599 5.455,6.929 5.587,7.039 7.523,7.039 7.655,6.929 7.655,6.599 7.391,5.939 7.303,5.902 5.807,5.902 " - id="polygon242" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="5.807,5.902 5.719,5.939 5.455,6.599 5.455,6.929 5.587,7.039 7.523,7.039 7.655,6.929 7.655,6.599 7.391,5.939 7.303,5.902 5.807,5.902 " - id="polygon244" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.499,6.489 L 5.587,6.525 L 7.523,6.525 L 7.611,6.489" - id="path246" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.523,6.525 L 7.655,6.599" - id="path248" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.455,6.599 L 5.587,6.525" - id="path250" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.071,5.205 6.027,6.085 7.083,6.085 7.039,5.205 6.071,5.205 " - id="polygon252" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="6.071,5.205 6.027,6.085 7.083,6.085 7.039,5.205 6.071,5.205 " - id="polygon254" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.895,6.085 5.807,6.342 7.303,6.342 7.215,6.085 5.895,6.085 " - id="polygon256" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="5.895,6.085 5.807,6.342 7.303,6.342 7.215,6.085 5.895,6.085 " - id="polygon258" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="5.895" - cy="6.6539998" - rx="0.022" - ry="0.022" - id="ellipse260" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.895" - cy="6.6539998" - rx="0.022" - ry="0.022" - id="ellipse262" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1149998" - cy="6.6539998" - rx="0.022" - ry="0.022" - id="ellipse264" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1149998" - cy="6.6539998" - rx="0.022" - ry="0.022" - id="ellipse266" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.335" - cy="6.6539998" - rx="0.022" - ry="0.022" - id="ellipse268" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.335" - cy="6.6539998" - rx="0.022" - ry="0.022" - id="ellipse270" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.895" - cy="6.7449999" - rx="0.022" - ry="0.022" - id="ellipse272" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.895" - cy="6.7449999" - rx="0.022" - ry="0.022" - id="ellipse274" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1149998" - cy="6.7449999" - rx="0.022" - ry="0.022" - id="ellipse276" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1149998" - cy="6.7449999" - rx="0.022" - ry="0.022" - id="ellipse278" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.335" - cy="6.7449999" - rx="0.022" - ry="0.022" - id="ellipse280" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.335" - cy="6.7449999" - rx="0.022" - ry="0.022" - id="ellipse282" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.895" - cy="6.8369999" - rx="0.022" - ry="0.022" - id="ellipse284" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.895" - cy="6.8369999" - rx="0.022" - ry="0.022" - id="ellipse286" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1149998" - cy="6.8369999" - rx="0.022" - ry="0.022" - id="ellipse288" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1149998" - cy="6.8369999" - rx="0.022" - ry="0.022" - id="ellipse290" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.335" - cy="6.8369999" - rx="0.022" - ry="0.022" - id="ellipse292" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.335" - cy="6.8369999" - rx="0.022" - ry="0.022" - id="ellipse294" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.895" - cy="6.9289999" - rx="0.022" - ry="0.022" - id="ellipse296" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.895" - cy="6.9289999" - rx="0.022" - ry="0.022" - id="ellipse298" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1149998" - cy="6.9289999" - rx="0.022" - ry="0.022" - id="ellipse300" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1149998" - cy="6.9289999" - rx="0.022" - ry="0.022" - id="ellipse302" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.335" - cy="6.9289999" - rx="0.022" - ry="0.022" - id="ellipse304" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.335" - cy="6.9289999" - rx="0.022" - ry="0.022" - id="ellipse306" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5549998" - cy="6.6719999" - rx="0.27500001" - ry="0.088" - id="ellipse308" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.5549998" - cy="6.6719999" - rx="0.27500001" - ry="0.088" - id="ellipse310" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.105" - cy="6.6719999" - rx="0.27500001" - ry="0.088" - id="ellipse312" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.105" - cy="6.6719999" - rx="0.27500001" - ry="0.088" - id="ellipse314" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <text - x="3.415" - y="1.183" - id="text316" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">desk1</text> - <text - x="5.9000001" - y="1.184" - id="text318" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">desk2</text> - <text - x="8.3559999" - y="1.202" - id="text320" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">desk3</text> - <text - x="10.813" - y="1.237" - id="text322" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">desk4</text> - <text - x="10.92" - y="8.0609999" - id="text324" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">desk5</text> - <text - x="1.138" - y="0.44" - id="text326" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">server</text> - <text - x="4.809" - y="-0.479" - id="text328" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Workgroup: MIDEARTH</text> - <text - x="3.0309999" - y="8.0959997" - id="text330" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PRINTQ</text> - <text - x="6.211" - y="8.0249996" - id="text332" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">hplj5</text> - <text - x="1.154" - y="4.1560001" - id="text334" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.1</text> - <text - x="3.0799999" - y="4.145" - id="text336" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.101</text> - <text - x="5.605" - y="4.1430001" - id="text338" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.102</text> - <text - x="8.0349998" - y="4.1360002" - id="text340" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.103</text> - <text - x="10.516" - y="4.1459999" - id="text342" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.104</text> - <text - x="10.515" - y="5.1589999" - id="text344" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.105</text> - <text - x="3.2379999" - y="5.0170002" - id="text346" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.20</text> - <text - x="5.8140001" - y="5.007" - id="text348" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.30</text> - <text - x="5.5159998" - y="0.15899999" - id="text350" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 192.168.1.0/24</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/Domain-WorkgroupAnnouncement.png b/docs/htmldocs/Samba3-ByExample/images/Domain-WorkgroupAnnouncement.png Binary files differdeleted file mode 100644 index e65882b2ce..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/Domain-WorkgroupAnnouncement.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/HostAnnouncment.png b/docs/htmldocs/Samba3-ByExample/images/HostAnnouncment.png Binary files differdeleted file mode 100644 index 56f9fb8576..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/HostAnnouncment.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/LocalMasterAnnouncement.png b/docs/htmldocs/Samba3-ByExample/images/LocalMasterAnnouncement.png Binary files differdeleted file mode 100644 index 8b22bc35c5..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/LocalMasterAnnouncement.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/NullConnect.png b/docs/htmldocs/Samba3-ByExample/images/NullConnect.png Binary files differdeleted file mode 100644 index 5320fc6db1..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/NullConnect.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/UNIX-Samba-and-LDAP.png b/docs/htmldocs/Samba3-ByExample/images/UNIX-Samba-and-LDAP.png Binary files differdeleted file mode 100644 index 30997d78b2..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/UNIX-Samba-and-LDAP.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/UNIX-Samba-and-LDAP.svg b/docs/htmldocs/Samba3-ByExample/images/UNIX-Samba-and-LDAP.svg deleted file mode 100644 index ebd7412961..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/UNIX-Samba-and-LDAP.svg +++ /dev/null @@ -1,312 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="22.440001cm" - height="13.923cm" - viewBox="2.2 5.38 24.64 19.302" - id="svg2"> - <defs - id="defs95" /> - <rect - width="7.625" - height="11.175" - x="9.3500004" - y="6.2750001" - id="rect4" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="13.162" - y1="6.2750001" - x2="13.162" - y2="17.450001" - stroke="#000000" - stroke-width="0.100" - id="line6" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.3500004" - y1="8.8500004" - x2="16.975" - y2="8.8500004" - stroke="#000000" - stroke-width="0.100" - id="line8" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.3400002" - y1="11.68" - x2="16.975" - y2="11.725" - stroke="#000000" - stroke-width="0.100" - id="line10" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.3149996" - y1="14.655" - x2="16.950001" - y2="14.65" - stroke="#000000" - stroke-width="0.100" - id="line12" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="10.404" - y="5.9749999" - id="text14" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Posix</text> - <text - x="14.161" - y="5.9650002" - id="text16" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="10.277" - y="7.7399998" - id="text18" - style="font-size:0.89999998px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">People</text> - <text - x="14.52" - y="7.375" - id="text20" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">User</text> - <text - x="14.043" - y="8.1750002" - id="text22" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Accounts</text> - <text - x="10.328" - y="16.25" - id="text24" - style="font-size:0.89999998px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">uid/gids</text> - <text - x="14.086" - y="13.125" - id="text26" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Windows</text> - <text - x="14.27" - y="13.925" - id="text28" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Groups</text> - <text - x="10.306" - y="13.334" - id="text30" - style="font-size:0.89999998px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Groups</text> - <text - x="10.285" - y="10.459" - id="text32" - style="font-size:0.89999998px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">People</text> - <text - x="14.193" - y="9.7340002" - id="text34" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain</text> - <text - x="14.138" - y="10.534" - id="text36" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member</text> - <text - x="13.99" - y="11.334" - id="text38" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Machines</text> - <text - x="14.257" - y="16.284" - id="text40" - style="font-size:0.89999998px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">SIDs</text> - <rect - width="4.3499999" - height="1.625" - x="2.25" - y="9.4499998" - id="rect42" - style="fill:#c6c6c6;stroke:none;stroke-width:0" /> - <rect - width="4.3499999" - height="1.625" - x="2.25" - y="9.4499998" - id="rect44" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="9.3500004" - y1="6.2750001" - x2="6.5999999" - y2="9.4499998" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line46" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <line - x1="6.5999999" - y1="11.075" - x2="9.3249998" - y2="14.65" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line48" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <text - x="3.313" - y="10.5" - id="text50" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">NSS_LDAP</text> - <rect - width="5.0999999" - height="1.625" - x="2.2750001" - y="15.225" - id="rect52" - style="fill:#b9b9b9;stroke:none;stroke-width:0" /> - <rect - width="5.0999999" - height="1.625" - x="2.2750001" - y="15.225" - id="rect54" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="3.415" - y="16.247" - id="text56" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Winbind (NSS)</text> - <line - x1="9.3500004" - y1="14.725" - x2="7.375" - y2="15.225" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line58" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <line - x1="7.375" - y1="16.85" - x2="9.3500004" - y2="17.450001" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line60" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <rect - width="5.25" - height="2.2249999" - x="19.325001" - y="9.1499996" - id="rect62" - style="fill:#adadad;stroke:none;stroke-width:0" /> - <rect - width="5.25" - height="2.2249999" - x="19.325001" - y="9.1499996" - id="rect64" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="20.535" - y="10.522" - id="text66" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">smbd + winbind</text> - <line - x1="16.975" - y1="6.2750001" - x2="19.325001" - y2="9.1499996" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line68" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <line - x1="19.325001" - y1="11.375" - x2="16.975" - y2="14.675" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line70" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <rect - width="5.25" - height="2.1300001" - x="19.34" - y="14.925" - id="rect72" - style="fill:#adadad;stroke:none;stroke-width:0" /> - <rect - width="5.25" - height="2.1300001" - x="19.34" - y="14.925" - id="rect74" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="21.211" - y="15.875" - id="text76" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">winbind</text> - <text - x="21.121" - y="16.575001" - id="text78" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(IDMAP)</text> - <line - x1="19.34" - y1="14.925" - x2="16.975" - y2="14.6" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line80" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <line - x1="19.34" - y1="17.055" - x2="17.049999" - y2="17.375" - stroke="#000000" - stroke-width="0.050" - stroke-dasharray="0.10,0.10" - id="line82" - style="stroke:#000000;stroke-width:0.05;stroke-dasharray:0.1, 0.1" /> - <text - x="3.2219999" - y="6.375" - id="text84" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">UNIX Interface</text> - <text - x="3.8310001" - y="7.0749998" - id="text86" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">to LDAP</text> - <text - x="20.378" - y="6.3000002" - id="text88" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba Interface</text> - <text - x="21.156" - y="7" - id="text90" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">to LDAP</text> - <text - x="11.024" - y="18.74" - id="text92" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP Database</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/UserConnect.png b/docs/htmldocs/Samba3-ByExample/images/UserConnect.png Binary files differdeleted file mode 100644 index 0b9acce15e..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/UserConnect.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/UserMgrNT4.png b/docs/htmldocs/Samba3-ByExample/images/UserMgrNT4.png Binary files differdeleted file mode 100644 index 516c75b4b1..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/UserMgrNT4.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/WINREPRESSME-Capture.png b/docs/htmldocs/Samba3-ByExample/images/WINREPRESSME-Capture.png Binary files differdeleted file mode 100644 index 3b6dc3ae56..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/WINREPRESSME-Capture.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/WINREPRESSME-Capture2.png b/docs/htmldocs/Samba3-ByExample/images/WINREPRESSME-Capture2.png Binary files differdeleted file mode 100644 index b9b82c2287..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/WINREPRESSME-Capture2.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/Windows-ME-WINEPRESSME-Startup-30min-ProtocolStats.png b/docs/htmldocs/Samba3-ByExample/images/Windows-ME-WINEPRESSME-Startup-30min-ProtocolStats.png Binary files differdeleted file mode 100644 index 6e23d1632a..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/Windows-ME-WINEPRESSME-Startup-30min-ProtocolStats.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/Windows-ME-WINEPRESSME-Startup-30min-TraceStats.png b/docs/htmldocs/Samba3-ByExample/images/Windows-ME-WINEPRESSME-Startup-30min-TraceStats.png Binary files differdeleted file mode 100644 index f5fd738475..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/Windows-ME-WINEPRESSME-Startup-30min-TraceStats.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/WindowsXP-NullConnection.png b/docs/htmldocs/Samba3-ByExample/images/WindowsXP-NullConnection.png Binary files differdeleted file mode 100644 index 76d1ac2c9a..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/WindowsXP-NullConnection.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/WindowsXP-UserConnection.png b/docs/htmldocs/Samba3-ByExample/images/WindowsXP-UserConnection.png Binary files differdeleted file mode 100644 index d60fefc659..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/WindowsXP-UserConnection.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/XP-screen001.png b/docs/htmldocs/Samba3-ByExample/images/XP-screen001.png Binary files differdeleted file mode 100644 index 6f0fe58e78..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/XP-screen001.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/acct2net.png b/docs/htmldocs/Samba3-ByExample/images/acct2net.png Binary files differdeleted file mode 100644 index 5177fb5cee..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/acct2net.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/acct2net.svg b/docs/htmldocs/Samba3-ByExample/images/acct2net.svg deleted file mode 100644 index 13153b9a42..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/acct2net.svg +++ /dev/null @@ -1,1901 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="12.429cm" - height="7.289cm" - viewBox="0.025 1.145 12.454 8.434" - id="svg2"> - <defs - id="defs595" /> - <rect - width="4.4790001" - height="5.9099998" - x="0.34999999" - y="2.1919999" - id="rect4" - style="fill:#dcdcdc;stroke:none;stroke-width:0" /> - <path - d="M 0.35,2.192 C 0.18431458,2.192 0.05,2.3263146 0.05,2.492" - id="path6" - style="fill:#dcdcdc;stroke:none" /> - <path - d="M 5.129,2.492 C 5.129,2.3263146 4.9946854,2.192 4.829,2.192" - id="path8" - style="fill:#dcdcdc;stroke:none" /> - <rect - width="5.079" - height="5.3099999" - x="0.050000001" - y="2.4920001" - id="rect10" - style="fill:#dcdcdc;stroke:none;stroke-width:0" /> - <path - d="M 0.05,7.802 C 0.05,7.9676854 0.18431458,8.102 0.35,8.102" - id="path12" - style="fill:#dcdcdc;stroke:none" /> - <path - d="M 4.829,8.102 C 4.9946854,8.102 5.129,7.9676854 5.129,7.802" - id="path14" - style="fill:#dcdcdc;stroke:none" /> - <line - x1="0.34999999" - y1="2.1919999" - x2="4.829" - y2="2.1919999" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.34999999" - y1="8.1020002" - x2="4.829" - y2="8.1020002" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.35,2.192 C 0.18431458,2.192 0.05,2.3263146 0.05,2.492" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 5.129,2.492 C 5.129,2.3263146 4.9946854,2.192 4.829,2.192" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.050000001" - y1="2.4920001" - x2="0.050000001" - y2="7.802" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="5.1290002" - y1="2.4920001" - x2="5.1290002" - y2="7.802" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.05,7.802 C 0.05,7.9676854 0.18431458,8.102 0.35,8.102" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.829,8.102 C 4.9946854,8.102 5.129,7.9676854 5.129,7.802" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="4.1500001" - height="5.9629998" - x="7.9790001" - y="2.1400001" - id="rect32" - style="fill:#dcdcdc;stroke:none;stroke-width:0" /> - <path - d="M 7.979,2.14 C 7.8133146,2.14 7.679,2.2743146 7.679,2.44" - id="path34" - style="fill:#dcdcdc;stroke:none" /> - <path - d="M 12.429,2.44 C 12.429,2.2743146 12.294685,2.14 12.129,2.14" - id="path36" - style="fill:#dcdcdc;stroke:none" /> - <rect - width="4.75" - height="5.3629999" - x="7.6789999" - y="2.4400001" - id="rect38" - style="fill:#dcdcdc;stroke:none;stroke-width:0" /> - <path - d="M 7.679,7.802 C 7.679,7.9676854 7.8133146,8.102 7.979,8.102" - id="path40" - style="fill:#dcdcdc;stroke:none" /> - <path - d="M 12.129,8.102 C 12.294685,8.102 12.429,7.9676854 12.429,7.802" - id="path42" - style="fill:#dcdcdc;stroke:none" /> - <line - x1="7.9790001" - y1="2.1400001" - x2="12.129" - y2="2.1400001" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="7.9790001" - y1="8.1020002" - x2="12.129" - y2="8.1020002" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 7.979,2.14 C 7.8133146,2.14 7.679,2.2743146 7.679,2.44" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.429,2.44 C 12.429,2.2743146 12.294685,2.14 12.129,2.14" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="7.6789999" - y1="2.4400001" - x2="7.6789999" - y2="7.802" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="12.429" - y1="2.4400001" - x2="12.429" - y2="7.802" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 7.679,7.802 C 7.679,7.9676854 7.8133146,8.102 7.979,8.102" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.129,8.102 C 12.294685,8.102 12.429,7.9676854 12.429,7.802" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <text - x="5.3099999" - y="4.9510002" - id="text60" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.1</text> - <text - x="1.069" - y="6.0370002" - id="text62" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">IP via DHCP</text> - <text - x="4.098" - y="3.1889999" - id="text64" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">hplj4</text> - <rect - width="1.309" - height="3.928" - x="5.7750001" - y="3.1860001" - id="rect66" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.309" - height="3.928" - x="5.7750001" - y="3.1860001" - id="rect68" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.309" - height="3.928" - x="5.7750001" - y="3.1860001" - id="rect70" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.0470001" - height="1.571" - x="5.9060001" - y="3.3169999" - id="rect72" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.0470001" - height="1.571" - x="5.9060001" - y="3.3169999" - id="rect74" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.0470001" - height="1.571" - x="5.9060001" - y="3.3169999" - id="rect76" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9060001" - y1="3.579" - x2="6.9530001" - y2="3.579" - stroke="#000000" - stroke-width="0.010" - id="line78" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.9530001" - y1="3.8410001" - x2="5.9060001" - y2="3.8410001" - stroke="#000000" - stroke-width="0.010" - id="line80" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9060001" - y1="4.1030002" - x2="6.9530001" - y2="4.1030002" - stroke="#000000" - stroke-width="0.010" - id="line82" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9060001" - y1="4.3639998" - x2="6.9530001" - y2="4.3639998" - stroke="#000000" - stroke-width="0.010" - id="line84" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.9530001" - y1="4.6259999" - x2="5.9060001" - y2="4.6259999" - stroke="#000000" - stroke-width="0.010" - id="line86" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.72000003" - height="0.39300001" - x="5.9060001" - y="5.0190001" - id="rect88" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.72000003" - height="0.39300001" - x="5.9060001" - y="5.0190001" - id="rect90" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.72000003" - height="0.39300001" - x="5.9060001" - y="5.0190001" - id="rect92" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="5.7750001" - y1="5.6739998" - x2="7.0840001" - y2="5.6739998" - stroke="#000000" - stroke-width="0.010" - id="line94" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.3639998" - y="5.8049998" - id="rect96" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.3639998" - y="5.8049998" - id="rect98" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.3639998" - y="5.8049998" - id="rect100" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.6259999" - y="5.8049998" - id="rect102" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.6259999" - y="5.8049998" - id="rect104" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.6259999" - y="5.8049998" - id="rect106" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.888" - y="5.8049998" - id="rect108" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.888" - y="5.8049998" - id="rect110" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.064999998" - height="0.064999998" - x="6.888" - y="5.8049998" - id="rect112" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.131" - height="0.131" - x="6.822" - y="5.4120002" - id="rect114" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.131" - height="0.131" - x="6.822" - y="5.4120002" - id="rect116" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.131" - height="0.131" - x="6.822" - y="5.4120002" - id="rect118" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9060001" - y1="5.2150002" - x2="6.6259999" - y2="5.2150002" - stroke="#000000" - stroke-width="0.010" - id="line120" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.19599999" - height="0.19599999" - x="5.9060001" - y="5.7389998" - id="rect122" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.19599999" - height="0.19599999" - x="5.9060001" - y="5.7389998" - id="rect124" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.19599999" - height="0.19599999" - x="5.9060001" - y="5.7389998" - id="rect126" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.917" - height="0.064999998" - x="5.9710002" - y="4.6919999" - id="rect128" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.917" - height="0.064999998" - x="5.9710002" - y="4.6919999" - id="rect130" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.917" - height="0.064999998" - x="5.9710002" - y="4.6919999" - id="rect132" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9710002" - y1="5.085" - x2="6.5609999" - y2="5.085" - stroke="#000000" - stroke-width="0.010" - id="line134" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.5609999" - y1="5.1500001" - x2="6.4949999" - y2="5.1500001" - stroke="#000000" - stroke-width="0.010" - id="line136" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9710002" - y1="5.1500001" - x2="6.0370002" - y2="5.1500001" - stroke="#000000" - stroke-width="0.010" - id="line138" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.32699999" - height="0.064999998" - x="6.1020002" - y="5.085" - id="rect140" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.32699999" - height="0.064999998" - x="6.1020002" - y="5.085" - id="rect142" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.32699999" - height="0.064999998" - x="6.1020002" - y="5.085" - id="rect144" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="5.9710002" - y1="4.823" - x2="6.0370002" - y2="4.823" - stroke="#000000" - stroke-width="0.010" - id="line146" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.1020002" - y1="4.823" - x2="6.1680002" - y2="4.823" - stroke="#000000" - stroke-width="0.010" - id="line148" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="6.757" - y1="4.823" - x2="6.888" - y2="4.823" - stroke="#000000" - stroke-width="0.010" - id="line150" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="7.0489998" - x2="7.0190001" - y2="7.0489998" - stroke="#000000" - stroke-width="0.010" - id="line152" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.9829998" - x2="5.8400002" - y2="6.9829998" - stroke="#000000" - stroke-width="0.010" - id="line154" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="6.9180002" - x2="7.0190001" - y2="6.9180002" - stroke="#000000" - stroke-width="0.010" - id="line156" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.8520002" - x2="5.8400002" - y2="6.8520002" - stroke="#000000" - stroke-width="0.010" - id="line158" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="6.7870002" - x2="7.0190001" - y2="6.7870002" - stroke="#000000" - stroke-width="0.010" - id="line160" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.7210002" - x2="5.8400002" - y2="6.7210002" - stroke="#000000" - stroke-width="0.010" - id="line162" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="6.6560001" - x2="7.0190001" - y2="6.6560001" - stroke="#000000" - stroke-width="0.010" - id="line164" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.5900002" - x2="5.8400002" - y2="6.5900002" - stroke="#000000" - stroke-width="0.010" - id="line166" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="6.5250001" - x2="7.0190001" - y2="6.5250001" - stroke="#000000" - stroke-width="0.010" - id="line168" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.4590001" - x2="5.8400002" - y2="6.4590001" - stroke="#000000" - stroke-width="0.010" - id="line170" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="6.3940001" - x2="7.0190001" - y2="6.3940001" - stroke="#000000" - stroke-width="0.010" - id="line172" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.3280001" - x2="5.8400002" - y2="6.3280001" - stroke="#000000" - stroke-width="0.010" - id="line174" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.8400002" - y1="6.263" - x2="7.0190001" - y2="6.263" - stroke="#000000" - stroke-width="0.010" - id="line176" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0190001" - y1="6.197" - x2="5.8400002" - y2="6.197" - stroke="#000000" - stroke-width="0.010" - id="line178" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="7.0159998" - y1="5.1269999" - x2="11.562" - y2="5.1269999" - stroke="#000000" - stroke-width="0.100" - id="line180" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="7.6430001" - y1="5.1269999" - x2="7.6430001" - y2="5.125" - stroke="#000000" - stroke-width="0.100" - id="line182" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.5790005" - y1="5.1269999" - x2="8.5790005" - y2="4.2020001" - stroke="#000000" - stroke-width="0.100" - id="line184" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.5790005" - y1="5.1269999" - x2="8.5790005" - y2="6.177" - stroke="#000000" - stroke-width="0.100" - id="line186" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.016" - y1="5.1269999" - x2="10.016" - y2="4.2150002" - stroke="#000000" - stroke-width="0.100" - id="line188" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.177" - y1="5.1269999" - x2="10.177" - y2="5.1399999" - stroke="#000000" - stroke-width="0.100" - id="line190" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="11.512" - y1="5.1269999" - x2="11.512" - y2="4.177" - stroke="#000000" - stroke-width="0.100" - id="line192" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="0.55599999" - y1="5.1669998" - x2="5.7789998" - y2="5.177" - stroke="#000000" - stroke-width="0.100" - id="line194" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="2.244" - y1="5.1700001" - x2="2.244" - y2="5.1599998" - stroke="#000000" - stroke-width="0.100" - id="line196" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="1.738" - y1="5.1690001" - x2="1.74" - y2="4.1259999" - stroke="#000000" - stroke-width="0.100" - id="line198" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="4.1370001" - y1="5.1739998" - x2="4.1389999" - y2="4.27" - stroke="#000000" - stroke-width="0.100" - id="line200" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="2.7620001" - y1="5.171" - x2="2.7639999" - y2="4.1240001" - stroke="#000000" - stroke-width="0.100" - id="line202" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="4.1430001" - y1="5.1739998" - x2="4.1409998" - y2="6.165" - stroke="#000000" - stroke-width="0.100" - id="line204" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="0.60600001" - y1="5.1669998" - x2="0.60799998" - y2="4.1690001" - stroke="#000000" - stroke-width="0.100" - id="line206" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.713" - height="0.53500003" - x="8.2119999" - y="3.5190001" - id="rect208" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.713" - height="0.53500003" - x="8.2119999" - y="3.5190001" - id="rect210" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.55900002" - height="0.36899999" - x="8.2889996" - y="3.596" - id="rect212" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="8.308,4.054 8.675,4.054 8.675,4.137 8.328,4.137 8.308,4.054 " - id="polygon214" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.308,4.054 8.675,4.054 8.675,4.137 8.328,4.137 8.308,4.054 " - id="polygon216" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.675,4.054 8.828,4.054 8.809,4.137 8.675,4.137 8.675,4.054 " - id="polygon218" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.675,4.054 8.828,4.054 8.809,4.137 8.675,4.137 8.675,4.054 " - id="polygon220" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.033" - height="0.033" - x="8.6999998" - y="4.079" - id="rect222" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.033" - height="0.033" - x="8.6999998" - y="4.079" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.497,4.137 8.64,4.137 8.64,4.179 8.711,4.179 8.711,4.22 8.426,4.22 8.426,4.179 8.497,4.179 8.497,4.137 " - id="polygon226" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.497,4.137 8.64,4.137 8.64,4.179 8.711,4.179 8.711,4.22 8.426,4.22 8.426,4.179 8.497,4.179 8.497,4.137 " - id="polygon228" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.67199999" - height="0.50400001" - x="1.404" - y="3.4649999" - id="rect230" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.67199999" - height="0.50400001" - x="1.404" - y="3.4649999" - id="rect232" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.52700001" - height="0.347" - x="1.476" - y="3.5380001" - id="rect234" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="1.495,3.969 1.841,3.969 1.841,4.048 1.513,4.048 1.495,3.969 " - id="polygon236" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="1.495,3.969 1.841,3.969 1.841,4.048 1.513,4.048 1.495,3.969 " - id="polygon238" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="1.841,3.969 1.985,3.969 1.967,4.048 1.841,4.048 1.841,3.969 " - id="polygon240" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="1.841,3.969 1.985,3.969 1.967,4.048 1.841,4.048 1.841,3.969 " - id="polygon242" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.030999999" - height="0.030999999" - x="1.864" - y="3.993" - id="rect244" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.030999999" - height="0.030999999" - x="1.864" - y="3.993" - id="rect246" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="1.672,4.048 1.807,4.048 1.807,4.087 1.874,4.087 1.874,4.126 1.605,4.126 1.605,4.087 1.672,4.087 1.672,4.048 " - id="polygon248" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="1.672,4.048 1.807,4.048 1.807,4.087 1.874,4.087 1.874,4.126 1.605,4.126 1.605,4.087 1.672,4.087 1.672,4.048 " - id="polygon250" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.64499998" - height="0.484" - x="2.441" - y="3.49" - id="rect252" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.64499998" - height="0.484" - x="2.441" - y="3.49" - id="rect254" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.505" - height="0.333" - x="2.5109999" - y="3.5599999" - id="rect256" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="2.528,3.974 2.86,3.974 2.86,4.049 2.546,4.049 2.528,3.974 " - id="polygon258" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.528,3.974 2.86,3.974 2.86,4.049 2.546,4.049 2.528,3.974 " - id="polygon260" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="2.86,3.974 2.999,3.974 2.981,4.049 2.86,4.049 2.86,3.974 " - id="polygon262" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.86,3.974 2.999,3.974 2.981,4.049 2.86,4.049 2.86,3.974 " - id="polygon264" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.029999999" - height="0.029999999" - x="2.8829999" - y="3.997" - id="rect266" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.029999999" - height="0.029999999" - x="2.8829999" - y="3.997" - id="rect268" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="2.699,4.049 2.828,4.049 2.828,4.087 2.893,4.087 2.893,4.124 2.635,4.124 2.635,4.087 2.699,4.087 2.699,4.049 " - id="polygon270" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.699,4.049 2.828,4.049 2.828,4.087 2.893,4.087 2.893,4.124 2.635,4.124 2.635,4.087 2.699,4.087 2.699,4.049 " - id="polygon272" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.65899998" - height="0.495" - x="0.27900001" - y="3.52" - id="rect274" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.65899998" - height="0.495" - x="0.27900001" - y="3.52" - id="rect276" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.51700002" - height="0.34099999" - x="0.34999999" - y="3.592" - id="rect278" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="0.368,4.015 0.707,4.015 0.707,4.092 0.386,4.092 0.368,4.015 " - id="polygon280" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="0.368,4.015 0.707,4.015 0.707,4.092 0.386,4.092 0.368,4.015 " - id="polygon282" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="0.707,4.015 0.849,4.015 0.831,4.092 0.707,4.092 0.707,4.015 " - id="polygon284" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="0.707,4.015 0.849,4.015 0.831,4.092 0.707,4.092 0.707,4.015 " - id="polygon286" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.030999999" - height="0.030999999" - x="0.73000002" - y="4.0380001" - id="rect288" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.030999999" - height="0.030999999" - x="0.73000002" - y="4.0380001" - id="rect290" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="0.542,4.092 0.674,4.092 0.674,4.13 0.74,4.13 0.74,4.169 0.476,4.169 0.476,4.13 0.542,4.13 0.542,4.092 " - id="polygon292" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="0.542,4.092 0.674,4.092 0.674,4.13 0.74,4.13 0.74,4.169 0.476,4.169 0.476,4.13 0.542,4.13 0.542,4.092 " - id="polygon294" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.65899998" - height="0.49399999" - x="9.6879997" - y="3.527" - id="rect296" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.65899998" - height="0.49399999" - x="9.6879997" - y="3.527" - id="rect298" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.51599997" - height="0.34099999" - x="9.7589998" - y="3.599" - id="rect300" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.777,4.022 10.116,4.022 10.116,4.099 9.795,4.099 9.777,4.022 " - id="polygon302" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.777,4.022 10.116,4.022 10.116,4.099 9.795,4.099 9.777,4.022 " - id="polygon304" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="10.116,4.022 10.258,4.022 10.24,4.099 10.116,4.099 10.116,4.022 " - id="polygon306" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.116,4.022 10.258,4.022 10.24,4.099 10.116,4.099 10.116,4.022 " - id="polygon308" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.030999999" - height="0.030999999" - x="10.139" - y="4.0450001" - id="rect310" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.030999999" - height="0.030999999" - x="10.139" - y="4.0450001" - id="rect312" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.952,4.099 10.083,4.099 10.083,4.137 10.149,4.137 10.149,4.176 9.886,4.176 9.886,4.137 9.952,4.137 9.952,4.099 " - id="polygon314" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.952,4.099 10.083,4.099 10.083,4.137 10.149,4.137 10.149,4.176 9.886,4.176 9.886,4.137 9.952,4.137 9.952,4.099 " - id="polygon316" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.62300003" - height="0.46700001" - x="11.2" - y="3.5650001" - id="rect318" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.62300003" - height="0.46700001" - x="11.2" - y="3.5650001" - id="rect320" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.48800001" - height="0.322" - x="11.268" - y="3.632" - id="rect322" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="11.285,4.032 11.605,4.032 11.605,4.105 11.302,4.105 11.285,4.032 " - id="polygon324" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.285,4.032 11.605,4.032 11.605,4.105 11.302,4.105 11.285,4.032 " - id="polygon326" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="11.605,4.032 11.739,4.032 11.722,4.105 11.605,4.105 11.605,4.032 " - id="polygon328" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.605,4.032 11.739,4.032 11.722,4.105 11.605,4.105 11.605,4.032 " - id="polygon330" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.028999999" - height="0.028999999" - x="11.627" - y="4.0539999" - id="rect332" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.028999999" - height="0.028999999" - x="11.627" - y="4.0539999" - id="rect334" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="11.449,4.105 11.574,4.105 11.574,4.141 11.636,4.141 11.636,4.177 11.387,4.177 11.387,4.141 11.449,4.141 11.449,4.105 " - id="polygon336" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.449,4.105 11.574,4.105 11.574,4.141 11.636,4.141 11.636,4.177 11.387,4.177 11.387,4.141 11.449,4.141 11.449,4.105 " - id="polygon338" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="3.803,3.759 3.763,3.775 3.645,4.072 3.645,4.22 3.704,4.27 4.574,4.27 4.634,4.22 4.634,4.072 4.515,3.775 4.475,3.759 3.803,3.759 " - id="polygon340" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="3.803,3.759 3.763,3.775 3.645,4.072 3.645,4.22 3.704,4.27 4.574,4.27 4.634,4.22 4.634,4.072 4.515,3.775 4.475,3.759 3.803,3.759 " - id="polygon342" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 3.665,4.023 L 3.704,4.039 L 4.574,4.039 L 4.614,4.023" - id="path344" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.574,4.039 L 4.634,4.072" - id="path346" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 3.645,4.072 L 3.704,4.039" - id="path348" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.922,3.446 3.902,3.841 4.376,3.841 4.357,3.446 3.922,3.446 " - id="polygon350" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="3.922,3.446 3.902,3.841 4.376,3.841 4.357,3.446 3.922,3.446 " - id="polygon352" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.843,3.841 3.803,3.957 4.475,3.957 4.436,3.841 3.843,3.841 " - id="polygon354" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="3.843,3.841 3.803,3.957 4.475,3.957 4.436,3.841 3.843,3.841 " - id="polygon356" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="3.8429999" - cy="4.0970001" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse358" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.8429999" - cy="4.0970001" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse360" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.941" - cy="4.0970001" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse362" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.941" - cy="4.0970001" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse364" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.04" - cy="4.0970001" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse366" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.04" - cy="4.0970001" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse368" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.8429999" - cy="4.138" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse370" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.8429999" - cy="4.138" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse372" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.941" - cy="4.138" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse374" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.941" - cy="4.138" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse376" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.04" - cy="4.138" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse378" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.04" - cy="4.138" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse380" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.8429999" - cy="4.1789999" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse382" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.8429999" - cy="4.1789999" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse384" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.941" - cy="4.1789999" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse386" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.941" - cy="4.1789999" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse388" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.04" - cy="4.1789999" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse390" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.04" - cy="4.1789999" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse392" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.8429999" - cy="4.2199998" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse394" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.8429999" - cy="4.2199998" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse396" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.941" - cy="4.2199998" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse398" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.941" - cy="4.2199998" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse400" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.04" - cy="4.2199998" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse402" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.04" - cy="4.2199998" - rx="0.0099999998" - ry="0.0099999998" - id="ellipse404" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.1389999" - cy="4.105" - rx="0.124" - ry="0.039999999" - id="ellipse406" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="4.1389999" - cy="4.105" - rx="0.124" - ry="0.039999999" - id="ellipse408" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.3860002" - cy="4.105" - rx="0.124" - ry="0.039999999" - id="ellipse410" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="4.3860002" - cy="4.105" - rx="0.124" - ry="0.039999999" - id="ellipse412" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="3.741,6.521 3.695,6.54 3.558,6.884 3.558,7.056 3.627,7.114 4.635,7.114 4.704,7.056 4.704,6.884 4.567,6.54 4.521,6.521 3.741,6.521 " - id="polygon414" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="3.741,6.521 3.695,6.54 3.558,6.884 3.558,7.056 3.627,7.114 4.635,7.114 4.704,7.056 4.704,6.884 4.567,6.54 4.521,6.521 3.741,6.521 " - id="polygon416" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 3.581,6.827 L 3.627,6.846 L 4.635,6.846 L 4.681,6.827" - id="path418" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.635,6.846 L 4.704,6.884" - id="path420" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 3.558,6.884 L 3.627,6.846" - id="path422" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.879,6.158 3.856,6.617 4.406,6.617 4.383,6.158 3.879,6.158 " - id="polygon424" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="3.879,6.158 3.856,6.617 4.406,6.617 4.383,6.158 3.879,6.158 " - id="polygon426" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.787,6.617 3.741,6.751 4.521,6.751 4.475,6.617 3.787,6.617 " - id="polygon428" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="3.787,6.617 3.741,6.751 4.521,6.751 4.475,6.617 3.787,6.617 " - id="polygon430" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="3.7869999" - cy="6.9130001" - rx="0.011" - ry="0.011" - id="ellipse432" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.7869999" - cy="6.9130001" - rx="0.011" - ry="0.011" - id="ellipse434" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.902" - cy="6.9130001" - rx="0.011" - ry="0.011" - id="ellipse436" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.902" - cy="6.9130001" - rx="0.011" - ry="0.011" - id="ellipse438" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.0159998" - cy="6.9130001" - rx="0.011" - ry="0.011" - id="ellipse440" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.0159998" - cy="6.9130001" - rx="0.011" - ry="0.011" - id="ellipse442" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.7869999" - cy="6.961" - rx="0.011" - ry="0.011" - id="ellipse444" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.7869999" - cy="6.961" - rx="0.011" - ry="0.011" - id="ellipse446" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.902" - cy="6.961" - rx="0.011" - ry="0.011" - id="ellipse448" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.902" - cy="6.961" - rx="0.011" - ry="0.011" - id="ellipse450" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.0159998" - cy="6.961" - rx="0.011" - ry="0.011" - id="ellipse452" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.0159998" - cy="6.961" - rx="0.011" - ry="0.011" - id="ellipse454" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.7869999" - cy="7.0079999" - rx="0.011" - ry="0.011" - id="ellipse456" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.7869999" - cy="7.0079999" - rx="0.011" - ry="0.011" - id="ellipse458" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.902" - cy="7.0079999" - rx="0.011" - ry="0.011" - id="ellipse460" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.902" - cy="7.0079999" - rx="0.011" - ry="0.011" - id="ellipse462" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.0159998" - cy="7.0079999" - rx="0.011" - ry="0.011" - id="ellipse464" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.0159998" - cy="7.0079999" - rx="0.011" - ry="0.011" - id="ellipse466" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.7869999" - cy="7.0560002" - rx="0.011" - ry="0.011" - id="ellipse468" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.7869999" - cy="7.0560002" - rx="0.011" - ry="0.011" - id="ellipse470" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="3.902" - cy="7.0560002" - rx="0.011" - ry="0.011" - id="ellipse472" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="3.902" - cy="7.0560002" - rx="0.011" - ry="0.011" - id="ellipse474" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.0159998" - cy="7.0560002" - rx="0.011" - ry="0.011" - id="ellipse476" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.0159998" - cy="7.0560002" - rx="0.011" - ry="0.011" - id="ellipse478" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.131" - cy="6.9219999" - rx="0.14300001" - ry="0.046" - id="ellipse480" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="4.131" - cy="6.9219999" - rx="0.14300001" - ry="0.046" - id="ellipse482" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.4180002" - cy="6.9219999" - rx="0.14300001" - ry="0.046" - id="ellipse484" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="4.4180002" - cy="6.9219999" - rx="0.14300001" - ry="0.046" - id="ellipse486" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="8.113,6.536 8.063,6.557 7.91,6.938 7.91,7.128 7.987,7.192 9.103,7.192 9.179,7.128 9.179,6.938 9.027,6.557 8.976,6.536 8.113,6.536 " - id="polygon488" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="8.113,6.536 8.063,6.557 7.91,6.938 7.91,7.128 7.987,7.192 9.103,7.192 9.179,7.128 9.179,6.938 9.027,6.557 8.976,6.536 8.113,6.536 " - id="polygon490" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.936,6.874 L 7.987,6.896 L 9.103,6.896 L 9.154,6.874" - id="path492" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 9.103,6.896 L 9.179,6.938" - id="path494" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.91,6.938 L 7.987,6.896" - id="path496" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="8.266,6.134 8.24,6.642 8.849,6.642 8.824,6.134 8.266,6.134 " - id="polygon498" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="8.266,6.134 8.24,6.642 8.849,6.642 8.824,6.134 8.266,6.134 " - id="polygon500" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="8.164,6.642 8.113,6.79 8.976,6.79 8.925,6.642 8.164,6.642 " - id="polygon502" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="8.164,6.642 8.113,6.79 8.976,6.79 8.925,6.642 8.164,6.642 " - id="polygon504" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="8.1639996" - cy="6.9699998" - rx="0.013" - ry="0.013" - id="ellipse506" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.1639996" - cy="6.9699998" - rx="0.013" - ry="0.013" - id="ellipse508" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.2910004" - cy="6.9699998" - rx="0.013" - ry="0.013" - id="ellipse510" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.2910004" - cy="6.9699998" - rx="0.013" - ry="0.013" - id="ellipse512" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.4180002" - cy="6.9699998" - rx="0.013" - ry="0.013" - id="ellipse514" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.4180002" - cy="6.9699998" - rx="0.013" - ry="0.013" - id="ellipse516" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.1639996" - cy="7.0229998" - rx="0.013" - ry="0.013" - id="ellipse518" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.1639996" - cy="7.0229998" - rx="0.013" - ry="0.013" - id="ellipse520" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.2910004" - cy="7.0229998" - rx="0.013" - ry="0.013" - id="ellipse522" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.2910004" - cy="7.0229998" - rx="0.013" - ry="0.013" - id="ellipse524" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.4180002" - cy="7.0229998" - rx="0.013" - ry="0.013" - id="ellipse526" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.4180002" - cy="7.0229998" - rx="0.013" - ry="0.013" - id="ellipse528" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.1639996" - cy="7.0749998" - rx="0.013" - ry="0.013" - id="ellipse530" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.1639996" - cy="7.0749998" - rx="0.013" - ry="0.013" - id="ellipse532" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.2910004" - cy="7.0749998" - rx="0.013" - ry="0.013" - id="ellipse534" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.2910004" - cy="7.0749998" - rx="0.013" - ry="0.013" - id="ellipse536" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.4180002" - cy="7.0749998" - rx="0.013" - ry="0.013" - id="ellipse538" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.4180002" - cy="7.0749998" - rx="0.013" - ry="0.013" - id="ellipse540" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.1639996" - cy="7.1279998" - rx="0.013" - ry="0.013" - id="ellipse542" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.1639996" - cy="7.1279998" - rx="0.013" - ry="0.013" - id="ellipse544" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.2910004" - cy="7.1279998" - rx="0.013" - ry="0.013" - id="ellipse546" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.2910004" - cy="7.1279998" - rx="0.013" - ry="0.013" - id="ellipse548" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.4180002" - cy="7.1279998" - rx="0.013" - ry="0.013" - id="ellipse550" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="8.4180002" - cy="7.1279998" - rx="0.013" - ry="0.013" - id="ellipse552" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.5450001" - cy="6.98" - rx="0.15899999" - ry="0.050999999" - id="ellipse554" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="8.5450001" - cy="6.98" - rx="0.15899999" - ry="0.050999999" - id="ellipse556" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="8.8620005" - cy="6.98" - rx="0.15899999" - ry="0.050999999" - id="ellipse558" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="8.8620005" - cy="6.98" - rx="0.15899999" - ry="0.050999999" - id="ellipse560" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <text - x="3.9879999" - y="1.613" - id="text562" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: BILLMORE</text> - <text - x="1.056" - y="5.6669998" - id="text564" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">192.168.1.0/24</text> - <text - x="9.4580002" - y="5.6199999" - id="text566" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">192.168.2.0/24</text> - <text - x="4.4000001" - y="5.6009998" - id="text568" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.10</text> - <text - x="4.4390001" - y="5.0139999" - id="text570" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.11</text> - <text - x="8.0030003" - y="5.5640001" - id="text572" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.10</text> - <text - x="7.2420001" - y="4.927" - id="text574" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">.1</text> - <text - x="9.7089996" - y="6.026" - id="text576" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">IP via DHCP</text> - <text - x="3.9430001" - y="7.6009998" - id="text578" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">hplj6</text> - <text - x="8.382" - y="7.6389999" - id="text580" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">qms</text> - <text - x="6.0440001" - y="2.602" - id="text582" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="5.967" - y="3.0020001" - id="text584" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">SLEETH</text> - <text - x="0.69599998" - y="2.615" - id="text586" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Accounting</text> - <text - x="9.6929998" - y="2.566" - id="text588" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Financial Services</text> - <text - x="0.63999999" - y="7.7909999" - id="text590" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">20 Users</text> - <text - x="10.799" - y="7.8039999" - id="text592" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">32 Users</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP-Ok.png b/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP-Ok.png Binary files differdeleted file mode 100644 index 5b14de52f2..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP-Ok.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP-Ok.svg b/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP-Ok.svg deleted file mode 100644 index 78b735c361..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP-Ok.svg +++ /dev/null @@ -1,143 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="14.175cm" - height="7.1500001cm" - viewBox="4.175 2.15 18.35 9.3" - id="svg2"> - <defs - id="defs47" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect4" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect6" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="6.1750002" - height="2.825" - x="12.1" - y="2.2" - id="rect8" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="6.1750002" - height="2.825" - x="12.1" - y="2.2" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="5.4169998" - y="5.5999999" - id="text12" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="14.296" - y="3.0250001" - id="text14" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">master</text> - <text - x="13.676" - y="3.825" - id="text16" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <text - x="13.84" - y="4.625" - id="text18" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Directory A</text> - <line - x1="9" - y1="5.3790002" - x2="10.9" - y2="5.3499999" - stroke="#000000" - stroke-width="0.100" - id="line20" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="8.996,5.129 8.5,5.387 9.004,5.629 8.996,5.129 " - id="polygon22" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <rect - width="6.1750002" - height="2.605" - x="12.125" - y="6.52" - id="rect24" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="6.1750002" - height="2.605" - x="12.125" - y="6.52" - id="rect26" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="14.575" - y="7.25" - id="text28" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">slave</text> - <text - x="13.776" - y="8.0500002" - id="text30" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <text - x="13.941" - y="8.8500004" - id="text32" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Directory B</text> - <line - x1="11.55" - y1="3.618" - x2="10.925" - y2="3.625" - stroke="#000000" - stroke-width="0.100" - id="line34" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="11.553,3.868 12.05,3.613 11.547,3.368 11.553,3.868 " - id="polygon36" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="10.95" - y1="3.575" - x2="10.925" - y2="7.8499999" - stroke="#000000" - stroke-width="0.100" - id="line38" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="11.575" - y1="7.8239999" - x2="10.95" - y2="7.8249998" - stroke="#000000" - stroke-width="0.100" - id="line40" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="11.576,8.074 12.075,7.823 11.574,7.574 11.576,8.074 " - id="polygon42" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <text - x="14.331" - y="5.9749999" - id="text44" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">additive</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP.png b/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP.png Binary files differdeleted file mode 100644 index 0704332e67..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP.svg b/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP.svg deleted file mode 100644 index ad952c2901..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-dual-additive-LDAP.svg +++ /dev/null @@ -1,153 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="13.05cm" - height="7.987cm" - viewBox="4.175 2.9 17.225 10.887" - id="svg2"> - <defs - id="defs51" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect4" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect6" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="5.1750002" - height="1.9" - x="12" - y="2.95" - id="rect8" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.1750002" - height="1.9" - x="12" - y="2.95" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="5.4169998" - y="5.5500002" - id="text12" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="13.846" - y="3.7249999" - id="text14" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">master</text> - <text - x="13.226" - y="4.5250001" - id="text16" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <line - x1="9" - y1="5.3790002" - x2="10.9" - y2="5.3499999" - stroke="#000000" - stroke-width="0.100" - id="line18" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="8.996,5.129 8.5,5.387 9.004,5.629 8.996,5.129 " - id="polygon20" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <rect - width="5.1750002" - height="1.9" - x="11.998" - y="5.9450002" - id="rect22" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.1750002" - height="1.9" - x="11.998" - y="5.9450002" - id="rect24" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="14.15" - y="6.7249999" - id="text26" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">slave</text> - <text - x="13.351" - y="7.5250001" - id="text28" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <line - x1="11.45" - y1="3.9119999" - x2="10.9" - y2="3.925" - stroke="#000000" - stroke-width="0.100" - id="line30" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="11.456,4.162 11.95,3.901 11.444,3.663 11.456,4.162 " - id="polygon32" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="10.925" - y1="3.925" - x2="10.95" - y2="6.9499998" - stroke="#000000" - stroke-width="0.100" - id="line34" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="11.448" - y1="6.9099998" - x2="10.9" - y2="6.9250002" - stroke="#000000" - stroke-width="0.100" - id="line36" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="11.455,7.16 11.948,6.896 11.441,6.66 11.455,7.16 " - id="polygon38" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <text - x="13.659" - y="5.5749998" - id="text40" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">additive</text> - <text - x="8.6809998" - y="8.75" - id="text42" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">The LDAP backend consists of a</text> - <text - x="7.9250002" - y="9.3500004" - id="text44" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">master and a slave for the same database.</text> - <text - x="8.7819996" - y="9.9499998" - id="text46" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">This is a broken implementation</text> - <text - x="9.0249996" - y="10.55" - id="text48" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">- accounts will be duplicated.</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-fail-overLDAP.png b/docs/htmldocs/Samba3-ByExample/images/ch7-fail-overLDAP.png Binary files differdeleted file mode 100644 index 2a6d8dc915..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-fail-overLDAP.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-fail-overLDAP.svg b/docs/htmldocs/Samba3-ByExample/images/ch7-fail-overLDAP.svg deleted file mode 100644 index 58af69ecab..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-fail-overLDAP.svg +++ /dev/null @@ -1,120 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="13.098cm" - height="4.9000001cm" - viewBox="4.175 2.9 17.273 7.8" - id="svg2"> - <defs - id="defs41" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect4" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect6" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="5.1750002" - height="1.9" - x="12" - y="2.95" - id="rect8" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.1750002" - height="1.9" - x="12" - y="2.95" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="5.4169998" - y="5.5500002" - id="text12" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="13.846" - y="3.7249999" - id="text14" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">master</text> - <text - x="13.226" - y="4.5250001" - id="text16" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <line - x1="8.9820004" - y1="4.875" - x2="11.518" - y2="3.813" - stroke="#000000" - stroke-width="0.100" - id="line18" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="8.886,4.644 8.521,5.068 9.079,5.106 8.886,4.644 " - id="polygon20" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="11.614,4.043 11.979,3.619 11.421,3.582 11.614,4.043 " - id="polygon22" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <rect - width="5.1750002" - height="1.9" - x="12.047" - y="5.7449999" - id="rect24" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.1750002" - height="1.9" - x="12.047" - y="5.7449999" - id="rect26" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="14.1" - y="6.5500002" - id="text28" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">slave</text> - <text - x="13.301" - y="7.3499999" - id="text30" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <line - x1="8.993" - y1="5.8610001" - x2="11.43" - y2="6.7340002" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.10,0.10" - id="line32" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <polygon - points="9.077,5.625 8.522,5.692 8.908,6.096 9.077,5.625 " - id="polygon34" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="11.345,6.97 11.9,6.903 11.514,6.499 11.345,6.97 " - id="polygon36" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <text - x="10.245" - y="6" - id="text38" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">fail-over</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-singleLDAP.png b/docs/htmldocs/Samba3-ByExample/images/ch7-singleLDAP.png Binary files differdeleted file mode 100644 index 5bb21c0f90..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-singleLDAP.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/ch7-singleLDAP.svg b/docs/htmldocs/Samba3-ByExample/images/ch7-singleLDAP.svg deleted file mode 100644 index 7155fd1ffe..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch7-singleLDAP.svg +++ /dev/null @@ -1,73 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="12.75cm" - height="2.075cm" - viewBox="4.175 4.425 16.925 6.5" - id="svg2"> - <defs - id="defs25" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect4" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="4.2249999" - height="1.825" - x="4.2249999" - y="4.4749999" - id="rect6" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="5.1750002" - height="1.9" - x="11.7" - y="4.4749999" - id="rect8" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.1750002" - height="1.9" - x="11.7" - y="4.4749999" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="5.4169998" - y="5.5500002" - id="text12" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="13.621" - y="5.25" - id="text14" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">master</text> - <text - x="13.001" - y="6.0500002" - id="text16" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP server</text> - <line - x1="9" - y1="5.3899999" - x2="11.05" - y2="5.3979998" - stroke="#000000" - stroke-width="0.100" - id="line18" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="9.001,5.14 8.5,5.388 8.999,5.64 9.001,5.14 " - id="polygon20" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="11.049,5.648 11.55,5.4 11.051,5.148 11.049,5.648 " - id="polygon22" - style="fill:#000000;stroke:none;stroke-width:0.1" /> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/ch8-migration.png b/docs/htmldocs/Samba3-ByExample/images/ch8-migration.png Binary files differdeleted file mode 100644 index 3bafc7c59c..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch8-migration.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/ch8-migration.svg b/docs/htmldocs/Samba3-ByExample/images/ch8-migration.svg deleted file mode 100644 index 8656885b92..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/ch8-migration.svg +++ /dev/null @@ -1,767 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="16.389cm" - height="11.635cm" - viewBox="3.227 3.533 19.617 15.168" - id="svg2"> - <defs - id="defs221" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="4.746,10.964 4.746,12.225 18.667,12.225 18.667,11.050 " - id="polyline4" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.0599999" - height="4.8070002" - x="3.648" - y="5.744" - id="rect6" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="2.0599999" - height="4.8070002" - x="3.648" - y="5.744" - id="rect8" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <rect - width="1.648" - height="0.54900002" - x="3.8540001" - y="6.033" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.648" - height="0.54900002" - x="3.8540001" - y="6.5819998" - id="rect12" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.648" - height="0.54900002" - x="3.8540001" - y="7.132" - id="rect14" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.648" - height="0.54900002" - x="3.8540001" - y="7.6810002" - id="rect16" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.03" - height="0.33000001" - x="3.8540001" - y="8.3400002" - id="rect18" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="5.3990002" - cy="8.3950005" - rx="0.071999997" - ry="0.071999997" - id="ellipse20" - style="fill:#00ff00;stroke:none" /> - <ellipse - cx="5.3990002" - cy="8.3950005" - rx="0.071999997" - ry="0.071999997" - id="ellipse22" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="5.3990002" - cy="8.6149998" - rx="0.071999997" - ry="0.071999997" - id="ellipse24" - style="fill:#ffff00;stroke:none" /> - <ellipse - cx="5.3990002" - cy="8.6149998" - rx="0.071999997" - ry="0.071999997" - id="ellipse26" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.24699999" - height="0.22" - x="4.987" - y="8.4499998" - id="rect28" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.24699999" - height="0.22" - x="4.987" - y="8.4499998" - id="rect30" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 3.991,9.109 L 3.991,10.311" - id="path32" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 4.334,9.109 L 4.334,10.311" - id="path34" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 4.678,9.109 L 4.678,10.311" - id="path36" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 5.021,9.109 L 5.021,10.311" - id="path38" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 5.364,9.109 L 5.364,10.311" - id="path40" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 5.708,9.109 L 5.708,10.311" - id="path42" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="3.236,10.964 3.648,10.14 3.648,10.552 5.708,10.552 5.708,10.14 6.257,10.964 3.236,10.964 " - id="polygon44" - style="fill:#999999;stroke:none;stroke-width:0.01" /> - <polygon - points="3.236,10.964 3.648,10.14 3.648,10.552 5.708,10.552 5.708,10.14 6.257,10.964 3.236,10.964 " - id="polygon46" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.8" - height="5.4000001" - x="17.767" - y="5.6500001" - id="rect48" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.8" - height="5.4000001" - x="17.767" - y="5.6500001" - id="rect50" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.8" - height="5.4000001" - x="17.767" - y="5.6500001" - id="rect52" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.4400001" - height="2.1600001" - x="17.947001" - y="5.8299999" - id="rect54" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.4400001" - height="2.1600001" - x="17.947001" - y="5.8299999" - id="rect56" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.4400001" - height="2.1600001" - x="17.947001" - y="5.8299999" - id="rect58" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="17.947001" - y1="6.1900001" - x2="19.386999" - y2="6.1900001" - stroke="#000000" - stroke-width="0.010" - id="line60" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.386999" - y1="6.5500002" - x2="17.947001" - y2="6.5500002" - stroke="#000000" - stroke-width="0.010" - id="line62" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.947001" - y1="6.9099998" - x2="19.386999" - y2="6.9099998" - stroke="#000000" - stroke-width="0.010" - id="line64" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.947001" - y1="7.27" - x2="19.386999" - y2="7.27" - stroke="#000000" - stroke-width="0.010" - id="line66" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.386999" - y1="7.6300001" - x2="17.947001" - y2="7.6300001" - stroke="#000000" - stroke-width="0.010" - id="line68" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.99000001" - height="0.54000002" - x="17.947001" - y="8.1700001" - id="rect70" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.99000001" - height="0.54000002" - x="17.947001" - y="8.1700001" - id="rect72" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.99000001" - height="0.54000002" - x="17.947001" - y="8.1700001" - id="rect74" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="17.767" - y1="9.0699997" - x2="19.566999" - y2="9.0699997" - stroke="#000000" - stroke-width="0.010" - id="line76" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.090000004" - height="0.090000004" - x="18.577" - y="9.25" - id="rect78" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.090000004" - height="0.090000004" - x="18.577" - y="9.25" - id="rect80" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.090000004" - height="0.090000004" - x="18.577" - y="9.25" - id="rect82" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.090000004" - height="0.090000004" - x="18.937" - y="9.25" - id="rect84" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.090000004" - height="0.090000004" - x="18.937" - y="9.25" - id="rect86" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.090000004" - height="0.090000004" - x="18.937" - y="9.25" - id="rect88" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.090000004" - height="0.090000004" - x="19.297001" - y="9.25" - id="rect90" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.090000004" - height="0.090000004" - x="19.297001" - y="9.25" - id="rect92" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.090000004" - height="0.090000004" - x="19.297001" - y="9.25" - id="rect94" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.18000001" - height="0.18000001" - x="19.207001" - y="8.71" - id="rect96" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.18000001" - height="0.18000001" - x="19.207001" - y="8.71" - id="rect98" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.18000001" - height="0.18000001" - x="19.207001" - y="8.71" - id="rect100" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="17.947001" - y1="8.4399996" - x2="18.937" - y2="8.4399996" - stroke="#000000" - stroke-width="0.010" - id="line102" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.27000001" - height="0.27000001" - x="17.947001" - y="9.1599998" - id="rect104" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.27000001" - height="0.27000001" - x="17.947001" - y="9.1599998" - id="rect106" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.27000001" - height="0.27000001" - x="17.947001" - y="9.1599998" - id="rect108" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.26" - height="0.090000004" - x="18.037001" - y="7.7199998" - id="rect110" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.26" - height="0.090000004" - x="18.037001" - y="7.7199998" - id="rect112" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.26" - height="0.090000004" - x="18.037001" - y="7.7199998" - id="rect114" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="18.037001" - y1="8.2600002" - x2="18.847" - y2="8.2600002" - stroke="#000000" - stroke-width="0.010" - id="line116" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="18.847" - y1="8.3500004" - x2="18.757" - y2="8.3500004" - stroke="#000000" - stroke-width="0.010" - id="line118" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="18.037001" - y1="8.3500004" - x2="18.127001" - y2="8.3500004" - stroke="#000000" - stroke-width="0.010" - id="line120" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.44999999" - height="0.090000004" - x="18.216999" - y="8.2600002" - id="rect122" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.44999999" - height="0.090000004" - x="18.216999" - y="8.2600002" - id="rect124" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.44999999" - height="0.090000004" - x="18.216999" - y="8.2600002" - id="rect126" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="18.037001" - y1="7.9000001" - x2="18.127001" - y2="7.9000001" - stroke="#000000" - stroke-width="0.010" - id="line128" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="18.216999" - y1="7.9000001" - x2="18.306999" - y2="7.9000001" - stroke="#000000" - stroke-width="0.010" - id="line130" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.117001" - y1="7.9000001" - x2="19.297001" - y2="7.9000001" - stroke="#000000" - stroke-width="0.010" - id="line132" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="10.96" - x2="19.476999" - y2="10.96" - stroke="#000000" - stroke-width="0.010" - id="line134" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="10.87" - x2="17.857" - y2="10.87" - stroke="#000000" - stroke-width="0.010" - id="line136" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="10.78" - x2="19.476999" - y2="10.78" - stroke="#000000" - stroke-width="0.010" - id="line138" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="10.69" - x2="17.857" - y2="10.69" - stroke="#000000" - stroke-width="0.010" - id="line140" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="10.6" - x2="19.476999" - y2="10.6" - stroke="#000000" - stroke-width="0.010" - id="line142" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="10.51" - x2="17.857" - y2="10.51" - stroke="#000000" - stroke-width="0.010" - id="line144" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="10.42" - x2="19.476999" - y2="10.42" - stroke="#000000" - stroke-width="0.010" - id="line146" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="10.33" - x2="17.857" - y2="10.33" - stroke="#000000" - stroke-width="0.010" - id="line148" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="10.24" - x2="19.476999" - y2="10.24" - stroke="#000000" - stroke-width="0.010" - id="line150" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="10.15" - x2="17.857" - y2="10.15" - stroke="#000000" - stroke-width="0.010" - id="line152" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="10.06" - x2="19.476999" - y2="10.06" - stroke="#000000" - stroke-width="0.010" - id="line154" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="9.9700003" - x2="17.857" - y2="9.9700003" - stroke="#000000" - stroke-width="0.010" - id="line156" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.857" - y1="9.8800001" - x2="19.476999" - y2="9.8800001" - stroke="#000000" - stroke-width="0.010" - id="line158" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="19.476999" - y1="9.79" - x2="17.857" - y2="9.79" - stroke="#000000" - stroke-width="0.010" - id="line160" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="2.7190001" - height="2.3989999" - x="6.5500002" - y="6.1869998" - id="rect162" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="7.9089999" - cy="8.585" - rx="1.359" - ry="0.40000001" - id="ellipse164" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="7.9089999" - cy="6.1869998" - rx="1.359" - ry="0.40000001" - id="ellipse166" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="7.9089999" - cy="6.1869998" - rx="1.359" - ry="0.40000001" - id="ellipse168" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 9.269,6.187 L 9.269,8.585 C 9.269,8.806 8.66,8.985 7.909,8.985 C 7.159,8.985 6.55,8.806 6.55,8.585 L 6.55,6.187" - id="path170" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.7190001" - height="2.3989999" - x="14.112" - y="6.1999998" - id="rect172" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="15.472" - cy="8.599" - rx="1.359" - ry="0.40000001" - id="ellipse174" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="15.472" - cy="6.1999998" - rx="1.359" - ry="0.40000001" - id="ellipse176" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="15.472" - cy="6.1999998" - rx="1.359" - ry="0.40000001" - id="ellipse178" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 16.831,6.2 L 16.831,8.599 C 16.831,8.82 16.223,8.999 15.472,8.999 C 14.721,8.999 14.112,8.82 14.112,8.599 L 14.112,6.2" - id="path180" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="5.7249999" - y1="7.3499999" - x2="6.5250001" - y2="7.3499999" - stroke="#000000" - stroke-width="0.100" - id="line182" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.825001" - y1="7.4000001" - x2="17.75" - y2="7.375" - stroke="#000000" - stroke-width="0.100" - id="line184" - style="stroke:#000000;stroke-width:0.1" /> - <path - d="M 8.65,9.2 C 9.0031969,10.514524 10.174957,11.443114 11.535409,11.486614 C 12.89586,11.530113 14.124549,10.678275 14.561,9.389" - id="path186" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="14.713,9.830 14.597,9.283 14.229,9.704 " - id="polyline188" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="7.02" - y="4.9749999" - id="text190" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">NT4 Registry</text> - <text - x="7.691" - y="5.5749998" - id="text192" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">SAM</text> - <text - x="13.871" - y="4.9250002" - id="text194" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba SAM</text> - <text - x="13.221" - y="5.5250001" - id="text196" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(ldapsam or tdbsam)</text> - <text - x="4.2259998" - y="4.0250001" - id="text198" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">NT4</text> - <text - x="4.1719999" - y="4.8249998" - id="text200" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PDC</text> - <text - x="17.992001" - y="4" - id="text202" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="18.407" - y="4.8000002" - id="text204" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DC</text> - <text - x="5.8540001" - y="13.625" - id="text206" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">net rpc vampire</text> - <text - x="5.5139999" - y="14.325" - id="text208" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Migration migrates:</text> - <text - x="14.664" - y="13.375" - id="text210" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">User Accounts</text> - <text - x="14.557" - y="14.075" - id="text212" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain Groups</text> - <text - x="14.311" - y="14.775" - id="text214" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Machine Accounts</text> - <line - x1="10.725" - y1="13.8" - x2="12.25" - y2="13.818" - stroke="#000000" - stroke-width="0.100" - id="line216" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="12.247,14.068 12.75,13.824 12.253,13.568 12.247,14.068 " - id="polygon218" - style="fill:#000000;stroke:none;stroke-width:0.1" /> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap4-net.png b/docs/htmldocs/Samba3-ByExample/images/chap4-net.png Binary files differdeleted file mode 100644 index 53e02bd506..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap4-net.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap4-net.svg b/docs/htmldocs/Samba3-ByExample/images/chap4-net.svg deleted file mode 100644 index 88d16bd90d..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap4-net.svg +++ /dev/null @@ -1,2148 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="21.725cm" - height="12.513cm" - viewBox="-0.013 1.735 21.712 14.247" - id="svg2"> - <defs - id="defs719" /> - <rect - width="7.8249998" - height="8.085" - x="0.31200001" - y="3.6170001" - id="rect4" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 0.312,3.617 C 0.14631458,3.617 0.012,3.7513146 0.012,3.917" - id="path6" - style="fill:#ededed;stroke:none" /> - <path - d="M 8.437,3.917 C 8.437,3.7513146 8.3026854,3.617 8.137,3.617" - id="path8" - style="fill:#ededed;stroke:none" /> - <rect - width="8.4250002" - height="7.4850001" - x="0.012" - y="3.9170001" - id="rect10" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 0.012,11.402 C 0.012,11.567685 0.14631458,11.702 0.312,11.702" - id="path12" - style="fill:#ededed;stroke:none" /> - <path - d="M 8.137,11.702 C 8.3026854,11.702 8.437,11.567685 8.437,11.402" - id="path14" - style="fill:#ededed;stroke:none" /> - <line - x1="0.31200001" - y1="3.6170001" - x2="8.1370001" - y2="3.6170001" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.31200001" - y1="11.702" - x2="8.1370001" - y2="11.702" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.312,3.617 C 0.14631458,3.617 0.012,3.7513146 0.012,3.917" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 8.437,3.917 C 8.437,3.7513146 8.3026854,3.617 8.137,3.617" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.012" - y1="3.9170001" - x2="0.012" - y2="11.402" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="8.4370003" - y1="3.9170001" - x2="8.4370003" - y2="11.402" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.012,11.402 C 0.012,11.567685 0.14631458,11.702 0.312,11.702" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 8.137,11.702 C 8.3026854,11.702 8.437,11.567685 8.437,11.402" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="8.3249998" - height="8.1350002" - x="13.062" - y="3.5420001" - id="rect32" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 13.062,3.542 C 12.896315,3.542 12.762,3.6763146 12.762,3.842" - id="path34" - style="fill:#ededed;stroke:none" /> - <path - d="M 21.688,3.842 C 21.688,3.7622615 21.656256,3.6858034 21.599779,3.6295136 C 21.543301,3.5732239 21.466738,3.5417342 21.387,3.542" - id="path36" - style="fill:#ededed;stroke:none" /> - <rect - width="8.9250002" - height="7.5349998" - x="12.762" - y="3.842" - id="rect38" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 12.762,11.377 C 12.762,11.542685 12.896315,11.677 13.062,11.677" - id="path40" - style="fill:#ededed;stroke:none" /> - <path - d="M 21.387,11.677 C 21.466738,11.677266 21.543301,11.645776 21.599779,11.589486 C 21.656256,11.533197 21.688,11.456739 21.688,11.377" - id="path42" - style="fill:#ededed;stroke:none" /> - <line - x1="13.062" - y1="3.5420001" - x2="21.386999" - y2="3.5420001" - stroke="#070707" - stroke-width="0.050" - id="line44" - style="stroke:#070707;stroke-width:0.05" /> - <line - x1="13.062" - y1="11.677" - x2="21.386999" - y2="11.677" - stroke="#070707" - stroke-width="0.050" - id="line46" - style="stroke:#070707;stroke-width:0.05" /> - <path - d="M 13.062,3.542 C 12.896315,3.542 12.762,3.6763146 12.762,3.842" - id="path48" - style="fill:none;stroke:#070707;stroke-width:0.05" /> - <path - d="M 21.688,3.842 C 21.688,3.7622615 21.656256,3.6858034 21.599779,3.6295136 C 21.543301,3.5732239 21.466738,3.5417342 21.387,3.542" - id="path50" - style="fill:none;stroke:#070707;stroke-width:0.05" /> - <line - x1="12.762" - y1="3.842" - x2="12.762" - y2="11.377" - stroke="#070707" - stroke-width="0.050" - id="line52" - style="stroke:#070707;stroke-width:0.05" /> - <line - x1="21.688" - y1="3.842" - x2="21.688" - y2="11.377" - stroke="#070707" - stroke-width="0.050" - id="line54" - style="stroke:#070707;stroke-width:0.05" /> - <path - d="M 12.762,11.377 C 12.762,11.542685 12.896315,11.677 13.062,11.677" - id="path56" - style="fill:none;stroke:#070707;stroke-width:0.05" /> - <path - d="M 21.387,11.677 C 21.466738,11.677266 21.543301,11.645776 21.599779,11.589486 C 21.656256,11.533197 21.688,11.456739 21.688,11.377" - id="path58" - style="fill:none;stroke:#070707;stroke-width:0.05" /> - <rect - width="1.077" - height="2.5120001" - x="10.001" - y="5.0110002" - id="rect60" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.077" - height="2.5120001" - x="10.001" - y="5.0110002" - id="rect62" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <rect - width="0.861" - height="0.287" - x="10.108" - y="5.1620002" - id="rect64" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.861" - height="0.287" - x="10.108" - y="5.4489999" - id="rect66" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.861" - height="0.287" - x="10.108" - y="5.7360001" - id="rect68" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.861" - height="0.287" - x="10.108" - y="6.0229998" - id="rect70" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.53799999" - height="0.17200001" - x="10.108" - y="6.368" - id="rect72" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="10.916" - cy="6.3969998" - rx="0.037999999" - ry="0.037999999" - id="ellipse74" - style="fill:#00ff00;stroke:none" /> - <ellipse - cx="10.916" - cy="6.3969998" - rx="0.037999999" - ry="0.037999999" - id="ellipse76" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="10.916" - cy="6.5110002" - rx="0.037999999" - ry="0.037999999" - id="ellipse78" - style="fill:#ffff00;stroke:none" /> - <ellipse - cx="10.916" - cy="6.5110002" - rx="0.037999999" - ry="0.037999999" - id="ellipse80" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.12899999" - height="0.115" - x="10.701" - y="6.4250002" - id="rect82" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.12899999" - height="0.115" - x="10.701" - y="6.4250002" - id="rect84" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.18,6.77 L 10.18,7.398" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.36,6.77 L 10.36,7.398" - id="path88" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.539,6.77 L 10.539,7.398" - id="path90" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.719,6.77 L 10.719,7.398" - id="path92" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.898,6.77 L 10.898,7.398" - id="path94" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 11.077,6.77 L 11.077,7.398" - id="path96" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="9.786,7.739 10.001,7.308 10.001,7.523 11.077,7.523 11.077,7.308 11.364,7.739 9.786,7.739 " - id="polygon98" - style="fill:#999999;stroke:none;stroke-width:0.01" /> - <polygon - points="9.786,7.739 10.001,7.308 10.001,7.523 11.077,7.523 11.077,7.308 11.364,7.739 9.786,7.739 " - id="polygon100" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="1.423" - y1="7.1059999" - x2="10.025" - y2="7.0999999" - stroke="#000000" - stroke-width="0.100" - id="line102" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="2.687" - y1="7.105" - x2="2.688" - y2="8.1049995" - stroke="#000000" - stroke-width="0.100" - id="line104" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="2.6919999" - y1="7.105" - x2="2.691" - y2="6.0669999" - stroke="#000000" - stroke-width="0.100" - id="line106" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.1170001" - y1="7.1030002" - x2="5.1170001" - y2="8.1029997" - stroke="#000000" - stroke-width="0.100" - id="line108" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.1300001" - y1="7.1030002" - x2="5.1300001" - y2="6.119" - stroke="#000000" - stroke-width="0.100" - id="line110" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="7.572" - y1="7.1020002" - x2="7.572" - y2="8.0959997" - stroke="#000000" - stroke-width="0.100" - id="line112" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="7.566" - y1="7.1020002" - x2="7.5650001" - y2="6.2249999" - stroke="#000000" - stroke-width="0.100" - id="line114" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="11.05" - y1="7.0749998" - x2="20.325001" - y2="7.0500002" - stroke="#000000" - stroke-width="0.100" - id="line116" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="13.747" - y1="7.0679998" - x2="13.75" - y2="8.125" - stroke="#000000" - stroke-width="0.100" - id="line118" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="13.74" - y1="7.0679998" - x2="13.737" - y2="6.0840001" - stroke="#000000" - stroke-width="0.100" - id="line120" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.297001" - y1="7.0609999" - x2="16.299999" - y2="8.0749998" - stroke="#000000" - stroke-width="0.100" - id="line122" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.306999" - y1="7.0609999" - x2="16.305" - y2="6.1690001" - stroke="#000000" - stroke-width="0.100" - id="line124" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.896999" - y1="7.0539999" - x2="18.9" - y2="8.0249996" - stroke="#000000" - stroke-width="0.100" - id="line126" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.907" - y1="7.0539999" - x2="18.905001" - y2="6.0939999" - stroke="#000000" - stroke-width="0.100" - id="line128" - style="stroke:#000000;stroke-width:0.1" /> - <path - d="M 9.39,12.232 C 8.983,12.222 8.194,12.424 8.305,12.856 C 8.416,13.288 8.946,13.384 9.168,13.259 C 9.39,13.134 8.823,13.864 9.907,14.056 C 10.992,14.247 11.547,13.94 11.386,13.72 C 11.226,13.499 12.335,14.238 12.853,13.816 C 13.371,13.393 12.323,12.99 12.545,13.048 C 12.767,13.105 13.445,13.029 13.223,12.309 C 13.001,11.589 11.004,12.145 11.226,12.04 C 11.448,11.934 10.893,11.406 10.203,11.512 C 9.513,11.618 9.464,11.809 9.39,12.231 L 9.39,12.232" - id="path130" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 9.39,12.232 C 8.983,12.222 8.194,12.424 8.305,12.856 C 8.416,13.288 8.946,13.384 9.168,13.259 C 9.39,13.134 8.823,13.864 9.907,14.056 C 10.992,14.247 11.547,13.94 11.386,13.72 C 11.226,13.499 12.335,14.238 12.853,13.816 C 13.371,13.393 12.323,12.99 12.545,13.048 C 12.767,13.105 13.445,13.029 13.223,12.309 C 13.001,11.589 11.004,12.145 11.226,12.04 C 11.448,11.934 10.893,11.406 10.203,11.512 C 9.513,11.618 9.464,11.809 9.39,12.231 L 9.39,12.232" - id="path132" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="10.353" - y="12.927" - id="text134" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <line - x1="10.562" - y1="11.552" - x2="10.575" - y2="7.7389998" - stroke="#000000" - stroke-width="0.100" - id="line136" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.085" - height="0.81300002" - x="2.1489999" - y="5" - id="rect138" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="2.1489999" - y="5" - id="rect140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="2.266" - y="5.118" - id="rect142" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="2.296,5.814 2.854,5.814 2.854,5.94 2.325,5.94 2.296,5.814 " - id="polygon144" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.296,5.814 2.854,5.814 2.854,5.94 2.325,5.94 2.296,5.814 " - id="polygon146" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="2.854,5.814 3.087,5.814 3.057,5.94 2.854,5.94 2.854,5.814 " - id="polygon148" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.854,5.814 3.087,5.814 3.057,5.94 2.854,5.94 2.854,5.814 " - id="polygon150" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="2.892" - y="5.8520002" - id="rect152" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="2.892" - y="5.8520002" - id="rect154" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="2.583,5.94 2.8,5.94 2.8,6.003 2.908,6.003 2.908,6.067 2.474,6.067 2.474,6.003 2.583,6.003 2.583,5.94 " - id="polygon156" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.583,5.94 2.8,5.94 2.8,6.003 2.908,6.003 2.908,6.067 2.474,6.067 2.474,6.003 2.583,6.003 2.583,5.94 " - id="polygon158" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="18.337" - y="8.0270004" - id="rect160" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="18.337" - y="8.0270004" - id="rect162" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="18.455" - y="8.1450005" - id="rect164" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.484,8.841 19.042,8.841 19.042,8.967 18.514,8.967 18.484,8.841 " - id="polygon166" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.484,8.841 19.042,8.841 19.042,8.967 18.514,8.967 18.484,8.841 " - id="polygon168" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.042,8.841 19.275,8.841 19.246,8.967 19.042,8.967 19.042,8.841 " - id="polygon170" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.042,8.841 19.275,8.841 19.246,8.967 19.042,8.967 19.042,8.841 " - id="polygon172" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="19.08" - y="8.8789997" - id="rect174" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="19.08" - y="8.8789997" - id="rect176" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.771,8.967 18.988,8.967 18.988,9.031 19.097,9.031 19.097,9.094 18.663,9.094 18.663,9.031 18.771,9.031 18.771,8.967 " - id="polygon178" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.771,8.967 18.988,8.967 18.988,9.031 19.097,9.031 19.097,9.094 18.663,9.094 18.663,9.031 18.771,9.031 18.771,8.967 " - id="polygon180" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="15.737" - y="8.0530005" - id="rect182" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="15.737" - y="8.0530005" - id="rect184" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="15.855" - y="8.1700001" - id="rect186" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="15.884,8.866 16.442,8.866 16.442,8.992 15.914,8.992 15.884,8.866 " - id="polygon188" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.884,8.866 16.442,8.866 16.442,8.992 15.914,8.992 15.884,8.866 " - id="polygon190" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.442,8.866 16.675,8.866 16.646,8.992 16.442,8.992 16.442,8.866 " - id="polygon192" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.442,8.866 16.675,8.866 16.646,8.992 16.442,8.992 16.442,8.866 " - id="polygon194" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="16.48" - y="8.9040003" - id="rect196" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="16.48" - y="8.9040003" - id="rect198" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.171,8.992 16.388,8.992 16.388,9.056 16.497,9.056 16.497,9.119 16.063,9.119 16.063,9.056 16.171,9.056 16.171,8.992 " - id="polygon200" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.171,8.992 16.388,8.992 16.388,9.056 16.497,9.056 16.497,9.119 16.063,9.119 16.063,9.056 16.171,9.056 16.171,8.992 " - id="polygon202" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="18.362" - y="5.027" - id="rect204" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="18.362" - y="5.027" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="18.48" - y="5.145" - id="rect208" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.509,5.841 19.067,5.841 19.067,5.967 18.539,5.967 18.509,5.841 " - id="polygon210" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.509,5.841 19.067,5.841 19.067,5.967 18.539,5.967 18.509,5.841 " - id="polygon212" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.067,5.841 19.3,5.841 19.271,5.967 19.067,5.967 19.067,5.841 " - id="polygon214" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.067,5.841 19.3,5.841 19.271,5.967 19.067,5.967 19.067,5.841 " - id="polygon216" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="19.105" - y="5.8790002" - id="rect218" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="19.105" - y="5.8790002" - id="rect220" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.796,5.967 19.013,5.967 19.013,6.031 19.122,6.031 19.122,6.094 18.688,6.094 18.688,6.031 18.796,6.031 18.796,5.967 " - id="polygon222" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.796,5.967 19.013,5.967 19.013,6.031 19.122,6.031 19.122,6.094 18.688,6.094 18.688,6.031 18.796,6.031 18.796,5.967 " - id="polygon224" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="15.762" - y="5.1030002" - id="rect226" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="15.762" - y="5.1030002" - id="rect228" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="15.88" - y="5.2199998" - id="rect230" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="15.909,5.916 16.467,5.916 16.467,6.042 15.939,6.042 15.909,5.916 " - id="polygon232" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.909,5.916 16.467,5.916 16.467,6.042 15.939,6.042 15.909,5.916 " - id="polygon234" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.467,5.916 16.7,5.916 16.671,6.042 16.467,6.042 16.467,5.916 " - id="polygon236" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.467,5.916 16.7,5.916 16.671,6.042 16.467,6.042 16.467,5.916 " - id="polygon238" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="16.504999" - y="5.954" - id="rect240" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="16.504999" - y="5.954" - id="rect242" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.196,6.042 16.413,6.042 16.413,6.106 16.522,6.106 16.522,6.169 16.088,6.169 16.088,6.106 16.196,6.106 16.196,6.042 " - id="polygon244" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.196,6.042 16.413,6.042 16.413,6.106 16.522,6.106 16.522,6.169 16.088,6.169 16.088,6.106 16.196,6.106 16.196,6.042 " - id="polygon246" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="4.5869999" - y="5.053" - id="rect248" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="4.5869999" - y="5.053" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="4.7049999" - y="5.1700001" - id="rect252" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="4.734,5.866 5.292,5.866 5.292,5.992 4.764,5.992 4.734,5.866 " - id="polygon254" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.734,5.866 5.292,5.866 5.292,5.992 4.764,5.992 4.734,5.866 " - id="polygon256" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="5.292,5.866 5.525,5.866 5.496,5.992 5.292,5.992 5.292,5.866 " - id="polygon258" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.292,5.866 5.525,5.866 5.496,5.992 5.292,5.992 5.292,5.866 " - id="polygon260" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="5.3299999" - y="5.9039998" - id="rect262" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="5.3299999" - y="5.9039998" - id="rect264" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="5.021,5.992 5.238,5.992 5.238,6.056 5.347,6.056 5.347,6.119 4.913,6.119 4.913,6.056 5.021,6.056 5.021,5.992 " - id="polygon266" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.021,5.992 5.238,5.992 5.238,6.056 5.347,6.056 5.347,6.119 4.913,6.119 4.913,6.056 5.021,6.056 5.021,5.992 " - id="polygon268" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="4.5619998" - y="8.0530005" - id="rect270" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="4.5619998" - y="8.0530005" - id="rect272" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="4.6799998" - y="8.1700001" - id="rect274" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="4.709,8.866 5.267,8.866 5.267,8.992 4.739,8.992 4.709,8.866 " - id="polygon276" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.709,8.866 5.267,8.866 5.267,8.992 4.739,8.992 4.709,8.866 " - id="polygon278" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="5.267,8.866 5.5,8.866 5.471,8.992 5.267,8.992 5.267,8.866 " - id="polygon280" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.267,8.866 5.5,8.866 5.471,8.992 5.267,8.992 5.267,8.866 " - id="polygon282" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="5.3049998" - y="8.9040003" - id="rect284" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="5.3049998" - y="8.9040003" - id="rect286" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="4.996,8.992 5.213,8.992 5.213,9.056 5.322,9.056 5.322,9.119 4.888,9.119 4.888,9.056 4.996,9.056 4.996,8.992 " - id="polygon288" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.996,8.992 5.213,8.992 5.213,9.056 5.322,9.056 5.322,9.119 4.888,9.119 4.888,9.056 4.996,9.056 4.996,8.992 " - id="polygon290" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="2.1619999" - y="8.1020002" - id="rect292" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="2.1619999" - y="8.1020002" - id="rect294" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="2.28" - y="8.2200003" - id="rect296" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="2.309,8.916 2.867,8.916 2.867,9.042 2.339,9.042 2.309,8.916 " - id="polygon298" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.309,8.916 2.867,8.916 2.867,9.042 2.339,9.042 2.309,8.916 " - id="polygon300" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="2.867,8.916 3.1,8.916 3.071,9.042 2.867,9.042 2.867,8.916 " - id="polygon302" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.867,8.916 3.1,8.916 3.071,9.042 2.867,9.042 2.867,8.916 " - id="polygon304" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="2.905" - y="8.9540005" - id="rect306" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="2.905" - y="8.9540005" - id="rect308" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="2.596,9.042 2.813,9.042 2.813,9.106 2.922,9.106 2.922,9.169 2.488,9.169 2.488,9.106 2.596,9.106 2.596,9.042 " - id="polygon310" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="2.596,9.042 2.813,9.042 2.813,9.106 2.922,9.106 2.922,9.169 2.488,9.169 2.488,9.106 2.596,9.106 2.596,9.042 " - id="polygon312" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="20.287001" - y="6.5770001" - id="rect314" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="20.287001" - y="6.5770001" - id="rect316" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="20.405001" - y="6.6950002" - id="rect318" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="20.434,7.391 20.992,7.391 20.992,7.517 20.464,7.517 20.434,7.391 " - id="polygon320" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.434,7.391 20.992,7.391 20.992,7.517 20.464,7.517 20.434,7.391 " - id="polygon322" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.992,7.391 21.225,7.391 21.196,7.517 20.992,7.517 20.992,7.391 " - id="polygon324" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.992,7.391 21.225,7.391 21.196,7.517 20.992,7.517 20.992,7.391 " - id="polygon326" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="21.030001" - y="7.4289999" - id="rect328" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="21.030001" - y="7.4289999" - id="rect330" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="20.721,7.517 20.938,7.517 20.938,7.581 21.047,7.581 21.047,7.644 20.613,7.644 20.613,7.581 20.721,7.581 20.721,7.517 " - id="polygon332" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.721,7.517 20.938,7.517 20.938,7.581 21.047,7.581 21.047,7.644 20.613,7.644 20.613,7.581 20.721,7.581 20.721,7.517 " - id="polygon334" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.085" - height="0.81300002" - x="0.31200001" - y="6.6030002" - id="rect336" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.085" - height="0.81300002" - x="0.31200001" - y="6.6030002" - id="rect338" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.85000002" - height="0.56" - x="0.43000001" - y="6.7199998" - id="rect340" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="0.459,7.416 1.017,7.416 1.017,7.542 0.489,7.542 0.459,7.416 " - id="polygon342" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="0.459,7.416 1.017,7.416 1.017,7.542 0.489,7.542 0.459,7.416 " - id="polygon344" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="1.017,7.416 1.25,7.416 1.221,7.542 1.017,7.542 1.017,7.416 " - id="polygon346" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="1.017,7.416 1.25,7.416 1.221,7.542 1.017,7.542 1.017,7.416 " - id="polygon348" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050999999" - height="0.050999999" - x="1.0549999" - y="7.454" - id="rect350" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050999999" - height="0.050999999" - x="1.0549999" - y="7.454" - id="rect352" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="0.746,7.542 0.963,7.542 0.963,7.606 1.072,7.606 1.072,7.669 0.638,7.669 0.638,7.606 0.746,7.606 0.746,7.542 " - id="polygon354" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="0.746,7.542 0.963,7.542 0.963,7.606 1.072,7.606 1.072,7.669 0.638,7.669 0.638,7.606 0.746,7.606 0.746,7.542 " - id="polygon356" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="7.201,5.672 7.159,5.69 7.03,6.011 7.03,6.171 7.094,6.225 8.036,6.225 8.1,6.171 8.1,6.011 7.972,5.69 7.929,5.672 7.201,5.672 " - id="polygon358" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="7.201,5.672 7.159,5.69 7.03,6.011 7.03,6.171 7.094,6.225 8.036,6.225 8.1,6.171 8.1,6.011 7.972,5.69 7.929,5.672 7.201,5.672 " - id="polygon360" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.052,5.957 L 7.094,5.975 L 8.036,5.975 L 8.079,5.957" - id="path362" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 8.036,5.975 L 8.1,6.011" - id="path364" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.03,6.011 L 7.094,5.975" - id="path366" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="7.33,5.333 7.308,5.761 7.822,5.761 7.801,5.333 7.33,5.333 " - id="polygon368" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="7.33,5.333 7.308,5.761 7.822,5.761 7.801,5.333 7.33,5.333 " - id="polygon370" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="7.244,5.761 7.201,5.886 7.929,5.886 7.886,5.761 7.244,5.761 " - id="polygon372" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="7.244,5.761 7.201,5.886 7.929,5.886 7.886,5.761 7.244,5.761 " - id="polygon374" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="7.244" - cy="6.0380001" - rx="0.011" - ry="0.011" - id="ellipse376" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.244" - cy="6.0380001" - rx="0.011" - ry="0.011" - id="ellipse378" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.3509998" - cy="6.0380001" - rx="0.011" - ry="0.011" - id="ellipse380" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.3509998" - cy="6.0380001" - rx="0.011" - ry="0.011" - id="ellipse382" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4580002" - cy="6.0380001" - rx="0.011" - ry="0.011" - id="ellipse384" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4580002" - cy="6.0380001" - rx="0.011" - ry="0.011" - id="ellipse386" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.244" - cy="6.0819998" - rx="0.011" - ry="0.011" - id="ellipse388" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.244" - cy="6.0819998" - rx="0.011" - ry="0.011" - id="ellipse390" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.3509998" - cy="6.0819998" - rx="0.011" - ry="0.011" - id="ellipse392" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.3509998" - cy="6.0819998" - rx="0.011" - ry="0.011" - id="ellipse394" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4580002" - cy="6.0819998" - rx="0.011" - ry="0.011" - id="ellipse396" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4580002" - cy="6.0819998" - rx="0.011" - ry="0.011" - id="ellipse398" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.244" - cy="6.1269999" - rx="0.011" - ry="0.011" - id="ellipse400" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.244" - cy="6.1269999" - rx="0.011" - ry="0.011" - id="ellipse402" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.3509998" - cy="6.1269999" - rx="0.011" - ry="0.011" - id="ellipse404" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.3509998" - cy="6.1269999" - rx="0.011" - ry="0.011" - id="ellipse406" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4580002" - cy="6.1269999" - rx="0.011" - ry="0.011" - id="ellipse408" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4580002" - cy="6.1269999" - rx="0.011" - ry="0.011" - id="ellipse410" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.244" - cy="6.171" - rx="0.011" - ry="0.011" - id="ellipse412" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.244" - cy="6.171" - rx="0.011" - ry="0.011" - id="ellipse414" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.3509998" - cy="6.171" - rx="0.011" - ry="0.011" - id="ellipse416" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.3509998" - cy="6.171" - rx="0.011" - ry="0.011" - id="ellipse418" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4580002" - cy="6.171" - rx="0.011" - ry="0.011" - id="ellipse420" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4580002" - cy="6.171" - rx="0.011" - ry="0.011" - id="ellipse422" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.5650001" - cy="6.0469999" - rx="0.134" - ry="0.043000001" - id="ellipse424" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.5650001" - cy="6.0469999" - rx="0.134" - ry="0.043000001" - id="ellipse426" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.8330002" - cy="6.0469999" - rx="0.134" - ry="0.043000001" - id="ellipse428" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.8330002" - cy="6.0469999" - rx="0.134" - ry="0.043000001" - id="ellipse430" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="13.374,8.356 13.331,8.374 13.202,8.695 13.202,8.856 13.267,8.909 14.208,8.909 14.272,8.856 14.272,8.695 14.144,8.374 14.101,8.356 13.374,8.356 " - id="polygon432" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="13.374,8.356 13.331,8.374 13.202,8.695 13.202,8.856 13.267,8.909 14.208,8.909 14.272,8.856 14.272,8.695 14.144,8.374 14.101,8.356 13.374,8.356 " - id="polygon434" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 13.224,8.642 L 13.267,8.659 L 14.208,8.659 L 14.251,8.642" - id="path436" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 14.208,8.659 L 14.272,8.695" - id="path438" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 13.202,8.695 L 13.267,8.659" - id="path440" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="13.502,8.018 13.481,8.445 13.994,8.445 13.973,8.018 13.502,8.018 " - id="polygon442" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="13.502,8.018 13.481,8.445 13.994,8.445 13.973,8.018 13.502,8.018 " - id="polygon444" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="13.416,8.445 13.374,8.57 14.101,8.57 14.058,8.445 13.416,8.445 " - id="polygon446" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="13.416,8.445 13.374,8.57 14.101,8.57 14.058,8.445 13.416,8.445 " - id="polygon448" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="13.416" - cy="8.7220001" - rx="0.011" - ry="0.011" - id="ellipse450" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="8.7220001" - rx="0.011" - ry="0.011" - id="ellipse452" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="8.7220001" - rx="0.011" - ry="0.011" - id="ellipse454" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="8.7220001" - rx="0.011" - ry="0.011" - id="ellipse456" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="8.7220001" - rx="0.011" - ry="0.011" - id="ellipse458" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="8.7220001" - rx="0.011" - ry="0.011" - id="ellipse460" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.416" - cy="8.7659998" - rx="0.011" - ry="0.011" - id="ellipse462" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="8.7659998" - rx="0.011" - ry="0.011" - id="ellipse464" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="8.7659998" - rx="0.011" - ry="0.011" - id="ellipse466" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="8.7659998" - rx="0.011" - ry="0.011" - id="ellipse468" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="8.7659998" - rx="0.011" - ry="0.011" - id="ellipse470" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="8.7659998" - rx="0.011" - ry="0.011" - id="ellipse472" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.416" - cy="8.8109999" - rx="0.011" - ry="0.011" - id="ellipse474" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="8.8109999" - rx="0.011" - ry="0.011" - id="ellipse476" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="8.8109999" - rx="0.011" - ry="0.011" - id="ellipse478" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="8.8109999" - rx="0.011" - ry="0.011" - id="ellipse480" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="8.8109999" - rx="0.011" - ry="0.011" - id="ellipse482" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="8.8109999" - rx="0.011" - ry="0.011" - id="ellipse484" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.416" - cy="8.8559999" - rx="0.011" - ry="0.011" - id="ellipse486" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="8.8559999" - rx="0.011" - ry="0.011" - id="ellipse488" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="8.8559999" - rx="0.011" - ry="0.011" - id="ellipse490" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="8.8559999" - rx="0.011" - ry="0.011" - id="ellipse492" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="8.8559999" - rx="0.011" - ry="0.011" - id="ellipse494" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="8.8559999" - rx="0.011" - ry="0.011" - id="ellipse496" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.737" - cy="8.7309999" - rx="0.134" - ry="0.043000001" - id="ellipse498" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="13.737" - cy="8.7309999" - rx="0.134" - ry="0.043000001" - id="ellipse500" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.005" - cy="8.7309999" - rx="0.134" - ry="0.043000001" - id="ellipse502" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="14.005" - cy="8.7309999" - rx="0.134" - ry="0.043000001" - id="ellipse504" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="7.174,8.381 7.131,8.399 7.002,8.72 7.002,8.881 7.067,8.934 8.008,8.934 8.072,8.881 8.072,8.72 7.944,8.399 7.901,8.381 7.174,8.381 " - id="polygon506" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="7.174,8.381 7.131,8.399 7.002,8.72 7.002,8.881 7.067,8.934 8.008,8.934 8.072,8.881 8.072,8.72 7.944,8.399 7.901,8.381 7.174,8.381 " - id="polygon508" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.024,8.667 L 7.067,8.684 L 8.008,8.684 L 8.051,8.667" - id="path510" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 8.008,8.684 L 8.072,8.72" - id="path512" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.002,8.72 L 7.067,8.684" - id="path514" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="7.302,8.043 7.281,8.47 7.794,8.47 7.773,8.043 7.302,8.043 " - id="polygon516" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="7.302,8.043 7.281,8.47 7.794,8.47 7.773,8.043 7.302,8.043 " - id="polygon518" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="7.216,8.47 7.174,8.595 7.901,8.595 7.858,8.47 7.216,8.47 " - id="polygon520" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="7.216,8.47 7.174,8.595 7.901,8.595 7.858,8.47 7.216,8.47 " - id="polygon522" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="7.2160001" - cy="8.7469997" - rx="0.011" - ry="0.011" - id="ellipse524" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.2160001" - cy="8.7469997" - rx="0.011" - ry="0.011" - id="ellipse526" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.323" - cy="8.7469997" - rx="0.011" - ry="0.011" - id="ellipse528" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.323" - cy="8.7469997" - rx="0.011" - ry="0.011" - id="ellipse530" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4299998" - cy="8.7469997" - rx="0.011" - ry="0.011" - id="ellipse532" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4299998" - cy="8.7469997" - rx="0.011" - ry="0.011" - id="ellipse534" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.2160001" - cy="8.7910004" - rx="0.011" - ry="0.011" - id="ellipse536" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.2160001" - cy="8.7910004" - rx="0.011" - ry="0.011" - id="ellipse538" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.323" - cy="8.7910004" - rx="0.011" - ry="0.011" - id="ellipse540" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.323" - cy="8.7910004" - rx="0.011" - ry="0.011" - id="ellipse542" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4299998" - cy="8.7910004" - rx="0.011" - ry="0.011" - id="ellipse544" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4299998" - cy="8.7910004" - rx="0.011" - ry="0.011" - id="ellipse546" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.2160001" - cy="8.8360004" - rx="0.011" - ry="0.011" - id="ellipse548" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.2160001" - cy="8.8360004" - rx="0.011" - ry="0.011" - id="ellipse550" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.323" - cy="8.8360004" - rx="0.011" - ry="0.011" - id="ellipse552" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.323" - cy="8.8360004" - rx="0.011" - ry="0.011" - id="ellipse554" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4299998" - cy="8.8360004" - rx="0.011" - ry="0.011" - id="ellipse556" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4299998" - cy="8.8360004" - rx="0.011" - ry="0.011" - id="ellipse558" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.2160001" - cy="8.8809996" - rx="0.011" - ry="0.011" - id="ellipse560" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.2160001" - cy="8.8809996" - rx="0.011" - ry="0.011" - id="ellipse562" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.323" - cy="8.8809996" - rx="0.011" - ry="0.011" - id="ellipse564" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.323" - cy="8.8809996" - rx="0.011" - ry="0.011" - id="ellipse566" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.4299998" - cy="8.8809996" - rx="0.011" - ry="0.011" - id="ellipse568" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="7.4299998" - cy="8.8809996" - rx="0.011" - ry="0.011" - id="ellipse570" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.5370002" - cy="8.7559996" - rx="0.134" - ry="0.043000001" - id="ellipse572" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.5370002" - cy="8.7559996" - rx="0.134" - ry="0.043000001" - id="ellipse574" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.8049998" - cy="8.7559996" - rx="0.134" - ry="0.043000001" - id="ellipse576" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.8049998" - cy="8.7559996" - rx="0.134" - ry="0.043000001" - id="ellipse578" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="13.374,5.531 13.331,5.549 13.202,5.87 13.202,6.031 13.267,6.084 14.208,6.084 14.272,6.031 14.272,5.87 14.144,5.549 14.101,5.531 13.374,5.531 " - id="polygon580" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="13.374,5.531 13.331,5.549 13.202,5.87 13.202,6.031 13.267,6.084 14.208,6.084 14.272,6.031 14.272,5.87 14.144,5.549 14.101,5.531 13.374,5.531 " - id="polygon582" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 13.224,5.817 L 13.267,5.834 L 14.208,5.834 L 14.251,5.817" - id="path584" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 14.208,5.834 L 14.272,5.87" - id="path586" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 13.202,5.87 L 13.267,5.834" - id="path588" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="13.502,5.192 13.481,5.62 13.994,5.62 13.973,5.192 13.502,5.192 " - id="polygon590" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="13.502,5.192 13.481,5.62 13.994,5.62 13.973,5.192 13.502,5.192 " - id="polygon592" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="13.416,5.62 13.374,5.745 14.101,5.745 14.058,5.62 13.416,5.62 " - id="polygon594" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="13.416,5.62 13.374,5.745 14.101,5.745 14.058,5.62 13.416,5.62 " - id="polygon596" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="13.416" - cy="5.8969998" - rx="0.011" - ry="0.011" - id="ellipse598" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="5.8969998" - rx="0.011" - ry="0.011" - id="ellipse600" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="5.8969998" - rx="0.011" - ry="0.011" - id="ellipse602" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="5.8969998" - rx="0.011" - ry="0.011" - id="ellipse604" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="5.8969998" - rx="0.011" - ry="0.011" - id="ellipse606" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="5.8969998" - rx="0.011" - ry="0.011" - id="ellipse608" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.416" - cy="5.941" - rx="0.011" - ry="0.011" - id="ellipse610" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="5.941" - rx="0.011" - ry="0.011" - id="ellipse612" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="5.941" - rx="0.011" - ry="0.011" - id="ellipse614" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="5.941" - rx="0.011" - ry="0.011" - id="ellipse616" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="5.941" - rx="0.011" - ry="0.011" - id="ellipse618" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="5.941" - rx="0.011" - ry="0.011" - id="ellipse620" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.416" - cy="5.9860001" - rx="0.011" - ry="0.011" - id="ellipse622" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="5.9860001" - rx="0.011" - ry="0.011" - id="ellipse624" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="5.9860001" - rx="0.011" - ry="0.011" - id="ellipse626" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="5.9860001" - rx="0.011" - ry="0.011" - id="ellipse628" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="5.9860001" - rx="0.011" - ry="0.011" - id="ellipse630" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="5.9860001" - rx="0.011" - ry="0.011" - id="ellipse632" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.416" - cy="6.0310001" - rx="0.011" - ry="0.011" - id="ellipse634" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.416" - cy="6.0310001" - rx="0.011" - ry="0.011" - id="ellipse636" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.523" - cy="6.0310001" - rx="0.011" - ry="0.011" - id="ellipse638" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.523" - cy="6.0310001" - rx="0.011" - ry="0.011" - id="ellipse640" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.63" - cy="6.0310001" - rx="0.011" - ry="0.011" - id="ellipse642" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="13.63" - cy="6.0310001" - rx="0.011" - ry="0.011" - id="ellipse644" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="13.737" - cy="5.9060001" - rx="0.134" - ry="0.043000001" - id="ellipse646" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="13.737" - cy="5.9060001" - rx="0.134" - ry="0.043000001" - id="ellipse648" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.005" - cy="5.9060001" - rx="0.134" - ry="0.043000001" - id="ellipse650" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="14.005" - cy="5.9060001" - rx="0.134" - ry="0.043000001" - id="ellipse652" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <text - x="9.6599998" - y="8.3249998" - id="text654" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth0</text> - <text - x="11.456" - y="6.7820001" - id="text656" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth2</text> - <text - x="9.0799999" - y="6.8319998" - id="text658" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth1</text> - <text - x="7.1090002" - y="4.9520001" - id="text660" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">hplj6a</text> - <text - x="13.463" - y="4.9569998" - id="text662" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">hplj6f</text> - <text - x="7.1820002" - y="9.507" - id="text664" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">qmsa</text> - <text - x="13.327" - y="9.507" - id="text666" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">qmsf</text> - <text - x="8.3570004" - y="2.2019999" - id="text668" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: PROMISES</text> - <text - x="9.9700003" - y="3.55" - id="text670" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="9.698" - y="4.1500001" - id="text672" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIAMOND</text> - <text - x="2.221" - y="9.9250002" - id="text674" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="1.8150001" - y="10.525" - id="text676" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">192.168.1.0/24</text> - <text - x="15.621" - y="9.8520002" - id="text678" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="15.185" - y="10.452" - id="text680" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">192.168.2.0/24</text> - <rect - width="0.62699997" - height="0.55299997" - x="8.7729998" - y="4.4429998" - id="rect682" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="9.0869999" - cy="4.9959998" - rx="0.31299999" - ry="0.092" - id="ellipse684" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="9.0869999" - cy="4.4429998" - rx="0.31299999" - ry="0.092" - id="ellipse686" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="9.0869999" - cy="4.4429998" - rx="0.31299999" - ry="0.092" - id="ellipse688" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 9.4,4.443 L 9.4,4.996 C 9.4,5.047 9.26,5.088 9.087,5.088 C 8.913,5.088 8.773,5.047 8.773,4.996 L 8.773,4.443" - id="path690" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="9.375" - y1="4.9000001" - x2="10.025" - y2="5.3000002" - stroke="#000000" - stroke-width="0.100" - id="line692" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62699997" - height="0.55299997" - x="11.812" - y="4.4450002" - id="rect694" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.126" - cy="4.9980001" - rx="0.31299999" - ry="0.092" - id="ellipse696" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.126" - cy="4.4450002" - rx="0.31299999" - ry="0.092" - id="ellipse698" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.126" - cy="4.4450002" - rx="0.31299999" - ry="0.092" - id="ellipse700" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.439,4.445 L 12.439,4.998 C 12.439,5.049 12.299,5.09 12.126,5.09 C 11.953,5.09 11.812,5.049 11.812,4.998 L 11.812,4.445" - id="path702" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="11.089" - y1="5.2789998" - x2="11.825" - y2="4.8499999" - stroke="#000000" - stroke-width="0.100" - id="line704" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="8.7399998" - y="5.5819998" - id="text706" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="11.799" - y="5.6069999" - id="text708" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">data</text> - <text - x="6.5149999" - y="11.352" - id="text710" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">30 Users</text> - <text - x="19.365" - y="11.267" - id="text712" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">100 Users</text> - <text - x="1.018" - y="4.3790002" - id="text714" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Accounting</text> - <text - x="16.813" - y="4.316" - id="text716" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Financial Services</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap5-net.png b/docs/htmldocs/Samba3-ByExample/images/chap5-net.png Binary files differdeleted file mode 100644 index f39e0d6052..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap5-net.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap5-net.svg b/docs/htmldocs/Samba3-ByExample/images/chap5-net.svg deleted file mode 100644 index 77df4d1db3..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap5-net.svg +++ /dev/null @@ -1,3668 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="25.385cm" - height="20.027cm" - viewBox="-0.789 0.573 24.595 20.6" - id="svg2"> - <defs - id="defs1129" /> - <rect - width="11.5" - height="7.7259998" - x="12.77" - y="12.847" - id="rect4" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.77,12.847 C 12.604315,12.847 12.47,12.981315 12.47,13.147" - id="path6" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 24.57,13.147 C 24.57,12.981315 24.435685,12.847 24.27,12.847" - id="path8" - style="fill:#ebebeb;stroke:none" /> - <rect - width="12.1" - height="7.1259999" - x="12.47" - y="13.147" - id="rect10" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.47,20.273 C 12.47,20.438685 12.604315,20.573 12.77,20.573" - id="path12" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 24.27,20.573 C 24.435685,20.573 24.57,20.438685 24.57,20.273" - id="path14" - style="fill:#ebebeb;stroke:none" /> - <line - x1="12.77" - y1="12.847" - x2="24.27" - y2="12.847" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="12.77" - y1="20.573" - x2="24.27" - y2="20.573" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.77,12.847 C 12.604315,12.847 12.47,12.981315 12.47,13.147" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 24.57,13.147 C 24.57,12.981315 24.435685,12.847 24.27,12.847" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="12.47" - y1="13.147" - x2="12.47" - y2="20.273001" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="24.57" - y1="13.147" - x2="24.57" - y2="20.273001" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.47,20.273 C 12.47,20.438685 12.604315,20.573 12.77,20.573" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 24.27,20.573 C 24.435685,20.573 24.57,20.438685 24.57,20.273" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="12.01" - height="7.7779999" - x="-0.46399999" - y="12.797" - id="rect32" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -0.464,12.797 C -0.62968542,12.797 -0.764,12.931315 -0.764,13.097" - id="path34" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.845,13.097 C 11.845,12.931315 11.710685,12.797 11.545,12.797" - id="path36" - style="fill:#ebebeb;stroke:none" /> - <rect - width="12.61" - height="7.178" - x="-0.764" - y="13.097" - id="rect38" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -0.764,20.275 C -0.764,20.440685 -0.62968542,20.575 -0.464,20.575" - id="path40" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.545,20.575 C 11.710685,20.575 11.845,20.440685 11.845,20.275" - id="path42" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-0.46399999" - y1="12.797" - x2="11.545" - y2="12.797" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-0.46399999" - y1="20.575001" - x2="11.545" - y2="20.575001" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.464,12.797 C -0.62968542,12.797 -0.764,12.931315 -0.764,13.097" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.845,13.097 C 11.845,12.931315 11.710685,12.797 11.545,12.797" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-0.764" - y1="13.097" - x2="-0.764" - y2="20.275" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.845" - y1="13.097" - x2="11.845" - y2="20.275" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.764,20.275 C -0.764,20.440685 -0.62968542,20.575 -0.464,20.575" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.545,20.575 C 11.710685,20.575 11.845,20.440685 11.845,20.275" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="15.975" - height="9.7749996" - x="5.645" - y="2.1719999" - id="rect60" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 5.645,2.172 C 5.4793146,2.172 5.345,2.3063146 5.345,2.472" - id="path62" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 21.92,2.472 C 21.92,2.3063146 21.785685,2.172 21.62,2.172" - id="path64" - style="fill:#ebebeb;stroke:none" /> - <rect - width="16.575001" - height="9.1750002" - x="5.3449998" - y="2.4719999" - id="rect66" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 5.345,11.647 C 5.345,11.812685 5.4793146,11.947 5.645,11.947" - id="path68" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 21.62,11.947 C 21.785685,11.947 21.92,11.812685 21.92,11.647" - id="path70" - style="fill:#ebebeb;stroke:none" /> - <line - x1="5.645" - y1="2.1719999" - x2="21.620001" - y2="2.1719999" - stroke="#000000" - stroke-width="0.050" - id="line72" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="5.645" - y1="11.947" - x2="21.620001" - y2="11.947" - stroke="#000000" - stroke-width="0.050" - id="line74" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 5.645,2.172 C 5.4793146,2.172 5.345,2.3063146 5.345,2.472" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 21.92,2.472 C 21.92,2.3063146 21.785685,2.172 21.62,2.172" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="5.3449998" - y1="2.4719999" - x2="5.3449998" - y2="11.647" - stroke="#000000" - stroke-width="0.050" - id="line80" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="21.92" - y1="2.4719999" - x2="21.92" - y2="11.647" - stroke="#000000" - stroke-width="0.050" - id="line82" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 5.345,11.647 C 5.345,11.812685 5.4793146,11.947 5.645,11.947" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 21.62,11.947 C 21.785685,11.947 21.92,11.812685 21.92,11.647" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.263,3.803 C 0.857,3.793 0.068,3.995 0.179,4.427 C 0.29,4.859 0.82,4.955 1.042,4.83 C 1.263,4.705 0.696,5.435 1.781,5.627 C 2.866,5.819 3.42,5.511 3.26,5.291 C 3.1,5.07 4.209,5.809 4.727,5.387 C 5.244,4.964 4.197,4.561 4.418,4.619 C 4.64,4.676 5.318,4.6 5.096,3.88 C 4.874,3.16 2.878,3.717 3.1,3.611 C 3.322,3.505 2.767,2.978 2.077,3.083 C 1.387,3.189 1.338,3.38 1.264,3.803 L 1.263,3.803" - id="path88" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 1.263,3.803 C 0.857,3.793 0.068,3.995 0.179,4.427 C 0.29,4.859 0.82,4.955 1.042,4.83 C 1.263,4.705 0.696,5.435 1.781,5.627 C 2.866,5.819 3.42,5.511 3.26,5.291 C 3.1,5.07 4.209,5.809 4.727,5.387 C 5.244,4.964 4.197,4.561 4.418,4.619 C 4.64,4.676 5.318,4.6 5.096,3.88 C 4.874,3.16 2.878,3.717 3.1,3.611 C 3.322,3.505 2.767,2.978 2.077,3.083 C 1.387,3.189 1.338,3.38 1.264,3.803 L 1.263,3.803" - id="path90" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="2.2260001" - y="4.4980001" - id="text92" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <rect - width="1.054" - height="2.1070001" - x="5.7290001" - y="6.2870002" - id="rect94" - style="fill:#ff0000;stroke:none;stroke-width:0" /> - <polygon - points="5.729,6.287 6.783,6.287 6.915,6.156 5.861,6.156 5.729,6.287 " - id="polygon96" - style="fill:#ff0000;stroke:none;stroke-width:0.1" /> - <polygon - points="6.783,6.287 6.915,6.156 6.915,8.263 6.783,8.394 6.783,6.287 " - id="polygon98" - style="fill:#ff0000;stroke:none;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="6.4980001" - x2="6.783" - y2="6.4980001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line100" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="6.3660002" - x2="6.783" - y2="6.4980001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line102" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="6.2870002" - x2="6.0450001" - y2="6.4980001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line104" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="6.2870002" - x2="6.177" - y2="6.1560001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line106" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="6.9190001" - x2="6.783" - y2="6.9190001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line108" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="6.7880001" - x2="6.783" - y2="6.9190001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line110" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.467" - y1="6.4980001" - x2="6.467" - y2="6.9190001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line112" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="7.3410001" - x2="6.783" - y2="7.3410001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line114" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="7.2090001" - x2="6.783" - y2="7.3410001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line116" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="6.9190001" - x2="6.0450001" - y2="7.3410001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line118" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="7.7620001" - x2="6.783" - y2="7.7620001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line120" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="7.631" - x2="6.783" - y2="7.7620001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line122" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.467" - y1="7.3410001" - x2="6.467" - y2="7.7620001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line124" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="8.184" - x2="6.783" - y2="8.184" - stroke="#FFFFFF" - stroke-width="0.100" - id="line126" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="8.052" - x2="6.783" - y2="8.184" - stroke="#FFFFFF" - stroke-width="0.100" - id="line128" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="7.7620001" - x2="6.0450001" - y2="8.184" - stroke="#FFFFFF" - stroke-width="0.100" - id="line130" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.467" - y1="8.184" - x2="6.467" - y2="8.3940001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line132" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="6.2870002" - x2="6.783" - y2="6.2870002" - stroke="#000000" - stroke-width="0.050" - id="line134" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="6.783" - y1="8.3940001" - x2="6.783" - y2="6.2870002" - stroke="#000000" - stroke-width="0.050" - id="line136" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="6.783" - y1="6.2870002" - x2="6.915" - y2="6.1560001" - stroke="#000000" - stroke-width="0.050" - id="line138" - style="stroke:#000000;stroke-width:0.05" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.050" - points="5.729,6.287 5.861,6.156 6.915,6.156 6.915,8.263 6.783,8.394 5.729,8.394 5.729,6.287 " - id="polyline140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="2.0050001" - height="6.0149999" - x="8.4580002" - y="4.1360002" - id="rect142" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="2.0050001" - height="6.0149999" - x="8.4580002" - y="4.1360002" - id="rect144" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.0050001" - height="6.0149999" - x="8.4580002" - y="4.1360002" - id="rect146" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.604" - height="2.4059999" - x="8.6590004" - y="4.3369999" - id="rect148" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.604" - height="2.4059999" - x="8.6590004" - y="4.3369999" - id="rect150" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.604" - height="2.4059999" - x="8.6590004" - y="4.3369999" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="4.7379999" - x2="10.263" - y2="4.7379999" - stroke="#000000" - stroke-width="0.010" - id="line154" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.263" - y1="5.1389999" - x2="8.6590004" - y2="5.1389999" - stroke="#000000" - stroke-width="0.010" - id="line156" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="5.54" - x2="10.263" - y2="5.54" - stroke="#000000" - stroke-width="0.010" - id="line158" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="5.941" - x2="10.263" - y2="5.941" - stroke="#000000" - stroke-width="0.010" - id="line160" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.263" - y1="6.342" - x2="8.6590004" - y2="6.342" - stroke="#000000" - stroke-width="0.010" - id="line162" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="1.103" - height="0.60100001" - x="8.6590004" - y="6.9429998" - id="rect164" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.103" - height="0.60100001" - x="8.6590004" - y="6.9429998" - id="rect166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.103" - height="0.60100001" - x="8.6590004" - y="6.9429998" - id="rect168" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.4580002" - y1="7.9460001" - x2="10.463" - y2="7.9460001" - stroke="#000000" - stroke-width="0.010" - id="line170" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.1" - height="0.1" - x="9.3610001" - y="8.1459999" - id="rect172" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.1" - height="0.1" - x="9.3610001" - y="8.1459999" - id="rect174" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.1" - height="0.1" - x="9.3610001" - y="8.1459999" - id="rect176" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.1" - height="0.1" - x="9.7620001" - y="8.1459999" - id="rect178" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.1" - height="0.1" - x="9.7620001" - y="8.1459999" - id="rect180" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.1" - height="0.1" - x="9.7620001" - y="8.1459999" - id="rect182" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.1" - height="0.1" - x="10.163" - y="8.1459999" - id="rect184" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.1" - height="0.1" - x="10.163" - y="8.1459999" - id="rect186" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.1" - height="0.1" - x="10.163" - y="8.1459999" - id="rect188" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.2" - height="0.2" - x="10.062" - y="7.5450001" - id="rect190" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.2" - height="0.2" - x="10.062" - y="7.5450001" - id="rect192" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.2" - height="0.2" - x="10.062" - y="7.5450001" - id="rect194" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="7.244" - x2="9.7620001" - y2="7.244" - stroke="#000000" - stroke-width="0.010" - id="line196" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.301" - height="0.301" - x="8.6590004" - y="8.0459995" - id="rect198" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.301" - height="0.301" - x="8.6590004" - y="8.0459995" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.301" - height="0.301" - x="8.6590004" - y="8.0459995" - id="rect202" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.403" - height="0.1" - x="8.7589998" - y="6.4419999" - id="rect204" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.403" - height="0.1" - x="8.7589998" - y="6.4419999" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.403" - height="0.1" - x="8.7589998" - y="6.4419999" - id="rect208" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.7589998" - y1="7.0430002" - x2="9.6610003" - y2="7.0430002" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.6610003" - y1="7.1440001" - x2="9.5609999" - y2="7.1440001" - stroke="#000000" - stroke-width="0.010" - id="line212" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.7589998" - y1="7.1440001" - x2="8.8590002" - y2="7.1440001" - stroke="#000000" - stroke-width="0.010" - id="line214" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.50099999" - height="0.1" - x="8.96" - y="7.0430002" - id="rect216" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.50099999" - height="0.1" - x="8.96" - y="7.0430002" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.50099999" - height="0.1" - x="8.96" - y="7.0430002" - id="rect220" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.7589998" - y1="6.6420002" - x2="8.8590002" - y2="6.6420002" - stroke="#000000" - stroke-width="0.010" - id="line222" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.96" - y1="6.6420002" - x2="9.0600004" - y2="6.6420002" - stroke="#000000" - stroke-width="0.010" - id="line224" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.9619999" - y1="6.6420002" - x2="10.163" - y2="6.6420002" - stroke="#000000" - stroke-width="0.010" - id="line226" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="10.051" - x2="10.363" - y2="10.051" - stroke="#000000" - stroke-width="0.010" - id="line228" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.9510002" - x2="8.559" - y2="9.9510002" - stroke="#000000" - stroke-width="0.010" - id="line230" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.8500004" - x2="10.363" - y2="9.8500004" - stroke="#000000" - stroke-width="0.010" - id="line232" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.75" - x2="8.559" - y2="9.75" - stroke="#000000" - stroke-width="0.010" - id="line234" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.6499996" - x2="10.363" - y2="9.6499996" - stroke="#000000" - stroke-width="0.010" - id="line236" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.5500002" - x2="8.559" - y2="9.5500002" - stroke="#000000" - stroke-width="0.010" - id="line238" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.4490004" - x2="10.363" - y2="9.4490004" - stroke="#000000" - stroke-width="0.010" - id="line240" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.349" - x2="8.559" - y2="9.349" - stroke="#000000" - stroke-width="0.010" - id="line242" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.2489996" - x2="10.363" - y2="9.2489996" - stroke="#000000" - stroke-width="0.010" - id="line244" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.1490002" - x2="8.559" - y2="9.1490002" - stroke="#000000" - stroke-width="0.010" - id="line246" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.0480003" - x2="10.363" - y2="9.0480003" - stroke="#000000" - stroke-width="0.010" - id="line248" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="8.948" - x2="8.559" - y2="8.948" - stroke="#000000" - stroke-width="0.010" - id="line250" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="8.8479996" - x2="10.363" - y2="8.8479996" - stroke="#000000" - stroke-width="0.010" - id="line252" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="8.7480001" - x2="8.559" - y2="8.7480001" - stroke="#000000" - stroke-width="0.010" - id="line254" - style="stroke:#000000;stroke-width:0.01" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="2.424,5.688 2.424,7.250 5.700,7.250 5.700,7.300 " - id="polyline256" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="6.875" - y1="7.3000002" - x2="8.4250002" - y2="7.2750001" - stroke="#000000" - stroke-width="0.100" - id="line258" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.477" - height="1.303" - x="11.597" - y="4.0450001" - id="rect260" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.335" - cy="5.348" - rx="0.73799998" - ry="0.21699999" - id="ellipse262" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.335" - cy="4.0450001" - rx="0.73799998" - ry="0.21699999" - id="ellipse264" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.335" - cy="4.0450001" - rx="0.73799998" - ry="0.21699999" - id="ellipse266" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.074,4.045 L 13.074,5.348 C 13.074,5.468 12.743,5.565 12.335,5.565 C 11.928,5.565 11.597,5.468 11.597,5.348 L 11.597,4.045" - id="path268" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.377" - height="1.215" - x="11.622" - y="5.96" - id="rect270" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.311" - cy="7.1750002" - rx="0.68800002" - ry="0.20200001" - id="ellipse272" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.311" - cy="5.96" - rx="0.68800002" - ry="0.20200001" - id="ellipse274" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.311" - cy="5.96" - rx="0.68800002" - ry="0.20200001" - id="ellipse276" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.999,5.96 L 12.999,7.175 C 12.999,7.287 12.691,7.377 12.311,7.377 C 11.931,7.377 11.622,7.287 11.622,7.175 L 11.622,5.96" - id="path278" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="10.475" - y1="4.6750002" - x2="11.55" - y2="4.6750002" - stroke="#000000" - stroke-width="0.100" - id="line280" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.45" - y1="6.3499999" - x2="11.625" - y2="6.3499999" - stroke="#000000" - stroke-width="0.100" - id="line282" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.45" - y1="8.8249998" - x2="21" - y2="8.8249998" - stroke="#000000" - stroke-width="0.100" - id="line284" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="20.950001" - y1="8.8249998" - x2="20.950001" - y2="7.9749999" - stroke="#000000" - stroke-width="0.100" - id="line286" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="14.928" - y1="8.8249998" - x2="14.928" - y2="7.9169998" - stroke="#000000" - stroke-width="0.100" - id="line288" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="14.946" - y1="8.8249998" - x2="14.946" - y2="9.8249998" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.903" - y1="8.8249998" - x2="17.903" - y2="7.901" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.910999" - y1="8.8249998" - x2="17.910999" - y2="9.8249998" - stroke="#000000" - stroke-width="0.100" - id="line294" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="20.950001" - y1="8.8249998" - x2="20.950001" - y2="9.9250002" - stroke="#000000" - stroke-width="0.100" - id="line296" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="11.825" - y="10.625" - id="rect298" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="1" - height="1" - x="11.825" - y="10.625" - id="rect300" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="11.825" - y="10.625" - id="rect302" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.387,10.787 C 12.387,11.287 12.487,11.187 11.987,11.187" - id="path304" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 12.387,10.787 C 12.387,11.287 12.487,11.187 11.987,11.187" - id="path306" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="12.435,10.865 12.385,10.765 12.335,10.865 12.435,10.865 " - id="polygon308" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.435,10.865 12.385,10.765 12.335,10.865 12.435,10.865 " - id="polygon310" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="12.065,11.135 11.965,11.185 12.065,11.235 12.065,11.135 " - id="polygon312" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.065,11.135 11.965,11.185 12.065,11.235 12.065,11.135 " - id="polygon314" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.684,11.068 C 12.184,11.068 12.284,10.968 12.284,11.468" - id="path316" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 12.684,11.068 C 12.184,11.068 12.284,10.968 12.284,11.468" - id="path318" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="12.595,11.115 12.695,11.065 12.595,11.015 12.595,11.115 " - id="polygon320" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.595,11.115 12.695,11.065 12.595,11.015 12.595,11.115 " - id="polygon322" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="12.225,11.385 12.275,11.485 12.325,11.385 12.225,11.385 " - id="polygon324" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.225,11.385 12.275,11.485 12.325,11.385 12.225,11.385 " - id="polygon326" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="12.325" - y1="8.8249998" - x2="12.325" - y2="10.625" - stroke="#000000" - stroke-width="0.100" - id="line328" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="14.424,10.287 14.365,10.312 14.19,10.75 14.19,10.969 14.278,11.042 15.562,11.042 15.65,10.969 15.65,10.75 15.475,10.312 15.416,10.287 14.424,10.287 " - id="polygon330" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="14.424,10.287 14.365,10.312 14.19,10.75 14.19,10.969 14.278,11.042 15.562,11.042 15.65,10.969 15.65,10.75 15.475,10.312 15.416,10.287 14.424,10.287 " - id="polygon332" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 14.219,10.677 L 14.278,10.701 L 15.562,10.701 L 15.621,10.677" - id="path334" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 15.562,10.701 L 15.65,10.75" - id="path336" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 14.19,10.75 L 14.278,10.701" - id="path338" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="14.599,9.825 14.57,10.409 15.27,10.409 15.241,9.825 14.599,9.825 " - id="polygon340" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="14.599,9.825 14.57,10.409 15.27,10.409 15.241,9.825 14.599,9.825 " - id="polygon342" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="14.482,10.409 14.424,10.579 15.416,10.579 15.358,10.409 14.482,10.409 " - id="polygon344" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="14.482,10.409 14.424,10.579 15.416,10.579 15.358,10.409 14.482,10.409 " - id="polygon346" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="14.482" - cy="10.786" - rx="0.015" - ry="0.015" - id="ellipse348" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.482" - cy="10.786" - rx="0.015" - ry="0.015" - id="ellipse350" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.628" - cy="10.786" - rx="0.015" - ry="0.015" - id="ellipse352" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.628" - cy="10.786" - rx="0.015" - ry="0.015" - id="ellipse354" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.774" - cy="10.786" - rx="0.015" - ry="0.015" - id="ellipse356" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.774" - cy="10.786" - rx="0.015" - ry="0.015" - id="ellipse358" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.482" - cy="10.847" - rx="0.015" - ry="0.015" - id="ellipse360" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.482" - cy="10.847" - rx="0.015" - ry="0.015" - id="ellipse362" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.628" - cy="10.847" - rx="0.015" - ry="0.015" - id="ellipse364" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.628" - cy="10.847" - rx="0.015" - ry="0.015" - id="ellipse366" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.774" - cy="10.847" - rx="0.015" - ry="0.015" - id="ellipse368" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.774" - cy="10.847" - rx="0.015" - ry="0.015" - id="ellipse370" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.482" - cy="10.908" - rx="0.015" - ry="0.015" - id="ellipse372" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.482" - cy="10.908" - rx="0.015" - ry="0.015" - id="ellipse374" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.628" - cy="10.908" - rx="0.015" - ry="0.015" - id="ellipse376" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.628" - cy="10.908" - rx="0.015" - ry="0.015" - id="ellipse378" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.774" - cy="10.908" - rx="0.015" - ry="0.015" - id="ellipse380" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.774" - cy="10.908" - rx="0.015" - ry="0.015" - id="ellipse382" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.482" - cy="10.969" - rx="0.015" - ry="0.015" - id="ellipse384" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.482" - cy="10.969" - rx="0.015" - ry="0.015" - id="ellipse386" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.628" - cy="10.969" - rx="0.015" - ry="0.015" - id="ellipse388" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.628" - cy="10.969" - rx="0.015" - ry="0.015" - id="ellipse390" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.774" - cy="10.969" - rx="0.015" - ry="0.015" - id="ellipse392" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="14.774" - cy="10.969" - rx="0.015" - ry="0.015" - id="ellipse394" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="14.92" - cy="10.798" - rx="0.183" - ry="0.057999998" - id="ellipse396" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="14.92" - cy="10.798" - rx="0.183" - ry="0.057999998" - id="ellipse398" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.285" - cy="10.798" - rx="0.183" - ry="0.057999998" - id="ellipse400" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="15.285" - cy="10.798" - rx="0.183" - ry="0.057999998" - id="ellipse402" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.112" - height="0.83399999" - x="14.372" - y="6.8239999" - id="rect404" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="14.372" - y="6.8239999" - id="rect406" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="14.492" - y="6.9439998" - id="rect408" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="14.522,7.657 15.094,7.657 15.094,7.787 14.552,7.787 14.522,7.657 " - id="polygon410" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="14.522,7.657 15.094,7.657 15.094,7.787 14.552,7.787 14.522,7.657 " - id="polygon412" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="15.094,7.657 15.333,7.657 15.303,7.787 15.094,7.787 15.094,7.657 " - id="polygon414" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.094,7.657 15.333,7.657 15.303,7.787 15.094,7.787 15.094,7.657 " - id="polygon416" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.133" - y="7.6960001" - id="rect418" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.133" - y="7.6960001" - id="rect420" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="14.816,7.787 15.039,7.787 15.039,7.852 15.15,7.852 15.15,7.917 14.705,7.917 14.705,7.852 14.816,7.852 14.816,7.787 " - id="polygon422" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="14.816,7.787 15.039,7.787 15.039,7.852 15.15,7.852 15.15,7.917 14.705,7.917 14.705,7.852 14.816,7.852 14.816,7.787 " - id="polygon424" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="17.348" - y="6.8080001" - id="rect426" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="17.348" - y="6.8080001" - id="rect428" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="17.468" - y="6.928" - id="rect430" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="17.498,7.641 18.07,7.641 18.07,7.771 17.528,7.771 17.498,7.641 " - id="polygon432" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.498,7.641 18.07,7.641 18.07,7.771 17.528,7.771 17.498,7.641 " - id="polygon434" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.07,7.641 18.309,7.641 18.279,7.771 18.07,7.771 18.07,7.641 " - id="polygon436" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.07,7.641 18.309,7.641 18.279,7.771 18.07,7.771 18.07,7.641 " - id="polygon438" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.108999" - y="7.6799998" - id="rect440" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.108999" - y="7.6799998" - id="rect442" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="17.792,7.771 18.014,7.771 18.014,7.836 18.126,7.836 18.126,7.901 17.681,7.901 17.681,7.836 17.792,7.836 17.792,7.771 " - id="polygon444" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.792,7.771 18.014,7.771 18.014,7.836 18.126,7.836 18.126,7.901 17.681,7.901 17.681,7.836 17.792,7.836 17.792,7.771 " - id="polygon446" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="6.8319998" - id="rect448" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="6.8319998" - id="rect450" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="20.518" - y="6.9530001" - id="rect452" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="20.548,7.666 21.12,7.666 21.12,7.796 20.578,7.796 20.548,7.666 " - id="polygon454" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.548,7.666 21.12,7.666 21.12,7.796 20.578,7.796 20.548,7.666 " - id="polygon456" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="21.12,7.666 21.359,7.666 21.329,7.796 21.12,7.796 21.12,7.666 " - id="polygon458" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="21.12,7.666 21.359,7.666 21.329,7.796 21.12,7.796 21.12,7.666 " - id="polygon460" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="7.7049999" - id="rect462" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="7.7049999" - id="rect464" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="20.842,7.796 21.064,7.796 21.064,7.861 21.176,7.861 21.176,7.926 20.731,7.926 20.731,7.861 20.842,7.861 20.842,7.796 " - id="polygon466" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.842,7.796 21.064,7.796 21.064,7.861 21.176,7.861 21.176,7.926 20.731,7.926 20.731,7.861 20.842,7.861 20.842,7.796 " - id="polygon468" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="17.298" - y="9.8319998" - id="rect470" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="17.298" - y="9.8319998" - id="rect472" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="17.417999" - y="9.9530001" - id="rect474" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="17.448,10.666 18.02,10.666 18.02,10.796 17.478,10.796 17.448,10.666 " - id="polygon476" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.448,10.666 18.02,10.666 18.02,10.796 17.478,10.796 17.448,10.666 " - id="polygon478" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.02,10.666 18.259,10.666 18.229,10.796 18.02,10.796 18.02,10.666 " - id="polygon480" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.02,10.666 18.259,10.666 18.229,10.796 18.02,10.796 18.02,10.666 " - id="polygon482" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.059" - y="10.705" - id="rect484" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.059" - y="10.705" - id="rect486" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="17.742,10.796 17.964,10.796 17.964,10.861 18.076,10.861 18.076,10.926 17.631,10.926 17.631,10.861 17.742,10.861 17.742,10.796 " - id="polygon488" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.742,10.796 17.964,10.796 17.964,10.861 18.076,10.861 18.076,10.926 17.631,10.926 17.631,10.861 17.742,10.861 17.742,10.796 " - id="polygon490" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="9.9320002" - id="rect492" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="9.9320002" - id="rect494" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="20.518" - y="10.053" - id="rect496" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="20.548,10.766 21.12,10.766 21.12,10.896 20.578,10.896 20.548,10.766 " - id="polygon498" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.548,10.766 21.12,10.766 21.12,10.896 20.578,10.896 20.548,10.766 " - id="polygon500" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="21.12,10.766 21.359,10.766 21.329,10.896 21.12,10.896 21.12,10.766 " - id="polygon502" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="21.12,10.766 21.359,10.766 21.329,10.896 21.12,10.896 21.12,10.766 " - id="polygon504" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="10.805" - id="rect506" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="10.805" - id="rect508" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="20.842,10.896 21.064,10.896 21.064,10.961 21.176,10.961 21.176,11.026 20.731,11.026 20.731,10.961 20.842,10.961 20.842,10.896 " - id="polygon510" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.842,10.896 21.064,10.896 21.064,10.961 21.176,10.961 21.176,11.026 20.731,11.026 20.731,10.961 20.842,10.961 20.842,10.896 " - id="polygon512" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1" - height="1" - x="3.473" - y="13.307" - id="rect514" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="1" - height="1" - x="3.473" - y="13.307" - id="rect516" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="3.473" - y="13.307" - id="rect518" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 4.034,13.469 C 4.034,13.969 4.134,13.869 3.634,13.869" - id="path520" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 4.034,13.469 C 4.034,13.969 4.134,13.869 3.634,13.869" - id="path522" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.083,13.547 4.033,13.447 3.982,13.547 4.083,13.547 " - id="polygon524" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="4.083,13.547 4.033,13.447 3.982,13.547 4.083,13.547 " - id="polygon526" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="3.713,13.817 3.613,13.867 3.713,13.917 3.713,13.817 " - id="polygon528" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="3.713,13.817 3.613,13.867 3.713,13.917 3.713,13.817 " - id="polygon530" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 4.331,13.751 C 3.831,13.751 3.931,13.651 3.931,14.151" - id="path532" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 4.331,13.751 C 3.831,13.751 3.931,13.651 3.931,14.151" - id="path534" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.242,13.797 4.343,13.747 4.242,13.697 4.242,13.797 " - id="polygon536" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="4.242,13.797 4.343,13.747 4.242,13.697 4.242,13.797 " - id="polygon538" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="3.873,14.067 3.923,14.167 3.973,14.067 3.873,14.067 " - id="polygon540" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="3.873,14.067 3.923,14.167 3.973,14.067 3.873,14.067 " - id="polygon542" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="12.025,11.600 12.025,12.422 3.973,12.422 3.973,13.307 " - id="polyline544" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="12.625,11.650 12.625,12.422 18.872,12.422 18.872,13.332 " - id="polyline546" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="11.971" - y="4.928" - id="text548" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="11.969" - y="6.79" - id="text550" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">data</text> - <text - x="5.848" - y="8.9899998" - id="text552" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">firewall</text> - <text - x="10.47" - y="11.315" - id="text554" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">router</text> - <text - x="16.370001" - y="6.3779998" - id="text556" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 172.16.0.0/22</text> - <text - x="15.487" - y="3.3280001" - id="text558" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: MEGANET</text> - <text - x="8.2959995" - y="2.983" - id="text560" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PDC Server:</text> - <text - x="8.5109997" - y="3.5829999" - id="text562" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">MASSIVE</text> - <text - x="7.4990001" - y="7.092" - id="text564" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth0</text> - <text - x="10.822" - y="8.5419998" - id="text566" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth1</text> - <rect - width="1" - height="1" - x="18.372" - y="13.332" - id="rect568" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="1" - height="1" - x="18.372" - y="13.332" - id="rect570" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="18.372" - y="13.332" - id="rect572" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 18.934,13.494 C 18.934,13.994 19.034,13.894 18.534,13.894" - id="path574" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 18.934,13.494 C 18.934,13.994 19.034,13.894 18.534,13.894" - id="path576" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="18.982,13.572 18.932,13.473 18.883,13.572 18.982,13.572 " - id="polygon578" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="18.982,13.572 18.932,13.473 18.883,13.572 18.982,13.572 " - id="polygon580" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="18.612,13.842 18.512,13.893 18.612,13.942 18.612,13.842 " - id="polygon582" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="18.612,13.842 18.512,13.893 18.612,13.942 18.612,13.842 " - id="polygon584" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 19.231,13.776 C 18.731,13.776 18.831,13.676 18.831,14.176" - id="path586" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 19.231,13.776 C 18.731,13.776 18.831,13.676 18.831,14.176" - id="path588" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="19.142,13.822 19.242,13.772 19.142,13.723 19.142,13.822 " - id="polygon590" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.142,13.822 19.242,13.772 19.142,13.723 19.142,13.822 " - id="polygon592" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="18.772,14.092 18.822,14.192 18.872,14.092 18.772,14.092 " - id="polygon594" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="18.772,14.092 18.822,14.192 18.872,14.092 18.772,14.092 " - id="polygon596" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="13.275" - y1="15.225" - x2="20.950001" - y2="15.225" - stroke="#000000" - stroke-width="0.100" - id="line598" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="15.093" - y1="15.225" - x2="15.093" - y2="16.225" - stroke="#000000" - stroke-width="0.100" - id="line600" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="13.325" - y1="15.225" - x2="13.325" - y2="16.225" - stroke="#000000" - stroke-width="0.100" - id="line602" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.979" - y1="15.225" - x2="16.979" - y2="16.225" - stroke="#000000" - stroke-width="0.100" - id="line604" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.872" - y1="15.225" - x2="18.872" - y2="14.332" - stroke="#000000" - stroke-width="0.100" - id="line606" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.864" - y1="15.225" - x2="18.864" - y2="16.225" - stroke="#000000" - stroke-width="0.100" - id="line608" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="20.9" - y1="15.225" - x2="20.9" - y2="16.200001" - stroke="#000000" - stroke-width="0.100" - id="line610" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.5" - height="3" - x="20.15" - y="16.200001" - id="rect612" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.5" - height="3" - x="20.15" - y="16.200001" - id="rect614" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.5" - height="3" - x="20.15" - y="16.200001" - id="rect616" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.2" - height="1.2" - x="20.299999" - y="16.35" - id="rect618" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.2" - height="1.2" - x="20.299999" - y="16.35" - id="rect620" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.2" - height="1.2" - x="20.299999" - y="16.35" - id="rect622" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.5" - y1="16.65" - x2="20.299999" - y2="16.65" - stroke="#000000" - stroke-width="0.010" - id="line624" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.299999" - y1="16.950001" - x2="21.5" - y2="16.950001" - stroke="#000000" - stroke-width="0.010" - id="line626" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.5" - y1="17.174999" - x2="20.299999" - y2="17.174999" - stroke="#000000" - stroke-width="0.010" - id="line628" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.82499999" - height="0.44999999" - x="20.299999" - y="17.700001" - id="rect630" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.82499999" - height="0.44999999" - x="20.299999" - y="17.700001" - id="rect632" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.82499999" - height="0.44999999" - x="20.299999" - y="17.700001" - id="rect634" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.15" - y1="18.225" - x2="21.65" - y2="18.225" - stroke="#000000" - stroke-width="0.010" - id="line636" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="20.825001" - y="18.375" - id="rect638" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="20.825001" - y="18.375" - id="rect640" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="20.825001" - y="18.375" - id="rect642" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.125" - y="18.375" - id="rect644" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.125" - y="18.375" - id="rect646" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.125" - y="18.375" - id="rect648" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.424999" - y="18.375" - id="rect650" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.424999" - y="18.375" - id="rect652" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.424999" - y="18.375" - id="rect654" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.15000001" - height="0.075000003" - x="21.35" - y="17.924999" - id="rect656" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.15000001" - height="0.075000003" - x="21.35" - y="17.924999" - id="rect658" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.15000001" - height="0.075000003" - x="21.35" - y="17.924999" - id="rect660" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.299999" - y1="17.924999" - x2="21.125" - y2="17.924999" - stroke="#000000" - stroke-width="0.010" - id="line662" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.22499999" - height="0.22499999" - x="20.299999" - y="18.299999" - id="rect664" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.22499999" - height="0.22499999" - x="20.299999" - y="18.299999" - id="rect666" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.22499999" - height="0.22499999" - x="20.299999" - y="18.299999" - id="rect668" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.05" - height="0.075000003" - x="20.375" - y="17.25" - id="rect670" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.05" - height="0.075000003" - x="20.375" - y="17.25" - id="rect672" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.05" - height="0.075000003" - x="20.375" - y="17.25" - id="rect674" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.375" - y1="17.775" - x2="21.049999" - y2="17.775" - stroke="#000000" - stroke-width="0.010" - id="line676" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.049999" - y1="17.85" - x2="20.975" - y2="17.85" - stroke="#000000" - stroke-width="0.010" - id="line678" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.375" - y1="17.85" - x2="20.450001" - y2="17.85" - stroke="#000000" - stroke-width="0.010" - id="line680" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.375" - height="0.075000003" - x="20.525" - y="17.775" - id="rect682" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.375" - height="0.075000003" - x="20.525" - y="17.775" - id="rect684" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.375" - height="0.075000003" - x="20.525" - y="17.775" - id="rect686" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.375" - y1="17.4" - x2="20.450001" - y2="17.4" - stroke="#000000" - stroke-width="0.010" - id="line688" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.525" - y1="17.4" - x2="20.6" - y2="17.4" - stroke="#000000" - stroke-width="0.010" - id="line690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.275" - y1="17.4" - x2="21.424999" - y2="17.4" - stroke="#000000" - stroke-width="0.010" - id="line692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.575001" - y1="19.125" - x2="20.225" - y2="19.125" - stroke="#000000" - stroke-width="0.010" - id="line694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.225" - y1="19.049999" - x2="21.575001" - y2="19.049999" - stroke="#000000" - stroke-width="0.010" - id="line696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.575001" - y1="18.975" - x2="20.225" - y2="18.975" - stroke="#000000" - stroke-width="0.010" - id="line698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.225" - y1="18.9" - x2="21.575001" - y2="18.9" - stroke="#000000" - stroke-width="0.010" - id="line700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.575001" - y1="18.825001" - x2="20.225" - y2="18.825001" - stroke="#000000" - stroke-width="0.010" - id="line702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.225" - y1="18.75" - x2="21.575001" - y2="18.75" - stroke="#000000" - stroke-width="0.010" - id="line704" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.575001" - y1="18.674999" - x2="20.225" - y2="18.674999" - stroke="#000000" - stroke-width="0.010" - id="line706" - style="stroke:#000000;stroke-width:0.01" /> - <polygon - points="18.371,16.685 18.313,16.709 18.137,17.147 18.137,17.366 18.225,17.439 19.51,17.439 19.598,17.366 19.598,17.147 19.422,16.709 19.364,16.685 18.371,16.685 " - id="polygon708" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="18.371,16.685 18.313,16.709 18.137,17.147 18.137,17.366 18.225,17.439 19.51,17.439 19.598,17.366 19.598,17.147 19.422,16.709 19.364,16.685 18.371,16.685 " - id="polygon710" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 18.167,17.074 L 18.225,17.099 L 19.51,17.099 L 19.568,17.074" - id="path712" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 19.51,17.099 L 19.598,17.147" - id="path714" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 18.137,17.147 L 18.225,17.099" - id="path716" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="18.546,16.223 18.517,16.807 19.218,16.807 19.189,16.223 18.546,16.223 " - id="polygon718" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="18.546,16.223 18.517,16.807 19.218,16.807 19.189,16.223 18.546,16.223 " - id="polygon720" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="18.429,16.807 18.371,16.977 19.364,16.977 19.306,16.807 18.429,16.807 " - id="polygon722" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="18.429,16.807 18.371,16.977 19.364,16.977 19.306,16.807 18.429,16.807 " - id="polygon724" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="18.429001" - cy="17.184" - rx="0.015" - ry="0.015" - id="ellipse726" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.429001" - cy="17.184" - rx="0.015" - ry="0.015" - id="ellipse728" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.575001" - cy="17.184" - rx="0.015" - ry="0.015" - id="ellipse730" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.575001" - cy="17.184" - rx="0.015" - ry="0.015" - id="ellipse732" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.721001" - cy="17.184" - rx="0.015" - ry="0.015" - id="ellipse734" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.721001" - cy="17.184" - rx="0.015" - ry="0.015" - id="ellipse736" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.429001" - cy="17.245001" - rx="0.015" - ry="0.015" - id="ellipse738" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.429001" - cy="17.245001" - rx="0.015" - ry="0.015" - id="ellipse740" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.575001" - cy="17.245001" - rx="0.015" - ry="0.015" - id="ellipse742" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.575001" - cy="17.245001" - rx="0.015" - ry="0.015" - id="ellipse744" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.721001" - cy="17.245001" - rx="0.015" - ry="0.015" - id="ellipse746" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.721001" - cy="17.245001" - rx="0.015" - ry="0.015" - id="ellipse748" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.429001" - cy="17.305" - rx="0.015" - ry="0.015" - id="ellipse750" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.429001" - cy="17.305" - rx="0.015" - ry="0.015" - id="ellipse752" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.575001" - cy="17.305" - rx="0.015" - ry="0.015" - id="ellipse754" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.575001" - cy="17.305" - rx="0.015" - ry="0.015" - id="ellipse756" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.721001" - cy="17.305" - rx="0.015" - ry="0.015" - id="ellipse758" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.721001" - cy="17.305" - rx="0.015" - ry="0.015" - id="ellipse760" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.429001" - cy="17.365999" - rx="0.015" - ry="0.015" - id="ellipse762" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.429001" - cy="17.365999" - rx="0.015" - ry="0.015" - id="ellipse764" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.575001" - cy="17.365999" - rx="0.015" - ry="0.015" - id="ellipse766" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.575001" - cy="17.365999" - rx="0.015" - ry="0.015" - id="ellipse768" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.721001" - cy="17.365999" - rx="0.015" - ry="0.015" - id="ellipse770" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.721001" - cy="17.365999" - rx="0.015" - ry="0.015" - id="ellipse772" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.867001" - cy="17.195999" - rx="0.183" - ry="0.057999998" - id="ellipse774" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="18.867001" - cy="17.195999" - rx="0.183" - ry="0.057999998" - id="ellipse776" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.233" - cy="17.195999" - rx="0.183" - ry="0.057999998" - id="ellipse778" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="19.233" - cy="17.195999" - rx="0.183" - ry="0.057999998" - id="ellipse780" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.112" - height="0.83399999" - x="16.448" - y="16.233" - id="rect782" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="16.448" - y="16.233" - id="rect784" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="16.568001" - y="16.353001" - id="rect786" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.598,17.066 17.17,17.066 17.17,17.196 16.628,17.196 16.598,17.066 " - id="polygon788" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.598,17.066 17.17,17.066 17.17,17.196 16.628,17.196 16.598,17.066 " - id="polygon790" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.17,17.066 17.409,17.066 17.379,17.196 17.17,17.196 17.17,17.066 " - id="polygon792" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.17,17.066 17.409,17.066 17.379,17.196 17.17,17.196 17.17,17.066 " - id="polygon794" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="17.209" - y="17.105" - id="rect796" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="17.209" - y="17.105" - id="rect798" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.892,17.196 17.114,17.196 17.114,17.261 17.226,17.261 17.226,17.326 16.781,17.326 16.781,17.261 16.892,17.261 16.892,17.196 " - id="polygon800" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.892,17.196 17.114,17.196 17.114,17.261 17.226,17.261 17.226,17.326 16.781,17.326 16.781,17.261 16.892,17.261 16.892,17.196 " - id="polygon802" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="14.573" - y="16.207001" - id="rect804" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="14.573" - y="16.207001" - id="rect806" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="14.693" - y="16.327999" - id="rect808" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="14.723,17.041 15.295,17.041 15.295,17.171 14.753,17.171 14.723,17.041 " - id="polygon810" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="14.723,17.041 15.295,17.041 15.295,17.171 14.753,17.171 14.723,17.041 " - id="polygon812" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="15.295,17.041 15.534,17.041 15.504,17.171 15.295,17.171 15.295,17.041 " - id="polygon814" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.295,17.041 15.534,17.041 15.504,17.171 15.295,17.171 15.295,17.041 " - id="polygon816" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.334" - y="17.08" - id="rect818" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.334" - y="17.08" - id="rect820" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="15.017,17.171 15.239,17.171 15.239,17.236 15.351,17.236 15.351,17.301 14.906,17.301 14.906,17.236 15.017,17.236 15.017,17.171 " - id="polygon822" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.017,17.171 15.239,17.171 15.239,17.236 15.351,17.236 15.351,17.301 14.906,17.301 14.906,17.236 15.017,17.236 15.017,17.171 " - id="polygon824" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="12.798" - y="16.233" - id="rect826" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="12.798" - y="16.233" - id="rect828" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="12.918" - y="16.353001" - id="rect830" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="12.948,17.066 13.52,17.066 13.52,17.196 12.978,17.196 12.948,17.066 " - id="polygon832" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="12.948,17.066 13.52,17.066 13.52,17.196 12.978,17.196 12.948,17.066 " - id="polygon834" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="13.52,17.066 13.759,17.066 13.729,17.196 13.52,17.196 13.52,17.066 " - id="polygon836" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="13.52,17.066 13.759,17.066 13.729,17.196 13.52,17.196 13.52,17.066 " - id="polygon838" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="13.559" - y="17.105" - id="rect840" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="13.559" - y="17.105" - id="rect842" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="13.242,17.196 13.464,17.196 13.464,17.261 13.576,17.261 13.576,17.326 13.131,17.326 13.131,17.261 13.242,17.261 13.242,17.196 " - id="polygon844" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="13.242,17.196 13.464,17.196 13.464,17.261 13.576,17.261 13.576,17.326 13.131,17.326 13.131,17.261 13.242,17.261 13.242,17.196 " - id="polygon846" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.531" - height="1.351" - x="22.747" - y="16.533001" - id="rect848" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="23.513" - cy="17.884001" - rx="0.76599997" - ry="0.22499999" - id="ellipse850" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="23.513" - cy="16.533001" - rx="0.76599997" - ry="0.22499999" - id="ellipse852" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="23.513" - cy="16.533001" - rx="0.76599997" - ry="0.22499999" - id="ellipse854" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 24.279,16.533 L 24.279,17.884 C 24.279,18.008 23.936,18.109 23.513,18.109 C 23.09,18.109 22.747,18.008 22.747,17.884 L 22.747,16.533" - id="path856" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="21.598" - y1="16.933001" - x2="22.773001" - y2="16.933001" - stroke="#000000" - stroke-width="0.100" - id="line858" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="23.191" - y="17.372" - id="text860" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="19.969999" - y="13.565" - id="text862" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">router</text> - <text - x="14.375" - y="14.915" - id="text864" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 172.16.8.0/22</text> - <text - x="20.979" - y="14.872" - id="text866" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="21.68" - y="15.472" - id="text868" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2</text> - <line - x1="3.924" - y1="15.258" - x2="11.127" - y2="15.25" - stroke="#000000" - stroke-width="0.100" - id="line870" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="3.974" - y1="15.257" - x2="3.9749999" - y2="16.25" - stroke="#000000" - stroke-width="0.100" - id="line872" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="3.974" - y1="15.257" - x2="3.973" - y2="13.982" - stroke="#000000" - stroke-width="0.100" - id="line874" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.5970001" - y1="15.255" - x2="6.598" - y2="16.221001" - stroke="#000000" - stroke-width="0.100" - id="line876" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1079998" - y1="15.253" - x2="8.1079998" - y2="15.268" - stroke="#000000" - stroke-width="0.100" - id="line878" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.7959995" - y1="15.253" - x2="8.7980003" - y2="16.292999" - stroke="#000000" - stroke-width="0.100" - id="line880" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="11.077" - y1="15.25" - x2="11.079" - y2="16.25" - stroke="#000000" - stroke-width="0.100" - id="line882" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.6670001" - height="2.5" - x="3.142" - y="16.25" - id="rect884" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.6670001" - height="2.5" - x="3.142" - y="16.25" - id="rect886" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.6670001" - height="2.5" - x="3.142" - y="16.25" - id="rect888" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.3329999" - height="1" - x="3.2249999" - y="16.333" - id="rect890" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.3329999" - height="1" - x="3.2249999" - y="16.333" - id="rect892" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.3329999" - height="1" - x="3.2249999" - y="16.333" - id="rect894" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.2249999" - y1="16.667" - x2="4.5580001" - y2="16.667" - stroke="#000000" - stroke-width="0.010" - id="line896" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.5580001" - y1="17" - x2="3.2249999" - y2="17" - stroke="#000000" - stroke-width="0.010" - id="line898" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.917" - height="0.5" - x="3.392" - y="17.417" - id="rect900" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.917" - height="0.5" - x="3.392" - y="17.417" - id="rect902" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.917" - height="0.5" - x="3.392" - y="17.417" - id="rect904" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.142" - y1="18.167" - x2="4.8080001" - y2="18.167" - stroke="#000000" - stroke-width="0.010" - id="line906" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.3080001" - y="18" - id="rect908" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.3080001" - y="18" - id="rect910" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.3080001" - y="18" - id="rect912" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.4749999" - y="18" - id="rect914" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.4749999" - y="18" - id="rect916" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.4749999" - y="18" - id="rect918" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.6420002" - y="18" - id="rect920" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.6420002" - y="18" - id="rect922" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.6420002" - y="18" - id="rect924" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.167" - height="0.167" - x="4.5580001" - y="17.75" - id="rect926" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.167" - height="0.167" - x="4.5580001" - y="17.75" - id="rect928" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.167" - height="0.167" - x="4.5580001" - y="17.75" - id="rect930" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.392" - y1="17.667" - x2="4.3080001" - y2="17.667" - stroke="#000000" - stroke-width="0.010" - id="line932" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.25" - height="0.25" - x="4.4749999" - y="17.417" - id="rect934" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.25" - height="0.25" - x="4.4749999" - y="17.417" - id="rect936" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.25" - height="0.25" - x="4.4749999" - y="17.417" - id="rect938" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.1670001" - height="0.082999997" - x="3.3080001" - y="17.083" - id="rect940" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.1670001" - height="0.082999997" - x="3.3080001" - y="17.083" - id="rect942" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1670001" - height="0.082999997" - x="3.3080001" - y="17.083" - id="rect944" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4749999" - y1="17.5" - x2="4.2249999" - y2="17.5" - stroke="#000000" - stroke-width="0.010" - id="line946" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.417" - height="0.082999997" - x="3.642" - y="17.5" - id="rect948" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.417" - height="0.082999997" - x="3.642" - y="17.5" - id="rect950" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.417" - height="0.082999997" - x="3.642" - y="17.5" - id="rect952" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3080001" - y1="17.25" - x2="4.4749999" - y2="17.25" - stroke="#000000" - stroke-width="0.010" - id="line954" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.2249999" - y1="18.25" - x2="4.7249999" - y2="18.25" - stroke="#000000" - stroke-width="0.010" - id="line956" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.7249999" - y1="18.333" - x2="3.2249999" - y2="18.333" - stroke="#000000" - stroke-width="0.010" - id="line958" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.2249999" - y1="18.417" - x2="4.7249999" - y2="18.417" - stroke="#000000" - stroke-width="0.010" - id="line960" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.7249999" - y1="18.667" - x2="3.2249999" - y2="18.667" - stroke="#000000" - stroke-width="0.010" - id="line962" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.2249999" - y1="18.583" - x2="4.7249999" - y2="18.583" - stroke="#000000" - stroke-width="0.010" - id="line964" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.7249999" - y1="18.5" - x2="3.2249999" - y2="18.5" - stroke="#000000" - stroke-width="0.010" - id="line966" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.3080001" - y1="17.25" - x2="3.392" - y2="17.25" - stroke="#000000" - stroke-width="0.010" - id="line968" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4749999" - y1="17.25" - x2="3.5580001" - y2="17.25" - stroke="#000000" - stroke-width="0.010" - id="line970" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4749999" - y1="17.583" - x2="3.5580001" - y2="17.583" - stroke="#000000" - stroke-width="0.010" - id="line972" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.1420002" - y1="17.583" - x2="4.2249999" - y2="17.583" - stroke="#000000" - stroke-width="0.010" - id="line974" - style="stroke:#000000;stroke-width:0.01" /> - <polygon - points="6.121,16.635 6.063,16.659 5.887,17.097 5.887,17.316 5.975,17.389 7.26,17.389 7.348,17.316 7.348,17.097 7.172,16.659 7.114,16.635 6.121,16.635 " - id="polygon976" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="6.121,16.635 6.063,16.659 5.887,17.097 5.887,17.316 5.975,17.389 7.26,17.389 7.348,17.316 7.348,17.097 7.172,16.659 7.114,16.635 6.121,16.635 " - id="polygon978" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.917,17.024 L 5.975,17.049 L 7.26,17.049 L 7.318,17.024" - id="path980" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.26,17.049 L 7.348,17.097" - id="path982" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.887,17.097 L 5.975,17.049" - id="path984" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.296,16.172 6.267,16.757 6.968,16.757 6.939,16.172 6.296,16.172 " - id="polygon986" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="6.296,16.172 6.267,16.757 6.968,16.757 6.939,16.172 6.296,16.172 " - id="polygon988" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.179,16.757 6.121,16.927 7.114,16.927 7.056,16.757 6.179,16.757 " - id="polygon990" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="6.179,16.757 6.121,16.927 7.114,16.927 7.056,16.757 6.179,16.757 " - id="polygon992" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="6.1789999" - cy="17.134001" - rx="0.015" - ry="0.015" - id="ellipse994" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1789999" - cy="17.134001" - rx="0.015" - ry="0.015" - id="ellipse996" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3249998" - cy="17.134001" - rx="0.015" - ry="0.015" - id="ellipse998" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3249998" - cy="17.134001" - rx="0.015" - ry="0.015" - id="ellipse1000" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="17.134001" - rx="0.015" - ry="0.015" - id="ellipse1002" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="17.134001" - rx="0.015" - ry="0.015" - id="ellipse1004" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1789999" - cy="17.195" - rx="0.015" - ry="0.015" - id="ellipse1006" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1789999" - cy="17.195" - rx="0.015" - ry="0.015" - id="ellipse1008" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3249998" - cy="17.195" - rx="0.015" - ry="0.015" - id="ellipse1010" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3249998" - cy="17.195" - rx="0.015" - ry="0.015" - id="ellipse1012" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="17.195" - rx="0.015" - ry="0.015" - id="ellipse1014" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="17.195" - rx="0.015" - ry="0.015" - id="ellipse1016" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1789999" - cy="17.254999" - rx="0.015" - ry="0.015" - id="ellipse1018" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1789999" - cy="17.254999" - rx="0.015" - ry="0.015" - id="ellipse1020" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3249998" - cy="17.254999" - rx="0.015" - ry="0.015" - id="ellipse1022" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3249998" - cy="17.254999" - rx="0.015" - ry="0.015" - id="ellipse1024" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="17.254999" - rx="0.015" - ry="0.015" - id="ellipse1026" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="17.254999" - rx="0.015" - ry="0.015" - id="ellipse1028" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1789999" - cy="17.316" - rx="0.015" - ry="0.015" - id="ellipse1030" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1789999" - cy="17.316" - rx="0.015" - ry="0.015" - id="ellipse1032" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3249998" - cy="17.316" - rx="0.015" - ry="0.015" - id="ellipse1034" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3249998" - cy="17.316" - rx="0.015" - ry="0.015" - id="ellipse1036" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="17.316" - rx="0.015" - ry="0.015" - id="ellipse1038" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="17.316" - rx="0.015" - ry="0.015" - id="ellipse1040" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.6170001" - cy="17.146" - rx="0.183" - ry="0.057999998" - id="ellipse1042" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.6170001" - cy="17.146" - rx="0.183" - ry="0.057999998" - id="ellipse1044" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.9829998" - cy="17.146" - rx="0.183" - ry="0.057999998" - id="ellipse1046" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.9829998" - cy="17.146" - rx="0.183" - ry="0.057999998" - id="ellipse1048" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.112" - height="0.83399999" - x="10.473" - y="16.257999" - id="rect1050" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="10.473" - y="16.257999" - id="rect1052" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="10.593" - y="16.378" - id="rect1054" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="10.623,17.091 11.195,17.091 11.195,17.221 10.653,17.221 10.623,17.091 " - id="polygon1056" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.623,17.091 11.195,17.091 11.195,17.221 10.653,17.221 10.623,17.091 " - id="polygon1058" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="11.195,17.091 11.434,17.091 11.404,17.221 11.195,17.221 11.195,17.091 " - id="polygon1060" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="11.195,17.091 11.434,17.091 11.404,17.221 11.195,17.221 11.195,17.091 " - id="polygon1062" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="11.234" - y="17.129999" - id="rect1064" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="11.234" - y="17.129999" - id="rect1066" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="10.917,17.221 11.139,17.221 11.139,17.286 11.251,17.286 11.251,17.351 10.806,17.351 10.806,17.286 10.917,17.286 10.917,17.221 " - id="polygon1068" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.917,17.221 11.139,17.221 11.139,17.286 11.251,17.286 11.251,17.351 10.806,17.351 10.806,17.286 10.917,17.286 10.917,17.221 " - id="polygon1070" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="8.2729998" - y="16.282" - id="rect1072" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="8.2729998" - y="16.282" - id="rect1074" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="8.3929996" - y="16.403" - id="rect1076" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="8.423,17.116 8.995,17.116 8.995,17.246 8.453,17.246 8.423,17.116 " - id="polygon1078" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.423,17.116 8.995,17.116 8.995,17.246 8.453,17.246 8.423,17.116 " - id="polygon1080" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.995,17.116 9.234,17.116 9.204,17.246 8.995,17.246 8.995,17.116 " - id="polygon1082" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.995,17.116 9.234,17.116 9.204,17.246 8.995,17.246 8.995,17.116 " - id="polygon1084" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="9.0340004" - y="17.155001" - id="rect1086" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="9.0340004" - y="17.155001" - id="rect1088" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.717,17.246 8.939,17.246 8.939,17.311 9.051,17.311 9.051,17.376 8.606,17.376 8.606,17.311 8.717,17.311 8.717,17.246 " - id="polygon1090" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.717,17.246 8.939,17.246 8.939,17.311 9.051,17.311 9.051,17.376 8.606,17.376 8.606,17.311 8.717,17.311 8.717,17.246 " - id="polygon1092" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.53" - height="1.35" - x="0.51999998" - y="16.433001" - id="rect1094" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="1.285" - cy="17.783001" - rx="0.76499999" - ry="0.22499999" - id="ellipse1096" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.285" - cy="16.433001" - rx="0.76499999" - ry="0.22499999" - id="ellipse1098" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.285" - cy="16.433001" - rx="0.76499999" - ry="0.22499999" - id="ellipse1100" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 2.051,16.433 L 2.051,17.783 C 2.051,17.907 1.708,18.008 1.285,18.008 C 0.863,18.008 0.52,17.907 0.52,17.783 L 0.52,16.433" - id="path1102" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="1.998" - y1="16.832001" - x2="3.1719999" - y2="16.832001" - stroke="#000000" - stroke-width="0.100" - id="line1104" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.97399998" - y="17.322001" - id="text1106" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="2.102" - y="13.872" - id="text1108" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">router</text> - <text - x="6.6999998" - y="14.915" - id="text1110" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 172.16.4.0/22</text> - <text - x="0.42899999" - y="15.372" - id="text1112" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="1.13" - y="15.972" - id="text1114" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG1</text> - <text - x="9.4289999" - y="20.072001" - id="text1116" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">50 Users</text> - <text - x="22.027" - y="20.183001" - id="text1118" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">150 Users</text> - <text - x="18.612" - y="11.758" - id="text1120" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">300 Users</text> - <text - x="0.22499999" - y="20.048" - id="text1122" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Accounting</text> - <text - x="14.062" - y="20.108" - id="text1124" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Financial Services</text> - <text - x="15.152" - y="4.408" - id="text1126" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Property Insurance Group</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap6-net.png b/docs/htmldocs/Samba3-ByExample/images/chap6-net.png Binary files differdeleted file mode 100644 index 52e386ef35..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap6-net.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap6-net.svg b/docs/htmldocs/Samba3-ByExample/images/chap6-net.svg deleted file mode 100644 index 6cabfad842..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap6-net.svg +++ /dev/null @@ -1,3714 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="25.25cm" - height="17.834999cm" - viewBox="-0.157 2.112 25.093 19.947" - id="svg2"> - <defs - id="defs1143" /> - <rect - width="16.360001" - height="9.5100002" - x="5.6950002" - y="2.1370001" - id="rect4" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 5.695,2.137 C 5.5293146,2.137 5.395,2.2713146 5.395,2.437" - id="path6" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.355,2.437 C 22.355,2.2713146 22.220685,2.137 22.055,2.137" - id="path8" - style="fill:#ebebeb;stroke:none" /> - <rect - width="16.959999" - height="8.9099998" - x="5.395" - y="2.437" - id="rect10" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 5.395,11.347 C 5.395,11.512685 5.5293146,11.647 5.695,11.647" - id="path12" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.055,11.647 C 22.220685,11.647 22.355,11.512685 22.355,11.347" - id="path14" - style="fill:#ebebeb;stroke:none" /> - <line - x1="5.6950002" - y1="2.1370001" - x2="22.055" - y2="2.1370001" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="5.6950002" - y1="11.647" - x2="22.055" - y2="11.647" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 5.695,2.137 C 5.5293146,2.137 5.395,2.2713146 5.395,2.437" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.355,2.437 C 22.355,2.2713146 22.220685,2.137 22.055,2.137" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="5.395" - y1="2.437" - x2="5.395" - y2="11.347" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="22.355" - y1="2.437" - x2="22.355" - y2="11.347" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 5.395,11.347 C 5.395,11.512685 5.5293146,11.647 5.695,11.647" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.055,11.647 C 22.220685,11.647 22.355,11.512685 22.355,11.347" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="11.6" - height="7.875" - x="13.168" - y="12.047" - id="rect32" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 13.168,12.047 C 13.002315,12.047 12.868,12.181315 12.868,12.347" - id="path34" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 25.068,12.347 C 25.068,12.181315 24.933685,12.047 24.768,12.047" - id="path36" - style="fill:#ebebeb;stroke:none" /> - <rect - width="12.2" - height="7.2750001" - x="12.868" - y="12.347" - id="rect38" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.868,19.622 C 12.868,19.787685 13.002315,19.922 13.168,19.922" - id="path40" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 24.768,19.922 C 24.933685,19.922 25.068,19.787685 25.068,19.622" - id="path42" - style="fill:#ebebeb;stroke:none" /> - <line - x1="13.168" - y1="12.047" - x2="24.768" - y2="12.047" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="13.168" - y1="19.922001" - x2="24.768" - y2="19.922001" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 13.168,12.047 C 13.002315,12.047 12.868,12.181315 12.868,12.347" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 25.068,12.347 C 25.068,12.181315 24.933685,12.047 24.768,12.047" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="12.868" - y1="12.347" - x2="12.868" - y2="19.622" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="25.068001" - y1="12.347" - x2="25.068001" - y2="19.622" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.868,19.622 C 12.868,19.787685 13.002315,19.922 13.168,19.922" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 24.768,19.922 C 24.933685,19.922 25.068,19.787685 25.068,19.622" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="11.225" - height="7.8499999" - x="0.168" - y="12.047" - id="rect60" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.168,12.047 C 0.0023145751,12.047 -0.132,12.181315 -0.132,12.347" - id="path62" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.693,12.347 C 11.693,12.181315 11.558685,12.047 11.393,12.047" - id="path64" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.825" - height="7.25" - x="-0.132" - y="12.347" - id="rect66" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -0.132,19.597 C -0.132,19.762685 0.0023145751,19.897 0.168,19.897" - id="path68" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.393,19.897 C 11.558685,19.897 11.693,19.762685 11.693,19.597" - id="path70" - style="fill:#ebebeb;stroke:none" /> - <line - x1="0.168" - y1="12.047" - x2="11.393" - y2="12.047" - stroke="#000000" - stroke-width="0.050" - id="line72" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.168" - y1="19.896999" - x2="11.393" - y2="19.896999" - stroke="#000000" - stroke-width="0.050" - id="line74" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.168,12.047 C 0.0023145751,12.047 -0.132,12.181315 -0.132,12.347" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.693,12.347 C 11.693,12.181315 11.558685,12.047 11.393,12.047" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-0.132" - y1="12.347" - x2="-0.132" - y2="19.597" - stroke="#000000" - stroke-width="0.050" - id="line80" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.693" - y1="12.347" - x2="11.693" - y2="19.597" - stroke="#000000" - stroke-width="0.050" - id="line82" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.132,19.597 C -0.132,19.762685 0.0023145751,19.897 0.168,19.897" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.393,19.897 C 11.558685,19.897 11.693,19.762685 11.693,19.597" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.138,4.153 C 0.732,4.143 -0.057,4.345 0.054,4.777 C 0.165,5.209 0.695,5.305 0.917,5.18 C 1.138,5.055 0.571,5.785 1.656,5.977 C 2.741,6.169 3.295,5.861 3.135,5.641 C 2.975,5.42 4.084,6.159 4.602,5.737 C 5.119,5.314 4.072,4.911 4.293,4.969 C 4.515,5.026 5.193,4.95 4.971,4.23 C 4.749,3.51 2.753,4.067 2.975,3.961 C 3.197,3.855 2.642,3.328 1.952,3.433 C 1.262,3.539 1.213,3.73 1.139,4.153 L 1.138,4.153" - id="path88" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 1.138,4.153 C 0.732,4.143 -0.057,4.345 0.054,4.777 C 0.165,5.209 0.695,5.305 0.917,5.18 C 1.138,5.055 0.571,5.785 1.656,5.977 C 2.741,6.169 3.295,5.861 3.135,5.641 C 2.975,5.42 4.084,6.159 4.602,5.737 C 5.119,5.314 4.072,4.911 4.293,4.969 C 4.515,5.026 5.193,4.95 4.971,4.23 C 4.749,3.51 2.753,4.067 2.975,3.961 C 3.197,3.855 2.642,3.328 1.952,3.433 C 1.262,3.539 1.213,3.73 1.139,4.153 L 1.138,4.153" - id="path90" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="2.1010001" - y="4.848" - id="text92" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <rect - width="1.054" - height="2.1070001" - x="5.7290001" - y="6.2870002" - id="rect94" - style="fill:#ff0000;stroke:none;stroke-width:0" /> - <polygon - points="5.729,6.287 6.783,6.287 6.915,6.156 5.861,6.156 5.729,6.287 " - id="polygon96" - style="fill:#ff0000;stroke:none;stroke-width:0.1" /> - <polygon - points="6.783,6.287 6.915,6.156 6.915,8.263 6.783,8.394 6.783,6.287 " - id="polygon98" - style="fill:#ff0000;stroke:none;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="6.4980001" - x2="6.783" - y2="6.4980001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line100" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="6.3660002" - x2="6.783" - y2="6.4980001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line102" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="6.2870002" - x2="6.0450001" - y2="6.4980001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line104" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="6.2870002" - x2="6.177" - y2="6.1560001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line106" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="6.9190001" - x2="6.783" - y2="6.9190001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line108" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="6.7880001" - x2="6.783" - y2="6.9190001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line110" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.467" - y1="6.4980001" - x2="6.467" - y2="6.9190001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line112" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="7.3410001" - x2="6.783" - y2="7.3410001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line114" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="7.2090001" - x2="6.783" - y2="7.3410001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line116" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="6.9190001" - x2="6.0450001" - y2="7.3410001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line118" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="7.7620001" - x2="6.783" - y2="7.7620001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line120" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="7.631" - x2="6.783" - y2="7.7620001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line122" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.467" - y1="7.3410001" - x2="6.467" - y2="7.7620001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line124" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="8.184" - x2="6.783" - y2="8.184" - stroke="#FFFFFF" - stroke-width="0.100" - id="line126" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.915" - y1="8.052" - x2="6.783" - y2="8.184" - stroke="#FFFFFF" - stroke-width="0.100" - id="line128" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.0450001" - y1="7.7620001" - x2="6.0450001" - y2="8.184" - stroke="#FFFFFF" - stroke-width="0.100" - id="line130" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="6.467" - y1="8.184" - x2="6.467" - y2="8.3940001" - stroke="#FFFFFF" - stroke-width="0.100" - id="line132" - style="stroke:#ffffff;stroke-width:0.1" /> - <line - x1="5.7290001" - y1="6.2870002" - x2="6.783" - y2="6.2870002" - stroke="#000000" - stroke-width="0.050" - id="line134" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="6.783" - y1="8.3940001" - x2="6.783" - y2="6.2870002" - stroke="#000000" - stroke-width="0.050" - id="line136" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="6.783" - y1="6.2870002" - x2="6.915" - y2="6.1560001" - stroke="#000000" - stroke-width="0.050" - id="line138" - style="stroke:#000000;stroke-width:0.05" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.050" - points="5.729,6.287 5.861,6.156 6.915,6.156 6.915,8.263 6.783,8.394 5.729,8.394 5.729,6.287 " - id="polyline140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="2.0050001" - height="6.0149999" - x="8.4580002" - y="4.1360002" - id="rect142" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="2.0050001" - height="6.0149999" - x="8.4580002" - y="4.1360002" - id="rect144" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.0050001" - height="6.0149999" - x="8.4580002" - y="4.1360002" - id="rect146" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.604" - height="2.4059999" - x="8.6590004" - y="4.3369999" - id="rect148" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.604" - height="2.4059999" - x="8.6590004" - y="4.3369999" - id="rect150" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.604" - height="2.4059999" - x="8.6590004" - y="4.3369999" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="4.7379999" - x2="10.263" - y2="4.7379999" - stroke="#000000" - stroke-width="0.010" - id="line154" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.263" - y1="5.1389999" - x2="8.6590004" - y2="5.1389999" - stroke="#000000" - stroke-width="0.010" - id="line156" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="5.54" - x2="10.263" - y2="5.54" - stroke="#000000" - stroke-width="0.010" - id="line158" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="5.941" - x2="10.263" - y2="5.941" - stroke="#000000" - stroke-width="0.010" - id="line160" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.263" - y1="6.342" - x2="8.6590004" - y2="6.342" - stroke="#000000" - stroke-width="0.010" - id="line162" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="1.103" - height="0.60100001" - x="8.6590004" - y="6.9429998" - id="rect164" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.103" - height="0.60100001" - x="8.6590004" - y="6.9429998" - id="rect166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.103" - height="0.60100001" - x="8.6590004" - y="6.9429998" - id="rect168" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.4580002" - y1="7.9460001" - x2="10.463" - y2="7.9460001" - stroke="#000000" - stroke-width="0.010" - id="line170" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.1" - height="0.1" - x="9.3610001" - y="8.1459999" - id="rect172" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.1" - height="0.1" - x="9.3610001" - y="8.1459999" - id="rect174" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.1" - height="0.1" - x="9.3610001" - y="8.1459999" - id="rect176" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.1" - height="0.1" - x="9.7620001" - y="8.1459999" - id="rect178" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.1" - height="0.1" - x="9.7620001" - y="8.1459999" - id="rect180" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.1" - height="0.1" - x="9.7620001" - y="8.1459999" - id="rect182" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.1" - height="0.1" - x="10.163" - y="8.1459999" - id="rect184" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.1" - height="0.1" - x="10.163" - y="8.1459999" - id="rect186" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.1" - height="0.1" - x="10.163" - y="8.1459999" - id="rect188" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.2" - height="0.2" - x="10.062" - y="7.5450001" - id="rect190" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.2" - height="0.2" - x="10.062" - y="7.5450001" - id="rect192" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.2" - height="0.2" - x="10.062" - y="7.5450001" - id="rect194" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.6590004" - y1="7.244" - x2="9.7620001" - y2="7.244" - stroke="#000000" - stroke-width="0.010" - id="line196" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.301" - height="0.301" - x="8.6590004" - y="8.0459995" - id="rect198" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.301" - height="0.301" - x="8.6590004" - y="8.0459995" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.301" - height="0.301" - x="8.6590004" - y="8.0459995" - id="rect202" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.403" - height="0.1" - x="8.7589998" - y="6.4419999" - id="rect204" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.403" - height="0.1" - x="8.7589998" - y="6.4419999" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.403" - height="0.1" - x="8.7589998" - y="6.4419999" - id="rect208" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.7589998" - y1="7.0430002" - x2="9.6610003" - y2="7.0430002" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.6610003" - y1="7.1440001" - x2="9.5609999" - y2="7.1440001" - stroke="#000000" - stroke-width="0.010" - id="line212" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.7589998" - y1="7.1440001" - x2="8.8590002" - y2="7.1440001" - stroke="#000000" - stroke-width="0.010" - id="line214" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.50099999" - height="0.1" - x="8.96" - y="7.0430002" - id="rect216" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.50099999" - height="0.1" - x="8.96" - y="7.0430002" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.50099999" - height="0.1" - x="8.96" - y="7.0430002" - id="rect220" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.7589998" - y1="6.6420002" - x2="8.8590002" - y2="6.6420002" - stroke="#000000" - stroke-width="0.010" - id="line222" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.96" - y1="6.6420002" - x2="9.0600004" - y2="6.6420002" - stroke="#000000" - stroke-width="0.010" - id="line224" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.9619999" - y1="6.6420002" - x2="10.163" - y2="6.6420002" - stroke="#000000" - stroke-width="0.010" - id="line226" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="10.051" - x2="10.363" - y2="10.051" - stroke="#000000" - stroke-width="0.010" - id="line228" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.9510002" - x2="8.559" - y2="9.9510002" - stroke="#000000" - stroke-width="0.010" - id="line230" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.8500004" - x2="10.363" - y2="9.8500004" - stroke="#000000" - stroke-width="0.010" - id="line232" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.75" - x2="8.559" - y2="9.75" - stroke="#000000" - stroke-width="0.010" - id="line234" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.6499996" - x2="10.363" - y2="9.6499996" - stroke="#000000" - stroke-width="0.010" - id="line236" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.5500002" - x2="8.559" - y2="9.5500002" - stroke="#000000" - stroke-width="0.010" - id="line238" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.4490004" - x2="10.363" - y2="9.4490004" - stroke="#000000" - stroke-width="0.010" - id="line240" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.349" - x2="8.559" - y2="9.349" - stroke="#000000" - stroke-width="0.010" - id="line242" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.2489996" - x2="10.363" - y2="9.2489996" - stroke="#000000" - stroke-width="0.010" - id="line244" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="9.1490002" - x2="8.559" - y2="9.1490002" - stroke="#000000" - stroke-width="0.010" - id="line246" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="9.0480003" - x2="10.363" - y2="9.0480003" - stroke="#000000" - stroke-width="0.010" - id="line248" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="8.948" - x2="8.559" - y2="8.948" - stroke="#000000" - stroke-width="0.010" - id="line250" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="8.559" - y1="8.8479996" - x2="10.363" - y2="8.8479996" - stroke="#000000" - stroke-width="0.010" - id="line252" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.363" - y1="8.7480001" - x2="8.559" - y2="8.7480001" - stroke="#000000" - stroke-width="0.010" - id="line254" - style="stroke:#000000;stroke-width:0.01" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="2.299,6.038 2.299,7.250 5.700,7.250 5.700,7.300 " - id="polyline256" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="6.875" - y1="7.3000002" - x2="8.4250002" - y2="7.2750001" - stroke="#000000" - stroke-width="0.100" - id="line258" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.454" - height="1.283" - x="11.484" - y="4.0939999" - id="rect260" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.211" - cy="5.3759999" - rx="0.727" - ry="0.214" - id="ellipse262" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.211" - cy="4.0939999" - rx="0.727" - ry="0.214" - id="ellipse264" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.211" - cy="4.0939999" - rx="0.727" - ry="0.214" - id="ellipse266" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.938,4.094 L 12.938,5.376 C 12.938,5.494 12.613,5.59 12.211,5.59 C 11.81,5.59 11.484,5.494 11.484,5.376 L 11.484,4.094" - id="path268" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.3329999" - height="1.176" - x="11.484" - y="6.493" - id="rect270" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.15" - cy="7.6690001" - rx="0.66600001" - ry="0.19599999" - id="ellipse272" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.15" - cy="6.493" - rx="0.66600001" - ry="0.19599999" - id="ellipse274" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.15" - cy="6.493" - rx="0.66600001" - ry="0.19599999" - id="ellipse276" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.817,6.493 L 12.817,7.669 C 12.817,7.777 12.518,7.865 12.15,7.865 C 11.782,7.865 11.484,7.777 11.484,7.669 L 11.484,6.493" - id="path278" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="10.475" - y1="4.6750002" - x2="11.55" - y2="4.6750002" - stroke="#000000" - stroke-width="0.100" - id="line280" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.45" - y1="7.0250001" - x2="11.455" - y2="6.9970002" - stroke="#000000" - stroke-width="0.100" - id="line282" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.4" - y1="8.8000002" - x2="21.017" - y2="8.7969999" - stroke="#000000" - stroke-width="0.100" - id="line284" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="20.954" - y1="8.7969999" - x2="20.952999" - y2="7.9260001" - stroke="#000000" - stroke-width="0.100" - id="line286" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="15.678" - y1="8.7980003" - x2="15.678" - y2="7.9169998" - stroke="#000000" - stroke-width="0.100" - id="line288" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="15.68" - y1="8.7980003" - x2="15.68" - y2="9.8470001" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.254" - y1="8.7980003" - x2="18.253" - y2="7.9260001" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.243" - y1="8.7980003" - x2="18.243" - y2="9.8999996" - stroke="#000000" - stroke-width="0.100" - id="line294" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="20.966999" - y1="8.7969999" - x2="20.966999" - y2="9.9189997" - stroke="#000000" - stroke-width="0.100" - id="line296" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="11.825" - y="10.625" - id="rect298" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="1" - height="1" - x="11.825" - y="10.625" - id="rect300" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="11.825" - y="10.625" - id="rect302" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.387,10.787 C 12.387,11.287 12.487,11.187 11.987,11.187" - id="path304" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 12.387,10.787 C 12.387,11.287 12.487,11.187 11.987,11.187" - id="path306" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="12.435,10.865 12.385,10.765 12.335,10.865 12.435,10.865 " - id="polygon308" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.435,10.865 12.385,10.765 12.335,10.865 12.435,10.865 " - id="polygon310" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="12.065,11.135 11.965,11.185 12.065,11.235 12.065,11.135 " - id="polygon312" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.065,11.135 11.965,11.185 12.065,11.235 12.065,11.135 " - id="polygon314" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.684,11.068 C 12.184,11.068 12.284,10.968 12.284,11.468" - id="path316" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 12.684,11.068 C 12.184,11.068 12.284,10.968 12.284,11.468" - id="path318" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="12.595,11.115 12.695,11.065 12.595,11.015 12.595,11.115 " - id="polygon320" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.595,11.115 12.695,11.065 12.595,11.015 12.595,11.115 " - id="polygon322" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="12.225,11.385 12.275,11.485 12.325,11.385 12.225,11.385 " - id="polygon324" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="12.225,11.385 12.275,11.485 12.325,11.385 12.225,11.385 " - id="polygon326" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="12.325" - y1="8.8249998" - x2="12.325" - y2="10.625" - stroke="#000000" - stroke-width="0.100" - id="line328" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="15.15,10.178 15.095,10.201 14.93,10.615 14.93,10.823 15.012,10.892 16.228,10.892 16.311,10.823 16.311,10.615 16.145,10.201 16.09,10.178 15.15,10.178 " - id="polygon330" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="15.15,10.178 15.095,10.201 14.93,10.615 14.93,10.823 15.012,10.892 16.228,10.892 16.311,10.823 16.311,10.615 16.145,10.201 16.09,10.178 15.15,10.178 " - id="polygon332" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 14.957,10.546 L 15.012,10.569 L 16.228,10.569 L 16.283,10.546" - id="path334" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.228,10.569 L 16.311,10.615" - id="path336" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 14.93,10.615 L 15.012,10.569" - id="path338" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="15.316,9.741 15.289,10.293 15.951,10.293 15.924,9.741 15.316,9.741 " - id="polygon340" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="15.316,9.741 15.289,10.293 15.951,10.293 15.924,9.741 15.316,9.741 " - id="polygon342" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="15.206,10.293 15.15,10.454 16.09,10.454 16.034,10.293 15.206,10.293 " - id="polygon344" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="15.206,10.293 15.15,10.454 16.09,10.454 16.034,10.293 15.206,10.293 " - id="polygon346" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="15.206" - cy="10.65" - rx="0.014" - ry="0.014" - id="ellipse348" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.206" - cy="10.65" - rx="0.014" - ry="0.014" - id="ellipse350" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.344" - cy="10.65" - rx="0.014" - ry="0.014" - id="ellipse352" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.344" - cy="10.65" - rx="0.014" - ry="0.014" - id="ellipse354" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.482" - cy="10.65" - rx="0.014" - ry="0.014" - id="ellipse356" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.482" - cy="10.65" - rx="0.014" - ry="0.014" - id="ellipse358" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.206" - cy="10.708" - rx="0.014" - ry="0.014" - id="ellipse360" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.206" - cy="10.708" - rx="0.014" - ry="0.014" - id="ellipse362" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.344" - cy="10.708" - rx="0.014" - ry="0.014" - id="ellipse364" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.344" - cy="10.708" - rx="0.014" - ry="0.014" - id="ellipse366" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.482" - cy="10.708" - rx="0.014" - ry="0.014" - id="ellipse368" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.482" - cy="10.708" - rx="0.014" - ry="0.014" - id="ellipse370" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.206" - cy="10.765" - rx="0.014" - ry="0.014" - id="ellipse372" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.206" - cy="10.765" - rx="0.014" - ry="0.014" - id="ellipse374" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.344" - cy="10.765" - rx="0.014" - ry="0.014" - id="ellipse376" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.344" - cy="10.765" - rx="0.014" - ry="0.014" - id="ellipse378" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.482" - cy="10.765" - rx="0.014" - ry="0.014" - id="ellipse380" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.482" - cy="10.765" - rx="0.014" - ry="0.014" - id="ellipse382" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.206" - cy="10.823" - rx="0.014" - ry="0.014" - id="ellipse384" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.206" - cy="10.823" - rx="0.014" - ry="0.014" - id="ellipse386" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.344" - cy="10.823" - rx="0.014" - ry="0.014" - id="ellipse388" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.344" - cy="10.823" - rx="0.014" - ry="0.014" - id="ellipse390" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.482" - cy="10.823" - rx="0.014" - ry="0.014" - id="ellipse392" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="15.482" - cy="10.823" - rx="0.014" - ry="0.014" - id="ellipse394" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.62" - cy="10.661" - rx="0.17299999" - ry="0.055" - id="ellipse396" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="15.62" - cy="10.661" - rx="0.17299999" - ry="0.055" - id="ellipse398" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="15.965" - cy="10.661" - rx="0.17299999" - ry="0.055" - id="ellipse400" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="15.965" - cy="10.661" - rx="0.17299999" - ry="0.055" - id="ellipse402" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.112" - height="0.83399999" - x="15.122" - y="6.8239999" - id="rect404" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="15.122" - y="6.8239999" - id="rect406" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="15.242" - y="6.9439998" - id="rect408" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="15.272,7.657 15.844,7.657 15.844,7.787 15.302,7.787 15.272,7.657 " - id="polygon410" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.272,7.657 15.844,7.657 15.844,7.787 15.302,7.787 15.272,7.657 " - id="polygon412" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="15.844,7.657 16.083,7.657 16.053,7.787 15.844,7.787 15.844,7.657 " - id="polygon414" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.844,7.657 16.083,7.657 16.053,7.787 15.844,7.787 15.844,7.657 " - id="polygon416" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.883" - y="7.6960001" - id="rect418" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.883" - y="7.6960001" - id="rect420" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="15.566,7.787 15.789,7.787 15.789,7.852 15.9,7.852 15.9,7.917 15.455,7.917 15.455,7.852 15.566,7.852 15.566,7.787 " - id="polygon422" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.566,7.787 15.789,7.787 15.789,7.852 15.9,7.852 15.9,7.917 15.455,7.917 15.455,7.852 15.566,7.852 15.566,7.787 " - id="polygon424" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="17.698" - y="6.8319998" - id="rect426" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="17.698" - y="6.8319998" - id="rect428" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="17.818001" - y="6.9530001" - id="rect430" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="17.848,7.666 18.42,7.666 18.42,7.796 17.878,7.796 17.848,7.666 " - id="polygon432" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.848,7.666 18.42,7.666 18.42,7.796 17.878,7.796 17.848,7.666 " - id="polygon434" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.42,7.666 18.659,7.666 18.629,7.796 18.42,7.796 18.42,7.666 " - id="polygon436" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.42,7.666 18.659,7.666 18.629,7.796 18.42,7.796 18.42,7.666 " - id="polygon438" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.459" - y="7.7049999" - id="rect440" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.459" - y="7.7049999" - id="rect442" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.142,7.796 18.364,7.796 18.364,7.861 18.476,7.861 18.476,7.926 18.031,7.926 18.031,7.861 18.142,7.861 18.142,7.796 " - id="polygon444" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.142,7.796 18.364,7.796 18.364,7.861 18.476,7.861 18.476,7.926 18.031,7.926 18.031,7.861 18.142,7.861 18.142,7.796 " - id="polygon446" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="6.8319998" - id="rect448" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="6.8319998" - id="rect450" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="20.518" - y="6.9530001" - id="rect452" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="20.548,7.666 21.12,7.666 21.12,7.796 20.578,7.796 20.548,7.666 " - id="polygon454" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.548,7.666 21.12,7.666 21.12,7.796 20.578,7.796 20.548,7.666 " - id="polygon456" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="21.12,7.666 21.359,7.666 21.329,7.796 21.12,7.796 21.12,7.666 " - id="polygon458" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="21.12,7.666 21.359,7.666 21.329,7.796 21.12,7.796 21.12,7.666 " - id="polygon460" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="7.7049999" - id="rect462" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="7.7049999" - id="rect464" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="20.842,7.796 21.064,7.796 21.064,7.861 21.176,7.861 21.176,7.926 20.731,7.926 20.731,7.861 20.842,7.861 20.842,7.796 " - id="polygon466" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.842,7.796 21.064,7.796 21.064,7.861 21.176,7.861 21.176,7.926 20.731,7.926 20.731,7.861 20.842,7.861 20.842,7.796 " - id="polygon468" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="17.673" - y="9.9320002" - id="rect470" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="17.673" - y="9.9320002" - id="rect472" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="17.792999" - y="10.053" - id="rect474" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="17.823,10.766 18.395,10.766 18.395,10.896 17.853,10.896 17.823,10.766 " - id="polygon476" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.823,10.766 18.395,10.766 18.395,10.896 17.853,10.896 17.823,10.766 " - id="polygon478" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.395,10.766 18.634,10.766 18.604,10.896 18.395,10.896 18.395,10.766 " - id="polygon480" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.395,10.766 18.634,10.766 18.604,10.896 18.395,10.896 18.395,10.766 " - id="polygon482" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.434" - y="10.805" - id="rect484" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="18.434" - y="10.805" - id="rect486" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.117,10.896 18.339,10.896 18.339,10.961 18.451,10.961 18.451,11.026 18.006,11.026 18.006,10.961 18.117,10.961 18.117,10.896 " - id="polygon488" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.117,10.896 18.339,10.896 18.339,10.961 18.451,10.961 18.451,11.026 18.006,11.026 18.006,10.961 18.117,10.961 18.117,10.896 " - id="polygon490" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="9.8830004" - id="rect492" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="20.398001" - y="9.8830004" - id="rect494" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="20.518" - y="10.003" - id="rect496" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="20.548,10.716 21.12,10.716 21.12,10.846 20.578,10.846 20.548,10.716 " - id="polygon498" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.548,10.716 21.12,10.716 21.12,10.846 20.578,10.846 20.548,10.716 " - id="polygon500" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="21.12,10.716 21.359,10.716 21.329,10.846 21.12,10.846 21.12,10.716 " - id="polygon502" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="21.12,10.716 21.359,10.716 21.329,10.846 21.12,10.846 21.12,10.716 " - id="polygon504" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="10.755" - id="rect506" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="21.159" - y="10.755" - id="rect508" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="20.842,10.846 21.064,10.846 21.064,10.911 21.176,10.911 21.176,10.976 20.731,10.976 20.731,10.911 20.842,10.911 20.842,10.846 " - id="polygon510" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.842,10.846 21.064,10.846 21.064,10.911 21.176,10.911 21.176,10.976 20.731,10.976 20.731,10.911 20.842,10.911 20.842,10.846 " - id="polygon512" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1" - height="1" - x="18.872" - y="12.033" - id="rect514" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="1" - height="1" - x="18.872" - y="12.033" - id="rect516" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="18.872" - y="12.033" - id="rect518" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 19.434,12.194 C 19.434,12.694 19.534,12.594 19.034,12.594" - id="path520" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 19.434,12.194 C 19.434,12.694 19.534,12.594 19.034,12.594" - id="path522" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="19.482,12.273 19.432,12.173 19.383,12.273 19.482,12.273 " - id="polygon524" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.482,12.273 19.432,12.173 19.383,12.273 19.482,12.273 " - id="polygon526" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="19.112,12.543 19.012,12.593 19.112,12.643 19.112,12.543 " - id="polygon528" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.112,12.543 19.012,12.593 19.112,12.643 19.112,12.543 " - id="polygon530" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 19.731,12.476 C 19.231,12.476 19.331,12.376 19.331,12.876" - id="path532" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 19.731,12.476 C 19.231,12.476 19.331,12.376 19.331,12.876" - id="path534" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="19.642,12.523 19.742,12.473 19.642,12.423 19.642,12.523 " - id="polygon536" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.642,12.523 19.742,12.473 19.642,12.423 19.642,12.523 " - id="polygon538" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="19.272,12.793 19.322,12.893 19.372,12.793 19.272,12.793 " - id="polygon540" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.272,12.793 19.322,12.893 19.372,12.793 19.272,12.793 " - id="polygon542" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="3.1470001" - y="12.082" - id="rect544" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="1" - height="1" - x="3.1470001" - y="12.082" - id="rect546" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1" - height="1" - x="3.1470001" - y="12.082" - id="rect548" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.709,12.244 C 3.709,12.744 3.809,12.644 3.309,12.644" - id="path550" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 3.709,12.244 C 3.709,12.744 3.809,12.644 3.309,12.644" - id="path552" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.757,12.322 3.708,12.223 3.657,12.322 3.757,12.322 " - id="polygon554" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="3.757,12.322 3.708,12.223 3.657,12.322 3.757,12.322 " - id="polygon556" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="3.388,12.592 3.288,12.643 3.388,12.692 3.388,12.592 " - id="polygon558" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="3.388,12.592 3.288,12.643 3.388,12.692 3.388,12.592 " - id="polygon560" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 4.006,12.526 C 3.506,12.526 3.606,12.426 3.606,12.926" - id="path562" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 4.006,12.526 C 3.506,12.526 3.606,12.426 3.606,12.926" - id="path564" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="3.917,12.572 4.018,12.522 3.917,12.473 3.917,12.572 " - id="polygon566" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="3.917,12.572 4.018,12.522 3.917,12.473 3.917,12.572 " - id="polygon568" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="3.547,12.842 3.598,12.942 3.647,12.842 3.547,12.842 " - id="polygon570" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="3.547,12.842 3.598,12.942 3.647,12.842 3.547,12.842 " - id="polygon572" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="12.025,11.650 12.025,12.525 4.147,12.525 4.147,12.582 " - id="polyline574" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="12.625,11.600 12.625,12.525 18.872,12.525 18.872,12.533 " - id="polyline576" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="3.599" - y1="14.358" - x2="10.802" - y2="14.35" - stroke="#000000" - stroke-width="0.100" - id="line578" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="3.6489999" - y1="14.357" - x2="3.6500001" - y2="15.35" - stroke="#000000" - stroke-width="0.100" - id="line580" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="3.6489999" - y1="14.357" - x2="3.6470001" - y2="13.082" - stroke="#000000" - stroke-width="0.100" - id="line582" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.2719998" - y1="14.355" - x2="6.2729998" - y2="15.321" - stroke="#000000" - stroke-width="0.100" - id="line584" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="7.783" - y1="14.353" - x2="7.783" - y2="14.368" - stroke="#000000" - stroke-width="0.100" - id="line586" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.4709997" - y1="14.353" - x2="8.4729996" - y2="15.393" - stroke="#000000" - stroke-width="0.100" - id="line588" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.752" - y1="14.35" - x2="10.754" - y2="15.35" - stroke="#000000" - stroke-width="0.100" - id="line590" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="13.775" - y1="14.325" - x2="21.35" - y2="14.325" - stroke="#000000" - stroke-width="0.100" - id="line592" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="15.593" - y1="14.325" - x2="15.593" - y2="15.325" - stroke="#000000" - stroke-width="0.100" - id="line594" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="13.825" - y1="14.325" - x2="13.825" - y2="15.325" - stroke="#000000" - stroke-width="0.100" - id="line596" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.479" - y1="14.325" - x2="17.479" - y2="15.325" - stroke="#000000" - stroke-width="0.100" - id="line598" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.372" - y1="14.325" - x2="19.372" - y2="13.033" - stroke="#000000" - stroke-width="0.100" - id="line600" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.379999" - y1="14.325" - x2="19.379999" - y2="15.322" - stroke="#000000" - stroke-width="0.100" - id="line602" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="21.299999" - y1="14.325" - x2="21.299999" - y2="15.375" - stroke="#000000" - stroke-width="0.100" - id="line604" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.6670001" - height="2.5" - x="2.8169999" - y="15.35" - id="rect606" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.6670001" - height="2.5" - x="2.8169999" - y="15.35" - id="rect608" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.6670001" - height="2.5" - x="2.8169999" - y="15.35" - id="rect610" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.3329999" - height="1" - x="2.9000001" - y="15.433" - id="rect612" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.3329999" - height="1" - x="2.9000001" - y="15.433" - id="rect614" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.3329999" - height="1" - x="2.9000001" - y="15.433" - id="rect616" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.9000001" - y1="15.767" - x2="4.2329998" - y2="15.767" - stroke="#000000" - stroke-width="0.010" - id="line618" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.2329998" - y1="16.1" - x2="2.9000001" - y2="16.1" - stroke="#000000" - stroke-width="0.010" - id="line620" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.917" - height="0.5" - x="3.0669999" - y="16.517" - id="rect622" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.917" - height="0.5" - x="3.0669999" - y="16.517" - id="rect624" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.917" - height="0.5" - x="3.0669999" - y="16.517" - id="rect626" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.8169999" - y1="17.267" - x2="4.4829998" - y2="17.267" - stroke="#000000" - stroke-width="0.010" - id="line628" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="3.983" - y="17.1" - id="rect630" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="3.983" - y="17.1" - id="rect632" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="3.983" - y="17.1" - id="rect634" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.1500001" - y="17.1" - id="rect636" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.1500001" - y="17.1" - id="rect638" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.1500001" - y="17.1" - id="rect640" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.3169999" - y="17.1" - id="rect642" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.3169999" - y="17.1" - id="rect644" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="4.3169999" - y="17.1" - id="rect646" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.167" - height="0.167" - x="4.2329998" - y="16.85" - id="rect648" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.167" - height="0.167" - x="4.2329998" - y="16.85" - id="rect650" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.167" - height="0.167" - x="4.2329998" - y="16.85" - id="rect652" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.0669999" - y1="16.767" - x2="3.983" - y2="16.767" - stroke="#000000" - stroke-width="0.010" - id="line654" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.25" - height="0.25" - x="4.1500001" - y="16.517" - id="rect656" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.25" - height="0.25" - x="4.1500001" - y="16.517" - id="rect658" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.25" - height="0.25" - x="4.1500001" - y="16.517" - id="rect660" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.1670001" - height="0.082999997" - x="2.983" - y="16.183001" - id="rect662" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.1670001" - height="0.082999997" - x="2.983" - y="16.183001" - id="rect664" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1670001" - height="0.082999997" - x="2.983" - y="16.183001" - id="rect666" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.1500001" - y1="16.6" - x2="3.9000001" - y2="16.6" - stroke="#000000" - stroke-width="0.010" - id="line668" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.417" - height="0.082999997" - x="3.3169999" - y="16.6" - id="rect670" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.417" - height="0.082999997" - x="3.3169999" - y="16.6" - id="rect672" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.417" - height="0.082999997" - x="3.3169999" - y="16.6" - id="rect674" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.983" - y1="16.35" - x2="4.1500001" - y2="16.35" - stroke="#000000" - stroke-width="0.010" - id="line676" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.9000001" - y1="17.35" - x2="4.4000001" - y2="17.35" - stroke="#000000" - stroke-width="0.010" - id="line678" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.4000001" - y1="17.433001" - x2="2.9000001" - y2="17.433001" - stroke="#000000" - stroke-width="0.010" - id="line680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.9000001" - y1="17.517" - x2="4.4000001" - y2="17.517" - stroke="#000000" - stroke-width="0.010" - id="line682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.4000001" - y1="17.767" - x2="2.9000001" - y2="17.767" - stroke="#000000" - stroke-width="0.010" - id="line684" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.9000001" - y1="17.683001" - x2="4.4000001" - y2="17.683001" - stroke="#000000" - stroke-width="0.010" - id="line686" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.4000001" - y1="17.6" - x2="2.9000001" - y2="17.6" - stroke="#000000" - stroke-width="0.010" - id="line688" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.983" - y1="16.35" - x2="3.0669999" - y2="16.35" - stroke="#000000" - stroke-width="0.010" - id="line690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.1500001" - y1="16.35" - x2="3.233" - y2="16.35" - stroke="#000000" - stroke-width="0.010" - id="line692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.1500001" - y1="16.683001" - x2="3.233" - y2="16.683001" - stroke="#000000" - stroke-width="0.010" - id="line694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.8169999" - y1="16.683001" - x2="3.9000001" - y2="16.683001" - stroke="#000000" - stroke-width="0.010" - id="line696" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="1.5" - height="3" - x="20.549999" - y="15.375" - id="rect698" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.5" - height="3" - x="20.549999" - y="15.375" - id="rect700" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.5" - height="3" - x="20.549999" - y="15.375" - id="rect702" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.2" - height="1.2" - x="20.700001" - y="15.525" - id="rect704" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.2" - height="1.2" - x="20.700001" - y="15.525" - id="rect706" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.2" - height="1.2" - x="20.700001" - y="15.525" - id="rect708" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.9" - y1="15.825" - x2="20.700001" - y2="15.825" - stroke="#000000" - stroke-width="0.010" - id="line710" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.700001" - y1="16.125" - x2="21.9" - y2="16.125" - stroke="#000000" - stroke-width="0.010" - id="line712" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.9" - y1="16.35" - x2="20.700001" - y2="16.35" - stroke="#000000" - stroke-width="0.010" - id="line714" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.82499999" - height="0.44999999" - x="20.700001" - y="16.875" - id="rect716" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.82499999" - height="0.44999999" - x="20.700001" - y="16.875" - id="rect718" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.82499999" - height="0.44999999" - x="20.700001" - y="16.875" - id="rect720" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.549999" - y1="17.4" - x2="22.049999" - y2="17.4" - stroke="#000000" - stroke-width="0.010" - id="line722" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.225" - y="17.549999" - id="rect724" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.225" - y="17.549999" - id="rect726" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.225" - y="17.549999" - id="rect728" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.525" - y="17.549999" - id="rect730" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.525" - y="17.549999" - id="rect732" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.525" - y="17.549999" - id="rect734" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.825001" - y="17.549999" - id="rect736" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.825001" - y="17.549999" - id="rect738" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.075000003" - height="0.075000003" - x="21.825001" - y="17.549999" - id="rect740" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.15000001" - height="0.075000003" - x="21.75" - y="17.1" - id="rect742" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.15000001" - height="0.075000003" - x="21.75" - y="17.1" - id="rect744" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.15000001" - height="0.075000003" - x="21.75" - y="17.1" - id="rect746" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.700001" - y1="17.1" - x2="21.525" - y2="17.1" - stroke="#000000" - stroke-width="0.010" - id="line748" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.22499999" - height="0.22499999" - x="20.700001" - y="17.475" - id="rect750" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.22499999" - height="0.22499999" - x="20.700001" - y="17.475" - id="rect752" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.22499999" - height="0.22499999" - x="20.700001" - y="17.475" - id="rect754" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.05" - height="0.075000003" - x="20.775" - y="16.424999" - id="rect756" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.05" - height="0.075000003" - x="20.775" - y="16.424999" - id="rect758" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.05" - height="0.075000003" - x="20.775" - y="16.424999" - id="rect760" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.775" - y1="16.950001" - x2="21.450001" - y2="16.950001" - stroke="#000000" - stroke-width="0.010" - id="line762" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.450001" - y1="17.025" - x2="21.375" - y2="17.025" - stroke="#000000" - stroke-width="0.010" - id="line764" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.775" - y1="17.025" - x2="20.85" - y2="17.025" - stroke="#000000" - stroke-width="0.010" - id="line766" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.375" - height="0.075000003" - x="20.924999" - y="16.950001" - id="rect768" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.375" - height="0.075000003" - x="20.924999" - y="16.950001" - id="rect770" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.375" - height="0.075000003" - x="20.924999" - y="16.950001" - id="rect772" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.775" - y1="16.575001" - x2="20.85" - y2="16.575001" - stroke="#000000" - stroke-width="0.010" - id="line774" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.924999" - y1="16.575001" - x2="21" - y2="16.575001" - stroke="#000000" - stroke-width="0.010" - id="line776" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.674999" - y1="16.575001" - x2="21.825001" - y2="16.575001" - stroke="#000000" - stroke-width="0.010" - id="line778" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.975" - y1="18.299999" - x2="20.625" - y2="18.299999" - stroke="#000000" - stroke-width="0.010" - id="line780" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.625" - y1="18.225" - x2="21.975" - y2="18.225" - stroke="#000000" - stroke-width="0.010" - id="line782" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.975" - y1="18.15" - x2="20.625" - y2="18.15" - stroke="#000000" - stroke-width="0.010" - id="line784" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.625" - y1="18.075001" - x2="21.975" - y2="18.075001" - stroke="#000000" - stroke-width="0.010" - id="line786" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.975" - y1="18" - x2="20.625" - y2="18" - stroke="#000000" - stroke-width="0.010" - id="line788" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.625" - y1="17.924999" - x2="21.975" - y2="17.924999" - stroke="#000000" - stroke-width="0.010" - id="line790" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.975" - y1="17.85" - x2="20.625" - y2="17.85" - stroke="#000000" - stroke-width="0.010" - id="line792" - style="stroke:#000000;stroke-width:0.01" /> - <polygon - points="5.796,15.735 5.738,15.759 5.562,16.197 5.562,16.416 5.65,16.489 6.935,16.489 7.023,16.416 7.023,16.197 6.847,15.759 6.789,15.735 5.796,15.735 " - id="polygon794" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="5.796,15.735 5.738,15.759 5.562,16.197 5.562,16.416 5.65,16.489 6.935,16.489 7.023,16.416 7.023,16.197 6.847,15.759 6.789,15.735 5.796,15.735 " - id="polygon796" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.592,16.124 L 5.65,16.149 L 6.935,16.149 L 6.993,16.124" - id="path798" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.935,16.149 L 7.023,16.197" - id="path800" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.562,16.197 L 5.65,16.149" - id="path802" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.971,15.273 5.942,15.857 6.643,15.857 6.614,15.273 5.971,15.273 " - id="polygon804" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="5.971,15.273 5.942,15.857 6.643,15.857 6.614,15.273 5.971,15.273 " - id="polygon806" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.854,15.857 5.796,16.027 6.789,16.027 6.731,15.857 5.854,15.857 " - id="polygon808" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="5.854,15.857 5.796,16.027 6.789,16.027 6.731,15.857 5.854,15.857 " - id="polygon810" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="5.8540001" - cy="16.233999" - rx="0.015" - ry="0.015" - id="ellipse812" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.8540001" - cy="16.233999" - rx="0.015" - ry="0.015" - id="ellipse814" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6" - cy="16.233999" - rx="0.015" - ry="0.015" - id="ellipse816" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6" - cy="16.233999" - rx="0.015" - ry="0.015" - id="ellipse818" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1459999" - cy="16.233999" - rx="0.015" - ry="0.015" - id="ellipse820" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1459999" - cy="16.233999" - rx="0.015" - ry="0.015" - id="ellipse822" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.8540001" - cy="16.295" - rx="0.015" - ry="0.015" - id="ellipse824" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.8540001" - cy="16.295" - rx="0.015" - ry="0.015" - id="ellipse826" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6" - cy="16.295" - rx="0.015" - ry="0.015" - id="ellipse828" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6" - cy="16.295" - rx="0.015" - ry="0.015" - id="ellipse830" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1459999" - cy="16.295" - rx="0.015" - ry="0.015" - id="ellipse832" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1459999" - cy="16.295" - rx="0.015" - ry="0.015" - id="ellipse834" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.8540001" - cy="16.355" - rx="0.015" - ry="0.015" - id="ellipse836" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.8540001" - cy="16.355" - rx="0.015" - ry="0.015" - id="ellipse838" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6" - cy="16.355" - rx="0.015" - ry="0.015" - id="ellipse840" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6" - cy="16.355" - rx="0.015" - ry="0.015" - id="ellipse842" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1459999" - cy="16.355" - rx="0.015" - ry="0.015" - id="ellipse844" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1459999" - cy="16.355" - rx="0.015" - ry="0.015" - id="ellipse846" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.8540001" - cy="16.416" - rx="0.015" - ry="0.015" - id="ellipse848" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.8540001" - cy="16.416" - rx="0.015" - ry="0.015" - id="ellipse850" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6" - cy="16.416" - rx="0.015" - ry="0.015" - id="ellipse852" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6" - cy="16.416" - rx="0.015" - ry="0.015" - id="ellipse854" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.1459999" - cy="16.416" - rx="0.015" - ry="0.015" - id="ellipse856" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.1459999" - cy="16.416" - rx="0.015" - ry="0.015" - id="ellipse858" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.2919998" - cy="16.246" - rx="0.183" - ry="0.057999998" - id="ellipse860" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.2919998" - cy="16.246" - rx="0.183" - ry="0.057999998" - id="ellipse862" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.658" - cy="16.246" - rx="0.183" - ry="0.057999998" - id="ellipse864" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.658" - cy="16.246" - rx="0.183" - ry="0.057999998" - id="ellipse866" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <polygon - points="18.871,15.81 18.813,15.834 18.637,16.272 18.637,16.491 18.725,16.564 20.01,16.564 20.098,16.491 20.098,16.272 19.922,15.834 19.864,15.81 18.871,15.81 " - id="polygon868" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="18.871,15.81 18.813,15.834 18.637,16.272 18.637,16.491 18.725,16.564 20.01,16.564 20.098,16.491 20.098,16.272 19.922,15.834 19.864,15.81 18.871,15.81 " - id="polygon870" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 18.667,16.199 L 18.725,16.224 L 20.01,16.224 L 20.068,16.199" - id="path872" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 20.01,16.224 L 20.098,16.272" - id="path874" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 18.637,16.272 L 18.725,16.224" - id="path876" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="19.046,15.348 19.017,15.932 19.718,15.932 19.689,15.348 19.046,15.348 " - id="polygon878" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="19.046,15.348 19.017,15.932 19.718,15.932 19.689,15.348 19.046,15.348 " - id="polygon880" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="18.929,15.932 18.871,16.102 19.864,16.102 19.806,15.932 18.929,15.932 " - id="polygon882" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="18.929,15.932 18.871,16.102 19.864,16.102 19.806,15.932 18.929,15.932 " - id="polygon884" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="18.929001" - cy="16.309" - rx="0.015" - ry="0.015" - id="ellipse886" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.929001" - cy="16.309" - rx="0.015" - ry="0.015" - id="ellipse888" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.075001" - cy="16.309" - rx="0.015" - ry="0.015" - id="ellipse890" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.075001" - cy="16.309" - rx="0.015" - ry="0.015" - id="ellipse892" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.221001" - cy="16.309" - rx="0.015" - ry="0.015" - id="ellipse894" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.221001" - cy="16.309" - rx="0.015" - ry="0.015" - id="ellipse896" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.929001" - cy="16.370001" - rx="0.015" - ry="0.015" - id="ellipse898" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.929001" - cy="16.370001" - rx="0.015" - ry="0.015" - id="ellipse900" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.075001" - cy="16.370001" - rx="0.015" - ry="0.015" - id="ellipse902" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.075001" - cy="16.370001" - rx="0.015" - ry="0.015" - id="ellipse904" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.221001" - cy="16.370001" - rx="0.015" - ry="0.015" - id="ellipse906" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.221001" - cy="16.370001" - rx="0.015" - ry="0.015" - id="ellipse908" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.929001" - cy="16.43" - rx="0.015" - ry="0.015" - id="ellipse910" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.929001" - cy="16.43" - rx="0.015" - ry="0.015" - id="ellipse912" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.075001" - cy="16.43" - rx="0.015" - ry="0.015" - id="ellipse914" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.075001" - cy="16.43" - rx="0.015" - ry="0.015" - id="ellipse916" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.221001" - cy="16.43" - rx="0.015" - ry="0.015" - id="ellipse918" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.221001" - cy="16.43" - rx="0.015" - ry="0.015" - id="ellipse920" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="18.929001" - cy="16.490999" - rx="0.015" - ry="0.015" - id="ellipse922" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="18.929001" - cy="16.490999" - rx="0.015" - ry="0.015" - id="ellipse924" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.075001" - cy="16.490999" - rx="0.015" - ry="0.015" - id="ellipse926" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.075001" - cy="16.490999" - rx="0.015" - ry="0.015" - id="ellipse928" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.221001" - cy="16.490999" - rx="0.015" - ry="0.015" - id="ellipse930" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="19.221001" - cy="16.490999" - rx="0.015" - ry="0.015" - id="ellipse932" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.367001" - cy="16.320999" - rx="0.183" - ry="0.057999998" - id="ellipse934" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="19.367001" - cy="16.320999" - rx="0.183" - ry="0.057999998" - id="ellipse936" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="19.733" - cy="16.320999" - rx="0.183" - ry="0.057999998" - id="ellipse938" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="19.733" - cy="16.320999" - rx="0.183" - ry="0.057999998" - id="ellipse940" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.112" - height="0.83399999" - x="16.948" - y="15.332" - id="rect942" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="16.948" - y="15.332" - id="rect944" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="17.068001" - y="15.453" - id="rect946" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="17.098,16.166 17.67,16.166 17.67,16.296 17.128,16.296 17.098,16.166 " - id="polygon948" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.098,16.166 17.67,16.166 17.67,16.296 17.128,16.296 17.098,16.166 " - id="polygon950" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.67,16.166 17.909,16.166 17.879,16.296 17.67,16.296 17.67,16.166 " - id="polygon952" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.67,16.166 17.909,16.166 17.879,16.296 17.67,16.296 17.67,16.166 " - id="polygon954" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="17.709" - y="16.205" - id="rect956" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="17.709" - y="16.205" - id="rect958" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="17.392,16.296 17.614,16.296 17.614,16.361 17.726,16.361 17.726,16.426 17.281,16.426 17.281,16.361 17.392,16.361 17.392,16.296 " - id="polygon960" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.392,16.296 17.614,16.296 17.614,16.361 17.726,16.361 17.726,16.426 17.281,16.426 17.281,16.361 17.392,16.361 17.392,16.296 " - id="polygon962" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="15.073" - y="15.307" - id="rect964" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="15.073" - y="15.307" - id="rect966" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="15.193" - y="15.428" - id="rect968" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="15.223,16.141 15.795,16.141 15.795,16.271 15.253,16.271 15.223,16.141 " - id="polygon970" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.223,16.141 15.795,16.141 15.795,16.271 15.253,16.271 15.223,16.141 " - id="polygon972" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="15.795,16.141 16.034,16.141 16.004,16.271 15.795,16.271 15.795,16.141 " - id="polygon974" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.795,16.141 16.034,16.141 16.004,16.271 15.795,16.271 15.795,16.141 " - id="polygon976" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.834" - y="16.18" - id="rect978" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="15.834" - y="16.18" - id="rect980" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="15.517,16.271 15.739,16.271 15.739,16.336 15.851,16.336 15.851,16.401 15.406,16.401 15.406,16.336 15.517,16.336 15.517,16.271 " - id="polygon982" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="15.517,16.271 15.739,16.271 15.739,16.336 15.851,16.336 15.851,16.401 15.406,16.401 15.406,16.336 15.517,16.336 15.517,16.271 " - id="polygon984" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="13.298" - y="15.332" - id="rect986" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="13.298" - y="15.332" - id="rect988" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="13.418" - y="15.453" - id="rect990" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="13.448,16.166 14.02,16.166 14.02,16.296 13.478,16.296 13.448,16.166 " - id="polygon992" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="13.448,16.166 14.02,16.166 14.02,16.296 13.478,16.296 13.448,16.166 " - id="polygon994" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="14.02,16.166 14.259,16.166 14.229,16.296 14.02,16.296 14.02,16.166 " - id="polygon996" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="14.02,16.166 14.259,16.166 14.229,16.296 14.02,16.296 14.02,16.166 " - id="polygon998" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="14.059" - y="16.205" - id="rect1000" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="14.059" - y="16.205" - id="rect1002" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="13.742,16.296 13.964,16.296 13.964,16.361 14.076,16.361 14.076,16.426 13.631,16.426 13.631,16.361 13.742,16.361 13.742,16.296 " - id="polygon1004" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="13.742,16.296 13.964,16.296 13.964,16.361 14.076,16.361 14.076,16.426 13.631,16.426 13.631,16.361 13.742,16.361 13.742,16.296 " - id="polygon1006" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="10.148" - y="15.357" - id="rect1008" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="10.148" - y="15.357" - id="rect1010" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="10.268" - y="15.478" - id="rect1012" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="10.298,16.191 10.87,16.191 10.87,16.321 10.328,16.321 10.298,16.191 " - id="polygon1014" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.298,16.191 10.87,16.191 10.87,16.321 10.328,16.321 10.298,16.191 " - id="polygon1016" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="10.87,16.191 11.109,16.191 11.079,16.321 10.87,16.321 10.87,16.191 " - id="polygon1018" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.87,16.191 11.109,16.191 11.079,16.321 10.87,16.321 10.87,16.191 " - id="polygon1020" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="10.909" - y="16.23" - id="rect1022" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="10.909" - y="16.23" - id="rect1024" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="10.592,16.321 10.814,16.321 10.814,16.386 10.926,16.386 10.926,16.451 10.481,16.451 10.481,16.386 10.592,16.386 10.592,16.321 " - id="polygon1026" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="10.592,16.321 10.814,16.321 10.814,16.386 10.926,16.386 10.926,16.451 10.481,16.451 10.481,16.386 10.592,16.386 10.592,16.321 " - id="polygon1028" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.112" - height="0.83399999" - x="7.948" - y="15.383" - id="rect1030" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.112" - height="0.83399999" - x="7.948" - y="15.383" - id="rect1032" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.87099999" - height="0.574" - x="8.0679998" - y="15.503" - id="rect1034" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="8.098,16.216 8.67,16.216 8.67,16.346 8.128,16.346 8.098,16.216 " - id="polygon1036" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.098,16.216 8.67,16.216 8.67,16.346 8.128,16.346 8.098,16.216 " - id="polygon1038" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.67,16.216 8.909,16.216 8.879,16.346 8.67,16.346 8.67,16.216 " - id="polygon1040" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.67,16.216 8.909,16.216 8.879,16.346 8.67,16.346 8.67,16.216 " - id="polygon1042" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.052000001" - height="0.052000001" - x="8.7089996" - y="16.254999" - id="rect1044" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.052000001" - height="0.052000001" - x="8.7089996" - y="16.254999" - id="rect1046" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.392,16.346 8.614,16.346 8.614,16.411 8.726,16.411 8.726,16.476 8.281,16.476 8.281,16.411 8.392,16.411 8.392,16.346 " - id="polygon1048" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.392,16.346 8.614,16.346 8.614,16.411 8.726,16.411 8.726,16.476 8.281,16.476 8.281,16.411 8.392,16.411 8.392,16.346 " - id="polygon1050" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="1.378" - height="1.216" - x="0.33899999" - y="15.46" - id="rect1052" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="1.028" - cy="16.676001" - rx="0.68900001" - ry="0.20299999" - id="ellipse1054" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.028" - cy="15.46" - rx="0.68900001" - ry="0.20299999" - id="ellipse1056" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.028" - cy="15.46" - rx="0.68900001" - ry="0.20299999" - id="ellipse1058" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 1.717,15.46 L 1.717,16.676 C 1.717,16.788 1.408,16.878 1.028,16.878 C 0.647,16.878 0.339,16.788 0.339,16.676 L 0.339,15.46" - id="path1060" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="1.673" - y1="15.932" - x2="2.848" - y2="15.932" - stroke="#000000" - stroke-width="0.100" - id="line1062" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.362" - height="1.202" - x="23.125999" - y="15.633" - id="rect1064" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="23.806999" - cy="16.834" - rx="0.68099999" - ry="0.2" - id="ellipse1066" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="23.806999" - cy="15.633" - rx="0.68099999" - ry="0.2" - id="ellipse1068" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="23.806999" - cy="15.633" - rx="0.68099999" - ry="0.2" - id="ellipse1070" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 24.488,15.633 L 24.488,16.834 C 24.488,16.945 24.183,17.035 23.807,17.035 C 23.431,17.035 23.126,16.945 23.126,16.834 L 23.126,15.633" - id="path1072" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="22.098" - y1="16.082001" - x2="23.062" - y2="16.047001" - stroke="#000000" - stroke-width="0.100" - id="line1074" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="11.846" - y="4.9720001" - id="text1076" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="23.485001" - y="16.497" - id="text1078" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="0.70999998" - y="16.322001" - id="text1080" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">apps</text> - <text - x="11.844" - y="7.3400002" - id="text1082" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">data</text> - <text - x="5.848" - y="8.9899998" - id="text1084" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">firewall</text> - <text - x="1.897" - y="12.74" - id="text1086" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">router</text> - <text - x="20.27" - y="12.665" - id="text1088" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">router</text> - <text - x="10.52" - y="11.465" - id="text1090" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">router</text> - <text - x="17.094999" - y="6.4029999" - id="text1092" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 172.16.0.0/22</text> - <text - x="6.4499998" - y="14.065" - id="text1094" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 172.16.4.0/22</text> - <text - x="14.906" - y="13.965" - id="text1096" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network: 172.16.8.0/24</text> - <text - x="15.58" - y="3.178" - id="text1098" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: MEGANET2</text> - <text - x="8.2959995" - y="2.983" - id="text1100" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PDC Server:</text> - <text - x="8.0710001" - y="3.5829999" - id="text1102" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">MASSIVE-PDC</text> - <text - x="1.272" - y="14.296" - id="text1104" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="0.82099998" - y="14.896" - id="text1106" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG1-BDC</text> - <text - x="22.659" - y="14.321" - id="text1108" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="22.207001" - y="14.921" - id="text1110" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-BDC</text> - <text - x="7.5240002" - y="7.9169998" - id="text1112" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth0</text> - <text - x="10.847" - y="9.3170004" - id="text1114" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">eth1</text> - <rect - width="1.432" - height="1.263" - x="13.118" - y="5.283" - id="rect1116" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="13.833" - cy="6.5469999" - rx="0.71600002" - ry="0.211" - id="ellipse1118" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.833" - cy="5.283" - rx="0.71600002" - ry="0.211" - id="ellipse1120" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.833" - cy="5.283" - rx="0.71600002" - ry="0.211" - id="ellipse1122" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 14.549,5.283 L 14.549,6.547 C 14.549,6.663 14.229,6.757 13.833,6.757 C 13.438,6.757 13.118,6.663 13.118,6.547 L 13.118,5.283" - id="path1124" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="10.473" - y1="5.9720001" - x2="13.098" - y2="5.947" - stroke="#000000" - stroke-width="0.100" - id="line1126" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="13.527" - y="6.197" - id="text1128" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">ldap</text> - <text - x="9.408" - y="19.547001" - id="text1130" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">50 Users</text> - <text - x="22.794001" - y="19.542" - id="text1132" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">150 Users</text> - <text - x="17.837999" - y="5.6919999" - id="text1134" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">300 Users</text> - <text - x="0.83999997" - y="19.539" - id="text1136" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Accounting</text> - <text - x="14.316" - y="19.514" - id="text1138" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Financial Services</text> - <text - x="15.63" - y="4.5640001" - id="text1140" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Property Insurance Group</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-idresol.png b/docs/htmldocs/Samba3-ByExample/images/chap7-idresol.png Binary files differdeleted file mode 100644 index 439a528601..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-idresol.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-idresol.svg b/docs/htmldocs/Samba3-ByExample/images/chap7-idresol.svg deleted file mode 100644 index 560658f098..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-idresol.svg +++ /dev/null @@ -1,514 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="17.290001cm" - height="13.335cm" - viewBox="23.46 19.665 40.75 33" - id="svg2"> - <defs - id="defs177" /> - <rect - width="2" - height="2" - x="29.1" - y="23" - id="rect4" - style="fill:#fff4db;stroke:none;stroke-width:0" /> - <rect - width="2" - height="2" - x="29.1" - y="23" - id="rect6" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2" - height="2" - x="32.035" - y="27.59" - id="rect8" - style="fill:#d8d8d8;stroke:none;stroke-width:0" /> - <rect - width="2" - height="2" - x="32.035" - y="27.59" - id="rect10" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2" - height="2.04" - x="29.184999" - y="27.549999" - id="rect12" - style="fill:#d0d0d0;stroke:none;stroke-width:0" /> - <rect - width="2" - height="2.04" - x="29.184999" - y="27.549999" - id="rect14" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.8399999" - height="1.735" - x="23.51" - y="23.139999" - id="rect16" - style="fill:#a9d8cb;stroke:none;stroke-width:0" /> - <rect - width="2.8399999" - height="1.735" - x="23.51" - y="23.139999" - id="rect18" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.825" - height="1.885" - x="32.674999" - y="20.940001" - id="rect20" - style="fill:#dedede;stroke:none;stroke-width:0" /> - <rect - width="2.825" - height="1.885" - x="32.674999" - y="20.940001" - id="rect22" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.6500001" - height="2.01" - x="37.799999" - y="19.715" - id="rect24" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.6500001" - height="2.01" - x="37.799999" - y="19.715" - id="rect26" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.3" - height="2.0150001" - x="38.025002" - y="22.1" - id="rect28" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.3" - height="2.0150001" - x="38.025002" - y="22.1" - id="rect30" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.25" - height="2.0599999" - x="35.150002" - y="27.565001" - id="rect32" - style="fill:#d8d8d8;stroke:none;stroke-width:0" /> - <rect - width="2.25" - height="2.0599999" - x="35.150002" - y="27.565001" - id="rect34" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="24.200001" - y="23.9" - id="text36" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Windows</text> - <text - x="24.462999" - y="24.5" - id="text38" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Client</text> - <text - x="29.659" - y="24.15" - id="text40" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">smbd</text> - <text - x="33.388" - y="22.051001" - id="text42" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">winbindd</text> - <text - x="29.76" - y="28.676001" - id="text44" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">NSS</text> - <text - x="32.653999" - y="28.775999" - id="text46" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PAM</text> - <text - x="35.763" - y="28.700001" - id="text48" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="38.696999" - y="23" - id="text50" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">W2Kx</text> - <text - x="38.805" - y="23.6" - id="text52" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">ADS</text> - <text - x="38.759998" - y="20.6" - id="text54" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">NT4</text> - <text - x="38.477001" - y="21.200001" - id="text56" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain</text> - <line - x1="26.9" - y1="24.006001" - x2="28.549999" - y2="24.000999" - stroke="#000000" - stroke-width="0.100" - id="line58" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="26.899,23.756 26.4,24.007 26.901,24.256 26.899,23.756 " - id="polygon60" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="28.551,24.251 29.05,24 28.549,23.752 28.551,24.251 " - id="polygon62" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="29.52" - y1="25.575001" - x2="29.504999" - y2="27" - stroke="#000000" - stroke-width="0.100" - id="line64" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="29.77,25.577 29.525,25.075 29.27,25.572 29.77,25.577 " - id="polygon66" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="29.255,26.998 29.5,27.5 29.755,27.003 29.255,26.998 " - id="polygon68" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="31.393999" - y1="25.190001" - x2="32.605999" - y2="27.110001" - stroke="#000000" - stroke-width="0.100" - id="line70" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="31.605,25.057 31.127,24.767 31.182,25.324 31.605,25.057 " - id="polygon72" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="32.395,27.243 32.873,27.533 32.818,26.976 32.395,27.243 " - id="polygon74" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="31.481001" - y1="23.128" - x2="32.293999" - y2="22.278999" - stroke="#000000" - stroke-width="0.100" - id="line76" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="31.3,22.955 31.135,23.489 31.661,23.301 31.3,22.955 " - id="polygon78" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="32.475,22.453 32.64,21.919 32.114,22.106 32.475,22.453 " - id="polygon80" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="31.552999" - y1="24.312" - x2="35.821999" - y2="27.253" - stroke="#000000" - stroke-width="0.100" - id="line82" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="31.695,24.106 31.141,24.028 31.411,24.518 31.695,24.106 " - id="polygon84" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="35.68,27.459 36.234,27.537 35.964,27.047 35.68,27.459 " - id="polygon86" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="36.066002" - y1="21.360001" - x2="37.284" - y2="20.91" - stroke="#000000" - stroke-width="0.100" - id="line88" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="35.979,21.125 35.597,21.533 36.153,21.594 35.979,21.125 " - id="polygon90" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="37.371,21.145 37.753,20.737 37.197,20.676 37.371,21.145 " - id="polygon92" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="36.013" - y1="22.323999" - x2="37.512001" - y2="22.908001" - stroke="#000000" - stroke-width="0.100" - id="line94" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="36.103,22.091 35.547,22.143 35.922,22.557 36.103,22.091 " - id="polygon96" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="37.422,23.141 37.978,23.089 37.603,22.675 37.422,23.141 " - id="polygon98" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <rect - width="2.95" - height="2.01" - x="37.75" - y="24.565001" - id="rect100" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.95" - height="2.01" - x="37.75" - y="24.565001" - id="rect102" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="38.654999" - y="25.424999" - id="text104" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="38.414001" - y="26.025" - id="text106" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PDC/BDC</text> - <line - x1="34.959" - y1="23.228001" - x2="37.328999" - y2="25.216999" - stroke="#000000" - stroke-width="0.100" - id="line108" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="35.12,23.037 34.576,22.907 34.798,23.42 35.12,23.037 " - id="polygon110" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="37.168,25.408 37.712,25.538 37.489,25.025 37.168,25.408 " - id="polygon112" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <rect - width="3.915" - height="1.76" - x="29.01" - y="31.190001" - id="rect114" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="3.915" - height="1.76" - x="29.01" - y="31.190001" - id="rect116" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="30.181999" - y1="30.139999" - x2="30.177999" - y2="30.65" - stroke="#000000" - stroke-width="0.100" - id="line118" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="30.432,30.142 30.185,29.64 29.932,30.138 30.432,30.142 " - id="polygon120" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="29.928,30.648 30.175,31.15 30.428,30.652 29.928,30.648 " - id="polygon122" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="31.402" - y1="30.853001" - x2="32.599998" - y2="29.927" - stroke="#000000" - stroke-width="0.100" - id="line124" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="31.249,30.656 31.007,31.159 31.555,31.051 31.249,30.656 " - id="polygon126" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="32.753,30.124 32.995,29.621 32.447,29.729 32.753,30.124 " - id="polygon128" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="34.584999" - y1="28.591999" - x2="34.599998" - y2="28.593" - stroke="#000000" - stroke-width="0.100" - id="line130" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="34.586,28.342 34.085,28.59 34.584,28.842 34.586,28.342 " - id="polygon132" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="34.599,28.843 35.1,28.595 34.601,28.343 34.599,28.843 " - id="polygon134" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <text - x="30.027" - y="31.975" - id="text136" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">/etc/passwd</text> - <text - x="30.179001" - y="32.575001" - id="text138" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">/etc/group</text> - <rect - width="2.0650001" - height="1.76" - x="33.535" - y="31.190001" - id="rect140" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.0650001" - height="1.76" - x="33.535" - y="31.190001" - id="rect142" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="34.049" - y="32.25" - id="text144" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">NIS[+]</text> - <line - x1="34.515999" - y1="30.754" - x2="33.839001" - y2="29.987" - stroke="#000000" - stroke-width="0.100" - id="line146" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="34.329,30.919 34.847,31.129 34.704,30.588 34.329,30.919 " - id="polygon148" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="34.027,29.822 33.508,29.612 33.652,30.153 34.027,29.822 " - id="polygon150" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="33.080002" - y1="30.879999" - x2="31.639999" - y2="29.9" - stroke="#000000" - stroke-width="0.100" - id="line152" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="32.94,31.087 33.494,31.162 33.221,30.674 32.94,31.087 " - id="polygon154" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="31.78,29.693 31.226,29.618 31.499,30.106 31.78,29.693 " - id="polygon156" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <path - d="M 34.773,27.172 C 33.554243,26.096992 31.732941,26.07362 30.487,27.117" - id="path158" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="30.268,26.92 30.133,27.462 30.648,27.245 30.268,26.92 " - id="polygon160" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="34.609,27.296 35.118,27.526 34.997,26.98 34.609,27.296 " - id="polygon162" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="33.568001" - y1="27.028999" - x2="34.02" - y2="23.371" - stroke="#000000" - stroke-width="0.100" - id="line164" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="33.319,26.998 33.506,27.525 33.816,27.06 33.319,26.998 " - id="polygon166" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="34.268,23.402 34.081,22.875 33.772,23.34 34.268,23.402 " - id="polygon168" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="31.264999" - y1="27.030001" - x2="33.073002" - y2="23.292" - stroke="#000000" - stroke-width="0.100" - id="line170" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="31.039,26.921 31.047,27.48 31.49,27.139 31.039,26.921 " - id="polygon172" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="33.298,23.401 33.291,22.842 32.848,23.183 33.298,23.401 " - id="polygon174" - style="fill:#000000;stroke:none;stroke-width:0.1" /> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net-A.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net-A.png Binary files differdeleted file mode 100644 index 19a7d2c5aa..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net-A.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net-A.svg b/docs/htmldocs/Samba3-ByExample/images/chap7-net-A.svg deleted file mode 100644 index 8337e5c68b..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net-A.svg +++ /dev/null @@ -1,9436 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="34.522999cm" - height="23.67cm" - viewBox="-11.471 -0.456 23.052 23.213" - id="svg2"> - <defs - id="defs2855" /> - <rect - width="13.8" - height="6.513" - x="1.375" - y="16.256001" - id="rect4" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path6" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path8" - style="fill:#ebebeb;stroke:none" /> - <rect - width="14.4" - height="5.9130001" - x="1.075" - y="16.556" - id="rect10" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path12" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path14" - style="fill:#ebebeb;stroke:none" /> - <line - x1="1.375" - y1="16.256001" - x2="15.175" - y2="16.256001" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="1.375" - y1="22.768999" - x2="15.175" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.075" - y1="16.556" - x2="1.075" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="15.475" - y1="16.556" - x2="15.475" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.617" - height="6.8530002" - x="0.495" - y="-0.40599999" - id="rect32" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path34" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path36" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.217" - height="6.2529998" - x="0.19499999" - y="-0.106" - id="rect38" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path40" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path42" - style="fill:#ebebeb;stroke:none" /> - <line - x1="0.495" - y1="-0.40599999" - x2="11.112" - y2="-0.40599999" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.495" - y1="6.447" - x2="11.112" - y2="6.447" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.19499999" - y1="-0.106" - x2="0.19499999" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.412" - y1="-0.106" - x2="11.412" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.337" - height="6.8600001" - x="12.35" - y="-0.43099999" - id="rect60" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path62" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path64" - style="fill:#ebebeb;stroke:none" /> - <rect - width="10.937" - height="6.2600002" - x="12.05" - y="-0.131" - id="rect66" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path68" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path70" - style="fill:#ebebeb;stroke:none" /> - <line - x1="12.35" - y1="-0.43099999" - x2="22.687" - y2="-0.43099999" - stroke="#000000" - stroke-width="0.050" - id="line72" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="12.35" - y1="6.4289999" - x2="22.687" - y2="6.4289999" - stroke="#000000" - stroke-width="0.050" - id="line74" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="12.05" - y1="-0.131" - x2="12.05" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line80" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="22.987" - y1="-0.131" - x2="22.987" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line82" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.821" - height="8.375" - x="11.905" - y="7.244" - id="rect88" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path90" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path92" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.421" - height="7.7750001" - x="11.605" - y="7.5440001" - id="rect94" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path96" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path98" - style="fill:#ebebeb;stroke:none" /> - <line - x1="11.905" - y1="7.244" - x2="22.726999" - y2="7.244" - stroke="#000000" - stroke-width="0.050" - id="line100" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.905" - y1="15.619" - x2="22.726999" - y2="15.619" - stroke="#000000" - stroke-width="0.050" - id="line102" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path104" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="11.605" - y1="7.5440001" - x2="11.605" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line108" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="23.027" - y1="7.5440001" - x2="23.027" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line110" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path112" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="15.1" - height="8.3719997" - x="-11" - y="7.1090002" - id="rect116" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11,7.109 C -11.165685,7.109 -11.3,7.2433146 -11.3,7.409" - id="path118" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 4.4,7.409 C 4.4,7.2433146 4.2656854,7.109 4.1,7.109" - id="path120" - style="fill:#ebebeb;stroke:none" /> - <rect - width="15.7" - height="7.7719998" - x="-11.3" - y="7.4089999" - id="rect122" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.3,15.181 C -11.3,15.346685 -11.165685,15.481 -11,15.481" - id="path124" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 4.1,15.481 C 4.2656854,15.481 4.4,15.346685 4.4,15.181" - id="path126" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11" - y1="7.1090002" - x2="4.0999999" - y2="7.1090002" - stroke="#000000" - stroke-width="0.050" - id="line128" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11" - y1="15.481" - x2="4.0999999" - y2="15.481" - stroke="#000000" - stroke-width="0.050" - id="line130" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11,7.109 C -11.165685,7.109 -11.3,7.2433146 -11.3,7.409" - id="path132" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.4,7.409 C 4.4,7.2433146 4.2656854,7.109 4.1,7.109" - id="path134" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.3" - y1="7.4089999" - x2="-11.3" - y2="15.181" - stroke="#000000" - stroke-width="0.050" - id="line136" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="4.4000001" - y1="7.4089999" - x2="4.4000001" - y2="15.181" - stroke="#000000" - stroke-width="0.050" - id="line138" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.3,15.181 C -11.3,15.346685 -11.165685,15.481 -11,15.481" - id="path140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.1,15.481 C 4.2656854,15.481 4.4,15.346685 4.4,15.181" - id="path142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.95" - y1="11.168" - x2="4.8109999" - y2="11.165" - stroke="#000000" - stroke-width="0.300" - id="line144" - style="stroke:#000000;stroke-width:0.30000001" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="4.145,2.624 4.145,6.819 5.675,6.819 5.675,9.944 " - id="polyline146" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="16.100,2.794 16.100,6.844 8.674,6.844 8.674,9.887 " - id="polyline148" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.787" - x="-1.723" - y="14.284" - id="rect150" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.787" - height="0.787" - x="-1.723" - y="14.284" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.787" - x="-1.723" - y="14.284" - id="rect154" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.28,14.411 C -1.28,14.805 -1.201,14.726 -1.595,14.726" - id="path156" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.28,14.411 C -1.28,14.805 -1.201,14.726 -1.595,14.726" - id="path158" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.242,14.473 -1.282,14.394 -1.321,14.473 -1.242,14.473 " - id="polygon160" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.242,14.473 -1.282,14.394 -1.321,14.473 -1.242,14.473 " - id="polygon162" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.534,14.685 -1.612,14.725 -1.534,14.764 -1.534,14.685 " - id="polygon164" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.534,14.685 -1.612,14.725 -1.534,14.764 -1.534,14.685 " - id="polygon166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.047,14.633 C -1.44,14.633 -1.362,14.554 -1.362,14.948" - id="path168" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.047,14.633 C -1.44,14.633 -1.362,14.554 -1.362,14.948" - id="path170" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.116,14.67 -1.038,14.63 -1.116,14.591 -1.116,14.67 " - id="polygon172" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.116,14.67 -1.038,14.63 -1.116,14.591 -1.116,14.67 " - id="polygon174" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.408,14.882 -1.368,14.961 -1.329,14.882 -1.408,14.882 " - id="polygon176" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.408,14.882 -1.368,14.961 -1.329,14.882 -1.408,14.882 " - id="polygon178" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.3" - y1="11.069" - x2="-1.329" - y2="14.284" - stroke="#000000" - stroke-width="0.100" - id="line180" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-9.0480003" - y="0.86699998" - id="text182" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="1.017" - y="13.475" - id="text184" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="0.82800001" - y="13.975" - id="text186" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GNY-PDC</text> - <line - x1="6.118" - y1="13.16" - x2="7.7179999" - y2="13.135" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.10,0.10" - id="line188" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <text - x="8.4429998" - y="13.325" - id="text190" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">= VPN</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="10.645,11.075 10.645,9.069 16.025,9.069 16.025,11.368 " - id="polyline192" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-2.9530001" - y="15.094" - id="text194" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="4.1469998" - y="17.031" - id="text196" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect198" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect202" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect204" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect208" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="2.027" - x2="3.5869999" - y2="2.027" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.5869999" - y1="2.2709999" - x2="2.6140001" - y2="2.2709999" - stroke="#000000" - stroke-width="0.010" - id="line212" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect214" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect216" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.553" - y1="3.122" - x2="3.77" - y2="3.122" - stroke="#000000" - stroke-width="0.010" - id="line220" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect222" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect226" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect228" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect230" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect232" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect234" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect236" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect238" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect240" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect242" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect244" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7360001" - y1="2.757" - x2="3.405" - y2="2.757" - stroke="#000000" - stroke-width="0.010" - id="line246" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect248" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect252" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect254" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect256" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect258" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.6359999" - x2="3.3440001" - y2="2.6359999" - stroke="#000000" - stroke-width="0.010" - id="line260" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect262" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect264" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect266" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.405" - y1="2.4530001" - x2="3.527" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line268" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.1830001" - x2="3.7090001" - y2="3.1830001" - stroke="#000000" - stroke-width="0.010" - id="line270" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.244" - x2="2.6140001" - y2="3.244" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.3050001" - x2="3.7090001" - y2="3.3050001" - stroke="#000000" - stroke-width="0.010" - id="line274" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.487" - x2="2.6140001" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line276" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.427" - x2="3.7090001" - y2="3.427" - stroke="#000000" - stroke-width="0.010" - id="line278" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.3659999" - x2="2.6140001" - y2="3.3659999" - stroke="#000000" - stroke-width="0.010" - id="line280" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.675" - y1="2.4530001" - x2="2.7360001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line282" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.4530001" - x2="2.8570001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line284" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.697" - x2="2.8570001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line286" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.283" - y1="2.697" - x2="3.3440001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line288" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.72" - y1="2.6359999" - x2="8.8620005" - y2="2.6229999" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.2069998" - y1="2.632" - x2="5.2090001" - y2="3.5910001" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.21" - y1="2.632" - x2="5.2080002" - y2="1.632" - stroke="#000000" - stroke-width="0.100" - id="line294" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.6500001" - y1="2.6289999" - x2="6.652" - y2="3.5339999" - stroke="#000000" - stroke-width="0.100" - id="line296" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.651" - y1="2.6289999" - x2="6.6479998" - y2="1.6289999" - stroke="#000000" - stroke-width="0.100" - id="line298" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.092" - y1="2.625" - x2="8.0950003" - y2="3.552" - stroke="#000000" - stroke-width="0.100" - id="line300" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.0909996" - y1="2.625" - x2="8.0889997" - y2="1.625" - stroke="#000000" - stroke-width="0.100" - id="line302" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect304" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect306" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.296" - y="3.6559999" - id="rect308" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon310" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon312" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon314" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon316" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect318" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect320" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon322" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon324" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect326" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect328" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7389998" - y="3.645" - id="rect330" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon332" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon334" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon336" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon338" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect340" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect342" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon344" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon346" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect348" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect350" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="4.8639998" - y="1.22" - id="rect352" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon354" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon356" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon358" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon360" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect362" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect364" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon366" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon368" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect370" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect372" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.3140001" - y="1.245" - id="rect374" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon376" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon378" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon380" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon382" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect384" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect386" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon388" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon390" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect392" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect394" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7639999" - y="1.22" - id="rect396" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon398" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon400" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon402" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon404" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect406" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect408" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon410" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon412" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon414" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon416" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.611,4.115 L 4.659,4.135 L 5.715,4.135 L 5.763,4.115" - id="path418" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.715,4.135 L 5.787,4.175" - id="path420" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.587,4.175 L 4.659,4.135" - id="path422" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon424" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon426" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon428" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon430" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse432" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse434" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse436" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse438" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse440" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse442" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse444" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse446" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse448" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse450" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse452" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse454" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse456" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse458" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse460" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse462" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse464" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse466" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse468" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse470" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse472" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse474" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse476" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse478" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse480" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse482" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse484" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse486" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect488" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect490" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect492" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect494" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect496" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect498" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="1.829" - x2="9.0939999" - y2="1.829" - stroke="#000000" - stroke-width="0.010" - id="line500" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.0580001" - x2="10.009" - y2="2.0580001" - stroke="#000000" - stroke-width="0.010" - id="line502" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="2.2290001" - x2="9.0939999" - y2="2.2290001" - stroke="#000000" - stroke-width="0.010" - id="line504" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect506" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect508" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect510" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.9790001" - y1="3.03" - x2="10.123" - y2="3.03" - stroke="#000000" - stroke-width="0.010" - id="line512" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect514" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect516" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect518" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect520" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect522" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect524" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect526" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect528" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect530" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect532" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect534" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect536" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.8010001" - x2="9.7229996" - y2="2.8010001" - stroke="#000000" - stroke-width="0.010" - id="line538" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect540" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect542" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect544" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect546" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect548" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect550" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.687" - x2="9.6660004" - y2="2.687" - stroke="#000000" - stroke-width="0.010" - id="line552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.6660004" - y1="2.744" - x2="9.6090002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line554" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.744" - x2="9.2080002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line556" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect558" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect560" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect562" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.401" - x2="9.2080002" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line564" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.2650003" - y1="2.401" - x2="9.323" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line566" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.8369999" - y1="2.401" - x2="9.9519997" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line568" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.7160001" - x2="9.0369997" - y2="3.7160001" - stroke="#000000" - stroke-width="0.010" - id="line570" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.6589999" - x2="10.066" - y2="3.6589999" - stroke="#000000" - stroke-width="0.010" - id="line572" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.602" - x2="9.0369997" - y2="3.602" - stroke="#000000" - stroke-width="0.010" - id="line574" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.5439999" - x2="10.066" - y2="3.5439999" - stroke="#000000" - stroke-width="0.010" - id="line576" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.487" - x2="9.0369997" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line578" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.4300001" - x2="10.066" - y2="3.4300001" - stroke="#000000" - stroke-width="0.010" - id="line580" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.3729999" - x2="9.0369997" - y2="3.3729999" - stroke="#000000" - stroke-width="0.010" - id="line582" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="6.888" - y="5.3340001" - id="text584" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="6.4829998" - y="5.934" - id="text586" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.12.0/22</text> - <text - x="2.187" - y="4.1690001" - id="text588" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="2.006" - y="4.6690001" - id="text590" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LON-BDC</text> - <text - x="8.3649998" - y="0.375" - id="text592" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="8.6969995" - y="0.875" - id="text594" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LON-APPS</text> - <rect - width="1.291" - height="1.1390001" - x="0.61699998" - y="2.0880001" - id="rect596" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="1.263" - cy="3.227" - rx="0.64499998" - ry="0.19" - id="ellipse598" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse600" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse602" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 1.908,2.088 L 1.908,3.227 C 1.908,3.332 1.619,3.417 1.263,3.417 C 0.906,3.417 0.617,3.332 0.617,3.227 L 0.617,2.088" - id="path604" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="1.928" - y1="2.523" - x2="2.503" - y2="2.523" - stroke="#000000" - stroke-width="0.100" - id="line606" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.935" - y="2.7219999" - id="text608" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="0.94999999" - y="3.122" - id="text610" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect612" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect614" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect616" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect618" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect620" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect622" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="2.1900001" - x2="15.431" - y2="2.1900001" - stroke="#000000" - stroke-width="0.010" - id="line624" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="2.4330001" - x2="14.458" - y2="2.4330001" - stroke="#000000" - stroke-width="0.010" - id="line626" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect628" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect630" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect632" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="3.2850001" - x2="15.614" - y2="3.2850001" - stroke="#000000" - stroke-width="0.010" - id="line634" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect636" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect638" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect640" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect642" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect644" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect646" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect648" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect650" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect652" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect654" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect656" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect658" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.58" - y1="2.9200001" - x2="15.249" - y2="2.9200001" - stroke="#000000" - stroke-width="0.010" - id="line660" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect662" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect664" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect666" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect668" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect670" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect672" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.7980001" - x2="15.188" - y2="2.7980001" - stroke="#000000" - stroke-width="0.010" - id="line674" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect676" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect678" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect680" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.249" - y1="2.615" - x2="15.371" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.345" - x2="15.553" - y2="3.345" - stroke="#000000" - stroke-width="0.010" - id="line684" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.4059999" - x2="14.458" - y2="3.4059999" - stroke="#000000" - stroke-width="0.010" - id="line686" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.467" - x2="15.553" - y2="3.467" - stroke="#000000" - stroke-width="0.010" - id="line688" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.6500001" - x2="14.458" - y2="3.6500001" - stroke="#000000" - stroke-width="0.010" - id="line690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.589" - x2="15.553" - y2="3.589" - stroke="#000000" - stroke-width="0.010" - id="line692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.5280001" - x2="14.458" - y2="3.5280001" - stroke="#000000" - stroke-width="0.010" - id="line694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="2.615" - x2="14.58" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.615" - x2="14.701" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.859" - x2="14.701" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="2.859" - x2="15.188" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.564" - y1="2.7980001" - x2="20.705" - y2="2.7850001" - stroke="#000000" - stroke-width="0.100" - id="line704" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.051001" - y1="2.7939999" - x2="17.052999" - y2="3.753" - stroke="#000000" - stroke-width="0.100" - id="line706" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.054001" - y1="2.7939999" - x2="17.052" - y2="1.794" - stroke="#000000" - stroke-width="0.100" - id="line708" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.493" - y1="2.7909999" - x2="18.496" - y2="3.6960001" - stroke="#000000" - stroke-width="0.100" - id="line710" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.495001" - y1="2.7909999" - x2="18.492001" - y2="1.791" - stroke="#000000" - stroke-width="0.100" - id="line712" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.936001" - y1="2.7869999" - x2="19.938999" - y2="3.714" - stroke="#000000" - stroke-width="0.100" - id="line714" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.934999" - y1="2.7869999" - x2="19.933001" - y2="1.7869999" - stroke="#000000" - stroke-width="0.100" - id="line716" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect718" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect720" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.139999" - y="3.8180001" - id="rect722" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon724" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon726" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon728" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon730" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect732" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect734" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon736" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon738" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect740" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect742" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.583" - y="3.8069999" - id="rect744" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon746" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon748" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon750" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon752" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect754" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect756" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon758" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon760" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect762" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect764" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.708" - y="1.382" - id="rect766" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon768" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon770" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon772" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon774" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect776" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect778" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon780" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon782" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect784" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect786" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.158001" - y="1.4069999" - id="rect788" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon790" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon792" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon794" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon796" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect798" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect800" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon802" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon804" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect806" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect808" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.608" - y="1.382" - id="rect810" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon812" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon814" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon816" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon818" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect820" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect822" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon824" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon826" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon828" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon830" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.454,4.277 L 16.502,4.297 L 17.558,4.297 L 17.606,4.277" - id="path832" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.558,4.297 L 17.63,4.337" - id="path834" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.43,4.337 L 16.502,4.297" - id="path836" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon838" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon840" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon842" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon844" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse846" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse848" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse850" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse852" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse854" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse856" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse858" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse860" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse862" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse864" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse866" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse868" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse870" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse872" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse874" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse876" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse878" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse880" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse882" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse884" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse886" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse888" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse890" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse892" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse894" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse896" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse898" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse900" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect902" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect904" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect906" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect908" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect910" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect912" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="1.9910001" - x2="20.938" - y2="1.9910001" - stroke="#000000" - stroke-width="0.010" - id="line914" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.22" - x2="21.853001" - y2="2.22" - stroke="#000000" - stroke-width="0.010" - id="line916" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="2.391" - x2="20.938" - y2="2.391" - stroke="#000000" - stroke-width="0.010" - id="line918" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect920" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect922" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect924" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.823" - y1="3.1919999" - x2="21.966999" - y2="3.1919999" - stroke="#000000" - stroke-width="0.010" - id="line926" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect928" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect930" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect932" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect934" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect936" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect938" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect940" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect942" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect944" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect946" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect948" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect950" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.9630001" - x2="21.566999" - y2="2.9630001" - stroke="#000000" - stroke-width="0.010" - id="line952" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect954" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect956" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect958" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect960" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect962" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect964" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.849" - x2="21.51" - y2="2.849" - stroke="#000000" - stroke-width="0.010" - id="line966" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.51" - y1="2.9059999" - x2="21.452" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line968" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.9059999" - x2="21.052" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line970" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect972" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect974" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect976" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.563" - x2="21.052" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line978" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.108999" - y1="2.563" - x2="21.167" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line980" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.681" - y1="2.563" - x2="21.796" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line982" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.878" - x2="20.881001" - y2="3.878" - stroke="#000000" - stroke-width="0.010" - id="line984" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.8210001" - x2="21.91" - y2="3.8210001" - stroke="#000000" - stroke-width="0.010" - id="line986" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.7639999" - x2="20.881001" - y2="3.7639999" - stroke="#000000" - stroke-width="0.010" - id="line988" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.707" - x2="21.91" - y2="3.707" - stroke="#000000" - stroke-width="0.010" - id="line990" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.6489999" - x2="20.881001" - y2="3.6489999" - stroke="#000000" - stroke-width="0.010" - id="line992" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.592" - x2="21.91" - y2="3.592" - stroke="#000000" - stroke-width="0.010" - id="line994" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.5350001" - x2="20.881001" - y2="3.5350001" - stroke="#000000" - stroke-width="0.010" - id="line996" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="18.931999" - y="5.4460001" - id="text998" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="18.525999" - y="6.046" - id="text1000" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.16.0/22</text> - <text - x="14.303" - y="4.415" - id="text1002" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="14.238" - y="4.915" - id="text1004" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LA-BDC</text> - <text - x="19.816999" - y="0.35600001" - id="text1006" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="20.266001" - y="0.85600001" - id="text1008" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LA-APPS</text> - <rect - width="1.326" - height="1.17" - x="12.501" - y="2.28" - id="rect1010" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="13.164" - cy="3.451" - rx="0.66299999" - ry="0.19499999" - id="ellipse1012" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.164" - cy="2.28" - rx="0.66299999" - ry="0.19499999" - id="ellipse1014" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.164" - cy="2.28" - rx="0.66299999" - ry="0.19499999" - id="ellipse1016" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.827,2.28 L 13.827,3.451 C 13.827,3.559 13.53,3.646 13.164,3.646 C 12.798,3.646 12.501,3.559 12.501,3.451 L 12.501,2.28" - id="path1018" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="13.85" - y1="2.7939999" - x2="14.397" - y2="2.7980001" - stroke="#000000" - stroke-width="0.100" - id="line1020" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.809" - y="2.9619999" - id="text1022" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.823" - y="3.362" - id="text1024" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1026" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1028" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1030" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1032" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1034" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1036" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="10.744" - x2="15.309" - y2="10.744" - stroke="#000000" - stroke-width="0.010" - id="line1038" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.309" - y1="10.988" - x2="14.336" - y2="10.988" - stroke="#000000" - stroke-width="0.010" - id="line1040" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1042" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1044" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1046" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.275" - y1="11.839" - x2="15.492" - y2="11.839" - stroke="#000000" - stroke-width="0.010" - id="line1048" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1050" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1052" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1054" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1056" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1058" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1060" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1062" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1064" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1066" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1068" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1070" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1072" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="11.474" - x2="15.127" - y2="11.474" - stroke="#000000" - stroke-width="0.010" - id="line1074" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1076" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1078" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1080" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1082" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1084" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1086" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.353" - x2="15.066" - y2="11.353" - stroke="#000000" - stroke-width="0.010" - id="line1088" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1090" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1092" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1094" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="11.17" - x2="15.249" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1096" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="11.9" - x2="15.431" - y2="11.9" - stroke="#000000" - stroke-width="0.010" - id="line1098" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="11.961" - x2="14.336" - y2="11.961" - stroke="#000000" - stroke-width="0.010" - id="line1100" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.022" - x2="15.431" - y2="12.022" - stroke="#000000" - stroke-width="0.010" - id="line1102" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.204" - x2="14.336" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1104" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.143" - x2="15.431" - y2="12.143" - stroke="#000000" - stroke-width="0.010" - id="line1106" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.083" - x2="14.336" - y2="12.083" - stroke="#000000" - stroke-width="0.010" - id="line1108" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="11.17" - x2="14.458" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1110" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.17" - x2="14.579" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1112" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.413" - x2="14.579" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1114" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.005" - y1="11.413" - x2="15.066" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1116" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.442" - y1="11.353" - x2="20.584" - y2="11.34" - stroke="#000000" - stroke-width="0.100" - id="line1118" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.929001" - y1="11.349" - x2="16.931" - y2="12.308" - stroke="#000000" - stroke-width="0.100" - id="line1120" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.931999" - y1="11.349" - x2="16.93" - y2="10.349" - stroke="#000000" - stroke-width="0.100" - id="line1122" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372" - y1="11.345" - x2="18.374001" - y2="12.251" - stroke="#000000" - stroke-width="0.100" - id="line1124" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372999" - y1="11.345" - x2="18.370001" - y2="10.345" - stroke="#000000" - stroke-width="0.100" - id="line1126" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.815001" - y1="11.342" - x2="19.816999" - y2="12.269" - stroke="#000000" - stroke-width="0.100" - id="line1128" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.813" - y1="11.342" - x2="19.811001" - y2="10.342" - stroke="#000000" - stroke-width="0.100" - id="line1130" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1132" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1134" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.018" - y="12.373" - id="rect1136" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1138" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1142" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1144" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1146" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1148" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1150" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1152" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1154" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1156" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.461" - y="12.362" - id="rect1158" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1160" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1162" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1164" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1166" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1168" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1170" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1172" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1174" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1176" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1178" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.586" - y="9.9370003" - id="rect1180" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1182" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1184" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1186" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1188" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1190" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1192" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1194" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1196" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1198" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1200" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.035999" - y="9.9619999" - id="rect1202" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1204" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1206" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1208" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1210" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1212" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1214" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1216" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1218" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1220" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1222" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.486" - y="9.9370003" - id="rect1224" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1226" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1228" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1230" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1232" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1234" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1236" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1238" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1240" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1242" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1244" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.333,12.832 L 16.381,12.852 L 17.437,12.852 L 17.485,12.832" - id="path1246" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.437,12.852 L 17.509,12.892" - id="path1248" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.309,12.892 L 16.381,12.852" - id="path1250" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1252" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1254" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1256" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1258" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1260" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1262" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1264" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1266" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1268" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1270" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1272" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1274" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1276" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1278" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1280" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1282" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1284" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1286" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1288" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1290" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1292" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1294" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1296" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1298" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1300" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1302" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1304" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1306" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1308" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1310" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1312" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1314" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1316" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1318" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1320" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1322" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1324" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1326" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.546" - x2="20.816" - y2="10.546" - stroke="#000000" - stroke-width="0.010" - id="line1328" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="10.774" - x2="21.731001" - y2="10.774" - stroke="#000000" - stroke-width="0.010" - id="line1330" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.946" - x2="20.816" - y2="10.946" - stroke="#000000" - stroke-width="0.010" - id="line1332" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1334" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1336" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1338" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.701" - y1="11.747" - x2="21.844999" - y2="11.747" - stroke="#000000" - stroke-width="0.010" - id="line1340" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1342" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1344" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1346" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1348" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1350" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1352" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1354" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1356" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1358" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1360" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1362" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1364" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="11.518" - x2="21.445" - y2="11.518" - stroke="#000000" - stroke-width="0.010" - id="line1366" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1368" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1370" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1372" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1374" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1376" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1378" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.404" - x2="21.388" - y2="11.404" - stroke="#000000" - stroke-width="0.010" - id="line1380" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.388" - y1="11.461" - x2="21.330999" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1382" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.461" - x2="20.93" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1384" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1386" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1388" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1390" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.118" - x2="20.93" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1392" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.987" - y1="11.118" - x2="21.045" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1394" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.559" - y1="11.118" - x2="21.674" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.433" - x2="20.759001" - y2="12.433" - stroke="#000000" - stroke-width="0.010" - id="line1398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.376" - x2="21.788" - y2="12.376" - stroke="#000000" - stroke-width="0.010" - id="line1400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.319" - x2="20.759001" - y2="12.319" - stroke="#000000" - stroke-width="0.010" - id="line1402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.261" - x2="21.788" - y2="12.261" - stroke="#000000" - stroke-width="0.010" - id="line1404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.204" - x2="20.759001" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.147" - x2="21.788" - y2="12.147" - stroke="#000000" - stroke-width="0.010" - id="line1408" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.09" - x2="20.759001" - y2="12.09" - stroke="#000000" - stroke-width="0.010" - id="line1410" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="18.334999" - y="14.401" - id="text1412" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="17.900999" - y="15.001" - id="text1414" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.20.0/22</text> - <text - x="13.937" - y="12.893" - id="text1416" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="13.608" - y="13.393" - id="text1418" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">WADC-BDC</text> - <text - x="19.917" - y="8.9940004" - id="text1420" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="20.101999" - y="9.4940004" - id="text1422" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">WADC-APPS</text> - <rect - width="1.314" - height="1.159" - x="12.051" - y="10.933" - id="rect1424" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.708" - cy="12.092" - rx="0.65700001" - ry="0.193" - id="ellipse1426" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.708" - cy="10.933" - rx="0.65700001" - ry="0.193" - id="ellipse1428" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.708" - cy="10.933" - rx="0.65700001" - ry="0.193" - id="ellipse1430" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.365,10.933 L 13.365,12.092 C 13.365,12.199 13.071,12.286 12.708,12.286 C 12.345,12.286 12.051,12.199 12.051,12.092 L 12.051,10.933" - id="path1432" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="14.275" - y1="11.353" - x2="13.4" - y2="11.368" - stroke="#000000" - stroke-width="0.100" - id="line1434" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.412" - y="11.567" - id="text1436" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.427" - y="11.967" - id="text1438" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1440" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1442" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="6.7909999" - y="11.036" - id="text1444" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <path - d="M 4.7,11.1 C 5.035363,11.196174 5.3953356,11.076093 5.6057965,10.797841 C 5.8162574,10.51959 5.8338243,10.140524 5.65,9.844" - id="path1446" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 8.675,9.794 C 7.4940305,10.104758 6.3530779,10.551408 5.275,11.125" - id="path1448" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 4.7,11.15 C 6.6098972,11.931939 8.7554368,11.904871 10.645,11.075" - id="path1450" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1452" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1454" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1456" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1458" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1460" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1462" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.1389999" - x2="1.8710001" - y2="9.1389999" - stroke="#000000" - stroke-width="0.010" - id="line1464" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="9.4180002" - x2="0.75400001" - y2="9.4180002" - stroke="#000000" - stroke-width="0.010" - id="line1466" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.698" - x2="1.8710001" - y2="9.698" - stroke="#000000" - stroke-width="0.010" - id="line1468" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.9770002" - x2="1.8710001" - y2="9.9770002" - stroke="#000000" - stroke-width="0.010" - id="line1470" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="10.256" - x2="0.75400001" - y2="10.256" - stroke="#000000" - stroke-width="0.010" - id="line1472" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1474" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1476" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1478" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.61400002" - y1="11.374" - x2="2.0109999" - y2="11.374" - stroke="#000000" - stroke-width="0.010" - id="line1480" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1482" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1484" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1486" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1488" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1490" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1492" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1494" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1496" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1498" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1500" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1502" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1504" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="10.885" - x2="1.522" - y2="10.885" - stroke="#000000" - stroke-width="0.010" - id="line1506" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1508" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1510" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1512" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1514" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1516" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1518" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.745" - x2="1.452" - y2="10.745" - stroke="#000000" - stroke-width="0.010" - id="line1520" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.452" - y1="10.815" - x2="1.382" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1522" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.815" - x2="0.89300001" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1524" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1526" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1528" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1530" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.466" - x2="0.89300001" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1532" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.963" - y1="10.466" - x2="1.033" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1534" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.6619999" - y1="10.466" - x2="1.801" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1536" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.84" - x2="1.941" - y2="12.84" - stroke="#000000" - stroke-width="0.010" - id="line1538" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.77" - x2="0.68400002" - y2="12.77" - stroke="#000000" - stroke-width="0.010" - id="line1540" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.701" - x2="1.941" - y2="12.701" - stroke="#000000" - stroke-width="0.010" - id="line1542" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.631" - x2="0.68400002" - y2="12.631" - stroke="#000000" - stroke-width="0.010" - id="line1544" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.561" - x2="1.941" - y2="12.561" - stroke="#000000" - stroke-width="0.010" - id="line1546" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.491" - x2="0.68400002" - y2="12.491" - stroke="#000000" - stroke-width="0.010" - id="line1548" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.421" - x2="1.941" - y2="12.421" - stroke="#000000" - stroke-width="0.010" - id="line1550" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.351" - x2="0.68400002" - y2="12.351" - stroke="#000000" - stroke-width="0.010" - id="line1552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.282" - x2="1.941" - y2="12.282" - stroke="#000000" - stroke-width="0.010" - id="line1554" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.212" - x2="0.68400002" - y2="12.212" - stroke="#000000" - stroke-width="0.010" - id="line1556" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.142" - x2="1.941" - y2="12.142" - stroke="#000000" - stroke-width="0.010" - id="line1558" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.072" - x2="0.68400002" - y2="12.072" - stroke="#000000" - stroke-width="0.010" - id="line1560" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.002" - x2="1.941" - y2="12.002" - stroke="#000000" - stroke-width="0.010" - id="line1562" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="11.932" - x2="0.68400002" - y2="11.932" - stroke="#000000" - stroke-width="0.010" - id="line1564" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.3340001" - y="11.97" - id="rect1566" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.3340001" - y="11.97" - id="rect1568" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.2290001" - y="12.076" - id="rect1570" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.202,12.699 -5.703,12.699 -5.703,12.812 -6.176,12.812 -6.202,12.699 " - id="polygon1572" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.202,12.699 -5.703,12.699 -5.703,12.812 -6.176,12.812 -6.202,12.699 " - id="polygon1574" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.703,12.699 -5.494,12.699 -5.521,12.812 -5.703,12.812 -5.703,12.699 " - id="polygon1576" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.703,12.699 -5.494,12.699 -5.521,12.812 -5.703,12.812 -5.703,12.699 " - id="polygon1578" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.6690001" - y="12.733" - id="rect1580" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.6690001" - y="12.733" - id="rect1582" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-5.945,12.812 -5.751,12.812 -5.751,12.869 -5.654,12.869 -5.654,12.925 -6.042,12.925 -6.042,12.869 -5.945,12.869 -5.945,12.812 " - id="polygon1584" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.945,12.812 -5.751,12.812 -5.751,12.869 -5.654,12.869 -5.654,12.925 -6.042,12.925 -6.042,12.869 -5.945,12.869 -5.945,12.812 " - id="polygon1586" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.62800002" - y1="11.055" - x2="-9.6000004" - y2="11.069" - stroke="#000000" - stroke-width="0.100" - id="line1588" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.312" - y1="11.057" - x2="-1.314" - y2="10.12" - stroke="#000000" - stroke-width="0.100" - id="line1590" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.5769999" - y1="11.06" - x2="-3.575" - y2="12.069" - stroke="#000000" - stroke-width="0.100" - id="line1592" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.573" - y1="11.06" - x2="-3.5739999" - y2="10.399" - stroke="#000000" - stroke-width="0.100" - id="line1594" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.8520002" - y1="11.063" - x2="-5.8499999" - y2="12.018" - stroke="#000000" - stroke-width="0.100" - id="line1596" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.8429999" - y1="11.063" - x2="-5.8439999" - y2="10.338" - stroke="#000000" - stroke-width="0.100" - id="line1598" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-8.0740004" - y1="11.066" - x2="-8.0749998" - y2="10.168" - stroke="#000000" - stroke-width="0.100" - id="line1600" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.0779999" - height="0.80800003" - x="-4.079" - y="12.008" - id="rect1602" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.0779999" - height="0.80800003" - x="-4.079" - y="12.008" - id="rect1604" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.84399998" - height="0.55699998" - x="-3.9619999" - y="12.125" - id="rect1606" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.933,12.816 -3.378,12.816 -3.378,12.942 -3.903,12.942 -3.933,12.816 " - id="polygon1608" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.933,12.816 -3.378,12.816 -3.378,12.942 -3.903,12.942 -3.933,12.816 " - id="polygon1610" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.378,12.816 -3.147,12.816 -3.176,12.942 -3.378,12.942 -3.378,12.816 " - id="polygon1612" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.378,12.816 -3.147,12.816 -3.176,12.942 -3.378,12.942 -3.378,12.816 " - id="polygon1614" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.3399999" - y="12.854" - id="rect1616" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.3399999" - y="12.854" - id="rect1618" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.647,12.942 -3.432,12.942 -3.432,13.005 -3.324,13.005 -3.324,13.068 -3.755,13.068 -3.755,13.005 -3.647,13.005 -3.647,12.942 " - id="polygon1620" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.647,12.942 -3.432,12.942 -3.432,13.005 -3.324,13.005 -3.324,13.068 -3.755,13.068 -3.755,13.005 -3.647,13.005 -3.647,12.942 " - id="polygon1622" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.329" - y="9.3830004" - id="rect1624" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.329" - y="9.3830004" - id="rect1626" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.224" - y="9.4890003" - id="rect1628" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.198,10.112 -5.698,10.112 -5.698,10.225 -6.171,10.225 -6.198,10.112 " - id="polygon1630" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.198,10.112 -5.698,10.112 -5.698,10.225 -6.171,10.225 -6.198,10.112 " - id="polygon1632" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.698,10.112 -5.49,10.112 -5.516,10.225 -5.698,10.225 -5.698,10.112 " - id="polygon1634" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.698,10.112 -5.49,10.112 -5.516,10.225 -5.698,10.225 -5.698,10.112 " - id="polygon1636" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.664" - y="10.146" - id="rect1638" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.664" - y="10.146" - id="rect1640" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-5.941,10.225 -5.746,10.225 -5.746,10.282 -5.649,10.282 -5.649,10.338 -6.038,10.338 -6.038,10.282 -5.941,10.282 -5.941,10.225 " - id="polygon1642" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.941,10.225 -5.746,10.225 -5.746,10.282 -5.649,10.282 -5.649,10.338 -6.038,10.338 -6.038,10.282 -5.941,10.282 -5.941,10.225 " - id="polygon1644" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.0599999" - y="9.4449997" - id="rect1646" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.0599999" - y="9.4449997" - id="rect1648" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-3.9549999" - y="9.5500002" - id="rect1650" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.928,10.173 -3.429,10.173 -3.429,10.286 -3.902,10.286 -3.928,10.173 " - id="polygon1652" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.928,10.173 -3.429,10.173 -3.429,10.286 -3.902,10.286 -3.928,10.173 " - id="polygon1654" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.429,10.173 -3.22,10.173 -3.247,10.286 -3.429,10.286 -3.429,10.173 " - id="polygon1656" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.429,10.173 -3.22,10.173 -3.247,10.286 -3.429,10.286 -3.429,10.173 " - id="polygon1658" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.395" - y="10.207" - id="rect1660" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.395" - y="10.207" - id="rect1662" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.671,10.286 -3.477,10.286 -3.477,10.343 -3.38,10.343 -3.38,10.399 -3.769,10.399 -3.769,10.343 -3.671,10.343 -3.671,10.286 " - id="polygon1664" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.671,10.286 -3.477,10.286 -3.477,10.343 -3.38,10.343 -3.38,10.399 -3.769,10.399 -3.769,10.343 -3.671,10.343 -3.671,10.286 " - id="polygon1666" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-10.578" - y="10.617" - id="rect1668" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-10.578" - y="10.617" - id="rect1670" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-10.473" - y="10.722" - id="rect1672" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-10.446,11.345 -9.947,11.345 -9.947,11.458 -10.42,11.458 -10.446,11.345 " - id="polygon1674" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-10.446,11.345 -9.947,11.345 -9.947,11.458 -10.42,11.458 -10.446,11.345 " - id="polygon1676" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-9.947,11.345 -9.738,11.345 -9.765,11.458 -9.947,11.458 -9.947,11.345 " - id="polygon1678" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-9.947,11.345 -9.738,11.345 -9.765,11.458 -9.947,11.458 -9.947,11.345 " - id="polygon1680" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-9.9130001" - y="11.379" - id="rect1682" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-9.9130001" - y="11.379" - id="rect1684" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-10.19,11.458 -9.995,11.458 -9.995,11.515 -9.898,11.515 -9.898,11.571 -10.287,11.571 -10.287,11.515 -10.19,11.515 -10.19,11.458 " - id="polygon1686" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-10.19,11.458 -9.995,11.458 -9.995,11.515 -9.898,11.515 -9.898,11.571 -10.287,11.571 -10.287,11.515 -10.19,11.515 -10.19,11.458 " - id="polygon1688" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-1.726,9.492 -1.775,9.513 -1.92,9.877 -1.92,10.059 -1.848,10.12 -0.779,10.12 -0.707,10.059 -0.707,9.877 -0.852,9.513 -0.901,9.492 -1.726,9.492 " - id="polygon1690" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.726,9.492 -1.775,9.513 -1.92,9.877 -1.92,10.059 -1.848,10.12 -0.779,10.12 -0.707,10.059 -0.707,9.877 -0.852,9.513 -0.901,9.492 -1.726,9.492 " - id="polygon1692" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.896,9.816 L -1.848,9.836 L -0.779,9.836 L -0.731,9.816" - id="path1694" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -0.779,9.836 L -0.707,9.877" - id="path1696" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.92,9.877 L -1.848,9.836" - id="path1698" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.581,9.108 -1.605,9.593 -1.022,9.593 -1.046,9.108 -1.581,9.108 " - id="polygon1700" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.581,9.108 -1.605,9.593 -1.022,9.593 -1.046,9.108 -1.581,9.108 " - id="polygon1702" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.678,9.593 -1.726,9.735 -0.901,9.735 -0.949,9.593 -1.678,9.593 " - id="polygon1704" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.678,9.593 -1.726,9.735 -0.901,9.735 -0.949,9.593 -1.678,9.593 " - id="polygon1706" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-1.678" - cy="9.9069996" - rx="0.012" - ry="0.012" - id="ellipse1708" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.678" - cy="9.9069996" - rx="0.012" - ry="0.012" - id="ellipse1710" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.556" - cy="9.9069996" - rx="0.012" - ry="0.012" - id="ellipse1712" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.556" - cy="9.9069996" - rx="0.012" - ry="0.012" - id="ellipse1714" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.4349999" - cy="9.9069996" - rx="0.012" - ry="0.012" - id="ellipse1716" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.4349999" - cy="9.9069996" - rx="0.012" - ry="0.012" - id="ellipse1718" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.678" - cy="9.9580002" - rx="0.012" - ry="0.012" - id="ellipse1720" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.678" - cy="9.9580002" - rx="0.012" - ry="0.012" - id="ellipse1722" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.556" - cy="9.9580002" - rx="0.012" - ry="0.012" - id="ellipse1724" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.556" - cy="9.9580002" - rx="0.012" - ry="0.012" - id="ellipse1726" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.4349999" - cy="9.9580002" - rx="0.012" - ry="0.012" - id="ellipse1728" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.4349999" - cy="9.9580002" - rx="0.012" - ry="0.012" - id="ellipse1730" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.678" - cy="10.008" - rx="0.012" - ry="0.012" - id="ellipse1732" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.678" - cy="10.008" - rx="0.012" - ry="0.012" - id="ellipse1734" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.556" - cy="10.008" - rx="0.012" - ry="0.012" - id="ellipse1736" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.556" - cy="10.008" - rx="0.012" - ry="0.012" - id="ellipse1738" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.4349999" - cy="10.008" - rx="0.012" - ry="0.012" - id="ellipse1740" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.4349999" - cy="10.008" - rx="0.012" - ry="0.012" - id="ellipse1742" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.678" - cy="10.059" - rx="0.012" - ry="0.012" - id="ellipse1744" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.678" - cy="10.059" - rx="0.012" - ry="0.012" - id="ellipse1746" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.556" - cy="10.059" - rx="0.012" - ry="0.012" - id="ellipse1748" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.556" - cy="10.059" - rx="0.012" - ry="0.012" - id="ellipse1750" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.4349999" - cy="10.059" - rx="0.012" - ry="0.012" - id="ellipse1752" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.4349999" - cy="10.059" - rx="0.012" - ry="0.012" - id="ellipse1754" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.314" - cy="9.9169998" - rx="0.152" - ry="0.048999999" - id="ellipse1756" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-1.314" - cy="9.9169998" - rx="0.152" - ry="0.048999999" - id="ellipse1758" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.01" - cy="9.9169998" - rx="0.152" - ry="0.048999999" - id="ellipse1760" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-1.01" - cy="9.9169998" - rx="0.152" - ry="0.048999999" - id="ellipse1762" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.159" - height="2.3180001" - x="-8.6300001" - y="8.4790001" - id="rect1764" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.159" - height="2.3180001" - x="-8.6300001" - y="8.4790001" - id="rect1766" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.159" - height="2.3180001" - x="-8.6300001" - y="8.4790001" - id="rect1768" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.92699999" - height="0.92699999" - x="-8.5150003" - y="8.5950003" - id="rect1770" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.92699999" - height="0.92699999" - x="-8.5150003" - y="8.5950003" - id="rect1772" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.92699999" - height="0.92699999" - x="-8.5150003" - y="8.5950003" - id="rect1774" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5869999" - y1="8.8260002" - x2="-8.5150003" - y2="8.8260002" - stroke="#000000" - stroke-width="0.010" - id="line1776" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5150003" - y1="9.0579996" - x2="-7.5869999" - y2="9.0579996" - stroke="#000000" - stroke-width="0.010" - id="line1778" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5869999" - y1="9.2320004" - x2="-8.5150003" - y2="9.2320004" - stroke="#000000" - stroke-width="0.010" - id="line1780" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.63800001" - height="0.34799999" - x="-8.5150003" - y="9.6379995" - id="rect1782" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.63800001" - height="0.34799999" - x="-8.5150003" - y="9.6379995" - id="rect1784" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.63800001" - height="0.34799999" - x="-8.5150003" - y="9.6379995" - id="rect1786" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6300001" - y1="10.044" - x2="-7.4710002" - y2="10.044" - stroke="#000000" - stroke-width="0.010" - id="line1788" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057999998" - height="0.057999998" - x="-8.1090002" - y="10.16" - id="rect1790" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057999998" - height="0.057999998" - x="-8.1090002" - y="10.16" - id="rect1792" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057999998" - height="0.057999998" - x="-8.1090002" - y="10.16" - id="rect1794" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.8769999" - y="10.16" - id="rect1796" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.8769999" - y="10.16" - id="rect1798" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.8769999" - y="10.16" - id="rect1800" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.645" - y="10.16" - id="rect1802" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.645" - y="10.16" - id="rect1804" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.645" - y="10.16" - id="rect1806" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.116" - height="0.057999998" - x="-7.7030001" - y="9.8120003" - id="rect1808" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.116" - height="0.057999998" - x="-7.7030001" - y="9.8120003" - id="rect1810" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.116" - height="0.057999998" - x="-7.7030001" - y="9.8120003" - id="rect1812" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5150003" - y1="9.8120003" - x2="-7.8769999" - y2="9.8120003" - stroke="#000000" - stroke-width="0.010" - id="line1814" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17399999" - height="0.17399999" - x="-8.5150003" - y="10.102" - id="rect1816" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17399999" - height="0.17399999" - x="-8.5150003" - y="10.102" - id="rect1818" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17399999" - height="0.17399999" - x="-8.5150003" - y="10.102" - id="rect1820" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.81099999" - height="0.057999998" - x="-8.4569998" - y="9.29" - id="rect1822" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.81099999" - height="0.057999998" - x="-8.4569998" - y="9.29" - id="rect1824" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.81099999" - height="0.057999998" - x="-8.4569998" - y="9.29" - id="rect1826" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4569998" - y1="9.6960001" - x2="-7.9349999" - y2="9.6960001" - stroke="#000000" - stroke-width="0.010" - id="line1828" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.9349999" - y1="9.7539997" - x2="-7.993" - y2="9.7539997" - stroke="#000000" - stroke-width="0.010" - id="line1830" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4569998" - y1="9.7539997" - x2="-8.3990002" - y2="9.7539997" - stroke="#000000" - stroke-width="0.010" - id="line1832" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28999999" - height="0.057999998" - x="-8.3409996" - y="9.6960001" - id="rect1834" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28999999" - height="0.057999998" - x="-8.3409996" - y="9.6960001" - id="rect1836" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28999999" - height="0.057999998" - x="-8.3409996" - y="9.6960001" - id="rect1838" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4569998" - y1="9.4060001" - x2="-8.3990002" - y2="9.4060001" - stroke="#000000" - stroke-width="0.010" - id="line1840" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.3409996" - y1="9.4060001" - x2="-8.283" - y2="9.4060001" - stroke="#000000" - stroke-width="0.010" - id="line1842" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.7610002" - y1="9.4060001" - x2="-7.645" - y2="9.4060001" - stroke="#000000" - stroke-width="0.010" - id="line1844" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5289998" - y1="10.739" - x2="-8.573" - y2="10.739" - stroke="#000000" - stroke-width="0.010" - id="line1846" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.573" - y1="10.681" - x2="-7.5289998" - y2="10.681" - stroke="#000000" - stroke-width="0.010" - id="line1848" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5289998" - y1="10.623" - x2="-8.573" - y2="10.623" - stroke="#000000" - stroke-width="0.010" - id="line1850" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.573" - y1="10.565" - x2="-7.5289998" - y2="10.565" - stroke="#000000" - stroke-width="0.010" - id="line1852" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5289998" - y1="10.507" - x2="-8.573" - y2="10.507" - stroke="#000000" - stroke-width="0.010" - id="line1854" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.573" - y1="10.449" - x2="-7.5289998" - y2="10.449" - stroke="#000000" - stroke-width="0.010" - id="line1856" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5289998" - y1="10.391" - x2="-8.573" - y2="10.391" - stroke="#000000" - stroke-width="0.010" - id="line1858" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="-5.5710001" - y="13.811" - id="text1860" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-5.9060001" - y="14.411" - id="text1862" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.0.0/22</text> - <text - x="-10.233" - y="7.7189999" - id="text1864" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="-9.9090004" - y="8.2189999" - id="text1866" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GNY-APPS</text> - <rect - width="1.4450001" - height="1.275" - x="2.5510001" - y="8.6120005" - id="rect1868" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="3.273" - cy="9.8870001" - rx="0.72299999" - ry="0.213" - id="ellipse1870" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1872" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1874" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.996,8.612 L 3.996,9.887 C 3.996,10.005 3.672,10.1 3.273,10.1 C 2.874,10.1 2.551,10.005 2.551,9.887 L 2.551,8.612" - id="path1876" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="2.0109999" - y1="9.2469997" - x2="2.586" - y2="9.2469997" - stroke="#000000" - stroke-width="0.100" - id="line1878" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="2.983" - y="9.3260002" - id="text1880" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.928" - y="9.7259998" - id="text1882" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Master</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="5.725,19.819 5.725,18.237 5.732,18.237 5.732,17.325 " - id="polyline1884" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-10.458" - y="15.156" - id="text1886" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">1100 Users</text> - <text - x="1.136" - y="6.0770001" - id="text1888" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">320 Users</text> - <text - x="12.943" - y="6.0310001" - id="text1890" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">180 Users</text> - <text - x="12.358" - y="15.177" - id="text1892" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">100 Users</text> - <text - x="-4.4629998" - y="8.1560001" - id="text1894" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York - GNY</text> - <text - x="13.214" - y="0.46399999" - id="text1896" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Los Angeles</text> - <text - x="1.1109999" - y="0.46399999" - id="text1898" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">London</text> - <text - x="12.979" - y="8.0889997" - id="text1900" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Washington, DC</text> - <rect - width="11.132" - height="6.5630002" - x="-11.146" - y="16.205999" - id="rect1902" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1904" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1906" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.732" - height="5.9629998" - x="-11.446" - y="16.506001" - id="rect1908" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1910" - style="fill:#ebebeb;stroke:none" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1912" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.146" - y1="16.205999" - x2="-0.014" - y2="16.205999" - stroke="#000000" - stroke-width="0.050" - id="line1914" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.146" - y1="22.768999" - x2="-0.014" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line1916" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1918" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1920" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.446" - y1="16.506001" - x2="-11.446" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1922" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.28600001" - y1="16.506001" - x2="0.28600001" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1924" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1926" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1928" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1930" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1932" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1934" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1936" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1938" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1940" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1942" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1944" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1946" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1948" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1950" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1952" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1954" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1956" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1958" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-5.2220001" - y="17.145" - id="text1960" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-5.5609999" - y="17.745001" - id="text1962" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.4.0/22</text> - <text - x="-10.001" - y="21.07" - id="text1964" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="-10.37" - y="21.57" - id="text1966" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-BDC</text> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1968" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1970" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1972" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1974" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1976" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1978" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="19.087" - x2="-7.6300001" - y2="19.087" - stroke="#000000" - stroke-width="0.010" - id="line1980" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.6300001" - y1="19.33" - x2="-8.6040001" - y2="19.33" - stroke="#000000" - stroke-width="0.010" - id="line1982" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1984" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1986" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1988" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.665" - y1="20.181999" - x2="-7.448" - y2="20.181999" - stroke="#000000" - stroke-width="0.010" - id="line1990" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1992" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1994" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1996" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect1998" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect2000" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect2002" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2004" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2006" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2008" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2010" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2012" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2014" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4820004" - y1="19.816999" - x2="-7.8130002" - y2="19.816999" - stroke="#000000" - stroke-width="0.010" - id="line2016" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2018" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2020" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2022" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2024" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2026" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2028" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.695" - x2="-7.8740001" - y2="19.695" - stroke="#000000" - stroke-width="0.010" - id="line2030" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2032" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2034" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2036" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.8130002" - y1="19.511999" - x2="-7.691" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2038" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.242001" - x2="-7.5089998" - y2="20.242001" - stroke="#000000" - stroke-width="0.010" - id="line2040" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.302999" - x2="-8.6040001" - y2="20.302999" - stroke="#000000" - stroke-width="0.010" - id="line2042" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.364" - x2="-7.5089998" - y2="20.364" - stroke="#000000" - stroke-width="0.010" - id="line2044" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.547001" - x2="-8.6040001" - y2="20.547001" - stroke="#000000" - stroke-width="0.010" - id="line2046" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.486" - x2="-7.5089998" - y2="20.486" - stroke="#000000" - stroke-width="0.010" - id="line2048" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.424999" - x2="-8.6040001" - y2="20.424999" - stroke="#000000" - stroke-width="0.010" - id="line2050" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5430002" - y1="19.511999" - x2="-8.4820004" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2052" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.511999" - x2="-8.3599997" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2054" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.756001" - x2="-8.3599997" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2056" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.9349999" - y1="19.756001" - x2="-7.8740001" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2058" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.4980001" - y1="19.695" - x2="-2.164" - y2="19.679001" - stroke="#000000" - stroke-width="0.100" - id="line2060" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9559999" - y1="19.690001" - x2="-5.9530001" - y2="20.649" - stroke="#000000" - stroke-width="0.100" - id="line2062" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9530001" - y1="19.690001" - x2="-5.9559999" - y2="18.690001" - stroke="#000000" - stroke-width="0.100" - id="line2064" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4590001" - y1="19.686001" - x2="-4.4559999" - y2="20.591" - stroke="#000000" - stroke-width="0.100" - id="line2066" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4569998" - y1="19.686001" - x2="-4.46" - y2="18.686001" - stroke="#000000" - stroke-width="0.100" - id="line2068" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.961" - y1="19.681" - x2="-2.9579999" - y2="20.608" - stroke="#000000" - stroke-width="0.100" - id="line2070" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.9619999" - y1="19.681" - x2="-2.9649999" - y2="18.681" - stroke="#000000" - stroke-width="0.100" - id="line2072" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2074" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2076" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8470001" - y="20.715" - id="rect2078" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2080" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2082" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2084" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2086" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2088" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2090" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2092" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2094" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2096" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2098" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.329" - y="20.704" - id="rect2100" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2102" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2104" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2106" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2108" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2110" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2112" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2114" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2116" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2118" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2120" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-6.2789998" - y="18.278999" - id="rect2122" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2124" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2126" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2128" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2130" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2132" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2134" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2136" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2138" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2140" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8039999" - y="18.278999" - id="rect2144" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2146" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2148" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2150" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2152" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2154" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2156" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2158" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2160" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2162" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2164" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.3039999" - y="18.304001" - id="rect2166" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2168" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2170" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2172" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2174" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2176" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2178" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2180" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2182" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2184" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2186" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.607,21.174 L -6.559,21.194 L -5.503,21.194 L -5.455,21.174" - id="path2188" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -5.503,21.194 L -5.431,21.234" - id="path2190" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.631,21.234 L -6.559,21.194" - id="path2192" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2194" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2196" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2198" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2200" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2202" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2204" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2206" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2208" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2210" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2212" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2214" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2216" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2218" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2220" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2222" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2224" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2226" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2228" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2230" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2232" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2234" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2236" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2238" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2240" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2242" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2244" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2246" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2248" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2250" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2252" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2254" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2256" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.2410001" - height="1.095" - x="-10.66" - y="19.143" - id="rect2258" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="-10.04" - cy="20.238001" - rx="0.62099999" - ry="0.183" - id="ellipse2260" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.04" - cy="19.143" - rx="0.62099999" - ry="0.183" - id="ellipse2262" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.04" - cy="19.143" - rx="0.62099999" - ry="0.183" - id="ellipse2264" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -9.419,19.143 L -9.419,20.238 C -9.419,20.338 -9.697,20.42 -10.04,20.42 C -10.382,20.42 -10.66,20.338 -10.66,20.238 L -10.66,19.143" - id="path2266" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-9.3959999" - y1="19.684" - x2="-8.665" - y2="19.695" - stroke="#000000" - stroke-width="0.100" - id="line2268" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-10.328" - y="19.759001" - id="text2270" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="-10.313" - y="20.159" - id="text2272" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="-0.91500002" - y="19.843" - id="text2274" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="-2.1919999" - y="22.406" - id="text2276" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">50 Users</text> - <text - x="-10.31" - y="17.143" - id="text2278" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="-9.9130001" - y="17.944" - id="text2280" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg2</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.525,15.094 -1.525,15.906 -1.821,15.906 -1.821,19.285 " - id="polyline2282" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2284" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2286" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2288" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2290" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2292" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2294" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2296" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2298" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2300" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2302" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2304" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2306" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2308" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2310" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2312" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="7.5560002" - y="17.367001" - id="text2314" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="7.2179999" - y="17.966999" - id="text2316" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.8.0/22</text> - <text - x="3.204" - y="18.118" - id="text2318" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="2.835" - y="18.618" - id="text2320" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG3-BDC</text> - <text - x="11.592" - y="21.718" - id="text2322" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="11.737" - y="22.218" - id="text2324" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG3-APPS</text> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2326" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2328" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2330" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2332" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2334" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2336" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="19.246" - x2="5.112" - y2="19.246" - stroke="#000000" - stroke-width="0.010" - id="line2338" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.112" - y1="19.49" - x2="4.138" - y2="19.49" - stroke="#000000" - stroke-width="0.010" - id="line2340" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2342" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2344" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2346" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.0770001" - y1="20.341" - x2="5.2940001" - y2="20.341" - stroke="#000000" - stroke-width="0.010" - id="line2348" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2350" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2352" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2354" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2356" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2358" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2360" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2362" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2364" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2366" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2368" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2370" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2372" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.2600002" - y1="19.976" - x2="4.9289999" - y2="19.976" - stroke="#000000" - stroke-width="0.010" - id="line2374" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2376" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2378" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2380" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2382" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2384" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2386" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.855" - x2="4.868" - y2="19.855" - stroke="#000000" - stroke-width="0.010" - id="line2388" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2390" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2392" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2394" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.9289999" - y1="19.672001" - x2="5.0510001" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.402" - x2="5.2329998" - y2="20.402" - stroke="#000000" - stroke-width="0.010" - id="line2398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.462999" - x2="4.138" - y2="20.462999" - stroke="#000000" - stroke-width="0.010" - id="line2400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.524" - x2="5.2329998" - y2="20.524" - stroke="#000000" - stroke-width="0.010" - id="line2402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.705999" - x2="4.138" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.645" - x2="5.2329998" - y2="20.645" - stroke="#000000" - stroke-width="0.010" - id="line2406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.584999" - x2="4.138" - y2="20.584999" - stroke="#000000" - stroke-width="0.010" - id="line2408" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.1989999" - y1="19.672001" - x2="4.2600002" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2410" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.672001" - x2="4.382" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2412" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.915001" - x2="4.382" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2414" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.8070002" - y1="19.915001" - x2="4.868" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2416" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.244" - y1="19.855" - x2="10.386" - y2="19.841999" - stroke="#000000" - stroke-width="0.100" - id="line2418" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7309999" - y1="19.851" - x2="6.7329998" - y2="20.809999" - stroke="#000000" - stroke-width="0.100" - id="line2420" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7350001" - y1="19.851" - x2="6.7319999" - y2="18.851" - stroke="#000000" - stroke-width="0.100" - id="line2422" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1739998" - y1="19.847" - x2="8.1759996" - y2="20.753" - stroke="#000000" - stroke-width="0.100" - id="line2424" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1750002" - y1="19.847" - x2="8.1730003" - y2="18.848" - stroke="#000000" - stroke-width="0.100" - id="line2426" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6169996" - y1="19.844" - x2="9.6190004" - y2="20.771" - stroke="#000000" - stroke-width="0.100" - id="line2428" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6160002" - y1="19.844" - x2="9.6129999" - y2="18.844" - stroke="#000000" - stroke-width="0.100" - id="line2430" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2432" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2434" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8210001" - y="20.875" - id="rect2436" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2438" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2440" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2442" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2444" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2446" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2448" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2450" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2452" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2454" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2456" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2629995" - y="20.864" - id="rect2458" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2460" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2462" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2464" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2466" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2468" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2470" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2472" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2474" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2476" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2478" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.388" - y="18.438999" - id="rect2480" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2482" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2484" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2486" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2488" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2490" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2492" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2494" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2496" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2498" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2500" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8379998" - y="18.464001" - id="rect2502" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2504" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2506" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2508" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2510" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2512" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2514" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2516" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2518" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2520" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2522" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2880001" - y="18.438999" - id="rect2524" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2526" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2528" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2530" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2532" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2534" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2536" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2538" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2540" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2542" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2544" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.135,21.334 L 6.183,21.354 L 7.239,21.354 L 7.287,21.334" - id="path2546" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.239,21.354 L 7.311,21.394" - id="path2548" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.111,21.394 L 6.183,21.354" - id="path2550" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2552" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2554" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2556" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2558" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2560" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2562" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2564" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2566" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2568" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2570" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2572" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2574" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2576" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2578" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2580" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2582" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2584" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2586" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2588" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2590" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2592" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2594" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2596" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2598" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2600" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2602" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2604" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2606" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2608" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2610" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2612" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2614" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2616" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2618" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2620" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2622" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2624" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2626" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.048" - x2="10.618" - y2="19.048" - stroke="#000000" - stroke-width="0.010" - id="line2628" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="19.275999" - x2="11.533" - y2="19.275999" - stroke="#000000" - stroke-width="0.010" - id="line2630" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.448" - x2="10.618" - y2="19.448" - stroke="#000000" - stroke-width="0.010" - id="line2632" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2634" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2636" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2638" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.504" - y1="20.249001" - x2="11.647" - y2="20.249001" - stroke="#000000" - stroke-width="0.010" - id="line2640" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2642" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2644" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2646" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2648" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2650" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2652" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2654" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2656" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2658" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2660" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2662" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2664" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="20.02" - x2="11.247" - y2="20.02" - stroke="#000000" - stroke-width="0.010" - id="line2666" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2668" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2670" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2672" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2674" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2676" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2678" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.906" - x2="11.19" - y2="19.906" - stroke="#000000" - stroke-width="0.010" - id="line2680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.19" - y1="19.962999" - x2="11.133" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.962999" - x2="10.732" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2684" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2686" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2688" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2690" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.620001" - x2="10.732" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.79" - y1="19.620001" - x2="10.847" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.362" - y1="19.620001" - x2="11.476" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.934999" - x2="10.561" - y2="20.934999" - stroke="#000000" - stroke-width="0.010" - id="line2698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.878" - x2="11.59" - y2="20.878" - stroke="#000000" - stroke-width="0.010" - id="line2700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.820999" - x2="10.561" - y2="20.820999" - stroke="#000000" - stroke-width="0.010" - id="line2702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.763" - x2="11.59" - y2="20.763" - stroke="#000000" - stroke-width="0.010" - id="line2704" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.705999" - x2="10.561" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2706" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.649" - x2="11.59" - y2="20.649" - stroke="#000000" - stroke-width="0.010" - id="line2708" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.591999" - x2="10.561" - y2="20.591999" - stroke="#000000" - stroke-width="0.010" - id="line2710" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4960001" - y1="19.819" - x2="4.0770001" - y2="19.855" - stroke="#000000" - stroke-width="0.100" - id="line2712" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.183" - height="1.044" - x="2.302" - y="19.268999" - id="rect2714" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="2.8940001" - cy="20.312" - rx="0.59100002" - ry="0.17399999" - id="ellipse2716" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2718" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2720" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.485,19.269 L 3.485,20.312 C 3.485,20.409 3.221,20.486 2.894,20.486 C 2.567,20.486 2.302,20.409 2.302,20.312 L 2.302,19.269" - id="path2722" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="2.589" - y="19.868999" - id="text2724" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.6040001" - y="20.268999" - id="text2726" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="2.0469999" - y="22.452" - id="text2728" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">250 Users</text> - <text - x="12.072" - y="17.239" - id="text2730" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="12.468" - y="18.039" - id="text2732" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg3</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.129,15.125 -1.129,15.903 5.732,15.903 5.732,16.538 " - id="polyline2734" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="16.1" - y1="22.393" - x2="15.55" - y2="23.143" - stroke="#F7F7F7" - stroke-width="0.100" - id="line2736" - style="stroke:#f7f7f7;stroke-width:0.1" /> - <rect - width="1.159" - height="2.3180001" - x="-8.6529999" - y="11.306" - id="rect2738" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.159" - height="2.3180001" - x="-8.6529999" - y="11.306" - id="rect2740" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.159" - height="2.3180001" - x="-8.6529999" - y="11.306" - id="rect2742" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.92699999" - height="0.92699999" - x="-8.5369997" - y="11.422" - id="rect2744" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.92699999" - height="0.92699999" - x="-8.5369997" - y="11.422" - id="rect2746" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.92699999" - height="0.92699999" - x="-8.5369997" - y="11.422" - id="rect2748" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.6100001" - y1="11.654" - x2="-8.5369997" - y2="11.654" - stroke="#000000" - stroke-width="0.010" - id="line2750" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5369997" - y1="11.886" - x2="-7.6100001" - y2="11.886" - stroke="#000000" - stroke-width="0.010" - id="line2752" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.6100001" - y1="12.059" - x2="-8.5369997" - y2="12.059" - stroke="#000000" - stroke-width="0.010" - id="line2754" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.63800001" - height="0.34799999" - x="-8.5369997" - y="12.465" - id="rect2756" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.63800001" - height="0.34799999" - x="-8.5369997" - y="12.465" - id="rect2758" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.63800001" - height="0.34799999" - x="-8.5369997" - y="12.465" - id="rect2760" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6529999" - y1="12.871" - x2="-7.494" - y2="12.871" - stroke="#000000" - stroke-width="0.010" - id="line2762" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057999998" - height="0.057999998" - x="-8.1309996" - y="12.987" - id="rect2764" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057999998" - height="0.057999998" - x="-8.1309996" - y="12.987" - id="rect2766" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057999998" - height="0.057999998" - x="-8.1309996" - y="12.987" - id="rect2768" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.8990002" - y="12.987" - id="rect2770" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.8990002" - y="12.987" - id="rect2772" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.8990002" - y="12.987" - id="rect2774" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.6680002" - y="12.987" - id="rect2776" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.6680002" - y="12.987" - id="rect2778" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057999998" - height="0.057999998" - x="-7.6680002" - y="12.987" - id="rect2780" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.116" - height="0.057999998" - x="-7.7259998" - y="12.639" - id="rect2782" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.116" - height="0.057999998" - x="-7.7259998" - y="12.639" - id="rect2784" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.116" - height="0.057999998" - x="-7.7259998" - y="12.639" - id="rect2786" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5369997" - y1="12.639" - x2="-7.8990002" - y2="12.639" - stroke="#000000" - stroke-width="0.010" - id="line2788" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17399999" - height="0.17399999" - x="-8.5369997" - y="12.929" - id="rect2790" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17399999" - height="0.17399999" - x="-8.5369997" - y="12.929" - id="rect2792" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17399999" - height="0.17399999" - x="-8.5369997" - y="12.929" - id="rect2794" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.81099999" - height="0.057999998" - x="-8.4790001" - y="12.117" - id="rect2796" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.81099999" - height="0.057999998" - x="-8.4790001" - y="12.117" - id="rect2798" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.81099999" - height="0.057999998" - x="-8.4790001" - y="12.117" - id="rect2800" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4790001" - y1="12.523" - x2="-7.9569998" - y2="12.523" - stroke="#000000" - stroke-width="0.010" - id="line2802" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.9569998" - y1="12.581" - x2="-8.0150003" - y2="12.581" - stroke="#000000" - stroke-width="0.010" - id="line2804" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4790001" - y1="12.581" - x2="-8.4209995" - y2="12.581" - stroke="#000000" - stroke-width="0.010" - id="line2806" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28999999" - height="0.057999998" - x="-8.3629999" - y="12.523" - id="rect2808" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28999999" - height="0.057999998" - x="-8.3629999" - y="12.523" - id="rect2810" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28999999" - height="0.057999998" - x="-8.3629999" - y="12.523" - id="rect2812" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4790001" - y1="12.233" - x2="-8.4209995" - y2="12.233" - stroke="#000000" - stroke-width="0.010" - id="line2814" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.3629999" - y1="12.233" - x2="-8.3050003" - y2="12.233" - stroke="#000000" - stroke-width="0.010" - id="line2816" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.7839999" - y1="12.233" - x2="-7.6680002" - y2="12.233" - stroke="#000000" - stroke-width="0.010" - id="line2818" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.552" - y1="13.566" - x2="-8.5950003" - y2="13.566" - stroke="#000000" - stroke-width="0.010" - id="line2820" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5950003" - y1="13.508" - x2="-7.552" - y2="13.508" - stroke="#000000" - stroke-width="0.010" - id="line2822" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.552" - y1="13.45" - x2="-8.5950003" - y2="13.45" - stroke="#000000" - stroke-width="0.010" - id="line2824" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5950003" - y1="13.393" - x2="-7.552" - y2="13.393" - stroke="#000000" - stroke-width="0.010" - id="line2826" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.552" - y1="13.335" - x2="-8.5950003" - y2="13.335" - stroke="#000000" - stroke-width="0.010" - id="line2828" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5950003" - y1="13.277" - x2="-7.552" - y2="13.277" - stroke="#000000" - stroke-width="0.010" - id="line2830" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.552" - y1="13.219" - x2="-8.5950003" - y2="13.219" - stroke="#000000" - stroke-width="0.010" - id="line2832" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.0749998" - y1="11.094" - x2="-8.1000004" - y2="11.344" - stroke="#000000" - stroke-width="0.100" - id="line2834" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-10.538" - y="12.993" - id="text2836" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="-10.728" - y="13.493" - id="text2838" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GNY-DBC</text> - <text - x="-11.175" - y="2.119" - id="text2840" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Here there is a single Windows Network|</text> - <text - x="-11.175" - y="2.7190001" - id="text2842" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain. There is an LDAP Master in GNY</text> - <text - x="-11.175" - y="3.319" - id="text2844" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">with a Slave LDAP server in each remote</text> - <text - x="-11.175" - y="3.9189999" - id="text2846" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">office. There is at least one Application</text> - <text - x="-11.175" - y="4.5190001" - id="text2848" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">server in each office and at least one BDC</text> - <text - x="-11.175" - y="5.119" - id="text2850" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">in every office.</text> - <text - x="-11.175" - y="6.3189998" - id="text2852" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">There is 1 BDC per 50 users.</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net-Ar.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net-Ar.png Binary files differdeleted file mode 100644 index 2f4d80f47b..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net-Ar.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net.png Binary files differdeleted file mode 100644 index 53e8295266..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net.svg b/docs/htmldocs/Samba3-ByExample/images/chap7-net.svg deleted file mode 100644 index a5ba690540..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net.svg +++ /dev/null @@ -1,9010 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="34.602001cm" - height="23.67cm" - viewBox="-11.55 -0.456 23.052 23.213" - id="svg2"> - <defs - id="defs2739" /> - <rect - width="13.8" - height="6.513" - x="1.375" - y="16.256001" - id="rect4" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path6" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path8" - style="fill:#ebebeb;stroke:none" /> - <rect - width="14.4" - height="5.9130001" - x="1.075" - y="16.556" - id="rect10" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path12" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path14" - style="fill:#ebebeb;stroke:none" /> - <line - x1="1.375" - y1="16.256001" - x2="15.175" - y2="16.256001" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="1.375" - y1="22.768999" - x2="15.175" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.075" - y1="16.556" - x2="1.075" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="15.475" - y1="16.556" - x2="15.475" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.617" - height="6.8530002" - x="0.495" - y="-0.40599999" - id="rect32" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path34" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path36" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.217" - height="6.2529998" - x="0.19499999" - y="-0.106" - id="rect38" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path40" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path42" - style="fill:#ebebeb;stroke:none" /> - <line - x1="0.495" - y1="-0.40599999" - x2="11.112" - y2="-0.40599999" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.495" - y1="6.447" - x2="11.112" - y2="6.447" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.19499999" - y1="-0.106" - x2="0.19499999" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.412" - y1="-0.106" - x2="11.412" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.337" - height="6.8600001" - x="12.35" - y="-0.43099999" - id="rect60" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path62" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path64" - style="fill:#ebebeb;stroke:none" /> - <rect - width="10.937" - height="6.2600002" - x="12.05" - y="-0.131" - id="rect66" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path68" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path70" - style="fill:#ebebeb;stroke:none" /> - <line - x1="12.35" - y1="-0.43099999" - x2="22.687" - y2="-0.43099999" - stroke="#000000" - stroke-width="0.050" - id="line72" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="12.35" - y1="6.4289999" - x2="22.687" - y2="6.4289999" - stroke="#000000" - stroke-width="0.050" - id="line74" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="12.05" - y1="-0.131" - x2="12.05" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line80" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="22.987" - y1="-0.131" - x2="22.987" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line82" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.821" - height="8.375" - x="11.905" - y="7.244" - id="rect88" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path90" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path92" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.421" - height="7.7750001" - x="11.605" - y="7.5440001" - id="rect94" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path96" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path98" - style="fill:#ebebeb;stroke:none" /> - <line - x1="11.905" - y1="7.244" - x2="22.726999" - y2="7.244" - stroke="#000000" - stroke-width="0.050" - id="line100" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.905" - y1="15.619" - x2="22.726999" - y2="15.619" - stroke="#000000" - stroke-width="0.050" - id="line102" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path104" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="11.605" - y1="7.5440001" - x2="11.605" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line108" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="23.027" - y1="7.5440001" - x2="23.027" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line110" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path112" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="15.1" - height="8.3719997" - x="-11.225" - y="7.1339998" - id="rect116" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.225,7.134 C -11.390685,7.134 -11.525,7.2683146 -11.525,7.434" - id="path118" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 4.175,7.434 C 4.175,7.2683146 4.0406854,7.134 3.875,7.134" - id="path120" - style="fill:#ebebeb;stroke:none" /> - <rect - width="15.7" - height="7.7719998" - x="-11.525" - y="7.434" - id="rect122" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.525,15.206 C -11.525,15.371685 -11.390685,15.506 -11.225,15.506" - id="path124" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 3.875,15.506 C 4.0406854,15.506 4.175,15.371685 4.175,15.206" - id="path126" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.225" - y1="7.1339998" - x2="3.875" - y2="7.1339998" - stroke="#000000" - stroke-width="0.050" - id="line128" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.225" - y1="15.506" - x2="3.875" - y2="15.506" - stroke="#000000" - stroke-width="0.050" - id="line130" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.225,7.134 C -11.390685,7.134 -11.525,7.2683146 -11.525,7.434" - id="path132" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.175,7.434 C 4.175,7.2683146 4.0406854,7.134 3.875,7.134" - id="path134" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.525" - y1="7.434" - x2="-11.525" - y2="15.206" - stroke="#000000" - stroke-width="0.050" - id="line136" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="4.1750002" - y1="7.434" - x2="4.1750002" - y2="15.206" - stroke="#000000" - stroke-width="0.050" - id="line138" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.525,15.206 C -11.525,15.371685 -11.390685,15.506 -11.225,15.506" - id="path140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 3.875,15.506 C 4.0406854,15.506 4.175,15.371685 4.175,15.206" - id="path142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.95" - y1="11.168" - x2="4.8109999" - y2="11.165" - stroke="#000000" - stroke-width="0.300" - id="line144" - style="stroke:#000000;stroke-width:0.30000001" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="4.145,2.624 4.145,6.819 5.675,6.819 5.675,9.944 " - id="polyline146" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="16.100,2.794 16.100,6.844 8.674,6.844 8.674,9.887 " - id="polyline148" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect150" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect154" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.267,14.295 C -1.267,14.785 -1.169,14.687 -1.659,14.687" - id="path156" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.267,14.295 C -1.267,14.785 -1.169,14.687 -1.659,14.687" - id="path158" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.22,14.371 -1.269,14.273 -1.318,14.371 -1.22,14.371 " - id="polygon160" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.22,14.371 -1.269,14.273 -1.318,14.371 -1.22,14.371 " - id="polygon162" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.583,14.636 -1.681,14.685 -1.583,14.734 -1.583,14.636 " - id="polygon164" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.583,14.636 -1.681,14.685 -1.583,14.734 -1.583,14.636 " - id="polygon166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -0.976,14.571 C -1.466,14.571 -1.368,14.473 -1.368,14.963" - id="path168" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -0.976,14.571 C -1.466,14.571 -1.368,14.473 -1.368,14.963" - id="path170" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.063,14.616 -0.965,14.567 -1.063,14.518 -1.063,14.616 " - id="polygon172" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.063,14.616 -0.965,14.567 -1.063,14.518 -1.063,14.616 " - id="polygon174" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.426,14.881 -1.377,14.979 -1.328,14.881 -1.426,14.881 " - id="polygon176" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.426,14.881 -1.377,14.979 -1.328,14.881 -1.426,14.881 " - id="polygon178" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.306" - y1="11.165" - x2="-1.3279999" - y2="14.136" - stroke="#000000" - stroke-width="0.100" - id="line180" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-9.1479998" - y="1.442" - id="text182" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="0.71700001" - y="7.6999998" - id="text184" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="0.37799999" - y="8.1999998" - id="text186" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GWYN-PDC</text> - <line - x1="6.118" - y1="13.16" - x2="7.7179999" - y2="13.135" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.10,0.10" - id="line188" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <text - x="8.4429998" - y="13.325" - id="text190" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">= VPN</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="10.645,11.075 10.645,9.069 16.025,9.069 16.025,11.368 " - id="polyline192" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-3.0239999" - y="14.751" - id="text194" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="4.1469998" - y="17.031" - id="text196" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect198" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect202" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect204" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect208" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="2.027" - x2="3.5869999" - y2="2.027" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.5869999" - y1="2.2709999" - x2="2.6140001" - y2="2.2709999" - stroke="#000000" - stroke-width="0.010" - id="line212" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect214" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect216" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.553" - y1="3.122" - x2="3.77" - y2="3.122" - stroke="#000000" - stroke-width="0.010" - id="line220" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect222" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect226" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect228" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect230" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect232" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect234" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect236" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect238" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect240" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect242" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect244" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7360001" - y1="2.757" - x2="3.405" - y2="2.757" - stroke="#000000" - stroke-width="0.010" - id="line246" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect248" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect252" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect254" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect256" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect258" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.6359999" - x2="3.3440001" - y2="2.6359999" - stroke="#000000" - stroke-width="0.010" - id="line260" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect262" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect264" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect266" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.405" - y1="2.4530001" - x2="3.527" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line268" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.1830001" - x2="3.7090001" - y2="3.1830001" - stroke="#000000" - stroke-width="0.010" - id="line270" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.244" - x2="2.6140001" - y2="3.244" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.3050001" - x2="3.7090001" - y2="3.3050001" - stroke="#000000" - stroke-width="0.010" - id="line274" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.487" - x2="2.6140001" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line276" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.427" - x2="3.7090001" - y2="3.427" - stroke="#000000" - stroke-width="0.010" - id="line278" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.3659999" - x2="2.6140001" - y2="3.3659999" - stroke="#000000" - stroke-width="0.010" - id="line280" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.675" - y1="2.4530001" - x2="2.7360001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line282" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.4530001" - x2="2.8570001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line284" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.697" - x2="2.8570001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line286" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.283" - y1="2.697" - x2="3.3440001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line288" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.72" - y1="2.6359999" - x2="8.8620005" - y2="2.6229999" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.2069998" - y1="2.632" - x2="5.2090001" - y2="3.5910001" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.21" - y1="2.632" - x2="5.2080002" - y2="1.632" - stroke="#000000" - stroke-width="0.100" - id="line294" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.6500001" - y1="2.6289999" - x2="6.652" - y2="3.5339999" - stroke="#000000" - stroke-width="0.100" - id="line296" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.651" - y1="2.6289999" - x2="6.6479998" - y2="1.6289999" - stroke="#000000" - stroke-width="0.100" - id="line298" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.092" - y1="2.625" - x2="8.0950003" - y2="3.552" - stroke="#000000" - stroke-width="0.100" - id="line300" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.0909996" - y1="2.625" - x2="8.0889997" - y2="1.625" - stroke="#000000" - stroke-width="0.100" - id="line302" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect304" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect306" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.296" - y="3.6559999" - id="rect308" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon310" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon312" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon314" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon316" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect318" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect320" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon322" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon324" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect326" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect328" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7389998" - y="3.645" - id="rect330" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon332" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon334" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon336" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon338" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect340" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect342" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon344" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon346" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect348" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect350" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="4.8639998" - y="1.22" - id="rect352" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon354" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon356" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon358" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon360" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect362" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect364" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon366" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon368" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect370" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect372" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.3140001" - y="1.245" - id="rect374" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon376" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon378" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon380" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon382" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect384" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect386" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon388" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon390" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect392" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect394" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7639999" - y="1.22" - id="rect396" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon398" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon400" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon402" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon404" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect406" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect408" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon410" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon412" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon414" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon416" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.611,4.115 L 4.659,4.135 L 5.715,4.135 L 5.763,4.115" - id="path418" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.715,4.135 L 5.787,4.175" - id="path420" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.587,4.175 L 4.659,4.135" - id="path422" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon424" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon426" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon428" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon430" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse432" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse434" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse436" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse438" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse440" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse442" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse444" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse446" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse448" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse450" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse452" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse454" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse456" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse458" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse460" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse462" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse464" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse466" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse468" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse470" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse472" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse474" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse476" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse478" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse480" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse482" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse484" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse486" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect488" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect490" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect492" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect494" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect496" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect498" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="1.829" - x2="9.0939999" - y2="1.829" - stroke="#000000" - stroke-width="0.010" - id="line500" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.0580001" - x2="10.009" - y2="2.0580001" - stroke="#000000" - stroke-width="0.010" - id="line502" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="2.2290001" - x2="9.0939999" - y2="2.2290001" - stroke="#000000" - stroke-width="0.010" - id="line504" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect506" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect508" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect510" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.9790001" - y1="3.03" - x2="10.123" - y2="3.03" - stroke="#000000" - stroke-width="0.010" - id="line512" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect514" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect516" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect518" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect520" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect522" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect524" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect526" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect528" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect530" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect532" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect534" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect536" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.8010001" - x2="9.7229996" - y2="2.8010001" - stroke="#000000" - stroke-width="0.010" - id="line538" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect540" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect542" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect544" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect546" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect548" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect550" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.687" - x2="9.6660004" - y2="2.687" - stroke="#000000" - stroke-width="0.010" - id="line552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.6660004" - y1="2.744" - x2="9.6090002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line554" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.744" - x2="9.2080002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line556" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect558" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect560" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect562" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.401" - x2="9.2080002" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line564" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.2650003" - y1="2.401" - x2="9.323" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line566" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.8369999" - y1="2.401" - x2="9.9519997" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line568" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.7160001" - x2="9.0369997" - y2="3.7160001" - stroke="#000000" - stroke-width="0.010" - id="line570" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.6589999" - x2="10.066" - y2="3.6589999" - stroke="#000000" - stroke-width="0.010" - id="line572" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.602" - x2="9.0369997" - y2="3.602" - stroke="#000000" - stroke-width="0.010" - id="line574" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.5439999" - x2="10.066" - y2="3.5439999" - stroke="#000000" - stroke-width="0.010" - id="line576" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.487" - x2="9.0369997" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line578" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.4300001" - x2="10.066" - y2="3.4300001" - stroke="#000000" - stroke-width="0.010" - id="line580" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.3729999" - x2="9.0369997" - y2="3.3729999" - stroke="#000000" - stroke-width="0.010" - id="line582" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="5.9629998" - y="5.2589998" - id="text584" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="5.5580001" - y="5.8590002" - id="text586" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.12.0/22</text> - <text - x="1.459" - y="4.1030002" - id="text588" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="1.239" - y="4.6030002" - id="text590" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIVA-BDC</text> - <text - x="8.3649998" - y="0.375" - id="text592" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="8.658" - y="0.875" - id="text594" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIVA-APPS</text> - <rect - width="1.291" - height="1.1390001" - x="0.61699998" - y="2.0880001" - id="rect596" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="1.263" - cy="3.227" - rx="0.64499998" - ry="0.19" - id="ellipse598" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse600" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse602" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 1.908,2.088 L 1.908,3.227 C 1.908,3.332 1.619,3.417 1.263,3.417 C 0.906,3.417 0.617,3.332 0.617,3.227 L 0.617,2.088" - id="path604" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="1.928" - y1="2.523" - x2="2.503" - y2="2.523" - stroke="#000000" - stroke-width="0.100" - id="line606" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.935" - y="2.7219999" - id="text608" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="0.94999999" - y="3.122" - id="text610" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect612" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect614" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect616" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect618" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect620" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect622" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="2.1900001" - x2="15.431" - y2="2.1900001" - stroke="#000000" - stroke-width="0.010" - id="line624" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="2.4330001" - x2="14.458" - y2="2.4330001" - stroke="#000000" - stroke-width="0.010" - id="line626" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect628" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect630" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect632" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="3.2850001" - x2="15.614" - y2="3.2850001" - stroke="#000000" - stroke-width="0.010" - id="line634" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect636" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect638" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect640" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect642" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect644" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect646" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect648" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect650" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect652" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect654" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect656" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect658" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.58" - y1="2.9200001" - x2="15.249" - y2="2.9200001" - stroke="#000000" - stroke-width="0.010" - id="line660" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect662" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect664" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect666" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect668" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect670" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect672" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.7980001" - x2="15.188" - y2="2.7980001" - stroke="#000000" - stroke-width="0.010" - id="line674" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect676" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect678" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect680" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.249" - y1="2.615" - x2="15.371" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.345" - x2="15.553" - y2="3.345" - stroke="#000000" - stroke-width="0.010" - id="line684" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.4059999" - x2="14.458" - y2="3.4059999" - stroke="#000000" - stroke-width="0.010" - id="line686" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.467" - x2="15.553" - y2="3.467" - stroke="#000000" - stroke-width="0.010" - id="line688" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.6500001" - x2="14.458" - y2="3.6500001" - stroke="#000000" - stroke-width="0.010" - id="line690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.589" - x2="15.553" - y2="3.589" - stroke="#000000" - stroke-width="0.010" - id="line692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.5280001" - x2="14.458" - y2="3.5280001" - stroke="#000000" - stroke-width="0.010" - id="line694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="2.615" - x2="14.58" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.615" - x2="14.701" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.859" - x2="14.701" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="2.859" - x2="15.188" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.564" - y1="2.7980001" - x2="20.705" - y2="2.7850001" - stroke="#000000" - stroke-width="0.100" - id="line704" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.051001" - y1="2.7939999" - x2="17.052999" - y2="3.753" - stroke="#000000" - stroke-width="0.100" - id="line706" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.054001" - y1="2.7939999" - x2="17.052" - y2="1.794" - stroke="#000000" - stroke-width="0.100" - id="line708" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.493" - y1="2.7909999" - x2="18.496" - y2="3.6960001" - stroke="#000000" - stroke-width="0.100" - id="line710" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.495001" - y1="2.7909999" - x2="18.492001" - y2="1.791" - stroke="#000000" - stroke-width="0.100" - id="line712" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.936001" - y1="2.7869999" - x2="19.938999" - y2="3.714" - stroke="#000000" - stroke-width="0.100" - id="line714" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.934999" - y1="2.7869999" - x2="19.933001" - y2="1.7869999" - stroke="#000000" - stroke-width="0.100" - id="line716" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect718" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect720" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.139999" - y="3.8180001" - id="rect722" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon724" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon726" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon728" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon730" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect732" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect734" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon736" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon738" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect740" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect742" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.583" - y="3.8069999" - id="rect744" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon746" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon748" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon750" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon752" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect754" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect756" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon758" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon760" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect762" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect764" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.708" - y="1.382" - id="rect766" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon768" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon770" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon772" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon774" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect776" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect778" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon780" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon782" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect784" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect786" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.158001" - y="1.4069999" - id="rect788" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon790" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon792" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon794" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon796" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect798" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect800" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon802" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon804" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect806" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect808" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.608" - y="1.382" - id="rect810" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon812" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon814" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon816" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon818" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect820" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect822" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon824" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon826" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon828" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon830" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.454,4.277 L 16.502,4.297 L 17.558,4.297 L 17.606,4.277" - id="path832" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.558,4.297 L 17.63,4.337" - id="path834" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.43,4.337 L 16.502,4.297" - id="path836" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon838" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon840" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon842" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon844" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse846" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse848" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse850" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse852" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse854" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse856" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse858" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse860" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse862" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse864" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse866" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse868" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse870" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse872" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse874" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse876" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse878" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse880" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse882" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse884" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse886" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse888" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse890" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse892" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse894" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse896" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse898" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse900" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect902" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect904" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect906" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect908" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect910" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect912" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="1.9910001" - x2="20.938" - y2="1.9910001" - stroke="#000000" - stroke-width="0.010" - id="line914" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.22" - x2="21.853001" - y2="2.22" - stroke="#000000" - stroke-width="0.010" - id="line916" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="2.391" - x2="20.938" - y2="2.391" - stroke="#000000" - stroke-width="0.010" - id="line918" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect920" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect922" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect924" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.823" - y1="3.1919999" - x2="21.966999" - y2="3.1919999" - stroke="#000000" - stroke-width="0.010" - id="line926" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect928" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect930" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect932" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect934" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect936" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect938" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect940" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect942" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect944" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect946" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect948" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect950" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.9630001" - x2="21.566999" - y2="2.9630001" - stroke="#000000" - stroke-width="0.010" - id="line952" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect954" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect956" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect958" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect960" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect962" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect964" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.849" - x2="21.51" - y2="2.849" - stroke="#000000" - stroke-width="0.010" - id="line966" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.51" - y1="2.9059999" - x2="21.452" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line968" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.9059999" - x2="21.052" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line970" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect972" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect974" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect976" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.563" - x2="21.052" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line978" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.108999" - y1="2.563" - x2="21.167" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line980" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.681" - y1="2.563" - x2="21.796" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line982" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.878" - x2="20.881001" - y2="3.878" - stroke="#000000" - stroke-width="0.010" - id="line984" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.8210001" - x2="21.91" - y2="3.8210001" - stroke="#000000" - stroke-width="0.010" - id="line986" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.7639999" - x2="20.881001" - y2="3.7639999" - stroke="#000000" - stroke-width="0.010" - id="line988" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.707" - x2="21.91" - y2="3.707" - stroke="#000000" - stroke-width="0.010" - id="line990" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.6489999" - x2="20.881001" - y2="3.6489999" - stroke="#000000" - stroke-width="0.010" - id="line992" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.592" - x2="21.91" - y2="3.592" - stroke="#000000" - stroke-width="0.010" - id="line994" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.5350001" - x2="20.881001" - y2="3.5350001" - stroke="#000000" - stroke-width="0.010" - id="line996" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="18.056999" - y="5.3460002" - id="text998" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="17.650999" - y="5.9460001" - id="text1000" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.16.0/22</text> - <text - x="13.478" - y="4.3400002" - id="text1002" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="13.248" - y="4.8400002" - id="text1004" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIVB-BDC</text> - <text - x="19.816999" - y="0.35600001" - id="text1006" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="20.101" - y="0.85600001" - id="text1008" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIVB-APPS</text> - <rect - width="1.326" - height="1.17" - x="12.501" - y="2.28" - id="rect1010" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="13.164" - cy="3.451" - rx="0.66299999" - ry="0.19499999" - id="ellipse1012" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.164" - cy="2.28" - rx="0.66299999" - ry="0.19499999" - id="ellipse1014" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.164" - cy="2.28" - rx="0.66299999" - ry="0.19499999" - id="ellipse1016" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.827,2.28 L 13.827,3.451 C 13.827,3.559 13.53,3.646 13.164,3.646 C 12.798,3.646 12.501,3.559 12.501,3.451 L 12.501,2.28" - id="path1018" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="13.822" - y1="2.8599999" - x2="14.397" - y2="2.7980001" - stroke="#000000" - stroke-width="0.100" - id="line1020" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.809" - y="2.9619999" - id="text1022" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.823" - y="3.362" - id="text1024" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1026" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1028" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1030" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1032" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1034" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1036" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="10.744" - x2="15.309" - y2="10.744" - stroke="#000000" - stroke-width="0.010" - id="line1038" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.309" - y1="10.988" - x2="14.336" - y2="10.988" - stroke="#000000" - stroke-width="0.010" - id="line1040" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1042" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1044" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1046" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.275" - y1="11.839" - x2="15.492" - y2="11.839" - stroke="#000000" - stroke-width="0.010" - id="line1048" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1050" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1052" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1054" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1056" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1058" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1060" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1062" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1064" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1066" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1068" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1070" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1072" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="11.474" - x2="15.127" - y2="11.474" - stroke="#000000" - stroke-width="0.010" - id="line1074" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1076" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1078" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1080" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1082" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1084" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1086" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.353" - x2="15.066" - y2="11.353" - stroke="#000000" - stroke-width="0.010" - id="line1088" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1090" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1092" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1094" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="11.17" - x2="15.249" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1096" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="11.9" - x2="15.431" - y2="11.9" - stroke="#000000" - stroke-width="0.010" - id="line1098" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="11.961" - x2="14.336" - y2="11.961" - stroke="#000000" - stroke-width="0.010" - id="line1100" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.022" - x2="15.431" - y2="12.022" - stroke="#000000" - stroke-width="0.010" - id="line1102" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.204" - x2="14.336" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1104" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.143" - x2="15.431" - y2="12.143" - stroke="#000000" - stroke-width="0.010" - id="line1106" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.083" - x2="14.336" - y2="12.083" - stroke="#000000" - stroke-width="0.010" - id="line1108" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="11.17" - x2="14.458" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1110" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.17" - x2="14.579" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1112" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.413" - x2="14.579" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1114" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.005" - y1="11.413" - x2="15.066" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1116" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.442" - y1="11.353" - x2="20.584" - y2="11.34" - stroke="#000000" - stroke-width="0.100" - id="line1118" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.929001" - y1="11.349" - x2="16.931" - y2="12.308" - stroke="#000000" - stroke-width="0.100" - id="line1120" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.931999" - y1="11.349" - x2="16.93" - y2="10.349" - stroke="#000000" - stroke-width="0.100" - id="line1122" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372" - y1="11.345" - x2="18.374001" - y2="12.251" - stroke="#000000" - stroke-width="0.100" - id="line1124" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372999" - y1="11.345" - x2="18.370001" - y2="10.345" - stroke="#000000" - stroke-width="0.100" - id="line1126" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.815001" - y1="11.342" - x2="19.816999" - y2="12.269" - stroke="#000000" - stroke-width="0.100" - id="line1128" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.813" - y1="11.342" - x2="19.811001" - y2="10.342" - stroke="#000000" - stroke-width="0.100" - id="line1130" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1132" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1134" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.018" - y="12.373" - id="rect1136" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1138" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1142" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1144" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1146" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1148" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1150" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1152" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1154" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1156" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.461" - y="12.362" - id="rect1158" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1160" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1162" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1164" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1166" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1168" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1170" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1172" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1174" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1176" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1178" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.586" - y="9.9370003" - id="rect1180" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1182" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1184" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1186" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1188" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1190" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1192" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1194" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1196" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1198" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1200" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.035999" - y="9.9619999" - id="rect1202" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1204" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1206" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1208" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1210" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1212" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1214" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1216" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1218" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1220" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1222" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.486" - y="9.9370003" - id="rect1224" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1226" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1228" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1230" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1232" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1234" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1236" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1238" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1240" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1242" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1244" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.333,12.832 L 16.381,12.852 L 17.437,12.852 L 17.485,12.832" - id="path1246" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.437,12.852 L 17.509,12.892" - id="path1248" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.309,12.892 L 16.381,12.852" - id="path1250" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1252" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1254" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1256" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1258" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1260" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1262" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1264" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1266" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1268" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1270" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1272" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1274" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1276" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1278" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1280" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1282" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1284" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1286" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1288" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1290" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1292" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1294" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1296" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1298" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1300" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1302" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1304" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1306" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1308" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1310" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1312" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1314" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1316" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1318" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1320" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1322" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1324" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1326" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.546" - x2="20.816" - y2="10.546" - stroke="#000000" - stroke-width="0.010" - id="line1328" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="10.774" - x2="21.731001" - y2="10.774" - stroke="#000000" - stroke-width="0.010" - id="line1330" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.946" - x2="20.816" - y2="10.946" - stroke="#000000" - stroke-width="0.010" - id="line1332" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1334" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1336" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1338" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.701" - y1="11.747" - x2="21.844999" - y2="11.747" - stroke="#000000" - stroke-width="0.010" - id="line1340" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1342" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1344" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1346" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1348" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1350" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1352" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1354" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1356" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1358" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1360" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1362" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1364" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="11.518" - x2="21.445" - y2="11.518" - stroke="#000000" - stroke-width="0.010" - id="line1366" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1368" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1370" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1372" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1374" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1376" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1378" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.404" - x2="21.388" - y2="11.404" - stroke="#000000" - stroke-width="0.010" - id="line1380" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.388" - y1="11.461" - x2="21.330999" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1382" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.461" - x2="20.93" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1384" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1386" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1388" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1390" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.118" - x2="20.93" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1392" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.987" - y1="11.118" - x2="21.045" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1394" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.559" - y1="11.118" - x2="21.674" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.433" - x2="20.759001" - y2="12.433" - stroke="#000000" - stroke-width="0.010" - id="line1398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.376" - x2="21.788" - y2="12.376" - stroke="#000000" - stroke-width="0.010" - id="line1400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.319" - x2="20.759001" - y2="12.319" - stroke="#000000" - stroke-width="0.010" - id="line1402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.261" - x2="21.788" - y2="12.261" - stroke="#000000" - stroke-width="0.010" - id="line1404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.204" - x2="20.759001" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.147" - x2="21.788" - y2="12.147" - stroke="#000000" - stroke-width="0.010" - id="line1408" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.09" - x2="20.759001" - y2="12.09" - stroke="#000000" - stroke-width="0.010" - id="line1410" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="18.610001" - y="9.026" - id="text1412" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="18.176001" - y="9.6260004" - id="text1414" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.20.0/22</text> - <text - x="13.881" - y="12.895" - id="text1416" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="13.65" - y="13.395" - id="text1418" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIVC-BDC</text> - <text - x="19.937" - y="14.042" - id="text1420" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="20.219" - y="14.542" - id="text1422" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">DIVC-APPS</text> - <rect - width="1.3150001" - height="1.161" - x="12.175" - y="9.5089998" - id="rect1424" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.833" - cy="10.669" - rx="0.65799999" - ry="0.193" - id="ellipse1426" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.833" - cy="9.5089998" - rx="0.65799999" - ry="0.193" - id="ellipse1428" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.833" - cy="9.5089998" - rx="0.65799999" - ry="0.193" - id="ellipse1430" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.491,9.509 L 13.491,10.669 C 13.491,10.776 13.196,10.863 12.833,10.863 C 12.47,10.863 12.175,10.776 12.175,10.669 L 12.175,9.509" - id="path1432" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="14.219" - y1="11.042" - x2="13.469" - y2="10.167" - stroke="#000000" - stroke-width="0.100" - id="line1434" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.537" - y="10.142" - id="text1436" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.552" - y="10.542" - id="text1438" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1440" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1442" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="6.7909999" - y="11.036" - id="text1444" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <path - d="M 4.7,11.1 C 5.035363,11.196174 5.3953356,11.076093 5.6057965,10.797841 C 5.8162574,10.51959 5.8338243,10.140524 5.65,9.844" - id="path1446" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 8.675,9.794 C 7.4940305,10.104758 6.3530779,10.551408 5.275,11.125" - id="path1448" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 4.7,11.15 C 6.6098972,11.931939 8.7554368,11.904871 10.645,11.075" - id="path1450" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1452" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1454" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1456" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1458" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1460" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1462" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.1389999" - x2="1.8710001" - y2="9.1389999" - stroke="#000000" - stroke-width="0.010" - id="line1464" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="9.4180002" - x2="0.75400001" - y2="9.4180002" - stroke="#000000" - stroke-width="0.010" - id="line1466" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.698" - x2="1.8710001" - y2="9.698" - stroke="#000000" - stroke-width="0.010" - id="line1468" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.9770002" - x2="1.8710001" - y2="9.9770002" - stroke="#000000" - stroke-width="0.010" - id="line1470" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="10.256" - x2="0.75400001" - y2="10.256" - stroke="#000000" - stroke-width="0.010" - id="line1472" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1474" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1476" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1478" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.61400002" - y1="11.374" - x2="2.0109999" - y2="11.374" - stroke="#000000" - stroke-width="0.010" - id="line1480" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1482" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1484" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1486" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1488" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1490" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1492" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1494" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1496" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1498" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1500" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1502" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1504" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="10.885" - x2="1.522" - y2="10.885" - stroke="#000000" - stroke-width="0.010" - id="line1506" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1508" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1510" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1512" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1514" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1516" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1518" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.745" - x2="1.452" - y2="10.745" - stroke="#000000" - stroke-width="0.010" - id="line1520" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.452" - y1="10.815" - x2="1.382" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1522" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.815" - x2="0.89300001" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1524" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1526" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1528" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1530" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.466" - x2="0.89300001" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1532" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.963" - y1="10.466" - x2="1.033" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1534" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.6619999" - y1="10.466" - x2="1.801" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1536" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.84" - x2="1.941" - y2="12.84" - stroke="#000000" - stroke-width="0.010" - id="line1538" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.77" - x2="0.68400002" - y2="12.77" - stroke="#000000" - stroke-width="0.010" - id="line1540" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.701" - x2="1.941" - y2="12.701" - stroke="#000000" - stroke-width="0.010" - id="line1542" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.631" - x2="0.68400002" - y2="12.631" - stroke="#000000" - stroke-width="0.010" - id="line1544" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.561" - x2="1.941" - y2="12.561" - stroke="#000000" - stroke-width="0.010" - id="line1546" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.491" - x2="0.68400002" - y2="12.491" - stroke="#000000" - stroke-width="0.010" - id="line1548" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.421" - x2="1.941" - y2="12.421" - stroke="#000000" - stroke-width="0.010" - id="line1550" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.351" - x2="0.68400002" - y2="12.351" - stroke="#000000" - stroke-width="0.010" - id="line1552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.282" - x2="1.941" - y2="12.282" - stroke="#000000" - stroke-width="0.010" - id="line1554" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.212" - x2="0.68400002" - y2="12.212" - stroke="#000000" - stroke-width="0.010" - id="line1556" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.142" - x2="1.941" - y2="12.142" - stroke="#000000" - stroke-width="0.010" - id="line1558" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.072" - x2="0.68400002" - y2="12.072" - stroke="#000000" - stroke-width="0.010" - id="line1560" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.002" - x2="1.941" - y2="12.002" - stroke="#000000" - stroke-width="0.010" - id="line1562" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="11.932" - x2="0.68400002" - y2="11.932" - stroke="#000000" - stroke-width="0.010" - id="line1564" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.559" - y="12.296" - id="rect1566" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.559" - y="12.296" - id="rect1568" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.454" - y="12.401" - id="rect1570" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.427,13.024 -5.928,13.024 -5.928,13.137 -6.401,13.137 -6.427,13.024 " - id="polygon1572" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.427,13.024 -5.928,13.024 -5.928,13.137 -6.401,13.137 -6.427,13.024 " - id="polygon1574" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.928,13.024 -5.719,13.024 -5.746,13.137 -5.928,13.137 -5.928,13.024 " - id="polygon1576" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.928,13.024 -5.719,13.024 -5.746,13.137 -5.928,13.137 -5.928,13.024 " - id="polygon1578" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.8940001" - y="13.058" - id="rect1580" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.8940001" - y="13.058" - id="rect1582" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.17,13.137 -5.976,13.137 -5.976,13.194 -5.879,13.194 -5.879,13.25 -6.267,13.25 -6.267,13.194 -6.17,13.194 -6.17,13.137 " - id="polygon1584" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.17,13.137 -5.976,13.137 -5.976,13.194 -5.879,13.194 -5.879,13.25 -6.267,13.25 -6.267,13.194 -6.17,13.194 -6.17,13.137 " - id="polygon1586" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.653" - y1="11.13" - x2="-9.6660004" - y2="11.13" - stroke="#000000" - stroke-width="0.100" - id="line1588" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.289" - y1="11.13" - x2="-1.289" - y2="10.145" - stroke="#000000" - stroke-width="0.100" - id="line1590" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.766" - y1="11.13" - x2="-3.766" - y2="12.295" - stroke="#000000" - stroke-width="0.100" - id="line1592" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.7739999" - y1="11.13" - x2="-3.7739999" - y2="10.099" - stroke="#000000" - stroke-width="0.100" - id="line1594" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-6.0799999" - y1="11.13" - x2="-6.0799999" - y2="12.367" - stroke="#000000" - stroke-width="0.100" - id="line1596" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-6.0939999" - y1="11.13" - x2="-6.0939999" - y2="10.063" - stroke="#000000" - stroke-width="0.100" - id="line1598" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-8.4139996" - y1="11.13" - x2="-8.4139996" - y2="9.5740004" - stroke="#000000" - stroke-width="0.100" - id="line1600" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.069" - height="0.80199999" - x="-4.289" - y="12.216" - id="rect1602" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.069" - height="0.80199999" - x="-4.289" - y="12.216" - id="rect1604" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.83700001" - height="0.55199999" - x="-4.1729999" - y="12.332" - id="rect1606" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.144,13.018 -3.594,13.018 -3.594,13.143 -4.115,13.143 -4.144,13.018 " - id="polygon1608" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.144,13.018 -3.594,13.018 -3.594,13.143 -4.115,13.143 -4.144,13.018 " - id="polygon1610" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.594,13.018 -3.365,13.018 -3.394,13.143 -3.594,13.143 -3.594,13.018 " - id="polygon1612" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.594,13.018 -3.365,13.018 -3.394,13.143 -3.594,13.143 -3.594,13.018 " - id="polygon1614" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.5569999" - y="13.055" - id="rect1616" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.5569999" - y="13.055" - id="rect1618" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.861,13.143 -3.648,13.143 -3.648,13.205 -3.541,13.205 -3.541,13.267 -3.968,13.267 -3.968,13.205 -3.861,13.205 -3.861,13.143 " - id="polygon1620" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.861,13.143 -3.648,13.143 -3.648,13.205 -3.541,13.205 -3.541,13.267 -3.968,13.267 -3.968,13.205 -3.861,13.205 -3.861,13.143 " - id="polygon1622" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.579" - y="9.1079998" - id="rect1624" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.579" - y="9.1079998" - id="rect1626" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.474" - y="9.2139997" - id="rect1628" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.448,9.837 -5.948,9.837 -5.948,9.95 -6.421,9.95 -6.448,9.837 " - id="polygon1630" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.448,9.837 -5.948,9.837 -5.948,9.95 -6.421,9.95 -6.448,9.837 " - id="polygon1632" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.948,9.837 -5.74,9.837 -5.766,9.95 -5.948,9.95 -5.948,9.837 " - id="polygon1634" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.948,9.837 -5.74,9.837 -5.766,9.95 -5.948,9.95 -5.948,9.837 " - id="polygon1636" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.914" - y="9.8710003" - id="rect1638" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.914" - y="9.8710003" - id="rect1640" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.191,9.95 -5.996,9.95 -5.996,10.007 -5.899,10.007 -5.899,10.063 -6.288,10.063 -6.288,10.007 -6.191,10.007 -6.191,9.95 " - id="polygon1642" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.191,9.95 -5.996,9.95 -5.996,10.007 -5.899,10.007 -5.899,10.063 -6.288,10.063 -6.288,10.007 -6.191,10.007 -6.191,9.95 " - id="polygon1644" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.2600002" - y="9.1450005" - id="rect1646" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.2600002" - y="9.1450005" - id="rect1648" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-4.1550002" - y="9.25" - id="rect1650" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.128,9.873 -3.629,9.873 -3.629,9.986 -4.102,9.986 -4.128,9.873 " - id="polygon1652" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.128,9.873 -3.629,9.873 -3.629,9.986 -4.102,9.986 -4.128,9.873 " - id="polygon1654" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.629,9.873 -3.42,9.873 -3.447,9.986 -3.629,9.986 -3.629,9.873 " - id="polygon1656" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.629,9.873 -3.42,9.873 -3.447,9.986 -3.629,9.986 -3.629,9.873 " - id="polygon1658" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.595" - y="9.9069996" - id="rect1660" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.595" - y="9.9069996" - id="rect1662" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.871,9.986 -3.677,9.986 -3.677,10.043 -3.58,10.043 -3.58,10.099 -3.969,10.099 -3.969,10.043 -3.871,10.043 -3.871,9.986 " - id="polygon1664" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.871,9.986 -3.677,9.986 -3.677,10.043 -3.58,10.043 -3.58,10.099 -3.969,10.099 -3.969,10.043 -3.871,10.043 -3.871,9.986 " - id="polygon1666" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-8.9029999" - y="9.0410004" - id="rect1668" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-8.9029999" - y="9.0410004" - id="rect1670" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-8.7980003" - y="9.1470003" - id="rect1672" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-8.771,9.77 -8.272,9.77 -8.272,9.883 -8.745,9.883 -8.771,9.77 " - id="polygon1674" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.771,9.77 -8.272,9.77 -8.272,9.883 -8.745,9.883 -8.771,9.77 " - id="polygon1676" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-8.272,9.77 -8.063,9.77 -8.09,9.883 -8.272,9.883 -8.272,9.77 " - id="polygon1678" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.272,9.77 -8.063,9.77 -8.09,9.883 -8.272,9.883 -8.272,9.77 " - id="polygon1680" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-8.2379999" - y="9.8039999" - id="rect1682" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-8.2379999" - y="9.8039999" - id="rect1684" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-8.515,9.883 -8.32,9.883 -8.32,9.94 -8.223,9.94 -8.223,9.996 -8.612,9.996 -8.612,9.94 -8.515,9.94 -8.515,9.883 " - id="polygon1686" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.515,9.883 -8.32,9.883 -8.32,9.94 -8.223,9.94 -8.223,9.996 -8.612,9.996 -8.612,9.94 -8.515,9.94 -8.515,9.883 " - id="polygon1688" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-1.701,9.517 -1.75,9.538 -1.895,9.902 -1.895,10.084 -1.823,10.145 -0.754,10.145 -0.682,10.084 -0.682,9.902 -0.827,9.538 -0.876,9.517 -1.701,9.517 " - id="polygon1690" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.701,9.517 -1.75,9.538 -1.895,9.902 -1.895,10.084 -1.823,10.145 -0.754,10.145 -0.682,10.084 -0.682,9.902 -0.827,9.538 -0.876,9.517 -1.701,9.517 " - id="polygon1692" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.871,9.841 L -1.823,9.861 L -0.754,9.861 L -0.706,9.841" - id="path1694" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -0.754,9.861 L -0.682,9.902" - id="path1696" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.895,9.902 L -1.823,9.861" - id="path1698" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.556,9.133 -1.58,9.618 -0.997,9.618 -1.021,9.133 -1.556,9.133 " - id="polygon1700" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.556,9.133 -1.58,9.618 -0.997,9.618 -1.021,9.133 -1.556,9.133 " - id="polygon1702" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.653,9.618 -1.701,9.76 -0.876,9.76 -0.924,9.618 -1.653,9.618 " - id="polygon1704" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.653,9.618 -1.701,9.76 -0.876,9.76 -0.924,9.618 -1.653,9.618 " - id="polygon1706" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-1.653" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1708" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1710" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1712" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1714" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1716" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1718" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1720" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1722" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1724" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1726" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1728" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1730" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1732" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1734" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1736" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1738" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1740" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1742" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1744" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1746" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1748" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1750" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1752" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1754" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.289" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1756" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-1.289" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1758" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-0.98500001" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1760" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-0.98500001" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1762" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1764" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1766" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1768" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1770" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1772" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1774" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8780003" - y1="10.141" - x2="-10.928" - y2="10.141" - stroke="#000000" - stroke-width="0.010" - id="line1776" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.928" - y1="10.403" - x2="-9.8780003" - y2="10.403" - stroke="#000000" - stroke-width="0.010" - id="line1778" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8780003" - y1="10.6" - x2="-10.928" - y2="10.6" - stroke="#000000" - stroke-width="0.010" - id="line1780" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1782" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1784" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1786" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-11.059" - y1="11.519" - x2="-9.7460003" - y2="11.519" - stroke="#000000" - stroke-width="0.010" - id="line1788" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1790" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1792" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1794" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1796" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1798" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1800" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1802" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1804" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1806" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1808" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1810" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1812" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.928" - y1="11.256" - x2="-10.206" - y2="11.256" - stroke="#000000" - stroke-width="0.010" - id="line1814" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1816" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1818" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1820" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1822" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1824" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1826" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="11.125" - x2="-10.271" - y2="11.125" - stroke="#000000" - stroke-width="0.010" - id="line1828" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.271" - y1="11.191" - x2="-10.337" - y2="11.191" - stroke="#000000" - stroke-width="0.010" - id="line1830" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="11.191" - x2="-10.796" - y2="11.191" - stroke="#000000" - stroke-width="0.010" - id="line1832" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1834" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1836" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1838" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="10.797" - x2="-10.796" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1840" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.731" - y1="10.797" - x2="-10.665" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1842" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.074" - y1="10.797" - x2="-9.9429998" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1844" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.306" - x2="-10.993" - y2="12.306" - stroke="#000000" - stroke-width="0.010" - id="line1846" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="12.241" - x2="-9.8120003" - y2="12.241" - stroke="#000000" - stroke-width="0.010" - id="line1848" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.175" - x2="-10.993" - y2="12.175" - stroke="#000000" - stroke-width="0.010" - id="line1850" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="12.11" - x2="-9.8120003" - y2="12.11" - stroke="#000000" - stroke-width="0.010" - id="line1852" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.044" - x2="-10.993" - y2="12.044" - stroke="#000000" - stroke-width="0.010" - id="line1854" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="11.978" - x2="-9.8120003" - y2="11.978" - stroke="#000000" - stroke-width="0.010" - id="line1856" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="11.913" - x2="-10.993" - y2="11.913" - stroke="#000000" - stroke-width="0.010" - id="line1858" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="-6.5710001" - y="8.3360004" - id="text1860" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-6.9060001" - y="8.9359999" - id="text1862" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.0.0/22</text> - <text - x="-10.628" - y="13.181" - id="text1864" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="-10.454" - y="13.681" - id="text1866" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GWYN-APPS</text> - <rect - width="1.4450001" - height="1.275" - x="2.5510001" - y="8.6120005" - id="rect1868" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="3.273" - cy="9.8870001" - rx="0.72299999" - ry="0.213" - id="ellipse1870" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1872" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1874" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.996,8.612 L 3.996,9.887 C 3.996,10.005 3.672,10.1 3.273,10.1 C 2.874,10.1 2.551,10.005 2.551,9.887 L 2.551,8.612" - id="path1876" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="2.0109999" - y1="9.2469997" - x2="2.586" - y2="9.2469997" - stroke="#000000" - stroke-width="0.100" - id="line1878" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="2.983" - y="9.3260002" - id="text1880" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.928" - y="9.7259998" - id="text1882" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Master</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="5.725,19.819 5.725,18.237 5.732,18.237 5.732,17.325 " - id="polyline1884" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="1.317" - y="15.131" - id="text1886" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">1100 Users</text> - <text - x="1.136" - y="6.0770001" - id="text1888" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">320 Users</text> - <text - x="12.943" - y="6.0310001" - id="text1890" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">180 Users</text> - <text - x="12.358" - y="15.177" - id="text1892" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">100 Users</text> - <text - x="-9.9619999" - y="15.156" - id="text1894" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York - Bldg1</text> - <text - x="13.214" - y="0.46399999" - id="text1896" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Los Angeles</text> - <text - x="1.1109999" - y="0.46399999" - id="text1898" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">London</text> - <text - x="12.979" - y="8.0889997" - id="text1900" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Washington, DC</text> - <rect - width="11.132" - height="6.5630002" - x="-11.146" - y="16.205999" - id="rect1902" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1904" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1906" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.732" - height="5.9629998" - x="-11.446" - y="16.506001" - id="rect1908" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1910" - style="fill:#ebebeb;stroke:none" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1912" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.146" - y1="16.205999" - x2="-0.014" - y2="16.205999" - stroke="#000000" - stroke-width="0.050" - id="line1914" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.146" - y1="22.768999" - x2="-0.014" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line1916" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1918" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1920" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.446" - y1="16.506001" - x2="-11.446" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1922" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.28600001" - y1="16.506001" - x2="0.28600001" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1924" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1926" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1928" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1930" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1932" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1934" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1936" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1938" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1940" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1942" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1944" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1946" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1948" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1950" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1952" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1954" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1956" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1958" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-5.2220001" - y="17.145" - id="text1960" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-5.5609999" - y="17.745001" - id="text1962" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.4.0/22</text> - <text - x="-10.001" - y="21.07" - id="text1964" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="-10.37" - y="21.57" - id="text1966" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-BDC</text> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1968" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1970" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1972" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1974" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1976" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1978" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="19.087" - x2="-7.6300001" - y2="19.087" - stroke="#000000" - stroke-width="0.010" - id="line1980" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.6300001" - y1="19.33" - x2="-8.6040001" - y2="19.33" - stroke="#000000" - stroke-width="0.010" - id="line1982" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1984" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1986" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1988" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.665" - y1="20.181999" - x2="-7.448" - y2="20.181999" - stroke="#000000" - stroke-width="0.010" - id="line1990" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1992" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1994" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1996" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect1998" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect2000" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect2002" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2004" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2006" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2008" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2010" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2012" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2014" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4820004" - y1="19.816999" - x2="-7.8130002" - y2="19.816999" - stroke="#000000" - stroke-width="0.010" - id="line2016" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2018" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2020" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2022" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2024" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2026" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2028" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.695" - x2="-7.8740001" - y2="19.695" - stroke="#000000" - stroke-width="0.010" - id="line2030" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2032" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2034" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2036" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.8130002" - y1="19.511999" - x2="-7.691" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2038" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.242001" - x2="-7.5089998" - y2="20.242001" - stroke="#000000" - stroke-width="0.010" - id="line2040" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.302999" - x2="-8.6040001" - y2="20.302999" - stroke="#000000" - stroke-width="0.010" - id="line2042" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.364" - x2="-7.5089998" - y2="20.364" - stroke="#000000" - stroke-width="0.010" - id="line2044" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.547001" - x2="-8.6040001" - y2="20.547001" - stroke="#000000" - stroke-width="0.010" - id="line2046" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.486" - x2="-7.5089998" - y2="20.486" - stroke="#000000" - stroke-width="0.010" - id="line2048" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.424999" - x2="-8.6040001" - y2="20.424999" - stroke="#000000" - stroke-width="0.010" - id="line2050" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5430002" - y1="19.511999" - x2="-8.4820004" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2052" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.511999" - x2="-8.3599997" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2054" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.756001" - x2="-8.3599997" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2056" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.9349999" - y1="19.756001" - x2="-7.8740001" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2058" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.4980001" - y1="19.695" - x2="-2.164" - y2="19.679001" - stroke="#000000" - stroke-width="0.100" - id="line2060" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9559999" - y1="19.690001" - x2="-5.9530001" - y2="20.649" - stroke="#000000" - stroke-width="0.100" - id="line2062" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9530001" - y1="19.690001" - x2="-5.9559999" - y2="18.690001" - stroke="#000000" - stroke-width="0.100" - id="line2064" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4590001" - y1="19.686001" - x2="-4.4559999" - y2="20.591" - stroke="#000000" - stroke-width="0.100" - id="line2066" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4569998" - y1="19.686001" - x2="-4.46" - y2="18.686001" - stroke="#000000" - stroke-width="0.100" - id="line2068" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.961" - y1="19.681" - x2="-2.9579999" - y2="20.608" - stroke="#000000" - stroke-width="0.100" - id="line2070" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.9619999" - y1="19.681" - x2="-2.9649999" - y2="18.681" - stroke="#000000" - stroke-width="0.100" - id="line2072" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2074" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2076" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8470001" - y="20.715" - id="rect2078" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2080" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2082" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2084" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2086" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2088" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2090" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2092" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2094" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2096" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2098" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.329" - y="20.704" - id="rect2100" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2102" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2104" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2106" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2108" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2110" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2112" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2114" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2116" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2118" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2120" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-6.2789998" - y="18.278999" - id="rect2122" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2124" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2126" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2128" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2130" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2132" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2134" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2136" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2138" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2140" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8039999" - y="18.278999" - id="rect2144" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2146" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2148" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2150" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2152" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2154" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2156" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2158" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2160" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2162" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2164" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.3039999" - y="18.304001" - id="rect2166" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2168" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2170" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2172" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2174" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2176" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2178" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2180" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2182" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2184" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2186" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.607,21.174 L -6.559,21.194 L -5.503,21.194 L -5.455,21.174" - id="path2188" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -5.503,21.194 L -5.431,21.234" - id="path2190" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.631,21.234 L -6.559,21.194" - id="path2192" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2194" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2196" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2198" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2200" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2202" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2204" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2206" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2208" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2210" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2212" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2214" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2216" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2218" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2220" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2222" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2224" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2226" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2228" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2230" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2232" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2234" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2236" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2238" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2240" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2242" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2244" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2246" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2248" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2250" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2252" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2254" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2256" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.17" - height="1.033" - x="-10.59" - y="19.132" - id="rect2258" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="-10.004" - cy="20.165001" - rx="0.58499998" - ry="0.17200001" - id="ellipse2260" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.004" - cy="19.132" - rx="0.58499998" - ry="0.17200001" - id="ellipse2262" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.004" - cy="19.132" - rx="0.58499998" - ry="0.17200001" - id="ellipse2264" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -9.419,19.132 L -9.419,20.165 C -9.419,20.26 -9.681,20.337 -10.004,20.337 C -10.328,20.337 -10.59,20.26 -10.59,20.165 L -10.59,19.132" - id="path2266" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-9.3959999" - y1="19.684" - x2="-8.665" - y2="19.695" - stroke="#000000" - stroke-width="0.100" - id="line2268" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-10.303" - y="19.759001" - id="text2270" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="-10.288" - y="20.159" - id="text2272" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="-0.91500002" - y="19.843" - id="text2274" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="-1.867" - y="22.455999" - id="text2276" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">50 Users</text> - <text - x="-10.478" - y="17.114" - id="text2278" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="-10.147" - y="17.914" - id="text2280" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg 2</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.554,15.161 -1.554,15.906 -1.821,15.906 -1.821,19.285 " - id="polyline2282" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2284" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2286" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2288" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2290" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2292" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2294" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2296" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2298" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2300" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2302" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2304" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2306" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2308" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2310" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2312" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="7.8559999" - y="17.167" - id="text2314" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="7.5180001" - y="17.767" - id="text2316" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.8.0/22</text> - <text - x="3.204" - y="18.118" - id="text2318" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="2.835" - y="18.618" - id="text2320" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG3-BDC</text> - <text - x="11.067" - y="21.718" - id="text2322" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="11.212" - y="22.218" - id="text2324" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-APPS</text> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2326" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2328" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2330" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2332" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2334" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2336" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="19.246" - x2="5.112" - y2="19.246" - stroke="#000000" - stroke-width="0.010" - id="line2338" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.112" - y1="19.49" - x2="4.138" - y2="19.49" - stroke="#000000" - stroke-width="0.010" - id="line2340" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2342" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2344" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2346" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.0770001" - y1="20.341" - x2="5.2940001" - y2="20.341" - stroke="#000000" - stroke-width="0.010" - id="line2348" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2350" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2352" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2354" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2356" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2358" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2360" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2362" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2364" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2366" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2368" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2370" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2372" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.2600002" - y1="19.976" - x2="4.9289999" - y2="19.976" - stroke="#000000" - stroke-width="0.010" - id="line2374" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2376" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2378" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2380" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2382" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2384" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2386" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.855" - x2="4.868" - y2="19.855" - stroke="#000000" - stroke-width="0.010" - id="line2388" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2390" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2392" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2394" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.9289999" - y1="19.672001" - x2="5.0510001" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.402" - x2="5.2329998" - y2="20.402" - stroke="#000000" - stroke-width="0.010" - id="line2398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.462999" - x2="4.138" - y2="20.462999" - stroke="#000000" - stroke-width="0.010" - id="line2400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.524" - x2="5.2329998" - y2="20.524" - stroke="#000000" - stroke-width="0.010" - id="line2402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.705999" - x2="4.138" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.645" - x2="5.2329998" - y2="20.645" - stroke="#000000" - stroke-width="0.010" - id="line2406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.584999" - x2="4.138" - y2="20.584999" - stroke="#000000" - stroke-width="0.010" - id="line2408" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.1989999" - y1="19.672001" - x2="4.2600002" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2410" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.672001" - x2="4.382" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2412" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.915001" - x2="4.382" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2414" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.8070002" - y1="19.915001" - x2="4.868" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2416" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.244" - y1="19.855" - x2="10.386" - y2="19.841999" - stroke="#000000" - stroke-width="0.100" - id="line2418" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7309999" - y1="19.851" - x2="6.7329998" - y2="20.809999" - stroke="#000000" - stroke-width="0.100" - id="line2420" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7350001" - y1="19.851" - x2="6.7319999" - y2="18.851" - stroke="#000000" - stroke-width="0.100" - id="line2422" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1739998" - y1="19.847" - x2="8.1759996" - y2="20.753" - stroke="#000000" - stroke-width="0.100" - id="line2424" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1750002" - y1="19.847" - x2="8.1730003" - y2="18.848" - stroke="#000000" - stroke-width="0.100" - id="line2426" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6169996" - y1="19.844" - x2="9.6190004" - y2="20.771" - stroke="#000000" - stroke-width="0.100" - id="line2428" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6160002" - y1="19.844" - x2="9.6129999" - y2="18.844" - stroke="#000000" - stroke-width="0.100" - id="line2430" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2432" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2434" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8210001" - y="20.875" - id="rect2436" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2438" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2440" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2442" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2444" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2446" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2448" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2450" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2452" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2454" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2456" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2629995" - y="20.864" - id="rect2458" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2460" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2462" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2464" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2466" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2468" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2470" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2472" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2474" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2476" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2478" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.388" - y="18.438999" - id="rect2480" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2482" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2484" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2486" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2488" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2490" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2492" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2494" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2496" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2498" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2500" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8379998" - y="18.464001" - id="rect2502" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2504" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2506" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2508" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2510" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2512" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2514" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2516" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2518" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2520" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2522" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2880001" - y="18.438999" - id="rect2524" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2526" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2528" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2530" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2532" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2534" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2536" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2538" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2540" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2542" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2544" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.135,21.334 L 6.183,21.354 L 7.239,21.354 L 7.287,21.334" - id="path2546" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.239,21.354 L 7.311,21.394" - id="path2548" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.111,21.394 L 6.183,21.354" - id="path2550" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2552" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2554" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2556" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2558" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2560" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2562" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2564" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2566" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2568" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2570" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2572" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2574" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2576" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2578" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2580" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2582" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2584" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2586" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2588" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2590" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2592" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2594" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2596" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2598" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2600" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2602" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2604" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2606" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2608" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2610" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2612" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2614" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2616" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2618" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2620" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2622" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2624" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2626" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.048" - x2="10.618" - y2="19.048" - stroke="#000000" - stroke-width="0.010" - id="line2628" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="19.275999" - x2="11.533" - y2="19.275999" - stroke="#000000" - stroke-width="0.010" - id="line2630" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.448" - x2="10.618" - y2="19.448" - stroke="#000000" - stroke-width="0.010" - id="line2632" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2634" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2636" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2638" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.504" - y1="20.249001" - x2="11.647" - y2="20.249001" - stroke="#000000" - stroke-width="0.010" - id="line2640" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2642" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2644" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2646" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2648" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2650" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2652" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2654" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2656" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2658" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2660" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2662" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2664" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="20.02" - x2="11.247" - y2="20.02" - stroke="#000000" - stroke-width="0.010" - id="line2666" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2668" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2670" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2672" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2674" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2676" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2678" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.906" - x2="11.19" - y2="19.906" - stroke="#000000" - stroke-width="0.010" - id="line2680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.19" - y1="19.962999" - x2="11.133" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.962999" - x2="10.732" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2684" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2686" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2688" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2690" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.620001" - x2="10.732" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.79" - y1="19.620001" - x2="10.847" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.362" - y1="19.620001" - x2="11.476" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.934999" - x2="10.561" - y2="20.934999" - stroke="#000000" - stroke-width="0.010" - id="line2698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.878" - x2="11.59" - y2="20.878" - stroke="#000000" - stroke-width="0.010" - id="line2700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.820999" - x2="10.561" - y2="20.820999" - stroke="#000000" - stroke-width="0.010" - id="line2702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.763" - x2="11.59" - y2="20.763" - stroke="#000000" - stroke-width="0.010" - id="line2704" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.705999" - x2="10.561" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2706" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.649" - x2="11.59" - y2="20.649" - stroke="#000000" - stroke-width="0.010" - id="line2708" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.591999" - x2="10.561" - y2="20.591999" - stroke="#000000" - stroke-width="0.010" - id="line2710" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4960001" - y1="19.819" - x2="4.0770001" - y2="19.855" - stroke="#000000" - stroke-width="0.100" - id="line2712" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.183" - height="1.044" - x="2.302" - y="19.268999" - id="rect2714" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="2.8940001" - cy="20.312" - rx="0.59100002" - ry="0.17399999" - id="ellipse2716" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2718" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2720" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.485,19.269 L 3.485,20.312 C 3.485,20.409 3.221,20.486 2.894,20.486 C 2.567,20.486 2.302,20.409 2.302,20.312 L 2.302,19.269" - id="path2722" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="2.589" - y="19.868999" - id="text2724" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.6040001" - y="20.268999" - id="text2726" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="2.0469999" - y="22.452" - id="text2728" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">250 Users</text> - <text - x="12.072" - y="17.239" - id="text2730" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="12.402" - y="18.039" - id="text2732" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg 3</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.129,15.125 -1.129,15.903 5.732,15.903 5.732,16.538 " - id="polyline2734" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="16.1" - y1="22.393" - x2="15.55" - y2="23.143" - stroke="#F7F7F7" - stroke-width="0.100" - id="line2736" - style="stroke:#f7f7f7;stroke-width:0.1" /> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net2-B.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net2-B.png Binary files differdeleted file mode 100644 index b16f73bac1..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net2-B.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net2-B.svg b/docs/htmldocs/Samba3-ByExample/images/chap7-net2-B.svg deleted file mode 100644 index 8158b3b9eb..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net2-B.svg +++ /dev/null @@ -1,9085 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="34.602001cm" - height="23.67cm" - viewBox="-11.55 -0.456 23.052 23.213" - id="svg2"> - <defs - id="defs2769" /> - <rect - width="13.8" - height="6.513" - x="1.375" - y="16.256001" - id="rect4" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path6" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path8" - style="fill:#ebebeb;stroke:none" /> - <rect - width="14.4" - height="5.9130001" - x="1.075" - y="16.556" - id="rect10" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path12" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path14" - style="fill:#ebebeb;stroke:none" /> - <line - x1="1.375" - y1="16.256001" - x2="15.175" - y2="16.256001" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="1.375" - y1="22.768999" - x2="15.175" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.075" - y1="16.556" - x2="1.075" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="15.475" - y1="16.556" - x2="15.475" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.617" - height="6.8530002" - x="0.495" - y="-0.40599999" - id="rect32" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path34" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path36" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.217" - height="6.2529998" - x="0.19499999" - y="-0.106" - id="rect38" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path40" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path42" - style="fill:#ebebeb;stroke:none" /> - <line - x1="0.495" - y1="-0.40599999" - x2="11.112" - y2="-0.40599999" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.495" - y1="6.447" - x2="11.112" - y2="6.447" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.19499999" - y1="-0.106" - x2="0.19499999" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.412" - y1="-0.106" - x2="11.412" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.337" - height="6.8600001" - x="12.35" - y="-0.43099999" - id="rect60" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path62" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path64" - style="fill:#ebebeb;stroke:none" /> - <rect - width="10.937" - height="6.2600002" - x="12.05" - y="-0.131" - id="rect66" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path68" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path70" - style="fill:#ebebeb;stroke:none" /> - <line - x1="12.35" - y1="-0.43099999" - x2="22.687" - y2="-0.43099999" - stroke="#000000" - stroke-width="0.050" - id="line72" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="12.35" - y1="6.4289999" - x2="22.687" - y2="6.4289999" - stroke="#000000" - stroke-width="0.050" - id="line74" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="12.05" - y1="-0.131" - x2="12.05" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line80" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="22.987" - y1="-0.131" - x2="22.987" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line82" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.821" - height="8.375" - x="11.905" - y="7.244" - id="rect88" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path90" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path92" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.421" - height="7.7750001" - x="11.605" - y="7.5440001" - id="rect94" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path96" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path98" - style="fill:#ebebeb;stroke:none" /> - <line - x1="11.905" - y1="7.244" - x2="22.726999" - y2="7.244" - stroke="#000000" - stroke-width="0.050" - id="line100" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.905" - y1="15.619" - x2="22.726999" - y2="15.619" - stroke="#000000" - stroke-width="0.050" - id="line102" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path104" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="11.605" - y1="7.5440001" - x2="11.605" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line108" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="23.027" - y1="7.5440001" - x2="23.027" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line110" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path112" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="15.45" - height="8.3719997" - x="-11.225" - y="7.1339998" - id="rect116" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.225,7.134 C -11.390685,7.134 -11.525,7.2683146 -11.525,7.434" - id="path118" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 4.525,7.434 C 4.525,7.2683146 4.3906854,7.134 4.225,7.134" - id="path120" - style="fill:#ebebeb;stroke:none" /> - <rect - width="16.049999" - height="7.7719998" - x="-11.525" - y="7.434" - id="rect122" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.525,15.206 C -11.525,15.371685 -11.390685,15.506 -11.225,15.506" - id="path124" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 4.225,15.506 C 4.3906854,15.506 4.525,15.371685 4.525,15.206" - id="path126" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.225" - y1="7.1339998" - x2="4.2249999" - y2="7.1339998" - stroke="#000000" - stroke-width="0.050" - id="line128" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.225" - y1="15.506" - x2="4.2249999" - y2="15.506" - stroke="#000000" - stroke-width="0.050" - id="line130" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.225,7.134 C -11.390685,7.134 -11.525,7.2683146 -11.525,7.434" - id="path132" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.525,7.434 C 4.525,7.2683146 4.3906854,7.134 4.225,7.134" - id="path134" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.525" - y1="7.434" - x2="-11.525" - y2="15.206" - stroke="#000000" - stroke-width="0.050" - id="line136" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="4.5250001" - y1="7.434" - x2="4.5250001" - y2="15.206" - stroke="#000000" - stroke-width="0.050" - id="line138" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.525,15.206 C -11.525,15.371685 -11.390685,15.506 -11.225,15.506" - id="path140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.225,15.506 C 4.3906854,15.506 4.525,15.371685 4.525,15.206" - id="path142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.95" - y1="11.168" - x2="4.8109999" - y2="11.165" - stroke="#000000" - stroke-width="0.300" - id="line144" - style="stroke:#000000;stroke-width:0.30000001" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="4.145,2.624 4.145,6.819 5.675,6.819 5.675,9.944 " - id="polyline146" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="16.100,2.794 16.100,6.844 8.674,6.844 8.674,9.887 " - id="polyline148" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect150" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect154" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.267,14.295 C -1.267,14.785 -1.169,14.687 -1.659,14.687" - id="path156" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.267,14.295 C -1.267,14.785 -1.169,14.687 -1.659,14.687" - id="path158" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.22,14.371 -1.269,14.273 -1.318,14.371 -1.22,14.371 " - id="polygon160" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.22,14.371 -1.269,14.273 -1.318,14.371 -1.22,14.371 " - id="polygon162" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.583,14.636 -1.681,14.685 -1.583,14.734 -1.583,14.636 " - id="polygon164" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.583,14.636 -1.681,14.685 -1.583,14.734 -1.583,14.636 " - id="polygon166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -0.976,14.571 C -1.466,14.571 -1.368,14.473 -1.368,14.963" - id="path168" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -0.976,14.571 C -1.466,14.571 -1.368,14.473 -1.368,14.963" - id="path170" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.063,14.616 -0.965,14.567 -1.063,14.518 -1.063,14.616 " - id="polygon172" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.063,14.616 -0.965,14.567 -1.063,14.518 -1.063,14.616 " - id="polygon174" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.426,14.881 -1.377,14.979 -1.328,14.881 -1.426,14.881 " - id="polygon176" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.426,14.881 -1.377,14.979 -1.328,14.881 -1.426,14.881 " - id="polygon178" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.306" - y1="11.165" - x2="-1.3279999" - y2="14.136" - stroke="#000000" - stroke-width="0.100" - id="line180" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.71700001" - y="7.6999998" - id="text182" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="0.37799999" - y="8.1999998" - id="text184" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GWYN-PDC</text> - <line - x1="6.118" - y1="13.16" - x2="7.7179999" - y2="13.135" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.10,0.10" - id="line186" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <text - x="8.4429998" - y="13.325" - id="text188" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">= VPN</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="10.645,11.075 10.645,9.069 16.025,9.069 16.025,11.368 " - id="polyline190" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-3.0239999" - y="14.751" - id="text192" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="4.1469998" - y="17.031" - id="text194" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect196" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect198" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect202" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect204" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="2.027" - x2="3.5869999" - y2="2.027" - stroke="#000000" - stroke-width="0.010" - id="line208" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.5869999" - y1="2.2709999" - x2="2.6140001" - y2="2.2709999" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect212" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect214" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect216" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.553" - y1="3.122" - x2="3.77" - y2="3.122" - stroke="#000000" - stroke-width="0.010" - id="line218" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect220" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect222" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect226" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect228" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect230" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect232" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect234" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect236" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect238" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect240" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect242" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7360001" - y1="2.757" - x2="3.405" - y2="2.757" - stroke="#000000" - stroke-width="0.010" - id="line244" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect246" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect248" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect252" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect254" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect256" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.6359999" - x2="3.3440001" - y2="2.6359999" - stroke="#000000" - stroke-width="0.010" - id="line258" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect260" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect262" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect264" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.405" - y1="2.4530001" - x2="3.527" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line266" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.1830001" - x2="3.7090001" - y2="3.1830001" - stroke="#000000" - stroke-width="0.010" - id="line268" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.244" - x2="2.6140001" - y2="3.244" - stroke="#000000" - stroke-width="0.010" - id="line270" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.3050001" - x2="3.7090001" - y2="3.3050001" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.487" - x2="2.6140001" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line274" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.427" - x2="3.7090001" - y2="3.427" - stroke="#000000" - stroke-width="0.010" - id="line276" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.3659999" - x2="2.6140001" - y2="3.3659999" - stroke="#000000" - stroke-width="0.010" - id="line278" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.675" - y1="2.4530001" - x2="2.7360001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line280" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.4530001" - x2="2.8570001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line282" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.697" - x2="2.8570001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line284" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.283" - y1="2.697" - x2="3.3440001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line286" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.72" - y1="2.6359999" - x2="8.8620005" - y2="2.6229999" - stroke="#000000" - stroke-width="0.100" - id="line288" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.2069998" - y1="2.632" - x2="5.2090001" - y2="3.5910001" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.21" - y1="2.632" - x2="5.2080002" - y2="1.632" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.6500001" - y1="2.6289999" - x2="6.652" - y2="3.5339999" - stroke="#000000" - stroke-width="0.100" - id="line294" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.651" - y1="2.6289999" - x2="6.6479998" - y2="1.6289999" - stroke="#000000" - stroke-width="0.100" - id="line296" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.092" - y1="2.625" - x2="8.0950003" - y2="3.552" - stroke="#000000" - stroke-width="0.100" - id="line298" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.0909996" - y1="2.625" - x2="8.0889997" - y2="1.625" - stroke="#000000" - stroke-width="0.100" - id="line300" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect302" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect304" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.296" - y="3.6559999" - id="rect306" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon308" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon310" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon312" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon314" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect316" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect318" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon320" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon322" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect324" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect326" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7389998" - y="3.645" - id="rect328" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon330" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon332" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon334" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon336" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect338" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect340" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon342" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon344" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect346" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect348" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="4.8639998" - y="1.22" - id="rect350" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon352" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon354" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon356" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon358" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect360" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect362" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon364" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon366" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect368" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect370" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.3140001" - y="1.245" - id="rect372" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon374" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon376" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon378" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon380" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect382" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect384" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon386" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon388" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect390" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect392" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7639999" - y="1.22" - id="rect394" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon396" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon398" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon400" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon402" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect404" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect406" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon408" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon410" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon412" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon414" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.611,4.115 L 4.659,4.135 L 5.715,4.135 L 5.763,4.115" - id="path416" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.715,4.135 L 5.787,4.175" - id="path418" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.587,4.175 L 4.659,4.135" - id="path420" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon422" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon424" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon426" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon428" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse430" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse432" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse434" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse436" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse438" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse440" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse442" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse444" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse446" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse448" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse450" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse452" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse454" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse456" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse458" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse460" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse462" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse464" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse466" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse468" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse470" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse472" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse474" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse476" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse478" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse480" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse482" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse484" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect486" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect488" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect490" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect492" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect494" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect496" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="1.829" - x2="9.0939999" - y2="1.829" - stroke="#000000" - stroke-width="0.010" - id="line498" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.0580001" - x2="10.009" - y2="2.0580001" - stroke="#000000" - stroke-width="0.010" - id="line500" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="2.2290001" - x2="9.0939999" - y2="2.2290001" - stroke="#000000" - stroke-width="0.010" - id="line502" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect504" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect506" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect508" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.9790001" - y1="3.03" - x2="10.123" - y2="3.03" - stroke="#000000" - stroke-width="0.010" - id="line510" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect512" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect514" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect516" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect518" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect520" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect522" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect524" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect526" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect528" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect530" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect532" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect534" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.8010001" - x2="9.7229996" - y2="2.8010001" - stroke="#000000" - stroke-width="0.010" - id="line536" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect538" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect540" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect542" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect544" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect546" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect548" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.687" - x2="9.6660004" - y2="2.687" - stroke="#000000" - stroke-width="0.010" - id="line550" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.6660004" - y1="2.744" - x2="9.6090002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.744" - x2="9.2080002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line554" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect556" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect558" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect560" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.401" - x2="9.2080002" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line562" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.2650003" - y1="2.401" - x2="9.323" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line564" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.8369999" - y1="2.401" - x2="9.9519997" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line566" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.7160001" - x2="9.0369997" - y2="3.7160001" - stroke="#000000" - stroke-width="0.010" - id="line568" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.6589999" - x2="10.066" - y2="3.6589999" - stroke="#000000" - stroke-width="0.010" - id="line570" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.602" - x2="9.0369997" - y2="3.602" - stroke="#000000" - stroke-width="0.010" - id="line572" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.5439999" - x2="10.066" - y2="3.5439999" - stroke="#000000" - stroke-width="0.010" - id="line574" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.487" - x2="9.0369997" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line576" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.4300001" - x2="10.066" - y2="3.4300001" - stroke="#000000" - stroke-width="0.010" - id="line578" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.3729999" - x2="9.0369997" - y2="3.3729999" - stroke="#000000" - stroke-width="0.010" - id="line580" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="5.9629998" - y="5.2589998" - id="text582" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="5.5580001" - y="5.8590002" - id="text584" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.12.0/22</text> - <text - x="1.234" - y="4.1529999" - id="text586" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="1.053" - y="4.6529999" - id="text588" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LON-BDC</text> - <text - x="9.5100002" - y="4.4749999" - id="text590" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="9.3299999" - y="4.9749999" - id="text592" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LON-PDC</text> - <rect - width="1.291" - height="1.1390001" - x="0.61699998" - y="2.0880001" - id="rect594" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="1.263" - cy="3.227" - rx="0.64499998" - ry="0.19" - id="ellipse596" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse598" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse600" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 1.908,2.088 L 1.908,3.227 C 1.908,3.332 1.619,3.417 1.263,3.417 C 0.906,3.417 0.617,3.332 0.617,3.227 L 0.617,2.088" - id="path602" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="1.928" - y1="2.523" - x2="2.503" - y2="2.523" - stroke="#000000" - stroke-width="0.100" - id="line604" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.935" - y="2.7219999" - id="text606" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="0.94999999" - y="3.122" - id="text608" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect610" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect612" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect614" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect616" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect618" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect620" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="2.1900001" - x2="15.431" - y2="2.1900001" - stroke="#000000" - stroke-width="0.010" - id="line622" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="2.4330001" - x2="14.458" - y2="2.4330001" - stroke="#000000" - stroke-width="0.010" - id="line624" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect626" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect628" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect630" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="3.2850001" - x2="15.614" - y2="3.2850001" - stroke="#000000" - stroke-width="0.010" - id="line632" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect634" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect636" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect638" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect640" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect642" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect644" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect646" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect648" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect650" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect652" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect654" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect656" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.58" - y1="2.9200001" - x2="15.249" - y2="2.9200001" - stroke="#000000" - stroke-width="0.010" - id="line658" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect660" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect662" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect664" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect666" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect668" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect670" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.7980001" - x2="15.188" - y2="2.7980001" - stroke="#000000" - stroke-width="0.010" - id="line672" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect674" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect676" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect678" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.249" - y1="2.615" - x2="15.371" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.345" - x2="15.553" - y2="3.345" - stroke="#000000" - stroke-width="0.010" - id="line682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.4059999" - x2="14.458" - y2="3.4059999" - stroke="#000000" - stroke-width="0.010" - id="line684" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.467" - x2="15.553" - y2="3.467" - stroke="#000000" - stroke-width="0.010" - id="line686" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.6500001" - x2="14.458" - y2="3.6500001" - stroke="#000000" - stroke-width="0.010" - id="line688" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.589" - x2="15.553" - y2="3.589" - stroke="#000000" - stroke-width="0.010" - id="line690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.5280001" - x2="14.458" - y2="3.5280001" - stroke="#000000" - stroke-width="0.010" - id="line692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="2.615" - x2="14.58" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.615" - x2="14.701" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.859" - x2="14.701" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="2.859" - x2="15.188" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.564" - y1="2.7980001" - x2="20.705" - y2="2.7850001" - stroke="#000000" - stroke-width="0.100" - id="line702" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.051001" - y1="2.7939999" - x2="17.052999" - y2="3.753" - stroke="#000000" - stroke-width="0.100" - id="line704" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.054001" - y1="2.7939999" - x2="17.052" - y2="1.794" - stroke="#000000" - stroke-width="0.100" - id="line706" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.493" - y1="2.7909999" - x2="18.496" - y2="3.6960001" - stroke="#000000" - stroke-width="0.100" - id="line708" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.495001" - y1="2.7909999" - x2="18.492001" - y2="1.791" - stroke="#000000" - stroke-width="0.100" - id="line710" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.936001" - y1="2.7869999" - x2="19.938999" - y2="3.714" - stroke="#000000" - stroke-width="0.100" - id="line712" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.934999" - y1="2.7869999" - x2="19.933001" - y2="1.7869999" - stroke="#000000" - stroke-width="0.100" - id="line714" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect716" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect718" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.139999" - y="3.8180001" - id="rect720" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon722" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon724" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon726" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon728" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect730" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect732" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon734" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon736" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect738" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect740" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.583" - y="3.8069999" - id="rect742" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon744" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon746" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon748" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon750" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect752" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect754" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon756" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon758" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect760" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect762" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.708" - y="1.382" - id="rect764" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon766" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon768" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon770" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon772" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect774" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect776" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon778" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon780" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect782" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect784" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.158001" - y="1.4069999" - id="rect786" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon788" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon790" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon792" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon794" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect796" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect798" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon800" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon802" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect804" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect806" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.608" - y="1.382" - id="rect808" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon810" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon812" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon814" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon816" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect818" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect820" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon822" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon824" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon826" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon828" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.454,4.277 L 16.502,4.297 L 17.558,4.297 L 17.606,4.277" - id="path830" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.558,4.297 L 17.63,4.337" - id="path832" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.43,4.337 L 16.502,4.297" - id="path834" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon836" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon838" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon840" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon842" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse844" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse846" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse848" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse850" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse852" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse854" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse856" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse858" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse860" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse862" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse864" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse866" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse868" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse870" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse872" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse874" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse876" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse878" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse880" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse882" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse884" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse886" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse888" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse890" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse892" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse894" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse896" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse898" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect900" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect902" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect904" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect906" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect908" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect910" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="1.9910001" - x2="20.938" - y2="1.9910001" - stroke="#000000" - stroke-width="0.010" - id="line912" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.22" - x2="21.853001" - y2="2.22" - stroke="#000000" - stroke-width="0.010" - id="line914" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="2.391" - x2="20.938" - y2="2.391" - stroke="#000000" - stroke-width="0.010" - id="line916" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect918" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect920" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect922" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.823" - y1="3.1919999" - x2="21.966999" - y2="3.1919999" - stroke="#000000" - stroke-width="0.010" - id="line924" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect926" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect928" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect930" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect932" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect934" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect936" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect938" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect940" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect942" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect944" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect946" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect948" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.9630001" - x2="21.566999" - y2="2.9630001" - stroke="#000000" - stroke-width="0.010" - id="line950" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect952" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect954" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect956" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect958" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect960" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect962" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.849" - x2="21.51" - y2="2.849" - stroke="#000000" - stroke-width="0.010" - id="line964" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.51" - y1="2.9059999" - x2="21.452" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line966" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.9059999" - x2="21.052" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line968" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect970" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect972" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect974" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.563" - x2="21.052" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line976" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.108999" - y1="2.563" - x2="21.167" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line978" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.681" - y1="2.563" - x2="21.796" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line980" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.878" - x2="20.881001" - y2="3.878" - stroke="#000000" - stroke-width="0.010" - id="line982" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.8210001" - x2="21.91" - y2="3.8210001" - stroke="#000000" - stroke-width="0.010" - id="line984" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.7639999" - x2="20.881001" - y2="3.7639999" - stroke="#000000" - stroke-width="0.010" - id="line986" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.707" - x2="21.91" - y2="3.707" - stroke="#000000" - stroke-width="0.010" - id="line988" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.6489999" - x2="20.881001" - y2="3.6489999" - stroke="#000000" - stroke-width="0.010" - id="line990" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.592" - x2="21.91" - y2="3.592" - stroke="#000000" - stroke-width="0.010" - id="line992" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.5350001" - x2="20.881001" - y2="3.5350001" - stroke="#000000" - stroke-width="0.010" - id="line994" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="18.056999" - y="5.3460002" - id="text996" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="17.650999" - y="5.9460001" - id="text998" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.16.0/22</text> - <text - x="14.353" - y="4.415" - id="text1000" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="14.288" - y="4.915" - id="text1002" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LA-BDC</text> - <text - x="21.112" - y="4.5809999" - id="text1004" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="21.048" - y="5.0809999" - id="text1006" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LA-PDC</text> - <rect - width="1.326" - height="1.17" - x="12.426" - y="2.155" - id="rect1008" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="13.089" - cy="3.326" - rx="0.66299999" - ry="0.19499999" - id="ellipse1010" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.089" - cy="2.155" - rx="0.66299999" - ry="0.19499999" - id="ellipse1012" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.089" - cy="2.155" - rx="0.66299999" - ry="0.19499999" - id="ellipse1014" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.752,2.155 L 13.752,3.326 C 13.752,3.434 13.455,3.521 13.089,3.521 C 12.723,3.521 12.426,3.434 12.426,3.326 L 12.426,2.155" - id="path1016" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="13.775" - y1="2.6440001" - x2="14.372" - y2="2.648" - stroke="#000000" - stroke-width="0.100" - id="line1018" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.767" - y="2.819" - id="text1020" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.782" - y="3.2190001" - id="text1022" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1024" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1026" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1028" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1030" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1032" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1034" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="10.744" - x2="15.309" - y2="10.744" - stroke="#000000" - stroke-width="0.010" - id="line1036" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.309" - y1="10.988" - x2="14.336" - y2="10.988" - stroke="#000000" - stroke-width="0.010" - id="line1038" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1040" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1042" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1044" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.275" - y1="11.839" - x2="15.492" - y2="11.839" - stroke="#000000" - stroke-width="0.010" - id="line1046" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1048" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1050" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1052" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1054" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1056" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1058" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1060" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1062" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1064" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1066" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1068" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1070" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="11.474" - x2="15.127" - y2="11.474" - stroke="#000000" - stroke-width="0.010" - id="line1072" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1074" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1076" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1078" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1080" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1082" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1084" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.353" - x2="15.066" - y2="11.353" - stroke="#000000" - stroke-width="0.010" - id="line1086" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1088" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1090" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1092" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="11.17" - x2="15.249" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1094" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="11.9" - x2="15.431" - y2="11.9" - stroke="#000000" - stroke-width="0.010" - id="line1096" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="11.961" - x2="14.336" - y2="11.961" - stroke="#000000" - stroke-width="0.010" - id="line1098" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.022" - x2="15.431" - y2="12.022" - stroke="#000000" - stroke-width="0.010" - id="line1100" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.204" - x2="14.336" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1102" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.143" - x2="15.431" - y2="12.143" - stroke="#000000" - stroke-width="0.010" - id="line1104" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.083" - x2="14.336" - y2="12.083" - stroke="#000000" - stroke-width="0.010" - id="line1106" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="11.17" - x2="14.458" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1108" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.17" - x2="14.579" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1110" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.413" - x2="14.579" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1112" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.005" - y1="11.413" - x2="15.066" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1114" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.442" - y1="11.353" - x2="20.584" - y2="11.34" - stroke="#000000" - stroke-width="0.100" - id="line1116" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.929001" - y1="11.349" - x2="16.931" - y2="12.308" - stroke="#000000" - stroke-width="0.100" - id="line1118" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.931999" - y1="11.349" - x2="16.93" - y2="10.349" - stroke="#000000" - stroke-width="0.100" - id="line1120" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372" - y1="11.345" - x2="18.374001" - y2="12.251" - stroke="#000000" - stroke-width="0.100" - id="line1122" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372999" - y1="11.345" - x2="18.370001" - y2="10.345" - stroke="#000000" - stroke-width="0.100" - id="line1124" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.815001" - y1="11.342" - x2="19.816999" - y2="12.269" - stroke="#000000" - stroke-width="0.100" - id="line1126" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.813" - y1="11.342" - x2="19.811001" - y2="10.342" - stroke="#000000" - stroke-width="0.100" - id="line1128" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1130" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1132" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.018" - y="12.373" - id="rect1134" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1136" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1138" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1140" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1144" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1146" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1148" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1150" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1152" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1154" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.461" - y="12.362" - id="rect1156" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1158" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1160" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1162" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1164" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1166" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1168" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1170" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1172" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1174" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1176" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.586" - y="9.9370003" - id="rect1178" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1180" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1182" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1184" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1186" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1188" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1190" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1192" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1194" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1196" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1198" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.035999" - y="9.9619999" - id="rect1200" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1202" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1204" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1206" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1208" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1210" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1212" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1214" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1216" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1218" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1220" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.486" - y="9.9370003" - id="rect1222" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1224" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1226" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1228" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1230" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1232" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1234" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1236" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1238" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1240" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1242" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.333,12.832 L 16.381,12.852 L 17.437,12.852 L 17.485,12.832" - id="path1244" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.437,12.852 L 17.509,12.892" - id="path1246" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.309,12.892 L 16.381,12.852" - id="path1248" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1250" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1252" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1254" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1256" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1258" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1260" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1262" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1264" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1266" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1268" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1270" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1272" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1274" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1276" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1278" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1280" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1282" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1284" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1286" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1288" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1290" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1292" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1294" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1296" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1298" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1300" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1302" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1304" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1306" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1308" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1310" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1312" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1314" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1316" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1318" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1320" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1322" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1324" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.546" - x2="20.816" - y2="10.546" - stroke="#000000" - stroke-width="0.010" - id="line1326" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="10.774" - x2="21.731001" - y2="10.774" - stroke="#000000" - stroke-width="0.010" - id="line1328" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.946" - x2="20.816" - y2="10.946" - stroke="#000000" - stroke-width="0.010" - id="line1330" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1332" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1334" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1336" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.701" - y1="11.747" - x2="21.844999" - y2="11.747" - stroke="#000000" - stroke-width="0.010" - id="line1338" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1340" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1342" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1344" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1346" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1348" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1350" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1352" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1354" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1356" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1358" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1360" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1362" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="11.518" - x2="21.445" - y2="11.518" - stroke="#000000" - stroke-width="0.010" - id="line1364" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1366" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1368" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1370" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1372" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1374" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1376" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.404" - x2="21.388" - y2="11.404" - stroke="#000000" - stroke-width="0.010" - id="line1378" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.388" - y1="11.461" - x2="21.330999" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1380" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.461" - x2="20.93" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1382" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1384" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1386" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1388" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.118" - x2="20.93" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1390" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.987" - y1="11.118" - x2="21.045" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1392" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.559" - y1="11.118" - x2="21.674" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1394" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.433" - x2="20.759001" - y2="12.433" - stroke="#000000" - stroke-width="0.010" - id="line1396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.376" - x2="21.788" - y2="12.376" - stroke="#000000" - stroke-width="0.010" - id="line1398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.319" - x2="20.759001" - y2="12.319" - stroke="#000000" - stroke-width="0.010" - id="line1400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.261" - x2="21.788" - y2="12.261" - stroke="#000000" - stroke-width="0.010" - id="line1402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.204" - x2="20.759001" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.147" - x2="21.788" - y2="12.147" - stroke="#000000" - stroke-width="0.010" - id="line1406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.09" - x2="20.759001" - y2="12.09" - stroke="#000000" - stroke-width="0.010" - id="line1408" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="17.735001" - y="9.026" - id="text1410" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="17.301001" - y="9.6260004" - id="text1412" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.20.0/22</text> - <text - x="14.206" - y="12.995" - id="text1414" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="13.878" - y="13.495" - id="text1416" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">WADC-BDC</text> - <text - x="20.712" - y="13.518" - id="text1418" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="20.302" - y="14.018" - id="text1420" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">WADC-APPS</text> - <rect - width="1.3150001" - height="1.161" - x="12" - y="10.659" - id="rect1422" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.658" - cy="11.819" - rx="0.65799999" - ry="0.193" - id="ellipse1424" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.658" - cy="10.659" - rx="0.65799999" - ry="0.193" - id="ellipse1426" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.658" - cy="10.659" - rx="0.65799999" - ry="0.193" - id="ellipse1428" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.316,10.659 L 13.316,11.819 C 13.316,11.926 13.021,12.013 12.658,12.013 C 12.295,12.013 12,11.926 12,11.819 L 12,10.659" - id="path1430" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="14.275" - y1="11.353" - x2="13.275" - y2="11.344" - stroke="#000000" - stroke-width="0.100" - id="line1432" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.337" - y="11.292" - id="text1434" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.352" - y="11.692" - id="text1436" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1438" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1440" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="6.7909999" - y="11.036" - id="text1442" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <path - d="M 4.7,11.1 C 5.035363,11.196174 5.3953356,11.076093 5.6057965,10.797841 C 5.8162574,10.51959 5.8338243,10.140524 5.65,9.844" - id="path1444" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 8.675,9.794 C 7.4940305,10.104758 6.3530779,10.551408 5.275,11.125" - id="path1446" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 4.7,11.15 C 6.6098972,11.931939 8.7554368,11.904871 10.645,11.075" - id="path1448" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1450" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1452" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1454" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1456" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1458" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1460" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.1389999" - x2="1.8710001" - y2="9.1389999" - stroke="#000000" - stroke-width="0.010" - id="line1462" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="9.4180002" - x2="0.75400001" - y2="9.4180002" - stroke="#000000" - stroke-width="0.010" - id="line1464" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.698" - x2="1.8710001" - y2="9.698" - stroke="#000000" - stroke-width="0.010" - id="line1466" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.9770002" - x2="1.8710001" - y2="9.9770002" - stroke="#000000" - stroke-width="0.010" - id="line1468" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="10.256" - x2="0.75400001" - y2="10.256" - stroke="#000000" - stroke-width="0.010" - id="line1470" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1472" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1474" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1476" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.61400002" - y1="11.374" - x2="2.0109999" - y2="11.374" - stroke="#000000" - stroke-width="0.010" - id="line1478" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1480" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1482" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1484" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1486" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1488" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1490" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1492" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1494" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1496" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1498" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1500" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1502" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="10.885" - x2="1.522" - y2="10.885" - stroke="#000000" - stroke-width="0.010" - id="line1504" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1506" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1508" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1510" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1512" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1514" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1516" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.745" - x2="1.452" - y2="10.745" - stroke="#000000" - stroke-width="0.010" - id="line1518" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.452" - y1="10.815" - x2="1.382" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1520" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.815" - x2="0.89300001" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1522" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1524" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1526" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1528" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.466" - x2="0.89300001" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1530" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.963" - y1="10.466" - x2="1.033" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1532" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.6619999" - y1="10.466" - x2="1.801" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1534" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.84" - x2="1.941" - y2="12.84" - stroke="#000000" - stroke-width="0.010" - id="line1536" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.77" - x2="0.68400002" - y2="12.77" - stroke="#000000" - stroke-width="0.010" - id="line1538" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.701" - x2="1.941" - y2="12.701" - stroke="#000000" - stroke-width="0.010" - id="line1540" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.631" - x2="0.68400002" - y2="12.631" - stroke="#000000" - stroke-width="0.010" - id="line1542" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.561" - x2="1.941" - y2="12.561" - stroke="#000000" - stroke-width="0.010" - id="line1544" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.491" - x2="0.68400002" - y2="12.491" - stroke="#000000" - stroke-width="0.010" - id="line1546" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.421" - x2="1.941" - y2="12.421" - stroke="#000000" - stroke-width="0.010" - id="line1548" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.351" - x2="0.68400002" - y2="12.351" - stroke="#000000" - stroke-width="0.010" - id="line1550" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.282" - x2="1.941" - y2="12.282" - stroke="#000000" - stroke-width="0.010" - id="line1552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.212" - x2="0.68400002" - y2="12.212" - stroke="#000000" - stroke-width="0.010" - id="line1554" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.142" - x2="1.941" - y2="12.142" - stroke="#000000" - stroke-width="0.010" - id="line1556" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.072" - x2="0.68400002" - y2="12.072" - stroke="#000000" - stroke-width="0.010" - id="line1558" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.002" - x2="1.941" - y2="12.002" - stroke="#000000" - stroke-width="0.010" - id="line1560" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="11.932" - x2="0.68400002" - y2="11.932" - stroke="#000000" - stroke-width="0.010" - id="line1562" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.6090002" - y="11.995" - id="rect1564" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.6090002" - y="11.995" - id="rect1566" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.5040002" - y="12.101" - id="rect1568" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.477,12.724 -5.978,12.724 -5.978,12.837 -6.451,12.837 -6.477,12.724 " - id="polygon1570" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.477,12.724 -5.978,12.724 -5.978,12.837 -6.451,12.837 -6.477,12.724 " - id="polygon1572" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.978,12.724 -5.769,12.724 -5.796,12.837 -5.978,12.837 -5.978,12.724 " - id="polygon1574" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.978,12.724 -5.769,12.724 -5.796,12.837 -5.978,12.837 -5.978,12.724 " - id="polygon1576" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.9439998" - y="12.758" - id="rect1578" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.9439998" - y="12.758" - id="rect1580" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.22,12.837 -6.026,12.837 -6.026,12.894 -5.929,12.894 -5.929,12.95 -6.317,12.95 -6.317,12.894 -6.22,12.894 -6.22,12.837 " - id="polygon1582" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.22,12.837 -6.026,12.837 -6.026,12.894 -5.929,12.894 -5.929,12.95 -6.317,12.95 -6.317,12.894 -6.22,12.894 -6.22,12.837 " - id="polygon1584" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.653" - y1="11.13" - x2="-9.6660004" - y2="11.13" - stroke="#000000" - stroke-width="0.100" - id="line1586" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.289" - y1="11.13" - x2="-1.289" - y2="10.145" - stroke="#000000" - stroke-width="0.100" - id="line1588" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.8" - y1="11.13" - x2="-3.8" - y2="12.118" - stroke="#000000" - stroke-width="0.100" - id="line1590" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.7739999" - y1="11.13" - x2="-3.7739999" - y2="10.099" - stroke="#000000" - stroke-width="0.100" - id="line1592" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-6.0999999" - y1="11.13" - x2="-6.0999999" - y2="11.993" - stroke="#000000" - stroke-width="0.100" - id="line1594" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-6.0939999" - y1="11.13" - x2="-6.0939999" - y2="10.063" - stroke="#000000" - stroke-width="0.100" - id="line1596" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-8.4139996" - y1="11.13" - x2="-8.4139996" - y2="9.5740004" - stroke="#000000" - stroke-width="0.100" - id="line1598" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.069" - height="0.80199999" - x="-4.3639998" - y="11.941" - id="rect1600" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.069" - height="0.80199999" - x="-4.3639998" - y="11.941" - id="rect1602" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.83700001" - height="0.55199999" - x="-4.2480001" - y="12.057" - id="rect1604" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.219,12.743 -3.669,12.743 -3.669,12.868 -4.19,12.868 -4.219,12.743 " - id="polygon1606" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.219,12.743 -3.669,12.743 -3.669,12.868 -4.19,12.868 -4.219,12.743 " - id="polygon1608" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.669,12.743 -3.44,12.743 -3.469,12.868 -3.669,12.868 -3.669,12.743 " - id="polygon1610" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.669,12.743 -3.44,12.743 -3.469,12.868 -3.669,12.868 -3.669,12.743 " - id="polygon1612" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.632" - y="12.78" - id="rect1614" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.632" - y="12.78" - id="rect1616" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.936,12.868 -3.723,12.868 -3.723,12.93 -3.616,12.93 -3.616,12.992 -4.043,12.992 -4.043,12.93 -3.936,12.93 -3.936,12.868 " - id="polygon1618" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.936,12.868 -3.723,12.868 -3.723,12.93 -3.616,12.93 -3.616,12.992 -4.043,12.992 -4.043,12.93 -3.936,12.93 -3.936,12.868 " - id="polygon1620" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.579" - y="9.1079998" - id="rect1622" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.579" - y="9.1079998" - id="rect1624" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.474" - y="9.2139997" - id="rect1626" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.448,9.837 -5.948,9.837 -5.948,9.95 -6.421,9.95 -6.448,9.837 " - id="polygon1628" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.448,9.837 -5.948,9.837 -5.948,9.95 -6.421,9.95 -6.448,9.837 " - id="polygon1630" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.948,9.837 -5.74,9.837 -5.766,9.95 -5.948,9.95 -5.948,9.837 " - id="polygon1632" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.948,9.837 -5.74,9.837 -5.766,9.95 -5.948,9.95 -5.948,9.837 " - id="polygon1634" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.914" - y="9.8710003" - id="rect1636" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.914" - y="9.8710003" - id="rect1638" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.191,9.95 -5.996,9.95 -5.996,10.007 -5.899,10.007 -5.899,10.063 -6.288,10.063 -6.288,10.007 -6.191,10.007 -6.191,9.95 " - id="polygon1640" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.191,9.95 -5.996,9.95 -5.996,10.007 -5.899,10.007 -5.899,10.063 -6.288,10.063 -6.288,10.007 -6.191,10.007 -6.191,9.95 " - id="polygon1642" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.2600002" - y="9.1450005" - id="rect1644" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.2600002" - y="9.1450005" - id="rect1646" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-4.1550002" - y="9.25" - id="rect1648" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.128,9.873 -3.629,9.873 -3.629,9.986 -4.102,9.986 -4.128,9.873 " - id="polygon1650" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.128,9.873 -3.629,9.873 -3.629,9.986 -4.102,9.986 -4.128,9.873 " - id="polygon1652" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.629,9.873 -3.42,9.873 -3.447,9.986 -3.629,9.986 -3.629,9.873 " - id="polygon1654" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.629,9.873 -3.42,9.873 -3.447,9.986 -3.629,9.986 -3.629,9.873 " - id="polygon1656" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.595" - y="9.9069996" - id="rect1658" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.595" - y="9.9069996" - id="rect1660" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.871,9.986 -3.677,9.986 -3.677,10.043 -3.58,10.043 -3.58,10.099 -3.969,10.099 -3.969,10.043 -3.871,10.043 -3.871,9.986 " - id="polygon1662" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.871,9.986 -3.677,9.986 -3.677,10.043 -3.58,10.043 -3.58,10.099 -3.969,10.099 -3.969,10.043 -3.871,10.043 -3.871,9.986 " - id="polygon1664" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-8.9029999" - y="9.0410004" - id="rect1666" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-8.9029999" - y="9.0410004" - id="rect1668" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-8.7980003" - y="9.1470003" - id="rect1670" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-8.771,9.77 -8.272,9.77 -8.272,9.883 -8.745,9.883 -8.771,9.77 " - id="polygon1672" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.771,9.77 -8.272,9.77 -8.272,9.883 -8.745,9.883 -8.771,9.77 " - id="polygon1674" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-8.272,9.77 -8.063,9.77 -8.09,9.883 -8.272,9.883 -8.272,9.77 " - id="polygon1676" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.272,9.77 -8.063,9.77 -8.09,9.883 -8.272,9.883 -8.272,9.77 " - id="polygon1678" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-8.2379999" - y="9.8039999" - id="rect1680" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-8.2379999" - y="9.8039999" - id="rect1682" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-8.515,9.883 -8.32,9.883 -8.32,9.94 -8.223,9.94 -8.223,9.996 -8.612,9.996 -8.612,9.94 -8.515,9.94 -8.515,9.883 " - id="polygon1684" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.515,9.883 -8.32,9.883 -8.32,9.94 -8.223,9.94 -8.223,9.996 -8.612,9.996 -8.612,9.94 -8.515,9.94 -8.515,9.883 " - id="polygon1686" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-1.701,9.517 -1.75,9.538 -1.895,9.902 -1.895,10.084 -1.823,10.145 -0.754,10.145 -0.682,10.084 -0.682,9.902 -0.827,9.538 -0.876,9.517 -1.701,9.517 " - id="polygon1688" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.701,9.517 -1.75,9.538 -1.895,9.902 -1.895,10.084 -1.823,10.145 -0.754,10.145 -0.682,10.084 -0.682,9.902 -0.827,9.538 -0.876,9.517 -1.701,9.517 " - id="polygon1690" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.871,9.841 L -1.823,9.861 L -0.754,9.861 L -0.706,9.841" - id="path1692" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -0.754,9.861 L -0.682,9.902" - id="path1694" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.895,9.902 L -1.823,9.861" - id="path1696" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.556,9.133 -1.58,9.618 -0.997,9.618 -1.021,9.133 -1.556,9.133 " - id="polygon1698" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.556,9.133 -1.58,9.618 -0.997,9.618 -1.021,9.133 -1.556,9.133 " - id="polygon1700" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.653,9.618 -1.701,9.76 -0.876,9.76 -0.924,9.618 -1.653,9.618 " - id="polygon1702" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.653,9.618 -1.701,9.76 -0.876,9.76 -0.924,9.618 -1.653,9.618 " - id="polygon1704" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-1.653" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1706" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1708" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1710" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1712" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1714" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1716" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1718" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1720" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1722" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1724" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1726" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1728" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1730" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1732" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1734" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1736" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1738" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1740" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1742" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1744" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1746" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1748" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1750" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1752" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.289" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1754" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-1.289" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1756" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-0.98500001" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1758" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-0.98500001" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1760" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1762" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1764" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1766" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1768" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1770" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1772" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8780003" - y1="10.141" - x2="-10.928" - y2="10.141" - stroke="#000000" - stroke-width="0.010" - id="line1774" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.928" - y1="10.403" - x2="-9.8780003" - y2="10.403" - stroke="#000000" - stroke-width="0.010" - id="line1776" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8780003" - y1="10.6" - x2="-10.928" - y2="10.6" - stroke="#000000" - stroke-width="0.010" - id="line1778" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1780" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1782" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1784" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-11.059" - y1="11.519" - x2="-9.7460003" - y2="11.519" - stroke="#000000" - stroke-width="0.010" - id="line1786" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1788" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1790" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1792" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1794" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1796" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1798" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1800" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1802" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1804" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1806" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1808" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1810" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.928" - y1="11.256" - x2="-10.206" - y2="11.256" - stroke="#000000" - stroke-width="0.010" - id="line1812" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1814" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1816" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1818" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1820" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1822" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1824" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="11.125" - x2="-10.271" - y2="11.125" - stroke="#000000" - stroke-width="0.010" - id="line1826" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.271" - y1="11.191" - x2="-10.337" - y2="11.191" - stroke="#000000" - stroke-width="0.010" - id="line1828" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="11.191" - x2="-10.796" - y2="11.191" - stroke="#000000" - stroke-width="0.010" - id="line1830" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1832" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1834" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1836" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="10.797" - x2="-10.796" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1838" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.731" - y1="10.797" - x2="-10.665" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1840" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.074" - y1="10.797" - x2="-9.9429998" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1842" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.306" - x2="-10.993" - y2="12.306" - stroke="#000000" - stroke-width="0.010" - id="line1844" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="12.241" - x2="-9.8120003" - y2="12.241" - stroke="#000000" - stroke-width="0.010" - id="line1846" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.175" - x2="-10.993" - y2="12.175" - stroke="#000000" - stroke-width="0.010" - id="line1848" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="12.11" - x2="-9.8120003" - y2="12.11" - stroke="#000000" - stroke-width="0.010" - id="line1850" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.044" - x2="-10.993" - y2="12.044" - stroke="#000000" - stroke-width="0.010" - id="line1852" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="11.978" - x2="-9.8120003" - y2="11.978" - stroke="#000000" - stroke-width="0.010" - id="line1854" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="11.913" - x2="-10.993" - y2="11.913" - stroke="#000000" - stroke-width="0.010" - id="line1856" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="-4.0289998" - y="8.2189999" - id="text1858" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-4.3639998" - y="8.8190002" - id="text1860" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.0.0/22</text> - <text - x="-10.628" - y="13.181" - id="text1862" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="-10.454" - y="13.681" - id="text1864" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GWYN-APPS</text> - <rect - width="1.4450001" - height="1.275" - x="2.5510001" - y="8.6120005" - id="rect1866" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="3.273" - cy="9.8870001" - rx="0.72299999" - ry="0.213" - id="ellipse1868" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1870" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1872" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.996,8.612 L 3.996,9.887 C 3.996,10.005 3.672,10.1 3.273,10.1 C 2.874,10.1 2.551,10.005 2.551,9.887 L 2.551,8.612" - id="path1874" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="2.0109999" - y1="9.2469997" - x2="2.586" - y2="9.2469997" - stroke="#000000" - stroke-width="0.100" - id="line1876" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="2.983" - y="9.3260002" - id="text1878" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.928" - y="9.7259998" - id="text1880" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Master</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="5.725,19.819 5.725,18.237 5.732,18.237 5.732,17.325 " - id="polyline1882" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="1.317" - y="15.131" - id="text1884" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">1100 Users</text> - <text - x="1.136" - y="6.0770001" - id="text1886" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">320 Users</text> - <text - x="12.943" - y="6.0310001" - id="text1888" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">180 Users</text> - <text - x="12.383" - y="15.277" - id="text1890" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">100 Users</text> - <text - x="-9.8629999" - y="15.156" - id="text1892" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York - GNY</text> - <text - x="13.189" - y="0.46399999" - id="text1894" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Los Angeles</text> - <text - x="1.086" - y="0.53899997" - id="text1896" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">London</text> - <text - x="12.979" - y="8.0889997" - id="text1898" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Washington, DC</text> - <rect - width="11.132" - height="6.5630002" - x="-11.146" - y="16.205999" - id="rect1900" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1902" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1904" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.732" - height="5.9629998" - x="-11.446" - y="16.506001" - id="rect1906" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1908" - style="fill:#ebebeb;stroke:none" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1910" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.146" - y1="16.205999" - x2="-0.014" - y2="16.205999" - stroke="#000000" - stroke-width="0.050" - id="line1912" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.146" - y1="22.768999" - x2="-0.014" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line1914" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1916" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1918" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.446" - y1="16.506001" - x2="-11.446" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1920" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.28600001" - y1="16.506001" - x2="0.28600001" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1922" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1924" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1926" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1928" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1930" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1932" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1934" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1936" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1938" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1940" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1942" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1944" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1946" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1948" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1950" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1952" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1954" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1956" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-5.2220001" - y="17.145" - id="text1958" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-5.5609999" - y="17.745001" - id="text1960" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.4.0/22</text> - <text - x="-10.001" - y="21.07" - id="text1962" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="-10.37" - y="21.57" - id="text1964" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-BDC</text> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1966" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1968" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1970" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1972" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1974" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1976" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="19.087" - x2="-7.6300001" - y2="19.087" - stroke="#000000" - stroke-width="0.010" - id="line1978" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.6300001" - y1="19.33" - x2="-8.6040001" - y2="19.33" - stroke="#000000" - stroke-width="0.010" - id="line1980" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1982" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1984" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1986" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.665" - y1="20.181999" - x2="-7.448" - y2="20.181999" - stroke="#000000" - stroke-width="0.010" - id="line1988" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1990" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1992" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1994" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect1996" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect1998" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect2000" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2002" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2004" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2006" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2008" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2010" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2012" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4820004" - y1="19.816999" - x2="-7.8130002" - y2="19.816999" - stroke="#000000" - stroke-width="0.010" - id="line2014" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2016" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2018" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2020" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2022" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2024" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2026" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.695" - x2="-7.8740001" - y2="19.695" - stroke="#000000" - stroke-width="0.010" - id="line2028" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2030" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2032" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2034" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.8130002" - y1="19.511999" - x2="-7.691" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2036" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.242001" - x2="-7.5089998" - y2="20.242001" - stroke="#000000" - stroke-width="0.010" - id="line2038" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.302999" - x2="-8.6040001" - y2="20.302999" - stroke="#000000" - stroke-width="0.010" - id="line2040" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.364" - x2="-7.5089998" - y2="20.364" - stroke="#000000" - stroke-width="0.010" - id="line2042" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.547001" - x2="-8.6040001" - y2="20.547001" - stroke="#000000" - stroke-width="0.010" - id="line2044" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.486" - x2="-7.5089998" - y2="20.486" - stroke="#000000" - stroke-width="0.010" - id="line2046" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.424999" - x2="-8.6040001" - y2="20.424999" - stroke="#000000" - stroke-width="0.010" - id="line2048" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5430002" - y1="19.511999" - x2="-8.4820004" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2050" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.511999" - x2="-8.3599997" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2052" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.756001" - x2="-8.3599997" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2054" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.9349999" - y1="19.756001" - x2="-7.8740001" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2056" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.4980001" - y1="19.695" - x2="-2.164" - y2="19.679001" - stroke="#000000" - stroke-width="0.100" - id="line2058" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9559999" - y1="19.690001" - x2="-5.9530001" - y2="20.649" - stroke="#000000" - stroke-width="0.100" - id="line2060" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9530001" - y1="19.690001" - x2="-5.9559999" - y2="18.690001" - stroke="#000000" - stroke-width="0.100" - id="line2062" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4590001" - y1="19.686001" - x2="-4.4559999" - y2="20.591" - stroke="#000000" - stroke-width="0.100" - id="line2064" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4569998" - y1="19.686001" - x2="-4.46" - y2="18.686001" - stroke="#000000" - stroke-width="0.100" - id="line2066" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.961" - y1="19.681" - x2="-2.9579999" - y2="20.608" - stroke="#000000" - stroke-width="0.100" - id="line2068" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.9619999" - y1="19.681" - x2="-2.9649999" - y2="18.681" - stroke="#000000" - stroke-width="0.100" - id="line2070" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2072" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2074" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8470001" - y="20.715" - id="rect2076" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2078" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2080" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2082" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2084" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2086" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2088" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2090" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2092" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2094" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2096" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.329" - y="20.704" - id="rect2098" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2100" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2102" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2104" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2108" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2110" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2112" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2116" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2118" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-6.2789998" - y="18.278999" - id="rect2120" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2122" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2124" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2126" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2128" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2130" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2132" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2134" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2136" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2138" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8039999" - y="18.278999" - id="rect2142" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2144" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2146" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2148" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2150" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2152" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2154" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2156" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2158" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2160" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2162" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.3039999" - y="18.304001" - id="rect2164" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2166" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2168" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2170" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2172" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2174" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2176" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2178" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2180" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2182" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2184" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.607,21.174 L -6.559,21.194 L -5.503,21.194 L -5.455,21.174" - id="path2186" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -5.503,21.194 L -5.431,21.234" - id="path2188" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.631,21.234 L -6.559,21.194" - id="path2190" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2192" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2194" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2196" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2198" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2200" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2202" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2204" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2206" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2208" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2210" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2212" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2214" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2216" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2218" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2220" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2222" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2224" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2226" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2228" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2230" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2232" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2234" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2236" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2238" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2240" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2242" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2244" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2246" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2248" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2250" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2252" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2254" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.17" - height="1.033" - x="-10.59" - y="19.132" - id="rect2256" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="-10.004" - cy="20.165001" - rx="0.58499998" - ry="0.17200001" - id="ellipse2258" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.004" - cy="19.132" - rx="0.58499998" - ry="0.17200001" - id="ellipse2260" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.004" - cy="19.132" - rx="0.58499998" - ry="0.17200001" - id="ellipse2262" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -9.419,19.132 L -9.419,20.165 C -9.419,20.26 -9.681,20.337 -10.004,20.337 C -10.328,20.337 -10.59,20.26 -10.59,20.165 L -10.59,19.132" - id="path2264" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-9.3959999" - y1="19.684" - x2="-8.665" - y2="19.695" - stroke="#000000" - stroke-width="0.100" - id="line2266" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-10.303" - y="19.759001" - id="text2268" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="-10.288" - y="20.159" - id="text2270" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="-0.91500002" - y="19.843" - id="text2272" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="-1.867" - y="22.455999" - id="text2274" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">50 Users</text> - <text - x="-10.478" - y="17.114" - id="text2276" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="-10.081" - y="17.914" - id="text2278" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg2</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.554,15.161 -1.554,15.906 -1.821,15.906 -1.821,19.285 " - id="polyline2280" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2282" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2284" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2286" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2288" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2290" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2292" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2294" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2296" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2298" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2300" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2302" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2304" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2306" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2308" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2310" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="7.8559999" - y="17.167" - id="text2312" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="7.5180001" - y="17.767" - id="text2314" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.8.0/22</text> - <text - x="3.204" - y="18.118" - id="text2316" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="2.835" - y="18.618" - id="text2318" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG3-BDC</text> - <text - x="12.542" - y="19.694" - id="text2320" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="12.687" - y="20.194" - id="text2322" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-APPS</text> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2324" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2326" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2328" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2330" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2332" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2334" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="19.246" - x2="5.112" - y2="19.246" - stroke="#000000" - stroke-width="0.010" - id="line2336" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.112" - y1="19.49" - x2="4.138" - y2="19.49" - stroke="#000000" - stroke-width="0.010" - id="line2338" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2340" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2342" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2344" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.0770001" - y1="20.341" - x2="5.2940001" - y2="20.341" - stroke="#000000" - stroke-width="0.010" - id="line2346" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2348" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2350" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2352" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2354" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2356" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2358" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2360" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2362" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2364" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2366" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2368" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2370" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.2600002" - y1="19.976" - x2="4.9289999" - y2="19.976" - stroke="#000000" - stroke-width="0.010" - id="line2372" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2374" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2376" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2378" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2380" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2382" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2384" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.855" - x2="4.868" - y2="19.855" - stroke="#000000" - stroke-width="0.010" - id="line2386" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2388" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2390" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2392" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.9289999" - y1="19.672001" - x2="5.0510001" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2394" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.402" - x2="5.2329998" - y2="20.402" - stroke="#000000" - stroke-width="0.010" - id="line2396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.462999" - x2="4.138" - y2="20.462999" - stroke="#000000" - stroke-width="0.010" - id="line2398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.524" - x2="5.2329998" - y2="20.524" - stroke="#000000" - stroke-width="0.010" - id="line2400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.705999" - x2="4.138" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.645" - x2="5.2329998" - y2="20.645" - stroke="#000000" - stroke-width="0.010" - id="line2404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.584999" - x2="4.138" - y2="20.584999" - stroke="#000000" - stroke-width="0.010" - id="line2406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.1989999" - y1="19.672001" - x2="4.2600002" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2408" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.672001" - x2="4.382" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2410" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.915001" - x2="4.382" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2412" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.8070002" - y1="19.915001" - x2="4.868" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2414" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.244" - y1="19.855" - x2="10.386" - y2="19.841999" - stroke="#000000" - stroke-width="0.100" - id="line2416" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7309999" - y1="19.851" - x2="6.7329998" - y2="20.809999" - stroke="#000000" - stroke-width="0.100" - id="line2418" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7350001" - y1="19.851" - x2="6.7319999" - y2="18.851" - stroke="#000000" - stroke-width="0.100" - id="line2420" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1739998" - y1="19.847" - x2="8.1759996" - y2="20.753" - stroke="#000000" - stroke-width="0.100" - id="line2422" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1750002" - y1="19.847" - x2="8.1730003" - y2="18.848" - stroke="#000000" - stroke-width="0.100" - id="line2424" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6169996" - y1="19.844" - x2="9.6190004" - y2="20.771" - stroke="#000000" - stroke-width="0.100" - id="line2426" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6160002" - y1="19.844" - x2="9.6129999" - y2="18.844" - stroke="#000000" - stroke-width="0.100" - id="line2428" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2430" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2432" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8210001" - y="20.875" - id="rect2434" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2436" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2438" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2440" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2442" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2444" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2446" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2448" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2450" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2452" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2454" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2629995" - y="20.864" - id="rect2456" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2458" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2460" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2462" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2464" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2466" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2468" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2470" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2472" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2474" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2476" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.388" - y="18.438999" - id="rect2478" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2480" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2482" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2484" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2486" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2488" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2490" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2492" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2494" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2496" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2498" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8379998" - y="18.464001" - id="rect2500" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2502" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2504" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2506" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2508" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2510" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2512" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2514" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2516" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2518" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2520" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2880001" - y="18.438999" - id="rect2522" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2524" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2526" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2528" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2530" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2532" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2534" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2536" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2538" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2540" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2542" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.135,21.334 L 6.183,21.354 L 7.239,21.354 L 7.287,21.334" - id="path2544" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.239,21.354 L 7.311,21.394" - id="path2546" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.111,21.394 L 6.183,21.354" - id="path2548" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2550" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2552" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2554" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2556" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2558" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2560" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2562" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2564" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2566" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2568" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2570" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2572" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2574" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2576" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2578" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2580" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2582" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2584" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2586" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2588" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2590" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2592" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2594" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2596" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2598" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2600" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2602" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2604" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2606" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2608" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2610" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2612" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2614" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2616" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2618" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2620" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2622" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2624" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.048" - x2="10.618" - y2="19.048" - stroke="#000000" - stroke-width="0.010" - id="line2626" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="19.275999" - x2="11.533" - y2="19.275999" - stroke="#000000" - stroke-width="0.010" - id="line2628" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.448" - x2="10.618" - y2="19.448" - stroke="#000000" - stroke-width="0.010" - id="line2630" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2632" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2634" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2636" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.504" - y1="20.249001" - x2="11.647" - y2="20.249001" - stroke="#000000" - stroke-width="0.010" - id="line2638" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2640" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2642" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2644" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2646" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2648" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2650" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2652" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2654" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2656" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2658" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2660" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2662" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="20.02" - x2="11.247" - y2="20.02" - stroke="#000000" - stroke-width="0.010" - id="line2664" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2666" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2668" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2670" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2672" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2674" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2676" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.906" - x2="11.19" - y2="19.906" - stroke="#000000" - stroke-width="0.010" - id="line2678" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.19" - y1="19.962999" - x2="11.133" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.962999" - x2="10.732" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2682" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2684" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2686" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2688" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.620001" - x2="10.732" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.79" - y1="19.620001" - x2="10.847" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.362" - y1="19.620001" - x2="11.476" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.934999" - x2="10.561" - y2="20.934999" - stroke="#000000" - stroke-width="0.010" - id="line2696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.878" - x2="11.59" - y2="20.878" - stroke="#000000" - stroke-width="0.010" - id="line2698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.820999" - x2="10.561" - y2="20.820999" - stroke="#000000" - stroke-width="0.010" - id="line2700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.763" - x2="11.59" - y2="20.763" - stroke="#000000" - stroke-width="0.010" - id="line2702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.705999" - x2="10.561" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2704" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.649" - x2="11.59" - y2="20.649" - stroke="#000000" - stroke-width="0.010" - id="line2706" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.591999" - x2="10.561" - y2="20.591999" - stroke="#000000" - stroke-width="0.010" - id="line2708" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4960001" - y1="19.819" - x2="4.0770001" - y2="19.855" - stroke="#000000" - stroke-width="0.100" - id="line2710" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.183" - height="1.044" - x="2.302" - y="19.268999" - id="rect2712" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="2.8940001" - cy="20.312" - rx="0.59100002" - ry="0.17399999" - id="ellipse2714" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2716" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2718" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.485,19.269 L 3.485,20.312 C 3.485,20.409 3.221,20.486 2.894,20.486 C 2.567,20.486 2.302,20.409 2.302,20.312 L 2.302,19.269" - id="path2720" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="2.589" - y="19.868999" - id="text2722" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.6040001" - y="20.268999" - id="text2724" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="12.947" - y="22.452" - id="text2726" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">250 Users</text> - <text - x="12.072" - y="17.239" - id="text2728" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="12.468" - y="18.039" - id="text2730" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg3</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.129,15.125 -1.129,15.903 5.732,15.903 5.732,16.538 " - id="polyline2732" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="16.1" - y1="22.393" - x2="15.55" - y2="23.143" - stroke="#F7F7F7" - stroke-width="0.100" - id="line2734" - style="stroke:#f7f7f7;stroke-width:0.1" /> - <text - x="-10.033" - y="7.8769999" - id="text2736" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="-10.108" - y="22.502001" - id="text2738" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="2.5420001" - y="22.502001" - id="text2740" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="7.355" - y="0.40200001" - id="text2742" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: UKNET</text> - <text - x="18.438999" - y="0.40200001" - id="text2744" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: WESTNET</text> - <text - x="18.017" - y="15.202" - id="text2746" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="-10.507" - y="0.49399999" - id="text2748" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Notes:</text> - <text - x="-11.175" - y="1.294" - id="text2750" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">The decision was made to implement separate</text> - <text - x="-11.175" - y="1.794" - id="text2752" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">domains for the West Coast and for UK</text> - <text - x="-11.175" - y="2.2939999" - id="text2754" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">operations. Wide-area traffic will be reduced.</text> - <text - x="-11.175" - y="3.2939999" - id="text2756" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">This design introduces the concept of deploying</text> - <text - x="-11.175" - y="3.7939999" - id="text2758" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">interdomain trusts, thus permitting much needed</text> - <text - x="-11.175" - y="4.2940001" - id="text2760" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">network integration and interoperabilty.</text> - <text - x="-11.175" - y="5.2940001" - id="text2762" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">There is a single LDAP Master and at least one</text> - <text - x="-11.175" - y="5.7940001" - id="text2764" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave LDAP server in each remote office.</text> - <text - x="-11.175" - y="6.2940001" - id="text2766" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial" /> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net2-Br.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net2-Br.png Binary files differdeleted file mode 100644 index a75a47dc5d..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net2-Br.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net2.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net2.png Binary files differdeleted file mode 100644 index 32cd8795ab..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net2.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net2.svg b/docs/htmldocs/Samba3-ByExample/images/chap7-net2.svg deleted file mode 100644 index 1466498d62..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net2.svg +++ /dev/null @@ -1,9075 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="34.602001cm" - height="23.67cm" - viewBox="-11.55 -0.456 23.052 23.213" - id="svg2"> - <defs - id="defs2765" /> - <rect - width="13.8" - height="6.513" - x="1.375" - y="16.256001" - id="rect4" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path6" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path8" - style="fill:#ebebeb;stroke:none" /> - <rect - width="14.4" - height="5.9130001" - x="1.075" - y="16.556" - id="rect10" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path12" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path14" - style="fill:#ebebeb;stroke:none" /> - <line - x1="1.375" - y1="16.256001" - x2="15.175" - y2="16.256001" - stroke="#000000" - stroke-width="0.050" - id="line16" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="1.375" - y1="22.768999" - x2="15.175" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line18" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.375,16.256 C 1.2093146,16.256 1.075,16.390315 1.075,16.556" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.475,16.556 C 15.475,16.390315 15.340685,16.256 15.175,16.256" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.075" - y1="16.556" - x2="1.075" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line24" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="15.475" - y1="16.556" - x2="15.475" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line26" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 1.075,22.469 C 1.075,22.634685 1.2093146,22.769 1.375,22.769" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 15.175,22.769 C 15.340685,22.769 15.475,22.634685 15.475,22.469" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.617" - height="6.8530002" - x="0.495" - y="-0.40599999" - id="rect32" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path34" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path36" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.217" - height="6.2529998" - x="0.19499999" - y="-0.106" - id="rect38" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path40" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path42" - style="fill:#ebebeb;stroke:none" /> - <line - x1="0.495" - y1="-0.40599999" - x2="11.112" - y2="-0.40599999" - stroke="#000000" - stroke-width="0.050" - id="line44" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.495" - y1="6.447" - x2="11.112" - y2="6.447" - stroke="#000000" - stroke-width="0.050" - id="line46" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.495,-0.406 C 0.32931458,-0.406 0.195,-0.27168542 0.195,-0.106" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.412,-0.106 C 11.412,-0.27168542 11.277685,-0.406 11.112,-0.406" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.19499999" - y1="-0.106" - x2="0.19499999" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line52" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.412" - y1="-0.106" - x2="11.412" - y2="6.1469998" - stroke="#000000" - stroke-width="0.050" - id="line54" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.195,6.147 C 0.195,6.3126854 0.32931458,6.447 0.495,6.447" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.112,6.447 C 11.277685,6.447 11.412,6.3126854 11.412,6.147" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.337" - height="6.8600001" - x="12.35" - y="-0.43099999" - id="rect60" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path62" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path64" - style="fill:#ebebeb;stroke:none" /> - <rect - width="10.937" - height="6.2600002" - x="12.05" - y="-0.131" - id="rect66" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path68" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path70" - style="fill:#ebebeb;stroke:none" /> - <line - x1="12.35" - y1="-0.43099999" - x2="22.687" - y2="-0.43099999" - stroke="#000000" - stroke-width="0.050" - id="line72" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="12.35" - y1="6.4289999" - x2="22.687" - y2="6.4289999" - stroke="#000000" - stroke-width="0.050" - id="line74" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.35,-0.431 C 12.184315,-0.431 12.05,-0.29668542 12.05,-0.131" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.987,-0.131 C 22.987,-0.29668542 22.852685,-0.431 22.687,-0.431" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="12.05" - y1="-0.131" - x2="12.05" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line80" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="22.987" - y1="-0.131" - x2="22.987" - y2="6.1290002" - stroke="#000000" - stroke-width="0.050" - id="line82" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 12.05,6.129 C 12.05,6.2946854 12.184315,6.429 12.35,6.429" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.687,6.429 C 22.852685,6.429 22.987,6.2946854 22.987,6.129" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="10.821" - height="8.375" - x="11.905" - y="7.244" - id="rect88" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path90" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path92" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.421" - height="7.7750001" - x="11.605" - y="7.5440001" - id="rect94" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path96" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path98" - style="fill:#ebebeb;stroke:none" /> - <line - x1="11.905" - y1="7.244" - x2="22.726999" - y2="7.244" - stroke="#000000" - stroke-width="0.050" - id="line100" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="11.905" - y1="15.619" - x2="22.726999" - y2="15.619" - stroke="#000000" - stroke-width="0.050" - id="line102" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.905,7.244 C 11.739315,7.244 11.605,7.3783146 11.605,7.544" - id="path104" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 23.027,7.544 C 23.027,7.3783146 22.892685,7.244 22.727,7.244" - id="path106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="11.605" - y1="7.5440001" - x2="11.605" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line108" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="23.027" - y1="7.5440001" - x2="23.027" - y2="15.319" - stroke="#000000" - stroke-width="0.050" - id="line110" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M 11.605,15.319 C 11.605,15.484685 11.739315,15.619 11.905,15.619" - id="path112" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 22.727,15.619 C 22.892685,15.619 23.027,15.484685 23.027,15.319" - id="path114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="15.1" - height="8.3719997" - x="-11.225" - y="7.1339998" - id="rect116" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.225,7.134 C -11.390685,7.134 -11.525,7.2683146 -11.525,7.434" - id="path118" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 4.175,7.434 C 4.175,7.2683146 4.0406854,7.134 3.875,7.134" - id="path120" - style="fill:#ebebeb;stroke:none" /> - <rect - width="15.7" - height="7.7719998" - x="-11.525" - y="7.434" - id="rect122" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.525,15.206 C -11.525,15.371685 -11.390685,15.506 -11.225,15.506" - id="path124" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 3.875,15.506 C 4.0406854,15.506 4.175,15.371685 4.175,15.206" - id="path126" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.225" - y1="7.1339998" - x2="3.875" - y2="7.1339998" - stroke="#000000" - stroke-width="0.050" - id="line128" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.225" - y1="15.506" - x2="3.875" - y2="15.506" - stroke="#000000" - stroke-width="0.050" - id="line130" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.225,7.134 C -11.390685,7.134 -11.525,7.2683146 -11.525,7.434" - id="path132" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 4.175,7.434 C 4.175,7.2683146 4.0406854,7.134 3.875,7.134" - id="path134" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.525" - y1="7.434" - x2="-11.525" - y2="15.206" - stroke="#000000" - stroke-width="0.050" - id="line136" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="4.1750002" - y1="7.434" - x2="4.1750002" - y2="15.206" - stroke="#000000" - stroke-width="0.050" - id="line138" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.525,15.206 C -11.525,15.371685 -11.390685,15.506 -11.225,15.506" - id="path140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 3.875,15.506 C 4.0406854,15.506 4.175,15.371685 4.175,15.206" - id="path142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="1.95" - y1="11.168" - x2="4.8109999" - y2="11.165" - stroke="#000000" - stroke-width="0.300" - id="line144" - style="stroke:#000000;stroke-width:0.30000001" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="4.145,2.624 4.145,6.819 5.675,6.819 5.675,9.944 " - id="polyline146" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="16.100,2.794 16.100,6.844 8.674,6.844 8.674,9.887 " - id="polyline148" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect150" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect152" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.98000002" - height="0.98000002" - x="-1.818" - y="14.136" - id="rect154" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.267,14.295 C -1.267,14.785 -1.169,14.687 -1.659,14.687" - id="path156" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.267,14.295 C -1.267,14.785 -1.169,14.687 -1.659,14.687" - id="path158" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.22,14.371 -1.269,14.273 -1.318,14.371 -1.22,14.371 " - id="polygon160" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.22,14.371 -1.269,14.273 -1.318,14.371 -1.22,14.371 " - id="polygon162" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.583,14.636 -1.681,14.685 -1.583,14.734 -1.583,14.636 " - id="polygon164" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.583,14.636 -1.681,14.685 -1.583,14.734 -1.583,14.636 " - id="polygon166" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -0.976,14.571 C -1.466,14.571 -1.368,14.473 -1.368,14.963" - id="path168" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -0.976,14.571 C -1.466,14.571 -1.368,14.473 -1.368,14.963" - id="path170" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.063,14.616 -0.965,14.567 -1.063,14.518 -1.063,14.616 " - id="polygon172" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.063,14.616 -0.965,14.567 -1.063,14.518 -1.063,14.616 " - id="polygon174" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.426,14.881 -1.377,14.979 -1.328,14.881 -1.426,14.881 " - id="polygon176" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.426,14.881 -1.377,14.979 -1.328,14.881 -1.426,14.881 " - id="polygon178" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.306" - y1="11.165" - x2="-1.3279999" - y2="14.136" - stroke="#000000" - stroke-width="0.100" - id="line180" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.71700001" - y="7.6999998" - id="text182" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="0.37799999" - y="8.1999998" - id="text184" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GWYN-PDC</text> - <line - x1="6.118" - y1="13.16" - x2="7.7179999" - y2="13.135" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.10,0.10" - id="line186" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <text - x="8.4429998" - y="13.325" - id="text188" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">= VPN</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="10.645,11.075 10.645,9.069 16.025,9.069 16.025,11.368 " - id="polyline190" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-3.0239999" - y="14.751" - id="text192" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="4.1469998" - y="17.031" - id="text194" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect196" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect198" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="2.553" - y="1.723" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect202" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect204" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="2.6140001" - y="1.784" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="2.027" - x2="3.5869999" - y2="2.027" - stroke="#000000" - stroke-width="0.010" - id="line208" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.5869999" - y1="2.2709999" - x2="2.6140001" - y2="2.2709999" - stroke="#000000" - stroke-width="0.010" - id="line210" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect212" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect214" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="2.7360001" - y="2.575" - id="rect216" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.553" - y1="3.122" - x2="3.77" - y2="3.122" - stroke="#000000" - stroke-width="0.010" - id="line218" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect220" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect222" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.405" - y="3.0009999" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect226" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect228" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.527" - y="3.0009999" - id="rect230" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect232" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect234" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="3.648" - y="3.0009999" - id="rect236" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect238" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect240" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="3.5869999" - y="2.8180001" - id="rect242" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7360001" - y1="2.757" - x2="3.405" - y2="2.757" - stroke="#000000" - stroke-width="0.010" - id="line244" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect246" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect248" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="3.527" - y="2.575" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect252" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect254" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="2.675" - y="2.332" - id="rect256" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.6359999" - x2="3.3440001" - y2="2.6359999" - stroke="#000000" - stroke-width="0.010" - id="line258" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect260" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect262" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="2.918" - y="2.6359999" - id="rect264" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="3.405" - y1="2.4530001" - x2="3.527" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line266" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.1830001" - x2="3.7090001" - y2="3.1830001" - stroke="#000000" - stroke-width="0.010" - id="line268" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.244" - x2="2.6140001" - y2="3.244" - stroke="#000000" - stroke-width="0.010" - id="line270" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.3050001" - x2="3.7090001" - y2="3.3050001" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.487" - x2="2.6140001" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line274" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.6140001" - y1="3.427" - x2="3.7090001" - y2="3.427" - stroke="#000000" - stroke-width="0.010" - id="line276" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.7090001" - y1="3.3659999" - x2="2.6140001" - y2="3.3659999" - stroke="#000000" - stroke-width="0.010" - id="line278" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.675" - y1="2.4530001" - x2="2.7360001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line280" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.4530001" - x2="2.8570001" - y2="2.4530001" - stroke="#000000" - stroke-width="0.010" - id="line282" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7969999" - y1="2.697" - x2="2.8570001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line284" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.283" - y1="2.697" - x2="3.3440001" - y2="2.697" - stroke="#000000" - stroke-width="0.010" - id="line286" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.72" - y1="2.6359999" - x2="8.8620005" - y2="2.6229999" - stroke="#000000" - stroke-width="0.100" - id="line288" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.2069998" - y1="2.632" - x2="5.2090001" - y2="3.5910001" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="5.21" - y1="2.632" - x2="5.2080002" - y2="1.632" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.6500001" - y1="2.6289999" - x2="6.652" - y2="3.5339999" - stroke="#000000" - stroke-width="0.100" - id="line294" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.651" - y1="2.6289999" - x2="6.6479998" - y2="1.6289999" - stroke="#000000" - stroke-width="0.100" - id="line296" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.092" - y1="2.625" - x2="8.0950003" - y2="3.552" - stroke="#000000" - stroke-width="0.100" - id="line298" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.0909996" - y1="2.625" - x2="8.0889997" - y2="1.625" - stroke="#000000" - stroke-width="0.100" - id="line300" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect302" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.1989999" - y="3.559" - id="rect304" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.296" - y="3.6559999" - id="rect306" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon308" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.321,4.231 6.782,4.231 6.782,4.335 6.345,4.335 6.321,4.231 " - id="polygon310" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon312" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.782,4.231 6.974,4.231 6.949,4.335 6.782,4.335 6.782,4.231 " - id="polygon314" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect316" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8130002" - y="4.2620001" - id="rect318" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon320" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.558,4.335 6.737,4.335 6.737,4.388 6.826,4.388 6.826,4.44 6.468,4.44 6.468,4.388 6.558,4.388 6.558,4.335 " - id="polygon322" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect324" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6420002" - y="3.5480001" - id="rect326" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7389998" - y="3.645" - id="rect328" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon330" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.763,4.22 8.224,4.22 8.224,4.325 7.787,4.325 7.763,4.22 " - id="polygon332" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon334" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.224,4.22 8.416,4.22 8.392,4.325 8.224,4.325 8.224,4.22 " - id="polygon336" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect338" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2550001" - y="4.2509999" - id="rect340" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon342" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8,4.325 8.179,4.325 8.179,4.377 8.269,4.377 8.269,4.429 7.91,4.429 7.91,4.377 8,4.377 8,4.325 " - id="polygon344" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect346" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="4.7670002" - y="1.123" - id="rect348" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="4.8639998" - y="1.22" - id="rect350" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon352" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="4.888,1.795 5.349,1.795 5.349,1.9 4.912,1.9 4.888,1.795 " - id="polygon354" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon356" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.349,1.795 5.541,1.795 5.517,1.9 5.349,1.9 5.349,1.795 " - id="polygon358" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect360" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="5.3800001" - y="1.826" - id="rect362" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon364" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="5.125,1.9 5.304,1.9 5.304,1.952 5.394,1.952 5.394,2.004 5.035,2.004 5.035,1.952 5.125,1.952 5.125,1.9 " - id="polygon366" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect368" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.217" - y="1.148" - id="rect370" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.3140001" - y="1.245" - id="rect372" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon374" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.338,1.82 6.799,1.82 6.799,1.925 6.362,1.925 6.338,1.82 " - id="polygon376" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon378" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.799,1.82 6.991,1.82 6.967,1.925 6.799,1.925 6.799,1.82 " - id="polygon380" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect382" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.8299999" - y="1.851" - id="rect384" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon386" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.575,1.925 6.754,1.925 6.754,1.977 6.844,1.977 6.844,2.029 6.485,2.029 6.485,1.977 6.575,1.977 6.575,1.925 " - id="polygon388" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect390" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.6669998" - y="1.123" - id="rect392" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.7639999" - y="1.22" - id="rect394" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon396" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.788,1.795 8.249,1.795 8.249,1.9 7.812,1.9 7.788,1.795 " - id="polygon398" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon400" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.249,1.795 8.441,1.795 8.417,1.9 8.249,1.9 8.249,1.795 " - id="polygon402" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect404" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.2799997" - y="1.826" - id="rect406" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon408" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.025,1.9 8.204,1.9 8.204,1.952 8.294,1.952 8.294,2.004 7.935,2.004 7.935,1.952 8.025,1.952 8.025,1.9 " - id="polygon410" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon412" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="4.779,3.795 4.731,3.815 4.587,4.175 4.587,4.355 4.659,4.415 5.715,4.415 5.787,4.355 5.787,4.175 5.643,3.815 5.595,3.795 4.779,3.795 " - id="polygon414" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.611,4.115 L 4.659,4.135 L 5.715,4.135 L 5.763,4.115" - id="path416" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 5.715,4.135 L 5.787,4.175" - id="path418" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 4.587,4.175 L 4.659,4.135" - id="path420" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon422" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="4.923,3.415 4.899,3.895 5.475,3.895 5.451,3.415 4.923,3.415 " - id="polygon424" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon426" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="4.827,3.895 4.779,4.035 5.595,4.035 5.547,3.895 4.827,3.895 " - id="polygon428" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse430" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse432" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse434" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse436" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse438" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2049999" - rx="0.012" - ry="0.012" - id="ellipse440" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse442" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse444" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse446" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse448" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse450" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.2550001" - rx="0.012" - ry="0.012" - id="ellipse452" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse454" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse456" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse458" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse460" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse462" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.3049998" - rx="0.012" - ry="0.012" - id="ellipse464" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse466" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.8270001" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse468" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse470" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="4.947" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse472" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse474" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="5.0669999" - cy="4.355" - rx="0.012" - ry="0.012" - id="ellipse476" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse478" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.1869998" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse480" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse482" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="5.487" - cy="4.2150002" - rx="0.15000001" - ry="0.048" - id="ellipse484" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect486" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect488" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="8.9790001" - y="1.4859999" - id="rect490" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect492" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect494" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="9.0939999" - y="1.6" - id="rect496" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="1.829" - x2="9.0939999" - y2="1.829" - stroke="#000000" - stroke-width="0.010" - id="line498" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.0580001" - x2="10.009" - y2="2.0580001" - stroke="#000000" - stroke-width="0.010" - id="line500" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.009" - y1="2.2290001" - x2="9.0939999" - y2="2.2290001" - stroke="#000000" - stroke-width="0.010" - id="line502" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect504" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect506" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="9.0939999" - y="2.6289999" - id="rect508" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="8.9790001" - y1="3.03" - x2="10.123" - y2="3.03" - stroke="#000000" - stroke-width="0.010" - id="line510" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect512" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect514" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.4940004" - y="3.1440001" - id="rect516" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect518" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect520" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.7229996" - y="3.1440001" - id="rect522" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect524" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect526" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="9.9519997" - y="3.1440001" - id="rect528" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect530" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect532" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="9.8950005" - y="2.8010001" - id="rect534" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0939999" - y1="2.8010001" - x2="9.7229996" - y2="2.8010001" - stroke="#000000" - stroke-width="0.010" - id="line536" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect538" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect540" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="9.0939999" - y="3.0869999" - id="rect542" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect544" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect546" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="9.151" - y="2.286" - id="rect548" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.687" - x2="9.6660004" - y2="2.687" - stroke="#000000" - stroke-width="0.010" - id="line550" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.6660004" - y1="2.744" - x2="9.6090002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.744" - x2="9.2080002" - y2="2.744" - stroke="#000000" - stroke-width="0.010" - id="line554" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect556" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect558" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="9.2650003" - y="2.687" - id="rect560" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="9.151" - y1="2.401" - x2="9.2080002" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line562" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.2650003" - y1="2.401" - x2="9.323" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line564" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.8369999" - y1="2.401" - x2="9.9519997" - y2="2.401" - stroke="#000000" - stroke-width="0.010" - id="line566" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.7160001" - x2="9.0369997" - y2="3.7160001" - stroke="#000000" - stroke-width="0.010" - id="line568" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.6589999" - x2="10.066" - y2="3.6589999" - stroke="#000000" - stroke-width="0.010" - id="line570" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.602" - x2="9.0369997" - y2="3.602" - stroke="#000000" - stroke-width="0.010" - id="line572" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.5439999" - x2="10.066" - y2="3.5439999" - stroke="#000000" - stroke-width="0.010" - id="line574" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.487" - x2="9.0369997" - y2="3.487" - stroke="#000000" - stroke-width="0.010" - id="line576" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="9.0369997" - y1="3.4300001" - x2="10.066" - y2="3.4300001" - stroke="#000000" - stroke-width="0.010" - id="line578" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.066" - y1="3.3729999" - x2="9.0369997" - y2="3.3729999" - stroke="#000000" - stroke-width="0.010" - id="line580" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="5.9629998" - y="5.2589998" - id="text582" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="5.5580001" - y="5.8590002" - id="text584" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.12.0/22</text> - <text - x="1.234" - y="4.1529999" - id="text586" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="1.053" - y="4.6529999" - id="text588" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LON-BDC</text> - <text - x="9.3100004" - y="0.375" - id="text590" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="9.1300001" - y="0.875" - id="text592" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LON-PDC</text> - <rect - width="1.291" - height="1.1390001" - x="0.61699998" - y="2.0880001" - id="rect594" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="1.263" - cy="3.227" - rx="0.64499998" - ry="0.19" - id="ellipse596" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse598" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="1.263" - cy="2.0880001" - rx="0.64499998" - ry="0.19" - id="ellipse600" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 1.908,2.088 L 1.908,3.227 C 1.908,3.332 1.619,3.417 1.263,3.417 C 0.906,3.417 0.617,3.332 0.617,3.227 L 0.617,2.088" - id="path602" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="1.928" - y1="2.523" - x2="2.503" - y2="2.523" - stroke="#000000" - stroke-width="0.100" - id="line604" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="0.935" - y="2.7219999" - id="text606" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="0.94999999" - y="3.122" - id="text608" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect610" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect612" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.397" - y="1.885" - id="rect614" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect616" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect618" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.458" - y="1.946" - id="rect620" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="2.1900001" - x2="15.431" - y2="2.1900001" - stroke="#000000" - stroke-width="0.010" - id="line622" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="2.4330001" - x2="14.458" - y2="2.4330001" - stroke="#000000" - stroke-width="0.010" - id="line624" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect626" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect628" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.58" - y="2.737" - id="rect630" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="3.2850001" - x2="15.614" - y2="3.2850001" - stroke="#000000" - stroke-width="0.010" - id="line632" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect634" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect636" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="3.1630001" - id="rect638" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect640" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect642" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.371" - y="3.1630001" - id="rect644" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect646" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect648" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.492" - y="3.1630001" - id="rect650" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect652" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect654" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.431" - y="2.98" - id="rect656" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.58" - y1="2.9200001" - x2="15.249" - y2="2.9200001" - stroke="#000000" - stroke-width="0.010" - id="line658" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect660" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect662" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.183" - x="15.371" - y="2.737" - id="rect664" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect666" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect668" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.519" - y="2.494" - id="rect670" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.7980001" - x2="15.188" - y2="2.7980001" - stroke="#000000" - stroke-width="0.010" - id="line672" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect674" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect676" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.762" - y="2.7980001" - id="rect678" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.249" - y1="2.615" - x2="15.371" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.345" - x2="15.553" - y2="3.345" - stroke="#000000" - stroke-width="0.010" - id="line682" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.4059999" - x2="14.458" - y2="3.4059999" - stroke="#000000" - stroke-width="0.010" - id="line684" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.467" - x2="15.553" - y2="3.467" - stroke="#000000" - stroke-width="0.010" - id="line686" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.6500001" - x2="14.458" - y2="3.6500001" - stroke="#000000" - stroke-width="0.010" - id="line688" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="3.589" - x2="15.553" - y2="3.589" - stroke="#000000" - stroke-width="0.010" - id="line690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.553" - y1="3.5280001" - x2="14.458" - y2="3.5280001" - stroke="#000000" - stroke-width="0.010" - id="line692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="2.615" - x2="14.58" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.615" - x2="14.701" - y2="2.615" - stroke="#000000" - stroke-width="0.010" - id="line696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.641" - y1="2.859" - x2="14.701" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="2.859" - x2="15.188" - y2="2.859" - stroke="#000000" - stroke-width="0.010" - id="line700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.564" - y1="2.7980001" - x2="20.705" - y2="2.7850001" - stroke="#000000" - stroke-width="0.100" - id="line702" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.051001" - y1="2.7939999" - x2="17.052999" - y2="3.753" - stroke="#000000" - stroke-width="0.100" - id="line704" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="17.054001" - y1="2.7939999" - x2="17.052" - y2="1.794" - stroke="#000000" - stroke-width="0.100" - id="line706" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.493" - y1="2.7909999" - x2="18.496" - y2="3.6960001" - stroke="#000000" - stroke-width="0.100" - id="line708" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.495001" - y1="2.7909999" - x2="18.492001" - y2="1.791" - stroke="#000000" - stroke-width="0.100" - id="line710" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.936001" - y1="2.7869999" - x2="19.938999" - y2="3.714" - stroke="#000000" - stroke-width="0.100" - id="line712" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.934999" - y1="2.7869999" - x2="19.933001" - y2="1.7869999" - stroke="#000000" - stroke-width="0.100" - id="line714" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect716" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.042999" - y="3.721" - id="rect718" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.139999" - y="3.8180001" - id="rect720" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon722" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.165,4.393 18.625,4.393 18.625,4.498 18.189,4.498 18.165,4.393 " - id="polygon724" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon726" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.625,4.393 18.818,4.393 18.793,4.498 18.625,4.498 18.625,4.393 " - id="polygon728" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect730" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.657" - y="4.4239998" - id="rect732" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon734" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.402,4.498 18.581,4.498 18.581,4.55 18.67,4.55 18.67,4.602 18.312,4.602 18.312,4.55 18.402,4.55 18.402,4.498 " - id="polygon736" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect738" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.486" - y="3.71" - id="rect740" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.583" - y="3.8069999" - id="rect742" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon744" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.607,4.382 20.068,4.382 20.068,4.487 19.631,4.487 19.607,4.382 " - id="polygon746" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon748" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.068,4.382 20.26,4.382 20.236,4.487 20.068,4.487 20.068,4.382 " - id="polygon750" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect752" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.099001" - y="4.414" - id="rect754" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon756" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.844,4.487 20.023,4.487 20.023,4.539 20.113,4.539 20.113,4.591 19.754,4.591 19.754,4.539 19.844,4.539 19.844,4.487 " - id="polygon758" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect760" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.611" - y="1.285" - id="rect762" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.708" - y="1.382" - id="rect764" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon766" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.732,1.957 17.193,1.957 17.193,2.062 16.756,2.062 16.732,1.957 " - id="polygon768" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon770" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.193,1.957 17.385,1.957 17.361,2.062 17.193,2.062 17.193,1.957 " - id="polygon772" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect774" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.224001" - y="1.989" - id="rect776" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon778" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.969,2.062 17.148,2.062 17.148,2.114 17.238,2.114 17.238,2.166 16.879,2.166 16.879,2.114 16.969,2.114 16.969,2.062 " - id="polygon780" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect782" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="18.061001" - y="1.3099999" - id="rect784" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.158001" - y="1.4069999" - id="rect786" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon788" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.182,1.982 18.643,1.982 18.643,2.087 18.206,2.087 18.182,1.982 " - id="polygon790" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon792" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.643,1.982 18.835,1.982 18.811,2.087 18.643,2.087 18.643,1.982 " - id="polygon794" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect796" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.674" - y="2.0139999" - id="rect798" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon800" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.419,2.087 18.598,2.087 18.598,2.139 18.688,2.139 18.688,2.191 18.329,2.191 18.329,2.139 18.419,2.139 18.419,2.087 " - id="polygon802" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect804" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.511" - y="1.285" - id="rect806" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.608" - y="1.382" - id="rect808" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon810" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.632,1.957 20.093,1.957 20.093,2.062 19.656,2.062 19.632,1.957 " - id="polygon812" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon814" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="20.093,1.957 20.285,1.957 20.261,2.062 20.093,2.062 20.093,1.957 " - id="polygon816" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect818" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.124001" - y="1.989" - id="rect820" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon822" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.869,2.062 20.048,2.062 20.048,2.114 20.138,2.114 20.138,2.166 19.779,2.166 19.779,2.114 19.869,2.114 19.869,2.062 " - id="polygon824" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon826" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.622,3.957 16.574,3.977 16.43,4.337 16.43,4.517 16.502,4.577 17.558,4.577 17.63,4.517 17.63,4.337 17.486,3.977 17.438,3.957 16.622,3.957 " - id="polygon828" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.454,4.277 L 16.502,4.297 L 17.558,4.297 L 17.606,4.277" - id="path830" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.558,4.297 L 17.63,4.337" - id="path832" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.43,4.337 L 16.502,4.297" - id="path834" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon836" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.766,3.577 16.742,4.057 17.318,4.057 17.294,3.577 16.766,3.577 " - id="polygon838" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon840" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.67,4.057 16.622,4.197 17.438,4.197 17.39,4.057 16.67,4.057 " - id="polygon842" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse844" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse846" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse848" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse850" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse852" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.3670001" - rx="0.012" - ry="0.012" - id="ellipse854" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse856" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse858" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse860" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse862" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse864" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.4169998" - rx="0.012" - ry="0.012" - id="ellipse866" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse868" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse870" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse872" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse874" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse876" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.467" - rx="0.012" - ry="0.012" - id="ellipse878" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse880" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.67" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse882" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse884" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.790001" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse886" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse888" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.91" - cy="4.5170002" - rx="0.012" - ry="0.012" - id="ellipse890" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse892" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.030001" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse894" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse896" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.33" - cy="4.3769999" - rx="0.15000001" - ry="0.048" - id="ellipse898" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect900" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect902" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="20.823" - y="1.648" - id="rect904" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect906" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect908" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.938" - y="1.762" - id="rect910" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="1.9910001" - x2="20.938" - y2="1.9910001" - stroke="#000000" - stroke-width="0.010" - id="line912" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.22" - x2="21.853001" - y2="2.22" - stroke="#000000" - stroke-width="0.010" - id="line914" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.853001" - y1="2.391" - x2="20.938" - y2="2.391" - stroke="#000000" - stroke-width="0.010" - id="line916" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect918" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect920" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.938" - y="2.7920001" - id="rect922" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.823" - y1="3.1919999" - x2="21.966999" - y2="3.1919999" - stroke="#000000" - stroke-width="0.010" - id="line924" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect926" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect928" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.337999" - y="3.306" - id="rect930" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect932" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect934" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.566999" - y="3.306" - id="rect936" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect938" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect940" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.796" - y="3.306" - id="rect942" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect944" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect946" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.738001" - y="2.9630001" - id="rect948" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.938" - y1="2.9630001" - x2="21.566999" - y2="2.9630001" - stroke="#000000" - stroke-width="0.010" - id="line950" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect952" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect954" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.938" - y="3.2490001" - id="rect956" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect958" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect960" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.995001" - y="2.448" - id="rect962" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.849" - x2="21.51" - y2="2.849" - stroke="#000000" - stroke-width="0.010" - id="line964" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.51" - y1="2.9059999" - x2="21.452" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line966" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.9059999" - x2="21.052" - y2="2.9059999" - stroke="#000000" - stroke-width="0.010" - id="line968" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect970" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect972" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="21.108999" - y="2.849" - id="rect974" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.995001" - y1="2.563" - x2="21.052" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line976" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.108999" - y1="2.563" - x2="21.167" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line978" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.681" - y1="2.563" - x2="21.796" - y2="2.563" - stroke="#000000" - stroke-width="0.010" - id="line980" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.878" - x2="20.881001" - y2="3.878" - stroke="#000000" - stroke-width="0.010" - id="line982" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.8210001" - x2="21.91" - y2="3.8210001" - stroke="#000000" - stroke-width="0.010" - id="line984" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.7639999" - x2="20.881001" - y2="3.7639999" - stroke="#000000" - stroke-width="0.010" - id="line986" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.707" - x2="21.91" - y2="3.707" - stroke="#000000" - stroke-width="0.010" - id="line988" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.6489999" - x2="20.881001" - y2="3.6489999" - stroke="#000000" - stroke-width="0.010" - id="line990" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.881001" - y1="3.592" - x2="21.91" - y2="3.592" - stroke="#000000" - stroke-width="0.010" - id="line992" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.91" - y1="3.5350001" - x2="20.881001" - y2="3.5350001" - stroke="#000000" - stroke-width="0.010" - id="line994" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="18.056999" - y="5.3460002" - id="text996" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="17.650999" - y="5.9460001" - id="text998" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.16.0/22</text> - <text - x="14.353" - y="4.415" - id="text1000" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="14.288" - y="4.915" - id="text1002" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LA-BDC</text> - <text - x="21.162001" - y="0.80599999" - id="text1004" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="21.098" - y="1.306" - id="text1006" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LA-PDC</text> - <rect - width="1.326" - height="1.17" - x="12.426" - y="2.155" - id="rect1008" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="13.089" - cy="3.326" - rx="0.66299999" - ry="0.19499999" - id="ellipse1010" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.089" - cy="2.155" - rx="0.66299999" - ry="0.19499999" - id="ellipse1012" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="13.089" - cy="2.155" - rx="0.66299999" - ry="0.19499999" - id="ellipse1014" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.752,2.155 L 13.752,3.326 C 13.752,3.434 13.455,3.521 13.089,3.521 C 12.723,3.521 12.426,3.434 12.426,3.326 L 12.426,2.155" - id="path1016" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="13.775" - y1="2.6440001" - x2="14.372" - y2="2.648" - stroke="#000000" - stroke-width="0.100" - id="line1018" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.734" - y="2.8369999" - id="text1020" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.748" - y="3.237" - id="text1022" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1024" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1026" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="14.275" - y="10.44" - id="rect1028" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1030" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1032" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="14.336" - y="10.501" - id="rect1034" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="10.744" - x2="15.309" - y2="10.744" - stroke="#000000" - stroke-width="0.010" - id="line1036" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.309" - y1="10.988" - x2="14.336" - y2="10.988" - stroke="#000000" - stroke-width="0.010" - id="line1038" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1040" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1042" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="14.458" - y="11.292" - id="rect1044" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.275" - y1="11.839" - x2="15.492" - y2="11.839" - stroke="#000000" - stroke-width="0.010" - id="line1046" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1048" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1050" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.127" - y="11.718" - id="rect1052" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1054" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1056" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.249" - y="11.718" - id="rect1058" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1060" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1062" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="15.37" - y="11.718" - id="rect1064" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1066" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1068" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="15.309" - y="11.535" - id="rect1070" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.458" - y1="11.474" - x2="15.127" - y2="11.474" - stroke="#000000" - stroke-width="0.010" - id="line1072" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1074" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1076" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.183" - height="0.182" - x="15.249" - y="11.292" - id="rect1078" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1080" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1082" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="14.397" - y="11.048" - id="rect1084" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.353" - x2="15.066" - y2="11.353" - stroke="#000000" - stroke-width="0.010" - id="line1086" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1088" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1090" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="14.64" - y="11.353" - id="rect1092" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="15.127" - y1="11.17" - x2="15.249" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1094" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="11.9" - x2="15.431" - y2="11.9" - stroke="#000000" - stroke-width="0.010" - id="line1096" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="11.961" - x2="14.336" - y2="11.961" - stroke="#000000" - stroke-width="0.010" - id="line1098" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.022" - x2="15.431" - y2="12.022" - stroke="#000000" - stroke-width="0.010" - id="line1100" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.204" - x2="14.336" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1102" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.336" - y1="12.143" - x2="15.431" - y2="12.143" - stroke="#000000" - stroke-width="0.010" - id="line1104" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.431" - y1="12.083" - x2="14.336" - y2="12.083" - stroke="#000000" - stroke-width="0.010" - id="line1106" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.397" - y1="11.17" - x2="14.458" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1108" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.17" - x2="14.579" - y2="11.17" - stroke="#000000" - stroke-width="0.010" - id="line1110" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.519" - y1="11.413" - x2="14.579" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1112" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.005" - y1="11.413" - x2="15.066" - y2="11.413" - stroke="#000000" - stroke-width="0.010" - id="line1114" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="15.442" - y1="11.353" - x2="20.584" - y2="11.34" - stroke="#000000" - stroke-width="0.100" - id="line1116" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.929001" - y1="11.349" - x2="16.931" - y2="12.308" - stroke="#000000" - stroke-width="0.100" - id="line1118" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="16.931999" - y1="11.349" - x2="16.93" - y2="10.349" - stroke="#000000" - stroke-width="0.100" - id="line1120" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372" - y1="11.345" - x2="18.374001" - y2="12.251" - stroke="#000000" - stroke-width="0.100" - id="line1122" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="18.372999" - y1="11.345" - x2="18.370001" - y2="10.345" - stroke="#000000" - stroke-width="0.100" - id="line1124" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.815001" - y1="11.342" - x2="19.816999" - y2="12.269" - stroke="#000000" - stroke-width="0.100" - id="line1126" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="19.813" - y1="11.342" - x2="19.811001" - y2="10.342" - stroke="#000000" - stroke-width="0.100" - id="line1128" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1130" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.921" - y="12.276" - id="rect1132" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.018" - y="12.373" - id="rect1134" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1136" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.043,12.948 18.504,12.948 18.504,13.052 18.067,13.052 18.043,12.948 " - id="polygon1138" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1140" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.504,12.948 18.696,12.948 18.672,13.052 18.504,13.052 18.504,12.948 " - id="polygon1142" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1144" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.535" - y="12.979" - id="rect1146" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1148" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.28,13.052 18.459,13.052 18.459,13.104 18.548,13.104 18.548,13.157 18.19,13.157 18.19,13.104 18.28,13.104 18.28,13.052 " - id="polygon1150" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1152" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.364" - y="12.265" - id="rect1154" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.461" - y="12.362" - id="rect1156" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1158" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.485,12.937 19.946,12.937 19.946,13.041 19.509,13.041 19.485,12.937 " - id="polygon1160" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1162" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.946,12.937 20.138,12.937 20.114,13.041 19.946,13.041 19.946,12.937 " - id="polygon1164" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1166" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="19.976999" - y="12.968" - id="rect1168" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1170" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.722,13.041 19.901,13.041 19.901,13.094 19.991,13.094 19.991,13.146 19.632,13.146 19.632,13.094 19.722,13.094 19.722,13.041 " - id="polygon1172" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1174" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="16.489" - y="9.8400002" - id="rect1176" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="16.586" - y="9.9370003" - id="rect1178" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1180" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.61,10.512 17.071,10.512 17.071,10.616 16.634,10.616 16.61,10.512 " - id="polygon1182" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1184" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="17.071,10.512 17.263,10.512 17.239,10.616 17.071,10.616 17.071,10.512 " - id="polygon1186" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1188" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="17.101999" - y="10.543" - id="rect1190" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1192" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="16.847,10.616 17.026,10.616 17.026,10.669 17.116,10.669 17.116,10.721 16.757,10.721 16.757,10.669 16.847,10.669 16.847,10.616 " - id="polygon1194" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1196" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="17.938999" - y="9.8649998" - id="rect1198" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="18.035999" - y="9.9619999" - id="rect1200" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1202" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.06,10.537 18.521,10.537 18.521,10.641 18.084,10.641 18.06,10.537 " - id="polygon1204" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1206" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.521,10.537 18.713,10.537 18.689,10.641 18.521,10.641 18.521,10.537 " - id="polygon1208" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1210" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="18.552" - y="10.568" - id="rect1212" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1214" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="18.297,10.641 18.476,10.641 18.476,10.694 18.566,10.694 18.566,10.746 18.207,10.746 18.207,10.694 18.297,10.694 18.297,10.641 " - id="polygon1216" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1218" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="19.389" - y="9.8400002" - id="rect1220" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="19.486" - y="9.9370003" - id="rect1222" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1224" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.51,10.512 19.971,10.512 19.971,10.616 19.534,10.616 19.51,10.512 " - id="polygon1226" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1228" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.971,10.512 20.163,10.512 20.139,10.616 19.971,10.616 19.971,10.512 " - id="polygon1230" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1232" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="20.002001" - y="10.543" - id="rect1234" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1236" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="19.747,10.616 19.926,10.616 19.926,10.669 20.016,10.669 20.016,10.721 19.657,10.721 19.657,10.669 19.747,10.669 19.747,10.616 " - id="polygon1238" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1240" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="16.501,12.512 16.453,12.532 16.309,12.892 16.309,13.072 16.381,13.132 17.437,13.132 17.509,13.072 17.509,12.892 17.365,12.532 17.317,12.512 16.501,12.512 " - id="polygon1242" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.333,12.832 L 16.381,12.852 L 17.437,12.852 L 17.485,12.832" - id="path1244" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 17.437,12.852 L 17.509,12.892" - id="path1246" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 16.309,12.892 L 16.381,12.852" - id="path1248" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1250" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="16.645,12.132 16.621,12.612 17.197,12.612 17.173,12.132 16.645,12.132 " - id="polygon1252" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1254" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="16.549,12.612 16.501,12.752 17.317,12.752 17.269,12.612 16.549,12.612 " - id="polygon1256" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1258" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1260" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1262" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1264" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1266" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.922" - rx="0.012" - ry="0.012" - id="ellipse1268" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1270" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1272" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1274" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1276" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1278" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="12.972" - rx="0.012" - ry="0.012" - id="ellipse1280" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1282" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1284" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1286" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1288" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1290" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.022" - rx="0.012" - ry="0.012" - id="ellipse1292" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1294" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.549" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1296" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1298" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.669001" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1300" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1302" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="16.789" - cy="13.072" - rx="0.012" - ry="0.012" - id="ellipse1304" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1306" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="16.909" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1308" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1310" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="17.209" - cy="12.932" - rx="0.15000001" - ry="0.048" - id="ellipse1312" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1314" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1316" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2869999" - x="20.701" - y="10.203" - id="rect1318" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1320" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1322" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="20.816" - y="10.317" - id="rect1324" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.546" - x2="20.816" - y2="10.546" - stroke="#000000" - stroke-width="0.010" - id="line1326" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="10.774" - x2="21.731001" - y2="10.774" - stroke="#000000" - stroke-width="0.010" - id="line1328" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.731001" - y1="10.946" - x2="20.816" - y2="10.946" - stroke="#000000" - stroke-width="0.010" - id="line1330" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1332" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1334" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="20.816" - y="11.346" - id="rect1336" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.701" - y1="11.747" - x2="21.844999" - y2="11.747" - stroke="#000000" - stroke-width="0.010" - id="line1338" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1340" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1342" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.216" - y="11.861" - id="rect1344" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1346" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1348" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.445" - y="11.861" - id="rect1350" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1352" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1354" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="21.674" - y="11.861" - id="rect1356" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1358" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1360" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="21.615999" - y="11.518" - id="rect1362" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.816" - y1="11.518" - x2="21.445" - y2="11.518" - stroke="#000000" - stroke-width="0.010" - id="line1364" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1366" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1368" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="20.816" - y="11.804" - id="rect1370" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1372" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1374" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="20.872999" - y="11.003" - id="rect1376" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.404" - x2="21.388" - y2="11.404" - stroke="#000000" - stroke-width="0.010" - id="line1378" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.388" - y1="11.461" - x2="21.330999" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1380" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.461" - x2="20.93" - y2="11.461" - stroke="#000000" - stroke-width="0.010" - id="line1382" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1384" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1386" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="20.987" - y="11.404" - id="rect1388" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="20.872999" - y1="11.118" - x2="20.93" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1390" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.987" - y1="11.118" - x2="21.045" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1392" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.559" - y1="11.118" - x2="21.674" - y2="11.118" - stroke="#000000" - stroke-width="0.010" - id="line1394" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.433" - x2="20.759001" - y2="12.433" - stroke="#000000" - stroke-width="0.010" - id="line1396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.376" - x2="21.788" - y2="12.376" - stroke="#000000" - stroke-width="0.010" - id="line1398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.319" - x2="20.759001" - y2="12.319" - stroke="#000000" - stroke-width="0.010" - id="line1400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.261" - x2="21.788" - y2="12.261" - stroke="#000000" - stroke-width="0.010" - id="line1402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.204" - x2="20.759001" - y2="12.204" - stroke="#000000" - stroke-width="0.010" - id="line1404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.759001" - y1="12.147" - x2="21.788" - y2="12.147" - stroke="#000000" - stroke-width="0.010" - id="line1406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="21.788" - y1="12.09" - x2="20.759001" - y2="12.09" - stroke="#000000" - stroke-width="0.010" - id="line1408" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="17.735001" - y="9.026" - id="text1410" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="17.301001" - y="9.6260004" - id="text1412" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.20.0/22</text> - <text - x="14.206" - y="12.995" - id="text1414" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="13.885" - y="13.495" - id="text1416" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">WASH-BDC</text> - <text - x="20.912001" - y="13.518" - id="text1418" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="20.51" - y="14.018" - id="text1420" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">WASH-APPS</text> - <rect - width="1.3150001" - height="1.161" - x="12" - y="10.659" - id="rect1422" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="12.658" - cy="11.819" - rx="0.65799999" - ry="0.193" - id="ellipse1424" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.658" - cy="10.659" - rx="0.65799999" - ry="0.193" - id="ellipse1426" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="12.658" - cy="10.659" - rx="0.65799999" - ry="0.193" - id="ellipse1428" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 13.316,10.659 L 13.316,11.819 C 13.316,11.926 13.021,12.013 12.658,12.013 C 12.295,12.013 12,11.926 12,11.819 L 12,10.659" - id="path1430" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="14.275" - y1="11.353" - x2="13.275" - y2="11.344" - stroke="#000000" - stroke-width="0.100" - id="line1432" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="12.337" - y="11.292" - id="text1434" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="12.352" - y="11.692" - id="text1436" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1438" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <path - d="M 9.35,11.667 C 9.83,11.677 10.761,11.461 10.63,10.999 C 10.499,10.536 9.874,10.433 9.612,10.567 C 9.35,10.7 10.019,9.919 8.74,9.714 C 7.46,9.508 6.805,9.837 6.994,10.073 C 7.183,10.31 5.875,9.518 5.264,9.971 C 4.653,10.423 5.889,10.855 5.627,10.793 C 5.366,10.731 4.566,10.814 4.828,11.585 C 5.089,12.356 7.445,11.759 7.183,11.872 C 6.922,11.986 7.576,12.551 8.39,12.438 C 9.205,12.325 9.263,12.12 9.35,11.667 L 9.35,11.667" - id="path1440" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="6.7909999" - y="11.036" - id="text1442" - style="font-size:0.69999999px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Internet</text> - <path - d="M 4.7,11.1 C 5.035363,11.196174 5.3953356,11.076093 5.6057965,10.797841 C 5.8162574,10.51959 5.8338243,10.140524 5.65,9.844" - id="path1444" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 8.675,9.794 C 7.4940305,10.104758 6.3530779,10.551408 5.275,11.125" - id="path1446" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <path - d="M 4.7,11.15 C 6.6098972,11.931939 8.7554368,11.904871 10.645,11.075" - id="path1448" - style="fill:none;stroke:#000000;stroke-width:0.1;stroke-dasharray:0.1, 0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1450" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1452" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.397" - height="4.1900001" - x="0.61400002" - y="8.7200003" - id="rect1454" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1456" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1458" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.117" - height="1.676" - x="0.75400001" - y="8.8590002" - id="rect1460" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.1389999" - x2="1.8710001" - y2="9.1389999" - stroke="#000000" - stroke-width="0.010" - id="line1462" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="9.4180002" - x2="0.75400001" - y2="9.4180002" - stroke="#000000" - stroke-width="0.010" - id="line1464" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.698" - x2="1.8710001" - y2="9.698" - stroke="#000000" - stroke-width="0.010" - id="line1466" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="9.9770002" - x2="1.8710001" - y2="9.9770002" - stroke="#000000" - stroke-width="0.010" - id="line1468" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.8710001" - y1="10.256" - x2="0.75400001" - y2="10.256" - stroke="#000000" - stroke-width="0.010" - id="line1470" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1472" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1474" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.76800001" - height="0.419" - x="0.75400001" - y="10.675" - id="rect1476" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.61400002" - y1="11.374" - x2="2.0109999" - y2="11.374" - stroke="#000000" - stroke-width="0.010" - id="line1478" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1480" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1482" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.243" - y="11.513" - id="rect1484" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1486" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1488" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.522" - y="11.513" - id="rect1490" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1492" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1494" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.07" - height="0.07" - x="1.801" - y="11.513" - id="rect1496" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1498" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1500" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.14" - height="0.14" - x="1.7309999" - y="11.094" - id="rect1502" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.75400001" - y1="10.885" - x2="1.522" - y2="10.885" - stroke="#000000" - stroke-width="0.010" - id="line1504" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1506" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1508" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.20999999" - height="0.20999999" - x="0.75400001" - y="11.444" - id="rect1510" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1512" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1514" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97799999" - height="0.07" - x="0.82300001" - y="10.326" - id="rect1516" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.745" - x2="1.452" - y2="10.745" - stroke="#000000" - stroke-width="0.010" - id="line1518" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.452" - y1="10.815" - x2="1.382" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1520" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.815" - x2="0.89300001" - y2="10.815" - stroke="#000000" - stroke-width="0.010" - id="line1522" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1524" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1526" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.34900001" - height="0.07" - x="0.963" - y="10.745" - id="rect1528" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="0.82300001" - y1="10.466" - x2="0.89300001" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1530" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.963" - y1="10.466" - x2="1.033" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1532" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.6619999" - y1="10.466" - x2="1.801" - y2="10.466" - stroke="#000000" - stroke-width="0.010" - id="line1534" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.84" - x2="1.941" - y2="12.84" - stroke="#000000" - stroke-width="0.010" - id="line1536" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.77" - x2="0.68400002" - y2="12.77" - stroke="#000000" - stroke-width="0.010" - id="line1538" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.701" - x2="1.941" - y2="12.701" - stroke="#000000" - stroke-width="0.010" - id="line1540" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.631" - x2="0.68400002" - y2="12.631" - stroke="#000000" - stroke-width="0.010" - id="line1542" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.561" - x2="1.941" - y2="12.561" - stroke="#000000" - stroke-width="0.010" - id="line1544" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.491" - x2="0.68400002" - y2="12.491" - stroke="#000000" - stroke-width="0.010" - id="line1546" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.421" - x2="1.941" - y2="12.421" - stroke="#000000" - stroke-width="0.010" - id="line1548" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.351" - x2="0.68400002" - y2="12.351" - stroke="#000000" - stroke-width="0.010" - id="line1550" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.282" - x2="1.941" - y2="12.282" - stroke="#000000" - stroke-width="0.010" - id="line1552" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.212" - x2="0.68400002" - y2="12.212" - stroke="#000000" - stroke-width="0.010" - id="line1554" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.142" - x2="1.941" - y2="12.142" - stroke="#000000" - stroke-width="0.010" - id="line1556" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="12.072" - x2="0.68400002" - y2="12.072" - stroke="#000000" - stroke-width="0.010" - id="line1558" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="0.68400002" - y1="12.002" - x2="1.941" - y2="12.002" - stroke="#000000" - stroke-width="0.010" - id="line1560" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="1.941" - y1="11.932" - x2="0.68400002" - y2="11.932" - stroke="#000000" - stroke-width="0.010" - id="line1562" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.559" - y="12.296" - id="rect1564" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.559" - y="12.296" - id="rect1566" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.454" - y="12.401" - id="rect1568" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.427,13.024 -5.928,13.024 -5.928,13.137 -6.401,13.137 -6.427,13.024 " - id="polygon1570" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.427,13.024 -5.928,13.024 -5.928,13.137 -6.401,13.137 -6.427,13.024 " - id="polygon1572" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.928,13.024 -5.719,13.024 -5.746,13.137 -5.928,13.137 -5.928,13.024 " - id="polygon1574" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.928,13.024 -5.719,13.024 -5.746,13.137 -5.928,13.137 -5.928,13.024 " - id="polygon1576" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.8940001" - y="13.058" - id="rect1578" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.8940001" - y="13.058" - id="rect1580" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.17,13.137 -5.976,13.137 -5.976,13.194 -5.879,13.194 -5.879,13.25 -6.267,13.25 -6.267,13.194 -6.17,13.194 -6.17,13.137 " - id="polygon1582" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.17,13.137 -5.976,13.137 -5.976,13.194 -5.879,13.194 -5.879,13.25 -6.267,13.25 -6.267,13.194 -6.17,13.194 -6.17,13.137 " - id="polygon1584" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="0.653" - y1="11.13" - x2="-9.6660004" - y2="11.13" - stroke="#000000" - stroke-width="0.100" - id="line1586" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-1.289" - y1="11.13" - x2="-1.289" - y2="10.145" - stroke="#000000" - stroke-width="0.100" - id="line1588" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.766" - y1="11.13" - x2="-3.766" - y2="12.295" - stroke="#000000" - stroke-width="0.100" - id="line1590" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-3.7739999" - y1="11.13" - x2="-3.7739999" - y2="10.099" - stroke="#000000" - stroke-width="0.100" - id="line1592" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-6.0799999" - y1="11.13" - x2="-6.0799999" - y2="12.367" - stroke="#000000" - stroke-width="0.100" - id="line1594" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-6.0939999" - y1="11.13" - x2="-6.0939999" - y2="10.063" - stroke="#000000" - stroke-width="0.100" - id="line1596" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-8.4139996" - y1="11.13" - x2="-8.4139996" - y2="9.5740004" - stroke="#000000" - stroke-width="0.100" - id="line1598" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.069" - height="0.80199999" - x="-4.289" - y="12.216" - id="rect1600" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.069" - height="0.80199999" - x="-4.289" - y="12.216" - id="rect1602" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.83700001" - height="0.55199999" - x="-4.1729999" - y="12.332" - id="rect1604" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.144,13.018 -3.594,13.018 -3.594,13.143 -4.115,13.143 -4.144,13.018 " - id="polygon1606" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.144,13.018 -3.594,13.018 -3.594,13.143 -4.115,13.143 -4.144,13.018 " - id="polygon1608" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.594,13.018 -3.365,13.018 -3.394,13.143 -3.594,13.143 -3.594,13.018 " - id="polygon1610" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.594,13.018 -3.365,13.018 -3.394,13.143 -3.594,13.143 -3.594,13.018 " - id="polygon1612" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.5569999" - y="13.055" - id="rect1614" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.050000001" - height="0.050000001" - x="-3.5569999" - y="13.055" - id="rect1616" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.861,13.143 -3.648,13.143 -3.648,13.205 -3.541,13.205 -3.541,13.267 -3.968,13.267 -3.968,13.205 -3.861,13.205 -3.861,13.143 " - id="polygon1618" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.861,13.143 -3.648,13.143 -3.648,13.205 -3.541,13.205 -3.541,13.267 -3.968,13.267 -3.968,13.205 -3.861,13.205 -3.861,13.143 " - id="polygon1620" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.579" - y="9.1079998" - id="rect1622" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-6.579" - y="9.1079998" - id="rect1624" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-6.474" - y="9.2139997" - id="rect1626" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.448,9.837 -5.948,9.837 -5.948,9.95 -6.421,9.95 -6.448,9.837 " - id="polygon1628" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.448,9.837 -5.948,9.837 -5.948,9.95 -6.421,9.95 -6.448,9.837 " - id="polygon1630" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.948,9.837 -5.74,9.837 -5.766,9.95 -5.948,9.95 -5.948,9.837 " - id="polygon1632" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.948,9.837 -5.74,9.837 -5.766,9.95 -5.948,9.95 -5.948,9.837 " - id="polygon1634" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.914" - y="9.8710003" - id="rect1636" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-5.914" - y="9.8710003" - id="rect1638" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.191,9.95 -5.996,9.95 -5.996,10.007 -5.899,10.007 -5.899,10.063 -6.288,10.063 -6.288,10.007 -6.191,10.007 -6.191,9.95 " - id="polygon1640" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.191,9.95 -5.996,9.95 -5.996,10.007 -5.899,10.007 -5.899,10.063 -6.288,10.063 -6.288,10.007 -6.191,10.007 -6.191,9.95 " - id="polygon1642" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.2600002" - y="9.1450005" - id="rect1644" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-4.2600002" - y="9.1450005" - id="rect1646" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-4.1550002" - y="9.25" - id="rect1648" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.128,9.873 -3.629,9.873 -3.629,9.986 -4.102,9.986 -4.128,9.873 " - id="polygon1650" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.128,9.873 -3.629,9.873 -3.629,9.986 -4.102,9.986 -4.128,9.873 " - id="polygon1652" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-3.629,9.873 -3.42,9.873 -3.447,9.986 -3.629,9.986 -3.629,9.873 " - id="polygon1654" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.629,9.873 -3.42,9.873 -3.447,9.986 -3.629,9.986 -3.629,9.873 " - id="polygon1656" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.595" - y="9.9069996" - id="rect1658" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-3.595" - y="9.9069996" - id="rect1660" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.871,9.986 -3.677,9.986 -3.677,10.043 -3.58,10.043 -3.58,10.099 -3.969,10.099 -3.969,10.043 -3.871,10.043 -3.871,9.986 " - id="polygon1662" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.871,9.986 -3.677,9.986 -3.677,10.043 -3.58,10.043 -3.58,10.099 -3.969,10.099 -3.969,10.043 -3.871,10.043 -3.871,9.986 " - id="polygon1664" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.97100002" - height="0.72799999" - x="-8.9029999" - y="9.0410004" - id="rect1666" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.97100002" - height="0.72799999" - x="-8.9029999" - y="9.0410004" - id="rect1668" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.76099998" - height="0.50199997" - x="-8.7980003" - y="9.1470003" - id="rect1670" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-8.771,9.77 -8.272,9.77 -8.272,9.883 -8.745,9.883 -8.771,9.77 " - id="polygon1672" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.771,9.77 -8.272,9.77 -8.272,9.883 -8.745,9.883 -8.771,9.77 " - id="polygon1674" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-8.272,9.77 -8.063,9.77 -8.09,9.883 -8.272,9.883 -8.272,9.77 " - id="polygon1676" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.272,9.77 -8.063,9.77 -8.09,9.883 -8.272,9.883 -8.272,9.77 " - id="polygon1678" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.045000002" - height="0.045000002" - x="-8.2379999" - y="9.8039999" - id="rect1680" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.045000002" - height="0.045000002" - x="-8.2379999" - y="9.8039999" - id="rect1682" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-8.515,9.883 -8.32,9.883 -8.32,9.94 -8.223,9.94 -8.223,9.996 -8.612,9.996 -8.612,9.94 -8.515,9.94 -8.515,9.883 " - id="polygon1684" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-8.515,9.883 -8.32,9.883 -8.32,9.94 -8.223,9.94 -8.223,9.996 -8.612,9.996 -8.612,9.94 -8.515,9.94 -8.515,9.883 " - id="polygon1686" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-1.701,9.517 -1.75,9.538 -1.895,9.902 -1.895,10.084 -1.823,10.145 -0.754,10.145 -0.682,10.084 -0.682,9.902 -0.827,9.538 -0.876,9.517 -1.701,9.517 " - id="polygon1688" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.701,9.517 -1.75,9.538 -1.895,9.902 -1.895,10.084 -1.823,10.145 -0.754,10.145 -0.682,10.084 -0.682,9.902 -0.827,9.538 -0.876,9.517 -1.701,9.517 " - id="polygon1690" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.871,9.841 L -1.823,9.861 L -0.754,9.861 L -0.706,9.841" - id="path1692" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -0.754,9.861 L -0.682,9.902" - id="path1694" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -1.895,9.902 L -1.823,9.861" - id="path1696" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.556,9.133 -1.58,9.618 -0.997,9.618 -1.021,9.133 -1.556,9.133 " - id="polygon1698" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.556,9.133 -1.58,9.618 -0.997,9.618 -1.021,9.133 -1.556,9.133 " - id="polygon1700" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.653,9.618 -1.701,9.76 -0.876,9.76 -0.924,9.618 -1.653,9.618 " - id="polygon1702" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-1.653,9.618 -1.701,9.76 -0.876,9.76 -0.924,9.618 -1.653,9.618 " - id="polygon1704" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-1.653" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1706" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1708" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1710" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1712" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1714" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="9.9320002" - rx="0.012" - ry="0.012" - id="ellipse1716" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1718" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1720" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1722" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1724" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1726" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="9.9829998" - rx="0.012" - ry="0.012" - id="ellipse1728" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1730" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1732" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1734" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1736" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1738" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="10.033" - rx="0.012" - ry="0.012" - id="ellipse1740" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.653" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1742" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.653" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1744" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.531" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1746" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.531" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1748" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.41" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1750" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-1.41" - cy="10.084" - rx="0.012" - ry="0.012" - id="ellipse1752" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-1.289" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1754" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-1.289" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1756" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-0.98500001" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1758" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-0.98500001" - cy="9.9420004" - rx="0.152" - ry="0.048999999" - id="ellipse1760" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1762" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1764" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.312" - height="2.625" - x="-11.059" - y="9.7469997" - id="rect1766" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1768" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1770" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.05" - height="1.05" - x="-10.928" - y="9.8780003" - id="rect1772" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8780003" - y1="10.141" - x2="-10.928" - y2="10.141" - stroke="#000000" - stroke-width="0.010" - id="line1774" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.928" - y1="10.403" - x2="-9.8780003" - y2="10.403" - stroke="#000000" - stroke-width="0.010" - id="line1776" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8780003" - y1="10.6" - x2="-10.928" - y2="10.6" - stroke="#000000" - stroke-width="0.010" - id="line1778" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1780" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1782" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.722" - height="0.39399999" - x="-10.928" - y="11.06" - id="rect1784" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-11.059" - y1="11.519" - x2="-9.7460003" - y2="11.519" - stroke="#000000" - stroke-width="0.010" - id="line1786" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1788" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1790" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-10.468" - y="11.65" - id="rect1792" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1794" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1796" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-10.206" - y="11.65" - id="rect1798" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1800" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1802" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.066" - height="0.066" - x="-9.9429998" - y="11.65" - id="rect1804" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1806" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1808" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.131" - height="0.066" - x="-10.009" - y="11.256" - id="rect1810" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.928" - y1="11.256" - x2="-10.206" - y2="11.256" - stroke="#000000" - stroke-width="0.010" - id="line1812" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1814" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1816" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.197" - height="0.197" - x="-10.928" - y="11.585" - id="rect1818" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1820" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1822" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91900003" - height="0.066" - x="-10.862" - y="10.666" - id="rect1824" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="11.125" - x2="-10.271" - y2="11.125" - stroke="#000000" - stroke-width="0.010" - id="line1826" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.271" - y1="11.191" - x2="-10.337" - y2="11.191" - stroke="#000000" - stroke-width="0.010" - id="line1828" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="11.191" - x2="-10.796" - y2="11.191" - stroke="#000000" - stroke-width="0.010" - id="line1830" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1832" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1834" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.32800001" - height="0.066" - x="-10.731" - y="11.125" - id="rect1836" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.862" - y1="10.797" - x2="-10.796" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1838" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.731" - y1="10.797" - x2="-10.665" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1840" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.074" - y1="10.797" - x2="-9.9429998" - y2="10.797" - stroke="#000000" - stroke-width="0.010" - id="line1842" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.306" - x2="-10.993" - y2="12.306" - stroke="#000000" - stroke-width="0.010" - id="line1844" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="12.241" - x2="-9.8120003" - y2="12.241" - stroke="#000000" - stroke-width="0.010" - id="line1846" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.175" - x2="-10.993" - y2="12.175" - stroke="#000000" - stroke-width="0.010" - id="line1848" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="12.11" - x2="-9.8120003" - y2="12.11" - stroke="#000000" - stroke-width="0.010" - id="line1850" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="12.044" - x2="-10.993" - y2="12.044" - stroke="#000000" - stroke-width="0.010" - id="line1852" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-10.993" - y1="11.978" - x2="-9.8120003" - y2="11.978" - stroke="#000000" - stroke-width="0.010" - id="line1854" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-9.8120003" - y1="11.913" - x2="-10.993" - y2="11.913" - stroke="#000000" - stroke-width="0.010" - id="line1856" - style="stroke:#000000;stroke-width:0.01" /> - <text - x="-4.2459998" - y="8.2609997" - id="text1858" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-4.5809999" - y="8.8610001" - id="text1860" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.0.0/22</text> - <text - x="-10.628" - y="13.181" - id="text1862" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="-10.454" - y="13.681" - id="text1864" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">GWYN-APPS</text> - <rect - width="1.4450001" - height="1.275" - x="2.5510001" - y="8.6120005" - id="rect1866" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="3.273" - cy="9.8870001" - rx="0.72299999" - ry="0.213" - id="ellipse1868" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1870" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.273" - cy="8.6120005" - rx="0.72299999" - ry="0.213" - id="ellipse1872" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.996,8.612 L 3.996,9.887 C 3.996,10.005 3.672,10.1 3.273,10.1 C 2.874,10.1 2.551,10.005 2.551,9.887 L 2.551,8.612" - id="path1874" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="2.0109999" - y1="9.2469997" - x2="2.586" - y2="9.2469997" - stroke="#000000" - stroke-width="0.100" - id="line1876" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="2.983" - y="9.3260002" - id="text1878" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.928" - y="9.7259998" - id="text1880" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Master</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="5.725,19.819 5.725,18.237 5.732,18.237 5.732,17.325 " - id="polyline1882" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="1.317" - y="15.131" - id="text1884" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">1100 Users</text> - <text - x="1.136" - y="6.0770001" - id="text1886" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">320 Users</text> - <text - x="12.943" - y="6.0310001" - id="text1888" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">180 Users</text> - <text - x="12.383" - y="15.277" - id="text1890" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">100 Users</text> - <text - x="-9.9619999" - y="15.156" - id="text1892" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York - Bldg1</text> - <text - x="13.214" - y="0.46399999" - id="text1894" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Los Angeles</text> - <text - x="1.1109999" - y="0.46399999" - id="text1896" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">London</text> - <text - x="12.979" - y="8.0889997" - id="text1898" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Washington, DC</text> - <rect - width="11.132" - height="6.5630002" - x="-11.146" - y="16.205999" - id="rect1900" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1902" - style="fill:#ebebeb;stroke:none" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1904" - style="fill:#ebebeb;stroke:none" /> - <rect - width="11.732" - height="5.9629998" - x="-11.446" - y="16.506001" - id="rect1906" - style="fill:#ebebeb;stroke:none;stroke-width:0" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1908" - style="fill:#ebebeb;stroke:none" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1910" - style="fill:#ebebeb;stroke:none" /> - <line - x1="-11.146" - y1="16.205999" - x2="-0.014" - y2="16.205999" - stroke="#000000" - stroke-width="0.050" - id="line1912" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.146" - y1="22.768999" - x2="-0.014" - y2="22.768999" - stroke="#000000" - stroke-width="0.050" - id="line1914" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.146,16.206 C -11.311685,16.206 -11.446,16.340315 -11.446,16.506" - id="path1916" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M 0.286,16.506 C 0.286,16.340315 0.15168542,16.206 -0.014,16.206" - id="path1918" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <line - x1="-11.446" - y1="16.506001" - x2="-11.446" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1920" - style="stroke:#000000;stroke-width:0.05" /> - <line - x1="0.28600001" - y1="16.506001" - x2="0.28600001" - y2="22.469" - stroke="#000000" - stroke-width="0.050" - id="line1922" - style="stroke:#000000;stroke-width:0.05" /> - <path - d="M -11.446,22.469 C -11.446,22.634685 -11.311685,22.769 -11.146,22.769" - id="path1924" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <path - d="M -0.014,22.769 C 0.15168542,22.769 0.286,22.634685 0.286,22.469" - id="path1926" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1928" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1930" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.78799999" - height="0.78799999" - x="-2.214" - y="19.285" - id="rect1932" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1934" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.772,19.413 C -1.772,19.806 -1.693,19.728 -2.087,19.728" - id="path1936" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1938" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.734,19.474 -1.773,19.395 -1.813,19.474 -1.734,19.474 " - id="polygon1940" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1942" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-2.025,19.687 -2.104,19.726 -2.025,19.765 -2.025,19.687 " - id="polygon1944" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1946" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M -1.538,19.634 C -1.932,19.634 -1.853,19.555 -1.853,19.949" - id="path1948" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1950" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.608,19.671 -1.529,19.632 -1.608,19.592 -1.608,19.671 " - id="polygon1952" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1954" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="-1.899,19.884 -1.86,19.962 -1.821,19.884 -1.899,19.884 " - id="polygon1956" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="-5.2220001" - y="17.145" - id="text1958" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="-5.5609999" - y="17.745001" - id="text1960" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.4.0/22</text> - <text - x="-10.001" - y="21.07" - id="text1962" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="-10.37" - y="21.57" - id="text1964" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-BDC</text> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1966" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1968" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="-8.665" - y="18.782" - id="rect1970" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1972" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1974" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="-8.6040001" - y="18.843" - id="rect1976" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="19.087" - x2="-7.6300001" - y2="19.087" - stroke="#000000" - stroke-width="0.010" - id="line1978" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.6300001" - y1="19.33" - x2="-8.6040001" - y2="19.33" - stroke="#000000" - stroke-width="0.010" - id="line1980" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1982" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1984" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="-8.4820004" - y="19.634001" - id="rect1986" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.665" - y1="20.181999" - x2="-7.448" - y2="20.181999" - stroke="#000000" - stroke-width="0.010" - id="line1988" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1990" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1992" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.8130002" - y="20.059999" - id="rect1994" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect1996" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect1998" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.691" - y="20.059999" - id="rect2000" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2002" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2004" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="-7.5700002" - y="20.059999" - id="rect2006" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2008" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2010" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="-7.6300001" - y="19.877001" - id="rect2012" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4820004" - y1="19.816999" - x2="-7.8130002" - y2="19.816999" - stroke="#000000" - stroke-width="0.010" - id="line2014" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2016" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2018" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="-7.691" - y="19.634001" - id="rect2020" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2022" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2024" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="-8.5430002" - y="19.391001" - id="rect2026" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.695" - x2="-7.8740001" - y2="19.695" - stroke="#000000" - stroke-width="0.010" - id="line2028" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2030" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2032" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="-8.3000002" - y="19.695" - id="rect2034" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.8130002" - y1="19.511999" - x2="-7.691" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2036" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.242001" - x2="-7.5089998" - y2="20.242001" - stroke="#000000" - stroke-width="0.010" - id="line2038" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.302999" - x2="-8.6040001" - y2="20.302999" - stroke="#000000" - stroke-width="0.010" - id="line2040" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.364" - x2="-7.5089998" - y2="20.364" - stroke="#000000" - stroke-width="0.010" - id="line2042" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.547001" - x2="-8.6040001" - y2="20.547001" - stroke="#000000" - stroke-width="0.010" - id="line2044" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.6040001" - y1="20.486" - x2="-7.5089998" - y2="20.486" - stroke="#000000" - stroke-width="0.010" - id="line2046" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.5089998" - y1="20.424999" - x2="-8.6040001" - y2="20.424999" - stroke="#000000" - stroke-width="0.010" - id="line2048" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.5430002" - y1="19.511999" - x2="-8.4820004" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2050" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.511999" - x2="-8.3599997" - y2="19.511999" - stroke="#000000" - stroke-width="0.010" - id="line2052" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-8.4209995" - y1="19.756001" - x2="-8.3599997" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2054" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.9349999" - y1="19.756001" - x2="-7.8740001" - y2="19.756001" - stroke="#000000" - stroke-width="0.010" - id="line2056" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="-7.4980001" - y1="19.695" - x2="-2.164" - y2="19.679001" - stroke="#000000" - stroke-width="0.100" - id="line2058" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9559999" - y1="19.690001" - x2="-5.9530001" - y2="20.649" - stroke="#000000" - stroke-width="0.100" - id="line2060" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-5.9530001" - y1="19.690001" - x2="-5.9559999" - y2="18.690001" - stroke="#000000" - stroke-width="0.100" - id="line2062" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4590001" - y1="19.686001" - x2="-4.4559999" - y2="20.591" - stroke="#000000" - stroke-width="0.100" - id="line2064" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-4.4569998" - y1="19.686001" - x2="-4.46" - y2="18.686001" - stroke="#000000" - stroke-width="0.100" - id="line2066" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.961" - y1="19.681" - x2="-2.9579999" - y2="20.608" - stroke="#000000" - stroke-width="0.100" - id="line2068" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="-2.9619999" - y1="19.681" - x2="-2.9649999" - y2="18.681" - stroke="#000000" - stroke-width="0.100" - id="line2070" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2072" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.9439998" - y="20.618" - id="rect2074" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8470001" - y="20.715" - id="rect2076" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2078" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.822,21.29 -4.361,21.29 -4.361,21.395 -4.798,21.395 -4.822,21.29 " - id="polygon2080" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2082" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.361,21.29 -4.169,21.29 -4.193,21.395 -4.361,21.395 -4.361,21.29 " - id="polygon2084" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2086" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.3299999" - y="21.320999" - id="rect2088" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2090" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.585,21.395 -4.406,21.395 -4.406,21.447 -4.317,21.447 -4.317,21.499 -4.675,21.499 -4.675,21.447 -4.585,21.447 -4.585,21.395 " - id="polygon2092" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2094" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.4260001" - y="20.607" - id="rect2096" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.329" - y="20.704" - id="rect2098" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2100" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.305,21.279 -2.844,21.279 -2.844,21.384 -3.281,21.384 -3.305,21.279 " - id="polygon2102" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2104" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.844,21.279 -2.652,21.279 -2.676,21.384 -2.844,21.384 -2.844,21.279 " - id="polygon2106" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2108" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.813" - y="21.311001" - id="rect2110" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2112" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.068,21.384 -2.889,21.384 -2.889,21.436 -2.799,21.436 -2.799,21.488 -3.158,21.488 -3.158,21.436 -3.068,21.436 -3.068,21.384 " - id="polygon2114" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2116" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-6.3759999" - y="18.181999" - id="rect2118" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-6.2789998" - y="18.278999" - id="rect2120" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2122" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.255,18.854 -5.794,18.854 -5.794,18.959 -6.231,18.959 -6.255,18.854 " - id="polygon2124" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2126" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-5.794,18.854 -5.602,18.854 -5.626,18.959 -5.794,18.959 -5.794,18.854 " - id="polygon2128" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2130" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-5.763" - y="18.886" - id="rect2132" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2134" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-6.018,18.959 -5.839,18.959 -5.839,19.011 -5.749,19.011 -5.749,19.063 -6.108,19.063 -6.108,19.011 -6.018,19.011 -6.018,18.959 " - id="polygon2136" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2138" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-4.901" - y="18.181999" - id="rect2140" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-4.8039999" - y="18.278999" - id="rect2142" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2144" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.78,18.854 -4.319,18.854 -4.319,18.959 -4.756,18.959 -4.78,18.854 " - id="polygon2146" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2148" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.319,18.854 -4.127,18.854 -4.151,18.959 -4.319,18.959 -4.319,18.854 " - id="polygon2150" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2152" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-4.2880001" - y="18.886" - id="rect2154" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2156" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-4.543,18.959 -4.364,18.959 -4.364,19.011 -4.274,19.011 -4.274,19.063 -4.633,19.063 -4.633,19.011 -4.543,19.011 -4.543,18.959 " - id="polygon2158" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2160" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="-3.401" - y="18.207001" - id="rect2162" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="-3.3039999" - y="18.304001" - id="rect2164" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2166" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.28,18.879 -2.819,18.879 -2.819,18.984 -3.256,18.984 -3.28,18.879 " - id="polygon2168" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2170" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-2.819,18.879 -2.627,18.879 -2.651,18.984 -2.819,18.984 -2.819,18.879 " - id="polygon2172" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2174" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="-2.7880001" - y="18.910999" - id="rect2176" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2178" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="-3.043,18.984 -2.864,18.984 -2.864,19.036 -2.774,19.036 -2.774,19.088 -3.133,19.088 -3.133,19.036 -3.043,19.036 -3.043,18.984 " - id="polygon2180" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2182" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.439,20.854 -6.487,20.874 -6.631,21.234 -6.631,21.414 -6.559,21.474 -5.503,21.474 -5.431,21.414 -5.431,21.234 -5.575,20.874 -5.623,20.854 -6.439,20.854 " - id="polygon2184" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.607,21.174 L -6.559,21.194 L -5.503,21.194 L -5.455,21.174" - id="path2186" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -5.503,21.194 L -5.431,21.234" - id="path2188" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M -6.631,21.234 L -6.559,21.194" - id="path2190" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2192" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.295,20.474 -6.319,20.954 -5.743,20.954 -5.767,20.474 -6.295,20.474 " - id="polygon2194" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2196" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="-6.391,20.954 -6.439,21.094 -5.623,21.094 -5.671,20.954 -6.391,20.954 " - id="polygon2198" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2200" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2202" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2204" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2206" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2208" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.264" - rx="0.012" - ry="0.012" - id="ellipse2210" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2212" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2214" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2216" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2218" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2220" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.313999" - rx="0.012" - ry="0.012" - id="ellipse2222" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2224" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2226" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2228" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2230" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2232" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.364" - rx="0.012" - ry="0.012" - id="ellipse2234" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2236" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.3909998" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2238" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2240" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.2709999" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2242" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2244" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="-6.151" - cy="21.414" - rx="0.012" - ry="0.012" - id="ellipse2246" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2248" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-6.0310001" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2250" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2252" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="-5.7309999" - cy="21.274" - rx="0.15000001" - ry="0.048" - id="ellipse2254" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.17" - height="1.033" - x="-10.59" - y="19.132" - id="rect2256" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="-10.004" - cy="20.165001" - rx="0.58499998" - ry="0.17200001" - id="ellipse2258" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.004" - cy="19.132" - rx="0.58499998" - ry="0.17200001" - id="ellipse2260" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="-10.004" - cy="19.132" - rx="0.58499998" - ry="0.17200001" - id="ellipse2262" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M -9.419,19.132 L -9.419,20.165 C -9.419,20.26 -9.681,20.337 -10.004,20.337 C -10.328,20.337 -10.59,20.26 -10.59,20.165 L -10.59,19.132" - id="path2264" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="-9.3959999" - y1="19.684" - x2="-8.665" - y2="19.695" - stroke="#000000" - stroke-width="0.100" - id="line2266" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="-10.303" - y="19.759001" - id="text2268" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="-10.288" - y="20.159" - id="text2270" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="-0.91500002" - y="19.843" - id="text2272" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Router</text> - <text - x="-1.867" - y="22.455999" - id="text2274" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">50 Users</text> - <text - x="-10.478" - y="17.114" - id="text2276" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="-10.147" - y="17.914" - id="text2278" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg 2</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.554,15.161 -1.554,15.906 -1.821,15.906 -1.821,19.285 " - id="polyline2280" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2282" - style="fill:#9f9f9f;stroke:none;stroke-width:0" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2284" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.787" - height="0.78799999" - x="5.3379998" - y="16.538" - id="rect2286" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2288" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 5.781,16.665 C 5.781,17.059 5.859,16.98 5.466,16.98" - id="path2290" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2292" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.818,16.727 5.779,16.648 5.74,16.727 5.818,16.727 " - id="polygon2294" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2296" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.527,16.939 5.448,16.979 5.527,17.018 5.527,16.939 " - id="polygon2298" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2300" - style="fill:none;stroke:#ffffff;stroke-width:0.13" /> - <path - d="M 6.014,16.887 C 5.62,16.887 5.699,16.808 5.699,17.202" - id="path2302" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2304" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.944,16.924 6.023,16.884 5.944,16.845 5.944,16.924 " - id="polygon2306" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2308" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.653,17.136 5.692,17.215 5.732,17.136 5.653,17.136 " - id="polygon2310" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="7.8559999" - y="17.167" - id="text2312" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network:</text> - <text - x="7.5180001" - y="17.767" - id="text2314" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">172.16.8.0/22</text> - <text - x="3.204" - y="18.118" - id="text2316" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Server:</text> - <text - x="2.835" - y="18.618" - id="text2318" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG3-BDC</text> - <text - x="12.542" - y="19.694" - id="text2320" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server:</text> - <text - x="12.687" - y="20.194" - id="text2322" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BLDG2-APPS</text> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2324" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2326" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.217" - height="1.825" - x="4.0770001" - y="18.941999" - id="rect2328" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2330" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2332" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.97299999" - height="0.73000002" - x="4.138" - y="19.003" - id="rect2334" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="19.246" - x2="5.112" - y2="19.246" - stroke="#000000" - stroke-width="0.010" - id="line2336" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.112" - y1="19.49" - x2="4.138" - y2="19.49" - stroke="#000000" - stroke-width="0.010" - id="line2338" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2340" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2342" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.66900003" - height="0.36500001" - x="4.2600002" - y="19.794001" - id="rect2344" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.0770001" - y1="20.341" - x2="5.2940001" - y2="20.341" - stroke="#000000" - stroke-width="0.010" - id="line2346" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2348" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2350" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="4.9289999" - y="20.219999" - id="rect2352" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2354" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2356" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.0510001" - y="20.219999" - id="rect2358" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2360" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2362" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.061000001" - height="0.061000001" - x="5.1719999" - y="20.219999" - id="rect2364" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2366" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2368" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.122" - height="0.122" - x="5.112" - y="20.037001" - id="rect2370" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.2600002" - y1="19.976" - x2="4.9289999" - y2="19.976" - stroke="#000000" - stroke-width="0.010" - id="line2372" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2374" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2376" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.182" - height="0.183" - x="5.0510001" - y="19.794001" - id="rect2378" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2380" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2382" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.852" - height="0.061000001" - x="4.1989999" - y="19.549999" - id="rect2384" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.855" - x2="4.868" - y2="19.855" - stroke="#000000" - stroke-width="0.010" - id="line2386" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2388" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2390" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.30399999" - height="0.061000001" - x="4.4419999" - y="19.855" - id="rect2392" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="4.9289999" - y1="19.672001" - x2="5.0510001" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2394" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.402" - x2="5.2329998" - y2="20.402" - stroke="#000000" - stroke-width="0.010" - id="line2396" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.462999" - x2="4.138" - y2="20.462999" - stroke="#000000" - stroke-width="0.010" - id="line2398" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.524" - x2="5.2329998" - y2="20.524" - stroke="#000000" - stroke-width="0.010" - id="line2400" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.705999" - x2="4.138" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2402" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.138" - y1="20.645" - x2="5.2329998" - y2="20.645" - stroke="#000000" - stroke-width="0.010" - id="line2404" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.2329998" - y1="20.584999" - x2="4.138" - y2="20.584999" - stroke="#000000" - stroke-width="0.010" - id="line2406" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.1989999" - y1="19.672001" - x2="4.2600002" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2408" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.672001" - x2="4.382" - y2="19.672001" - stroke="#000000" - stroke-width="0.010" - id="line2410" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.3210001" - y1="19.915001" - x2="4.382" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2412" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="4.8070002" - y1="19.915001" - x2="4.868" - y2="19.915001" - stroke="#000000" - stroke-width="0.010" - id="line2414" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="5.244" - y1="19.855" - x2="10.386" - y2="19.841999" - stroke="#000000" - stroke-width="0.100" - id="line2416" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7309999" - y1="19.851" - x2="6.7329998" - y2="20.809999" - stroke="#000000" - stroke-width="0.100" - id="line2418" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.7350001" - y1="19.851" - x2="6.7319999" - y2="18.851" - stroke="#000000" - stroke-width="0.100" - id="line2420" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1739998" - y1="19.847" - x2="8.1759996" - y2="20.753" - stroke="#000000" - stroke-width="0.100" - id="line2422" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="8.1750002" - y1="19.847" - x2="8.1730003" - y2="18.848" - stroke="#000000" - stroke-width="0.100" - id="line2424" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6169996" - y1="19.844" - x2="9.6190004" - y2="20.771" - stroke="#000000" - stroke-width="0.100" - id="line2426" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.6160002" - y1="19.844" - x2="9.6129999" - y2="18.844" - stroke="#000000" - stroke-width="0.100" - id="line2428" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2430" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.723" - y="20.778" - id="rect2432" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8210001" - y="20.875" - id="rect2434" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2436" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.845,21.45 8.306,21.45 8.306,21.554 7.869,21.554 7.845,21.45 " - id="polygon2438" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2440" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.306,21.45 8.498,21.45 8.474,21.554 8.306,21.554 8.306,21.45 " - id="polygon2442" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2444" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3369999" - y="21.481001" - id="rect2446" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2448" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.082,21.554 8.261,21.554 8.261,21.606 8.351,21.606 8.351,21.659 7.992,21.659 7.992,21.606 8.082,21.606 8.082,21.554 " - id="polygon2450" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2452" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.1660004" - y="20.767" - id="rect2454" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2629995" - y="20.864" - id="rect2456" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2458" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.287,21.439 9.748,21.439 9.748,21.543 9.311,21.543 9.287,21.439 " - id="polygon2460" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2462" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.748,21.439 9.94,21.439 9.916,21.543 9.748,21.543 9.748,21.439 " - id="polygon2464" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2466" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.7790003" - y="21.469999" - id="rect2468" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2470" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.524,21.543 9.703,21.543 9.703,21.596 9.793,21.596 9.793,21.648 9.435,21.648 9.435,21.596 9.524,21.596 9.524,21.543 " - id="polygon2472" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2474" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="6.2909999" - y="18.341999" - id="rect2476" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="6.388" - y="18.438999" - id="rect2478" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2480" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.412,19.014 6.873,19.014 6.873,19.118 6.436,19.118 6.412,19.014 " - id="polygon2482" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2484" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.873,19.014 7.065,19.014 7.041,19.118 6.873,19.118 6.873,19.014 " - id="polygon2486" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2488" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="6.9039998" - y="19.045" - id="rect2490" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2492" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="6.649,19.118 6.828,19.118 6.828,19.171 6.918,19.171 6.918,19.223 6.56,19.223 6.56,19.171 6.649,19.171 6.649,19.118 " - id="polygon2494" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2496" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="7.7410002" - y="18.367001" - id="rect2498" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="7.8379998" - y="18.464001" - id="rect2500" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2502" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="7.862,19.039 8.323,19.039 8.323,19.143 7.886,19.143 7.862,19.039 " - id="polygon2504" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2506" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.323,19.039 8.515,19.039 8.491,19.143 8.323,19.143 8.323,19.039 " - id="polygon2508" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2510" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="8.3540001" - y="19.07" - id="rect2512" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2514" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="8.099,19.143 8.278,19.143 8.278,19.196 8.368,19.196 8.368,19.248 8.01,19.248 8.01,19.196 8.099,19.196 8.099,19.143 " - id="polygon2516" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2518" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="0.89600003" - height="0.67199999" - x="9.191" - y="18.341999" - id="rect2520" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.70200002" - height="0.463" - x="9.2880001" - y="18.438999" - id="rect2522" - style="fill:#000000;stroke:none;stroke-width:0" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2524" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.312,19.014 9.773,19.014 9.773,19.118 9.336,19.118 9.312,19.014 " - id="polygon2526" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2528" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.773,19.014 9.965,19.014 9.941,19.118 9.773,19.118 9.773,19.014 " - id="polygon2530" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2532" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.041999999" - height="0.041999999" - x="9.8039999" - y="19.045" - id="rect2534" - style="fill:none;stroke:#000000;stroke-width:0.025" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2536" - style="fill:#b3b3b3;stroke:none;stroke-width:0.05" /> - <polygon - points="9.549,19.118 9.728,19.118 9.728,19.171 9.818,19.171 9.818,19.223 9.46,19.223 9.46,19.171 9.549,19.171 9.549,19.118 " - id="polygon2538" - style="fill:none;stroke:#000000;stroke-width:0.05" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2540" - style="fill:#b3b3b3;stroke:none;stroke-width:0.08" /> - <polygon - points="6.303,21.014 6.255,21.034 6.111,21.394 6.111,21.574 6.183,21.634 7.239,21.634 7.311,21.574 7.311,21.394 7.167,21.034 7.119,21.014 6.303,21.014 " - id="polygon2542" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.135,21.334 L 6.183,21.354 L 7.239,21.354 L 7.287,21.334" - id="path2544" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 7.239,21.354 L 7.311,21.394" - id="path2546" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <path - d="M 6.111,21.394 L 6.183,21.354" - id="path2548" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2550" - style="fill:#ffffff;stroke:none;stroke-width:0.08" /> - <polygon - points="6.447,20.634 6.423,21.114 6.999,21.114 6.975,20.634 6.447,20.634 " - id="polygon2552" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2554" - style="fill:#000000;stroke:none;stroke-width:0.08" /> - <polygon - points="6.351,21.114 6.303,21.254 7.119,21.254 7.071,21.114 6.351,21.114 " - id="polygon2556" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2558" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2560" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2562" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2564" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2566" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.424" - rx="0.012" - ry="0.012" - id="ellipse2568" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2570" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2572" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2574" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2576" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2578" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.474001" - rx="0.012" - ry="0.012" - id="ellipse2580" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2582" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2584" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2586" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2588" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2590" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.524" - rx="0.012" - ry="0.012" - id="ellipse2592" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2594" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.3509998" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2596" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2598" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.4710002" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2600" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2602" - style="fill:#0000ff;stroke:none" /> - <ellipse - cx="6.5910001" - cy="21.573999" - rx="0.012" - ry="0.012" - id="ellipse2604" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2606" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="6.711" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2608" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2610" - style="fill:#8f8f8f;stroke:none" /> - <ellipse - cx="7.0110002" - cy="21.434" - rx="0.15000001" - ry="0.048" - id="ellipse2612" - style="fill:none;stroke:#000000;stroke-width:0.02" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2614" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2616" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.1440001" - height="2.2880001" - x="10.504" - y="18.705" - id="rect2618" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2620" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2622" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91500002" - height="0.91500002" - x="10.618" - y="18.819" - id="rect2624" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.048" - x2="10.618" - y2="19.048" - stroke="#000000" - stroke-width="0.010" - id="line2626" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="19.275999" - x2="11.533" - y2="19.275999" - stroke="#000000" - stroke-width="0.010" - id="line2628" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.533" - y1="19.448" - x2="10.618" - y2="19.448" - stroke="#000000" - stroke-width="0.010" - id="line2630" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2632" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2634" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.62900001" - height="0.34299999" - x="10.618" - y="19.848" - id="rect2636" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.504" - y1="20.249001" - x2="11.647" - y2="20.249001" - stroke="#000000" - stroke-width="0.010" - id="line2638" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2640" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2642" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.018" - y="20.363001" - id="rect2644" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2646" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2648" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.247" - y="20.363001" - id="rect2650" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2652" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2654" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.057" - height="0.057" - x="11.476" - y="20.363001" - id="rect2656" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2658" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2660" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.114" - height="0.057" - x="11.419" - y="20.02" - id="rect2662" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.618" - y1="20.02" - x2="11.247" - y2="20.02" - stroke="#000000" - stroke-width="0.010" - id="line2664" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2666" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2668" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.17200001" - height="0.17200001" - x="10.618" - y="20.306" - id="rect2670" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2672" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2674" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.801" - height="0.057" - x="10.675" - y="19.504999" - id="rect2676" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.906" - x2="11.19" - y2="19.906" - stroke="#000000" - stroke-width="0.010" - id="line2678" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.19" - y1="19.962999" - x2="11.133" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2680" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.962999" - x2="10.732" - y2="19.962999" - stroke="#000000" - stroke-width="0.010" - id="line2682" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2684" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2686" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.28600001" - height="0.057" - x="10.79" - y="19.906" - id="rect2688" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.675" - y1="19.620001" - x2="10.732" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2690" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.79" - y1="19.620001" - x2="10.847" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2692" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.362" - y1="19.620001" - x2="11.476" - y2="19.620001" - stroke="#000000" - stroke-width="0.010" - id="line2694" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.934999" - x2="10.561" - y2="20.934999" - stroke="#000000" - stroke-width="0.010" - id="line2696" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.878" - x2="11.59" - y2="20.878" - stroke="#000000" - stroke-width="0.010" - id="line2698" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.820999" - x2="10.561" - y2="20.820999" - stroke="#000000" - stroke-width="0.010" - id="line2700" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.763" - x2="11.59" - y2="20.763" - stroke="#000000" - stroke-width="0.010" - id="line2702" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.705999" - x2="10.561" - y2="20.705999" - stroke="#000000" - stroke-width="0.010" - id="line2704" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.561" - y1="20.649" - x2="11.59" - y2="20.649" - stroke="#000000" - stroke-width="0.010" - id="line2706" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="11.59" - y1="20.591999" - x2="10.561" - y2="20.591999" - stroke="#000000" - stroke-width="0.010" - id="line2708" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="3.4960001" - y1="19.819" - x2="4.0770001" - y2="19.855" - stroke="#000000" - stroke-width="0.100" - id="line2710" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.183" - height="1.044" - x="2.302" - y="19.268999" - id="rect2712" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="2.8940001" - cy="20.312" - rx="0.59100002" - ry="0.17399999" - id="ellipse2714" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2716" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="2.8940001" - cy="19.268999" - rx="0.59100002" - ry="0.17399999" - id="ellipse2718" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 3.485,19.269 L 3.485,20.312 C 3.485,20.409 3.221,20.486 2.894,20.486 C 2.567,20.486 2.302,20.409 2.302,20.312 L 2.302,19.269" - id="path2720" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="2.589" - y="19.868999" - id="text2722" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="2.6040001" - y="20.268999" - id="text2724" - style="font-size:0.40000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <text - x="12.722" - y="22.476999" - id="text2726" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">250 Users</text> - <text - x="12.072" - y="17.239" - id="text2728" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">New York</text> - <text - x="12.402" - y="18.039" - id="text2730" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Bldg 3</text> - <polyline - fill="none" - stroke="#000000" - stroke-width="0.100" - points="-1.129,15.125 -1.129,15.903 5.732,15.903 5.732,16.538 " - id="polyline2732" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="16.1" - y1="22.393" - x2="15.55" - y2="23.143" - stroke="#F7F7F7" - stroke-width="0.100" - id="line2734" - style="stroke:#f7f7f7;stroke-width:0.1" /> - <text - x="-10.033" - y="7.7020001" - id="text2736" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="-10.108" - y="22.502001" - id="text2738" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="2.5420001" - y="22.502001" - id="text2740" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="1.905" - y="1.027" - id="text2742" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: UKNET</text> - <text - x="13.814" - y="1.102" - id="text2744" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: WESTNET</text> - <text - x="18.017" - y="15.202" - id="text2746" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain: GLOBALNET</text> - <text - x="-10.507" - y="1.794" - id="text2748" - style="font-size:1px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Notes:</text> - <text - x="-11.075" - y="2.5439999" - id="text2750" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">The decision was made to implement separate</text> - <text - x="-11.075" - y="3.0439999" - id="text2752" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">domains for the West Coast and for UK</text> - <text - x="-11.075" - y="3.5439999" - id="text2754" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">operations. Wide-area traffic will be reduced.</text> - <text - x="-11.075" - y="4.0440001" - id="text2756" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">This design introduces the concept of deploying</text> - <text - x="-11.075" - y="4.5440001" - id="text2758" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">interdomain trusts, thus permitting much needed</text> - <text - x="-11.075" - y="5.0440001" - id="text2760" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">network integration and interoperabilty.</text> - <text - x="-11.075" - y="5.5440001" - id="text2762" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial" /> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-net2r.png b/docs/htmldocs/Samba3-ByExample/images/chap7-net2r.png Binary files differdeleted file mode 100644 index 194fd3c350..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-net2r.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap7-netr.png b/docs/htmldocs/Samba3-ByExample/images/chap7-netr.png Binary files differdeleted file mode 100644 index bbbbbf1cc7..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap7-netr.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap9-ADSDC.png b/docs/htmldocs/Samba3-ByExample/images/chap9-ADSDC.png Binary files differdeleted file mode 100644 index b015aa57be..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap9-ADSDC.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap9-ADSDC.svg b/docs/htmldocs/Samba3-ByExample/images/chap9-ADSDC.svg deleted file mode 100644 index a0610367c3..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap9-ADSDC.svg +++ /dev/null @@ -1,1321 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="19.075001cm" - height="15.897cm" - viewBox="1.95 0.208 21.025 16.105" - id="svg2"> - <defs - id="defs413" /> - <rect - width="10.1" - height="13.95" - x="2.7750001" - y="2.125" - id="rect4" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 2.775,2.125 C 2.3884007,2.125 2.075,2.4384007 2.075,2.825" - id="path6" - style="fill:#ededed;stroke:none" /> - <path - d="M 13.575,2.825 C 13.575,2.4384007 13.261599,2.125 12.875,2.125" - id="path8" - style="fill:#ededed;stroke:none" /> - <rect - width="11.5" - height="12.55" - x="2.075" - y="2.825" - id="rect10" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 2.075,15.375 C 2.075,15.761599 2.3884007,16.075 2.775,16.075" - id="path12" - style="fill:#ededed;stroke:none" /> - <path - d="M 12.875,16.075 C 13.261599,16.075 13.575,15.761599 13.575,15.375" - id="path14" - style="fill:#ededed;stroke:none" /> - <line - x1="2.7750001" - y1="2.125" - x2="12.875" - y2="2.125" - stroke="#000000" - stroke-width="0.010" - id="line16" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7750001" - y1="16.075001" - x2="12.875" - y2="16.075001" - stroke="#000000" - stroke-width="0.010" - id="line18" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 2.775,2.125 C 2.3884007,2.125 2.075,2.4384007 2.075,2.825" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 13.575,2.825 C 13.575,2.4384007 13.261599,2.125 12.875,2.125" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.075" - y1="2.825" - x2="2.075" - y2="15.375" - stroke="#000000" - stroke-width="0.010" - id="line24" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="13.575" - y1="2.825" - x2="13.575" - y2="15.375" - stroke="#000000" - stroke-width="0.010" - id="line26" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 2.075,15.375 C 2.075,15.761599 2.3884007,16.075 2.775,16.075" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 12.875,16.075 C 13.261599,16.075 13.575,15.761599 13.575,15.375" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="5.533" - height="13.95" - x="14.717" - y="2.1500001" - id="rect32" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 14.717,2.15 C 14.330791,2.1505517 14.018,2.4637909 14.018,2.85" - id="path34" - style="fill:#ededed;stroke:none" /> - <path - d="M 20.95,2.85 C 20.95,2.4634007 20.636599,2.15 20.25,2.15" - id="path36" - style="fill:#ededed;stroke:none" /> - <rect - width="6.9320002" - height="12.55" - x="14.018" - y="2.8499999" - id="rect38" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 14.018,15.4 C 14.018,15.786209 14.330791,16.099448 14.717,16.1" - id="path40" - style="fill:#ededed;stroke:none" /> - <path - d="M 20.25,16.1 C 20.636599,16.1 20.95,15.786599 20.95,15.4" - id="path42" - style="fill:#ededed;stroke:none" /> - <line - x1="14.717" - y1="2.1500001" - x2="20.25" - y2="2.1500001" - stroke="#000000" - stroke-width="0.010" - id="line44" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.717" - y1="16.1" - x2="20.25" - y2="16.1" - stroke="#000000" - stroke-width="0.010" - id="line46" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 14.717,2.15 C 14.330791,2.1505517 14.018,2.4637909 14.018,2.85" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 20.95,2.85 C 20.95,2.4634007 20.636599,2.15 20.25,2.15" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.018" - y1="2.8499999" - x2="14.018" - y2="15.4" - stroke="#000000" - stroke-width="0.010" - id="line52" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.950001" - y1="2.8499999" - x2="20.950001" - y2="15.4" - stroke="#000000" - stroke-width="0.010" - id="line54" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 14.018,15.4 C 14.018,15.786209 14.330791,16.099448 14.717,16.1" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 20.25,16.1 C 20.636599,16.1 20.95,15.786599 20.95,15.4" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="6.125" - height="2.75" - x="9.9180002" - y="12.925" - id="rect60" - style="fill:#c3c3c3;stroke:none;stroke-width:0" /> - <path - d="M 9.918,12.925 C 9.6418576,12.925 9.418,13.148858 9.418,13.425" - id="path62" - style="fill:#c3c3c3;stroke:none" /> - <path - d="M 16.543,13.425 C 16.543,13.148858 16.319142,12.925 16.043,12.925" - id="path64" - style="fill:#c3c3c3;stroke:none" /> - <rect - width="7.125" - height="1.75" - x="9.4180002" - y="13.425" - id="rect66" - style="fill:#c3c3c3;stroke:none;stroke-width:0" /> - <path - d="M 9.418,15.175 C 9.418,15.451142 9.6418576,15.675 9.918,15.675" - id="path68" - style="fill:#c3c3c3;stroke:none" /> - <path - d="M 16.043,15.675 C 16.319142,15.675 16.543,15.451142 16.543,15.175" - id="path70" - style="fill:#c3c3c3;stroke:none" /> - <line - x1="9.9180002" - y1="12.925" - x2="16.042999" - y2="12.925" - stroke="#000000" - stroke-width="0.001" - id="line72" - style="stroke:#000000;stroke-width:0.001" /> - <line - x1="9.9180002" - y1="15.675" - x2="16.042999" - y2="15.675" - stroke="#000000" - stroke-width="0.001" - id="line74" - style="stroke:#000000;stroke-width:0.001" /> - <path - d="M 9.918,12.925 C 9.6418576,12.925 9.418,13.148858 9.418,13.425" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <path - d="M 16.543,13.425 C 16.543,13.148858 16.319142,12.925 16.043,12.925" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <line - x1="9.4180002" - y1="13.425" - x2="9.4180002" - y2="15.175" - stroke="#000000" - stroke-width="0.001" - id="line80" - style="stroke:#000000;stroke-width:0.001" /> - <line - x1="16.542999" - y1="13.425" - x2="16.542999" - y2="15.175" - stroke="#000000" - stroke-width="0.001" - id="line82" - style="stroke:#000000;stroke-width:0.001" /> - <path - d="M 9.418,15.175 C 9.418,15.451142 9.6418576,15.675 9.918,15.675" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <path - d="M 16.043,15.675 C 16.319142,15.675 16.543,15.451142 16.543,15.175" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <rect - width="6.125" - height="2.6500001" - x="9.75" - y="10.05" - id="rect88" - style="fill:#c3c3c3;stroke:none;stroke-width:0" /> - <path - d="M 9.75,10.05 C 9.4738576,10.05 9.25,10.273858 9.25,10.55" - id="path90" - style="fill:#c3c3c3;stroke:none" /> - <path - d="M 16.375,10.55 C 16.375,10.273858 16.151142,10.05 15.875,10.05" - id="path92" - style="fill:#c3c3c3;stroke:none" /> - <rect - width="7.125" - height="1.65" - x="9.25" - y="10.55" - id="rect94" - style="fill:#c3c3c3;stroke:none;stroke-width:0" /> - <path - d="M 9.25,12.2 C 9.25,12.476142 9.4738576,12.7 9.75,12.7" - id="path96" - style="fill:#c3c3c3;stroke:none" /> - <path - d="M 15.875,12.7 C 16.151142,12.7 16.375,12.476142 16.375,12.2" - id="path98" - style="fill:#c3c3c3;stroke:none" /> - <line - x1="9.75" - y1="10.05" - x2="15.875" - y2="10.05" - stroke="#000000" - stroke-width="0.001" - id="line100" - style="stroke:#000000;stroke-width:0.001" /> - <line - x1="9.75" - y1="12.7" - x2="15.875" - y2="12.7" - stroke="#000000" - stroke-width="0.001" - id="line102" - style="stroke:#000000;stroke-width:0.001" /> - <path - d="M 9.75,10.05 C 9.4738576,10.05 9.25,10.273858 9.25,10.55" - id="path104" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <path - d="M 16.375,10.55 C 16.375,10.273858 16.151142,10.05 15.875,10.05" - id="path106" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <line - x1="9.25" - y1="10.55" - x2="9.25" - y2="12.2" - stroke="#000000" - stroke-width="0.001" - id="line108" - style="stroke:#000000;stroke-width:0.001" /> - <line - x1="16.375" - y1="10.55" - x2="16.375" - y2="12.2" - stroke="#000000" - stroke-width="0.001" - id="line110" - style="stroke:#000000;stroke-width:0.001" /> - <path - d="M 9.25,12.2 C 9.25,12.476142 9.4738576,12.7 9.75,12.7" - id="path112" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <path - d="M 15.875,12.7 C 16.151142,12.7 16.375,12.476142 16.375,12.2" - id="path114" - style="fill:none;stroke:#000000;stroke-width:0.001" /> - <line - x1="2.0250001" - y1="1.825" - x2="20.950001" - y2="1.825" - stroke="#000000" - stroke-width="0.150" - id="line116" - style="stroke:#000000;stroke-width:0.15000001" /> - <rect - width="1.391" - height="3.2460001" - x="8.2889996" - y="2.836" - id="rect118" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.391" - height="3.2460001" - x="8.2889996" - y="2.836" - id="rect120" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <rect - width="1.113" - height="0.37099999" - x="8.4280005" - y="3.0309999" - id="rect122" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.113" - height="0.37099999" - x="8.4280005" - y="3.402" - id="rect124" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.113" - height="0.37099999" - x="8.4280005" - y="3.773" - id="rect126" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.113" - height="0.37099999" - x="8.4280005" - y="4.1440001" - id="rect128" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.69499999" - height="0.223" - x="8.4280005" - y="4.5890002" - id="rect130" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="9.4709997" - cy="4.6259999" - rx="0.048999999" - ry="0.048999999" - id="ellipse132" - style="fill:#00ff00;stroke:none" /> - <ellipse - cx="9.4709997" - cy="4.6259999" - rx="0.048999999" - ry="0.048999999" - id="ellipse134" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="9.4709997" - cy="4.7740002" - rx="0.048999999" - ry="0.048999999" - id="ellipse136" - style="fill:#ffff00;stroke:none" /> - <ellipse - cx="9.4709997" - cy="4.7740002" - rx="0.048999999" - ry="0.048999999" - id="ellipse138" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.167" - height="0.148" - x="9.1929998" - y="4.6630001" - id="rect140" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.167" - height="0.148" - x="9.1929998" - y="4.6630001" - id="rect142" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 8.521,5.108 L 8.521,5.92" - id="path144" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 8.752,5.108 L 8.752,5.92" - id="path146" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 8.984,5.108 L 8.984,5.92" - id="path148" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.216,5.108 L 9.216,5.92" - id="path150" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.448,5.108 L 9.448,5.92" - id="path152" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.68,5.108 L 9.68,5.92" - id="path154" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="8.011,6.36 8.289,5.804 8.289,6.082 9.68,6.082 9.68,5.804 10.051,6.36 8.011,6.36 " - id="polygon156" - style="fill:#999999;stroke:none;stroke-width:0.01" /> - <polygon - points="8.011,6.36 8.289,5.804 8.289,6.082 9.68,6.082 9.68,5.804 10.051,6.36 8.011,6.36 " - id="polygon158" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.67" - height="5.0089998" - x="16.247" - y="3.0339999" - id="rect160" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.67" - height="5.0089998" - x="16.247" - y="3.0339999" - id="rect162" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.67" - height="5.0089998" - x="16.247" - y="3.0339999" - id="rect164" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.336" - height="2.003" - x="16.414" - y="3.201" - id="rect166" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.336" - height="2.003" - x="16.414" - y="3.201" - id="rect168" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.336" - height="2.003" - x="16.414" - y="3.201" - id="rect170" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="3.5339999" - x2="17.75" - y2="3.5339999" - stroke="#000000" - stroke-width="0.010" - id="line172" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.75" - y1="3.868" - x2="16.414" - y2="3.868" - stroke="#000000" - stroke-width="0.010" - id="line174" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="4.2020001" - x2="17.75" - y2="4.2020001" - stroke="#000000" - stroke-width="0.010" - id="line176" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="4.5359998" - x2="17.75" - y2="4.5359998" - stroke="#000000" - stroke-width="0.010" - id="line178" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.75" - y1="4.8699999" - x2="16.414" - y2="4.8699999" - stroke="#000000" - stroke-width="0.010" - id="line180" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91799998" - height="0.50099999" - x="16.414" - y="5.3709998" - id="rect182" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91799998" - height="0.50099999" - x="16.414" - y="5.3709998" - id="rect184" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91799998" - height="0.50099999" - x="16.414" - y="5.3709998" - id="rect186" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.247" - y1="6.2059999" - x2="17.917" - y2="6.2059999" - stroke="#000000" - stroke-width="0.010" - id="line188" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="16.997999" - y="6.3730001" - id="rect190" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="16.997999" - y="6.3730001" - id="rect192" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="16.997999" - y="6.3730001" - id="rect194" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.332001" - y="6.3730001" - id="rect196" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.332001" - y="6.3730001" - id="rect198" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.332001" - y="6.3730001" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.666" - y="6.3730001" - id="rect202" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.666" - y="6.3730001" - id="rect204" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.666" - y="6.3730001" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.167" - height="0.167" - x="17.583" - y="5.8720002" - id="rect208" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.167" - height="0.167" - x="17.583" - y="5.8720002" - id="rect210" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.167" - height="0.167" - x="17.583" - y="5.8720002" - id="rect212" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="5.6209998" - x2="17.332001" - y2="5.6209998" - stroke="#000000" - stroke-width="0.010" - id="line214" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.25" - height="0.25" - x="16.414" - y="6.289" - id="rect216" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.25" - height="0.25" - x="16.414" - y="6.289" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.25" - height="0.25" - x="16.414" - y="6.289" - id="rect220" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.169" - height="0.082999997" - x="16.497999" - y="4.954" - id="rect222" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.169" - height="0.082999997" - x="16.497999" - y="4.954" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.169" - height="0.082999997" - x="16.497999" - y="4.954" - id="rect226" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.497999" - y1="5.454" - x2="17.249001" - y2="5.454" - stroke="#000000" - stroke-width="0.010" - id="line228" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.249001" - y1="5.5380001" - x2="17.165001" - y2="5.5380001" - stroke="#000000" - stroke-width="0.010" - id="line230" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.497999" - y1="5.5380001" - x2="16.580999" - y2="5.5380001" - stroke="#000000" - stroke-width="0.010" - id="line232" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.417" - height="0.082999997" - x="16.664" - y="5.454" - id="rect234" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.417" - height="0.082999997" - x="16.664" - y="5.454" - id="rect236" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.417" - height="0.082999997" - x="16.664" - y="5.454" - id="rect238" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.497999" - y1="5.1199999" - x2="16.580999" - y2="5.1199999" - stroke="#000000" - stroke-width="0.010" - id="line240" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.664" - y1="5.1199999" - x2="16.747999" - y2="5.1199999" - stroke="#000000" - stroke-width="0.010" - id="line242" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.499001" - y1="5.1199999" - x2="17.666" - y2="5.1199999" - stroke="#000000" - stroke-width="0.010" - id="line244" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.9590001" - x2="17.833" - y2="7.9590001" - stroke="#000000" - stroke-width="0.010" - id="line246" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.875" - x2="16.330999" - y2="7.875" - stroke="#000000" - stroke-width="0.010" - id="line248" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.7919998" - x2="17.833" - y2="7.7919998" - stroke="#000000" - stroke-width="0.010" - id="line250" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.7080002" - x2="16.330999" - y2="7.7080002" - stroke="#000000" - stroke-width="0.010" - id="line252" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.625" - x2="17.833" - y2="7.625" - stroke="#000000" - stroke-width="0.010" - id="line254" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.5409999" - x2="16.330999" - y2="7.5409999" - stroke="#000000" - stroke-width="0.010" - id="line256" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.4580002" - x2="17.833" - y2="7.4580002" - stroke="#000000" - stroke-width="0.010" - id="line258" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.3740001" - x2="16.330999" - y2="7.3740001" - stroke="#000000" - stroke-width="0.010" - id="line260" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.2909999" - x2="17.833" - y2="7.2909999" - stroke="#000000" - stroke-width="0.010" - id="line262" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.2069998" - x2="16.330999" - y2="7.2069998" - stroke="#000000" - stroke-width="0.010" - id="line264" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.1240001" - x2="17.833" - y2="7.1240001" - stroke="#000000" - stroke-width="0.010" - id="line266" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.04" - x2="16.330999" - y2="7.04" - stroke="#000000" - stroke-width="0.010" - id="line268" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="6.9569998" - x2="17.833" - y2="6.9569998" - stroke="#000000" - stroke-width="0.010" - id="line270" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="6.8730001" - x2="16.330999" - y2="6.8730001" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.1" - y1="1.85" - x2="17.1" - y2="3.05" - stroke="#000000" - stroke-width="0.100" - id="line274" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.0570002" - y1="1.823" - x2="9.0310001" - y2="2.836" - stroke="#000000" - stroke-width="0.100" - id="line276" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.85" - height="1.632" - x="5.7249999" - y="3.359" - id="rect278" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="6.6500001" - cy="4.9910002" - rx="0.92500001" - ry="0.27200001" - id="ellipse280" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="6.6500001" - cy="3.359" - rx="0.92500001" - ry="0.27200001" - id="ellipse282" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="6.6500001" - cy="3.359" - rx="0.92500001" - ry="0.27200001" - id="ellipse284" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 7.575,3.359 L 7.575,4.991 C 7.575,5.141 7.161,5.263 6.65,5.263 C 6.139,5.263 5.725,5.141 5.725,4.991 L 5.725,3.359" - id="path286" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="7.5999999" - y1="4.1750002" - x2="8.3000002" - y2="4.1999998" - stroke="#000000" - stroke-width="0.100" - id="line288" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="6.3410001" - y="4.3000002" - id="text290" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">ADS</text> - <text - x="5.5120001" - y="7.125" - id="text292" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Windows Server 2003</text> - <text - x="6.5840001" - y="7.9250002" - id="text294" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">ADS Server</text> - <text - x="5.927" - y="8.7250004" - id="text296" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain Controller</text> - <text - x="15.605" - y="0.67500001" - id="text298" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba Domain</text> - <text - x="15.598" - y="1.475" - id="text300" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server</text> - <line - x1="2.075" - y1="8.9750004" - x2="20.9" - y2="9" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.50,0.50" - id="line302" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.5, 0.5" /> - <text - x="6.5079999" - y="9.6750002" - id="text304" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Domain Services</text> - <text - x="5.7870002" - y="1.395" - id="text306" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network Configuration</text> - <rect - width="5.3499999" - height="1.8" - x="4.8249998" - y="12.25" - id="rect308" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.3499999" - height="1.8" - x="4.8249998" - y="12.25" - id="rect310" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="4.2750001" - height="1.375" - x="5.4250002" - y="10.6" - id="rect312" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="4.2750001" - height="1.375" - x="5.4250002" - y="10.6" - id="rect314" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="6.4749999" - y="11.411" - id="text316" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">CIFS Server</text> - <text - x="16.191999" - y="9.6499996" - id="text318" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Client Services</text> - <rect - width="2.575" - height="1.125" - x="16" - y="12.975" - id="rect320" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.125" - x="16" - y="12.975" - id="rect322" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="16.599001" - y="13.7" - id="text324" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Winbind</text> - <rect - width="2.575" - height="1.1" - x="15.992" - y="10.275" - id="rect326" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.1" - x="15.992" - y="10.275" - id="rect328" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.6070001" - height="1.1" - x="16.566999" - y="11.6" - id="rect330" - style="fill:#c5c5c5;stroke:none;stroke-width:0" /> - <rect - width="2.6070001" - height="1.1" - x="16.566999" - y="11.6" - id="rect332" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="16.724001" - y="11.086" - id="text334" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">smbd</text> - <text - x="17.357" - y="12.361" - id="text336" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">nmbd</text> - <rect - width="2.7179999" - height="1.1" - x="15.95" - y="14.35" - id="rect338" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.7179999" - height="1.1" - x="15.95" - y="14.35" - id="rect340" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="16.579" - y="15.075" - id="text342" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">nss_ldap</text> - <path - d="M 19.015,13.314 C 19.392106,13.104482 19.629557,12.710441 19.638616,12.279135 C 19.647674,11.84783 19.426976,11.444167 19.059,11.219" - id="path344" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="19.151,10.869 18.625,11.056 19.09,11.366 19.151,10.869 " - id="polygon346" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.053,13.169 18.575,13.458 19.094,13.667 19.053,13.169 " - id="polygon348" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <path - d="M 19.172,14.715 C 19.931775,14.326769 20.402308,13.537936 20.382916,12.684938 C 20.363525,11.83194 19.857632,11.065304 19.081,10.712" - id="path350" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="19.154,10.406 18.617,10.559 19.062,10.897 19.154,10.406 " - id="polygon352" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.146,14.531 18.716,14.889 19.26,15.018 19.146,14.531 " - id="polygon354" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="15.338" - y1="14.9" - x2="10.912" - y2="14.9" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.20,0.20" - id="line356" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.2, 0.2" /> - <polygon - points="15.338,15.15 15.838,14.9 15.338,14.65 15.338,15.15 " - id="polygon358" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="15.338,15.15 15.838,14.9 15.338,14.65 15.338,15.15 " - id="polygon360" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="10.912,14.65 10.412,14.9 10.912,15.15 10.912,14.65 " - id="polygon362" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="10.912,14.65 10.412,14.9 10.912,15.15 10.912,14.65 " - id="polygon364" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="10.787" - y1="13.328" - x2="15.338" - y2="13.347" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.20,0.20" - id="line366" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.2, 0.2" /> - <polygon - points="10.788,13.078 10.287,13.325 10.786,13.578 10.788,13.078 " - id="polygon368" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="10.788,13.078 10.287,13.325 10.786,13.578 10.788,13.078 " - id="polygon370" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="15.337,13.597 15.838,13.35 15.339,13.097 15.337,13.597 " - id="polygon372" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="15.337,13.597 15.838,13.35 15.339,13.097 15.337,13.597 " - id="polygon374" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="12.594" - y="14.05" - id="text376" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">UID/GID</text> - <text - x="12.425" - y="14.65" - id="text378" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Resolution</text> - <rect - width="5.4499998" - height="1.05" - x="4.8249998" - y="14.375" - id="rect380" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="5.4499998" - height="1.05" - x="4.8249998" - y="14.375" - id="rect382" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="6.2270002" - y="13.011" - id="text384" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Active Directory</text> - <text - x="6.0279999" - y="13.611" - id="text386" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">(Kerberos / LDAP)</text> - <text - x="5.9699998" - y="15.136" - id="text388" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Services For UNIX</text> - <line - x1="10.361" - y1="10.714" - x2="15.314" - y2="10.524" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.20,0.20" - id="line390" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.2, 0.2" /> - <polygon - points="10.352,10.464 9.862,10.733 10.371,10.964 10.352,10.464 " - id="polygon392" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="10.352,10.464 9.862,10.733 10.371,10.964 10.352,10.464 " - id="polygon394" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="15.323,10.773 15.813,10.504 15.304,10.274 15.323,10.773 " - id="polygon396" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="15.323,10.773 15.813,10.504 15.304,10.274 15.323,10.773 " - id="polygon398" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="10.795" - y1="12.333" - x2="15.355" - y2="11.242" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.20,0.20" - id="line400" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.2, 0.2" /> - <polygon - points="10.737,12.09 10.309,12.449 10.853,12.576 10.737,12.09 " - id="polygon402" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="10.737,12.09 10.309,12.449 10.853,12.576 10.737,12.09 " - id="polygon404" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="15.413,11.485 15.841,11.126 15.297,10.999 15.413,11.485 " - id="polygon406" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="15.413,11.485 15.841,11.126 15.297,10.999 15.413,11.485 " - id="polygon408" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="11.411" - y="11.325" - id="text410" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Authentication</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/chap9-SambaDC.png b/docs/htmldocs/Samba3-ByExample/images/chap9-SambaDC.png Binary files differdeleted file mode 100644 index c141eb9de6..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap9-SambaDC.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/chap9-SambaDC.svg b/docs/htmldocs/Samba3-ByExample/images/chap9-SambaDC.svg deleted file mode 100644 index 54d1763394..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/chap9-SambaDC.svg +++ /dev/null @@ -1,1443 +0,0 @@ -<?xml version="1.0" encoding="UTF-8" standalone="no"?> -<!-- Created with Inkscape (http://www.inkscape.org/) --> -<svg - xmlns:svg="http://www.w3.org/2000/svg" - xmlns="http://www.w3.org/2000/svg" - version="1.0" - width="19.075001cm" - height="15.897cm" - viewBox="1.95 0.208 21.025 16.105" - id="svg2"> - <defs - id="defs453" /> - <rect - width="10.1" - height="13.95" - x="2.7750001" - y="2.125" - id="rect4" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 2.775,2.125 C 2.3884007,2.125 2.075,2.4384007 2.075,2.825" - id="path6" - style="fill:#ededed;stroke:none" /> - <path - d="M 13.575,2.825 C 13.575,2.4384007 13.261599,2.125 12.875,2.125" - id="path8" - style="fill:#ededed;stroke:none" /> - <rect - width="11.5" - height="12.55" - x="2.075" - y="2.825" - id="rect10" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 2.075,15.375 C 2.075,15.761599 2.3884007,16.075 2.775,16.075" - id="path12" - style="fill:#ededed;stroke:none" /> - <path - d="M 12.875,16.075 C 13.261599,16.075 13.575,15.761599 13.575,15.375" - id="path14" - style="fill:#ededed;stroke:none" /> - <line - x1="2.7750001" - y1="2.125" - x2="12.875" - y2="2.125" - stroke="#000000" - stroke-width="0.010" - id="line16" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="2.7750001" - y1="16.075001" - x2="12.875" - y2="16.075001" - stroke="#000000" - stroke-width="0.010" - id="line18" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 2.775,2.125 C 2.3884007,2.125 2.075,2.4384007 2.075,2.825" - id="path20" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 13.575,2.825 C 13.575,2.4384007 13.261599,2.125 12.875,2.125" - id="path22" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.075" - y1="2.825" - x2="2.075" - y2="15.375" - stroke="#000000" - stroke-width="0.010" - id="line24" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="13.575" - y1="2.825" - x2="13.575" - y2="15.375" - stroke="#000000" - stroke-width="0.010" - id="line26" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 2.075,15.375 C 2.075,15.761599 2.3884007,16.075 2.775,16.075" - id="path28" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 12.875,16.075 C 13.261599,16.075 13.575,15.761599 13.575,15.375" - id="path30" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="5.533" - height="13.95" - x="14.717" - y="2.1500001" - id="rect32" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 14.717,2.15 C 14.330791,2.1505517 14.018,2.4637909 14.018,2.85" - id="path34" - style="fill:#ededed;stroke:none" /> - <path - d="M 20.95,2.85 C 20.95,2.4634007 20.636599,2.15 20.25,2.15" - id="path36" - style="fill:#ededed;stroke:none" /> - <rect - width="6.9320002" - height="12.55" - x="14.018" - y="2.8499999" - id="rect38" - style="fill:#ededed;stroke:none;stroke-width:0" /> - <path - d="M 14.018,15.4 C 14.018,15.786209 14.330791,16.099448 14.717,16.1" - id="path40" - style="fill:#ededed;stroke:none" /> - <path - d="M 20.25,16.1 C 20.636599,16.1 20.95,15.786599 20.95,15.4" - id="path42" - style="fill:#ededed;stroke:none" /> - <line - x1="14.717" - y1="2.1500001" - x2="20.25" - y2="2.1500001" - stroke="#000000" - stroke-width="0.010" - id="line44" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="14.717" - y1="16.1" - x2="20.25" - y2="16.1" - stroke="#000000" - stroke-width="0.010" - id="line46" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 14.717,2.15 C 14.330791,2.1505517 14.018,2.4637909 14.018,2.85" - id="path48" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 20.95,2.85 C 20.95,2.4634007 20.636599,2.15 20.25,2.15" - id="path50" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="14.018" - y1="2.8499999" - x2="14.018" - y2="15.4" - stroke="#000000" - stroke-width="0.010" - id="line52" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="20.950001" - y1="2.8499999" - x2="20.950001" - y2="15.4" - stroke="#000000" - stroke-width="0.010" - id="line54" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 14.018,15.4 C 14.018,15.786209 14.330791,16.099448 14.717,16.1" - id="path56" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 20.25,16.1 C 20.636599,16.1 20.95,15.786599 20.95,15.4" - id="path58" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="4.9749999" - height="4.625" - x="10.8" - y="10.877" - id="rect60" - style="fill:#b5b5b5;stroke:none;stroke-width:0" /> - <path - d="M 10.8,10.877 C 10.523858,10.877 10.3,11.100858 10.3,11.377" - id="path62" - style="fill:#b5b5b5;stroke:none" /> - <path - d="M 16.275,11.377 C 16.275,11.100858 16.051142,10.877 15.775,10.877" - id="path64" - style="fill:#b5b5b5;stroke:none" /> - <rect - width="5.9749999" - height="3.625" - x="10.3" - y="11.377" - id="rect66" - style="fill:#b5b5b5;stroke:none;stroke-width:0" /> - <path - d="M 10.3,15.002 C 10.3,15.278142 10.523858,15.502 10.8,15.502" - id="path68" - style="fill:#b5b5b5;stroke:none" /> - <path - d="M 15.775,15.502 C 16.051142,15.502 16.275,15.278142 16.275,15.002" - id="path70" - style="fill:#b5b5b5;stroke:none" /> - <line - x1="10.8" - y1="10.877" - x2="15.775" - y2="10.877" - stroke="#000000" - stroke-width="0.010" - id="line72" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="10.8" - y1="15.502" - x2="15.775" - y2="15.502" - stroke="#000000" - stroke-width="0.010" - id="line74" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.8,10.877 C 10.523858,10.877 10.3,11.100858 10.3,11.377" - id="path76" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 16.275,11.377 C 16.275,11.100858 16.051142,10.877 15.775,10.877" - id="path78" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="10.3" - y1="11.377" - x2="10.3" - y2="15.002" - stroke="#000000" - stroke-width="0.010" - id="line80" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.275" - y1="11.377" - x2="16.275" - y2="15.002" - stroke="#000000" - stroke-width="0.010" - id="line82" - style="stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.3,15.002 C 10.3,15.278142 10.523858,15.502 10.8,15.502" - id="path84" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 15.775,15.502 C 16.051142,15.502 16.275,15.278142 16.275,15.002" - id="path86" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="2.0250001" - y1="1.825" - x2="20.950001" - y2="1.825" - stroke="#000000" - stroke-width="0.150" - id="line88" - style="stroke:#000000;stroke-width:0.15000001" /> - <rect - width="1.391" - height="3.2460001" - x="5.539" - y="3.161" - id="rect90" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.391" - height="3.2460001" - x="5.539" - y="3.161" - id="rect92" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <rect - width="1.113" - height="0.37099999" - x="5.678" - y="3.3559999" - id="rect94" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.113" - height="0.37099999" - x="5.678" - y="3.727" - id="rect96" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.113" - height="0.37099999" - x="5.678" - y="4.098" - id="rect98" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.113" - height="0.37099999" - x="5.678" - y="4.4689999" - id="rect100" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.69499999" - height="0.223" - x="5.678" - y="4.914" - id="rect102" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="6.7210002" - cy="4.9510002" - rx="0.048999999" - ry="0.048999999" - id="ellipse104" - style="fill:#00ff00;stroke:none" /> - <ellipse - cx="6.7210002" - cy="4.9510002" - rx="0.048999999" - ry="0.048999999" - id="ellipse106" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="6.7210002" - cy="5.099" - rx="0.048999999" - ry="0.048999999" - id="ellipse108" - style="fill:#ffff00;stroke:none" /> - <ellipse - cx="6.7210002" - cy="5.099" - rx="0.048999999" - ry="0.048999999" - id="ellipse110" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.167" - height="0.148" - x="6.4429998" - y="4.9879999" - id="rect112" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.167" - height="0.148" - x="6.4429998" - y="4.9879999" - id="rect114" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 5.771,5.433 L 5.771,6.245" - id="path116" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 6.002,5.433 L 6.002,6.245" - id="path118" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 6.234,5.433 L 6.234,6.245" - id="path120" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 6.466,5.433 L 6.466,6.245" - id="path122" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 6.698,5.433 L 6.698,6.245" - id="path124" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 6.93,5.433 L 6.93,6.245" - id="path126" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="5.261,6.685 5.539,6.129 5.539,6.407 6.93,6.407 6.93,6.129 7.301,6.685 5.261,6.685 " - id="polygon128" - style="fill:#999999;stroke:none;stroke-width:0.01" /> - <polygon - points="5.261,6.685 5.539,6.129 5.539,6.407 6.93,6.407 6.93,6.129 7.301,6.685 5.261,6.685 " - id="polygon130" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.354" - height="3.158" - x="8.8369999" - y="3.2119999" - id="rect132" - style="fill:#b3b3b3;stroke:none;stroke-width:0" /> - <rect - width="1.354" - height="3.158" - x="8.8369999" - y="3.2119999" - id="rect134" - style="fill:none;stroke:#000000;stroke-width:0.08" /> - <rect - width="1.0829999" - height="0.361" - x="8.9720001" - y="3.402" - id="rect136" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.0829999" - height="0.361" - x="8.9720001" - y="3.763" - id="rect138" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.0829999" - height="0.361" - x="8.9720001" - y="4.1240001" - id="rect140" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.0829999" - height="0.361" - x="8.9720001" - y="4.4850001" - id="rect142" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.67699999" - height="0.21699999" - x="8.9720001" - y="4.9180002" - id="rect144" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="9.9879999" - cy="4.954" - rx="0.046999998" - ry="0.046999998" - id="ellipse146" - style="fill:#00ff00;stroke:none" /> - <ellipse - cx="9.9879999" - cy="4.954" - rx="0.046999998" - ry="0.046999998" - id="ellipse148" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <ellipse - cx="9.9879999" - cy="5.099" - rx="0.046999998" - ry="0.046999998" - id="ellipse150" - style="fill:#ffff00;stroke:none" /> - <ellipse - cx="9.9879999" - cy="5.099" - rx="0.046999998" - ry="0.046999998" - id="ellipse152" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.162" - height="0.14399999" - x="9.717" - y="4.9899998" - id="rect154" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="0.162" - height="0.14399999" - x="9.717" - y="4.9899998" - id="rect156" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.063,5.423 L 9.063,6.213" - id="path158" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.288,5.423 L 9.288,6.213" - id="path160" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.514,5.423 L 9.514,6.213" - id="path162" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.739,5.423 L 9.739,6.213" - id="path164" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 9.965,5.423 L 9.965,6.213" - id="path166" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <path - d="M 10.191,5.423 L 10.191,6.213" - id="path168" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <polygon - points="8.566,6.642 8.837,6.1 8.837,6.371 10.191,6.371 10.191,6.1 10.552,6.642 8.566,6.642 " - id="polygon170" - style="fill:#999999;stroke:none;stroke-width:0.01" /> - <polygon - points="8.566,6.642 8.837,6.1 8.837,6.371 10.191,6.371 10.191,6.1 10.552,6.642 8.566,6.642 " - id="polygon172" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.67" - height="5.0089998" - x="16.247" - y="3.0339999" - id="rect174" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.67" - height="5.0089998" - x="16.247" - y="3.0339999" - id="rect176" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.67" - height="5.0089998" - x="16.247" - y="3.0339999" - id="rect178" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.336" - height="2.003" - x="16.414" - y="3.201" - id="rect180" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="1.336" - height="2.003" - x="16.414" - y="3.201" - id="rect182" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.336" - height="2.003" - x="16.414" - y="3.201" - id="rect184" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="3.5339999" - x2="17.75" - y2="3.5339999" - stroke="#000000" - stroke-width="0.010" - id="line186" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.75" - y1="3.868" - x2="16.414" - y2="3.868" - stroke="#000000" - stroke-width="0.010" - id="line188" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="4.2020001" - x2="17.75" - y2="4.2020001" - stroke="#000000" - stroke-width="0.010" - id="line190" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="4.5359998" - x2="17.75" - y2="4.5359998" - stroke="#000000" - stroke-width="0.010" - id="line192" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.75" - y1="4.8699999" - x2="16.414" - y2="4.8699999" - stroke="#000000" - stroke-width="0.010" - id="line194" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.91799998" - height="0.50099999" - x="16.414" - y="5.3709998" - id="rect196" - style="fill:#d9d9cd;stroke:none;stroke-width:0" /> - <rect - width="0.91799998" - height="0.50099999" - x="16.414" - y="5.3709998" - id="rect198" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.91799998" - height="0.50099999" - x="16.414" - y="5.3709998" - id="rect200" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.247" - y1="6.2059999" - x2="17.917" - y2="6.2059999" - stroke="#000000" - stroke-width="0.010" - id="line202" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="16.997999" - y="6.3730001" - id="rect204" - style="fill:#00cd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="16.997999" - y="6.3730001" - id="rect206" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="16.997999" - y="6.3730001" - id="rect208" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.332001" - y="6.3730001" - id="rect210" - style="fill:#cdcd00;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.332001" - y="6.3730001" - id="rect212" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.332001" - y="6.3730001" - id="rect214" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.666" - y="6.3730001" - id="rect216" - style="fill:#cd0000;stroke:none;stroke-width:0" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.666" - y="6.3730001" - id="rect218" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.082999997" - height="0.082999997" - x="17.666" - y="6.3730001" - id="rect220" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="0.167" - height="0.167" - x="17.583" - y="5.8720002" - id="rect222" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.167" - height="0.167" - x="17.583" - y="5.8720002" - id="rect224" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.167" - height="0.167" - x="17.583" - y="5.8720002" - id="rect226" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.414" - y1="5.6209998" - x2="17.332001" - y2="5.6209998" - stroke="#000000" - stroke-width="0.010" - id="line228" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.25" - height="0.25" - x="16.414" - y="6.289" - id="rect230" - style="fill:#cdcdbd;stroke:none;stroke-width:0" /> - <rect - width="0.25" - height="0.25" - x="16.414" - y="6.289" - id="rect232" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.25" - height="0.25" - x="16.414" - y="6.289" - id="rect234" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <rect - width="1.169" - height="0.082999997" - x="16.497999" - y="4.954" - id="rect236" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="1.169" - height="0.082999997" - x="16.497999" - y="4.954" - id="rect238" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.169" - height="0.082999997" - x="16.497999" - y="4.954" - id="rect240" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.497999" - y1="5.454" - x2="17.249001" - y2="5.454" - stroke="#000000" - stroke-width="0.010" - id="line242" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.249001" - y1="5.5380001" - x2="17.165001" - y2="5.5380001" - stroke="#000000" - stroke-width="0.010" - id="line244" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.497999" - y1="5.5380001" - x2="16.580999" - y2="5.5380001" - stroke="#000000" - stroke-width="0.010" - id="line246" - style="stroke:#000000;stroke-width:0.01" /> - <rect - width="0.417" - height="0.082999997" - x="16.664" - y="5.454" - id="rect248" - style="fill:#cdcdc1;stroke:none;stroke-width:0" /> - <rect - width="0.417" - height="0.082999997" - x="16.664" - y="5.454" - id="rect250" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="0.417" - height="0.082999997" - x="16.664" - y="5.454" - id="rect252" - style="fill:none;stroke:#000000;stroke-width:0.01" /> - <line - x1="16.497999" - y1="5.1199999" - x2="16.580999" - y2="5.1199999" - stroke="#000000" - stroke-width="0.010" - id="line254" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.664" - y1="5.1199999" - x2="16.747999" - y2="5.1199999" - stroke="#000000" - stroke-width="0.010" - id="line256" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.499001" - y1="5.1199999" - x2="17.666" - y2="5.1199999" - stroke="#000000" - stroke-width="0.010" - id="line258" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.9590001" - x2="17.833" - y2="7.9590001" - stroke="#000000" - stroke-width="0.010" - id="line260" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.875" - x2="16.330999" - y2="7.875" - stroke="#000000" - stroke-width="0.010" - id="line262" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.7919998" - x2="17.833" - y2="7.7919998" - stroke="#000000" - stroke-width="0.010" - id="line264" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.7080002" - x2="16.330999" - y2="7.7080002" - stroke="#000000" - stroke-width="0.010" - id="line266" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.625" - x2="17.833" - y2="7.625" - stroke="#000000" - stroke-width="0.010" - id="line268" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.5409999" - x2="16.330999" - y2="7.5409999" - stroke="#000000" - stroke-width="0.010" - id="line270" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.4580002" - x2="17.833" - y2="7.4580002" - stroke="#000000" - stroke-width="0.010" - id="line272" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.3740001" - x2="16.330999" - y2="7.3740001" - stroke="#000000" - stroke-width="0.010" - id="line274" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.2909999" - x2="17.833" - y2="7.2909999" - stroke="#000000" - stroke-width="0.010" - id="line276" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.2069998" - x2="16.330999" - y2="7.2069998" - stroke="#000000" - stroke-width="0.010" - id="line278" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="7.1240001" - x2="17.833" - y2="7.1240001" - stroke="#000000" - stroke-width="0.010" - id="line280" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="7.04" - x2="16.330999" - y2="7.04" - stroke="#000000" - stroke-width="0.010" - id="line282" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="16.330999" - y1="6.9569998" - x2="17.833" - y2="6.9569998" - stroke="#000000" - stroke-width="0.010" - id="line284" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.833" - y1="6.8730001" - x2="16.330999" - y2="6.8730001" - stroke="#000000" - stroke-width="0.010" - id="line286" - style="stroke:#000000;stroke-width:0.01" /> - <line - x1="17.1" - y1="1.85" - x2="17.1" - y2="3.05" - stroke="#000000" - stroke-width="0.100" - id="line288" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="6.2579999" - y1="1.823" - x2="6.2810001" - y2="3.161" - stroke="#000000" - stroke-width="0.100" - id="line290" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="9.5249996" - y1="1.85" - x2="9.559" - y2="3.2119999" - stroke="#000000" - stroke-width="0.100" - id="line292" - style="stroke:#000000;stroke-width:0.1" /> - <rect - width="1.85" - height="1.632" - x="2.925" - y="3.359" - id="rect294" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="3.8499999" - cy="4.9910002" - rx="0.92500001" - ry="0.27200001" - id="ellipse296" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.8499999" - cy="3.359" - rx="0.92500001" - ry="0.27200001" - id="ellipse298" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="3.8499999" - cy="3.359" - rx="0.92500001" - ry="0.27200001" - id="ellipse300" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 4.775,3.359 L 4.775,4.991 C 4.775,5.141 4.361,5.263 3.85,5.263 C 3.339,5.263 2.925,5.141 2.925,4.991 L 2.925,3.359" - id="path302" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="1.85" - height="1.632" - x="11.008" - y="3.3699999" - id="rect304" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <ellipse - cx="11.932" - cy="5.0019999" - rx="0.92500001" - ry="0.27200001" - id="ellipse306" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="11.932" - cy="3.3699999" - rx="0.92500001" - ry="0.27200001" - id="ellipse308" - style="fill:#ffffff;stroke:none" /> - <ellipse - cx="11.932" - cy="3.3699999" - rx="0.92500001" - ry="0.27200001" - id="ellipse310" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <path - d="M 12.857,3.37 L 12.857,5.002 C 12.857,5.152 12.443,5.274 11.932,5.274 C 11.422,5.274 11.008,5.152 11.008,5.002 L 11.008,3.37" - id="path312" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="4.8000002" - y1="4.1750002" - x2="5.5" - y2="4.1999998" - stroke="#000000" - stroke-width="0.100" - id="line314" - style="stroke:#000000;stroke-width:0.1" /> - <line - x1="10.259" - y1="4.1490002" - x2="10.959" - y2="4.1739998" - stroke="#000000" - stroke-width="0.100" - id="line316" - style="stroke:#000000;stroke-width:0.1" /> - <text - x="3.4660001" - y="4.3000002" - id="text318" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="3.3929999" - y="4.8000002" - id="text320" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Master</text> - <text - x="11.541" - y="4.3000002" - id="text322" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <text - x="11.555" - y="4.8000002" - id="text324" - style="font-size:0.5px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Slave</text> - <path - d="M 10.533,3.038 C 8.7210597,2.042993 6.5088646,2.1244423 4.775,3.25" - id="path326" - style="fill:none;stroke:#585858;stroke-width:0.1;stroke-dasharray:0.5, 0.15, 0.05, 0.15, 0.05, 0.15" /> - <polygon - points="10.405,3.221 10.959,3.297 10.687,2.808 10.405,3.221 " - id="polygon328" - style="fill:#585858;stroke:none;stroke-width:0.1" /> - <text - x="3.0420001" - y="6.0999999" - id="text330" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="3.2969999" - y="6.9000001" - id="text332" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PDC</text> - <text - x="11.317" - y="6.0749998" - id="text334" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba</text> - <text - x="11.574" - y="6.875" - id="text336" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">BDC</text> - <text - x="15.605" - y="0.67500001" - id="text338" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Samba Domain</text> - <text - x="15.598" - y="1.475" - id="text340" - style="font-size:0.80000001px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Member Server</text> - <line - x1="2.075" - y1="8.9750004" - x2="20.9" - y2="9" - stroke="#000000" - stroke-width="0.100" - stroke-dasharray="0.50,0.50" - id="line342" - style="stroke:#000000;stroke-width:0.1;stroke-dasharray:0.5, 0.5" /> - <text - x="7.7189999" - y="9.6750002" - id="text344" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">PDC/BDC Services</text> - <text - x="5.7870002" - y="1.395" - id="text346" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Network Configuration</text> - <rect - width="2.575" - height="1.1" - x="7.4000001" - y="13.025" - id="rect348" - style="fill:#b9b9b9;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.1" - x="7.4000001" - y="13.025" - id="rect350" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="8.0240002" - y="13.775" - id="text352" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#010101;font-family:arial">Winbind</text> - <rect - width="2.575" - height="1.1" - x="8.0679998" - y="14.4" - id="rect354" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.1" - x="8.0679998" - y="14.4" - id="rect356" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="8.8870001" - y="15.1" - id="text358" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">LDAP</text> - <rect - width="2.575" - height="1.1" - x="8.0679998" - y="10.325" - id="rect360" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.1" - x="8.0679998" - y="10.325" - id="rect362" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.6070001" - height="1.1" - x="7.4180002" - y="11.675" - id="rect364" - style="fill:#c6c6c6;stroke:none;stroke-width:0" /> - <rect - width="2.6070001" - height="1.1" - x="7.4180002" - y="11.675" - id="rect366" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="8.7989998" - y="11.136" - id="text368" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">smbd</text> - <text - x="8.2069998" - y="12.436" - id="text370" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">nmbd</text> - <text - x="16.143" - y="9.6999998" - id="text372" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Client Services</text> - <rect - width="2.575" - height="1.125" - x="16" - y="12.975" - id="rect374" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.125" - x="16" - y="12.975" - id="rect376" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="16.599001" - y="13.7" - id="text378" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Winbind</text> - <rect - width="2.575" - height="1.1" - x="15.992" - y="10.275" - id="rect380" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.575" - height="1.1" - x="15.992" - y="10.275" - id="rect382" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <rect - width="2.608" - height="1.102" - x="16.517" - y="11.625" - id="rect384" - style="fill:#c5c5c5;stroke:none;stroke-width:0" /> - <rect - width="2.608" - height="1.102" - x="16.517" - y="11.625" - id="rect386" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="16.724001" - y="11.086" - id="text388" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">smbd</text> - <text - x="17.306999" - y="12.386" - id="text390" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">nmbd</text> - <rect - width="2.7179999" - height="1.1" - x="15.95" - y="14.35" - id="rect392" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.7179999" - height="1.1" - x="15.95" - y="14.35" - id="rect394" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="16.579" - y="15.075" - id="text396" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">nss_ldap</text> - <rect - width="2.717" - height="1.1" - x="4.1680002" - y="14.375" - id="rect398" - style="fill:#ffffff;stroke:none;stroke-width:0" /> - <rect - width="2.717" - height="1.1" - x="4.1680002" - y="14.375" - id="rect400" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="4.796" - y="15.1" - id="text402" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">nss_ldap</text> - <path - d="M 7.56,11.075 C 6.4745981,11.601642 5.7241236,12.635796 5.56,13.831" - id="path404" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="7.616,11.277 8.02,10.89 7.468,10.799 7.616,11.277 " - id="polygon406" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="5.268,13.829 5.526,14.325 5.768,13.821 5.268,13.829 " - id="polygon408" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="7.4349999" - y1="14.937" - x2="7.5180001" - y2="14.938" - stroke="#000000" - stroke-width="0.100" - id="line410" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="7.44,14.687 6.935,14.926 7.43,15.187 7.44,14.687 " - id="polygon412" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="7.512,15.188 8.018,14.949 7.523,14.688 7.512,15.188 " - id="polygon414" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <path - d="M 19.015,13.314 C 19.392106,13.104482 19.629557,12.710441 19.638616,12.279135 C 19.647674,11.84783 19.426976,11.444167 19.059,11.219" - id="path416" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="19.151,10.869 18.625,11.056 19.09,11.366 19.151,10.869 " - id="polygon418" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.053,13.169 18.575,13.458 19.094,13.667 19.053,13.169 " - id="polygon420" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <path - d="M 19.172,14.715 C 19.931775,14.326769 20.402308,13.537936 20.382916,12.684938 C 20.363525,11.83194 19.857632,11.065304 19.081,10.712" - id="path422" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="19.154,10.406 18.617,10.559 19.062,10.897 19.154,10.406 " - id="polygon424" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <polygon - points="19.146,14.531 18.716,14.889 19.26,15.018 19.146,14.531 " - id="polygon426" - style="fill:#000000;stroke:none;stroke-width:0.1" /> - <line - x1="15.338" - y1="14.9" - x2="11.337" - y2="14.9" - stroke="#000000" - stroke-width="0.100" - id="line428" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="15.338,15.15 15.838,14.9 15.338,14.65 15.338,15.15 " - id="polygon430" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="15.338,15.15 15.838,14.9 15.338,14.65 15.338,15.15 " - id="polygon432" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="11.337,14.65 10.837,14.9 11.337,15.15 11.337,14.65 " - id="polygon434" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="11.337,14.65 10.837,14.9 11.337,15.15 11.337,14.65 " - id="polygon436" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <line - x1="11.321" - y1="11.572" - x2="15.379" - y2="13.132" - stroke="#000000" - stroke-width="0.100" - id="line438" - style="stroke:#000000;stroke-width:0.1" /> - <polygon - points="11.411,11.338 10.854,11.392 11.231,11.805 11.411,11.338 " - id="polygon440" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="11.411,11.338 10.854,11.392 11.231,11.805 11.411,11.338 " - id="polygon442" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <polygon - points="15.289,13.366 15.846,13.312 15.469,12.899 15.289,13.366 " - id="polygon444" - style="fill:#ffffff;stroke:none;stroke-width:0.1" /> - <polygon - points="15.289,13.366 15.846,13.312 15.469,12.899 15.289,13.366 " - id="polygon446" - style="fill:none;stroke:#000000;stroke-width:0.1" /> - <text - x="12.719" - y="13.45" - id="text448" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">UID/GID</text> - <text - x="12.55" - y="14.05" - id="text450" - style="font-size:0.60000002px;font-style:normal;font-weight:400;text-anchor:start;fill:#000000;font-family:arial">Resolution</text> -</svg> diff --git a/docs/htmldocs/Samba3-ByExample/images/imc-usermanager2.png b/docs/htmldocs/Samba3-ByExample/images/imc-usermanager2.png Binary files differdeleted file mode 100644 index 3cfcc6a6ec..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/imc-usermanager2.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/lam-config.png b/docs/htmldocs/Samba3-ByExample/images/lam-config.png Binary files differdeleted file mode 100644 index 15f989bf37..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/lam-config.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/lam-group-members.png b/docs/htmldocs/Samba3-ByExample/images/lam-group-members.png Binary files differdeleted file mode 100644 index cab8e42fc7..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/lam-group-members.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/lam-groups.png b/docs/htmldocs/Samba3-ByExample/images/lam-groups.png Binary files differdeleted file mode 100644 index da17b19a77..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/lam-groups.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/lam-hosts.png b/docs/htmldocs/Samba3-ByExample/images/lam-hosts.png Binary files differdeleted file mode 100644 index 27806eb9ab..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/lam-hosts.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/lam-login.png b/docs/htmldocs/Samba3-ByExample/images/lam-login.png Binary files differdeleted file mode 100644 index cce500fc43..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/lam-login.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/lam-users.png b/docs/htmldocs/Samba3-ByExample/images/lam-users.png Binary files differdeleted file mode 100644 index 0ca4b437ec..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/lam-users.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/openmag.png b/docs/htmldocs/Samba3-ByExample/images/openmag.png Binary files differdeleted file mode 100644 index 52eca30c35..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/openmag.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp001.png b/docs/htmldocs/Samba3-ByExample/images/wxpp001.png Binary files differdeleted file mode 100644 index 2e689a17e2..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp001.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp004.png b/docs/htmldocs/Samba3-ByExample/images/wxpp004.png Binary files differdeleted file mode 100644 index 656f67942e..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp004.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp006.png b/docs/htmldocs/Samba3-ByExample/images/wxpp006.png Binary files differdeleted file mode 100644 index a20b3ed583..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp006.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp007.png b/docs/htmldocs/Samba3-ByExample/images/wxpp007.png Binary files differdeleted file mode 100644 index cf41352220..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp007.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp008.png b/docs/htmldocs/Samba3-ByExample/images/wxpp008.png Binary files differdeleted file mode 100644 index 9958c7c873..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp008.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp010.png b/docs/htmldocs/Samba3-ByExample/images/wxpp010.png Binary files differdeleted file mode 100644 index 068a0dfc73..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp010.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp011.png b/docs/htmldocs/Samba3-ByExample/images/wxpp011.png Binary files differdeleted file mode 100644 index 0cf88c04a6..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp011.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp012.png b/docs/htmldocs/Samba3-ByExample/images/wxpp012.png Binary files differdeleted file mode 100644 index d89f3b5d31..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp012.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp013.png b/docs/htmldocs/Samba3-ByExample/images/wxpp013.png Binary files differdeleted file mode 100644 index 451240ee38..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp013.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/images/wxpp015.png b/docs/htmldocs/Samba3-ByExample/images/wxpp015.png Binary files differdeleted file mode 100644 index 12fe2f31b2..0000000000 --- a/docs/htmldocs/Samba3-ByExample/images/wxpp015.png +++ /dev/null diff --git a/docs/htmldocs/Samba3-ByExample/index.html b/docs/htmldocs/Samba3-ByExample/index.html deleted file mode 100644 index 5323007799..0000000000 --- a/docs/htmldocs/Samba3-ByExample/index.html +++ /dev/null @@ -1,47 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Samba-3 by Example</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="next" href="pr01.html" title="About the Cover Artwork"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Samba-3 by Example</th></tr><tr><td width="20%" align="left"> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="pr01.html">Next</a></td></tr></table><hr></div><div class="book" title="Samba-3 by Example"><div class="titlepage"><div><div><h1 class="title"><a name="S3bE"></a>Samba-3 by Example</h1></div><div><h2 class="subtitle">Practical Exercises in Successful Samba Deployment</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><code class="email"><<a class="email" href="mailto:jht@samba.org">jht@samba.org</a>></code></p></div></div></div></div></div><div><p class="pubdate">July, 2006</p></div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="preface"><a href="pr01.html">About the Cover Artwork</a></span></dt><dt><span class="preface"><a href="pr02.html">Acknowledgments</a></span></dt><dt><span class="preface"><a href="pr03.html">Foreword</a></span></dt><dd><dl><dt><span class="sect1"><a href="pr03.html#id280658">By John M. Weathersby, Executive Director, OSSI</a></span></dt></dl></dd><dt><span class="preface"><a href="preface.html">Preface</a></span></dt><dd><dl><dt><span class="sect1"><a href="preface.html#id280788">Why Is This Book Necessary?</a></span></dt><dd><dl><dt><span class="sect2"><a href="preface.html#id280825">Samba 3.0.20 Update Edition</a></span></dt></dl></dd><dt><span class="sect1"><a href="preface.html#id280643">Prerequisites</a></span></dt><dt><span class="sect1"><a href="preface.html#id322292">Approach</a></span></dt><dt><span class="sect1"><a href="preface.html#id322341">Summary of Topics</a></span></dt><dt><span class="sect1"><a href="preface.html#id322920">Conventions Used</a></span></dt></dl></dd><dt><span class="part"><a href="ExNetworks.html">I. Example Network Configurations</a></span></dt><dd><dl><dt><span class="chapter"><a href="simple.html">1. No-Frills Samba Servers</a></span></dt><dd><dl><dt><span class="sect1"><a href="simple.html#id323089">Introduction</a></span></dt><dt><span class="sect1"><a href="simple.html#id323120">Assignment Tasks</a></span></dt><dd><dl><dt><span class="sect2"><a href="simple.html#id323158">Drafting Office</a></span></dt><dt><span class="sect2"><a href="simple.html#id323803">Charity Administration Office</a></span></dt><dt><span class="sect2"><a href="simple.html#AccountingOffice">Accounting Office</a></span></dt></dl></dd><dt><span class="sect1"><a href="simple.html#id326925">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="small.html">2. Small Office Networking</a></span></dt><dd><dl><dt><span class="sect1"><a href="small.html#id327308">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327326">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327371">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327416">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id327588">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327606">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id329058">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id329633">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id329652">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id329716">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="secure.html">3. Secure Office Networking</a></span></dt><dd><dl><dt><span class="sect1"><a href="secure.html#id330143">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#id330177">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id330386">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#id330398">Technical Issues</a></span></dt><dt><span class="sect2"><a href="secure.html#id330742">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id330776">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#ch4bsc">Basic System Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#id331530">Samba Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4ptrcfg">Printer Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#procstart">Process Startup Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4valid">Validation</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4appscfg">Application Share Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4wincfg">Windows Client Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#id335513">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id335566">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="Big500users.html">4. The 500-User Office</a></span></dt><dd><dl><dt><span class="sect1"><a href="Big500users.html#id336007">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#id336038">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id336113">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#id336141">Technical Issues</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id336318">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id336338">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="Big500users.html#ch5-dnshcp-setup">Installation of DHCP, DNS, and Samba Control Files</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id337052">Server Preparation: All Servers</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id337568">Server-Specific Preparation</a></span></dt><dt><span class="sect2"><a href="Big500users.html#ch5-procstart">Process Startup Configuration</a></span></dt><dt><span class="sect2"><a href="Big500users.html#ch5wincfg">Windows Client Configuration</a></span></dt><dt><span class="sect2"><a href="Big500users.html#id340544">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="Big500users.html#id340597">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="happy.html">5. Making Happy Users</a></span></dt><dd><dl><dt><span class="sect1"><a href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a></span></dt><dt><span class="sect1"><a href="happy.html#id341463">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id341540">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id341668">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id342070">Technical Issues</a></span></dt><dt><span class="sect2"><a href="happy.html#id343725">Political Issues</a></span></dt><dt><span class="sect2"><a href="happy.html#id343737">Installation Checklist</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id343908">Samba Server Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a></span></dt><dt><span class="sect2"><a href="happy.html#sbeidealx">Install and Configure Idealx smbldap-tools Scripts</a></span></dt><dt><span class="sect2"><a href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></span></dt><dt><span class="sect2"><a href="happy.html#sbehap-ptrcfg">Printer Configuration</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a></span></dt><dt><span class="sect1"><a href="happy.html#id350178">Miscellaneous Server Preparation Tasks</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#id350194">Configuring Directory Share Point Roots</a></span></dt><dt><span class="sect2"><a href="happy.html#id350283">Configuring Profile Directories</a></span></dt><dt><span class="sect2"><a href="happy.html#id350512">Preparation of Logon Scripts</a></span></dt><dt><span class="sect2"><a href="happy.html#id350609">Assigning User Rights and Privileges</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id350723">Windows Client Configuration</a></span></dt><dd><dl><dt><span class="sect2"><a href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></span></dt><dt><span class="sect2"><a href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></span></dt><dt><span class="sect2"><a href="happy.html#id351724">Configure Delete Cached Profiles on Logout</a></span></dt><dt><span class="sect2"><a href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></span></dt><dt><span class="sect2"><a href="happy.html#id352365">Software Installation</a></span></dt><dt><span class="sect2"><a href="happy.html#id352391">Roll-out Image Creation</a></span></dt></dl></dd><dt><span class="sect1"><a href="happy.html#id352420">Key Points Learned</a></span></dt><dt><span class="sect1"><a href="happy.html#id352508">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="net2000users.html">6. A Distributed 2000-User Network</a></span></dt><dd><dl><dt><span class="sect1"><a href="net2000users.html#id352846">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id352871">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id352928">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id353175">Technical Issues</a></span></dt><dt><span class="sect2"><a href="net2000users.html#id353997">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id354011">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id357027">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id357166">Questions and Answers</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="DMSMig.html">II. Domain Members, Updating Samba and Migration</a></span></dt><dd><dl><dt><span class="chapter"><a href="unixclients.html">7. Adding Domain Member Servers and Clients</a></span></dt><dd><dl><dt><span class="sect1"><a href="unixclients.html#id357946">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#id357994">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id358022">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#id358046">Technical Issues</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id358646">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id358731">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></span></dt><dt><span class="sect2"><a href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></span></dt><dt><span class="sect2"><a href="unixclients.html#dcwonss">NT4/Samba Domain with Samba Domain Member Server without NSS Support</a></span></dt><dt><span class="sect2"><a href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id365002">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id365047">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="upgrades.html">8. Updating Samba-3</a></span></dt><dd><dl><dt><span class="sect1"><a href="upgrades.html#id366117">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#id366200">Cautions and Notes</a></span></dt></dl></dd><dt><span class="sect1"><a href="upgrades.html#id367413">Upgrading from Samba 1.x and 2.x to Samba-3</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368069">Samba-2.x with LDAP Support</a></span></dt></dl></dd><dt><span class="sect1"><a href="upgrades.html#id368184">Updating a Samba-3 Installation</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#id368281">Samba-3 to Samba-3 Updates on the Same Server</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368465">Migrating Samba-3 to a New Server</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368842">Migration of Samba Accounts to Active Directory</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="ntmigration.html">9. Migrating NT4 Domain to Samba-3</a></span></dt><dd><dl><dt><span class="sect1"><a href="ntmigration.html#id368988">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369064">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id369115">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369276">Technical Issues</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id369580">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id369600">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id372263">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id372297">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="nw4migration.html">10. Migrating NetWare Server to Samba-3</a></span></dt><dd><dl><dt><span class="sect1"><a href="nw4migration.html#id373183">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373282">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="nw4migration.html#id373359">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373431">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="nw4migration.html#id373599">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373608">NetWare Migration Using LDAP Backend</a></span></dt></dl></dd></dl></dd></dl></dd><dt><span class="part"><a href="RefSection.html">III. Reference Section</a></span></dt><dd><dl><dt><span class="chapter"><a href="kerberos.html">11. Active Directory, Kerberos, and Security</a></span></dt><dd><dl><dt><span class="sect1"><a href="kerberos.html#id377126">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id377710">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#id377723">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id378089">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#ch10expl">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id379573">Share Access Controls</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id379908">Share Definition Controls</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id380465">Share Point Directory and File Permissions</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id380830">Managing Windows 200x ACLs</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id381514">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#id381636">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="DomApps.html">12. Integrating Additional Services</a></span></dt><dd><dl><dt><span class="sect1"><a href="DomApps.html#id382225">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#id382248">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id382338">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#id382367">Technical Issues</a></span></dt><dt><span class="sect2"><a href="DomApps.html#id382513">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id382530">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></span></dt><dt><span class="sect2"><a href="DomApps.html#id384281">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="DomApps.html#id384336">Questions and Answers</a></span></dt></dl></dd><dt><span class="chapter"><a href="HA.html">13. Performance, Reliability, and Availability</a></span></dt><dd><dl><dt><span class="sect1"><a href="HA.html#id384815">Introduction</a></span></dt><dt><span class="sect1"><a href="HA.html#id384892">Dissection and Discussion</a></span></dt><dt><span class="sect1"><a href="HA.html#id385344">Guidelines for Reliable Samba Operation</a></span></dt><dd><dl><dt><span class="sect2"><a href="HA.html#id385369">Name Resolution</a></span></dt><dt><span class="sect2"><a href="HA.html#id385810">Samba Configuration</a></span></dt><dt><span class="sect2"><a href="HA.html#id386110">Use and Location of BDCs</a></span></dt><dt><span class="sect2"><a href="HA.html#id386178">Use One Consistent Version of MS Windows Client</a></span></dt><dt><span class="sect2"><a href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></span></dt><dt><span class="sect2"><a href="HA.html#id386240">Distribute Network Load with MSDFS</a></span></dt><dt><span class="sect2"><a href="HA.html#id386291">Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</a></span></dt><dt><span class="sect2"><a href="HA.html#id386332">Hardware Problems</a></span></dt><dt><span class="sect2"><a href="HA.html#id386465">Large Directories</a></span></dt></dl></dd><dt><span class="sect1"><a href="HA.html#id386548">Key Points Learned</a></span></dt></dl></dd><dt><span class="chapter"><a href="ch14.html">14. Samba Support</a></span></dt><dd><dl><dt><span class="sect1"><a href="ch14.html#id386696">Free Support</a></span></dt><dt><span class="sect1"><a href="ch14.html#id386894">Commercial Support</a></span></dt></dl></dd><dt><span class="chapter"><a href="appendix.html">15. A Collection of Useful Tidbits</a></span></dt><dd><dl><dt><span class="sect1"><a href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></span></dt><dt><span class="sect1"><a href="appendix.html#id387559">Samba System File Location</a></span></dt><dt><span class="sect1"><a href="appendix.html#id387952">Starting Samba</a></span></dt><dt><span class="sect1"><a href="appendix.html#id388254">DNS Configuration Files</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id388264">The Forward Zone File for the Loopback Adaptor</a></span></dt><dt><span class="sect2"><a href="appendix.html#id388308">The Reverse Zone File for the Loopback Adaptor</a></span></dt><dt><span class="sect2"><a href="appendix.html#id388408">DNS Root Server Hint File</a></span></dt></dl></dd><dt><span class="sect1"><a href="appendix.html#altldapcfg">Alternative LDAP Database Initialization</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id388463">Initialization of the LDAP Database</a></span></dt></dl></dd><dt><span class="sect1"><a href="appendix.html#id388919">The LDAP Account Manager</a></span></dt><dt><span class="sect1"><a href="appendix.html#id389839">IDEALX Management Console</a></span></dt><dt><span class="sect1"><a href="appendix.html#ch12-SUIDSGID">Effect of Setting File and Directory SUID/SGID Permissions Explained</a></span></dt><dt><span class="sect1"><a href="appendix.html#ch12dblck">Shared Data Integrity</a></span></dt><dd><dl><dt><span class="sect2"><a href="appendix.html#id390270">Microsoft Access</a></span></dt><dt><span class="sect2"><a href="appendix.html#id390409">Act! Database Sharing</a></span></dt><dt><span class="sect2"><a href="appendix.html#id390484">Opportunistic Locking Controls</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="primer.html">16. Networking Primer</a></span></dt><dd><dl><dt><span class="sect1"><a href="primer.html#id390627">Requirements and Notes</a></span></dt><dt><span class="sect1"><a href="primer.html#id390763">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id390813">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#id390920">Exercises</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id391033">Single-Machine Broadcast Activity</a></span></dt><dt><span class="sect2"><a href="primer.html#secondmachine">Second Machine Startup Broadcast Interaction</a></span></dt><dt><span class="sect2"><a href="primer.html#id392130">Simple Windows Client Connection Characteristics</a></span></dt><dt><span class="sect2"><a href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></span></dt><dt><span class="sect2"><a href="primer.html#id393121">Conclusions to Exercises</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#chap01conc">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id393223">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#chap01qa">Questions and Answers</a></span></dt></dl></dd><dt><span class="appendix"><a href="apa.html">A. - <acronym class="acronym">GNU</acronym> General Public License version 3 - </a></span></dt><dd><dl><dt><span class="bridgehead"><a href="apa.html#id393828">A. - Preamble - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id393937">A. - TERMS AND CONDITIONS - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id393940">A. - 0. Definitions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394004">A. - 1. Source Code. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394066">A. - 2. Basic Permissions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394094">A. - 3. Protecting Users’ Legal Rights From Anti-Circumvention Law. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394116">A. - 4. Conveying Verbatim Copies. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394135">A. - 5. Conveying Modified Source Versions. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394207">A. - 6. Conveying Non-Source Forms. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394339">A. - 7. Additional Terms. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394444">A. - 8. Termination. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394476">A. - 9. Acceptance Not Required for Having Copies. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394495">A. - 10. Automatic Licensing of Downstream Recipients. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394529">A. - 11. Patents. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394618">A. - 12. No Surrender of Others’ Freedom. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394633">A. - 13. Use with the ???TITLE??? Affero General Public License. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394657">A. - 14. Revised Versions of this License. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394704">A. - 15. Disclaimer of Warranty. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394722">A. - 16. Limitation of Liability. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394736">A. - 17. Interpretation of Sections 15 and 16. - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394749">A. - END OF TERMS AND CONDITIONS - </a></span></dt><dt><span class="bridgehead"><a href="apa.html#id394752">A. - How to Apply These Terms to Your New Programs - </a></span></dt></dl></dd></dl></dd><dt><span class="glossary"><a href="go01.html">Glossary</a></span></dt><dt><span class="index"><a href="ix01.html">Index</a></span></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>1.1. <a href="simple.html#charitynet">Charity Administration Office Network</a></dt><dt>1.2. <a href="simple.html#acctingnet2">Accounting Office Network Topology</a></dt><dt>2.1. <a href="small.html#acct2net">Abmas Accounting 52-User Network Topology</a></dt><dt>3.1. <a href="secure.html#ch04net">Abmas Network Topology 130 Users</a></dt><dt>4.1. <a href="Big500users.html#chap05net">Network Topology 500 User Network Using tdbsam passdb backend.</a></dt><dt>5.1. <a href="happy.html#sbehap-LDAPdiag">The Interaction of LDAP, UNIX Posix Accounts and Samba Accounts</a></dt><dt>5.2. <a href="happy.html#chap6net">Network Topology 500 User Network Using ldapsam passdb backend</a></dt><dt>5.3. <a href="happy.html#XP-screen001">Windows XP Professional User Shared Folders</a></dt><dt>6.1. <a href="net2000users.html#chap7idres">Samba and Authentication Backend Search Pathways</a></dt><dt>6.2. <a href="net2000users.html#ch7singleLDAP">Samba Configuration to Use a Single LDAP Server</a></dt><dt>6.3. <a href="net2000users.html#ch7dualLDAP">Samba Configuration to Use a Dual (Fail-over) LDAP Server</a></dt><dt>6.4. <a href="net2000users.html#ch7dualadd">Samba Configuration to Use Dual LDAP Databases - Broken - Do Not Use!</a></dt><dt>6.5. <a href="net2000users.html#ch7dualok">Samba Configuration to Use Two LDAP Databases - The result is additive.</a></dt><dt>6.6. <a href="net2000users.html#chap7net">Network Topology 2000 User Complex Design A</a></dt><dt>6.7. <a href="net2000users.html#chap7net2">Network Topology 2000 User Complex Design B</a></dt><dt>7.1. <a href="unixclients.html#ch09openmag">Open Magazine Samba Survey</a></dt><dt>7.2. <a href="unixclients.html#ch9-sambadc">Samba Domain: Samba Member Server</a></dt><dt>7.3. <a href="unixclients.html#ch9-adsdc">Active Directory Domain: Samba Member Server</a></dt><dt>9.1. <a href="ntmigration.html#ch8-migration">Schematic Explaining the <code class="literal">net rpc vampire</code> Process</a></dt><dt>9.2. <a href="ntmigration.html#NT4DUM">View of Accounts in NT4 Domain User Manager</a></dt><dt>15.1. <a href="appendix.html#swxpp001">The General Panel.</a></dt><dt>15.2. <a href="appendix.html#swxpp004">The Computer Name Panel.</a></dt><dt>15.3. <a href="appendix.html#swxpp006">The Computer Name Changes Panel</a></dt><dt>15.4. <a href="appendix.html#swxpp007">The Computer Name Changes Panel Domain MIDEARTH</a></dt><dt>15.5. <a href="appendix.html#swxpp008">Computer Name Changes User name and Password Panel</a></dt><dt>15.6. <a href="appendix.html#lam-login">The LDAP Account Manager Login Screen</a></dt><dt>15.7. <a href="appendix.html#lam-config">The LDAP Account Manager Configuration Screen</a></dt><dt>15.8. <a href="appendix.html#lam-user">The LDAP Account Manager User Edit Screen</a></dt><dt>15.9. <a href="appendix.html#lam-group">The LDAP Account Manager Group Edit Screen</a></dt><dt>15.10. <a href="appendix.html#lam-group-mem">The LDAP Account Manager Group Membership Edit Screen</a></dt><dt>15.11. <a href="appendix.html#lam-host">The LDAP Account Manager Host Edit Screen</a></dt><dt>15.12. <a href="appendix.html#imcidealx">The IMC Samba User Account Screen</a></dt><dt>16.1. <a href="primer.html#pktcap01">Windows Me Broadcasts The First 10 Minutes</a></dt><dt>16.2. <a href="primer.html#pktcap02">Windows Me Later Broadcast Sample</a></dt><dt>16.3. <a href="primer.html#hostannounce">Typical Windows 9x/Me Host Announcement</a></dt><dt>16.4. <a href="primer.html#nullconnect">Typical Windows 9x/Me NULL SessionSetUp AndX Request</a></dt><dt>16.5. <a href="primer.html#userconnect">Typical Windows 9x/Me User SessionSetUp AndX Request</a></dt><dt>16.6. <a href="primer.html#XPCap01">Typical Windows XP NULL Session Setup AndX Request</a></dt><dt>16.7. <a href="primer.html#XPCap02">Typical Windows XP User Session Setup AndX Request</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>1. <a href="preface.html#pref-new">Samba Changes 3.0.2 to 3.0.20</a></dt><dt>1.1. <a href="simple.html#acctingnet">Accounting Office Network Information</a></dt><dt>3.1. <a href="secure.html#chap4netid">Abmas.US ISP Information</a></dt><dt>3.2. <a href="secure.html#namedrscfiles">DNS (named) Resource Files</a></dt><dt>4.1. <a href="Big500users.html#ch5-filelocations">Domain: <code class="constant">MEGANET</code>, File Locations for Servers</a></dt><dt>5.1. <a href="happy.html#sbehap-privs">Current Privilege Capabilities</a></dt><dt>5.2. <a href="happy.html#oldapreq">Required OpenLDAP Linux Packages</a></dt><dt>5.3. <a href="happy.html#sbehap-bigacct">Abmas Network Users and Groups</a></dt><dt>5.4. <a href="happy.html#proffold">Default Profile Redirections</a></dt><dt>9.1. <a href="ntmigration.html#ch8-vampire">Samba <code class="filename">smb.conf</code> Scripts Essential to Samba Operation</a></dt><dt>13.1. <a href="HA.html#ProbList">Effect of Common Problems</a></dt><dt>16.1. <a href="primer.html#capsstats01">Windows Me Startup Broadcast Capture Statistics</a></dt><dt>16.2. <a href="primer.html#capsstats02">Second Machine (Windows 98) Capture Statistics</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>1.1. <a href="simple.html#draft-smbconf">Drafting Office <code class="filename">smb.conf</code> File</a></dt><dt>1.2. <a href="simple.html#charity-smbconfnew">Charity Administration Office <code class="filename">smb.conf</code> New-style File</a></dt><dt>1.3. <a href="simple.html#charity-smbconf">Charity Administration Office <code class="filename">smb.conf</code> Old-style File</a></dt><dt>1.4. <a href="simple.html#MEreg">Windows Me Registry Edit File: Disable Password Caching</a></dt><dt>1.5. <a href="simple.html#acctconf">Accounting Office Network <code class="filename">smb.conf</code> Old Style Configuration File</a></dt><dt>2.1. <a href="small.html#initGrps">Script to Map Windows NT Groups to UNIX Groups</a></dt><dt>2.2. <a href="small.html#dhcp01">Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></a></dt><dt>2.3. <a href="small.html#acct2conf">Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</a></dt><dt>2.4. <a href="small.html#acct3conf">Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</a></dt><dt>3.1. <a href="secure.html#ch4memoryest">Estimation of Memory Requirements</a></dt><dt>3.2. <a href="secure.html#ch4diskest">Estimation of Disk Storage Requirements</a></dt><dt>3.3. <a href="secure.html#ch4natfw">NAT Firewall Configuration Script</a></dt><dt>3.4. <a href="secure.html#promisnet">130 User Network with <span class="emphasis"><em>tdbsam</em></span> [globals] Section</a></dt><dt>3.5. <a href="secure.html#promisnetsvca">130 User Network with <span class="emphasis"><em>tdbsam</em></span> Services Section Part A</a></dt><dt>3.6. <a href="secure.html#promisnetsvcb">130 User Network with <span class="emphasis"><em>tdbsam</em></span> Services Section Part B</a></dt><dt>3.7. <a href="secure.html#ch4initGrps">Script to Map Windows NT Groups to UNIX Groups</a></dt><dt>3.8. <a href="secure.html#prom-dhcp">DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></a></dt><dt>3.9. <a href="secure.html#ch4namedcfg">DNS Master Configuration File <code class="filename">/etc/named.conf</code> Master Section</a></dt><dt>3.10. <a href="secure.html#ch4namedvarfwd">DNS Master Configuration File <code class="filename">/etc/named.conf</code> Forward Lookup Definition Section</a></dt><dt>3.11. <a href="secure.html#ch4namedvarrev">DNS Master Configuration File <code class="filename">/etc/named.conf</code> Reverse Lookup Definition Section</a></dt><dt>3.12. <a href="secure.html#eth1zone">DNS 192.168.1 Reverse Zone File</a></dt><dt>3.13. <a href="secure.html#eth2zone">DNS 192.168.2 Reverse Zone File</a></dt><dt>3.14. <a href="secure.html#abmasbiz">DNS Abmas.biz Forward Zone File</a></dt><dt>3.15. <a href="secure.html#abmasus">DNS Abmas.us Forward Zone File</a></dt><dt>4.1. <a href="Big500users.html#ch5-massivesmb">Server: MASSIVE (PDC), File: <code class="filename">/etc/samba/smb.conf</code></a></dt><dt>4.2. <a href="Big500users.html#ch5-dc-common">Server: MASSIVE (PDC), File: <code class="filename">/etc/samba/dc-common.conf</code></a></dt><dt>4.3. <a href="Big500users.html#ch5-commonsmb">Common Samba Configuration File: <code class="filename">/etc/samba/common.conf</code></a></dt><dt>4.4. <a href="Big500users.html#ch5-bldg1-smb">Server: BLDG1 (Member), File: smb.conf</a></dt><dt>4.5. <a href="Big500users.html#ch5-bldg2-smb">Server: BLDG2 (Member), File: smb.conf</a></dt><dt>4.6. <a href="Big500users.html#ch5-dommem-smb">Common Domain Member Include File: dom-mem.conf</a></dt><dt>4.7. <a href="Big500users.html#massive-dhcp">Server: MASSIVE, File: dhcpd.conf</a></dt><dt>4.8. <a href="Big500users.html#bldg1dhcp">Server: BLDG1, File: dhcpd.conf</a></dt><dt>4.9. <a href="Big500users.html#bldg2dhcp">Server: BLDG2, File: dhcpd.conf</a></dt><dt>4.10. <a href="Big500users.html#massive-nameda">Server: MASSIVE, File: named.conf, Part: A</a></dt><dt>4.11. <a href="Big500users.html#massive-namedb">Server: MASSIVE, File: named.conf, Part: B</a></dt><dt>4.12. <a href="Big500users.html#massive-namedc">Server: MASSIVE, File: named.conf, Part: C</a></dt><dt>4.13. <a href="Big500users.html#abmasbizdns">Forward Zone File: abmas.biz.hosts</a></dt><dt>4.14. <a href="Big500users.html#abmasusdns">Forward Zone File: abmas.biz.hosts</a></dt><dt>4.15. <a href="Big500users.html#bldg12nameda">Servers: BLDG1/BLDG2, File: named.conf, Part: A</a></dt><dt>4.16. <a href="Big500users.html#bldg12namedb">Servers: BLDG1/BLDG2, File: named.conf, Part: B</a></dt><dt>4.17. <a href="Big500users.html#ch5-initgrps">Initialize Groups Script, File: /etc/samba/initGrps.sh</a></dt><dt>5.1. <a href="happy.html#sbehap-dbconf">LDAP DB_CONFIG File</a></dt><dt>5.2. <a href="happy.html#sbehap-slapdconf">LDAP Master Configuration File <code class="filename">/etc/openldap/slapd.conf</code> Part A</a></dt><dt>5.3. <a href="happy.html#sbehap-slapdconf2">LDAP Master Configuration File <code class="filename">/etc/openldap/slapd.conf</code> Part B</a></dt><dt>5.4. <a href="happy.html#sbehap-nss01">Configuration File for NSS LDAP Support <code class="filename">/etc/ldap.conf</code></a></dt><dt>5.5. <a href="happy.html#sbehap-nss02">Configuration File for NSS LDAP Clients Support <code class="filename">/etc/ldap.conf</code></a></dt><dt>5.6. <a href="happy.html#sbehap-massive-smbconfa">LDAP Based <code class="filename">smb.conf</code> File, Server: MASSIVE global Section: Part A</a></dt><dt>5.7. <a href="happy.html#sbehap-massive-smbconfb">LDAP Based <code class="filename">smb.conf</code> File, Server: MASSIVE global Section: Part B</a></dt><dt>5.8. <a href="happy.html#sbehap-bldg1-smbconf">LDAP Based <code class="filename">smb.conf</code> File, Server: BLDG1</a></dt><dt>5.9. <a href="happy.html#sbehap-bldg2-smbconf">LDAP Based <code class="filename">smb.conf</code> File, Server: BLDG2</a></dt><dt>5.10. <a href="happy.html#sbehap-shareconfa">LDAP Based <code class="filename">smb.conf</code> File, Shares Section Part A</a></dt><dt>5.11. <a href="happy.html#sbehap-shareconfb">LDAP Based <code class="filename">smb.conf</code> File, Shares Section Part B</a></dt><dt>5.12. <a href="happy.html#sbehap-ldifadd">LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF</a></dt><dt>6.1. <a href="net2000users.html#ch7-LDAP-master">LDAP Master Server Configuration File <code class="filename">/etc/openldap/slapd.conf</code></a></dt><dt>6.2. <a href="net2000users.html#ch7-LDAP-slave">LDAP Slave Configuration File <code class="filename">/etc/openldap/slapd.conf</code></a></dt><dt>6.3. <a href="net2000users.html#ch7-massmbconfA">Primary Domain Controller <code class="filename">smb.conf</code> File Part A</a></dt><dt>6.4. <a href="net2000users.html#ch7-massmbconfB">Primary Domain Controller <code class="filename">smb.conf</code> File Part B</a></dt><dt>6.5. <a href="net2000users.html#ch7-massmbconfC">Primary Domain Controller <code class="filename">smb.conf</code> File Part C</a></dt><dt>6.6. <a href="net2000users.html#ch7-slvsmbocnfA">Backup Domain Controller <code class="filename">smb.conf</code> File Part A</a></dt><dt>6.7. <a href="net2000users.html#ch7-slvsmbocnfB">Backup Domain Controller <code class="filename">smb.conf</code> File Part B</a></dt><dt>7.1. <a href="unixclients.html#ch9-sdmsdc">Samba Domain Member in Samba Domain Using LDAP <code class="filename">smb.conf</code> File</a></dt><dt>7.2. <a href="unixclients.html#ch9-ldifadd">LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF</a></dt><dt>7.3. <a href="unixclients.html#ch9-sdmlcnf">Configuration File for NSS LDAP Support <code class="filename">/etc/ldap.conf</code></a></dt><dt>7.4. <a href="unixclients.html#ch9-sdmnss">NSS using LDAP for Identity Resolution File: <code class="filename">/etc/nsswitch.conf</code></a></dt><dt>7.5. <a href="unixclients.html#ch0-NT4DSDM">Samba Domain Member Server Using Winbind <code class="filename">smb.conf</code> File for NT4 Domain</a></dt><dt>7.6. <a href="unixclients.html#ch0-NT4DSCM">Samba Domain Member Server Using Local Accounts <code class="filename">smb.conf</code> File for NT4 Domain</a></dt><dt>7.7. <a href="unixclients.html#ch9-adssdm">Samba Domain Member <code class="filename">smb.conf</code> File for Active Directory Membership</a></dt><dt>7.8. <a href="unixclients.html#sbe-idmapridex">Example <code class="filename">smb.conf</code> File Using <code class="constant">idmap_rid</code></a></dt><dt>7.9. <a href="unixclients.html#sbeunxa">Typical ADS Style Domain <code class="filename">smb.conf</code> File</a></dt><dt>7.10. <a href="unixclients.html#sbewinbindex">ADS Membership Using RFC2307bis Identity Resolution <code class="filename">smb.conf</code> File</a></dt><dt>7.11. <a href="unixclients.html#ch9-pamwnbdlogin">SUSE: PAM <code class="filename">login</code> Module Using Winbind</a></dt><dt>7.12. <a href="unixclients.html#ch9-pamwbndxdm">SUSE: PAM <code class="filename">xdm</code> Module Using Winbind</a></dt><dt>7.13. <a href="unixclients.html#ch9-rhsysauth">Red Hat 9: PAM System Authentication File: <code class="filename">/etc/pam.d/system-auth</code> Module Using Winbind</a></dt><dt>9.1. <a href="ntmigration.html#sbent4smb">NT4 Migration Samba-3 Server <code class="filename">smb.conf</code> Part: A</a></dt><dt>9.2. <a href="ntmigration.html#sbent4smb2">NT4 Migration Samba-3 Server <code class="filename">smb.conf</code> Part: B</a></dt><dt>9.3. <a href="ntmigration.html#sbentslapd">NT4 Migration LDAP Server Configuration File: <code class="filename">/etc/openldap/slapd.conf</code> Part A</a></dt><dt>9.4. <a href="ntmigration.html#sbentslapd2">NT4 Migration LDAP Server Configuration File: <code class="filename">/etc/openldap/slapd.conf</code> Part B</a></dt><dt>9.5. <a href="ntmigration.html#sbrntldapconf">NT4 Migration NSS LDAP File: <code class="filename">/etc/ldap.conf</code></a></dt><dt>9.6. <a href="ntmigration.html#sbentnss">NT4 Migration NSS Control File: <code class="filename">/etc/nsswitch.conf</code> (Stage:1)</a></dt><dt>9.7. <a href="ntmigration.html#sbentnss2">NT4 Migration NSS Control File: <code class="filename">/etc/nsswitch.conf</code> (Stage:2)</a></dt><dt>10.1. <a href="nw4migration.html#sbeamg">A Rough Tool to Create an LDIF File from the System Account Files</a></dt><dt>10.2. <a href="nw4migration.html#ch8ldap">NSS LDAP Control File /etc/ldap.conf</a></dt><dt>10.3. <a href="nw4migration.html#sbepu2">The PAM Control File <code class="filename">/etc/security/pam_unix2.conf</code></a></dt><dt>10.4. <a href="nw4migration.html#ch8smbconf">Samba Configuration File smb.conf Part A</a></dt><dt>10.5. <a href="nw4migration.html#ch8smbconf2">Samba Configuration File smb.conf Part B</a></dt><dt>10.6. <a href="nw4migration.html#ch8smbconf3">Samba Configuration File smb.conf Part C</a></dt><dt>10.7. <a href="nw4migration.html#ch8smbconf4">Samba Configuration File smb.conf Part D</a></dt><dt>10.8. <a href="nw4migration.html#ch8smbconf5">Samba Configuration File smb.conf Part E</a></dt><dt>10.9. <a href="nw4migration.html#sbersync">Rsync Script</a></dt><dt>10.10. <a href="nw4migration.html#sbexcld">Rsync Files Exclusion List <code class="filename">/root/excludes.txt</code></a></dt><dt>10.11. <a href="nw4migration.html#ch8ideal">Idealx smbldap-tools Control File Part A</a></dt><dt>10.12. <a href="nw4migration.html#ch8ideal2">Idealx smbldap-tools Control File Part B</a></dt><dt>10.13. <a href="nw4migration.html#ch8ideal3">Idealx smbldap-tools Control File Part C</a></dt><dt>10.14. <a href="nw4migration.html#ch8ideal4">Idealx smbldap-tools Control File Part D</a></dt><dt>10.15. <a href="nw4migration.html#ch8kix">Kixtart Control File File: logon.kix</a></dt><dt>10.16. <a href="nw4migration.html#ch8kix2">Kixtart Control File File: main.kix</a></dt><dt>10.17. <a href="nw4migration.html#ch8kix3">Kixtart Control File File: setup.kix, Part A</a></dt><dt>10.18. <a href="nw4migration.html#ch8kix3b">Kixtart Control File File: setup.kix, Part B</a></dt><dt>10.19. <a href="nw4migration.html#ch8kix4">Kixtart Control File File: acct.kix</a></dt><dt>12.1. <a href="DomApps.html#ch10-krb5conf">Kerberos Configuration File: <code class="filename">/etc/krb5.conf</code></a></dt><dt>12.2. <a href="DomApps.html#ch10-smbconf">Samba Configuration File: <code class="filename">/etc/samba/smb.conf</code></a></dt><dt>12.3. <a href="DomApps.html#ch10-etcnsscfg">NSS Configuration File Extract File: <code class="filename">/etc/nsswitch.conf</code></a></dt><dt>12.4. <a href="DomApps.html#etcsquidcfg">Squid Configuration File Extract <code class="filename">/etc/squid.conf</code> [ADMINISTRATIVE PARAMETERS Section]</a></dt><dt>12.5. <a href="DomApps.html#etcsquid2">Squid Configuration File extract File: <code class="filename">/etc/squid.conf</code> [AUTHENTICATION PARAMETERS Section]</a></dt><dt>15.1. <a href="appendix.html#ch12SL">A Useful Samba Control Script for SUSE Linux</a></dt><dt>15.2. <a href="appendix.html#ch12RHscript">A Sample Samba Control Script for Red Hat Linux</a></dt><dt>15.3. <a href="appendix.html#loopback">DNS Localhost Forward Zone File: <code class="filename">/var/lib/named/localhost.zone</code></a></dt><dt>15.4. <a href="appendix.html#dnsloopy">DNS Localhost Reverse Zone File: <code class="filename">/var/lib/named/127.0.0.zone</code></a></dt><dt>15.5. <a href="appendix.html#roothint">DNS Root Name Server Hint File: <code class="filename">/var/lib/named/root.hint</code></a></dt><dt>15.6. <a href="appendix.html#sbehap-ldapreconfa">LDAP Pre-configuration Script: <code class="filename">SMBLDAP-ldif-preconfig.sh</code> Part A</a></dt><dt>15.7. <a href="appendix.html#sbehap-ldapreconfb">LDAP Pre-configuration Script: <code class="filename">SMBLDAP-ldif-preconfig.sh</code> Part B</a></dt><dt>15.8. <a href="appendix.html#sbehap-ldapreconfc">LDAP Pre-configuration Script: <code class="filename">SMBLDAP-ldif-preconfig.sh</code> Part C</a></dt><dt>15.9. <a href="appendix.html#sbehap-ldifpata">LDIF Pattern File Used to Pre-configure LDAP Part A</a></dt><dt>15.10. <a href="appendix.html#sbehap-ldifpatb">LDIF Pattern File Used to Pre-configure LDAP Part B</a></dt><dt>15.11. <a href="appendix.html#lamcfg">Example LAM Configuration File <code class="filename">config.cfg</code></a></dt><dt>15.12. <a href="appendix.html#lamconf">LAM Profile Control File <code class="filename">lam.conf</code></a></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="pr01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"> </td><td width="20%" align="center"> </td><td width="40%" align="right" valign="top"> About the Cover Artwork</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/ix01.html b/docs/htmldocs/Samba3-ByExample/ix01.html deleted file mode 100644 index 9189c4fbe5..0000000000 --- a/docs/htmldocs/Samba3-ByExample/ix01.html +++ /dev/null @@ -1 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Index</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="go01.html" title="Glossary"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Index</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="go01.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> </td></tr></table><hr></div><div class="index" title="Index"><div class="titlepage"><div><div><h2 class="title"><a name="id395334"></a>Index</h2></div></div></div><div class="index"><div class="indexdiv"><h3>Symbols</h3><dl><dt>%LOGONSERVER%, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>%USERNAME%, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a>, <a class="indexterm" href="happy.html#id342818">Profile Changes</a></dt><dt>%USERPROFILE%, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>/data/ldap, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>/etc/cups/mime.convs, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a></dt><dt>/etc/cups/mime.types, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a></dt><dt>/etc/dhcpd.conf, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>/etc/exports, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a></dt><dt>/etc/group, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>/etc/hosts, <a class="indexterm" href="simple.html#id323262">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>/etc/krb5.conf, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>/etc/ldap.conf, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a>, <a class="indexterm" href="unixclients.html#id364188">IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>/etc/mime.convs, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>/etc/mime.types, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>/etc/named.conf, <a class="indexterm" href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a></dt><dt>/etc/nsswitch.conf, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a>, <a class="indexterm" href="Big500users.html#ch5-domsvrspec">Configuration Specific to Domain Member Servers: BLDG1, BLDG2</a>, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="unixclients.html#id364188">IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>/etc/openldap/slapd.conf, <a class="indexterm" href="happy.html#id343291">Debugging LDAP</a>, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>/etc/passwd, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a>, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a>, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a>, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a></dt><dt>/etc/rc.d/boot.local, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt><dt>/etc/rc.d/rc.local, <a class="indexterm" href="small.html#id327606">Implementation</a></dt><dt>/etc/resolv.conf, <a class="indexterm" href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a></dt><dt>/etc/samba, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/etc/samba/secrets.tdb, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>/etc/samba/smbusers, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a></dt><dt>/etc/shadow, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a></dt><dt>/etc/squid/squid.conf, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>/etc/syslog.conf, <a class="indexterm" href="happy.html#id343291">Debugging LDAP</a></dt><dt>/etc/xinetd.d, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a>, <a class="indexterm" href="Big500users.html#ch5-procstart">Process Startup Configuration</a></dt><dt>/lib/libnss_ldap.so.2, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></dt><dt>/opt/IDEALX/sbin, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>/proc/sys/net/ipv4/ip_forward, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a></dt><dt>/usr/bin, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/lib/samba, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/local, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/local/samba, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/local/samba/var/locks, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></dt><dt>/usr/sbin, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/share, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/share/samba/swat, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/usr/share/swat, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/var/cache/samba, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></dt><dt>/var/lib/samba, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a>, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>/var/log/ldaplogs, <a class="indexterm" href="happy.html#id343291">Debugging LDAP</a></dt><dt>/var/log/samba, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>8-bit, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt></dl></div><div class="indexdiv"><h3></h3><dl><dt>, <a class="indexterm" href="simple.html#id323262">Implementation</a>, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="secure.html#ch4appscfg">Application Share Configuration</a>, <a class="indexterm" href="Big500users.html#id336338">Implementation</a>, <a class="indexterm" href="happy.html#sbehap-ppc">Addition of Machines to the Domain</a>, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#dcwonss">NT4/Samba Domain with Samba Domain Member Server without NSS Support</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a>, <a class="indexterm" href="unixclients.html#id364188">IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</a>, <a class="indexterm" href="upgrades.html#sbeug1">Location of config files</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="DomApps.html#id383649">NSS Configuration</a></dt><dd><dl><dt>Domain account, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>liability, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>logon, <a class="indexterm" href="simple.html#id324064">Implementation</a></dt><dt>problem, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>transparent inter-operability, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>A</h3><dl><dt>abmas-netfw.sh, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a></dt><dt>accept, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a></dt><dt>accepts liability, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>access, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>access control, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a>, <a class="indexterm" href="kerberos.html#id380879">Using the MMC Computer Management Interface</a></dt><dt>Access Control Lists (see ACLs)</dt><dt>access control settings, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>access controls, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>accessible, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>account, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dd><dl><dt>ADS Domain, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></dd><dt>account credentials, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a></dt><dt>account information, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>account names, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>account policies, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>accountable, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>accounts</dt><dd><dl><dt>authoritative, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>Domain, <a class="indexterm" href="ntmigration.html#id368988">Introduction</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>group, <a class="indexterm" href="ntmigration.html#id368988">Introduction</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>machine, <a class="indexterm" href="ntmigration.html#id368988">Introduction</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>manage, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>user, <a class="indexterm" href="ntmigration.html#id368988">Introduction</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt></dl></dd><dt>ACL, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>ACLs, <a class="indexterm" href="happy.html#id352420">Key Points Learned</a>, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a>, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>acquisitions, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Act!, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>ACT! database, <a class="indexterm" href="appendix.html#id390409">Act! Database Sharing</a></dt><dt>Act!Diag, <a class="indexterm" href="appendix.html#id390409">Act! Database Sharing</a></dt><dt>Active Directory, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="happy.html#sbehap-locgrppol">The Local Group Policy</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#id357994">Assignment Tasks</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a>, <a class="indexterm" href="DomApps.html">Integrating Additional Services</a>, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt><dd><dl><dt>authentication, <a class="indexterm" href="DomApps.html#id383905">Squid Configuration</a></dt><dt>domain, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>join, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>management tools, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>realm, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>Replacement, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>server, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>Server, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>tree, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt></dl></dd><dt>active directory, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>AD printer publishing, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>ADAM, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a></dt><dt>add group script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>add machine script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>Add Printer Wizard</dt><dd><dl><dt>APW, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt></dl></dd><dt>add user script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>add user to group script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>adduser, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt><dt>adequate precautions, <a class="indexterm" href="upgrades.html#id366117">Introduction</a></dt><dt>administrative installation, <a class="indexterm" href="secure.html#ch4appscfg">Application Share Configuration</a></dt><dt>administrative rights, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>administrator, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a></dt><dt>ADMT, <a class="indexterm" href="upgrades.html#id368842">Migration of Samba Accounts to Active Directory</a></dt><dt>ADS, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dd><dl><dt>server, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></dd><dt>ADS Domain, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>affordability, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>alarm, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>algorithm, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>allow trusted domains, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>alternative, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>analysis, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>anonymous connection, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>Apache Web server, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>appliance mode, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>application server, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="secure.html#ch4appscfg">Application Share Configuration</a></dt><dt>application servers, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>application/octet-stream, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>APW, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>arp, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>assessment, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>assistance, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>assumptions, <a class="indexterm" href="HA.html#id386548">Key Points Learned</a></dt><dt>authconfig, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></dt><dt>authenticate, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>authenticated, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a></dt><dt>authenticated connection, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>authentication, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a>, <a class="indexterm" href="DomApps.html">Integrating Additional Services</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id383649">NSS Configuration</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dd><dl><dt>plain-text, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt></dl></dd><dt>authentication process, <a class="indexterm" href="unixclients.html#id358731">Implementation</a></dt><dt>authentication protocols, <a class="indexterm" href="DomApps.html#id384281">Key Points Learned</a></dt><dt>authoritative, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>authorized location, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>auto-generated SID, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>automatically allocate, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>availability, <a class="indexterm" href="HA.html">Performance, Reliability, and Availability</a></dt></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>backends, <a class="indexterm" href="DomApps.html">Integrating Additional Services</a></dt><dt>background communication, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>Backup, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Backup Domain Controller (see BDC)</dt><dt>bandwidth, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a></dt><dd><dl><dt>requirements, <a class="indexterm" href="net2000users.html#id353212">User Needs</a></dt></dl></dd><dt>bandwidth calculations, <a class="indexterm" href="secure.html#id330622">Hardware Requirements</a></dt><dt>BDC, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a>, <a class="indexterm" href="happy.html">Making Happy Users</a>, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a>, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="happy.html#id343908">Samba Server Implementation</a>, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="net2000users.html#id357027">Key Points Learned</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a>, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a></dt><dt>benefit, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>best practices, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>bias, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>binary database, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>binary files, <a class="indexterm" href="upgrades.html#id368184">Updating a Samba-3 Installation</a></dt><dt>binary package, <a class="indexterm" href="upgrades.html#id368184">Updating a Samba-3 Installation</a></dt><dt>bind interfaces only, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>broadcast, <a class="indexterm" href="HA.html#id385556">Routed Networks</a>, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dd><dl><dt>directed, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>mailslot, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt></dl></dd><dt>broadcast messages, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>broadcast storms, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>broken, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>broken behavior, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>browse, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>browse master, <a class="indexterm" href="primer.html#id391158">Findings</a></dt><dt>Browse Master, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dt>browse.dat, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a></dt><dt>Browser Election Service, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dt>browsing, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a>, <a class="indexterm" href="primer.html#id390813">Assignment Tasks</a></dt><dt>budgetted, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>bug fixes, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>bug report, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>cache, <a class="indexterm" href="appendix.html#id390484">Opportunistic Locking Controls</a></dt><dt>cache directories, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>caching, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>case-sensitive, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>centralized storage, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>character set, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt><dt>check samba daemons, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>check-point, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>check-point controls, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>Checkpoint Controls, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>chgrp, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>chkconfig, <a class="indexterm" href="simple.html#id323262">Implementation</a>, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a>, <a class="indexterm" href="Big500users.html#ch5-procstart">Process Startup Configuration</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>chmod, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>choice, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>chown, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>CIFS, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="primer.html#id391158">Findings</a></dt><dt>cifsfs, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>clean database, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>clients per DC, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>Clock skew, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>cluster, <a class="indexterm" href="HA.html#id384815">Introduction</a></dt><dt>clustering, <a class="indexterm" href="HA.html#id384815">Introduction</a>, <a class="indexterm" href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></dt><dt>code maintainer, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>codepage, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt><dt>collision rates, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>commercial, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>commercial software, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>commercial support, <a class="indexterm" href="ch14.html">Samba Support</a>, <a class="indexterm" href="ch14.html#id386894">Commercial Support</a></dt><dt>Common Internet File System (see CIFS)</dt><dt>comparison</dt><dd><dl><dt>Active Directory & OpenLDAP, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt></dl></dd><dt>compat, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>compatible, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>compile-time, <a class="indexterm" href="upgrades.html#sbeug1">Location of config files</a></dt><dt>complexities, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>compromise, <a class="indexterm" href="happy.html#id341463">Introduction</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>computer account, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>Computer Management, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>computer name, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>condemns, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>conferences, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>configuration files, <a class="indexterm" href="upgrades.html#id366117">Introduction</a></dt><dt>configure.pl, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>connection, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>connectivity, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>consequential risk, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>consultant, <a class="indexterm" href="simple.html#id323158">Drafting Office</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>consumer, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>consumer expects, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>contiguous directory, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>contributions, <a class="indexterm" href="upgrades.html">Updating Samba-3</a></dt><dt>control files, <a class="indexterm" href="upgrades.html#id368184">Updating a Samba-3 Installation</a></dt><dt>convmv, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt><dt>copy, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>corrective action, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>cost, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>cost-benefit, <a class="indexterm" href="nw4migration.html#id373282">Assignment Tasks</a></dt><dt>country of origin, <a class="indexterm" href="ch14.html#id386894">Commercial Support</a></dt><dt>Courier-IMAP, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>credential, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>credentials, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>crippled, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>criticism, <a class="indexterm" href="kerberos.html">Active Directory, Kerberos, and Security</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Critics, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>Cryptographic, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>CUPS, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="small.html#id327416">Technical Issues</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="small.html#id329652">Key Points Learned</a>, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a>, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dd><dl><dt>queue, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt></dl></dd><dt>cupsd, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a></dt><dt>customer expected, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>customers, <a class="indexterm" href="ch14.html">Samba Support</a></dt></dl></div><div class="indexdiv"><h3>D</h3><dl><dt>daemon, <a class="indexterm" href="simple.html#validate1">Validation</a>, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a>, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>daemon control, <a class="indexterm" href="Big500users.html#ch5-procstart">Process Startup Configuration</a></dt><dt>data</dt><dd><dl><dt>corruption, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>integrity, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt></dl></dd><dt>data corruption, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a>, <a class="indexterm" href="appendix.html#id390409">Act! Database Sharing</a></dt><dt>data integrity, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a>, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>data storage, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a></dt><dt>database, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a></dt><dt>database applications, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>DB_CONFIG, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>DCE, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>DDNS (see dynamic DNS)</dt><dt>Debian, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>default installation, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>default password, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>default profile, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt><dt>Default User, <a class="indexterm" href="happy.html#id342818">Profile Changes</a>, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>defective</dt><dd><dl><dt>cables, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>HUBs, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>switches, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt></dl></dd><dt>defects, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>defensible standards, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>defragmentation, <a class="indexterm" href="secure.html#ch4wincfg">Windows Client Configuration</a></dt><dt>delete group script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>delete user from group script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>delimiter, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>dependability, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>deployment, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>desired security setting, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>development, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>DHCP, <a class="indexterm" href="small.html#id327416">Technical Issues</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="small.html#id329652">Key Points Learned</a>, <a class="indexterm" href="secure.html#ch4wincfg">Windows Client Configuration</a>, <a class="indexterm" href="Big500users.html#ch5wincfg">Windows Client Configuration</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dd><dl><dt>client, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>relay, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a></dt><dt>Relay Agent, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>request, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>requests, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a></dt><dt>servers, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>traffic, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt></dl></dd><dt>dhcp client validation, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>DHCP Server, <a class="indexterm" href="small.html#id327606">Implementation</a></dt><dt>DHCP server, <a class="indexterm" href="secure.html#id330398">Technical Issues</a></dt><dt>diagnostic, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a></dt><dt>diffusion, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>digital rights, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>digital sign'n'seal, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>digits, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>diligence, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>directory, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#id358646">Political Issues</a>, <a class="indexterm" href="upgrades.html#sbeug1">Location of config files</a></dt><dd><dl><dt>Computers container, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>management, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>People container, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>replication, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>schema, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>server, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt><dt>synchronization, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt></dl></dd><dt>directory tree, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>disable, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>disaster recovery, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>disk image, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a></dt><dt>disruptive, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>distributed, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="HA.html#id386240">Distribute Network Load with MSDFS</a></dt><dt>distributed domain, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>DMB, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dt>DMS, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a></dt><dt>DNS, <a class="indexterm" href="small.html#id327416">Technical Issues</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a>, <a class="indexterm" href="HA.html#id385556">Routed Networks</a>, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt><dd><dl><dt>configuration, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>Dynamic, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>dynamic, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt><dt>lookup, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>name lookup, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>SRV records, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>suffix, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt></dl></dd><dt>DNS server, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a></dt><dt>document the settings, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>documentation, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>documented, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>Domain, <a class="indexterm" href="small.html#id327416">Technical Issues</a></dt><dd><dl><dt>groups, <a class="indexterm" href="small.html#id327416">Technical Issues</a></dt></dl></dd><dt>domain</dt><dd><dl><dt>Active Directory, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>controller, <a class="indexterm" href="upgrades.html#id368664">Replacing a Domain Controller</a></dt><dt>joining, <a class="indexterm" href="appendix.html">A Collection of Useful Tidbits</a></dt><dt>trusted, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt></dl></dd><dt>Domain accounts, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>Domain Administrator, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>Domain Controller, <a class="indexterm" href="small.html#id329652">Key Points Learned</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id358731">Implementation</a>, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a></dt><dd><dl><dt>closest, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt></dl></dd><dt>domain controller, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>domain controllers, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>Domain Controllers, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>Domain Groups</dt><dd><dl><dt>well-known, <a class="indexterm" href="appendix.html#id388463">Initialization of the LDAP Database</a></dt></dl></dd><dt>Domain join, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>domain master, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a>, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></dt><dt>Domain Master Browser (see DMB)</dt><dt>Domain Member, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a></dt><dd><dl><dt>authoritative</dt><dd><dl><dt>local accounts, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt></dl></dd><dt>client, <a class="indexterm" href="unixclients.html#id358731">Implementation</a></dt><dt>desktop, <a class="indexterm" href="unixclients.html#id357946">Introduction</a></dt><dt>server, <a class="indexterm" href="unixclients.html#id357946">Introduction</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id358731">Implementation</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>servers, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>workstations, <a class="indexterm" href="unixclients.html#id358731">Implementation</a></dt></dl></dd><dt>domain member</dt><dd><dl><dt>servers, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt></dl></dd><dt>Domain Member server, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>Domain Member servers, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>domain members, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>domain name space, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>domain replication, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>domain SID, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>Domain SID, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>domain tree, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>Domain User Manager, <a class="indexterm" href="happy.html#id350283">Configuring Profile Directories</a></dt><dt>Domain users, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>DOS, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>dos2unix, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt><dt>down-grade, <a class="indexterm" href="upgrades.html#id366117">Introduction</a></dt><dt>drive letters, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>drive mapping, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>dumb printing, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a></dt><dt>dump, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>duplicate accounts, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></dt><dt>dynamic DNS, <a class="indexterm" href="secure.html#id330398">Technical Issues</a></dt></dl></div><div class="indexdiv"><h3>E</h3><dl><dt>e-Directory, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a></dt><dt>Easy Software Products, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a></dt><dt>economically sustainable, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>eDirectory, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>education, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>election, <a class="indexterm" href="primer.html#id391158">Findings</a></dt><dt>employment, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>enable, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a></dt><dt>encrypted, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a></dt><dt>encrypted password, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>encrypted passwords, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>End User License Agreement (see EULA)</dt><dt>enumerating, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>essential, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>ethereal, <a class="indexterm" href="primer.html#id390920">Exercises</a></dt><dt>Ethernet switch, <a class="indexterm" href="small.html#id327416">Technical Issues</a></dt><dt>ethernet switch, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>EULA, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>Everyone, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>Excel, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>exclusive open, <a class="indexterm" href="appendix.html#id390270">Microsoft Access</a></dt><dt>experiment, <a class="indexterm" href="kerberos.html">Active Directory, Kerberos, and Security</a></dt><dt>export, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>extent, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>External Domains, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>extreme demand, <a class="indexterm" href="HA.html#id385344">Guidelines for Reliable Samba Operation</a></dt></dl></div><div class="indexdiv"><h3>F</h3><dl><dt>fail, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>fail-over, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>failed, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>failed join, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>failure, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>familiar, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>fatal problem, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>fear, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>fears, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>Fedora, <a class="indexterm" href="simple.html#id323158">Drafting Office</a></dt><dt>FHS, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>file and print server, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>file and print service, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>file caching, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a>, <a class="indexterm" href="appendix.html#id390484">Opportunistic Locking Controls</a></dt><dt>File Hierarchy System (see FHS)</dt><dt>file locations, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>file permissions, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>file server</dt><dd><dl><dt>read-only, <a class="indexterm" href="simple.html#id323219">Dissection and Discussion</a></dt></dl></dd><dt>file servers, <a class="indexterm" href="happy.html#id343908">Samba Server Implementation</a></dt><dt>file system, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dd><dl><dt>access control, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a></dt><dt>Ext3, <a class="indexterm" href="simple.html#id323262">Implementation</a></dt><dt>permissions, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt></dl></dd><dt>file system security, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>filter, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>financial responsibility, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>firewall, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>fix, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>flaws, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>flexibility, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>flush</dt><dd><dl><dt>cache memory, <a class="indexterm" href="appendix.html#id390484">Opportunistic Locking Controls</a></dt></dl></dd><dt>folder redirection, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>force group, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>force user, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>forced settings, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a></dt><dt>foreign, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>foreign SID, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>forwarded, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>foundation members, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>Free Standards Group (see FSG)</dt><dt>free support, <a class="indexterm" href="ch14.html">Samba Support</a>, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>front-end, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dd><dl><dt>server, <a class="indexterm" href="HA.html#id386240">Distribute Network Load with MSDFS</a></dt></dl></dd><dt>frustration, <a class="indexterm" href="upgrades.html#id366117">Introduction</a></dt><dt>FSG, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>FTP</dt><dd><dl><dt>proxy, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt></dl></dd><dt>full control, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a>, <a class="indexterm" href="kerberos.html#id381156">Using MS Windows Explorer (File Manager)</a></dt><dt>fully qualified, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>functional differences, <a class="indexterm" href="upgrades.html#id366200">Cautions and Notes</a></dt></dl></div><div class="indexdiv"><h3>G</h3><dl><dt>generation, <a class="indexterm" href="upgrades.html#id366200">Cautions and Notes</a></dt><dt>Gentoo, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>getent, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>getfacl, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>getgrnam, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>getpwnam, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>getpwnam(), <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>GID, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>Goettingen, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>government, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>GPL, <a class="indexterm" href="secure.html#id335012">Comments Regarding Software Terms of Use</a></dt><dt>group account, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>group management, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>group mapping, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>group membership, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>group names, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>group policies, <a class="indexterm" href="ntmigration.html#id368988">Introduction</a></dt><dt>Group Policy, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt><dt>Group Policy editor, <a class="indexterm" href="happy.html#sbehap-locgrppol">The Local Group Policy</a></dt><dt>Group Policy Objects, <a class="indexterm" href="happy.html#sbehap-locgrppol">The Local Group Policy</a></dt><dt>groupadd, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>groupdel, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>groupmem, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>groupmod, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>GSS-API, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>guest account, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a>, <a class="indexterm" href="primer.html#chap01conc">Dissection and Discussion</a>, <a class="indexterm" href="primer.html#id393223">Technical Issues</a>, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hackers, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>hardware prices, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>hardware problems, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>Heimdal, <a class="indexterm" href="DomApps.html#id382530">Implementation</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>Heimdal Kerberos, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>Heimdal kerberos, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a></dt><dt>help, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>helper agent, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>hesiod, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>hierarchy of control, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>high availability, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>hire, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>HKEY_CURRENT_USER, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a></dt><dt>HKEY_LOCAL_MACHINE, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>HKEY_LOCAL_USER, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>host announcement, <a class="indexterm" href="primer.html#id390813">Assignment Tasks</a>, <a class="indexterm" href="primer.html#id391782">Findings</a></dt><dt>hostname, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>hosts, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>HUB, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>Hybrid, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dt>hypothetical, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt></dl></div><div class="indexdiv"><h3>I</h3><dl><dt>Idealx, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dd><dl><dt>smbldap-tools, <a class="indexterm" href="happy.html#sbeidealx">Install and Configure Idealx smbldap-tools Scripts</a>, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt></dl></dd><dt>identifiers, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>identity, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dd><dl><dt>management, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt></dl></dd><dt>identity management, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#id358646">Political Issues</a>, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a></dt><dt>Identity Management, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>Identity management, <a class="indexterm" href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a></dt><dt>Identity resolution, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>Identity resolver, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>IDMAP, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>idmap backend, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>IDMAP backend, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>idmap gid, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>idmap uid, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>idmap_rid, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>IMAP, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a></dt><dt>import, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>income, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>independent expert, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>inetd, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a></dt><dt>inetOrgPerson, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a></dt><dt>inheritance, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>initGrps.sh, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt><dt>initial credentials, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>inoperative, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>install, <a class="indexterm" href="upgrades.html">Updating Samba-3</a></dt><dt>installation, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>integrate, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>integrity, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>inter-domain, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>inter-operability, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>interactive help, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>interdomain trusts, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>interfaces, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>intermittent, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>internationalization, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt><dt>Internet Explorer, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>Internet Information Server, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>interoperability, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>IP forwarding, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt><dt>IPC$, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a></dt><dt>iptables, <a class="indexterm" href="secure.html#id330398">Technical Issues</a></dt><dt>IRC, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>isolated, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Italian, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt></dl></div><div class="indexdiv"><h3>J</h3><dl><dt>jobs, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>joining a domain, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>KDC, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>Kerberos, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id382530">Implementation</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dd><dl><dt>Heimdal, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>interoperability, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>libraries, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>MIT, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>unspecified fields, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt></dl></dd><dt>kerberos, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dd><dl><dt>server, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt></dl></dd><dt>Kerberos ticket, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>kinit, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>Kixtart, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>klist, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>krb5, <a class="indexterm" href="DomApps.html#id382530">Implementation</a></dt><dt>krb5.conf, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>LAM, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dd><dl><dt>configuration editor, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>configuration file, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>login screen, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>opening screen, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>profile, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>wizard, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt></dl></dd><dt>large domain, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>LDAP, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a>, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a>, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#id343123">Preliminary Advice: Dangers Can Be Avoided</a>, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="net2000users.html#id352846">Introduction</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="net2000users.html#id357027">Key Points Learned</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id369064">Assignment Tasks</a>, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dd><dl><dt>backend, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>database, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="appendix.html#altldapcfg">Alternative LDAP Database Initialization</a></dt><dt>directory, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>fail-over, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>initial configuration, <a class="indexterm" href="appendix.html#altldapcfg">Alternative LDAP Database Initialization</a></dt><dt>master, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>master/slave</dt><dd><dl><dt>background communication, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt></dl></dd><dt>preload, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>schema, <a class="indexterm" href="upgrades.html#id368310">Updating from Samba Versions between 3.0.6 and 3.0.10</a></dt><dt>secure, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt><dt>server, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>slave, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>updates, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt></dl></dd><dt>ldap, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>LDAP Account Manager (see LAM)</dt><dt>LDAP backend, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>LDAP database, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>LDAP Interchange Format (see LDIF)</dt><dt>LDAP server, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>LDAP-transfer-LDIF.txt, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>ldap.conf, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>ldapadd, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>ldapsam, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="upgrades.html#id368310">Updating from Samba Versions between 3.0.6 and 3.0.10</a>, <a class="indexterm" href="ntmigration.html#id369064">Assignment Tasks</a>, <a class="indexterm" href="DomApps.html">Integrating Additional Services</a></dt><dt>ldapsam backend, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>ldapsearch, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>LDIF, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="appendix.html#id388463">Initialization of the LDAP Database</a></dt><dt>leadership, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>Lightweight Directory Access Protocol (see LDAP)</dt><dt>limit, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>Linux desktop, <a class="indexterm" href="unixclients.html#id357946">Introduction</a></dt><dt>Linux Standards Base (see LSB)</dt><dt>LMB, <a class="indexterm" href="primer.html#id391158">Findings</a>, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dt>LMHOSTS, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>load distribution, <a class="indexterm" href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></dt><dt>local accounts, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>Local Group Policy, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a></dt><dt>Local Master Announcement, <a class="indexterm" href="primer.html#id391782">Findings</a></dt><dt>Local Master Browser (see LMB)</dt><dt>localhost, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>lock directory, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></dt><dt>locking</dt><dd><dl><dt>Application level, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>Client side, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>Server side, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt></dl></dd><dt>logging, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>login, <a class="indexterm" href="secure.html#id330398">Technical Issues</a></dt><dt>loglevel, <a class="indexterm" href="happy.html#id343291">Debugging LDAP</a></dt><dt>logon credentials, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>logon hours, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a></dt><dt>logon machines, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>logon path, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>logon process, <a class="indexterm" href="unixclients.html#id358731">Implementation</a></dt><dt>logon scrip, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a></dt><dt>logon script, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#id350512">Preparation of Logon Scripts</a>, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>logon server, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>logon services, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>logon time, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a></dt><dt>logon traffic, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>logon.kix, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>loopback, <a class="indexterm" href="simple.html#validate1">Validation</a></dt><dt>low performance, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>lower-case, <a class="indexterm" href="ntmigration.html#id369600">Implementation</a></dt><dt>lpadmin, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>LSB, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt></dl></div><div class="indexdiv"><h3>M</h3><dl><dt>machine, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>machine account, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a></dt><dt>machine accounts, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>machine secret password, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a></dt><dt>MACHINE.SID, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>mailing list, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>mailing lists, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>managed, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>management, <a class="indexterm" href="unixclients.html#id358646">Political Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dd><dl><dt>group, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>User, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></dd><dt>mandatory profile, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#id350283">Configuring Profile Directories</a></dt><dt>Mandrake, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>mapped drives, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>mapping, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dd><dl><dt>consistent, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt></dl></dd><dt>Mars_NWE, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>master, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a></dt><dt>material, <a class="indexterm" href="appendix.html">A Collection of Useful Tidbits</a></dt><dt>memberUID, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>memory requirements, <a class="indexterm" href="secure.html#id330622">Hardware Requirements</a></dt><dt>merge, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>merged, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>meta-directory, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>meta-service, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>Microsoft Access, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>Microsoft Excel, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt><dt>Microsoft ISA, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a></dt><dt>Microsoft Management Console (see MMC)</dt><dt>Microsoft Office, <a class="indexterm" href="secure.html#ch4appscfg">Application Share Configuration</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>Microsoft Outlook</dt><dd><dl><dt>PST files, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt></dl></dd><dt>migrate, <a class="indexterm" href="upgrades.html">Updating Samba-3</a>, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>migration, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a>, <a class="indexterm" href="ntmigration.html#id368988">Introduction</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dd><dl><dt>objectives, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt></dl></dd><dt>Migration speed, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>mime type, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>mime types, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a></dt><dt>missing RPC's, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>MIT, <a class="indexterm" href="DomApps.html#id382530">Implementation</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>MIT Kerberos, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>MIT kerberos, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a></dt><dt>MIT KRB5, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>mixed mode, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>mixed-mode, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>MMC, <a class="indexterm" href="happy.html#id351724">Configure Delete Cached Profiles on Logout</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>mobile computing, <a class="indexterm" href="small.html#id327371">Dissection and Discussion</a></dt><dt>mobility, <a class="indexterm" href="net2000users.html#id353175">Technical Issues</a></dt><dt>modularization, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>modules, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>MS Access</dt><dd><dl><dt>validate, <a class="indexterm" href="appendix.html#id390270">Microsoft Access</a></dt></dl></dd><dt>MS Outlook, <a class="indexterm" href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></dt><dd><dl><dt>PST, <a class="indexterm" href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></dt><dt>PST file, <a class="indexterm" href="happy.html">Making Happy Users</a></dt></dl></dd><dt>MS Windows Server 2003, <a class="indexterm" href="DomApps.html#id382530">Implementation</a></dt><dt>MS Word, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>MSDFS, <a class="indexterm" href="HA.html#id386240">Distribute Network Load with MSDFS</a></dt><dt>multi-subnet, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>multi-user</dt><dd><dl><dt>access, <a class="indexterm" href="appendix.html#id390270">Microsoft Access</a></dt><dt>data access, <a class="indexterm" href="appendix.html#ch12dblck">Shared Data Integrity</a></dt></dl></dd><dt>multiple directories, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>multiple domain controllers, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>multiple group mappings, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>mutual assistance, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>My Documents, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a></dt><dt>My Network Places, <a class="indexterm" href="simple.html#id324064">Implementation</a></dt><dt>mysqlsam, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt></dl></div><div class="indexdiv"><h3>N</h3><dl><dt>name resolution, <a class="indexterm" href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="primer.html#id390813">Assignment Tasks</a></dt><dd><dl><dt>Defective, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt></dl></dd><dt>name resolve order, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>name service switch, <a class="indexterm" href="small.html#id327606">Implementation</a> (see NSS)</dt><dt>named, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a></dt><dt>NAT, <a class="indexterm" href="secure.html#id330398">Technical Issues</a></dt><dt>native, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>net</dt><dd><dl><dt>ads</dt><dd><dl><dt>info, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>join, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>status, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt></dl></dd><dt>getlocalsid, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>group, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></dt><dt>groupmap</dt><dd><dl><dt>add, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a></dt><dt>list, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>modify, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a></dt></dl></dd><dt>rpc</dt><dd><dl><dt>info, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>join, <a class="indexterm" href="Big500users.html#ch5-domsvrspec">Configuration Specific to Domain Member Servers: BLDG1, BLDG2</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#dcwonss">NT4/Samba Domain with Samba Domain Member Server without NSS Support</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></dt><dt>vampire, <a class="indexterm" href="upgrades.html">Updating Samba-3</a>, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></dt></dl></dd><dt>setlocalsid, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt></dl></dd><dt>NetBIOS, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a>, <a class="indexterm" href="HA.html#id385556">Routed Networks</a>, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dd><dl><dt>name cache, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>name resolution</dt><dd><dl><dt>delays, <a class="indexterm" href="happy.html">Making Happy Users</a></dt></dl></dd><dt>Node Type, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt></dl></dd><dt>netbios</dt><dd><dl><dt>machine name, <a class="indexterm" href="upgrades.html#id366964">Change of hostname</a></dt></dl></dd><dt>netbios forwarding, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>NetBIOS name, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dd><dl><dt>aliases, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt></dl></dd><dt>netbios name, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id366964">Change of hostname</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>NETLOGON, <a class="indexterm" href="happy.html#id342906">Using a Network Default User Profile</a>, <a class="indexterm" href="happy.html#id350723">Windows Client Configuration</a></dt><dt>netlogon, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>Netlogon, <a class="indexterm" href="appendix.html#domjoin">Joining a Domain: Windows 200x/XP Professional</a></dt><dt>netmask, <a class="indexterm" href="simple.html#id323262">Implementation</a></dt><dt>Netware, <a class="indexterm" href="small.html">Small Office Networking</a></dt><dt>NetWare, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>network</dt><dd><dl><dt>administrators, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>analyzer, <a class="indexterm" href="primer.html#id390813">Assignment Tasks</a></dt><dt>bandwidth, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>broadcast, <a class="indexterm" href="primer.html#id390763">Introduction</a></dt><dt>captures, <a class="indexterm" href="primer.html#id390627">Requirements and Notes</a></dt><dt>collisions, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>load, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>logon, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>logon scripts, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>management, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>multi-segment, <a class="indexterm" href="happy.html#id341463">Introduction</a></dt><dt>overload, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>performance, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>routed, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a></dt><dt>secure, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>segment, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>services, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>sniffer, <a class="indexterm" href="primer.html#id390627">Requirements and Notes</a></dt><dt>timeout, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>timeouts, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>trace, <a class="indexterm" href="primer.html#id390813">Assignment Tasks</a></dt><dt>traffic</dt><dd><dl><dt>observation, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></dd><dt>wide-area, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></dt></dl></dd><dt>Network Address Translation (see NAT)</dt><dt>network administrators, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>network attached storage (see NAS)</dt><dt>network bandwidth</dt><dd><dl><dt>utilization, <a class="indexterm" href="happy.html">Making Happy Users</a></dt></dl></dd><dt>Network Default Profile, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a></dt><dt>network hardware</dt><dd><dl><dt>defective, <a class="indexterm" href="happy.html">Making Happy Users</a></dt></dl></dd><dt>network hygiene, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>network Identities, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>network load factors, <a class="indexterm" href="Big500users.html#id336113">Dissection and Discussion</a></dt><dt>Network Neighborhood, <a class="indexterm" href="simple.html#validate1">Validation</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>network segment, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a></dt><dt>network segments, <a class="indexterm" href="secure.html#id330622">Hardware Requirements</a></dt><dt>network share, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a></dt><dt>networking</dt><dd><dl><dt>client, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt></dl></dd><dt>networking hardware</dt><dd><dl><dt>defective, <a class="indexterm" href="happy.html">Making Happy Users</a></dt></dl></dd><dt>networking protocols, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>next generation, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>NextFreeUnixId, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>NFS server, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a></dt><dt>NICs, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>NIS, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id358646">Political Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>nis, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>NIS schema, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>NIS server, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>NIS+, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>nisplus, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>NLM, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>nmap, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>nmbd, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>nobody, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a>, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a></dt><dt>Novell, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a>, <a class="indexterm" href="nw4migration.html#id373183">Introduction</a></dt><dt>Novell SUSE SLES 9, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>NSS, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="DomApps.html#id383649">NSS Configuration</a> (see same service switch)</dt><dt>nss_ldap, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a>, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#id364188">IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>nt acl support, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a></dt><dt>NT4 registry, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>NTLM, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>NTLM authentication daemon, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>NTLMSSP, <a class="indexterm" href="DomApps.html#id384281">Key Points Learned</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a>, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>NTLMSSP_AUTH, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>ntlm_auth, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>NTP, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>NTUSER.DAT, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a>, <a class="indexterm" href="happy.html#id342818">Profile Changes</a>, <a class="indexterm" href="happy.html#id342906">Using a Network Default User Profile</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>NULL connection, <a class="indexterm" href="simple.html#validate1">Validation</a></dt><dt>NULL session, <a class="indexterm" href="primer.html#id392350">Findings and Comments</a></dt><dt>NULL-Session, <a class="indexterm" href="primer.html#id393094">Discussion</a></dt></dl></div><div class="indexdiv"><h3>O</h3><dl><dt>objectClass, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>off-site storage, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Open Magazine, <a class="indexterm" href="unixclients.html">Adding Domain Member Servers and Clients</a></dt><dt>Open Source, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>OpenLDAP, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="unixclients.html#id358646">Political Issues</a>, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a>, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>openldap, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>OpenOffice, <a class="indexterm" href="secure.html#ch4appscfg">Application Share Configuration</a></dt><dt>operating profiles, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>oplock break, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a></dt><dt>oplocks, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>Oplocks</dt><dd><dl><dt>disabled, <a class="indexterm" href="appendix.html#id390484">Opportunistic Locking Controls</a></dt></dl></dd><dt>opportunistic</dt><dd><dl><dt>locking, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a></dt></dl></dd><dt>opportunistic locking, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a>, <a class="indexterm" href="appendix.html#id390409">Act! Database Sharing</a></dt><dt>optimized, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>organizational units, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>OS/2, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>Outlook</dt><dd><dl><dt>PST, <a class="indexterm" href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></dt></dl></dd><dt>Outlook Address Book, <a class="indexterm" href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></dt><dt>Outlook Express, <a class="indexterm" href="secure.html#id330742">Political Issues</a>, <a class="indexterm" href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></dt><dt>over-ride, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>over-ride controls, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a></dt><dt>over-rule, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a>, <a class="indexterm" href="kerberos.html#id381156">Using MS Windows Explorer (File Manager)</a></dt><dt>overheads, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a></dt><dt>ownership, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt></dl></div><div class="indexdiv"><h3>P</h3><dl><dt>package, <a class="indexterm" href="simple.html#id323262">Implementation</a></dt><dt>package names, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>packages, <a class="indexterm" href="upgrades.html#id368184">Updating a Samba-3 Installation</a></dt><dt>PADL, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a></dt><dt>PADL LDAP tools, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt><dt>PADL Software, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>paid-for support, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>PAM, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>pam_ldap, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>pam_ldap.so, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></dt><dt>pam_unix2.so, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></dt><dd><dl><dt>use_ldap, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></dt></dl></dd><dt>parameters, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>passdb backend, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="Big500users.html">The 500-User Office</a>, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html">Updating Samba-3</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="upgrades.html#id368310">Updating from Samba Versions between 3.0.6 and 3.0.10</a>, <a class="indexterm" href="ntmigration.html#id369064">Assignment Tasks</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>passdb.tdb, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>passwd, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a></dt><dt>password</dt><dd><dl><dt>backend, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt></dl></dd><dt>password caching, <a class="indexterm" href="simple.html#id324064">Implementation</a></dt><dt>password change, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a></dt><dt>password length, <a class="indexterm" href="primer.html#id392130">Simple Windows Client Connection Characteristics</a>, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>payroll, <a class="indexterm" href="nw4migration.html#id373183">Introduction</a></dt><dt>pdbedit, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a>, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>PDC, <a class="indexterm" href="Big500users.html#id336038">Assignment Tasks</a>, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a>, <a class="indexterm" href="happy.html">Making Happy Users</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#sbehap-locgrppol">The Local Group Policy</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id369600">Implementation</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a>, <a class="indexterm" href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a>, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a></dt><dt>PDC/BDC ratio, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>PDF, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>performance, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a>, <a class="indexterm" href="HA.html">Performance, Reliability, and Availability</a>, <a class="indexterm" href="HA.html#id384815">Introduction</a>, <a class="indexterm" href="HA.html#id385720">Network Collisions</a></dt><dt>performance degradation, <a class="indexterm" href="kerberos.html#id380322">Override Controls</a>, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>Perl, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>permission, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>permissions, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a>, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dd><dl><dt>excessive, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>group, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>user, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt></dl></dd><dt>Permissions, <a class="indexterm" href="kerberos.html#id380879">Using the MMC Computer Management Interface</a></dt><dt>permits, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>permitted group, <a class="indexterm" href="kerberos.html#id380879">Using the MMC Computer Management Interface</a></dt><dt>PHP, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>PHP4, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>pile-driver, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>ping, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>pitfalls, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>plain-text, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>Pluggable Authentication Modules (see PAM)</dt><dt>policy, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>poor performance, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>POP3, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a></dt><dt>Posix, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="ntmigration.html#id369600">Implementation</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>POSIX, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>Posix accounts, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>Posix ACLs, <a class="indexterm" href="kerberos.html#id380830">Managing Windows 200x ACLs</a></dt><dt>PosixAccount, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>posixAccount, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>Postfix, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>Postscript, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a></dt><dt>powers, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>practices, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>precaution, <a class="indexterm" href="upgrades.html#id366117">Introduction</a></dt><dt>presence and leadership, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>price paid, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>primary group, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>principals, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>print filter, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>print queue, <a class="indexterm" href="simple.html#id323803">Charity Administration Office</a>, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a></dt><dt>print spooler, <a class="indexterm" href="simple.html#id323803">Charity Administration Office</a></dt><dt>Print Test Page, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>printcap name, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>printer validation, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a></dt><dt>printers</dt><dd><dl><dt>Advanced, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>Default Settings, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>General, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>Properties, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>Security, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>Sharing, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt></dl></dd><dt>printing, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dd><dl><dt>drag-and-drop, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a>, <a class="indexterm" href="happy.html#id351896">Uploading Printer Drivers to Samba Servers</a></dt><dt>dumb, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a></dt><dt>point-n-click, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a></dt><dt>raw, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a></dt></dl></dd><dt>privacy, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>Privilege Attribute Certificates (see PAC)</dt><dt>privilege controls, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>privileged pipe, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>privileges, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="upgrades.html#id368384">Updating from Samba Versions after 3.0.6 to a Current Release</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt><dt>problem report, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>problem resolution, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>product defects, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>professional support, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>profile</dt><dd><dl><dt>default, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a></dt><dt>mandatory, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>roaming, <a class="indexterm" href="happy.html">Making Happy Users</a></dt></dl></dd><dt>profile path, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>profile share, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>profiles, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>profiles share, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>programmer, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>project, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>project maintainers, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>Properties, <a class="indexterm" href="kerberos.html#id380879">Using the MMC Computer Management Interface</a></dt><dt>proprietary, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>protected, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>protection, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>protocol</dt><dd><dl><dt>negotiation, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt></dl></dd><dt>protocol analysis, <a class="indexterm" href="primer.html#id390627">Requirements and Notes</a></dt><dt>protocols, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>provided services, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>proxy, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>PST file, <a class="indexterm" href="happy.html#id351441">Configuration of MS Outlook to Relocate PST File</a></dt><dt>public specifications, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>purchase support, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt></dl></div><div class="indexdiv"><h3>Q</h3><dl><dt>Qbasic, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>qualified problem, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt></dl></div><div class="indexdiv"><h3>R</h3><dl><dt>RAID, <a class="indexterm" href="secure.html#id330622">Hardware Requirements</a></dt><dt>RAID controllers, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>Raw Print Through, <a class="indexterm" href="happy.html#id342960">Installation of Printer Driver Auto-Download</a></dt><dt>raw printing, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4ptrcfg">Printer Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="happy.html#sbehap-ptrcfg">Printer Configuration</a></dt><dt>Rbase, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>rcldap, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>realm, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="unixclients.html#id363637">IDMAP Storage in LDAP using Winbind</a>, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>recognize, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>record locking, <a class="indexterm" href="appendix.html#id390270">Microsoft Access</a></dt><dt>recursively, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>Red Hat, <a class="indexterm" href="simple.html#id323158">Drafting Office</a>, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>Red Hat Fedora Linux, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>Red Hat Linux, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="simple.html#AccountingOffice">Accounting Office</a>, <a class="indexterm" href="happy.html#id343908">Samba Server Implementation</a>, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id382530">Implementation</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>redirected folders, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>refereed standards, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>regedit, <a class="indexterm" href="simple.html#id324064">Implementation</a></dt><dt>regedt32, <a class="indexterm" href="happy.html#id342818">Profile Changes</a>, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>registry, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dd><dl><dt>keys</dt><dd><dl><dt>SAM, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>SECURITY, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt></dl></dd></dl></dd><dt>registry change, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>Registry Editor, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>registry hacks, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>registry keys, <a class="indexterm" href="happy.html#redirfold">Configuration of Default Profile with Folder Redirection</a></dt><dt>reimburse, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>rejected, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>rejoin, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>reliability, <a class="indexterm" href="HA.html">Performance, Reliability, and Availability</a></dt><dt>remote announce, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>remote browse sync, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>remote procedure call (see RPC)</dt><dt>replicate, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="HA.html#id386291">Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</a></dt><dt>replicated, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a></dt><dt>requesting payment, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>resilient, <a class="indexterm" href="HA.html#id385344">Guidelines for Reliable Samba Operation</a></dt><dt>resolution, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a></dt><dt>resolve, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="HA.html#id385379">Bad Hostnames</a></dt><dt>response, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a></dt><dt>responsibility, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>responsible, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>restrict anonymous, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>restricted export, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>Restrictive security, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>reverse DNS, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a></dt><dt>rfc2307bis, <a class="indexterm" href="unixclients.html#id364188">IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</a></dt><dt>RID, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>risk, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>road-map, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dd><dl><dt>published, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></dd><dt>roaming profile, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a>, <a class="indexterm" href="happy.html#id350283">Configuring Profile Directories</a>, <a class="indexterm" href="net2000users.html#id353212">User Needs</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>roaming profiles, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="happy.html#id342548">Roaming Profile Background</a></dt><dt>routed network, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a></dt><dt>router, <a class="indexterm" href="small.html#id327606">Implementation</a></dt><dt>routers, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>RPC, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>rpc, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>rpcclient, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>RPM, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a>, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a></dt><dd><dl><dt>install, <a class="indexterm" href="simple.html#id323262">Implementation</a></dt></dl></dd><dt>rpm, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a>, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>RPMs, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>rpms, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>rsync, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="HA.html#id386291">Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</a></dt><dt>rsyncd.conf, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>run-time control files, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>safe-guards, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>SAM, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>samba, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dd><dl><dt>starting samba, <a class="indexterm" href="simple.html#id323262">Implementation</a></dt></dl></dd><dt>Samba, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>Samba accounts, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>samba cluster, <a class="indexterm" href="HA.html#id384815">Introduction</a></dt><dt>samba control script, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>Samba Domain, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>Samba Domain server, <a class="indexterm" href="kerberos.html#id380879">Using the MMC Computer Management Interface</a></dt><dt>Samba RPM Packages, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a></dt><dt>Samba Tea, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>sambaDomainName, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>sambaGroupMapping, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>SambaSAMAccount, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a></dt><dt>SambaSamAccount, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>sambaSamAccount, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>SambaXP conference, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>SAN, <a class="indexterm" href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></dt><dt>SAS, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>scalability, <a class="indexterm" href="HA.html#id384815">Introduction</a></dt><dt>scalable, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>schannel, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>schema, <a class="indexterm" href="unixclients.html#id364188">IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id368069">Samba-2.x with LDAP Support</a>, <a class="indexterm" href="upgrades.html#id368310">Updating from Samba Versions between 3.0.6 and 3.0.10</a></dt><dt>scripts, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>secondary group, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></dt><dt>secret, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>secrets.tdb, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#sbeug1">Location of config files</a></dt><dt>secure, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>secure account password, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>secure connections, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>secure networking, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>secure networking protocols, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>security, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dd><dl><dt>identifier, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>share mode, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a></dt><dt>user mode, <a class="indexterm" href="simple.html#id325807">Dissection and Discussion</a></dt></dl></dd><dt>Security, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id380879">Using the MMC Computer Management Interface</a></dt><dt>Security Account Manager (see SAM)</dt><dt>security controls, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>security descriptors, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>security fixes, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>security updates, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>SerNet, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>server</dt><dd><dl><dt>domain member, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>stand-alone, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt></dl></dd><dt>service, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dd><dl><dt>smb</dt><dd><dl><dt>start, <a class="indexterm" href="Big500users.html#ch5-domsvrspec">Configuration Specific to Domain Member Servers: BLDG1, BLDG2</a></dt></dl></dd></dl></dd><dt>Service Packs, <a class="indexterm" href="secure.html#ch4appscfg">Application Share Configuration</a></dt><dt>services, <a class="indexterm" href="DomApps.html#id384281">Key Points Learned</a></dt><dt>services provided, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>session setup, <a class="indexterm" href="primer.html#id392130">Simple Windows Client Connection Characteristics</a>, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>Session Setup, <a class="indexterm" href="primer.html#id392130">Simple Windows Client Connection Characteristics</a></dt><dt>SessionSetUpAndX, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>set primary group script, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>setfacl, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>severely degrade, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>SFU, <a class="indexterm" href="unixclients.html#id364460">IDMAP, Active Directory, and MS Services for UNIX 3.5</a></dt><dt>SGID, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a>, <a class="indexterm" href="appendix.html#ch12-SUIDSGID">Effect of Setting File and Directory SUID/SGID Permissions Explained</a></dt><dt>shadow-utils, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>Share Access Controls, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>share ACLs, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>share definition, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>Share Definition</dt><dd><dl><dt>Controls, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a></dt></dl></dd><dt>share definition controls, <a class="indexterm" href="kerberos.html#id379908">Share Definition Controls</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a>, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>share level access controls, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>share level ACL, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>Share Permissions, <a class="indexterm" href="kerberos.html#id379573">Share Access Controls</a></dt><dt>shared resource, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>shares, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>SID, <a class="indexterm" href="secure.html#ch4wincfg">Windows Client Configuration</a>, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id363067">IDMAP_RID with Winbind</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367023">Change of Workgroup (Domain) Name</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="appendix.html#id388463">Initialization of the LDAP Database</a></dt><dt>side effects, <a class="indexterm" href="kerberos.html#id380830">Managing Windows 200x ACLs</a></dt><dt>Sign'n'seal, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>silent return, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></dt><dt>simple, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>Single Sign-On (see SSO)</dt><dt>slapcat, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>slapd, <a class="indexterm" href="happy.html#id343291">Debugging LDAP</a></dt><dt>slapd.conf, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>slave, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a></dt><dt>slow logon, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>slow network, <a class="indexterm" href="HA.html#id386332">Hardware Problems</a></dt><dt>slurpd, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>smart printing, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>SMB, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>SMB passwords, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>SMB/CIFS, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>smbclient, <a class="indexterm" href="simple.html#validate1">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>smbd, <a class="indexterm" href="simple.html#validate1">Validation</a>, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#sbeug1">Location of config files</a>, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a>, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dd><dl><dt>location of files, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt></dl></dd><dt>smbfs, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>smbldap-groupadd, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>smbldap-groupmod, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>smbldap-passwd, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>smbldap-populate, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a></dt><dt>smbldap-tools, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a>, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>smbldap-tools updating, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>smbldap-useradd, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt><dt>smbldap-usermod, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>smbmnt, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>smbmount, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>smbpasswd, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327416">Technical Issues</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a>, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="happy.html#id346546">LDAP Initialization and Creation of User and Group Accounts</a>, <a class="indexterm" href="happy.html#sbehap-bldg1">Samba-3 BDC Configuration</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html">Updating Samba-3</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="DomApps.html">Integrating Additional Services</a></dt><dt>smbumnt, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>smbumount, <a class="indexterm" href="HA.html#id384892">Dissection and Discussion</a></dt><dt>SMTP, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a></dt><dt>snap-shot, <a class="indexterm" href="ntmigration.html#id369115">Dissection and Discussion</a></dt><dt>socket address, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>socket options, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>software, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>solve, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>source code, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>SPNEGO, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>SQL, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>Squid, <a class="indexterm" href="DomApps.html#id382530">Implementation</a>, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="DomApps.html#id383905">Squid Configuration</a></dt><dt>squid, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>Squid proxy, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>SRVTOOLS.EXE, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="happy.html#id350283">Configuring Profile Directories</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>SSL, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>stand-alone server, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>starting CUPS, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a>, <a class="indexterm" href="Big500users.html#ch5-procstart">Process Startup Configuration</a></dt><dt>starting dhcpd, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a>, <a class="indexterm" href="Big500users.html#ch5-procstart">Process Startup Configuration</a></dt><dt>starting samba, <a class="indexterm" href="simple.html#id323262">Implementation</a>, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a>, <a class="indexterm" href="Big500users.html#ch5-procstart">Process Startup Configuration</a></dt><dd><dl><dt>nmbd, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>smbd, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>winbindd, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt></dl></dd><dt>startingCUPS, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a></dt><dt>startup script, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>sticky bit, <a class="indexterm" href="small.html#id327606">Implementation</a></dt><dt>storage capacity, <a class="indexterm" href="secure.html#id330622">Hardware Requirements</a></dt><dt>strategic, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a></dt><dt>strategy, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>straw-man, <a class="indexterm" href="kerberos.html">Active Directory, Kerberos, and Security</a></dt><dt>strict sync, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>stripped, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></dt><dt>strong cryptography, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>subscription, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>SUID, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a>, <a class="indexterm" href="appendix.html#ch12-SUIDSGID">Effect of Setting File and Directory SUID/SGID Permissions Explained</a></dt><dt>Sun ONE Identity Server, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>super daemon, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a></dt><dt>support, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a>, <a class="indexterm" href="ch14.html">Samba Support</a></dt><dt>survey, <a class="indexterm" href="unixclients.html">Adding Domain Member Servers and Clients</a></dt><dt>SUSE, <a class="indexterm" href="nw4migration.html">Migrating NetWare Server to Samba-3</a></dt><dt>SUSE Enterprise Linux Server, <a class="indexterm" href="simple.html#id323803">Charity Administration Office</a>, <a class="indexterm" href="secure.html#ch4bsc">Basic System Configuration</a>, <a class="indexterm" href="DomApps.html#id382530">Implementation</a></dt><dt>SUSE Linux, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="happy.html#id343908">Samba Server Implementation</a>, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id382530">Implementation</a>, <a class="indexterm" href="DomApps.html#ch10-one">Removal of Pre-Existing Conflicting RPMs</a></dt><dt>SWAT, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>sync always, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>synchronization, <a class="indexterm" href="DomApps.html#id382764">Kerberos Configuration</a>, <a class="indexterm" href="HA.html#id386195">For Scalability, Use SAN-Based Storage on Samba Servers</a></dt><dt>synchronize, <a class="indexterm" href="net2000users.html#id353212">User Needs</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>synchronized, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>syslog, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>system level logins, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>system security, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>tattooing, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>TCP/IP, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>tdbdump, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>tdbsam, <a class="indexterm" href="secure.html#id330398">Technical Issues</a>, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="Big500users.html">The 500-User Office</a>, <a class="indexterm" href="happy.html#id341540">Assignment Tasks</a>, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="upgrades.html#id368310">Updating from Samba Versions between 3.0.6 and 3.0.10</a>, <a class="indexterm" href="ntmigration.html#id369276">Technical Issues</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>testparm, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="happy.html#sbehap-massive">Samba-3 PDC Configuration</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a>, <a class="indexterm" href="HA.html#id385810">Samba Configuration</a></dt><dt>ticket, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>time server, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>Tivoli Directory Server, <a class="indexterm" href="happy.html#id341668">Dissection and Discussion</a></dt><dt>TLS, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>token, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a></dt><dt>tool, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>TOSHARG2, <a class="indexterm" href="simple.html#id324064">Implementation</a></dt><dt>track record, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>traffic collisions, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>transaction processing, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a></dt><dt>transactional, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>transfer, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>translate, <a class="indexterm" href="kerberos.html#id380830">Managing Windows 200x ACLs</a></dt><dt>traverse, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></dt><dt>tree, <a class="indexterm" href="nw4migration.html#id373359">Dissection and Discussion</a></dt><dt>Tree Connect, <a class="indexterm" href="primer.html#id392130">Simple Windows Client Connection Characteristics</a></dt><dt>trust account, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a></dt><dt>trusted computing, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Trusted Domains, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>trusted domains, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>trusted third-party, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>trusting, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>turn-around time, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>UDP</dt><dd><dl><dt>broadcast, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt></dl></dd><dt>UID, <a class="indexterm" href="simple.html#id323894">Dissection and Discussion</a>, <a class="indexterm" href="happy.html#id341339">Regarding LDAP Directories and Windows Computer Accounts</a>, <a class="indexterm" href="happy.html#id342070">Technical Issues</a>, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>un-join, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>unauthorized activities, <a class="indexterm" href="kerberos.html#id379276">Kerberos Exposed</a></dt><dt>UNC name, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>unencrypted, <a class="indexterm" href="appendix.html#id388919">The LDAP Account Manager</a></dt><dt>Unicast, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a></dt><dt>unicode, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt><dt>Universal Naming Convention (see UNC name)</dt><dt>UNIX, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dd><dl><dt>groups, <a class="indexterm" href="small.html#id327416">Technical Issues</a>, <a class="indexterm" href="small.html#id327606">Implementation</a></dt></dl></dd><dt>UNIX accounts, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt><dt>UNIX/Linux server, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>unix2dos, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt><dt>unknown, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>unsupported software, <a class="indexterm" href="ch14.html#id386894">Commercial Support</a></dt><dt>update, <a class="indexterm" href="upgrades.html#id366117">Introduction</a>, <a class="indexterm" href="upgrades.html#id366200">Cautions and Notes</a></dt><dt>updates, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>updating smbldap-tools, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>upgrade, <a class="indexterm" href="upgrades.html#id366117">Introduction</a>, <a class="indexterm" href="upgrades.html#id366200">Cautions and Notes</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>uppercase, <a class="indexterm" href="ntmigration.html#id369600">Implementation</a></dt><dt>user</dt><dd><dl><dt>management, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a></dt></dl></dd><dt>user account, <a class="indexterm" href="happy.html">Making Happy Users</a>, <a class="indexterm" href="happy.html#ldapsetup">OpenLDAP Server Configuration</a></dt><dt>User and Group Controls, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>user credentials, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a></dt><dt>user errors, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>user groups, <a class="indexterm" href="ch14.html#id386696">Free Support</a></dt><dt>user identities, <a class="indexterm" href="unixclients.html#id358731">Implementation</a></dt><dt>user logins, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>user management, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>User Manager, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>User Mode, <a class="indexterm" href="secure.html#id330776">Implementation</a>, <a class="indexterm" href="primer.html#id392130">Simple Windows Client Connection Characteristics</a>, <a class="indexterm" href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></dt><dt>useradd, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="simple.html#AcctgNet">Implementation</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337579">Configuration for Server: MASSIVE</a>, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>userdel, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></dt><dt>usermod, <a class="indexterm" href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a>, <a class="indexterm" href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></dt><dt>username, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>username map, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#id331530">Samba Configuration</a>, <a class="indexterm" href="Big500users.html#id337052">Server Preparation: All Servers</a></dt><dt>UTF-8, <a class="indexterm" href="upgrades.html#id367266">International Language Support</a></dt><dt>utilities, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt></dl></div><div class="indexdiv"><h3>V</h3><dl><dt>valid users, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a>, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>validate, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>validated, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>validation, <a class="indexterm" href="simple.html#validate1">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>vampire, <a class="indexterm" href="ntmigration.html#id372297">Questions and Answers</a></dt><dt>vendor, <a class="indexterm" href="kerberos.html#id377723">Dissection and Discussion</a></dt><dt>vendors, <a class="indexterm" href="upgrades.html#id368184">Updating a Samba-3 Installation</a></dt><dt>VFS modules, <a class="indexterm" href="appendix.html#id387559">Samba System File Location</a></dt><dt>virus, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>VPN, <a class="indexterm" href="net2000users.html#id352871">Assignment Tasks</a></dt><dt>vulnerabilities, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>wbinfo, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a></dt><dt>weakness, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a></dt><dt>web</dt><dd><dl><dt>caching, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a></dt><dt>proxying, <a class="indexterm" href="DomApps.html#id382248">Assignment Tasks</a></dt></dl></dd><dt>Web</dt><dd><dl><dt>proxy, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dd><dl><dt>access, <a class="indexterm" href="DomApps.html#id384281">Key Points Learned</a></dt></dl></dd></dl></dd><dt>Web browsers, <a class="indexterm" href="DomApps.html#id384281">Key Points Learned</a></dt><dt>WebClient, <a class="indexterm" href="happy.html">Making Happy Users</a></dt><dt>WHATSNEW.txt, <a class="indexterm" href="upgrades.html#id368069">Samba-2.x with LDAP Support</a></dt><dt>white-pages, <a class="indexterm" href="nw4migration.html#id373431">Technical Issues</a>, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>wide-area, <a class="indexterm" href="net2000users.html#id353212">User Needs</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id357027">Key Points Learned</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></dt><dt>wide-area network, <a class="indexterm" href="HA.html#id386110">Use and Location of BDCs</a>, <a class="indexterm" href="HA.html#id386291">Replicate Data to Conserve Peak-Demand Wide-Area Bandwidth</a></dt><dt>winbind, <a class="indexterm" href="net2000users.html#id354011">Implementation</a>, <a class="indexterm" href="unixclients.html#id358022">Dissection and Discussion</a>, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id377126">Introduction</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id382367">Technical Issues</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="DomApps.html#id383649">NSS Configuration</a></dt><dt>Winbind, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="kerberos.html#id378089">Technical Issues</a>, <a class="indexterm" href="kerberos.html#id381514">Key Points Learned</a></dt><dt>winbind trusted domains only, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>winbind use default domain, <a class="indexterm" href="kerberos.html#id380037">Checkpoint Controls</a></dt><dt>winbindd, <a class="indexterm" href="small.html#id329058">Validation</a>, <a class="indexterm" href="secure.html#ch4valid">Validation</a>, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a>, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a>, <a class="indexterm" href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a>, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a>, <a class="indexterm" href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a>, <a class="indexterm" href="upgrades.html#id368384">Updating from Samba Versions after 3.0.6 to a Current Release</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a>, <a class="indexterm" href="DomApps.html#id383127">Samba Configuration</a>, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a>, <a class="indexterm" href="appendix.html#id387952">Starting Samba</a></dt><dt>winbindd_cache.tdb, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>winbindd_idmap.tdb, <a class="indexterm" href="unixclients.html#id358046">Technical Issues</a></dt><dt>Windows, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dd><dl><dt>client, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt><dt>NT, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a></dt></dl></dd><dt>Windows 2000 ACLs, <a class="indexterm" href="kerberos.html#id380830">Managing Windows 200x ACLs</a></dt><dt>Windows 2003 Serve, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Windows 200x ACLs, <a class="indexterm" href="kerberos.html#id381636">Questions and Answers</a></dt><dt>Windows accounts, <a class="indexterm" href="happy.html#id342070">Technical Issues</a></dt><dt>Windows ACLs, <a class="indexterm" href="kerberos.html#id381318">Setting Posix ACLs in UNIX/Linux</a></dt><dt>Windows Address Book, <a class="indexterm" href="nw4migration.html#id373667">LDAP Server Configuration</a></dt><dt>Windows ADS Domain, <a class="indexterm" href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></dt><dt>Windows clients, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>Windows Explorer, <a class="indexterm" href="simple.html#validate1">Validation</a></dt><dt>Windows explorer, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>Windows security identifier (see SID)</dt><dt>Windows Servers, <a class="indexterm" href="kerberos.html#id377126">Introduction</a></dt><dt>Windows Services for UNIX (see SUS)</dt><dt>Windows XP, <a class="indexterm" href="small.html#id327326">Assignment Tasks</a></dt><dt>WINS, <a class="indexterm" href="simple.html#id324064">Implementation</a>, <a class="indexterm" href="small.html#id327416">Technical Issues</a>, <a class="indexterm" href="small.html#id327606">Implementation</a>, <a class="indexterm" href="secure.html#ch4wincfg">Windows Client Configuration</a>, <a class="indexterm" href="Big500users.html#id336141">Technical Issues</a>, <a class="indexterm" href="Big500users.html#ch5wincfg">Windows Client Configuration</a>, <a class="indexterm" href="net2000users.html#id353288">The Nature of Windows Networking Protocols</a>, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a>, <a class="indexterm" href="primer.html#chap01qa">Questions and Answers</a></dt><dd><dl><dt>lookup, <a class="indexterm" href="unixclients.html#id365047">Questions and Answers</a></dt><dt>name resolution, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt><dt>server, <a class="indexterm" href="happy.html">Making Happy Users</a>, <a class="indexterm" href="HA.html#id385556">Routed Networks</a></dt></dl></dd><dt>WINS server, <a class="indexterm" href="Big500users.html">The 500-User Office</a>, <a class="indexterm" href="net2000users.html#id357166">Questions and Answers</a></dt><dt>WINS serving, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>wins support, <a class="indexterm" href="secure.html#id330776">Implementation</a></dt><dt>wins.dat, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a>, <a class="indexterm" href="upgrades.html#id368475">Replacing a Domain Member Server</a></dt><dt>Wireshark, <a class="indexterm" href="primer.html#id390627">Requirements and Notes</a></dt><dt>wireshark, <a class="indexterm" href="primer.html#id390920">Exercises</a></dt><dt>Word, <a class="indexterm" href="kerberos.html#id380465">Share Point Directory and File Permissions</a></dt><dt>workgroup, <a class="indexterm" href="simple.html#id323262">Implementation</a>, <a class="indexterm" href="upgrades.html#id366291">Security Identifiers (SIDs)</a>, <a class="indexterm" href="upgrades.html#id367023">Change of Workgroup (Domain) Name</a></dt><dt>Workgroup Announcement, <a class="indexterm" href="primer.html#id391782">Findings</a></dt><dt>workstation, <a class="indexterm" href="unixclients.html#id358731">Implementation</a></dt><dt>wrapper, <a class="indexterm" href="DomApps.html#id384336">Questions and Answers</a></dt><dt>write lock, <a class="indexterm" href="appendix.html#id390484">Opportunistic Locking Controls</a></dt></dl></div><div class="indexdiv"><h3>X</h3><dl><dt>xinetd, <a class="indexterm" href="secure.html#procstart">Process Startup Configuration</a></dt><dt>XML, <a class="indexterm" href="net2000users.html#id352928">Dissection and Discussion</a></dt><dt>xmlsam, <a class="indexterm" href="net2000users.html#id354011">Implementation</a></dt></dl></div><div class="indexdiv"><h3>Y</h3><dl><dt>YaST, <a class="indexterm" href="happy.html#sbehap-PAM-NSS">PAM and NSS Client Configuration</a></dt><dt>Yellow Pages, <a class="indexterm" href="net2000users.html#id353585">Identity Management Needs</a></dt><dt>yellow pages (see NIS)</dt></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="go01.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> </td></tr><tr><td width="40%" align="left" valign="top">Glossary </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> </td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/kerberos.html b/docs/htmldocs/Samba3-ByExample/kerberos.html deleted file mode 100644 index d20b66a900..0000000000 --- a/docs/htmldocs/Samba3-ByExample/kerberos.html +++ /dev/null @@ -1,831 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 11. Active Directory, Kerberos, and Security</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="RefSection.html" title="Part III. Reference Section"><link rel="next" href="DomApps.html" title="Chapter 12. Integrating Additional Services"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 11. Active Directory, Kerberos, and Security</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="RefSection.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="DomApps.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 11. Active Directory, Kerberos, and Security"><div class="titlepage"><div><div><h2 class="title"><a name="kerberos"></a>Chapter 11. Active Directory, Kerberos, and Security</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="kerberos.html#id377126">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id377710">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#id377723">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id378089">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#ch10expl">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="kerberos.html#id379573">Share Access Controls</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id379908">Share Definition Controls</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id380465">Share Point Directory and File Permissions</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id380830">Managing Windows 200x ACLs</a></span></dt><dt><span class="sect2"><a href="kerberos.html#id381514">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="kerberos.html#id381636">Questions and Answers</a></span></dt></dl></div><p><a class="indexterm" name="id377075"></a> - By this point in the book, you have been exposed to many Samba-3 features and capabilities. - More importantly, if you have implemented the examples given, you are well on your way to becoming - a Samba-3 networking guru who knows a lot about Microsoft Windows. If you have taken the time to - practice, you likely have thought of improvements and scenarios with which you can experiment. You - are rather well plugged in to the many flexible ways Samba can be used. - </p><p><a class="indexterm" name="id377090"></a> - This is a book about Samba-3. Understandably, its intent is to present it in a positive light. - The casual observer might conclude that this book is one-eyed about Samba. It is what - would you expect? This chapter exposes some criticisms that have been raised concerning - the use of Samba. For each criticism, there are good answers and appropriate solutions. - </p><p> - Some criticism always comes from deep inside ranks that one would expect to be supportive of a particular - decision. Criticism can be expected from the outside. Let's see how the interesting dynamic of - criticism develops with respect to Abmas. - </p><p><a class="indexterm" name="id377113"></a> - This chapter provides a shameless self-promotion of Samba-3. The objections raised were not pulled - out of thin air. They were drawn from comments made by Samba users and from criticism during - discussions with Windows network administrators. The tone of the objections reflects as closely - as possible that of the original. The case presented is a straw-man example that is designed to - permit each objection to be answered as it might occur in real life. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id377126"></a>Introduction</h2></div></div></div><p><a class="indexterm" name="id377133"></a><a class="indexterm" name="id377141"></a><a class="indexterm" name="id377148"></a><a class="indexterm" name="id377156"></a><a class="indexterm" name="id377164"></a> - Abmas is continuing its meteoric growth with yet further acquisitions. The investment community took - note of the spectacular projection of Abmas onto the global business stage. Abmas is building an - interesting portfolio of companies that includes accounting services, financial advice, investment - portfolio management, property insurance, risk assessment, and the recent addition of a a video rental - business. The pieces do not always appear to fit together, but Mr. Meany is certainly executing an - interesting business growth and development plan. Abmas Video Rentals was recently acquired. - During the time that the acquisition was closing, the Video Rentals business upgraded its Windows - NT4-based network to Windows 2003 Server and Active Directory. - </p><p><a class="indexterm" name="id377182"></a> - You have accepted the fact that Abmas Video Rentals will use Microsoft Active Directory. - The IT team, led by Stan Soroka, is committed to Samba-3 and to maintaining a uniform technology platform. - Stan Soroka's team voiced its disapproval over the decision to permit this business to continue to - operate with a solution that is viewed by Christine and her group as <span class="quote">“<span class="quote">an island of broken - technologies.</span>”</span> This comment was made by one of Christine's staff as they were installing a new - Samba-3 server at the new business. - </p><p><a class="indexterm" name="id377201"></a><a class="indexterm" name="id377209"></a> - Abmas Video Rentals' head of IT heard of this criticism. He was offended that a junior engineer - should make such a comment. He felt that he had to prepare in case he might be criticized for his - decision to use Active Directory. He decided he would defend his decision by hiring the services - of an outside security systems consultant to report<sup>[<a name="id377221" href="#ftn.id377221" class="footnote">12</a>]</sup> on his unit's operations - and to investigate the role of Samba at his site. Here are key extracts from this hypothetical - report: - </p><div class="blockquote"><blockquote class="blockquote"><p><a class="indexterm" name="id377230"></a><a class="indexterm" name="id377238"></a><a class="indexterm" name="id377246"></a><a class="indexterm" name="id377254"></a> - ... the implementation of Microsoft Active Directory at the Abmas Video Rentals, Bamingsham site, - has been examined. We find no evidence to support a notion that vulnerabilities exist at your site. - ... we took additional steps to validate the integrity of the installation and operation of Active - Directory and are pleased that your staff are following sound practices. - </p><p> - ... - </p><p><a class="indexterm" name="id377272"></a><a class="indexterm" name="id377283"></a><a class="indexterm" name="id377294"></a><a class="indexterm" name="id377302"></a><a class="indexterm" name="id377310"></a><a class="indexterm" name="id377318"></a> - User and group accounts, and respective privileges, have been well thought out. File system shares are - appropriately secured. Backup and disaster recovery plans are well managed and validated regularly, and - effective off-site storage practices are considered to exceed industry norms. - </p><p><a class="indexterm" name="id377332"></a><a class="indexterm" name="id377340"></a><a class="indexterm" name="id377347"></a> - Your staff are justifiably concerned that the use of Samba may compromise their good efforts to maintain - a secure network. - </p><p><a class="indexterm" name="id377363"></a><a class="indexterm" name="id377371"></a><a class="indexterm" name="id377379"></a><a class="indexterm" name="id377387"></a> - The recently installed Linux file and application server uses a tool called <code class="literal">winbind</code> - that is indiscriminate about security. All user accounts in Active Directory can be used to access data - stored on the Linux system. We are alarmed that secure information is accessible to staff who should - not even be aware that it exists. We share the concerns of your network management staff who have gone - to great lengths to set fine-grained controls that limit information access to those who need access. - It seems incongruous to us that Samba winbind should be permitted to be used considering that it voids this fine work. - </p><p><a class="indexterm" name="id377412"></a><a class="indexterm" name="id377420"></a><a class="indexterm" name="id377428"></a> - Graham Judd [head of network administration] has locked down the security of all systems and is following - the latest Microsoft guidelines. ... null session connections have been disabled ... the internal network - is isolated from the outside world, the [product name removed] firewall is under current contract - maintenance support from [the manufacturer]. ... our attempts to penetrate security of your systems - failed to find problems common to Windows networking sites. We commend your staff on their attention to - detail and for following Microsoft recommended best practices. - </p><p> - ... - </p><p><a class="indexterm" name="id377448"></a><a class="indexterm" name="id377456"></a><a class="indexterm" name="id377464"></a><a class="indexterm" name="id377471"></a> - Regarding the use of Samba, we offer the following comments: Samba is in use in nearly half of - all sites we have surveyed. ... It is our opinion that Samba offers no better security than Microsoft - ... what worries us regarding Samba is the need to disable essential Windows security features such as - secure channel support, digital sign'n'seal on all communication traffic, and running Active Directory in - mixed mode so that Samba clients and servers can authenticate all of it. Additionally, we are concerned that - Samba is not at the full capabilities of Microsoft Windows NT4 server. Microsoft has moved well beyond that - with trusted computing initiatives that the Samba developers do not participate in. - </p><p><a class="indexterm" name="id377489"></a><a class="indexterm" name="id377496"></a><a class="indexterm" name="id377504"></a><a class="indexterm" name="id377512"></a><a class="indexterm" name="id377520"></a><a class="indexterm" name="id377528"></a><a class="indexterm" name="id377536"></a> - One wonders about the integrity of an open source program that is developed by a team of hackers - who cannot be held accountable for the flaws in their code. The sheer number of updates and bug - fixes they have released should ring alarm bells in any business. - </p><p><a class="indexterm" name="id377549"></a><a class="indexterm" name="id377557"></a><a class="indexterm" name="id377565"></a> - Another factor that should be considered is that buying Microsoft products and services helps to - provide employment in the IT industry. Samba and Open Source software place those jobs at risk. - </p></blockquote></div><p><a class="indexterm" name="id377578"></a><a class="indexterm" name="id377586"></a> - This is also a challenge to rise above the trouble spot. You call Stan's team together for a simple - discussion, but it gets further out of hand. When you return to your office, you find the following - email in your in-box: - </p><p> - Good afternoon, - </p><div class="blockquote"><table border="0" width="100%" cellspacing="0" cellpadding="0" class="blockquote" summary="Block quote"><tr><td width="10%" valign="top"> </td><td width="80%" valign="top"><p> - I apologize for the leak of internal discussions to the new business. It reflects poorly on our - professionalism and has put you in an unpleasant position. I regret the incident. - </p><p> - I also wish to advise that two of the recent recruits want to implement Kerberos authentication - across all systems. I concur with the desire to improve security. One of the new guys who is championing - the move to Kerberos was responsible for the comment that caused the embarrassment. - </p><p><a class="indexterm" name="id377616"></a><a class="indexterm" name="id377624"></a><a class="indexterm" name="id377632"></a><a class="indexterm" name="id377640"></a> - I am experiencing difficulty in handling the sharp push for Kerberos. He claims that Kerberos, OpenLDAP, - plus Samba-3 will seamlessly replace Microsoft Active Directory. I am a little out of my depth with respect - to the feasibility of such a move, but have taken steps to pull both of them into line. With your consent, - I would like to hire the services of a well-known Samba consultant to set the record straight. - </p><p><a class="indexterm" name="id377655"></a><a class="indexterm" name="id377662"></a><a class="indexterm" name="id377670"></a><a class="indexterm" name="id377678"></a><a class="indexterm" name="id377686"></a><a class="indexterm" name="id377694"></a> - I intend to use this report to answer the criticism raised and would like to establish a policy that we - will approve the use of Microsoft Windows Servers (and Active Directory) subject to all costs being covered - out of the budget of the division that wishes to go its own way. I propose that dissenters will still remain - responsible to meet the budgeted contribution to IT operations as a whole. I believe we should not coerce - use of any centrally proposed standards, but make all noncompliance the financial responsibility of the - out-of-step division. Hopefully, this will encourage all divisions to walk with us and not alone. - </p></td><td width="10%" valign="top"> </td></tr><tr><td width="10%" valign="top"> </td><td colspan="2" align="right" valign="top">--<span class="attribution">Stan</span></td></tr></table></div><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id377710"></a>Assignment Tasks</h3></div></div></div><p> - You agreed with Stan's recommendations and hired a consultant to help defuse the powder - keg. The consultant's task is to provide a tractable answer to each of the issues raised. The consultant must be able - to support his or her claims, keep emotions to the side, and answer technically. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id377723"></a>Dissection and Discussion</h2></div></div></div><p><a class="indexterm" name="id377730"></a><a class="indexterm" name="id377738"></a><a class="indexterm" name="id377746"></a><a class="indexterm" name="id377754"></a><a class="indexterm" name="id377761"></a><a class="indexterm" name="id377769"></a><a class="indexterm" name="id377777"></a> - Samba-3 is a tool. No one is pounding your door to make you use Samba. That is a choice that you are free to - make or reject. It is likely that your decision to use Samba can greatly benefit your company. - The Samba Team obviously believes that the Samba software is a worthy choice. - If you hire a consultant to assist with the installation and/or deployment of Samba, or if you hire - someone to help manage your Samba installation, you can create income and employment. Alternately, - money saved by not spending in the IT area can be spent elsewhere in the business. All money saved - or spent creates employment. - </p><p><a class="indexterm" name="id377794"></a><a class="indexterm" name="id377802"></a><a class="indexterm" name="id377809"></a><a class="indexterm" name="id377817"></a><a class="indexterm" name="id377825"></a> - In the long term, the use of Samba must be economically sustainable. In some situations, Samba is adopted - purely to provide file and print service interoperability on platforms that otherwise cannot provide - access to data and to printers for Microsoft Windows clients. Samba is used by some businesses to - effect a reduction in the cost of providing IT services. Obviously, it is also used by some as an - alternative to the use of a Microsoft file and print serving platforms with no consideration of costs. - </p><p><a class="indexterm" name="id377841"></a><a class="indexterm" name="id377848"></a><a class="indexterm" name="id377856"></a><a class="indexterm" name="id377864"></a> - It would be foolish to adopt a technology that might put any data or users at risk. Security affects - everyone. The Samba-Team is fully cognizant of the responsibility they have to their users. - The Samba documentation clearly reveals that full responsibility is accepted to fix anything - that is broken. - </p><p><a class="indexterm" name="id377878"></a><a class="indexterm" name="id377886"></a><a class="indexterm" name="id377894"></a><a class="indexterm" name="id377902"></a><a class="indexterm" name="id377913"></a><a class="indexterm" name="id377921"></a><a class="indexterm" name="id377929"></a><a class="indexterm" name="id377937"></a><a class="indexterm" name="id377945"></a><a class="indexterm" name="id377952"></a><a class="indexterm" name="id377960"></a> - There is a mistaken perception in the IT industry that commercial software providers are fully - accountable for the defects in products. Open Source software comes with no warranty, so it is - often assumed that its use confers a higher degree of risk. Everyone should read commercial software - End User License Agreements (EULAs). You should determine what real warranty is offered and the - extent of liability that is accepted. Doing so soon dispels the popular notion that - commercial software vendors are willingly accountable for product defects. In many cases, the - commercial vendor accepts liability only to reimburse the price paid for the software. - </p><p><a class="indexterm" name="id377977"></a><a class="indexterm" name="id377985"></a><a class="indexterm" name="id377993"></a><a class="indexterm" name="id378001"></a><a class="indexterm" name="id378009"></a><a class="indexterm" name="id378016"></a> - The real issues that a consumer (like you) needs answered are What is the way of escape from technical - problems, and how long will it take? The average problem turnaround time in the Open Source community is - approximately 48 hours. What does the EULA offer? What is the track record in the commercial software - industry? What happens when your commercial vendor decides to cease providing support? - </p><p><a class="indexterm" name="id378031"></a><a class="indexterm" name="id378039"></a><a class="indexterm" name="id378047"></a><a class="indexterm" name="id378055"></a><a class="indexterm" name="id378062"></a><a class="indexterm" name="id378070"></a><a class="indexterm" name="id378078"></a> - Open Source software at least puts you in possession of the source code. This means that when - all else fails, you can hire a programmer to solve the problem. - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id378089"></a>Technical Issues</h3></div></div></div><p> - Each issue is now discussed and, where appropriate, example implementation steps are - provided. - </p><div class="variablelist"><dl><dt><span class="term">Winbind and Security</span></dt><dd><p><a class="indexterm" name="id378109"></a><a class="indexterm" name="id378117"></a><a class="indexterm" name="id378125"></a><a class="indexterm" name="id378136"></a><a class="indexterm" name="id378144"></a><a class="indexterm" name="id378152"></a><a class="indexterm" name="id378160"></a><a class="indexterm" name="id378168"></a><a class="indexterm" name="id378175"></a><a class="indexterm" name="id378183"></a> - Windows network administrators may be dismayed to find that <code class="literal">winbind</code> - exposes all domain users so that they may use their domain account credentials to - log on to a UNIX/Linux system. The fact that all users in the domain can see the - UNIX/Linux server in their Network Neighborhood and can browse the shares on the - server seems to excite them further. - </p><p><a class="indexterm" name="id378204"></a><a class="indexterm" name="id378212"></a><a class="indexterm" name="id378220"></a><a class="indexterm" name="id378227"></a> - <code class="literal">winbind</code> provides for the UNIX/Linux domain member server or - client, the same as one would obtain by adding a Microsoft Windows server or - client to the domain. The real objection is the fact that Samba is not MS Windows - and therefore requires handling a little differently from the familiar Windows systems. - One must recognize fear of the unknown. - </p><p><a class="indexterm" name="id378247"></a><a class="indexterm" name="id378255"></a><a class="indexterm" name="id378263"></a><a class="indexterm" name="id378271"></a><a class="indexterm" name="id378279"></a><a class="indexterm" name="id378290"></a> - Windows network administrators need to recognize that <code class="literal">winbind</code> does - not, and cannot, override account controls set using the Active Directory management - tools. The control is the same. Have no fear. - </p><p><a class="indexterm" name="id378309"></a><a class="indexterm" name="id378317"></a><a class="indexterm" name="id378328"></a><a class="indexterm" name="id378336"></a><a class="indexterm" name="id378344"></a><a class="indexterm" name="id378352"></a><a class="indexterm" name="id378360"></a><a class="indexterm" name="id378368"></a><a class="indexterm" name="id378375"></a><a class="indexterm" name="id378383"></a> - Where Samba and the ADS domain account information obtained through the use of - <code class="literal">winbind</code> permits access, by browsing or by the drive mapping to - a share, to data that should be better protected. This can only happen when security - controls have not been properly implemented. Samba permits access controls to be set - on: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Shares themselves (i.e., the logical share itself)</p></li><li class="listitem"><p>The share definition in <code class="filename">smb.conf</code></p></li><li class="listitem"><p>The shared directories and files using UNIX permissions</p></li><li class="listitem"><p>Using Windows 2000 ACLs if the file system is POSIX enabled</p></li></ul></div><p> - Examples of each are given in <a class="link" href="kerberos.html#ch10expl" title="Implementation">“Implementation”</a>. - </p></dd><dt><span class="term">User and Group Controls</span></dt><dd><p><a class="indexterm" name="id378452"></a><a class="indexterm" name="id378460"></a><a class="indexterm" name="id378471"></a><a class="indexterm" name="id378483"></a><a class="indexterm" name="id378490"></a><a class="indexterm" name="id378498"></a><a class="indexterm" name="id378506"></a><a class="indexterm" name="id378514"></a><a class="indexterm" name="id378522"></a> - User and group management facilities as known in the Windows ADS environment may be - used to provide equivalent access control constraints or to provide equivalent - permissions and privileges on Samba servers. Samba offers greater flexibility in the - use of user and group controls because it has additional layers of control compared to - Windows 200x/XP. For example, access controls on a Samba server may be set within - the share definition in a manner for which Windows has no equivalent. - </p><p><a class="indexterm" name="id378537"></a><a class="indexterm" name="id378545"></a><a class="indexterm" name="id378553"></a><a class="indexterm" name="id378561"></a><a class="indexterm" name="id378572"></a><a class="indexterm" name="id378580"></a><a class="indexterm" name="id378588"></a> - In any serious analysis of system security, it is important to examine the safeguards - that remain when all other protective measures fail. An administrator may inadvertently - set excessive permissions on the file system of a shared resource, or he may set excessive - privileges on the share itself. If that were to happen in a Windows 2003 Server environment, - the data would indeed be laid bare to abuse. Yet, within a Samba share definition, it is - possible to guard against that by enforcing controls on the share definition itself. You - see a practical example of this a little later in this chapter. - </p><p><a class="indexterm" name="id378610"></a><a class="indexterm" name="id378618"></a> - The report that is critical of Samba really ought to have exercised greater due - diligence: the real weakness is on the side of a Microsoft Windows environment. - </p></dd><dt><span class="term">Security Overall</span></dt><dd><p><a class="indexterm" name="id378638"></a> - Samba is designed in such a manner that weaknesses inherent in the design of - Microsoft Windows networking ought not to expose the underlying UNIX/Linux file - system in any way. All software has potential defects, and Samba is no exception. - What matters more is how defects that are discovered get dealt with. - </p><p><a class="indexterm" name="id378652"></a><a class="indexterm" name="id378660"></a><a class="indexterm" name="id378668"></a><a class="indexterm" name="id378676"></a> - The Samba Team totally agrees with the necessity to observe and fully implement - every security facility to provide a level of protection and security that is necessary - and that the end user (or network administrator) needs. Never would the Samba Team - recommend a compromise to system security, nor would deliberate defoliation of - security be publicly condoned; yet this is the practice by many Windows network - administrators just to make happy users who have no notion of consequential risk. - </p><p><a class="indexterm" name="id378691"></a><a class="indexterm" name="id378699"></a><a class="indexterm" name="id378707"></a><a class="indexterm" name="id378715"></a><a class="indexterm" name="id378723"></a><a class="indexterm" name="id378730"></a><a class="indexterm" name="id378738"></a> - The report condemns Samba for releasing updates and security fixes, yet Microsoft - online updates need to be applied almost weekly. The answer to the criticism - lies in the fact that Samba development is continuing, documentation is improving, - user needs are being increasingly met or exceeded, and security updates are issued - with a short turnaround time. - </p><p><a class="indexterm" name="id378753"></a><a class="indexterm" name="id378761"></a><a class="indexterm" name="id378768"></a><a class="indexterm" name="id378776"></a><a class="indexterm" name="id378784"></a> - The release of Samba-4 is expected around late 2004 to early 2005 and involves a near - complete rewrite to permit extensive modularization and to prepare Samba for new - functionality planned for addition during the next-generation series. The Samba Team - is responsible and can be depended upon; the history to date suggests a high - degree of dependability and on charter development consistent with published - roadmap projections. - </p><p><a class="indexterm" name="id378803"></a><a class="indexterm" name="id378811"></a><a class="indexterm" name="id378822"></a><a class="indexterm" name="id378833"></a><a class="indexterm" name="id378841"></a><a class="indexterm" name="id378849"></a><a class="indexterm" name="id378857"></a> - Not well published is the fact that Microsoft was a foundation member of - the Common Internet File System (CIFS) initiative, together with the participation - of the network attached storage (NAS) industry. Unfortunately, for the past few years, - Microsoft has been absent from active involvement at CIFS conferences and has - not exercised the leadership expected of a major force in the networking technology - space. The Samba Team has maintained consistent presence and leadership at all - CIFS conferences and at the interoperability laboratories run concurrently with - them. - </p></dd><dt><span class="term">Cryptographic Controls (schannel, sign'n'seal)</span></dt><dd><p><a class="indexterm" name="id378881"></a><a class="indexterm" name="id378889"></a><a class="indexterm" name="id378897"></a> - The report correctly mentions that Samba did not support the most recent - <code class="constant">schannel</code> and <code class="constant">digital sign'n'seal</code> features - of Microsoft Windows NT/200x/XPPro products. This is one of the key features - of the Samba-3 release. Market research reports take so long to generate that they are - seldom a reflection of current practice, and in many respects reports are like a - pathology report they reflect accurately (at best) status at a snapshot in time. - Meanwhile, the world moves on. - </p><p><a class="indexterm" name="id378923"></a><a class="indexterm" name="id378930"></a><a class="indexterm" name="id378938"></a><a class="indexterm" name="id378946"></a><a class="indexterm" name="id378953"></a><a class="indexterm" name="id378968"></a><a class="indexterm" name="id378976"></a> - It should be pointed out that had clear public specifications for the protocols - been published, it would have been much easier to implement these features and would have - taken less time to do. The sole mechanism used to find an algorithm that is compatible - with the methods used by Microsoft has been based on observation of network traffic - and trial-and-error implementation of potential techniques. The real value of public - and defensible standards is obvious to all and would have enabled more secure networking - for everyone. - </p><p><a class="indexterm" name="id378992"></a><a class="indexterm" name="id379000"></a> - Critics of Samba often ignore fundamental problems that may plague (or may have plagued) - the users of Microsoft's products also. Those who are first to criticize Samba - for not rushing into release of <code class="constant">digital sign'n'seal</code> support - often dismiss the problems that Microsoft has - <a class="ulink" href="http://support.microsoft.com/default.aspx?kbid=321733" target="_top">acknowledged</a> - and for which a fix was provided. In fact, - <a class="ulink" href="http://www.tangent-systems.com/support/delayedwrite.html" target="_top">Tangent Systems</a> - have documented a significant problem with delays writes that can be connected with the - implementation of sign'n'seal. They provide a work-around that is not trivial for many - Windows networking sites. From notes such as this it is clear that there are benefits - from not rushing new technology out of the door too soon. - </p><p><a class="indexterm" name="id379032"></a><a class="indexterm" name="id379040"></a><a class="indexterm" name="id379048"></a><a class="indexterm" name="id379056"></a><a class="indexterm" name="id379064"></a><a class="indexterm" name="id379072"></a><a class="indexterm" name="id379080"></a><a class="indexterm" name="id379088"></a><a class="indexterm" name="id379096"></a> - One final comment is warranted. If companies want more secure networking protocols, - the most effective method by which this can be achieved is by users seeking - and working together to help define open and publicly refereed standards. The - development of closed source, proprietary methods that are developed in a - clandestine framework of secrecy, under claims of digital rights protection, does - not favor the diffusion of safe networking protocols and certainly does not - help the consumer to make a better choice. - </p></dd><dt><span class="term">Active Directory Replacement with Kerberos, LDAP, and Samba - <a class="indexterm" name="id379116"></a><a class="indexterm" name="id379128"></a><a class="indexterm" name="id379136"></a><a class="indexterm" name="id379143"></a> - - </span></dt><dd><p> - </p><div class="literallayout"><p> </p></div><p> - The Microsoft networking protocols extensively make use of remote procedure call (RPC) - technology. Active Directory is not a simple mixture of LDAP and Kerberos together - with file and print services, but rather is a complex, intertwined implementation - of them that uses RPCs that are not supported by any of these component technologies - and yet by which they are made to interoperate in ways that the components do not - support. - </p><p><a class="indexterm" name="id379174"></a><a class="indexterm" name="id379185"></a><a class="indexterm" name="id379193"></a><a class="indexterm" name="id379201"></a><a class="indexterm" name="id379209"></a> - In order to make the popular request for Samba to be an Active Directory Server a - reality, it is necessary to add to OpenLDAP, Kerberos, as well as Samba, RPC calls - that are not presently supported. The Samba Team has not been able to gain critical - overall support for all project maintainers to work together on the complex - challenge of developing and integrating the necessary technologies. Therefore, if - the Samba Team does not make it a priority to absorb Kerberos and LDAP functionality - into the Samba project, this dream request cannot become a reality. - </p><p><a class="indexterm" name="id379225"></a><a class="indexterm" name="id379233"></a><a class="indexterm" name="id379241"></a><a class="indexterm" name="id379252"></a><a class="indexterm" name="id379260"></a> - At this time, the integration of LDAP, Kerberos, and the missing RPCs is not on the - Samba development roadmap. If it is not on the published roadmap, it cannot be delivered - anytime soon. Ergo, ADS server support is not a current goal for Samba development. - The Samba Team is most committed to permitting Samba to be a full ADS domain member - that is increasingly capable of being managed using Microsoft Windows MMC tools. - </p></dd></dl></div><div class="sect3" title="Kerberos Exposed"><div class="titlepage"><div><div><h4 class="title"><a name="id379276"></a>Kerberos Exposed</h4></div></div></div><p><a class="indexterm" name="id379282"></a><a class="indexterm" name="id379290"></a><a class="indexterm" name="id379298"></a> - Kerberos is a network authentication protocol that provides secure authentication for - client-server applications by using secret-key cryptography. Firewalls are an insufficient - barrier mechanism in today's networking world; at best they only restrict incoming network - traffic but cannot prevent network traffic that comes from authorized locations from - performing unauthorized activities. - </p><p><a class="indexterm" name="id379312"></a><a class="indexterm" name="id379320"></a><a class="indexterm" name="id379328"></a> - Kerberos was created by MIT as a solution to network security problems. The Kerberos protocol uses - strong cryptography so that a client can prove its identity to a server (and vice versa) across an - insecure network connection. After a client and server has used Kerberos to prove their identity, - they can also encrypt all of their communications to assure privacy and data integrity as they go - about their business. - </p><p><a class="indexterm" name="id379343"></a><a class="indexterm" name="id379351"></a><a class="indexterm" name="id379359"></a><a class="indexterm" name="id379367"></a><a class="indexterm" name="id379378"></a> - Kerberos is a trusted third-party service. That means that there is a third party (the kerberos - server) that is trusted by all the entities on the network (users and services, usually called - principals). All principals share a secret password (or key) with the kerberos server and this - enables principals to verify that the messages from the kerberos server are authentic. Therefore, - trusting the kerberos server, users and services can authenticate each other. - </p><p> - <a class="indexterm" name="id379394"></a> - <a class="indexterm" name="id379401"></a> - <a class="indexterm" name="id379408"></a> - Kerberos was, until recently, a technology that was restricted from being exported from the United States. - For many years that hindered global adoption of more secure networking technologies both within the United States - and abroad. A free and unencumbered implementation of MIT Kerberos has been produced in Europe - and is available from the <a class="ulink" href="http://www.pdc.kth.se/heimdal/" target="_top">Royal Institute</a> of - Technology (KTH), Sweden. It is known as the Heimdal Kerberos project. In recent times the U.S. government - has removed sanctions affecting the global distribution of MIT Kerberos. It is likely that there will be a - significant surge forward in the development of Kerberos-enabled applications and in the general deployment - and use of Kerberos across the spectrum of the information technology industry. - </p><p> - <a class="indexterm" name="id379430"></a> - A storm has broken out concerning interoperability between MIT Kerberos and Microsofts' implementation - of it. For example, a 2002 - <a class="ulink" href="http://www.idg.com.sg/idgwww.nsf/0/5DDA8D153A7505A748256BAB000D992A?OpenDocument" target="_top">IDG</a> - report<sup>[<a name="id379447" href="#ftn.id379447" class="footnote">13</a>]</sup> by - states: - </p><div class="blockquote"><blockquote class="blockquote"><p> - A Microsoft Corp. executive testified at the software giant's remedy hearing that the company goes to - great lengths to disclose interfaces and protocols that allow third-party software products to interact - with Windows. But a lawyer with the states suing Microsoft pointed out that when it comes to the company's - use of the Kerberos authentication specification, not everyone agrees. - </p><p> - <a class="indexterm" name="id379470"></a> - Robert Short, vice president of Windows core technology at Microsoft, wrote in his direct testimony prepared - before his appearance that non-Microsoft operating systems can disregard the portion of the Kerberos version - 5 specification that Windows clients use for proprietary purposes and still achieve interoperability with - the Microsoft OS. Microsoft takes advantage of unspecified fields in the Kerberos specification for storing - Windows-specific authorization data, Short wrote. The designers of Kerberos left these fields undefined so - that software developers could add their own authorization information, he said. - </p></blockquote></div><p> - <a class="indexterm" name="id379488"></a> - <a class="indexterm" name="id379494"></a> - It so happens that Microsoft Windows clients depend on and expect the contents of the <span class="emphasis"><em>unspecified - fields</em></span> in the Kerberos 5 communications data stream for their Windows interoperability, - particularly when Samba is expected to emulate a Windows Server 200x domain controller. But the interoperability - issue goes far deeper than this. In the domain control protocols that are used by MS Windows XP Professional, - there is a tight interdependency between the Kerberos protocols and the Microsoft distributed computing environment - (DCE) RPCs that themselves are an integral part of the SMB/CIFS protocols as used by - Microsoft. - </p><p> - Microsoft makes the following comment in a reference in a - <a class="ulink" href="http://www.microsoft.com/technet/itsolutions/interop/mgmt/kerberos.asp" target="_top"> - technet</a> article: - </p><div class="blockquote"><blockquote class="blockquote"><p><a class="indexterm" name="id379523"></a><a class="indexterm" name="id379535"></a> - The DCE Security Services are also layered on the Kerberos protocol. DCE authentication services use RPC - representation of Kerberos protocol messages. In addition, DCE uses the authorization data field in Kerberos - tickets to convey Privilege Attribute Certificates (PACs) that define user identity and group membership. - The DCE PAC is used in a similar manner as Windows NT Security IDs for user authorization and access control. - Windows NT services will not be able to translate DCE PACs into Windows NT user and group identifiers. This - is not an issue with Kerberos interoperability, but rather an issue of interoperability between DCE and - Windows NT access control information. - </p></blockquote></div></div></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ch10expl"></a>Implementation</h2></div></div></div><p> - The following procedures outline the implementation of the security measures discussed so far. - </p><div class="sect2" title="Share Access Controls"><div class="titlepage"><div><div><h3 class="title"><a name="id379573"></a>Share Access Controls</h3></div></div></div><p><a class="indexterm" name="id379580"></a><a class="indexterm" name="id379588"></a><a class="indexterm" name="id379596"></a> - Access control entries placed on the share itself act as a filter at the time a when CIFS/SMB client (such as - Windows XP Pro) attempts to make a connection to the Samba server. - </p><div class="procedure" title="Procedure 11.1. Create/Edit/Delete Share ACLs"><a name="id379607"></a><p class="title"><b>Procedure 11.1. Create/Edit/Delete Share ACLs</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p><a class="indexterm" name="id379617"></a><a class="indexterm" name="id379625"></a> - From a Windows 200x/XP Professional workstation, log on to the domain using the Domain Administrator - account (on Samba domains, this is usually the account called <code class="constant">root</code>). - </p></li><li class="step" title="Step 2"><p> - Click - <span class="guimenu">Start</span> → <span class="guimenuitem">Settings</span> → <span class="guimenuitem">Control Panel</span> → <span class="guimenuitem">Administrative Tools</span> → <span class="guimenuitem">Computer Management</span>. - </p></li><li class="step" title="Step 3"><p> - In the left panel, - <span class="guimenu">[Right mouse menu item] Computer Management (Local)</span> → <span class="guimenuitem">Connect to another computer ...</span> → <span class="guimenuitem">Browse...</span> → <span class="guimenuitem">Advanced</span> → <span class="guimenuitem">Find Now</span>. In the lower panel, click on the name of the server you wish to - administer. Click <span class="guimenu">OK</span> → <span class="guimenuitem">OK</span> → <span class="guimenuitem">OK</span>.<a class="indexterm" name="id379745"></a> - In the left panel, the entry <span class="guimenu">Computer Management (Local)</span> should now reflect - the change made. For example, if the server you are administering is called <code class="constant">FRODO</code>, - the Computer Management entry should now say <span class="guimenu">Computer Management (FRODO)</span>. - </p></li><li class="step" title="Step 4"><p> - In the left panel, click <span class="guimenu">Computer Management (FRODO)</span> → <span class="guimenuitem">[+] Shared Folders</span> → <span class="guimenuitem">Shares</span>. - </p></li><li class="step" title="Step 5"><p><a class="indexterm" name="id379806"></a><a class="indexterm" name="id379814"></a> - In the right panel, double-click on the share on which you wish to set/edit ACLs. This - will bring up the Properties panel. Click the <span class="guimenu">Share Permissions</span> tab. - </p></li><li class="step" title="Step 6"><p><a class="indexterm" name="id379836"></a><a class="indexterm" name="id379844"></a><a class="indexterm" name="id379852"></a><a class="indexterm" name="id379860"></a><a class="indexterm" name="id379868"></a><a class="indexterm" name="id379875"></a> - You may now edit/add/remove access control settings. Be very careful. Many problems have been - created by people who decided that everyone should be rejected but one particular group should - have full control. This is a catch-22 situation because members of that particular group also - belong to the group <code class="constant">Everyone</code>, which therefore overrules any permissions - set for the permitted group. - </p></li><li class="step" title="Step 7"><p> - When you are done with editing, close all panels by clicking through the <span class="guimenu">OK</span> - buttons. - </p></li></ol></div></div><div class="sect2" title="Share Definition Controls"><div class="titlepage"><div><div><h3 class="title"><a name="id379908"></a>Share Definition Controls</h3></div></div></div><p><a class="indexterm" name="id379914"></a><a class="indexterm" name="id379926"></a><a class="indexterm" name="id379934"></a><a class="indexterm" name="id379942"></a><a class="indexterm" name="id379949"></a><a class="indexterm" name="id379957"></a> - Share-definition-based access controls can be used like a checkpoint or like a pile-driver. Just as a - checkpoint can be used to require someone who wants to get through to meet certain requirements, so - it is possible to require the user (or group the user belongs to) to meet specified credential-related - objectives. It can be likened to a pile-driver by overriding default controls in that having met the - credential-related objectives, the user can be granted powers and privileges that would not normally be - available under default settings. - </p><p><a class="indexterm" name="id379973"></a><a class="indexterm" name="id379981"></a><a class="indexterm" name="id379989"></a><a class="indexterm" name="id379997"></a> - It must be emphasized that the controls discussed here can act as a filter or give rights of passage - that act as a superstructure over normal directory and file access controls. However, share-level - ACLs act at a higher level than do share definition controls because the user must filter through the - share-level controls to get to the share-definition controls. The proper hierarchy of controls implemented - by Samba and Windows networking consists of: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Share-level ACLs</p></li><li class="listitem"><p>Share-definition controls</p></li><li class="listitem"><p>Directory and file permissions</p></li><li class="listitem"><p>Directory and file POSIX ACLs</p></li></ol></div><div class="sect3" title="Checkpoint Controls"><div class="titlepage"><div><div><h4 class="title"><a name="id380037"></a>Checkpoint Controls</h4></div></div></div><p><a class="indexterm" name="id380044"></a> - Consider the following extract from a <code class="filename">smb.conf</code> file defining the share called <code class="constant">Apps</code>: -</p><pre class="screen"> -[Apps] - comment = Application Share - path = /data/apps - read only = Yes - valid users = @Employees -</pre><p> - This definition permits only those who are members of the group called <code class="constant">Employees</code> to - access the share. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p><a class="indexterm" name="id380077"></a><a class="indexterm" name="id380088"></a><a class="indexterm" name="id380096"></a><a class="indexterm" name="id380104"></a><a class="indexterm" name="id380112"></a> - On domain member servers and clients, even when the <em class="parameter"><code>winbind use default domain</code></em> has - been specified, the use of domain accounts in security controls requires fully qualified domain specification, - for example, <a class="link" href="smb.conf.5.html#VALIDUSERS" target="_top">valid users = @"MEGANET\Northern Engineers"</a>. - Note the necessity to use the double quotes to avoid having the space in the Windows group name interpreted as a - delimiter. - </p></div><p><a class="indexterm" name="id380145"></a><a class="indexterm" name="id380152"></a><a class="indexterm" name="id380160"></a> - If there is an ACL on the share itself to permit read/write access for all <code class="constant">Employees</code> - as well as read/write for the group <code class="constant">Doctors</code>, both groups are permitted through - to the share. However, at the moment an attempt is made to set up a connection to the share, a member of - the group <code class="constant">Doctors</code>, who is not also a member of the group <code class="constant">Employees</code>, - would immediately fail to validate. - </p><p><a class="indexterm" name="id380188"></a> - Consider another example. In this case, you want to permit all members of the group <code class="constant">Employees</code> - except the user <code class="constant">patrickj</code> to access the <code class="constant">Apps</code> share. This can be - easily achieved by setting a share-level ACL permitting only <code class="constant">Employees</code> to access the share, - and then in the share definition controls excluding just <code class="constant">patrickj</code>. Here is how that might - be done: -</p><pre class="screen"> -[Apps] - comment = Application Share - path = /data/apps - read only = Yes - invalid users = patrickj -</pre><p> - <a class="indexterm" name="id380224"></a> - Let us assume that you want to permit the user <code class="constant">gbshaw</code> to manage any file in the - UNIX/Linux file system directory <code class="filename">/data/apps</code>, but you do not want to grant any write - permissions beyond that directory tree. Here is one way this can be done: -</p><pre class="screen"> -[Apps] - comment = Application Share - path = /data/apps - read only = Yes - invalid users = patrickj - admin users = gbshaw -</pre><p> - <a class="indexterm" name="id380251"></a> - Now we have a set of controls that permits only <code class="constant">Employees</code> who are also members of - the group <code class="constant">Doctors</code>, excluding the user <code class="constant">patrickj</code>, to have - read-only privilege, but the user <code class="constant">gbshaw</code> is granted administrative rights. - The administrative rights conferred upon the user <code class="constant">gbshaw</code> permit operation as - if that user has logged in as the user <code class="constant">root</code> on the UNIX/Linux system and thus, - for access to the directory tree that has been shared (exported), permit the user to override controls - that apply to all other users on that resource. - </p><p> - There are additional checkpoint controls that may be used. For example, if for the same share we now - want to provide the user <code class="constant">peters</code> with the ability to write to one directory to - which he has write privilege in the UNIX file system, you can specifically permit that with the - following settings: -</p><pre class="screen"> -[Apps] - comment = Application Share - path = /data/apps - read only = Yes - invalid users = patrickj - admin users = gbshaw - write list = peters -</pre><p> - <a class="indexterm" name="id380303"></a> - This is a particularly complex example at this point, but it begins to demonstrate the possibilities. - You should refer to the online manual page for the <code class="filename">smb.conf</code> file for more information regarding - the checkpoint controls that Samba implements. - </p></div><div class="sect3" title="Override Controls"><div class="titlepage"><div><div><h4 class="title"><a name="id380322"></a>Override Controls</h4></div></div></div><p><a class="indexterm" name="id380328"></a> - Override controls implemented by Samba permit actions like the adoption of a different identity - during file system operations, the forced overwriting of normal file and directory permissions, - and so on. You should refer to the online manual page for the <code class="filename">smb.conf</code> file for more information regarding - the override controls that Samba implements. - </p><p> - In the following example, you want to create a Windows networking share that any user can access. - However, you want all read and write operations to be performed as if the user <code class="constant">billc</code> - and member of the group <code class="constant">Mentors</code> read/write the files. Here is one way this - can be done: -</p><pre class="screen"> -[someshare] - comment = Some Files Everyone May Overwrite - path = /data/somestuff - read only = No - force user = billc - force group = Mentors -</pre><p> - <a class="indexterm" name="id380366"></a><a class="indexterm" name="id380374"></a> - That is all there is to it. Well, it is almost that simple. The downside of this method is that - users are logged onto the Windows client as themselves, and then immediately before accessing the - file, Samba makes system calls to change the effective user and group to the forced settings - specified, completes the file transaction, and then reverts to the actually logged-on identity. - This imposes significant overhead on Samba. The alternative way to effectively achieve the same result - (but with lower system CPU overheads) is described next. - </p><p><a class="indexterm" name="id380389"></a><a class="indexterm" name="id380397"></a><a class="indexterm" name="id380405"></a><a class="indexterm" name="id380416"></a><a class="indexterm" name="id380424"></a> - The use of the <em class="parameter"><code>force user</code></em> or the <em class="parameter"><code>force group</code></em> may - also have a severe impact on system (particularly on Windows client) performance. If opportunistic - locking is enabled on the share (the default), it causes an <code class="constant">oplock break</code> to be - sent to the client even if the client has not opened the file. On networks that have high traffic - density, or on links that are routed to a remote network segment, <code class="constant">oplock breaks</code> - can be lost. This results in possible retransmission of the request, or the client may time-out while - waiting for the file system transaction (read or write) to complete. The result can be a profound - apparent performance degradation as the client continually attempts to reconnect to overcome the - effect of the lost <code class="constant">oplock break</code>, or time-out. - </p></div></div><div class="sect2" title="Share Point Directory and File Permissions"><div class="titlepage"><div><div><h3 class="title"><a name="id380465"></a>Share Point Directory and File Permissions</h3></div></div></div><p><a class="indexterm" name="id380472"></a><a class="indexterm" name="id380480"></a><a class="indexterm" name="id380488"></a><a class="indexterm" name="id380496"></a> - Samba has been designed and implemented so that it respects as far as is feasible the security and - user privilege controls that are built into the UNIX/Linux operating system. Samba does nothing - with respect to file system access that violates file system permission settings, unless it is - explicitly instructed to do otherwise through share definition controls. Given that Samba obeys - UNIX file system controls, this chapter does not document simple information that can be obtained - from a basic UNIX training guide. Instead, one common example of a typical problem is used - to demonstrate the most effective solution referred to in the immediately preceding paragraph. - </p><p><a class="indexterm" name="id380512"></a><a class="indexterm" name="id380520"></a><a class="indexterm" name="id380528"></a> - One of the common issues that repeatedly pops up on the Samba mailing lists involves the saving of - Microsoft Office files (Word and Excel) to a network drive. Here is the typical sequence: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p> - A user opens a Word document from a network drive. The file was owned by user <code class="constant">janetp</code> - and <code class="constant">users</code>, and was set read/write-enabled for everyone. - </p></li><li class="listitem"><p> - File changes and edits are made. - </p></li><li class="listitem"><p> - The file is saved, and MS Word is closed. - </p></li><li class="listitem"><p> - The file is now owned by the user <code class="constant">billc</code> and group <code class="constant">doctors</code>, - and is set read/write by <code class="constant">billc</code>, read-only by <code class="constant">doctors</code>, and - no access by everyone. - </p></li><li class="listitem"><p> - The original owner cannot now access her own file and is <span class="quote">“<span class="quote">justifiably</span>”</span> upset. - </p></li></ol></div><p> - There have been many postings over the years that report the same basic problem. Frequently Samba users - want to know when this <span class="quote">“<span class="quote">bug</span>”</span> will be fixed. The fact is, this is not a bug in Samba at all. - Here is the real sequence of what happens in this case. - </p><p><a class="indexterm" name="id380609"></a><a class="indexterm" name="id380617"></a><a class="indexterm" name="id380624"></a> - When the user saves a file, MS Word creates a new (temporary) file. This file is naturally owned - by the user who creates the file (<code class="constant">billc</code>) and has the permissions that follow - that user's default settings within the operating system (UNIX/Linux). When MS Word has finished writing - the file to disk, it then renames the new (temporary) file to the name of the old one. MS Word does not - change the ownership or permissions to what they were on the original file. The file is thus a totally - new file, and the old one has been deleted in the process. - </p><p> - Samba received a request to create a new file, and then to rename the file to a new name. The old file that - has the same name is now automatically deleted. Samba has no way of knowing that the new file should - perhaps have the same ownership and permissions as the old file. To Samba, these are entirely independent - operations. - </p><p> - The question is, <span class="quote">“<span class="quote">How can we solve the problem?</span>”</span> - </p><p> - The solution is simple. Use UNIX file system permissions and controls to your advantage. Follow these - simple steps to create a share in which all files will consistently be owned by the same user and the - same group: - </p><div class="procedure" title="Procedure 11.2. Using Directory Permissions to Force File User and Group Ownership"><a name="id380661"></a><p class="title"><b>Procedure 11.2. Using Directory Permissions to Force File User and Group Ownership</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Change your share definition so that it matches this pattern: -</p><pre class="screen"> -[finance] - path = /usr/data/finance - browseable = Yes - read only = No -</pre><p> - </p></li><li class="step" title="Step 2"><p><a class="indexterm" name="id380685"></a><a class="indexterm" name="id380696"></a> - Set consistent user and group permissions recursively down the directory tree as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> chown -R janetp.users /usr/data/finance -</pre><p> - </p></li><li class="step" title="Step 3"><p><a class="indexterm" name="id380727"></a> - Set the files and directory permissions to be read/write for owner and group, and not accessible - to others (everyone), using the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod ug+rwx,o-rwx /usr/data/finance -</pre><p> - </p></li><li class="step" title="Step 4"><p><a class="indexterm" name="id380754"></a> - Set the SGID (supergroup) bit on all directories from the top down. This means all files - can be created with the permissions of the group set on the directory. It means all users - who are members of the group <code class="constant">finance</code> can read and write all files in - the directory. The directory is not readable or writable by anyone who is not in the - <code class="constant">finance</code> group. Simply follow this example: -</p><pre class="screen"> -<code class="prompt">root# </code> find /usr/data/finance -type d -exec chmod ug+s {}\; -</pre><p> - - </p></li><li class="step" title="Step 5"><p><a class="indexterm" name="id380791"></a><a class="indexterm" name="id380799"></a><a class="indexterm" name="id380807"></a> - Make sure all users that must have read/write access to the directory have - <code class="constant">finance</code> group membership as their primary group, - for example, the group they belong to in <code class="filename">/etc/passwd</code>. - </p></li></ol></div></div><div class="sect2" title="Managing Windows 200x ACLs"><div class="titlepage"><div><div><h3 class="title"><a name="id380830"></a>Managing Windows 200x ACLs</h3></div></div></div><p><a class="indexterm" name="id380837"></a><a class="indexterm" name="id380845"></a><a class="indexterm" name="id380853"></a><a class="indexterm" name="id380860"></a> - Samba must translate Windows 2000 ACLs to UNIX POSIX ACLs. This has some interesting side effects because - there is not a one-to-one equivalence between them. The as-close-as-possible ACLs match means - that some transactions are not possible from MS Windows clients. One of these is to reset the ownership - of directories and files. If you want to reset ownership, this must be done from a UNIX/Linux login. - </p><p> - There are two possible ways to set ACLs on UNIX/Linux file systems from a Windows network workstation, - either via File Manager or via the Microsoft Management Console (MMC) Computer Management interface. - </p><div class="sect3" title="Using the MMC Computer Management Interface"><div class="titlepage"><div><div><h4 class="title"><a name="id380879"></a>Using the MMC Computer Management Interface</h4></div></div></div><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - From a Windows 200x/XP Professional workstation, log on to the domain using the Domain Administrator - account (on Samba domains, this is usually the account called <code class="constant">root</code>). - </p></li><li class="step" title="Step 2"><p> - Click - <span class="guimenu">Start</span> → <span class="guimenuitem">Settings</span> → <span class="guimenuitem">Control Panel</span> → <span class="guimenuitem">Administrative Tools</span> → <span class="guimenuitem">Computer Management</span>. - </p></li><li class="step" title="Step 3"><p> - In the left panel, - <span class="guimenu">[Right mouse menu item] Computer Management (Local)</span> → <span class="guimenuitem">Connect to another computer ...</span> → <span class="guimenuitem">Browse...</span> → <span class="guimenuitem">Advanced</span> → <span class="guimenuitem">Find Now</span>. In the lower panel, click on the name of the server you wish to - administer. Click <span class="guimenu">OK</span> → <span class="guimenuitem">OK</span> → <span class="guimenuitem">OK</span>. - In the left panel, the entry <span class="guimenu">Computer Management (Local)</span> should now reflect - the change made. For example, if the server you are administering is called <code class="constant">FRODO</code>, - the Computer Management entry should now say: <span class="guimenu">Computer Management (FRODO)</span>. - </p></li><li class="step" title="Step 4"><p> - In the left panel, click <span class="guimenu">Computer Management (FRODO)</span> → <span class="guimenuitem">[+] Shared Folders</span> → <span class="guimenuitem">Shares</span>. - </p></li><li class="step" title="Step 5"><p><a class="indexterm" name="id381056"></a><a class="indexterm" name="id381064"></a><a class="indexterm" name="id381072"></a><a class="indexterm" name="id381080"></a> - In the right panel, double-click on the share on which you wish to set/edit ACLs. This - brings up the Properties panel. Click the <span class="guimenu">Security</span> tab. It is best - to edit ACLs using the <code class="constant">Advanced</code> editing features. Click the - <span class="guimenu">Advanced</span> button. This opens a panel that has four tabs. Only the - functionality under the <code class="constant">Permissions</code> tab can be utilized with respect - to a Samba domain server. - </p></li><li class="step" title="Step 6"><p><a class="indexterm" name="id381116"></a><a class="indexterm" name="id381124"></a> - You may now edit/add/remove access control settings. Be very careful. Many problems have been - created by people who decided that everyone should be rejected but one particular group should - have full control. This is a catch-22 situation because members of that particular group also - belong to the group <code class="constant">Everyone</code>, which therefore overrules any permissions - set for the permitted group. - </p></li><li class="step" title="Step 7"><p> - When you are done with editing, close all panels by clicking through the <span class="guimenu">OK</span> - buttons until the last panel closes. - </p></li></ol></div></div><div class="sect3" title="Using MS Windows Explorer (File Manager)"><div class="titlepage"><div><div><h4 class="title"><a name="id381156"></a>Using MS Windows Explorer (File Manager)</h4></div></div></div><p> - The following alternative method may be used from a Windows workstation. In this example we work - with a domain called <code class="constant">MEGANET</code>, a server called <code class="constant">MASSIVE</code>, and a - share called <code class="constant">Apps</code>. The underlying UNIX/Linux share point for this share is - <code class="filename">/data/apps</code>. - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Click <span class="guimenu">Start</span> → <span class="guimenuitem">[right-click] My Computer</span> → <span class="guimenuitem">Explore</span> → <span class="guimenuitem">[left panel] [+] My Network Places</span> → <span class="guimenuitem">[+] Entire Network</span> → <span class="guimenuitem">[+] Microsoft Windows Network</span> → <span class="guimenuitem">[+] Meganet</span> → <span class="guimenuitem">[+] Massive</span> → <span class="guimenuitem">[right-click] Apps</span> → <span class="guimenuitem">Properties</span> → <span class="guimenuitem">Security</span> → <span class="guimenuitem">Advanced</span>. This opens a panel that has four tabs. Only the functionality under the - <code class="constant">Permissions</code> tab can be utilized for a Samba domain server. - </p></li><li class="step" title="Step 2"><p><a class="indexterm" name="id381277"></a><a class="indexterm" name="id381285"></a> - You may now edit/add/remove access control settings. Be very careful. Many problems have been - created by people who decided that everyone should be rejected but one particular group should - have full control. This is a catch-22 situation because members of that particular group also - belong to the group <code class="constant">Everyone</code>, which therefore overrules any permissions - set for the permitted group. - </p></li><li class="step" title="Step 3"><p> - When you are done with editing, close all panels by clicking through the <span class="guimenu">OK</span> - buttons until the last panel closes. - </p></li></ol></div></div><div class="sect3" title="Setting Posix ACLs in UNIX/Linux"><div class="titlepage"><div><div><h4 class="title"><a name="id381318"></a>Setting Posix ACLs in UNIX/Linux</h4></div></div></div><p><a class="indexterm" name="id381325"></a><a class="indexterm" name="id381333"></a> - Yet another alternative method for setting desired security settings on the shared resource files and - directories can be achieved by logging into UNIX/Linux and setting POSIX ACLs directly using command-line - tools. Here is an example session on the same resource as in the immediately preceding example on a SUSE 9 - Linux system: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Log into the Linux system as the user <code class="constant">root</code>. - </p></li><li class="step" title="Step 2"><p> - Change directory to the location of the exported (shared) Windows file share (Apps), which is in - the directory <code class="filename">/data</code>. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /data -</pre><p> - Retrieve the existing POSIX ACLs entry by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> getfacl apps -# file: apps -# owner: root -# group: root -user::rwx -group::rwx -other::r-x -</pre><p> - </p></li><li class="step" title="Step 3"><p><a class="indexterm" name="id381401"></a> - You want to add permission for <code class="constant">AppsMgrs</code> to enable them to - manage the applications (apps) share. It is important to set the ACL recursively - so that the AppsMgrs have this capability throughout the directory tree that is - being shared. This is done using the <code class="constant">-R</code> option as shown. - Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> setfacl -m -R group:AppsMgrs:rwx /data/apps -</pre><p> - Because setting an ACL does not provide a response, you immediately validate the command executed - as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> getfacl /data/apps -# file: apps -# owner: root -# group: root -user::rwx -group::rwx -group:AppsMgrs:rwx -mask::rwx -other::r-x -</pre><p> - This confirms that the change of POSIX ACL permissions has been effective. - </p></li><li class="step" title="Step 4"><p><a class="indexterm" name="id381451"></a><a class="indexterm" name="id381459"></a><a class="indexterm" name="id381467"></a><a class="indexterm" name="id381475"></a><a class="indexterm" name="id381483"></a> - It is highly recommended that you read the online manual page for the <code class="literal">setfacl</code> - and <code class="literal">getfacl</code> commands. This provides information regarding how to set/read the default - ACLs and how that may be propagated through the directory tree. In Windows ACLs terms, this is the equivalent - of setting <code class="constant">inheritance</code> properties. - </p></li></ol></div></div></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id381514"></a>Key Points Learned</h3></div></div></div><p> - The mish-mash of issues were thrown together into one chapter because it seemed like a good idea. - Looking back, this chapter could be broken into two, but it's too late now. It has been done. - The highlights covered are as follows: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><a class="indexterm" name="id381529"></a><a class="indexterm" name="id381537"></a><a class="indexterm" name="id381545"></a><a class="indexterm" name="id381553"></a> - Winbind honors and does not override account controls set in Active Directory. - This means that password change, logon hours, and so on, are (or soon will be) enforced - by Samba winbind. At this time, an out-of-hours login is denied and password - change is enforced. At this time, if logon hours expire, the user is not forcibly - logged off. That may be implemented at some later date. - </p></li><li class="listitem"><p><a class="indexterm" name="id381568"></a><a class="indexterm" name="id381576"></a> - Sign'n'seal (plus schannel support) has been implemented in Samba-3. Beware of potential - problems acknowledged by Microsoft as having been fixed but reported by some as still - possibly an open issue. - </p></li><li class="listitem"><p><a class="indexterm" name="id381590"></a><a class="indexterm" name="id381598"></a><a class="indexterm" name="id381606"></a><a class="indexterm" name="id381614"></a> - The combination of Kerberos 5, plus OpenLDAP, plus Samba, cannot replace Microsoft - Active Directory. The possibility to do this is not planned in the current Samba-3 - roadmap. Samba-3 does aim to provide further improvements in interoperability so that - UNIX/Linux systems may be fully integrated into Active Directory domains. - </p></li><li class="listitem"><p> - This chapter reviewed mechanisms by which Samba servers may be kept secure. Each of - the four key methodologies was reviewed with specific reference to example deployment - techniques. - </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id381636"></a>Questions and Answers</h2></div></div></div><p> - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id381645"></a><dl><dt> <a href="kerberos.html#id381651"> - Does Samba-3 require the Sign'n'seal registry hacks needed by Samba-2? - </a></dt><dt> <a href="kerberos.html#id381720"> - Does Samba-3 support Active Directory? - </a></dt><dt> <a href="kerberos.html#id381747"> - When Samba-3 is used with Active Directory, is it necessary to run mixed-mode operation, as was - necessary with Samba-2? - </a></dt><dt> <a href="kerberos.html#id381782"> - Is it safe to set share-level access controls in Samba? - </a></dt><dt> <a href="kerberos.html#id381809"> - Is it mandatory to set share ACLs to get a secure Samba-3 server? - </a></dt><dt> <a href="kerberos.html#id381882"> - The valid users did not work on the [homes]. - Has this functionality been restored yet? - </a></dt><dt> <a href="kerberos.html#id381944"> - Is the bias against use of the force user and force group - really warranted? - </a></dt><dt> <a href="kerberos.html#id382006"> - The example given for file and directory access control forces all files to be owned by one - particular user. I do not like that. Is there any way I can see who created the file? - </a></dt><dt> <a href="kerberos.html#id382050"> - In the book, “The Official Samba-3 HOWTO and Reference Guide”, you recommended use - of the Windows NT4 Server Manager (part of the SRVTOOLS.EXE) utility. Why - have you mentioned only the use of the Windows 200x/XP MMC Computer Management utility? - </a></dt><dt> <a href="kerberos.html#id382110"> - I tried to set valid users = @Engineers, but it does not work. My Samba - server is an Active Directory domain member server. Has this been fixed now? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id381651"></a><a name="id381654"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id381657"></a><a class="indexterm" name="id381665"></a> - Does Samba-3 require the <code class="constant">Sign'n'seal</code> registry hacks needed by Samba-2? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id381683"></a><a class="indexterm" name="id381691"></a><a class="indexterm" name="id381699"></a> - No. Samba-3 fully supports <code class="constant">Sign'n'seal</code> as well as <code class="constant">schannel</code> - operation. The registry change should not be applied when Samba-3 is used as a domain controller. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id381720"></a><a name="id381722"></a></td><td align="left" valign="top"><p> - Does Samba-3 support Active Directory? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id381732"></a> - Yes. Samba-3 can be a fully participating native mode Active Directory client. Samba-3 does not - provide Active Directory services. It cannot be used to replace a Microsoft Active Directory - server implementation. Samba-3 can function as an Active Directory client (workstation) toolkit, - and it can function as an Active Directory domain member server. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id381747"></a><a name="id381749"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id381752"></a> - When Samba-3 is used with Active Directory, is it necessary to run mixed-mode operation, as was - necessary with Samba-2? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id381768"></a> - No. Samba-3 can be used with NetBIOS over TCP/IP disabled, just as can be done with Windows 200x - Server and 200x/XPPro client products. It is no longer necessary to run mixed-mode operation, - because Samba-3 can join a native Windows 2003 Server ADS domain. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id381782"></a><a name="id381785"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id381788"></a> - Is it safe to set share-level access controls in Samba? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes. Share-level access controls have been supported since early versions of Samba-2. This is - very mature technology. Not enough sites make use of this powerful capability, neither on - Windows server or with Samba servers. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id381809"></a><a name="id381811"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id381814"></a> - Is it mandatory to set share ACLs to get a secure Samba-3 server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id381829"></a><a class="indexterm" name="id381837"></a><a class="indexterm" name="id381845"></a><a class="indexterm" name="id381853"></a><a class="indexterm" name="id381861"></a> - No. Samba-3 honors UNIX/Linux file system security, supports Windows 200x ACLs, and provides - means of securing shares through share definition controls in the <code class="filename">smb.conf</code> file. The additional - support for share-level ACLs is like frosting on the cake. It adds to security but is not essential - to it. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id381882"></a><a name="id381884"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id381887"></a> - The <em class="parameter"><code>valid users</code></em> did not work on the <em class="parameter"><code>[homes]</code></em>. - Has this functionality been restored yet? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id381914"></a> - Yes. This was fixed in Samba-3.0.2. The use of this parameter is strongly recommended as a safeguard - on the <em class="parameter"><code>[homes]</code></em> meta-service. The correct way to specify this is: - <a class="link" href="smb.conf.5.html#VALIDUSERS" target="_top">valid users = %S</a>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id381944"></a><a name="id381947"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id381950"></a><a class="indexterm" name="id381958"></a><a class="indexterm" name="id381966"></a> - Is the bias against use of the <em class="parameter"><code>force user</code></em> and <em class="parameter"><code>force group</code></em> - really warranted? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id381992"></a> - There is no bias. There is a determination to recommend the right tool for the task at hand. - After all, it is better than putting users through performance problems, isn't it? - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id382006"></a><a name="id382008"></a></td><td align="left" valign="top"><p> - The example given for file and directory access control forces all files to be owned by one - particular user. I do not like that. Is there any way I can see who created the file? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id382019"></a> - Sure. You do not have to set the SUID bit on the directory. Simply execute the following command - to permit file ownership to be retained by the user who created it: -</p><pre class="screen"> -<code class="prompt">root# </code> find /usr/data/finance -type d -exec chmod g+s {}\; -</pre><p> - Note that this required no more than removing the <code class="constant">u</code> argument so that the - SUID bit is not set for the owner. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id382050"></a><a name="id382052"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id382055"></a> - In the book, <span class="quote">“<span class="quote">The Official Samba-3 HOWTO and Reference Guide</span>”</span>, you recommended use - of the Windows NT4 Server Manager (part of the <code class="filename">SRVTOOLS.EXE</code>) utility. Why - have you mentioned only the use of the Windows 200x/XP MMC Computer Management utility? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id382081"></a><a class="indexterm" name="id382088"></a> - Either tool can be used with equal effect. There is no benefit of one over the other, except that - the MMC utility is present on all Windows 200x/XP systems and does not require additional software - to be downloaded and installed. Note that if you want to manage user and group accounts in your - Samba-controlled domain, the only tool that permits that is the NT4 Domain User Manager, which - is provided as part of the <code class="filename">SRVTOOLS.EXE</code> utility. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id382110"></a><a name="id382112"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id382116"></a><a class="indexterm" name="id382123"></a><a class="indexterm" name="id382130"></a> - I tried to set <em class="parameter"><code>valid users = @Engineers</code></em>, but it does not work. My Samba - server is an Active Directory domain member server. Has this been fixed now? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The use of this parameter has always required the full specification of the domain account, for - example, <em class="parameter"><code>valid users = @"MEGANET2\Domain Admins"</code></em>. - </p></td></tr></tbody></table></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id377221" href="#id377221" class="para">12</a>] </sup>This report is entirely fictitious. - Any resemblance to a factual report is purely coincidental.</p></div><div class="footnote"><p><sup>[<a name="ftn.id379447" href="#id379447" class="para">13</a>] </sup>Note: This link is no longer active. The same article is still - available from <a class="ulink" href="http://199.105.191.226/Man/2699/020430msdoj/" target="_top">ITWorld.com</a> (July 5, 2005)</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="RefSection.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="DomApps.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Part III. Reference Section </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 12. Integrating Additional Services</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/net2000users.html b/docs/htmldocs/Samba3-ByExample/net2000users.html deleted file mode 100644 index 8892043f42..0000000000 --- a/docs/htmldocs/Samba3-ByExample/net2000users.html +++ /dev/null @@ -1,1000 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 6. A Distributed 2000-User Network</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="happy.html" title="Chapter 5. Making Happy Users"><link rel="next" href="DMSMig.html" title="Part II. Domain Members, Updating Samba and Migration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 6. A Distributed 2000-User Network</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="happy.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="DMSMig.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 6. A Distributed 2000-User Network"><div class="titlepage"><div><div><h2 class="title"><a name="net2000users"></a>Chapter 6. A Distributed 2000-User Network</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="net2000users.html#id352846">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id352871">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id352928">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id353175">Technical Issues</a></span></dt><dt><span class="sect2"><a href="net2000users.html#id353997">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id354011">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="net2000users.html#id357027">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="net2000users.html#id357166">Questions and Answers</a></span></dt></dl></div><p> -There is something indeed mystical about things that are -big. Large networks exhibit a certain magnetism and exude a sense of -importance that obscures reality. You and I know that it is no more -difficult to secure a large network than it is a small one. We all -know that over and above a particular number of network clients, the -rules no longer change; the only real dynamic is the size of the domain -(much like a kingdom) over which the network ruler (oops, administrator) -has control. The real dynamic then transforms from the technical to the -political. Then again, that point is often reached well before the -kingdom (or queendom) grows large. -</p><p> -If you have systematically worked your way to this chapter, hopefully you -have found some gems and techniques that are applicable in your -world. The network designs you have worked with in this book have their -strong points as well as weak ones. That is to be expected given that -they are based on real business environments, the specifics of which are -molded to serve the purposes of this book. -</p><p> -This chapter is intent on wrapping up issues that are central to -implementation and design of progressively larger networks. Are you ready -for this chapter? Good, it is time to move on. -</p><p> -In previous chapters, you made the assumption that your network -administration staff need detailed instruction right down to the -nuts and bolts of implementing the solution. That is still the case, -but they have graduated now. You decide to document only those issues, -methods, and techniques that are new or complex. Routine tasks such as -implementing a DNS or a DHCP server are under control. Even the basics of -Samba are largely under control. So in this section you focus on the -specifics of implementing LDAP changes, Samba changes, and approach and -design of the solution and its deployment. -</p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id352846"></a>Introduction</h2></div></div></div><p> -Abmas is a miracle company. Most businesses would have collapsed under -the weight of rapid expansion that this company has experienced. Samba -is flexible, so there is no need to reinstall the whole operating -system just because you need to implement a new network design. In fact, -you can keep an old server running right up to the moment of cutover -and then do a near-live conversion. There is no need to reinstall a -Samba server just to change the way your network should function. -</p><p> -<a class="indexterm" name="id352861"></a> -Network growth is common to all organizations. In this exercise, -your preoccupation is with the mechanics of implementing Samba and -LDAP so that network users on each network segment can work -without impediment. -</p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id352871"></a>Assignment Tasks</h3></div></div></div><p> - Starting with the configuration files for the server called - <code class="constant">MASSIVE</code> in <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, you now deal with the - issues that are particular to large distributed networks. Your task - is simple identify the challenges, consider the - alternatives, and then design and implement a solution. - </p><p> - <a class="indexterm" name="id352896"></a> - Remember, you have users based in London (UK), Los Angeles, - Washington. DC, and, three buildings in New York. A significant portion - of your workforce have notebook computers and roam all over the - world. Some dial into the office, others use VPN connections over the - Internet, and others just move between buildings.i - </p><p> - What do you say to an employee who normally uses a desktop - system but must spend six weeks on the road with a notebook computer? - She is concerned about email access and how to keep coworkers current - with changing documents. - </p><p> - To top it all off, you have one network support person and one - help desk person based in London, a single person dedicated to all - network operations in Los Angeles, five staff for user administration - and help desk in New York, plus one <span class="emphasis"><em>floater</em></span> for - Washington. - </p><p> - You have outsourced all desktop deployment and management to - DirectPointe. Your concern is server maintenance and third-level - support. Build a plan and show what must be done. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id352928"></a>Dissection and Discussion</h2></div></div></div><p> -<a class="indexterm" name="id352936"></a> -<a class="indexterm" name="id352942"></a> -In <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, you implemented an LDAP server that provided the -<em class="parameter"><code>passdb backend</code></em> for the Samba servers. You -explored ways to accelerate Windows desktop profile handling and you -took control of network performance. -</p><p> -<a class="indexterm" name="id352966"></a> -<a class="indexterm" name="id352972"></a> -<a class="indexterm" name="id352979"></a> -<a class="indexterm" name="id352986"></a> -The implementation of an LDAP-based passdb backend (known as -<span class="emphasis"><em>ldapsam</em></span> in Samba parlance), or some form of database -that can be distributed, is essential to permit the deployment of Samba -Primary and Backup Domain Controllers (PDC/BDCs). You see, the problem -is that the <span class="emphasis"><em>tdbsam</em></span>-style passdb backend does not -lend itself to being replicated. The older plain-text-based -<span class="emphasis"><em>smbpasswd</em></span>-style passdb backend can be replicated -using a tool such as <code class="literal">rsync</code>, but -<span class="emphasis"><em>smbpasswd</em></span> suffers the drawback that it does not -support the range of account facilities demanded by modern network -managers. -</p><p> -<a class="indexterm" name="id353021"></a> -<a class="indexterm" name="id353028"></a> -The new <span class="emphasis"><em>tdbsam</em></span> facility supports functionality -that is similar to an <span class="emphasis"><em>ldapsam</em></span>, but the lack of -distributed infrastructure sorely limits the scope for its -deployment. This raises the following questions: Why can't I just use -an XML-based backend, or for that matter, why not use an SQL-based -backend? Is support for these tools broken? Answers to these -questions require a bit of background.</p><p> -<a class="indexterm" name="id353049"></a> -<a class="indexterm" name="id353055"></a> -<a class="indexterm" name="id353062"></a> -<a class="indexterm" name="id353069"></a> -<span class="emphasis"><em>What is a directory?</em></span> A directory is a -collection of information regarding objects that can be accessed to -rapidly find information that is relevant in a particular and -consistent manner. A directory differs from a database in that it is -generally more often searched (read) than updated. As a consequence, the -information is organized to facilitate read access rather than to -support transaction processing.</p><p> -<a class="indexterm" name="id353086"></a> -<a class="indexterm" name="id353095"></a> -<a class="indexterm" name="id353102"></a> -<a class="indexterm" name="id353109"></a> -The Lightweight Directory Access Protocol (LDAP) differs -considerably from a traditional database. It has a simple search -facility that uniquely makes a highly preferred mechanism for managing -user identities. LDAP provides a scalable mechanism for distributing -the data repository and for keeping all copies (slaves) in sync with -the master repository.</p><p> -<a class="indexterm" name="id353122"></a> -<a class="indexterm" name="id353129"></a> -<a class="indexterm" name="id353135"></a> -Samba is a flexible and powerful file and print sharing -technology. It can use many external authentication sources and can be -part of a total authentication and identity management -infrastructure. The two most important external sources for large sites -are Microsoft Active Directory and LDAP. Sites that specifically wish to -avoid the proprietary implications of Microsoft Active Directory -naturally gravitate toward OpenLDAP.</p><p> -<a class="indexterm" name="id353149"></a> -In <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, you had to deal with a locally routed -network. All deployment concerns focused around making users happy, -and that simply means taking control over all network practices and -usage so that no one user is disadvantaged by any other. The real -lesson is one of understanding that no matter how much network -bandwidth you provide, bandwidth remains a precious resource.</p><p>In this chapter, you must now consider how the overall network must -function. In particular, you must be concerned with users who move -between offices. You must take into account the way users need to -access information globally. And you must make the network robust -enough so that it can sustain partial breakdown without causing loss of -productivity.</p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id353175"></a>Technical Issues</h3></div></div></div><p> - There are at least three areas that need to be addressed as you - approach the challenge of designing a network solution for the newly - expanded business: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><a class="indexterm" name="id353189"></a> - User needs such as mobility and data access</p></li><li class="listitem"><p>The nature of Windows networking protocols</p></li><li class="listitem"><p>Identity management infrastructure needs</p></li></ul></div><p>Let's look at each in turn.</p><div class="sect3" title="User Needs"><div class="titlepage"><div><div><h4 class="title"><a name="id353212"></a>User Needs</h4></div></div></div><p> - The new company has three divisions. Staff for each division are spread across - the company. Some staff are office-bound and some are mobile users. Mobile - users travel globally. Some spend considerable periods working in other offices. - Everyone wants to be able to work without constraint of productivity. - </p><p> - The challenge is not insignificant. In some parts of the world, even dial-up - connectivity is poor, while in other regions political encumbrances severely - curtail user needs. Parts of the global Internet infrastructure remain shielded - off for reasons outside the scope of this discussion. - </p><p> - <a class="indexterm" name="id353231"></a> - Decisions must be made regarding where data is to be stored, how it will be - replicated (if at all), and what the network bandwidth implications are. For - example, one decision that can be made is to give each office its own master - file storage area that can be synchronized to a central repository in New - York. This would permit global data to be backed up from a single location. - The synchronization tool could be <code class="literal">rsync,</code> run via a cron - job. Mobile users may use off-line file storage under Windows XP Professional. - This way, they can synchronize all files that have changed since each logon - to the network. - </p><p> - <a class="indexterm" name="id353252"></a> - <a class="indexterm" name="id353262"></a> - No matter which way you look at this, the bandwidth requirements - for acceptable performance are substantial even if only 10 percent of - staff are global data users. A company with 3,500 employees, - 280 of whom are mobile users who use a similarly distributed - network, found they needed at least 2 Mb/sec connectivity - between the UK and US offices. Even over 2 Mb/sec bandwidth, this - company abandoned any attempt to run roaming profile usage for - mobile users. At that time, the average roaming profile took 480 - KB, while today the minimum Windows XP Professional roaming - profile involves a transfer of over 750 KB from the profile - server to and from the client. - </p><p> - <a class="indexterm" name="id353277"></a> - Obviously then, user needs and wide-area practicalities dictate the economic and - technical aspects of your network design as well as for standard operating procedures. - </p></div><div class="sect3" title="The Nature of Windows Networking Protocols"><div class="titlepage"><div><div><h4 class="title"><a name="id353288"></a>The Nature of Windows Networking Protocols</h4></div></div></div><p> - <a class="indexterm" name="id353296"></a> - Network logons that include roaming profile handling requires from 140 KB to 2 MB. - The inclusion of support for a minimal set of common desktop applications can push - the size of a complete profile to over 15 MB. This has substantial implications - for location of user profiles. Additionally, it is a significant factor in - determining the nature and style of mandatory profiles that may be enforced as - part of a total service-level assurance program that might be implemented. - </p><p> - <a class="indexterm" name="id353312"></a> - <a class="indexterm" name="id353319"></a> - One way to reduce the network bandwidth impact of user logon - traffic is through folder redirection. In <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, you - implemented this in the new Windows XP Professional standard - desktop configuration. When desktop folders such as <span class="guimenu">My - Documents</span> are redirected to a network drive, they should - also be excluded from synchronization to and from the server on - logon or logout. Redirected folders are analogous to network drive - connections. - </p><p><a class="indexterm" name="id353343"></a> - Of course, network applications should only be run off - local application servers. As a general rule, even with 2 Mb/sec - network bandwidth, it would not make sense at all for someone who - is working out of the London office to run applications off a - server that is located in New York. - </p><p> - <a class="indexterm" name="id353356"></a> - When network bandwidth becomes a precious commodity (that is most - of the time), there is a significant demand to understand network - processes and to mold the limits of acceptability around the - constraints of affordability. - </p><p> - When a Windows NT4/200x/XP Professional client user logs onto - the network, several important things must happen. - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id353375"></a> - The client obtains an IP address via DHCP. (DHCP is - necessary so that users can roam between offices.) - </p></li><li class="listitem"><p> - <a class="indexterm" name="id353387"></a> - <a class="indexterm" name="id353394"></a> - The client must register itself with the WINS and/or DNS server. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id353406"></a> - The client must locate the closest domain controller. - </p></li><li class="listitem"><p> - The client must log onto a domain controller and obtain as part of - that process the location of the user's profile, load it, connect to - redirected folders, and establish all network drive and printer connections. - </p></li><li class="listitem"><p> - The domain controller must be able to resolve the user's - credentials before the logon process is fully implemented. - </p></li></ul></div><p> - Given that this book is about Samba and that it implements the Windows - NT4-style domain semantics, it makes little sense to compare Samba with - Microsoft Active Directory insofar as the logon protocols and principles - of operation are concerned. The following information pertains exclusively - to the interaction between a Windows XP Professional workstation and a - Samba-3.0.20 server. In the discussion that follows, use is made of DHCP and WINS. - </p><p> - As soon as the Windows workstation starts up, it obtains an - IP address. This is immediately followed by registration of its - name both by broadcast and Unicast registration that is directed - at the WINS server. - </p><p> - <a class="indexterm" name="id353444"></a> - <a class="indexterm" name="id353450"></a><a class="indexterm" name="id353460"></a> - Given that the client is already a domain member, it then sends - a directed (Unicast) request to the WINS server seeking the list of - IP addresses for domain controllers (NetBIOS name type 0x1C). The - WINS server replies with the information requested.</p><p> - <a class="indexterm" name="id353472"></a> - <a class="indexterm" name="id353481"></a> - <a class="indexterm" name="id353488"></a> - The client sends two netlogon mailslot broadcast requests - to the local network and to each of the IP addresses returned by - the WINS server. Whichever answers this request first appears to - be the machine that the Windows XP client attempts to use to - process the network logon. The mailslot messages use UDP broadcast - to the local network and UDP Unicast directed at each machine that - was listed in the WINS server response to a request for the list of - domain controllers. - </p><p> - <a class="indexterm" name="id353502"></a> - <a class="indexterm" name="id353511"></a> - <a class="indexterm" name="id353518"></a> - The logon process begins with negotiation of the SMB/CIFS - protocols that are to be used; this is followed by an exchange of - information that ultimately includes the client sending the - credentials with which the user is attempting to logon. The logon - server must now approve the further establishment of the - connection, but that is a good point to halt for now. The priority - here must center around identification of network infrastructure - needs. A secondary fact we need to know is, what happens when - local domain controllers fail or break? - </p><p> - <a class="indexterm" name="id353533"></a> - <a class="indexterm" name="id353540"></a> - <a class="indexterm" name="id353546"></a> - <a class="indexterm" name="id353553"></a> - Under most circumstances, the nearest domain controller - responds to the netlogon mailslot broadcast. The exception to this - norm occurs when the nearest domain controller is too busy or is out - of service. Herein lies an important fact. This means it is - important that every network segment should have at least two - domain controllers. Since there can be only one PDC, all additional - domain controllers are by definition BDCs. - </p><p> - <a class="indexterm" name="id353566"></a> - <a class="indexterm" name="id353573"></a> - The provision of sufficient servers that are BDCs is an - important design factor. The second important design factor - involves how each of the BDCs obtains user authentication - data. That is the subject of the next section, which involves key - decisions regarding Identity Management facilities. - </p></div><div class="sect3" title="Identity Management Needs"><div class="titlepage"><div><div><h4 class="title"><a name="id353585"></a>Identity Management Needs</h4></div></div></div><p> - <a class="indexterm" name="id353593"></a> - <a class="indexterm" name="id353600"></a> - <a class="indexterm" name="id353606"></a> - <a class="indexterm" name="id353613"></a> - Network managers recognize that in large organizations users - generally need to be given resource access based on needs, while - being excluded from other resources for reasons of privacy. It is - therefore essential that all users identify themselves at the - point of network access. The network logon is the principal means - by which user credentials are validated and filtered and appropriate - rights and privileges are allocated. - </p><p> - <a class="indexterm" name="id353627"></a> - <a class="indexterm" name="id353634"></a> - <a class="indexterm" name="id353640"></a> - Unfortunately, network resources tend to have their own Identity - Management facilities, the quality and manageability of which varies - from quite poor to exceptionally good. Corporations that use a mixture - of systems soon discover that until recently, few systems were - designed to interoperate. For example, UNIX systems each have an - independent user database. Sun Microsystems developed a facility that - was originally called <code class="constant">Yellow Pages</code>, and was renamed - when a telephone company objected to the use of its trademark. - What was once called <code class="constant">Yellow Pages</code> is today known - as <code class="constant">Network Information System</code> (NIS). - </p><p> - <a class="indexterm" name="id353666"></a> - NIS gained a strong following throughout the UNIX/VMS space in a short - period of time and retained that appeal and use for over a decade. - Security concerns and inherent limitations have caused it to enter its - twilight. NIS did not gain widespread appeal outside of the UNIX world - and was not universally adopted. Sun updated this to a more secure - implementation called NIS+, but even it has fallen victim to changing - demands as the demand for directory services that can be coupled with - other information systems is catching on. - </p><p> - <a class="indexterm" name="id353681"></a> - <a class="indexterm" name="id353687"></a> - <a class="indexterm" name="id353694"></a> - Nevertheless, both NIS and NIS+ continue to hold ground in - business areas where UNIX still has major sway. Examples of - organizations that remain firmly attached to the use of NIS and - NIS+ include large government departments, education institutions, - and large corporations that have a scientific or engineering - focus. - </p><p> - <a class="indexterm" name="id353707"></a> - <a class="indexterm" name="id353714"></a> - Today's networking world needs a scalable, distributed Identity - Management infrastructure, commonly called a directory. The most - popular technologies today are Microsoft Active Directory service - and a number of LDAP implementations. - </p><p> - <a class="indexterm" name="id353726"></a> - The problem of managing multiple directories has become a focal - point over the past decade, creating a large market for - metadirectory products and services that allow organizations that - have multiple directories and multiple management and control - centers to provision information from one directory into - another. The attendant benefit to end users is the promise of - having to remember and deal with fewer login identities and - passwords.</p><p> - <a class="indexterm" name="id353740"></a> - The challenge of every large network is to find the optimum - balance of internal systems and facilities for Identity - Management resources. How well the solution is chosen and - implemented has potentially significant impact on network bandwidth - and systems response needs.</p><p> - <a class="indexterm" name="id353754"></a> - <a class="indexterm" name="id353761"></a> - <a class="indexterm" name="id353770"></a> - In <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, you implemented a single LDAP server for the - entire network. This may work for smaller networks, but almost - certainly fails to meet the needs of large and complex networks. The - following section documents how you may implement a single - master LDAP server with multiple slave servers.</p><p> - What is the best method for implementing master/slave LDAP - servers within the context of a distributed 2,000-user network is a - question that remains to be answered.</p><p> - <a class="indexterm" name="id353796"></a> - <a class="indexterm" name="id353803"></a> - One possibility that has great appeal is to create a single, - large distributed domain. The practical implications of this - design (see <a class="link" href="net2000users.html#chap7net" title="Figure 6.6. Network Topology 2000 User Complex Design A">“Network Topology 2000 User Complex Design A”</a>) demands the placement of - sufficient BDCs in each location. Additionally, network - administrators must make sure that profiles are not transferred - over the wide-area links, except as a totally unavoidable - measure. Network design must balance the risk of loss of user - productivity against the cost of network management and - maintenance. - </p><p> - <a class="indexterm" name="id353826"></a> - The network design in <a class="link" href="net2000users.html#chap7net2" title="Figure 6.7. Network Topology 2000 User Complex Design B">“Network Topology 2000 User Complex Design B”</a> takes the approach - that management of networks that are too remote to be managed - effectively from New York ought to be given a certain degree of - autonomy. With this rationale, the Los Angeles and London networks, - though fully integrated with those on the East Coast, each have their - own domain name space and can be independently managed and controlled. - One of the key drawbacks of this design is that it flies in the face of - the ability for network users to roam globally without some compromise - in how they may access global resources. - </p><p> - <a class="indexterm" name="id353848"></a> - Desk-bound users need not be negatively affected by this design, since - the use of interdomain trusts can be used to satisfy the need for global - data sharing. - </p><p> - <a class="indexterm" name="id353859"></a> - <a class="indexterm" name="id353866"></a> - <a class="indexterm" name="id353875"></a> - When Samba-3 is configured to use an LDAP backend, it stores the domain - account information in a directory entry. This account entry contains the - domain SID. An unintended but exploitable side effect is that this makes it - possible to operate with more than one PDC on a distributed network. - </p><p> - <a class="indexterm" name="id353887"></a> - <a class="indexterm" name="id353894"></a> - <a class="indexterm" name="id353901"></a> - How might this peculiar feature be exploited? The answer is simple. It is - imperative that each network segment have its own WINS server. Major - servers on remote network segments can be given a static WINS entry in - the <code class="filename">wins.dat</code> file on each WINS server. This allows - all essential data to be visible from all locations. Each location would, - however, function as if it is an independent domain, while all sharing the - same domain SID. Since all domain account information can be stored in a - single LDAP backend, users have unfettered ability to roam. - </p><p> - <a class="indexterm" name="id353921"></a> - <a class="indexterm" name="id353930"></a> - This concept has not been exhaustively validated, though we can see no reason - why this should not work. The important facets are the following: The name of - the domain must be identical in all locations. Each network segment must have - its own WINS server. The name of the PDC must be the same in all locations; this - necessitates the use of NetBIOS name aliases for each PDC so that they can be - accessed globally using the alias and not the PDC's primary name. A single master - LDAP server can be based in New York, with multiple LDAP slave servers located - on every network segment. Finally, the BDCs should each use failover LDAP servers - that are in fact slave LDAP servers on the local segments. - </p><p> - <a class="indexterm" name="id353946"></a> - <a class="indexterm" name="id353956"></a> - <a class="indexterm" name="id353962"></a> - <a class="indexterm" name="id353972"></a> - With a single master LDAP server, all network updates are effected on a single - server. In the event that this should become excessively fragile or network - bandwidth limiting, one could implement a delegated LDAP domain. This is also - known as a partitioned (or multiple partition) LDAP database and as a distributed - LDAP directory. - </p><p> - As the LDAP directory grows, it becomes increasingly important - that its structure is implemented in a manner that mirrors - organizational needs, so as to limit network update and - referential traffic. It should be noted that all directory - administrators must of necessity follow the same standard - procedures for managing the directory, because retroactive correction of - inconsistent directory information can be exceedingly difficult. - </p></div></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id353997"></a>Political Issues</h3></div></div></div><p> - As organizations grow, the number of points of control increases - also. In a large distributed organization, it is important that the - Identity Management system be capable of being updated from - many locations, and it is equally important that changes made should - become usable in a reasonable period, typically - minutes rather than days (the old limitation of highly manual - systems). - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id354011"></a>Implementation</h2></div></div></div><p> - <a class="indexterm" name="id354019"></a> - <a class="indexterm" name="id354026"></a> - <a class="indexterm" name="id354032"></a> - <a class="indexterm" name="id354039"></a> - Samba-3 has the ability to use multiple password (authentication and - identity resolution) backends. The diagram in <a class="link" href="net2000users.html#chap7idres" title="Figure 6.1. Samba and Authentication Backend Search Pathways">“Samba and Authentication Backend Search Pathways”</a> - demonstrates how Samba uses winbind, LDAP, and NIS, the traditional system - password database. The diagram only documents the mechanisms for - authentication and identity resolution (obtaining a UNIX UID/GID) - using the specific systems shown. - </p><div class="figure"><a name="chap7idres"></a><p class="title"><b>Figure 6.1. Samba and Authentication Backend Search Pathways</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap7-idresol.png" width="297" alt="Samba and Authentication Backend Search Pathways"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id354099"></a> - <a class="indexterm" name="id354106"></a> - <a class="indexterm" name="id354113"></a> - <a class="indexterm" name="id354120"></a> - <a class="indexterm" name="id354126"></a> - <a class="indexterm" name="id354133"></a> - <a class="indexterm" name="id354140"></a> - Samba is capable of using the <code class="constant">smbpasswd</code>, - <code class="constant">tdbsam</code>, <code class="constant">xmlsam</code>, - and <code class="constant">mysqlsam</code> authentication databases. The SMB - passwords can, of course, also be stored in an LDAP ldapsam - backend. LDAP is the preferred passdb backend for distributed network - operations. - </p><p> - <a class="indexterm" name="id354166"></a> - Additionally, it is possible to use multiple passdb backends - concurrently as well as have multiple LDAP backends. As a result, you - can specify a failover LDAP backend. The syntax for specifying a - single LDAP backend in <code class="filename">smb.conf</code> is: -</p><pre class="screen"> -... -passdb backend = ldapsam:ldap://master.abmas.biz -... -</pre><p> - This configuration tells Samba to use a single LDAP server, as shown in <a class="link" href="net2000users.html#ch7singleLDAP" title="Figure 6.2. Samba Configuration to Use a Single LDAP Server">“Samba Configuration to Use a Single LDAP Server”</a>. - </p><div class="figure"><a name="ch7singleLDAP"></a><p class="title"><b>Figure 6.2. Samba Configuration to Use a Single LDAP Server</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/ch7-singleLDAP.png" width="351" alt="Samba Configuration to Use a Single LDAP Server"></div></div></div><p><br class="figure-break"> - <a class="indexterm" name="id354234"></a> - <a class="indexterm" name="id354244"></a> - The addition of a failover LDAP server can simply be done by adding a - second entry for the failover server to the single <em class="parameter"><code>ldapsam</code></em> - entry, as shown here (note the particular use of the double quotes): -</p><pre class="screen"> -... -passdb backend = ldapsam:"ldap://master.abmas.biz \ - ldap://slave.abmas.biz" -... -</pre><p> - This configuration tells Samba to use a master LDAP server, with failover to a slave server if necessary, - as shown in <a class="link" href="net2000users.html#ch7dualLDAP" title="Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server">“Samba Configuration to Use a Dual (Fail-over) LDAP Server”</a>. - </p><div class="figure"><a name="ch7dualLDAP"></a><p class="title"><b>Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/ch7-fail-overLDAP.png" width="351" alt="Samba Configuration to Use a Dual (Fail-over) LDAP Server"></div></div></div><p><br class="figure-break"> - </p><p> - Some folks have tried to implement this without the use of double quotes. This is the type of entry they - created: -</p><pre class="screen"> -... -passdb backend = ldapsam:ldap://master.abmas.biz \ - ldapsam:ldap://slave.abmas.biz -... -</pre><p> - <a class="indexterm" name="id354323"></a> - The effect of this style of entry is that Samba lists the users - that are in both LDAP databases. If both contain the same information, - it results in each record being shown twice. This is, of course, not the - solution desired for a failover implementation. The net effect of this - configuration is shown in <a class="link" href="net2000users.html#ch7dualadd" title="Figure 6.4. Samba Configuration to Use Dual LDAP Databases - Broken - Do Not Use!">“Samba Configuration to Use Dual LDAP Databases - Broken - Do Not Use!”</a> - </p><div class="figure"><a name="ch7dualadd"></a><p class="title"><b>Figure 6.4. Samba Configuration to Use Dual LDAP Databases - Broken - Do Not Use!</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/ch7-dual-additive-LDAP.png" width="297" alt="Samba Configuration to Use Dual LDAP Databases - Broken - Do Not Use!"></div></div></div><br class="figure-break"><p> - If, however, each LDAP database contains unique information, this may - well be an advantageous way to effectively integrate multiple LDAP databases - into one seemingly contiguous directory. Only the first database will be updated. - An example of this configuration is shown in <a class="link" href="net2000users.html#ch7dualok" title="Figure 6.5. Samba Configuration to Use Two LDAP Databases - The result is additive.">“Samba Configuration to Use Two LDAP Databases - The result is additive.”</a>. - </p><div class="figure"><a name="ch7dualok"></a><p class="title"><b>Figure 6.5. Samba Configuration to Use Two LDAP Databases - The result is additive.</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/ch7-dual-additive-LDAP-Ok.png" width="297" alt="Samba Configuration to Use Two LDAP Databases - The result is additive."></div></div></div><br class="figure-break"><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - When the use of ldapsam is specified twice, as shown here, it is imperative - that the two LDAP directories must be disjoint. If the entries are for a - master LDAP server as well as its own slave server, updates to the LDAP - database may end up being lost or corrupted. You may safely use multiple - LDAP backends only if both are entirely separate from each other. - </p></div><p> - It is assumed that the network you are working with follows in a - pattern similar to what was covered in <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>. The following steps - permit the operation of a master/slave OpenLDAP arrangement. - </p><div class="procedure" title="Procedure 6.1. Implementation Steps for an LDAP Slave Server"><a name="id354454"></a><p class="title"><b>Procedure 6.1. Implementation Steps for an LDAP Slave Server</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id354465"></a> - <a class="indexterm" name="id354472"></a> - Log onto the master LDAP server as <code class="constant">root</code>. - You are about to change the configuration of the LDAP server, so it - makes sense to temporarily halt it. Stop OpenLDAP from running on - SUSE Linux by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap stop -</pre><p> - On Red Hat Linux, you can do this by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> service ldap stop -</pre><p> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id354514"></a> - Edit the <code class="filename">/etc/openldap/slapd.conf</code> file so it - matches the content of <a class="link" href="net2000users.html#ch7-LDAP-master" title="Example 6.1. LDAP Master Server Configuration File /etc/openldap/slapd.conf">“LDAP Master Server Configuration File /etc/openldap/slapd.conf”</a>. - </p></li><li class="step" title="Step 3"><p> - Create a file called <code class="filename">admin-accts.ldif</code> with the following contents: -</p><pre class="screen"> -dn: cn=updateuser,dc=abmas,dc=biz -objectClass: person -cn: updateuser -sn: updateuser -userPassword: not24get - -dn: cn=sambaadmin,dc=abmas,dc=biz -objectClass: person -cn: sambaadmin -sn: sambaadmin -userPassword: buttercup -</pre><p> - </p></li><li class="step" title="Step 4"><p> - Add an account called <span class="quote">“<span class="quote">updateuser</span>”</span> to the master LDAP server as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> slapadd -v -l admin-accts.ldif -</pre><p> - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id354583"></a> - <a class="indexterm" name="id354590"></a> - Change directory to a suitable place to dump the contents of the - LDAP server. The dump file (and LDIF file) is used to preload - the slave LDAP server database. You can dump the database by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat -v -l LDAP-transfer-LDIF.txt -</pre><p> - Each record is written to the file. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id354620"></a> - Copy the file <code class="filename">LDAP-transfer-LDIF.txt</code> to the intended - slave LDAP server. A good location could be in the directory - <code class="filename">/etc/openldap/preload</code>. - </p></li><li class="step" title="Step 7"><p> - Log onto the slave LDAP server as <code class="constant">root</code>. You can - now configure this server so the <code class="filename">/etc/openldap/slapd.conf</code> - file matches the content of <a class="link" href="net2000users.html#ch7-LDAP-slave" title="Example 6.2. LDAP Slave Configuration File /etc/openldap/slapd.conf">“LDAP Slave Configuration File /etc/openldap/slapd.conf”</a>. - </p></li><li class="step" title="Step 8"><p> - Change directory to the location in which you stored the - <code class="filename">LDAP-transfer-LDIF.txt</code> file (<code class="filename">/etc/openldap/preload</code>). - While in this directory, execute: -</p><pre class="screen"> -<code class="prompt">root# </code> slapadd -v -l LDAP-transfer-LDIF.txt -</pre><p> - If all goes well, the following output confirms that the data is being loaded - as intended: -</p><pre class="screen"> -added: "dc=abmas,dc=biz" (00000001) -added: "cn=sambaadmin,dc=abmas,dc=biz" (00000002) -added: "cn=updateuser,dc=abmas,dc=biz" (00000003) -added: "ou=People,dc=abmas,dc=biz" (00000004) -added: "ou=Groups,dc=abmas,dc=biz" (00000005) -added: "ou=Computers,dc=abmas,dc=biz" (00000006) -added: "uid=Administrator,ou=People,dc=abmas,dc=biz" (00000007) -added: "uid=nobody,ou=People,dc=abmas,dc=biz" (00000008) -added: "cn=Domain Admins,ou=Groups,dc=abmas,dc=biz" (00000009) -added: "cn=Domain Users,ou=Groups,dc=abmas,dc=biz" (0000000a) -added: "cn=Domain Guests,ou=Groups,dc=abmas,dc=biz" (0000000b) -added: "uid=bobj,ou=People,dc=abmas,dc=biz" (0000000c) -added: "sambaDomainName=MEGANET2,dc=abmas,dc=biz" (0000000d) -added: "uid=stans,ou=People,dc=abmas,dc=biz" (0000000e) -added: "uid=chrisr,ou=People,dc=abmas,dc=biz" (0000000f) -added: "uid=maryv,ou=People,dc=abmas,dc=biz" (00000010) -added: "cn=Accounts,ou=Groups,dc=abmas,dc=biz" (00000011) -added: "cn=Finances,ou=Groups,dc=abmas,dc=biz" (00000012) -added: "cn=PIOps,ou=Groups,dc=abmas,dc=biz" (00000013) -</pre><p> - </p></li><li class="step" title="Step 9"><p> - Now start the LDAP server and set it to run automatically on system reboot by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap start -<code class="prompt">root# </code> chkconfig ldap on -</pre><p> - On Red Hat Linux, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> service ldap start -<code class="prompt">root# </code> chkconfig ldap on -</pre><p> - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id354767"></a> - <a class="indexterm" name="id354774"></a> - <a class="indexterm" name="id354781"></a> - Go back to the master LDAP server. Execute the following to start LDAP as well - as <code class="literal">slurpd</code>, the synchronization daemon, as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap start -<code class="prompt">root# </code> chkconfig ldap on -<code class="prompt">root# </code> rcslurpd start -<code class="prompt">root# </code> chkconfig slurpd on -</pre><p> - <a class="indexterm" name="id354824"></a> - On Red Hat Linux, check the equivalent command to start <code class="literal">slurpd</code>. - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id354844"></a> - On the master LDAP server you may now add an account to validate that replication - is working. Assuming the configuration shown in <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, execute: -</p><pre class="screen"> -<code class="prompt">root# </code> /var/lib/samba/sbin/smbldap-useradd -a fruitloop -</pre><p> - </p></li><li class="step" title="Step 12"><p> - On the slave LDAP server, change to the directory <code class="filename">/var/lib/ldap</code>. - There should now be a file called <code class="filename">replogfile</code>. If replication worked - as expected, the content of this file should be: -</p><pre class="screen"> -time: 1072486403 -dn: uid=fruitloop,ou=People,dc=abmas,dc=biz -changetype: modify -replace: sambaProfilePath -sambaProfilePath: \\MASSIVE\profiles\fruitloop -- -replace: sambaHomePath -sambaHomePath: \\MASSIVE\homes -- -replace: entryCSN -entryCSN: 2003122700:43:38Z#0x0005#0#0000 -- -replace: modifiersName -modifiersName: cn=Manager,dc=abmas,dc=biz -- -replace: modifyTimestamp -modifyTimestamp: 20031227004338Z -- -</pre><p> - </p></li><li class="step" title="Step 13"><p> - Given that this first slave LDAP server is now working correctly, you may now - implement additional slave LDAP servers as required. - </p></li><li class="step" title="Step 14"><p> - On each machine (PDC and BDCs) after the respective <code class="filename">smb.conf</code> files have been created as shown in - <a class="link" href="net2000users.html#ch7-massmbconfA" title="Example 6.3. Primary Domain Controller smb.conf File Part A">Primary Domain Controller <code class="filename">smb.conf</code> File Part A + B + C</a> and - on BDCs the <a class="link" href="net2000users.html#ch7-slvsmbocnfA" title="Example 6.6. Backup Domain Controller smb.conf File Part A">Backup Domain Controller <code class="filename">smb.conf</code> File Part A - + B + C</a> execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w buttercup -</pre><p> - This will install in the <code class="filename">secrets.tdb</code> file the password that Samba will need to - manage (write to) the LDAP Master server to perform account updates. - </p></li></ol></div><div class="example"><a name="ch7-LDAP-master"></a><p class="title"><b>Example 6.1. LDAP Master Server Configuration File <code class="filename">/etc/openldap/slapd.conf</code></b></p><div class="example-contents"><pre class="screen"> -include /etc/openldap/schema/core.schema -include /etc/openldap/schema/cosine.schema -include /etc/openldap/schema/inetorgperson.schema -include /etc/openldap/schema/nis.schema -include /etc/openldap/schema/samba.schema - -pidfile /var/run/slapd/slapd.pid -argsfile /var/run/slapd/slapd.args - -database bdb -suffix "dc=abmas,dc=biz" -rootdn "cn=Manager,dc=abmas,dc=biz" - -# rootpw = not24get -rootpw {SSHA}86kTavd9Dw3FAz6qzWTrCOKX/c0Qe+UV - -replica host=lapdc.abmas.biz:389 - suffix="dc=abmas,dc=biz" - binddn="cn=updateuser,dc=abmas,dc=biz" - bindmethod=simple credentials=not24get - -access to attrs=sambaLMPassword,sambaNTPassword - by dn="cn=sambaadmin,dc=abmas,dc=biz" write - by * none - -replogfile /var/lib/ldap/replogfile - -directory /var/lib/ldap - -# Indices to maintain -index objectClass eq -index cn pres,sub,eq -index sn pres,sub,eq -index uid pres,sub,eq -index displayName pres,sub,eq -index uidNumber eq -index gidNumber eq -index memberUID eq -index sambaSID eq -index sambaPrimaryGroupSID eq -index sambaDomainName eq -index default sub -</pre></div></div><br class="example-break"><div class="example"><a name="ch7-LDAP-slave"></a><p class="title"><b>Example 6.2. LDAP Slave Configuration File <code class="filename">/etc/openldap/slapd.conf</code></b></p><div class="example-contents"><pre class="screen"> -include /etc/openldap/schema/core.schema -include /etc/openldap/schema/cosine.schema -include /etc/openldap/schema/inetorgperson.schema -include /etc/openldap/schema/nis.schema -include /etc/openldap/schema/samba.schema - -pidfile /var/run/slapd/slapd.pid -argsfile /var/run/slapd/slapd.args - -database bdb -suffix "dc=abmas,dc=biz" -rootdn "cn=Manager,dc=abmas,dc=biz" - -# rootpw = not24get -rootpw {SSHA}86kTavd9Dw3FAz6qzWTrCOKX/c0Qe+UV - -access to * - by dn=cn=updateuser,dc=abmas,dc=biz write - by * read - -updatedn cn=updateuser,dc=abmas,dc=biz -updateref ldap://massive.abmas.biz - -directory /var/lib/ldap - -# Indices to maintain -index objectClass eq -index cn pres,sub,eq -index sn pres,sub,eq -index uid pres,sub,eq -index displayName pres,sub,eq -index uidNumber eq -index gidNumber eq -index memberUID eq -index sambaSID eq -index sambaPrimaryGroupSID eq -index sambaDomainName eq -index default sub -</pre></div></div><br class="example-break"><div class="example"><a name="ch7-massmbconfA"></a><p class="title"><b>Example 6.3. Primary Domain Controller <code class="filename">smb.conf</code> File Part A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id355074"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id355085"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id355097"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id355108"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id355120"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id355131"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id355143"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id355154"></a><em class="parameter"><code>max log size = 0</code></em></td></tr><tr><td><a class="indexterm" name="id355166"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id355177"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id355189"></a><em class="parameter"><code>time server = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355200"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id355212"></a><em class="parameter"><code>add user script = /opt/IDEALX/sbin/smbldap-useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id355224"></a><em class="parameter"><code>delete user script = /opt/IDEALX/sbin/smbldap-userdel '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id355236"></a><em class="parameter"><code>add group script = /opt/IDEALX/sbin/smbldap-groupadd -p '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id355248"></a><em class="parameter"><code>delete group script = /opt/IDEALX/sbin/smbldap-groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id355259"></a><em class="parameter"><code>add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id355272"></a><em class="parameter"><code>delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id355284"></a><em class="parameter"><code>set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id355296"></a><em class="parameter"><code>add machine script = /opt/IDEALX/sbin/smbldap-useradd -w '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id355308"></a><em class="parameter"><code>shutdown script = /var/lib/samba/scripts/shutdown.sh</code></em></td></tr><tr><td><a class="indexterm" name="id355319"></a><em class="parameter"><code>abort shutdown script = /sbin/shutdown -c</code></em></td></tr><tr><td><a class="indexterm" name="id355331"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id355343"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id355354"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id355366"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355377"></a><em class="parameter"><code>domain master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355389"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355400"></a><em class="parameter"><code>ldap suffix = dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id355412"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id355423"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id355435"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id355447"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id355458"></a><em class="parameter"><code>ldap admin dn = cn=sambaadmin,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id355470"></a><em class="parameter"><code>idmap backend = ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id355482"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id355493"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id355505"></a><em class="parameter"><code>printer admin = root</code></em></td></tr><tr><td><a class="indexterm" name="id355516"></a><em class="parameter"><code>printing = cups</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch7-massmbconfB"></a><p class="title"><b>Example 6.4. Primary Domain Controller <code class="filename">smb.conf</code> File Part B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[IPC$]</code></em></td></tr><tr><td><a class="indexterm" name="id355561"></a><em class="parameter"><code>path = /tmp</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id355581"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id355593"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id355604"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[service]</code></em></td></tr><tr><td><a class="indexterm" name="id355625"></a><em class="parameter"><code>comment = Financial Services Files</code></em></td></tr><tr><td><a class="indexterm" name="id355636"></a><em class="parameter"><code>path = /data/service</code></em></td></tr><tr><td><a class="indexterm" name="id355648"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[pidata]</code></em></td></tr><tr><td><a class="indexterm" name="id355668"></a><em class="parameter"><code>comment = Property Insurance Files</code></em></td></tr><tr><td><a class="indexterm" name="id355680"></a><em class="parameter"><code>path = /data/pidata</code></em></td></tr><tr><td><a class="indexterm" name="id355691"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id355712"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id355723"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id355735"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id355746"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id355767"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id355778"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id355790"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355801"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355813"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch7-massmbconfC"></a><p class="title"><b>Example 6.5. Primary Domain Controller <code class="filename">smb.conf</code> File Part C</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[apps]</code></em></td></tr><tr><td><a class="indexterm" name="id355857"></a><em class="parameter"><code>comment = Application Files</code></em></td></tr><tr><td><a class="indexterm" name="id355869"></a><em class="parameter"><code>path = /apps</code></em></td></tr><tr><td><a class="indexterm" name="id355880"></a><em class="parameter"><code>admin users = bjones</code></em></td></tr><tr><td><a class="indexterm" name="id355892"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id355912"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id355924"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id355936"></a><em class="parameter"><code>admin users = root, Administrator</code></em></td></tr><tr><td><a class="indexterm" name="id355947"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id355959"></a><em class="parameter"><code>locking = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id355979"></a><em class="parameter"><code>comment = Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id355990"></a><em class="parameter"><code>path = /var/lib/samba/profiles</code></em></td></tr><tr><td><a class="indexterm" name="id356002"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id356014"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profdata]</code></em></td></tr><tr><td><a class="indexterm" name="id356034"></a><em class="parameter"><code>comment = Profile Data Share</code></em></td></tr><tr><td><a class="indexterm" name="id356046"></a><em class="parameter"><code>path = /var/lib/samba/profdata</code></em></td></tr><tr><td><a class="indexterm" name="id356057"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id356069"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id356089"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id356101"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id356112"></a><em class="parameter"><code>write list = root</code></em></td></tr><tr><td><a class="indexterm" name="id356124"></a><em class="parameter"><code>admin users = root, Administrator</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch7-slvsmbocnfA"></a><p class="title"><b>Example 6.6. Backup Domain Controller <code class="filename">smb.conf</code> File Part A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># # Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id356172"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id356183"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id356195"></a><em class="parameter"><code>netbios name = BLDG1</code></em></td></tr><tr><td><a class="indexterm" name="id356206"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://lapdc.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id356218"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id356229"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id356241"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id356252"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id356264"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id356275"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id356287"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id356298"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id356310"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id356322"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id356333"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id356345"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id356356"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id356368"></a><em class="parameter"><code>os level = 63</code></em></td></tr><tr><td><a class="indexterm" name="id356379"></a><em class="parameter"><code>domain master = No</code></em></td></tr><tr><td><a class="indexterm" name="id356391"></a><em class="parameter"><code>wins server = 192.168.2.1</code></em></td></tr><tr><td><a class="indexterm" name="id356402"></a><em class="parameter"><code>ldap suffix = dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id356414"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id356425"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id356437"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id356449"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id356460"></a><em class="parameter"><code>ldap admin dn = cn=sambaadmin,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id356472"></a><em class="parameter"><code>utmp = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id356483"></a><em class="parameter"><code>idmap backend = ldap://massive.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id356495"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id356507"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id356518"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id356538"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id356550"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id356562"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[service]</code></em></td></tr><tr><td><a class="indexterm" name="id356582"></a><em class="parameter"><code>comment = Financial Services Files</code></em></td></tr><tr><td><a class="indexterm" name="id356594"></a><em class="parameter"><code>path = /data/service</code></em></td></tr><tr><td><a class="indexterm" name="id356605"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch7-slvsmbocnfB"></a><p class="title"><b>Example 6.7. Backup Domain Controller <code class="filename">smb.conf</code> File Part B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[pidata]</code></em></td></tr><tr><td><a class="indexterm" name="id356650"></a><em class="parameter"><code>comment = Property Insurance Files</code></em></td></tr><tr><td><a class="indexterm" name="id356661"></a><em class="parameter"><code>path = /data/pidata</code></em></td></tr><tr><td><a class="indexterm" name="id356673"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id356693"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id356705"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id356716"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id356728"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id356748"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id356760"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id356771"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id356783"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id356794"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[apps]</code></em></td></tr><tr><td><a class="indexterm" name="id356815"></a><em class="parameter"><code>comment = Application Files</code></em></td></tr><tr><td><a class="indexterm" name="id356826"></a><em class="parameter"><code>path = /apps</code></em></td></tr><tr><td><a class="indexterm" name="id356838"></a><em class="parameter"><code>admin users = bjones</code></em></td></tr><tr><td><a class="indexterm" name="id356849"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id356870"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id356881"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id356893"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id356904"></a><em class="parameter"><code>locking = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id356925"></a><em class="parameter"><code>comment = Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id356936"></a><em class="parameter"><code>path = /var/lib/samba/profiles</code></em></td></tr><tr><td><a class="indexterm" name="id356948"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id356959"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profdata]</code></em></td></tr><tr><td><a class="indexterm" name="id356980"></a><em class="parameter"><code>comment = Profile Data Share</code></em></td></tr><tr><td><a class="indexterm" name="id356991"></a><em class="parameter"><code>path = /var/lib/samba/profdata</code></em></td></tr><tr><td><a class="indexterm" name="id357003"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id357014"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id357027"></a>Key Points Learned</h3></div></div></div><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id357038"></a><a class="indexterm" name="id357043"></a> - Where Samba-3 is used as a domain controller, the use of LDAP is an - essential component to permit the use of BDCs. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id357055"></a> - Replication of the LDAP master server to create a network of BDCs - is an important mechanism for limiting WAN traffic. - </p></li><li class="listitem"><p> - Network administration presents many complex challenges, most of which - can be satisfied by good design but that also require sound communication - and unification of management practices. This can be highly challenging in - a large, globally distributed network. - </p></li><li class="listitem"><p> - Roaming profiles must be contained to the local network segment. Any - departure from this may clog wide-area arteries and slow legitimate network - traffic to a crawl. - </p></li></ul></div></div><div class="figure"><a name="chap7net"></a><p class="title"><b>Figure 6.6. Network Topology 2000 User Complex Design A</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap7-net-Ar.png" width="432" alt="Network Topology 2000 User Complex Design A"></div></div></div><br class="figure-break"><div class="figure"><a name="chap7net2"></a><p class="title"><b>Figure 6.7. Network Topology 2000 User Complex Design B</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap7-net2-Br.png" width="432" alt="Network Topology 2000 User Complex Design B"></div></div></div><br class="figure-break"></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id357166"></a>Questions and Answers</h2></div></div></div><p> - There is much rumor and misinformation regarding the use of MS Windows networking protocols. - These questions are just a few of those frequently asked. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id357176"></a><dl><dt> <a href="net2000users.html#id357182"> - - - Is it true that DHCP uses lots of WAN bandwidth? - </a></dt><dt> <a href="net2000users.html#id357303"> - - - How much background communication takes place between a master LDAP server and its slave LDAP servers? - </a></dt><dt> <a href="net2000users.html#id357360"> - LDAP has a database. Is LDAP not just a fancy database front end? - </a></dt><dt> <a href="net2000users.html#id357417"> - - Can Active Directory obtain account information from an OpenLDAP server? - </a></dt><dt> <a href="net2000users.html#id357449"> - What are the parts of a roaming profile? How large is each part? - </a></dt><dt> <a href="net2000users.html#id357590"> - Can the My Documents folder be stored on a network drive? - </a></dt><dt> <a href="net2000users.html#id357635"> - - - - How much WAN bandwidth does WINS consume? - </a></dt><dt> <a href="net2000users.html#id357712"> - How many BDCs should I have? What is the right number of Windows clients per server? - </a></dt><dt> <a href="net2000users.html#id357739"> - - I've heard that you can store NIS accounts in LDAP. Is LDAP not just a smarter way to - run an NIS server? - </a></dt><dt> <a href="net2000users.html#id357770"> - Can I use NIS in place of LDAP? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id357182"></a><a name="id357185"></a></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357189"></a> - <a class="indexterm" name="id357196"></a> - Is it true that DHCP uses lots of WAN bandwidth? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357212"></a> - <a class="indexterm" name="id357221"></a> - <a class="indexterm" name="id357228"></a> - It is a smart practice to localize DHCP servers on each network segment. As a - rule, there should be two DHCP servers per network segment. This means that if - one server fails, there is always another to service user needs. DHCP requests use - only UDP broadcast protocols. It is possible to run a DHCP Relay Agent on network - routers. This makes it possible to run fewer DHCP servers. - </p><p> - <a class="indexterm" name="id357244"></a> - <a class="indexterm" name="id357253"></a> - A DHCP network address request and confirmation usually results in about six UDP packets. - The packets are from 60 to 568 bytes in length. Let us consider a site that has 300 DHCP - clients and that uses a 24-hour IP address lease. This means that all clients renew - their IP address lease every 24 hours. If we assume an average packet length equal to the - maximum (just to be on the safe side), and we have a 128 Kb/sec wide-area connection, - how significant would the DHCP traffic be if all of it were to use DHCP Relay? - </p><p> - I must stress that this is a bad design, but here is the calculation: -</p><pre class="screen"> -Daily Network Capacity: 128,000 (Kbits/s) / 8 (bits/byte) - x 3600 (sec/hr) x 24 (hrs/day)= 2288 Mbytes/day. - -DHCP traffic: 300 (clients) x 6 (packets) - x 512 (bytes/packet) = 0.9 Mbytes/day. -</pre><p> - From this can be seen that the traffic impact would be minimal. - </p><p> - <a class="indexterm" name="id357282"></a> - <a class="indexterm" name="id357291"></a> - Even when DHCP is configured to do DNS update (dynamic DNS) over a wide-area link, - the impact of the update is no more than the DHCP IP address renewal traffic and thus - still insignificant for most practical purposes. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357303"></a><a name="id357305"></a></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357310"></a> - <a class="indexterm" name="id357317"></a> - How much background communication takes place between a master LDAP server and its slave LDAP servers? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357336"></a> - The process that controls the replication of data from the master LDAP server to the slave LDAP - servers is called <code class="literal">slurpd</code>. The <code class="literal">slurpd</code> remains nascent (quiet) - until an update must be propagated. The propagation traffic per LDAP slave to update (add/modify/delete) - two user accounts requires less than 10KB traffic. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357360"></a><a name="id357362"></a></td><td align="left" valign="top"><p> - LDAP has a database. Is LDAP not just a fancy database front end? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357374"></a> - <a class="indexterm" name="id357381"></a> - <a class="indexterm" name="id357390"></a> - <a class="indexterm" name="id357396"></a> - LDAP does store its data in a database of sorts. In fact, the LDAP backend is an application-specific - data storage system. This type of database is indexed so that records can be rapidly located, but the - database is not generic and can be used only in particular pre-programmed ways. General external - applications do not gain access to the data. This type of database is used also by SQL servers. Both - an SQL server and an LDAP server provide ways to access the data. An SQL server has a transactional - orientation and typically allows external programs to perform ad hoc queries, even across data tables. - An LDAP front end is a purpose-built tool that has a search orientation that is designed around specific - simple queries. The term <code class="constant">database</code> is heavily overloaded and thus much misunderstood. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357417"></a><a name="id357419"></a></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357423"></a> - Can Active Directory obtain account information from an OpenLDAP server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357437"></a> - No, at least not directly. It is possible to provision Active Directory from and/or to an OpenLDAP - database through use of a metadirectory server. Microsoft MMS (now called MIIS) can interface - to OpenLDAP using standard LDAP queries and updates. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357449"></a><a name="id357452"></a></td><td align="left" valign="top"><p> - What are the parts of a roaming profile? How large is each part? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id357462"></a> - A roaming profile consists of - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Desktop folders such as <code class="constant">Desktop</code>, <code class="constant">My Documents</code>, - <code class="constant">My Pictures</code>, <code class="constant">My Music</code>, <code class="constant">Internet Files</code>, - <code class="constant">Cookies</code>, <code class="constant">Application Data</code>, - <code class="constant">Local Settings,</code> and more. See <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>, <a class="link" href="happy.html#XP-screen001" title="Figure 5.3. Windows XP Professional User Shared Folders">“Windows XP Professional User Shared Folders”</a>. - </p><p> - <a class="indexterm" name="id357521"></a> - Each of these can be anywhere from a few bytes to gigabytes in capacity. Fortunately, all - such folders can be redirected to network drive resources. See <a class="link" href="happy.html#redirfold" title="Configuration of Default Profile with Folder Redirection">“Configuration of Default Profile with Folder Redirection”</a> - for more information regarding folder redirection. - </p></li><li class="listitem"><p> - A static or rewritable portion that is typically only a few files (2-5 KB of information). - </p></li><li class="listitem"><p> - <a class="indexterm" name="id357545"></a> - <a class="indexterm" name="id357551"></a> - The registry load file that modifies the <code class="constant">HKEY_LOCAL_USER</code> hive. This is - the <code class="filename">NTUSER.DAT</code> file. It can be from 0.4 to 1.5 MB. - </p></li></ul></div><p> - <a class="indexterm" name="id357573"></a> - Microsoft Outlook PST files may be stored in the <code class="constant">Local Settings\Application Data</code> - folder. It can be up to 2 GB in size per PST file. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357590"></a><a name="id357592"></a></td><td align="left" valign="top"><p> - Can the <code class="constant">My Documents</code> folder be stored on a network drive? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357607"></a> - <a class="indexterm" name="id357614"></a> - Yes. More correctly, such folders can be redirected to network shares. No specific network drive - connection is required. Registry settings permit this to be redirected directly to a UNC (Universal - Naming Convention) resource, though it is possible to specify a network drive letter instead of a - UNC name. See <a class="link" href="happy.html#redirfold" title="Configuration of Default Profile with Folder Redirection">“Configuration of Default Profile with Folder Redirection”</a>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357635"></a><a name="id357637"></a></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357641"></a> - <a class="indexterm" name="id357648"></a> - <a class="indexterm" name="id357657"></a> - How much WAN bandwidth does WINS consume? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357671"></a> - <a class="indexterm" name="id357680"></a> - <a class="indexterm" name="id357687"></a> - MS Windows clients cache information obtained from WINS lookups in a local NetBIOS name cache. - This keeps WINS lookups to a minimum. On a network with 3500 MS Windows clients and a central WINS - server, the total bandwidth demand measured at the WINS server, averaged over an 8-hour working day, - was less than 30 KB/sec. Analysis of network traffic over a 6-week period showed that the total - of all background traffic consumed about 11 percent of available bandwidth over 64 Kb/sec links. - Background traffic consisted of domain replication, WINS queries, DNS lookups, and authentication - traffic. Each of 11 branch offices had a 64 Kb/sec wide-area link, with a 1.5 Mb/sec main connection - that aggregated the branch office connections plus an Internet connection. - </p><p> - In conclusion, the total load afforded through WINS traffic is again marginal to total operational - usage as it should be. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357712"></a><a name="id357714"></a></td><td align="left" valign="top"><p> - How many BDCs should I have? What is the right number of Windows clients per server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - It is recommended to have at least one BDC per network segment, including the segment served - by the PDC. Actual requirements vary depending on the working load on each of the BDCs and the - load demand pattern of client usage. I have seen sites that function without problem with 200 - clients served by one BDC, and yet other sites that had one BDC per 20 clients. In one particular - company, there was a drafting office that had 30 CAD/CAM operators served by one server, a print - server; and an application server. While all three were BDCs, typically only the print server would - service network logon requests after the first 10 users had started to use the network. This was - a reflection of the service load placed on both the application server and the data server. - </p><p> - As unsatisfactory as the answer might sound, it all depends on network and server load - characteristics. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357739"></a><a name="id357741"></a></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357745"></a><a class="indexterm" name="id357751"></a> - I've heard that you can store NIS accounts in LDAP. Is LDAP not just a smarter way to - run an NIS server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The correct answer to both questions is yes. But do understand that an LDAP server has - a configurable schema that can store far more information for many more purposes than - just NIS. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id357770"></a><a name="id357772"></a></td><td align="left" valign="top"><p> - Can I use NIS in place of LDAP? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id357783"></a> - <a class="indexterm" name="id357790"></a> - No. The NIS database does not have provision to store Microsoft encrypted passwords and does not deal - with the types of data necessary for interoperability with Microsoft Windows networking. The use - of LDAP with Samba requires the use of a number of schemas, one of which is the NIS schema, but also - a Samba-specific schema extension. - </p></td></tr></tbody></table></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="happy.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ExNetworks.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="DMSMig.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 5. Making Happy Users </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Part II. Domain Members, Updating Samba and Migration</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/ntmigration.html b/docs/htmldocs/Samba3-ByExample/ntmigration.html deleted file mode 100644 index c883022b9e..0000000000 --- a/docs/htmldocs/Samba3-ByExample/ntmigration.html +++ /dev/null @@ -1,1128 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 9. Migrating NT4 Domain to Samba-3</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="DMSMig.html" title="Part II. Domain Members, Updating Samba and Migration"><link rel="prev" href="upgrades.html" title="Chapter 8. Updating Samba-3"><link rel="next" href="nw4migration.html" title="Chapter 10. Migrating NetWare Server to Samba-3"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 9. Migrating NT4 Domain to Samba-3</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="upgrades.html">Prev</a> </td><th width="60%" align="center">Part II. Domain Members, Updating Samba and Migration</th><td width="20%" align="right"> <a accesskey="n" href="nw4migration.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 9. Migrating NT4 Domain to Samba-3"><div class="titlepage"><div><div><h2 class="title"><a name="ntmigration"></a>Chapter 9. Migrating NT4 Domain to Samba-3</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="ntmigration.html#id368988">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369064">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id369115">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369276">Technical Issues</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id369580">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id369600">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntmigration.html#id369724">NT4 Migration Using LDAP Backend</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id371918">NT4 Migration Using tdbsam Backend</a></span></dt><dt><span class="sect2"><a href="ntmigration.html#id372263">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntmigration.html#id372297">Questions and Answers</a></span></dt></dl></div><p> - Ever since Microsoft announced that it was discontinuing support for Windows - NT4, Samba users started to ask for detailed instructions on how to migrate - from NT4 to Samba-3. This chapter provides background information that should - meet these needs. - </p><p> - One wonders how many NT4 systems will be left in service by the time you read this - book though. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id368988"></a>Introduction</h2></div></div></div><p><a class="indexterm" name="id368994"></a> - Network administrators who want to migrate off a Windows NT4 environment know - one thing with certainty. They feel that NT4 has been abandoned, and they want - to update. The desire to get off NT4 and to not adopt Windows 200x and Active - Directory is driven by a mixture of concerns over complexity, cost, fear of - failure, and much more. - </p><p> - <a class="indexterm" name="id369009"></a> - <a class="indexterm" name="id369016"></a> - <a class="indexterm" name="id369025"></a> - <a class="indexterm" name="id369035"></a> - The migration from NT4 to Samba-3 can involve a number of factors, including - migration of data to another server, migration of network environment controls - such as group policies, and migration of the users, groups, and machine - accounts. - </p><p> - <a class="indexterm" name="id369049"></a> - It should be pointed out now that it is possible to migrate some systems from - a Windows NT4 domain environment to a Samba-3 domain environment. This is certainly - not possible in every case. It is possible to just migrate the domain accounts - to Samba-3 and then to switch machines, but as a hands-off transition, this is more - the exception than the rule. Most systems require some tweaking after - migration before an environment that is acceptable for immediate use - is obtained. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id369064"></a>Assignment Tasks</h3></div></div></div><p> - <a class="indexterm" name="id369071"></a> - <a class="indexterm" name="id369078"></a> - <a class="indexterm" name="id369085"></a> - You are about to migrate an MS Windows NT4 domain accounts database to - a Samba-3 server. The Samba-3 server is using a - <em class="parameter"><code>passdb backend</code></em> based on LDAP. The - <code class="constant">ldapsam</code> is ideal because an LDAP backend can be distributed - for use with BDCs generally essential for larger networks. - </p><p> - Your objective is to document the process of migrating user and group accounts - from several NT4 domains into a single Samba-3 LDAP backend database. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id369115"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id369123"></a> - <a class="indexterm" name="id369129"></a> - <a class="indexterm" name="id369135"></a> - <a class="indexterm" name="id369147"></a> - <a class="indexterm" name="id369158"></a> - <a class="indexterm" name="id369165"></a> - The migration process takes a snapshot of information that is stored in the - Windows NT4 registry-based accounts database. That information resides in - the Security Account Manager (SAM) portion of the NT4 registry under keys called - <code class="constant">SAM</code> and <code class="constant">SECURITY</code>. - </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> - <a class="indexterm" name="id369187"></a> - <a class="indexterm" name="id369194"></a> - The Windows NT4 registry keys called <code class="constant">SAM</code> and <code class="constant">SECURITY</code> - are protected so that you cannot view the contents. If you change the security setting - to reveal the contents under these hive keys, your Windows NT4 domain is crippled. Do not - do this unless you are willing to render your domain controller inoperative. - </p></div><p> - <a class="indexterm" name="id369214"></a> - <a class="indexterm" name="id369223"></a> - Before commencing an NT4 to Samba-3 migration, you should consider what your objectives are. - While in some cases it is possible simply to migrate an NT4 domain to a single Samba-3 server, - that may not be a good idea from an administration perspective. Since the process involves going - through a certain amount of disruptive activity anyhow, why not take this opportunity to - review the structure of the network, how Windows clients are controlled and how they - interact with the network environment. - </p><p> - <a class="indexterm" name="id369237"></a> - <a class="indexterm" name="id369246"></a> - <a class="indexterm" name="id369253"></a> - MS Windows NT4 was introduced some time around 1996. Many environments in which NT4 was deployed - have done little to keep the NT4 server environment up to date with more recent Windows releases, - particularly Windows XP Professional. The migration provides opportunity to revise and update - roaming profile deployment as well as folder redirection. Given that you must port the - greater network configuration of this from the old NT4 server to the new Samba-3 server. - Do not forget to validate the security descriptors in the profiles share as well as network logon - scripts. Feedback from sites that are migrating to Samba-3 suggests that many are using this - as a good time to update desktop systems also. In all, the extra effort should constitute no - real disruption to users, but rather, with due diligence and care, should make their network experience - a much happier one. - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id369276"></a>Technical Issues</h3></div></div></div><p> - <a class="indexterm" name="id369284"></a> - <a class="indexterm" name="id369291"></a> - Migration of an NT4 domain user and group database to Samba-3 involves a certain strategic - element. Many sites have asked for instructions regarding merging of multiple NT4 - domains into one Samba-3 LDAP database. It seems that this is viewed as a significant - added value compared with the alternative of migration to Windows Server 200x and Active - Directory. The diagram in <a class="link" href="ntmigration.html#ch8-migration" title="Figure 9.1. Schematic Explaining the net rpc vampire Process">“Schematic Explaining the net rpc vampire Process”</a> illustrates the effect of migration - from a Windows NT4 domain to a Samba domain. - </p><div class="figure"><a name="ch8-migration"></a><p class="title"><b>Figure 9.1. Schematic Explaining the <code class="literal">net rpc vampire</code> Process</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/ch8-migration.png" width="297" alt="Schematic Explaining the net rpc vampire Process"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id369358"></a> - <a class="indexterm" name="id369365"></a> - If you want to merge multiple NT4 domain account databases into one Samba domain, - you must now dump the contents of the first migration and edit it as appropriate. Now clean - out (remove) the tdbsam backend file (<code class="filename">passdb.tdb</code>) or the LDAP database - files. You must start each migration with a new database into which you merge your NT4 - domains. - </p><p><a class="indexterm" name="id369383"></a> - At this point, you are ready to perform the second migration, following the same steps as - for the first. In other words, dump the database, edit it, and then you may merge the - dump for the first and second migrations. - </p><p><a class="indexterm" name="id369396"></a><a class="indexterm" name="id369404"></a><a class="indexterm" name="id369412"></a> - You must be careful. If you choose to migrate to an LDAP backend, your dump file - now contains the full account information, including the domain SID. The domain SID for each - of the two NT4 domains will be different. You must choose one and change the domain - portion of the account SIDs so that all are the same. - </p><p> - <a class="indexterm" name="id369427"></a> - <a class="indexterm" name="id369433"></a> - <a class="indexterm" name="id369440"></a> - <a class="indexterm" name="id369447"></a> - <a class="indexterm" name="id369454"></a> - <a class="indexterm" name="id369461"></a> - <a class="indexterm" name="id369467"></a> - <a class="indexterm" name="id369474"></a> - <a class="indexterm" name="id369481"></a> - <a class="indexterm" name="id369488"></a> - <a class="indexterm" name="id369495"></a> - <a class="indexterm" name="id369501"></a> - If you choose to use a tdbsam (<code class="filename">passdb.tdb</code>) backend file, your best choice - is to use <code class="literal">pdbedit</code> to export the contents of the tdbsam file into an - smbpasswd data file. This automatically strips out all domain-specific information, - such as logon hours, logon machines, logon script, profile path, as well as the domain SID. - The resulting file can be easily merged with other migration attempts (each of which must start - with a clean file). It should also be noted that all users who end up in the merged smbpasswd - file must have an account in <code class="filename">/etc/passwd</code>. The resulting smbpasswd file - may be exported or imported into either a tdbsam (<code class="filename">passdb.tdb</code>) or - an LDAP backend. - </p><div class="figure"><a name="NT4DUM"></a><p class="title"><b>Figure 9.2. View of Accounts in NT4 Domain User Manager</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/UserMgrNT4.png" width="270" alt="View of Accounts in NT4 Domain User Manager"></div></div></div><br class="figure-break"></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id369580"></a>Political Issues</h3></div></div></div><p> - The merging of multiple Windows NT4-style domains into a single LDAP-backend-based Samba-3 - domain may be seen by those who had power over them as a loss of prestige or a loss of - power. The imposition of a single domain may even be seen as a threat. So in migrating and - merging account databases, be consciously aware of the political fall-out in which you - may find yourself entangled when key staff feel a loss of prestige. - </p><p> - The best advice that can be given to those who set out to merge NT4 domains into a single - Samba-3 domain is to promote (sell) the action as one that reduces costs and delivers - greater network interoperability and manageability. - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id369600"></a>Implementation</h2></div></div></div><p> - From feedback on the Samba mailing lists, it seems that most Windows NT4 migrations - to Samba-3 are being performed using a new server or a new installation of a Linux or UNIX - server. If you contemplate doing this, please note that the steps that follow in this - chapter assume familiarity with the information that has been previously covered in this - book. You are particularly encouraged to be familiar with <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a>, - <a class="link" href="Big500users.html" title="Chapter 4. The 500-User Office">“The 500-User Office”</a> and <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>. - </p><p> - We present here the steps and example output for two NT4 to Samba-3 domain migrations. The - first uses an LDAP-based backend, and the second uses a tdbsam backend. In each case the - scripts you specify in the <code class="filename">smb.conf</code> file for the <em class="parameter"><code>add user script</code></em> - collection of parameters are used to effect the addition of accounts into the passdb backend. - </p><p> - Before proceeding to NT4 migration using either a tdbsam or ldapsam, it is most strongly recommended to - review <a class="link" href="Big500users.html#ch5-dnshcp-setup" title="Installation of DHCP, DNS, and Samba Control Files">“Installation of DHCP, DNS, and Samba Control Files”</a> for DNS and DHCP configuration. The importance of correctly - functioning name resolution must be recognized. This applies equally for both hostname and NetBIOS names - (machine names, computer names, domain names, workgroup names ALL names!). - </p><p> - The migration process involves the following steps: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Prepare the target Samba-3 server. This involves configuring Samba-3 for - migration to either a tdbsam or an ldapsam backend. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id369676"></a> - <a class="indexterm" name="id369682"></a> - <a class="indexterm" name="id369688"></a> - Clean up the source NT4 PDC. Delete all accounts that need not be migrated. - Delete all files that should not be migrated. Where possible, change NT group - names so there are no spaces or uppercase characters. This is important if - the target UNIX host insists on POSIX-compliant all lowercase user and group - names. - </p></li><li class="listitem"><p> - Step through the migration process. - </p></li><li class="listitem"><p><a class="indexterm" name="id369706"></a> - Remove the NT4 PDC from the network. - </p></li><li class="listitem"><p> - Upgrade the Samba-3 server from a BDC to a PDC, and validate all account - information. - </p></li></ul></div><p> - It may help to use the above outline as a pre-migration checklist. - </p><div class="sect2" title="NT4 Migration Using LDAP Backend"><div class="titlepage"><div><div><h3 class="title"><a name="id369724"></a>NT4 Migration Using LDAP Backend</h3></div></div></div><p> - In this example, the migration is of an NT4 PDC to a Samba-3 PDC with an LDAP backend. The accounts about - to be migrated are shown in <a class="link" href="ntmigration.html#NT4DUM" title="Figure 9.2. View of Accounts in NT4 Domain User Manager">“View of Accounts in NT4 Domain User Manager”</a>. In this example use is made of the - smbldap-tools scripts to add the accounts that are migrated into the ldapsam passdb backend. - Four scripts are essential to the migration process. Other scripts will be required - for daily management, but these are not critical to migration. The critical scripts are dependant - on which passdb backend is being used. Refer to <a class="link" href="ntmigration.html#ch8-vampire" title="Table 9.1. Samba smb.conf Scripts Essential to Samba Operation">“Samba smb.conf Scripts Essential to Samba Operation”</a> to see which scripts - must be provided so that the migration process can complete. - </p><p> - Verify that you have correctly specified in the <code class="filename">smb.conf</code> file the scripts and arguments - that should be passed to them before attempting to perform the account migration. Note also - that the deletion scripts must be commented out during migration. These should be uncommented - following successful migration of the NT4 Domain accounts. - </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> - Under absolutely no circumstances should the Samba daemons be started until instructed to do so. - Delete the <code class="filename">/etc/samba/secrets.tdb</code> file and all Samba control tdb files - before commencing the following configuration steps. - </p></div><div class="table"><a name="ch8-vampire"></a><p class="title"><b>Table 9.1. Samba <code class="filename">smb.conf</code> Scripts Essential to Samba Operation</b></p><div class="table-contents"><table summary="Samba smb.conf Scripts Essential to Samba Operation" border="1"><colgroup><col align="left"><col align="center"><col align="center"></colgroup><thead><tr><th align="left">Entity</th><th align="center">ldapsam Script</th><th align="center">tdbsam Script</th></tr></thead><tbody><tr><td align="left">Add User Accounts</td><td align="center">smbldap-useradd</td><td align="center">useradd</td></tr><tr><td align="left">Delete User Accounts</td><td align="center">smbldap-userdel</td><td align="center">userdel</td></tr><tr><td align="left">Add Group Accounts</td><td align="center">smbldap-groupadd</td><td align="center">groupadd</td></tr><tr><td align="left">Delete Group Accounts</td><td align="center">smbldap-groupdel</td><td align="center">groupdel</td></tr><tr><td align="left">Add User to Group</td><td align="center">smbldap-groupmod</td><td align="center">usermod (See Note)</td></tr><tr><td align="left">Add Machine Accounts</td><td align="center">smbldap-useradd</td><td align="center">useradd</td></tr></tbody></table></div></div><br class="table-break"><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id369914"></a> - <a class="indexterm" name="id369921"></a> - <a class="indexterm" name="id369928"></a> - The UNIX/Linux <code class="literal">usermod</code> utility does not permit simple user addition to (or deletion - of users from) groups. This is a feature provided by the smbldap-tools scripts. If you want this - capability, you must create your own tool to do this. Alternately, you can search the Web - to locate a utility called <code class="literal">groupmem</code> (by George Kraft) that provides this functionality. - The <code class="literal">groupmem</code> utility was contributed to the shadow package but has not surfaced - in the formal commands provided by Linux distributions (March 2004). - </p></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id369961"></a> - The <code class="literal">tdbdump</code> utility is a utility that you can build from the Samba source-code tree. Not all Linux binary distributions include this tool. If it is missing from your - Linux distribution, you will need to build this yourself or else forgo its use. - </p></div><p> - <a class="indexterm" name="id369979"></a> - Before starting the migration, all dead accounts were removed from the NT4 domain using the User Manager for Domains. - </p><div class="procedure" title="Procedure 9.1. User Migration Steps"><a name="id369988"></a><p class="title"><b>Procedure 9.1. User Migration Steps</b></p><div class="example"><a name="sbent4smb"></a><p class="title"><b>Example 9.1. NT4 Migration Samba-3 Server <code class="filename">smb.conf</code> Part: A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id370046"></a><em class="parameter"><code>workgroup = DAMNATION</code></em></td></tr><tr><td><a class="indexterm" name="id370057"></a><em class="parameter"><code>netbios name = MERLIN</code></em></td></tr><tr><td><a class="indexterm" name="id370068"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://localhost</code></em></td></tr><tr><td><a class="indexterm" name="id370080"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id370092"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id370103"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id370115"></a><em class="parameter"><code>max log size = 0</code></em></td></tr><tr><td><a class="indexterm" name="id370126"></a><em class="parameter"><code>smb ports = 139 445</code></em></td></tr><tr><td><a class="indexterm" name="id370138"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id370149"></a><em class="parameter"><code>add user script = /opt/IDEALX/sbin/smbldap-useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id370161"></a><em class="parameter"><code>#delete user script = /opt/IDEALX/sbin/smbldap-userdel '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id370173"></a><em class="parameter"><code>add group script = /opt/IDEALX/sbin/smbldap-groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id370185"></a><em class="parameter"><code>#delete group script = /opt/IDEALX/sbin/smbldap-groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id370197"></a><em class="parameter"><code>add user to group script = /opt/IDEALX/sbin/ smbldap-groupmod -m '%u' '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id370209"></a><em class="parameter"><code>#delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x '%u' '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id370221"></a><em class="parameter"><code>set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id370233"></a><em class="parameter"><code>add machine script = /opt/IDEALX/sbin/smbldap-useradd -w '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id370245"></a><em class="parameter"><code>logon script = scripts\logon.cmd</code></em></td></tr><tr><td><a class="indexterm" name="id370257"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id370268"></a><em class="parameter"><code>logon home = \\%L\%U</code></em></td></tr><tr><td><a class="indexterm" name="id370280"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id370291"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370303"></a><em class="parameter"><code>domain master = No</code></em></td></tr><tr><td><a class="indexterm" name="id370314"></a><em class="parameter"><code>#wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370326"></a><em class="parameter"><code>wins server = 192.168.123.124</code></em></td></tr><tr><td><a class="indexterm" name="id370337"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=terpstra-world,dc=org</code></em></td></tr><tr><td><a class="indexterm" name="id370349"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id370360"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id370372"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id370384"></a><em class="parameter"><code>ldap passwd sync = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370395"></a><em class="parameter"><code>ldap suffix = dc=terpstra-world,dc=org</code></em></td></tr><tr><td><a class="indexterm" name="id370407"></a><em class="parameter"><code>ldap ssl = no</code></em></td></tr><tr><td><a class="indexterm" name="id370418"></a><em class="parameter"><code>ldap timeout = 20</code></em></td></tr><tr><td><a class="indexterm" name="id370430"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id370441"></a><em class="parameter"><code>idmap backend = ldap:ldap://localhost</code></em></td></tr><tr><td><a class="indexterm" name="id370453"></a><em class="parameter"><code>idmap uid = 15000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id370464"></a><em class="parameter"><code>idmap gid = 15000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id370476"></a><em class="parameter"><code>winbind nested groups = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370487"></a><em class="parameter"><code>ea support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370499"></a><em class="parameter"><code>map acl inherit = Yes</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbent4smb2"></a><p class="title"><b>Example 9.2. NT4 Migration Samba-3 Server <code class="filename">smb.conf</code> Part: B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[apps]</code></em></td></tr><tr><td><a class="indexterm" name="id370543"></a><em class="parameter"><code>comment = Application Data</code></em></td></tr><tr><td><a class="indexterm" name="id370555"></a><em class="parameter"><code>path = /data/home/apps</code></em></td></tr><tr><td><a class="indexterm" name="id370566"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id370587"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id370598"></a><em class="parameter"><code>path = /home/users/%U/Documents</code></em></td></tr><tr><td><a class="indexterm" name="id370610"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id370622"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id370633"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id370653"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id370665"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id370676"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370688"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370699"></a><em class="parameter"><code>use client driver = No</code></em></td></tr><tr><td><a class="indexterm" name="id370711"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id370731"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id370743"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id370754"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id370766"></a><em class="parameter"><code>locking = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id370786"></a><em class="parameter"><code>comment = Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id370798"></a><em class="parameter"><code>path = /var/lib/samba/profiles</code></em></td></tr><tr><td><a class="indexterm" name="id370809"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id370821"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profdata]</code></em></td></tr><tr><td><a class="indexterm" name="id370841"></a><em class="parameter"><code>comment = Profile Data Share</code></em></td></tr><tr><td><a class="indexterm" name="id370853"></a><em class="parameter"><code>path = /var/lib/samba/profdata</code></em></td></tr><tr><td><a class="indexterm" name="id370864"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id370876"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id370896"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id370908"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="sbentslapd"></a><p class="title"><b>Example 9.3. NT4 Migration LDAP Server Configuration File: <code class="filename">/etc/openldap/slapd.conf</code> Part A</b></p><div class="example-contents"><pre class="screen"> -include /etc/openldap/schema/core.schema -include /etc/openldap/schema/cosine.schema -include /etc/openldap/schema/inetorgperson.schema -include /etc/openldap/schema/nis.schema -include /etc/openldap/schema/samba3.schema - -pidfile /var/run/slapd/slapd.pid -argsfile /var/run/slapd/slapd.args - -access to dn.base="" - by self write - by * auth - -access to attr=userPassword - by self write - by * auth - -access to attr=shadowLastChange - by self write - by * read - -access to * - by * read - by anonymous auth -</pre></div></div><br class="example-break"><div class="example"><a name="sbentslapd2"></a><p class="title"><b>Example 9.4. NT4 Migration LDAP Server Configuration File: <code class="filename">/etc/openldap/slapd.conf</code> Part B</b></p><div class="example-contents"><pre class="screen"> -#loglevel 256 - -#schemacheck on -idletimeout 30 -#backend bdb -database bdb -checkpoint 1024 5 -cachesize 10000 - -suffix "dc=terpstra-world,dc=org" -rootdn "cn=Manager,dc=terpstra-world,dc=org" - -# rootpw = not24get -rootpw {SSHA}86kTavd9Dw3FAz6qzWTrCOKX/c0Qe+UV - -directory /var/lib/ldap - -# Indices to maintain -index objectClass eq -index cn pres,sub,eq -index sn pres,sub,eq -index uid pres,sub,eq -index displayName pres,sub,eq -index uidNumber eq -index gidNumber eq -index memberUID eq -index sambaSID eq -index sambaPrimaryGroupSID eq -index sambaDomainName eq -index default sub -</pre></div></div><br class="example-break"><div class="example"><a name="sbrntldapconf"></a><p class="title"><b>Example 9.5. NT4 Migration NSS LDAP File: <code class="filename">/etc/ldap.conf</code></b></p><div class="example-contents"><pre class="screen"> -host 127.0.0.1 - -base dc=terpstra-world,dc=org - -ldap_version 3 - -binddn cn=Manager,dc=terpstra-world,dc=org -bindpw not24get - -pam_password exop - -nss_base_passwd ou=People,dc=terpstra-world,dc=org?one -nss_base_shadow ou=People,dc=terpstra-world,dc=org?one -nss_base_group ou=Groups,dc=terpstra-world,dc=org?one - -ssl off -</pre></div></div><br class="example-break"><div class="example"><a name="sbentnss"></a><p class="title"><b>Example 9.6. NT4 Migration NSS Control File: <code class="filename">/etc/nsswitch.conf</code> (Stage:1)</b></p><div class="example-contents"><pre class="screen"> -passwd: files #ldap -shadow: files #ldap -group: files #ldap - -hosts: files dns wins -networks: files dns - -services: files -protocols: files -rpc: files -ethers: files -netmasks: files -netgroup: files -publickey: files - -bootparams: files -automount: files nis -aliases: files -#passwd_compat: ldap #Not needed. -#group_compat: ldap #Not needed. -</pre></div></div><br class="example-break"><div class="example"><a name="sbentnss2"></a><p class="title"><b>Example 9.7. NT4 Migration NSS Control File: <code class="filename">/etc/nsswitch.conf</code> (Stage:2)</b></p><div class="example-contents"><pre class="screen"> -passwd: files ldap -shadow: files ldap -group: files ldap - -hosts: files dns wins -networks: files dns - -services: files -protocols: files -rpc: files -ethers: files -netmasks: files -netgroup: files -publickey: files - -bootparams: files -automount: files nis -aliases: files -#passwd_compat: ldap #Not needed. -#group_compat: ldap #Not needed. -</pre></div></div><br class="example-break"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure the Samba <code class="filename">smb.conf</code> file to create a BDC. An example configuration is - given in <a class="link" href="ntmigration.html#sbent4smb" title="Example 9.1. NT4 Migration Samba-3 Server smb.conf Part: A">“NT4 Migration Samba-3 Server smb.conf Part: A”</a>. - The delete scripts are commented out so that during the process of migration - no account information can be deleted. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id370926"></a> - Configure OpenLDAP in preparation for the migration. An example - <code class="filename">sladp.conf</code> file is shown in <a class="link" href="ntmigration.html#sbentslapd" title="Example 9.3. NT4 Migration LDAP Server Configuration File: /etc/openldap/slapd.conf Part A">“NT4 Migration LDAP Server Configuration File: /etc/openldap/slapd.conf Part A”</a>. - The <code class="constant">rootpw</code> value is an encrypted password string that can - be obtained by executing the <code class="literal">slappasswd</code> command. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id371025"></a> - <a class="indexterm" name="id371032"></a> - Install the PADL <code class="literal">nss_ldap</code> tool set, then configure the <code class="filename">/etc/ldap.conf</code> - as shown in <a class="link" href="ntmigration.html#sbrntldapconf" title="Example 9.5. NT4 Migration NSS LDAP File: /etc/ldap.conf">“NT4 Migration NSS LDAP File: /etc/ldap.conf”</a>. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id371087"></a> - Edit the <code class="filename">/etc/nsswitch.conf</code> file so it has the entries shown - in <a class="link" href="ntmigration.html#sbentnss" title="Example 9.6. NT4 Migration NSS Control File: /etc/nsswitch.conf (Stage:1)">“NT4 Migration NSS Control File: /etc/nsswitch.conf (Stage:1)”</a>. Note that the LDAP entries have been commented out. - This is deliberate. If these entries are active (not commented out), and the - <code class="filename">/etc/ldap.conf</code> file has been configured, when the LDAP server - is started, the process of starting the LDAP server will cause LDAP lookups. This - causes the LDAP server <code class="literal">slapd</code> to hang because it finds port 389 - open and therefore cannot gain exclusive control of it. By commenting these entries - out, it is possible to avoid this gridlock situation and thus the overall - installation and configuration will progress more smoothly. - </p></li><li class="step" title="Step 5"><p> - Validate the the target NT4 PDC name is being correctly resolved to its IP address by - executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> ping transgression -PING transgression.terpstra-world.org (192.168.1.5) 56(84) bytes of data. -64 bytes from (192.168.1.5): icmp_seq=1 ttl=128 time=0.159 ms -64 bytes from (192.168.1.5): icmp_seq=2 ttl=128 time=0.192 ms -64 bytes from (192.168.1.5): icmp_seq=3 ttl=128 time=0.141 ms - ---- transgression.terpstra-world.org ping statistics --- -3 packets transmitted, 3 received, 0% packet loss, time 2000ms -rtt min/avg/max/mdev = 0.141/0.164/0.192/0.021 ms -</pre><p> - Do not proceed to the next step if this step fails. It is imperative that the name of the PDC - can be resolved to its IP address. If this is broken, fix it. - </p></li><li class="step" title="Step 6"><p> - Pull the domain SID from the NT4 domain that is being migrated as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc getsid -S TRANGRESSION -U Administrator%not24get -Storing SID S-1-5-21-1385457007-882775198-1210191635 \ - for Domain DAMNATION in secrets.tdb -</pre><p> - </p><p> - Another way to obtain the domain SID from the target NT4 domain that is being - migrated to Samba-3 is by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc info -S TRANSGRESSION -</pre><p> - If this method is used, do not forget to store the SID obtained into the - <code class="filename">secrets.tdb</code> file. This can be done by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> net setlocalsid S-1-5-21-1385457007-882775198-1210191635 -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id371235"></a> - <a class="indexterm" name="id371242"></a> - <a class="indexterm" name="id371249"></a> - <a class="indexterm" name="id371256"></a> - Install the Idealx <code class="literal">smbldap-tools</code> software package, following - the instructions given in <a class="link" href="happy.html#sbeidealx" title="Install and Configure Idealx smbldap-tools Scripts">“Install and Configure Idealx smbldap-tools Scripts”</a>. The resulting perl scripts - should be located in the <code class="filename">/opt/IDEALX/sbin</code> directory. - Change into that location, or wherever the scripts have been installed. Execute the - <code class="filename">configure.pl</code> script to configure the Idealx package for use. - Note: Use the domain SID obtained from the step above. The following is - an example configuration session: -</p><pre class="screen"> -<code class="prompt">root# </code> ./configure.pl --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= - smbldap-tools script configuration - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Before starting, check - . if your samba controller is up and running. - . if the domain SID is defined - (you can get it with the 'net getlocalsid') - - . you can leave the configuration using the Crtl-c key combination - . empty value can be set with the "." character --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Looking for configuration files... - -Samba Config File Location [/etc/samba/smb.conf] > -smbldap Config file Location (global parameters) - [/etc/smbldap-tools/smbldap.conf] > -smbldap Config file Location (bind parameters) - [/etc/smbldap-tools/smbldap_bind.conf] > --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -Let's start configuring the smbldap-tools scripts ... - -. workgroup name: name of the domain Samba act as a PDC - workgroup name [DAMNATION] > -. netbios name: netbios name of the samba controller - netbios name [MERLIN] > -. logon drive: local path to which the home directory - will be connected (for NT Workstations). Ex: 'H:' - logon drive [X:] > H: -. logon home: home directory location (for Win95/98 or NT Workstation) - (use %U as username) Ex:'\\MERLIN\home\%U' - logon home (leave blank if you don't want homeDirectory) - [\\MERLIN\home\%U] > \\%L\%U -. logon path: directory where roaming profiles are stored. - Ex:'\\MERLIN\profiles\%U' - logon path (leave blank if you don't want roaming profile) - [\\MERLIN\profiles\%U] > \\%L\profiles\%U -. home directory prefix (use %U as username) [/home/%U] > - /home/users/%U -. default user netlogon script (use %U as username) - [%U.cmd] > scripts\logon.cmd - default password validation time (time in days) [45] > 180 -. ldap suffix [dc=terpstra-world,dc=org] > -. ldap group suffix [ou=Groups] > -. ldap user suffix [ou=People] > -. ldap machine suffix [ou=People] > -. Idmap suffix [ou=Idmap] > -. sambaUnixIdPooldn: object where you want to store the next uidNumber - and gidNumber available for new users and groups - sambaUnixIdPooldn object (relative to ${suffix}) - [sambaDomainName=DAMNATION] > -. ldap master server: - IP address or DNS name of the master (writable) ldap server - ldap master server [] > 127.0.0.1 -. ldap master port [389] > -. ldap master bind dn [cn=Manager,dc=terpstra-world,dc=org] > -. ldap master bind password [] > -. ldap slave server: IP address or DNS name of the slave ldap server: - can also be the master one - ldap slave server [] > 127.0.0.1 -. ldap slave port [389] > -. ldap slave bind dn [cn=Manager,dc=terpstra-world,dc=org] > -. ldap slave bind password [] > -. ldap tls support (1/0) [0] > -. SID for domain DAMNATION: SID of the domain - (can be obtained with 'net getlocalsid MERLIN') - SID for domain DAMNATION [] - > S-1-5-21-1385457007-882775198-1210191635 -. unix password encryption: encryption used for unix passwords -unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA) [SSHA] > MD5 -. default user gidNumber [513] > -. default computer gidNumber [515] > -. default login shell [/bin/bash] > -. default domain name to append to mail address [] > - terpstra-world.org --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -backup old configuration files: - /etc/smbldap-tools/smbldap.conf-> - /etc/smbldap-tools/smbldap.conf.old - /etc/smbldap-tools/smbldap_bind.conf-> - /etc/smbldap-tools/smbldap_bind.conf.old -writing new configuration file: - /etc/smbldap-tools/smbldap.conf done. - /etc/smbldap-tools/smbldap_bind.conf done. -</pre><p> - <a class="indexterm" name="id371351"></a> - <a class="indexterm" name="id371358"></a> - <a class="indexterm" name="id371365"></a> - <a class="indexterm" name="id371371"></a> - Note that the NT4 domain SID that was previously obtained was entered above. Also, - the sambaUnixIdPooldn object was specified as sambaDomainName=DAMNATION. This is - the location into which the Idealx smbldap-tools store the next available UID/GID - information. It is also where Samba stores domain specific information such as the - next RID, the SID, and so on. In older version of the smbldap-tools this information - was stored in the sambaUnixIdPooldn DIT location cn=NextFreeUnixId. Where smbldap-tools - are being upgraded to version 0.9.1 it is appropriate to update this to the new location - only if the directory information is also relocated. - </p></li><li class="step" title="Step 8"><p> - Start the LDAP server using the system interface script. On Novell SLES9 - this is done as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap start -</pre><p> - </p></li><li class="step" title="Step 9"><p> - Edit the <code class="filename">/etc/nsswitch.conf</code> file so it has the entries shown in - <a class="link" href="ntmigration.html#sbentnss2" title="Example 9.7. NT4 Migration NSS Control File: /etc/nsswitch.conf (Stage:2)">“NT4 Migration NSS Control File: /etc/nsswitch.conf (Stage:2)”</a>. Note that the LDAP entries have now been uncommented. - </p></li><li class="step" title="Step 10"><p> - The LDAP management password must be installed into the <code class="filename">secrets.tdb</code> - file as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w not24get -Setting stored password for - "cn=Manager,dc=terpstra-world,dc=org" in secrets.tdb -</pre><p> - </p></li><li class="step" title="Step 11"><p> - Populate the LDAP directory as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> /opt/IDEALX/sbin/smbldap-populate -a root -k 0 -m 0 -Using workgroup name from sambaUnixIdPooldn (smbldap.conf): - sambaDomainName=DAMNATION -Using builtin directory structure -adding new entry: dc=terpstra-world,dc=org -adding new entry: ou=People,dc=terpstra-world,dc=org -adding new entry: ou=Groups,dc=terpstra-world,dc=org -entry ou=People,dc=terpstra-world,dc=org already exist. -adding new entry: ou=Idmap,dc=terpstra-world,dc=org -adding new entry: sambaDomainName=DAMNATION,dc=terpstra-world,dc=org -adding new entry: uid=root,ou=People,dc=terpstra-world,dc=org -adding new entry: uid=nobody,ou=People,dc=terpstra-world,dc=org -adding new entry: cn=Domain Admins,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Domain Users,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Domain Guests,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Domain Computers,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Administrators,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Print Operators,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Backup Operators,ou=Groups,dc=terpstra-world,dc=org -adding new entry: cn=Replicators,ou=Groups,dc=terpstra-world,dc=org -</pre><p> - The script tries to add the ou=People container twice, hence the error message. - This is expected behavior. - </p></li><li class="step" title="Step 12"><p> - <a class="indexterm" name="id371510"></a> - Restart the LDAP server following initialization of the LDAP directory. Execute the - system control script provided on your system. The following steps can be used on - Novell SUSE SLES 9: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap restart -<code class="prompt">root# </code> chkconfig ldap on -</pre><p> - </p></li><li class="step" title="Step 13"><p> - Verify that the new user accounts that have been added to the LDAP directory can be - resolved as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -... -nobody:x:65534:65533:nobody:/var/lib/nobody:/bin/bash -man:x:13:62:Manual pages viewer:/var/cache/man:/bin/bash -news:x:9:13:News system:/etc/news:/bin/bash -uucp:x:10:14:Unix-to-Unix CoPy system:/etc/uucp:/bin/bash -+::0:0::: -root:x:0:0:Netbios Domain Administrator:/home/users/root:/bin/false -nobody:x:999:514:nobody:/dev/null:/bin/false -</pre><p> - Now repeat this for the group accounts as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> getent group -... -nobody:x:65533: -nogroup:x:65534:nobody -users:x:100: -+::0: -Domain Admins:x:512:root -Domain Users:x:513: -Domain Guests:x:514: -Domain Computers:x:515: -Administrators:x:544: -Print Operators:x:550: -Backup Operators:x:551: -Replicators:x:552: -</pre><p> - In both cases the LDAP accounts follow the <span class="quote">“<span class="quote">+::0:</span>”</span> entry. - </p></li><li class="step" title="Step 14"><p> - Now it is time to join the Samba BDC to the target NT4 domain that is being - migrated to Samba-3 by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -S TRANSGRESSION -U Administrator%not24get -merlin:/opt/IDEALX/sbin # net rpc join -S TRANSGRESSION \ - -U Administrator%not24get -Joined domain DAMNATION. -</pre><p> - </p></li><li class="step" title="Step 15"><p> - Set the new domain administrator (root) password for both UNIX and Windows as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> /opt/IDEALX/sbin/smbldap-passwd root -Changing password for root -New password : ******** -Retype new password : ******** -</pre><p> - Note: During account migration, the Windows Administrator account will not be migrated - to the Samba server. - </p></li><li class="step" title="Step 16"><p> - Now validate that these accounts can be resolved using Samba's tools as - shown here for user accounts: -</p><pre class="screen"> -<code class="prompt">root# </code> pdbedit -Lw -root:0:84B0D8E14D158FF8417EAF50CFAC29C3: - AF6DD3FD4E2EA8BDE1695A3F05EFBF52:[U ]:LCT-425F6467: -nobody:65534:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX: - NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:[NU ]:LCT-00000000: -</pre><p> - Now complete the following step to validate that group account mappings have - been correctly set: -</p><pre class="screen"> -<code class="prompt">root# </code> net groupmap list -Domain Admins (S-1-5-21-1385457007-882775198-1210191635-512) - -> Domain Admins -Domain Users (S-1-5-21-1385457007-882775198-1210191635-513) - -> Domain Users -Domain Guests (S-1-5-21-1385457007-882775198-1210191635-514) - -> Domain Guests -Domain Computers (S-1-5-21-1385457007-882775198-1210191635-515) - -> Domain Computers -Administrators (S-1-5-32-544) -> Administrators -Print Operators (S-1-5-32-550) -> Print Operators -Backup Operators (S-1-5-32-551) -> Backup Operators -Replicators (S-1-5-32-552) -> Replicators -</pre><p> - These are the expected results for a correctly configured system. - </p></li><li class="step" title="Step 17"><p> - Commence migration as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc vampire -S TRANSGRESSION \ - -U Administrator%not24get > /tmp/vampire.log 2>1 -</pre><p> - Check the vampire log to confirm that only expected errors have been - reported. See <a class="link" href="ntmigration.html#sbevam1" title="Migration Log Validation">“Migration Log Validation”</a>. - </p></li><li class="step" title="Step 18"><p> - The migration of user accounts can be quickly validated as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> pdbedit -Lw -root:0:84B0D8E14D158FF8417EAF50CFAC29C3:... -nobody:65534:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:... -Administrator:0:84B0D8E14D158FF8417EAF50CFAC29C3:... -Guest:1:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:... -TRANSGRESSION$:2:CC044B748CEE294CE76B6B0D1B86C1A8:... -IUSR_TRANSGRESSION:3:64046AC81B056C375F9537FC409085F8:... -MIDEARTH$:4:E93186E5819706D2AAD3B435B51404EE:... -atrickhoffer:5:DC08CFE0C12B2867352502E32A407F23:... -barryf:6:B829BCDE01FF24376E45D5F10408CFBD:... -fsellerby:7:6A97CBEBE8F9826B417EAF50CFAC29C3:... -gdaison:8:48F6A8C8A900024351DA8C2061C5F1D3:... -hrambotham:9:7330D9EA0964465EAAD3B435B51404EE:... -jrhapsody:10:ACBA7D207E2BA35D9BD41A26B01626BD:... -maryk:11:293B5A4CA41F6CA1A7D80430B8342B73:... -jacko:12:8E8982D86BD037C364BBD09A598E07AD:... -bridge:13:0D2CA7D2BE67FE2193BE3A377C968336:... -sharpec:14:8841A75CAC19D2855D8B73B1F4D430F8:... -jimbo:15:6E8BDC904FD9EC5C17306D272A9441BB:... -dhenwick:16:D1694A03C33584BDAAD3B435B51404EE:... -dork:17:69E2D19E69A593D5AAD3B435B51404EE:... -blue:18:E355EBF9559979FEAAD3B435B51404EE:... -billw:19:EE35C3481CF7F7DB484448BC86A641A5:... -rfreshmill:20:7EC033B58661B60CAAD3B435B51404EE:... -MAGGOT$:21:A3B9334765AD30F7AAD3B435B51404EE:... -TRENTWARE$:22:1D92C8DD5E7F0DDF93BE3A377C968336:... -MORTON$:23:89342E69DCA9D3F8AAD3B435B51404EE:... -NARM$:24:2B93E2D1D25448BDAAD3B435B51404EE:... -LAPDOG$:25:14AA535885120943AAD3B435B51404EE:... -SCAVENGER$:26:B6288EB6D147B56F8963805A19B0ED49:... -merlin$:27:820C50523F368C54AB9D85AE603AD09D:... -</pre><p> - </p></li><li class="step" title="Step 19"><p> - The mapping of UNIX and Windows groups can be validated as show here: -</p><pre class="screen"> -<code class="prompt">root# </code> net groupmap list -Domain Admins (S-1-5-21-1385457007-882775198-1210191635-512) - -> Domain Admins -Domain Users (S-1-5-21-1385457007-882775198-1210191635-513) - -> Domain Users -Domain Guests (S-1-5-21-1385457007-882775198-1210191635-514) - -> Domain Guests -Domain Computers (S-1-5-21-1385457007-882775198-1210191635-515) - -> Domain Computers -Administrators (S-1-5-32-544) -> Administrators -Print Operators (S-1-5-32-550) -> Print Operators -Backup Operators (S-1-5-32-551) -> Backup Operators -Replicator (S-1-5-32-552) -> Replicators -Engineers (S-1-5-21-1385457007-882775198-1210191635-1020) -> Engineers -Marketoids (S-1-5-21-1385457007-882775198-1210191635-1022) -> Marketoids -Gnomes (S-1-5-21-1385457007-882775198-1210191635-1023) -> Gnomes -Catalyst (S-1-5-21-1385457007-882775198-1210191635-1024) -> Catalyst -Recieving (S-1-5-21-1385457007-882775198-1210191635-1025) -> Recieving -Rubberboot (S-1-5-21-1385457007-882775198-1210191635-1026) -> Rubberboot -Sales (S-1-5-21-1385457007-882775198-1210191635-1027) -> Sales -Accounting (S-1-5-21-1385457007-882775198-1210191635-1028) -> Accounting -Shipping (S-1-5-21-1385457007-882775198-1210191635-1029) -> Shipping -Account Operators (S-1-5-32-548) -> Account Operators -Guests (S-1-5-32-546) -> Guests -Server Operators (S-1-5-32-549) -> Server Operators -Users (S-1-5-32-545) -> Users -</pre><p> - It is of vital importance that the domain SID portions of all group - accounts are identical. - </p></li><li class="step" title="Step 20"><p> - The final responsibility in the migration process is to create identical - shares and printing resources on the new Samba-3 server, copy all data - across, set up privileges, and set share and file/directory access controls. - </p></li><li class="step" title="Step 21"><p> - <a class="indexterm" name="id371765"></a> - <a class="indexterm" name="id371772"></a> - Edit the <code class="filename">smb.conf</code> file to reset the parameter - <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master = Yes</a> so that - the Samba server functions as a PDC for the purpose of migration. - Also, uncomment the deletion scripts so they will now be fully functional, - enable the <em class="parameter"><code>wins support = yes</code></em> parameter and - comment out the <em class="parameter"><code>wins server</code></em>. Validate the configuration - with the <code class="literal">testparm</code> utility as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -Load smb config files from /etc/samba/smb.conf -Processing section "[apps]" -Processing section "[media]" -Processing section "[homes]" -Processing section "[printers]" -Processing section "[netlogon]" -Processing section "[profiles]" -Processing section "[profdata]" -Processing section "[print$]" -Loaded services file OK. -Server role: ROLE_DOMAIN_PDC -Press enter to see a dump of your service definitions -</pre><p> - </p></li><li class="step" title="Step 22"><p> - Now shut down the old NT4 PDC. Only when the old NT4 PDC and all - NT4 BDCs have been shut down can the Samba-3 PDC be started. - </p></li><li class="step" title="Step 23"><p> - All workstations should function as they did with the old NT4 PDC. All - interdomain trust accounts should remain in place and fully functional. - All machine accounts and user logon accounts should also function correctly. - </p></li><li class="step" title="Step 24"><p> - The configuration of Samba-3 BDC servers can be accomplished now or at any - convenient time in the future. Please refer to the carefully detailed process - for doing so is outlined in <a class="link" href="happy.html#sbehap-bldg1" title="Samba-3 BDC Configuration">“Samba-3 BDC Configuration”</a>. - </p></li></ol></div><div class="sect3" title="Migration Log Validation"><div class="titlepage"><div><div><h4 class="title"><a name="sbevam1"></a>Migration Log Validation</h4></div></div></div><p> - The following <code class="filename">vampire.log</code> file is typical of a valid migration. -</p><pre class="screen"> -adding user Administrator to group Domain Admins -adding user atrickhoffer to group Engineers -adding user dhenwick to group Engineers -adding user dork to group Engineers -adding user rfreshmill to group Marketoids -adding user jacko to group Gnomes -adding user jimbo to group Gnomes -adding user maryk to group Gnomes -adding user gdaison to group Gnomes -adding user dhenwick to group Catalyst -adding user jacko to group Catalyst -adding user jacko to group Recieving -adding user blue to group Recieving -adding user hrambotham to group Rubberboot -adding user billw to group Sales -adding user bridge to group Sales -adding user jrhapsody to group Sales -adding user maryk to group Sales -adding user rfreshmill to group Sales -adding user fsellerby to group Sales -adding user sharpec to group Sales -adding user jimbo to group Accounting -adding user gdaison to group Accounting -adding user jacko to group Shipping -adding user blue to group Shipping -Fetching DOMAIN database -Creating unix group: 'Engineers' -Creating unix group: 'Marketoids' -Creating unix group: 'Gnomes' -Creating unix group: 'Catalyst' -Creating unix group: 'Recieving' -Creating unix group: 'Rubberboot' -Creating unix group: 'Sales' -Creating unix group: 'Accounting' -Creating unix group: 'Shipping' -Creating account: Administrator -Creating account: Guest -Creating account: TRANSGRESSION$ -Creating account: IUSR_TRANSGRESSION -Creating account: MIDEARTH$ -Creating account: atrickhoffer -Creating account: barryf -Creating account: fsellerby -Creating account: gdaison -Creating account: hrambotham -Creating account: jrhapsody -Creating account: maryk -Creating account: jacko -Creating account: bridge -Creating account: sharpec -Creating account: jimbo -Creating account: dhenwick -Creating account: dork -Creating account: blue -Creating account: billw -Creating account: rfreshmill -Creating account: MAGGOT$ -Creating account: TRENTWARE$ -Creating account: MORTON$ -Creating account: NARM$ -Creating account: LAPDOG$ -Creating account: SCAVENGER$ -Creating account: merlin$ -Group members of Domain Admins: Administrator, -Group members of Domain Users: Administrator(primary), -TRANSGRESSION$(primary),IUSR_TRANSGRESSION(primary), -MIDEARTH$(primary),atrickhoffer(primary),barryf(primary), -fsellerby(primary),gdaison(primary),hrambotham(primary), -jrhapsody(primary),maryk(primary),jacko(primary),bridge(primary), -sharpec(primary),jimbo(primary),dhenwick(primary),dork(primary), -blue(primary),billw(primary),rfreshmill(primary),MAGGOT$(primary), -TRENTWARE$(primary),MORTON$(primary),NARM$(primary), -LAPDOG$(primary),SCAVENGER$(primary),merlin$(primary), -Group members of Domain Guests: Guest(primary), -Group members of Engineers: atrickhoffer,dhenwick,dork, -Group members of Marketoids: rfreshmill, -Group members of Gnomes: jacko,jimbo,maryk,gdaison, -Group members of Catalyst: dhenwick,jacko, -Group members of Recieving: jacko,blue, -Group members of Rubberboot: hrambotham, -Group members of Sales: billw,bridge,jrhapsody,maryk, -rfreshmill,fsellerby,sharpec, -Group members of Accounting: jimbo,gdaison, -Group members of Shipping: jacko,blue, -Fetching BUILTIN database -skipping SAM_DOMAIN_INFO delta for 'Builtin' (is not my domain) -Creating unix group: 'Account Operators' -Creating unix group: 'Guests' -Creating unix group: 'Server Operators' -Creating unix group: 'Users' -</pre><p> - </p></div></div><div class="sect2" title="NT4 Migration Using tdbsam Backend"><div class="titlepage"><div><div><h3 class="title"><a name="id371918"></a>NT4 Migration Using tdbsam Backend</h3></div></div></div><p> - In this example, we change the domain name of the NT4 server from - <code class="constant">DRUGPREP</code> to <code class="constant">MEGANET</code> prior to the use - of the vampire (migration) tool. This migration process makes use of Linux system tools - (like <code class="literal">useradd</code>) to add the accounts that are migrated into the - UNIX/Linux <code class="filename">/etc/passwd</code> and <code class="filename">/etc/group</code> - databases. These entries must therefore be present, and correct options specified, - in your <code class="filename">smb.conf</code> file, or else the migration does not work as it should. - </p><div class="procedure" title="Procedure 9.2. Migration Steps Using tdbsam"><a name="id371961"></a><p class="title"><b>Procedure 9.2. Migration Steps Using tdbsam</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Prepare a Samba-3 server precisely per the instructions shown in <a class="link" href="Big500users.html" title="Chapter 4. The 500-User Office">“The 500-User Office”</a>. - Set the workgroup name to <code class="constant">MEGANET</code>. - </p></li><li class="step" title="Step 2"><p><a class="indexterm" name="id371988"></a><a class="indexterm" name="id371996"></a> - Edit the <code class="filename">smb.conf</code> file to temporarily change the parameter - <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master = No</a> so - the Samba server functions as a BDC for the purpose of migration. - </p></li><li class="step" title="Step 3"><p> - Start Samba as you have done previously. - </p></li><li class="step" title="Step 4"><p><a class="indexterm" name="id372035"></a> - Join the NT4 Domain as a BDC, as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -S oldnt4pdc -W MEGANET -UAdministrator%not24get -Joined domain MEGANET. -</pre><p> - </p></li><li class="step" title="Step 5"><p><a class="indexterm" name="id372068"></a> - You may vampire the accounts from the NT4 PDC by executing the command, as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc vampire -S oldnt4pdc -U Administrator%not24get -Fetching DOMAIN database -SAM_DELTA_DOMAIN_INFO not handled -Creating unix group: 'Domain Admins' -Creating unix group: 'Domain Users' -Creating unix group: 'Domain Guests' -Creating unix group: 'Engineers' -Creating unix group: 'Marketoids' -Creating unix group: 'Account Operators' -Creating unix group: 'Administrators' -Creating unix group: 'Backup Operators' -Creating unix group: 'Guests' -Creating unix group: 'Print Operators' -Creating unix group: 'Replicator' -Creating unix group: 'Server Operators' -Creating unix group: 'Users' -Creating account: Administrator -Creating account: Guest -Creating account: oldnt4pdc$ -Creating account: jacko -Creating account: maryk -Creating account: bridge -Creating account: sharpec -Creating account: jimbo -Creating account: dhenwick -Creating account: dork -Creating account: blue -Creating account: billw -Creating account: massive$ -Group members of Engineers: Administrator, - sharpec(primary),bridge,billw(primary),dhenwick -Group members of Marketoids: Administrator,jacko(primary), - maryk(primary),jimbo,blue(primary),dork(primary) -Creating unix group: 'Gnomes' -Fetching BUILTIN database -SAM_DELTA_DOMAIN_INFO not handled -</pre><p> - </p></li><li class="step" title="Step 6"><p><a class="indexterm" name="id372111"></a> - At this point, we can validate our migration. Let's look at the accounts - in the form in which they are seen in a smbpasswd file. This achieves that: -</p><pre class="screen"> -<code class="prompt">root# </code> pdbedit -Lw -Administrator:505:84B0D8E14D158FF8417EAF50CFAC29C3: - AF6DD3FD4E2EA8BDE1695A3F05EFBF52:[UX ]:LCT-3DF7AA9F: -jimbo:512:6E9A2A51F64A1BD5C187B8085FE1D9DF: - CDF7E305E639966E489A0CEFB95EE5E0:[UX ]:LCT-3E9362BC: -sharpec:511:E4301A7CD8FDD1EC6BBF9BC19CDF8151: - 7000255938831D5B948C95C1931534C5:[UX ]:LCT-3E8B42C4: -dhenwick:513:DCD8886141E3F892AAD3B435B51404EE: - 2DB36465949CB938DD98C312EFDC2639:[UX ]:LCT-3E939F41: -bridge:510:3FE6873A43101B46417EAF50CFAC29C3: - 891741F481AF111B4CAA09A94016BD01:[UX ]:LCT-3E8B4291: -blue:515:256D41D2559BB3D2AAD3B435B51404EE: - 9CCADDA4F7D281DD0FAD321478C6F971:[UX ]:LCT-3E939FDC: -diamond$:517:6C8E7B64EDCDBC4218B6345447A4454B: - 3323AC63C666CFAACB60C13F65D54E9A:[S ]:LCT-00000000: -oldnt4pdc$:507:3E39430CDCABB5B09ED320D0448AE568: - 95DBAF885854A919C7C7E671060478B9:[S ]:LCT-3DF7AA9F: -Guest:506:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: - XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[DUX ]:LCT-3E93A008: -billw:516:85380CA7C21B6EBE168C8150662AF11B: - 5D7478508293709937E55FB5FBA14C17:[UX ]:LCT-3FED7CA1: -dork:514:78C70DDEC35A35B5AAD3B435B51404EE: - 0AD886E015AC595EC0AF40E6C9689E1A:[UX ]:LCT-3E939F9A: -jacko:508:BC472F3BF9A0A5F63832C92FC614B7D1: - 0C6822AAF85E86600A40DC73E40D06D5:[UX ]:LCT-3E8B4242: -maryk:509:3636AB7E12EBE79AB79AE2610DD89D4C: - CF271B744F7A55AFDA277FF88D80C527:[UX ]:LCT-3E8B4270: -</pre><p> - </p></li><li class="step" title="Step 7"><p><a class="indexterm" name="id372163"></a> - An expanded view of a user account entry shows more of what was - obtained from the NT4 PDC: -</p><pre class="screen"> -sleeth:~ # pdbedit -Lv maryk -Unix username: maryk -NT username: maryk -Account Flags: [UX ] -User SID: S-1-5-21-1988699175-926296742-1295600288-1003 -Primary Group SID: S-1-5-21-1988699175-926296742-1295600288-1007 -Full Name: Mary Kathleen -Home Directory: \\diamond\maryk -HomeDir Drive: X: -Logon Script: scripts\logon.bat -Profile Path: \\diamond\profiles\maryk -Domain: MEGANET -Account desc: Peace Maker -Workstations: -Munged dial: -Logon time: 0 -Logoff time: Mon, 18 Jan 2038 20:14:07 GMT -Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT -Password last set: Wed, 02 Apr 2003 13:05:04 GMT -Password can change: 0 -Password must change: Mon, 18 Jan 2038 20:14:07 GMT -</pre><p> - </p></li><li class="step" title="Step 8"><p><a class="indexterm" name="id372190"></a> - The following command lists the long names of the groups that have been - imported (vampired) from the NT4 PDC: -</p><pre class="screen"> -<code class="prompt">root# </code> net group -l -Uroot%not24get -Smassive - -Group name Comment ------------------------------ -Engineers Snake Oil Engineers -Marketoids Untrustworthy Hype Vendors -Gnomes Plain Vanilla Garden Gnomes -Replicator Supports file replication in a domain -Guests Users granted guest access to the computer/domain -Administrators Members can fully administer the computer/domain -Users Ordinary users -</pre><p> - Everything looks well and in order. - </p></li><li class="step" title="Step 9"><p><a class="indexterm" name="id372225"></a><a class="indexterm" name="id372233"></a> - Edit the <code class="filename">smb.conf</code> file to reset the parameter - <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master = Yes</a> so - the Samba server functions as a PDC for the purpose of migration. - </p></li></ol></div></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id372263"></a>Key Points Learned</h3></div></div></div><p> - Migration of an NT4 PDC database to a Samba-3 PDC is possible. - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - An LDAP backend is a suitable vehicle for NT4 migrations. - </p></li><li class="listitem"><p> - A tdbsam backend can be used to perform a migration. - </p></li><li class="listitem"><p> - Multiple NT4 domains can be merged into a single Samba-3 - domain. - </p></li><li class="listitem"><p> - The net Samba-3 domain most likely requires some - administration and updating before going live. - </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id372297"></a>Questions and Answers</h2></div></div></div><p> - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id372306"></a><dl><dt> <a href="ntmigration.html#id372313"> - Why must I start each migration with a clean database? - </a></dt><dt> <a href="ntmigration.html#id372349"> - Is it possible to set my domain SID to anything I like? - </a></dt><dt> <a href="ntmigration.html#id372401"> - When using a tdbsam passdb backend, why must I have all domain user and group accounts - in /etc/passwd and /etc/group? - </a></dt><dt> <a href="ntmigration.html#id372571"> - Why did you validate connectivity before attempting migration? - </a></dt><dt> <a href="ntmigration.html#id372613"> - How would you merge 10 tdbsam-based domains into an LDAP database? - </a></dt><dt> <a href="ntmigration.html#id372728"> - I want to change my domain name after I migrate all accounts from an NT4 domain to a - Samba-3 domain. Does it make any sense to migrate the machine accounts in that case? - </a></dt><dt> <a href="ntmigration.html#id372800"> - After merging multiple NT4 domains into a Samba-3 domain, I lost all multiple group mappings. Why? - </a></dt><dt> <a href="ntmigration.html#id372858"> - How can I reset group membership after loading the account information into the LDAP database? - </a></dt><dt> <a href="ntmigration.html#id372890"> - What are the limits or constraints that apply to group names? - </a></dt><dt> <a href="ntmigration.html#id372987"> - My Windows NT4 PDC has 323,000 user accounts. How long will it take to migrate them to a Samba-3 - LDAP backend system using the vampire process? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id372313"></a><a name="id372315"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372318"></a> - Why must I start each migration with a clean database? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372333"></a> - This is a recommendation that permits the data from each NT4 domain to - be kept separate until you are ready to merge them. Also, if you do not start with a clean database, - you may find errors due to users or groups from multiple domains having the - same name but different SIDs. It is better to permit each migration to complete - without undue errors and then to handle the merging of vampired data under - proper supervision. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372349"></a><a name="id372351"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372354"></a> - Is it possible to set my domain SID to anything I like? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372369"></a><a class="indexterm" name="id372377"></a><a class="indexterm" name="id372384"></a> - Yes, so long as the SID you create has the same structure as an autogenerated SID. - The typical SID looks like this: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX, where - the XXXXXXXXXX can be any number with from 6 to 10 digits. On the other hand, why - would you really want to create your own SID? I cannot think of a good reason. - You may want to set the SID to one that is already in use somewhere on your network, - but that is a little different from straight out creating your own domain SID. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372401"></a><a name="id372403"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372406"></a><a class="indexterm" name="id372414"></a><a class="indexterm" name="id372422"></a><a class="indexterm" name="id372430"></a><a class="indexterm" name="id372438"></a><a class="indexterm" name="id372449"></a><a class="indexterm" name="id372460"></a> - When using a tdbsam passdb backend, why must I have all domain user and group accounts - in <code class="filename">/etc/passwd</code> and <code class="filename">/etc/group</code>? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372491"></a><a class="indexterm" name="id372499"></a><a class="indexterm" name="id372506"></a><a class="indexterm" name="id372514"></a><a class="indexterm" name="id372522"></a><a class="indexterm" name="id372530"></a> - Samba-3 must be able to tie all user and group account SIDs to a UNIX UID or GID. Samba - does not fabricate the UNIX IDs from thin air, but rather requires them to be located - in a suitable place. - </p><p> - When migrating a <code class="filename">smbpasswd</code> file to an LDAP backend, the - UID of each account is taken together with the account information in the - <code class="filename">/etc/passwd</code>, and both sets of data are used to create the account - entry in the LDAP database. - </p><p> - If you elect to create the POSIX account also, the entire UNIX account is copied to the - LDAP backend. The same occurs with NT groups and UNIX groups. At the conclusion of - migration to the LDAP database, the accounts may be removed from the UNIX database files. - In short then, all UNIX and Windows networking accounts, both in tdbsam as well as in - LDAP, require UIDs/GIDs. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372571"></a><a name="id372573"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372576"></a><a class="indexterm" name="id372584"></a><a class="indexterm" name="id372592"></a> - Why did you validate connectivity before attempting migration? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Access validation before attempting to migrate NT4 domain accounts helps to pinpoint - potential problems that may otherwise affect or impede account migration. I am always - mindful of the 4 P's of migration: Planning Prevents Poor Performance. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372613"></a><a name="id372615"></a></td><td align="left" valign="top"><p> - How would you merge 10 tdbsam-based domains into an LDAP database? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372626"></a><a class="indexterm" name="id372634"></a><a class="indexterm" name="id372642"></a><a class="indexterm" name="id372649"></a><a class="indexterm" name="id372657"></a><a class="indexterm" name="id372665"></a><a class="indexterm" name="id372672"></a><a class="indexterm" name="id372680"></a><a class="indexterm" name="id372688"></a><a class="indexterm" name="id372696"></a><a class="indexterm" name="id372704"></a> - If you have 10 tdbsam Samba domains, there is considerable risk that there are a number of - accounts that have the same UNIX identifier (UID/GID). This means that you almost - certainly have to edit a lot of data. It would be easiest to dump each database in smbpasswd - file format and then manually edit all records to ensure that each has a unique UID. Each - file can then be imported a number of ways. You can use the <code class="literal">pdbedit</code> tool - to affect a transfer from the smbpasswd file to LDAP, or you can migrate them en masse to - tdbsam and then to LDAP. The final choice is yours. Just remember to verify all accounts that - you have migrated before handing over access to a user. After all, too many users with a bad - migration experience may threaten your career. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372728"></a><a name="id372731"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372734"></a><a class="indexterm" name="id372742"></a> - I want to change my domain name after I migrate all accounts from an NT4 domain to a - Samba-3 domain. Does it make any sense to migrate the machine accounts in that case? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372761"></a><a class="indexterm" name="id372769"></a><a class="indexterm" name="id372777"></a><a class="indexterm" name="id372785"></a> - I would recommend not to migrate the machine account. The machine accounts should still work, but there are registry entries - on each Windows NT4 and upward client that have a tattoo of the old domain name. If you - unjoin the domain and then rejoin the newly renamed Samba-3 domain, you can be certain to avoid - this tattooing effect. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372800"></a><a name="id372802"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372805"></a> - After merging multiple NT4 domains into a Samba-3 domain, I lost all multiple group mappings. Why? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372820"></a><a class="indexterm" name="id372828"></a> - Samba-3 currently does not implement multiple group membership internally. If you use the Windows - NT4 Domain User Manager to manage accounts and you have an LDAP backend, the multiple group - membership is stored in the POSIX groups area. If you use either tdbsam or smbpasswd backend, - then multiple group membership is handled through the UNIX groups file. When you dump the user - accounts, no group account information is provided. When you edit (change) UIDs and GIDs in each - file to which you migrated the NT4 Domain data, do not forget to edit the UNIX <code class="filename">/etc/passwd</code> - and <code class="filename">/etc/group</code> information also. That is where the multiple group information - is most closely at your fingertips. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372858"></a><a name="id372860"></a></td><td align="left" valign="top"><p> - How can I reset group membership after loading the account information into the LDAP database? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372871"></a> - You can use the NT4 Domain User Manager that can be downloaded from the Microsoft Web site. The - installation file is called <code class="filename">SRVTOOLS.EXE</code>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372890"></a><a name="id372892"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372895"></a> - What are the limits or constraints that apply to group names? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id372910"></a><a class="indexterm" name="id372918"></a><a class="indexterm" name="id372926"></a><a class="indexterm" name="id372934"></a><a class="indexterm" name="id372942"></a><a class="indexterm" name="id372950"></a> - A Windows 200x group name can be up to 254 characters long, while in Windows NT4 the group - name is limited to 20 characters. Most UNIX systems limit this to 32 characters. Windows - groups can contain upper- and lowercase characters, as well as spaces. - Many UNIX system do not permit the use of uppercase characters, and some do not permit the - space character either. A number of systems (i.e., Linux) work fine with both uppercase - and space characters in group names, but the shadow-utils package that provides the group - control functions (<code class="literal">groupadd</code>, <code class="literal">groupmod</code>, <code class="literal">groupdel</code>, and so on) do not permit them. - Also, a number of UNIX systems management tools enforce their own particular interpretation - of the POSIX standards and likewise do not permit uppercase or space characters in group - or user account names. You have to experiment with your system to find what its - peculiarities are. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id372987"></a><a name="id372989"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id372992"></a> - My Windows NT4 PDC has 323,000 user accounts. How long will it take to migrate them to a Samba-3 - LDAP backend system using the vampire process? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - UNIX UIDs and GIDs on most UNIX systems use an unsigned short or an unsigned integer. Recent Linux - kernels support at least a much larger number. On systems that have a 16-bit constraint on UID/GIDs, - you would not be able to migrate 323,000 accounts because this number cannot fit into a 16-bit unsigned - integer. UNIX/Linux systems that have a 32-bit UID/GID can easily handle this number of accounts. - Please check this carefully before you attempt to effect a migration using the vampire process. - </p><p><a class="indexterm" name="id373019"></a> - Migration speed depends much on the processor speed, the network speed, disk I/O capability, and - LDAP update overheads. On a dual processor AMD MP1600+ with 1 GB memory that was mirroring LDAP - to a second identical system over 1 Gb Ethernet, I was able to migrate around 180 user accounts - per minute. Migration would obviously go much faster if LDAP mirroring were turned off during the migration. - </p></td></tr></tbody></table></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="upgrades.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="DMSMig.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="nw4migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 8. Updating Samba-3 </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 10. Migrating NetWare Server to Samba-3</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/nw4migration.html b/docs/htmldocs/Samba3-ByExample/nw4migration.html deleted file mode 100644 index b43ec34e4a..0000000000 --- a/docs/htmldocs/Samba3-ByExample/nw4migration.html +++ /dev/null @@ -1,1249 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 10. Migrating NetWare Server to Samba-3</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="DMSMig.html" title="Part II. Domain Members, Updating Samba and Migration"><link rel="prev" href="ntmigration.html" title="Chapter 9. Migrating NT4 Domain to Samba-3"><link rel="next" href="RefSection.html" title="Part III. Reference Section"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 10. Migrating NetWare Server to Samba-3</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ntmigration.html">Prev</a> </td><th width="60%" align="center">Part II. Domain Members, Updating Samba and Migration</th><td width="20%" align="right"> <a accesskey="n" href="RefSection.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 10. Migrating NetWare Server to Samba-3"><div class="titlepage"><div><div><h2 class="title"><a name="nw4migration"></a>Chapter 10. Migrating NetWare Server to Samba-3</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="nw4migration.html#id373183">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373282">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="nw4migration.html#id373359">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373431">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="nw4migration.html#id373599">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="nw4migration.html#id373608">NetWare Migration Using LDAP Backend</a></span></dt></dl></dd></dl></div><p> - <a class="indexterm" name="id373052"></a> - <a class="indexterm" name="id373059"></a> - Novell is a company any seasoned IT manager has to admire. It has become increasingly - Linux-friendly and is emerging out of a deep regression that almost saw the company - disappear into obscurity. Novell's SUSE Linux hosts the NetWare server and it is the - platform of choice to which many older NetWare servers are being migrated. - It will be interesting to see what becomes of NetWare over time. - Meanwhile, there can be no denying that Novell is a Linux company. - </p><p> - <a class="indexterm" name="id373073"></a> - <a class="indexterm" name="id373080"></a> - <a class="indexterm" name="id373087"></a> - <a class="indexterm" name="id373093"></a> - Whatever flavor of Linux is preferred in your environment, whether Red Hat, Debian, - Gentoo, Mandrake, or SUSE (Novell), the information in this chapter should be read with - the knowledge that file locations may vary a little; even so, the information - in this chapter should provide something of value. - </p><p> - <a class="indexterm" name="id373106"></a> - Contributions to this chapter were made by Misty Stanley-Jones, a UNIX administrator of many - years who surfaced on the Samba mailing list with a barrage of questions and who - regularly helps other administrators to solve thorny Samba migration questions. - </p><p> - <a class="indexterm" name="id373118"></a> - <a class="indexterm" name="id373125"></a> - <a class="indexterm" name="id373132"></a> - <a class="indexterm" name="id373139"></a> - One wonders how many NetWare servers remain in active service. Many are being migrated - to Samba on Linux. Red Hat Linux, SUSE Linux 9.x, and SUSE Linux Enterprise Server 9 are - ideal target platforms to which a NetWare server may be migrated. The migration method - of choice is much dependent on the tools that the administrator finds most natural to use. - The old-hand NetWare guru will likely want to use tools like the NetWare NLM for - <code class="literal">rsync</code> to migrate files from the NetWare server to the Samba server. - The UNIX administrator might prefer tools that are part of the Mars_NWE (Martin Stovers' NetWare - Emulator) open source package. The MS Windows network administrator will likely make use of the - NWConv utility that is a part of Windows NT4 Server. Whatever your tool of choice, - migration will be filled with joyous and challenging moments though probably not - concurrently. - </p><p> - The priority that Misty faced was one of migration of the data files off the NetWare 4.11 - server and onto a Samba-based Windows file and print server. This chapter does not pretend - to document all the different methods that could be used to migrate user and group accounts - off a NetWare server. Its focus is on migration of data files. - </p><p> - This chapter tells its own story, so ride along. Maybe the information presented here - will help to smooth over a similar migration challenge in your favorite networking environment. - </p><p> - File paths have been modified to permit use of RPM packages provided by Novell. In the - original documentation contributed by Misty, the Courier-IMAP package had been built - directly from the original source tarball. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id373183"></a>Introduction</h2></div></div></div><p> - <a class="indexterm" name="id373190"></a> - Misty Stanley-Jones was recruited by Abmas to administer a network that had - not received much attention for some years and was much in need of a makeover. - As a brand-new sysadmin to this company, she inherited a very old Novell file server - and came with a determination to change things for the better. - </p><p> - A site survey turned up the following details for the old NetWare server: - </p><table border="0" summary="Simple list" class="simplelist"><tr><td>200 MHz MMX processor</td></tr><tr><td>512K RAM</td></tr><tr><td>24 GB disk space in RAID1</td></tr><tr><td>Novell 4.11 patched to service pack 7</td></tr><tr><td>60+ users</td></tr><tr><td>7 network-attached printers</td></tr></table><p> - The company had outgrown this server several years before and was dealing with - severe growing pains. Some of the problems experienced were: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Very slow performance</p></li><li class="listitem"><p>Available storage hovering around the 5% range</p><div class="itemizedlist"><ul class="itemizedlist" type="circle"><li class="listitem"><p>Extremely slow print spooling.</p></li><li class="listitem"><p> - Users storing information on their local hard - drives, causing backup integrity problems - </p></li></ul></div></li></ul></div><p> - <a class="indexterm" name="id373272"></a> - At one point disk space had filled up to 100 percent, causing the payroll database - to become corrupt. This caused the accounting department to be down for over - a week and necessitated deployment of another file server. The replacement - server was created with very poor security and design considerations from - a discarded desktop PC. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id373282"></a>Assignment Tasks</h3></div></div></div><p> - Misty has provided this summary of her migration experience in the hope - that it will help someone to avoid the challenges she faced. Perhaps her - configuration files and background will accelerate your learning as you - grapple with a similar migration challenge. Let there be no confusion, - the information presented in this chapter is provided to demonstrate - how Misty dealt with a particular NetWare migration requirement, and - it provides an overall approach to the implementation of a Samba-3 - environment that is significantly divergent from that presented in - <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>. - </p><p> - The complete removal of all site-specific information in order to produce - a generic migration solution would rob this chapter of its character. - It should be recognized, therefore, that the examples given require - significant adaptation to suit local needs and thus - there are some gaps in the example files. That is not Misty's fault;it - is the result of treatment given to her files in an attempt to make - the overall information more useful to you. - </p><p> - <a class="indexterm" name="id373311"></a> - After management reviewed a cost-benefit report as well as an estimated - time-to-completion, approval was given proceed with the solution proposed. - The server was built from purchased components. The total project cost - was $3,000. A brief description of the configuration follows: - </p><table border="0" summary="Simple list" class="simplelist"><tr><td> - 3.0 GHz P4 Processor - </td></tr><tr><td> - 1 GB RAM - </td></tr><tr><td> - 120 GB SATA operating system drive - </td></tr><tr><td> - 4 x 80 GB SATA data drives (RAID5 240 GB capacity) - </td></tr><tr><td> - 2 x 80 GB SATA removable drives for online backup - </td></tr><tr><td> - A DLT drive for asynchronous offline backup - </td></tr><tr><td> - SUSE Linux Professional 9.1 - </td></tr></table><p> - The new system has operated for 6 months without problems. Over the past months - much attention has been focused on cleaning up desktops and user profiles. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id373359"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id373367"></a> - <a class="indexterm" name="id373374"></a> - <a class="indexterm" name="id373381"></a> - <a class="indexterm" name="id373388"></a> - A decision to use LDAP was made even though I knew nothing about LDAP except that - I had been reading the book <span class="quote">“<span class="quote">LDAP System Administration,</span>”</span> by Gerald Carter. - LDAP seemed to provide some of the functionality of Novell's e-Directory Services - and would provide centralized authentication and identity management. - </p><p> - <a class="indexterm" name="id373404"></a> - <a class="indexterm" name="id373411"></a> - <a class="indexterm" name="id373417"></a> - Building the LDAP database took a while and a lot of trial and error. Following - the guidance I obtained from <span class="quote">“<span class="quote">LDAP System - Administration,</span>”</span> I installed OpenLDAP (from RPM; later I compiled - a more current version from source) and built my initial LDAP tree. - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id373431"></a>Technical Issues</h3></div></div></div><p> - <a class="indexterm" name="id373439"></a> - <a class="indexterm" name="id373446"></a> - <a class="indexterm" name="id373452"></a> - <a class="indexterm" name="id373459"></a> - <a class="indexterm" name="id373466"></a> - <a class="indexterm" name="id373473"></a> - <a class="indexterm" name="id373480"></a> - <a class="indexterm" name="id373486"></a> - <a class="indexterm" name="id373493"></a> - The first challenge was to create a company white pages, followed by manually - entering everything from the printed company directory. This used only the inetOrgPerson - object class from the OpenLDAP schemas. The next step was to write a shell script that - would look at the <code class="filename">/etc/passwd</code> and <code class="filename">/etc/shadow</code> - files on our mail server and create an LDIF file from which the information could be - imported into LDAP. This would allow use of LDAP for Linux authentication, IMAP, POP3, - and SMTP. - </p><p> - Because a decision was made to use Courier-IMAP the schema <span class="quote">“<span class="quote">authldap.schema</span>”</span> - from the Courier-IMAP source, tarball is necessary to resolve Courier-specific LDAP directory - needs. Where the Courier-IMAP file provided by SUSE is used, this file is named - <code class="filename">courier.schema</code>. - </p><p> - Looking back, it would have been much easier to populate the LDAP directory using a convenient - tool such as <code class="literal">phpLDAPAdmin</code> from the outset. An excessive amount of time was - spent trying to generate LDIF files that could be parsed using the <code class="literal">ldapmodify</code> - so that necessary changes could be written to the directory. This was a learning experience! - </p><p> - An attempt was made to use the PADL POSIX account migration scripts, but I gave up trying to - make them work. Instead, even though it is most inelegant, I wrote a simple script that did - what I needed. It is enclosed as a simple example to demonstrate that you do not need to be - a guru to make light of otherwise painful repetition. This file is listed in <a class="link" href="nw4migration.html#sbeamg" title="Example 10.1. A Rough Tool to Create an LDIF File from the System Account Files">“A Rough Tool to Create an LDIF File from the System Account Files”</a>. - </p><div class="example"><a name="sbeamg"></a><p class="title"><b>Example 10.1. A Rough Tool to Create an LDIF File from the System Account Files</b></p><div class="example-contents"><pre class="screen"> -#!/bin/bash - -cat /etc/passwd | while read l; do - uid=`echo $l | cut -d : -f 1` - uidNumber=`echo $l | cut -d : -f 3` - gidNumber=`echo $1 | cut -d : -f 4` - gecos=`echo $l | cut -d : -f 5` - homeDirectory=`echo $l | cut -d : -f 6` - loginShell=`echo $l | cut -d : -f 6` - userPassword=`cat /etc/shadow | grep $uid | cut -d : -f 2` - - echo "dn: cn=$gecos,ou=people,dc=mycompany,dc=com" - echo "objectClass: account" - echo "objectClass: posixAccount" - echo "cn: $gecos" - echo "uid: $uid" - echo "uidNumber: $uidNumber" - echo "gidNumber: $gidNumber" - echo "homeDirectory: $homeDirectory" - echo "loginShell: $loginShell" - echo "userPassword: $userPassword" -done -</pre></div></div><br class="example-break"><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - - The PADL MigrationTools are recommended for migration of the UNIX account information into - the LDAP directory. The tools consist of a set of Perl scripts for migration of users, groups, - aliases, hosts, netgroups, networks, protocols, PRCs, and services from the existing ASCII text - files (or from a name service such as NIS). This too set can be obtained from the <a class="ulink" href="http://www.padl.com" target="_top">PADL Web site</a>. - </p></div></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id373599"></a>Implementation</h2></div></div></div><p> - </p><div class="sect2" title="NetWare Migration Using LDAP Backend"><div class="titlepage"><div><div><h3 class="title"><a name="id373608"></a>NetWare Migration Using LDAP Backend</h3></div></div></div><p> - The following software must be installed on the SUSE Linux Enterprise Server to perform - this migration: - </p><table border="0" summary="Simple list" class="simplelist"><tr><td>courier-imap</td></tr><tr><td>courier-imap-ldap</td></tr><tr><td>nss_ldap</td></tr><tr><td>openldap2-client</td></tr><tr><td>openldap2-devel (only for Samba compilation)</td></tr><tr><td>openldap2</td></tr><tr><td>pam_ldap</td></tr><tr><td>samba-3.0.20 or later</td></tr><tr><td>samba-client-3.0.20 or later</td></tr><tr><td>samba-winbind-3.0.20 or later</td></tr><tr><td>smbldap-tools Version 0.9.1</td></tr></table><p> - Each software application must be carefully configured in preparation for migration. - The configuration files used at Abmas are provided as a guide and should be modified - to meet needs at your site. - </p><div class="sect3" title="LDAP Server Configuration"><div class="titlepage"><div><div><h4 class="title"><a name="id373667"></a>LDAP Server Configuration</h4></div></div></div><p> - The <code class="filename">/etc/openldap/slapd.conf</code> file Misty used is shown here: -</p><pre class="programlisting"> -#/etc/openldap/slapd.conf -# -# See slapd.conf(5) for details on configuration options. -# This file should NOT be world readable. -# -include /etc/openldap/schema/core.schema -include /etc/openldap/schema/cosine.schema -include /etc/openldap/schema/inetorgperson.schema -include /etc/openldap/schema/nis.schema -include /etc/openldap/schema/samba3.schema -include /etc/openldap/schema/dhcp.schema -include /etc/openldap/schema/misc.schema -include /etc/openldap/schema/idpool.schema -include /etc/openldap/schema/eduperson.schema -include /etc/openldap/schema/commURI.schema -include /etc/openldap/schema/local.schema -include /etc/openldap/schema/courier.schema - -pidfile /var/run/slapd/run/slapd.pid -argsfile /var/run/slapd/run/slapd.args - -replogfile /data/ldap/log/slapd.replog - -# Load dynamic backend modules: -modulepath /usr/lib/openldap/modules - -####################################################################### -# Logging parameters -####################################################################### -loglevel 256 - -####################################################################### -# SASL and TLS options -####################################################################### -sasl-host ldap.corp.abmas.org -sasl-realm DIGEST-MD5 -sasl-secprops none -TLSCipherSuite HIGH:MEDIUM:+SSLV2 -TLSCertificateFile /etc/ssl/certs/private/abmas-cert.pem -TLSCertificateKeyFile /etc/ssl/certs/private/abmas-key.pem -password-hash {SSHA} -defaultsearchbase "dc=abmas,dc=biz" - -####################################################################### -# bdb database definitions -####################################################################### -database bdb -suffix "dc=abmas,dc=biz" -rootdn "cn=manager,dc=abmas,dc=biz" -rootpw {SSHA}gdo/dUvoT4ZJmULz3rUt6A3H/hBEduJ5 -directory /data/ldap -mode 0600 -# The following is for BDB to make it flush its data to disk every -# 500 seconds or 5kb of data -checkpoint 500 5 - -## For running slapindex -#readonly on - -## Indexes for often-requested attributes -index objectClass eq -index cn eq,sub -index sn eq,sub -index uid eq,sub -index uidNumber eq -index gidNumber eq -index sambaSID eq -index sambaPrimaryGroupSID eq -index sambaDomainName eq -index default sub -cachesize 2000 - -replica host=baa.corp.abmas.org:389 - suffix="dc=abmas,dc=biz" - binddn="cn=replica,dc=abmas,dc=biz" - credentials=verysecret - bindmethod=simple - tls=yes -replica host=ns.abmas.org:389 - suffix="dc=abmas,dc=biz" - binddn="cn=replica,dc=abmas,dc=biz" - credentials=verysecret - bindmethod=simple - tls=yes - -####################################################################### -# ACL section -####################################################################### -## MOST RESTRICTIVE RULES MUST GO FIRST! -# Admins get access to everything. This way I do not have to rename. -access to * - by group/groupOfUniqueNames/uniqueMember="cn=LDAP -Administrators,ou=groups,dc=abmas,dc=biz" write - by * break - -## Users can change their own passwords. -access to -attrs=userPassword,sambaNTPassword,sambaLMPassword,sambaPwdLastSet, -sambaPwdMustChange,sambaPwdCanChange - by self write - by * auth - -## Home contact info restricted to the logged-in user and the HR dept -access to attrs=hometelephoneNumber,homePostalAddress, -mobileTelephoneNumber,pagerTelephoneNumber - by group/groupOfUniqueNames/uniqueMember="cn=hr_admin, -ou=groups,dc=abmas,dc=biz" -write - by self write - by * none - -## Everyone can read email aliases -access to dn.sub="ou=Email Aliases,dc=abmas,dc=biz" - by * read - -## Only admins can manage email aliases -## If someone is the role occupant of an alias they can change it -- this -## is accomplished by the "organizationalRole" objectclass and is -## pretty cool -- like a groupOfUniqueNames but for individual -## users. -access to dn.children="ou=Email Aliases,dc=abmas,dc=biz" - by dnattr=roleOccupant write - by * read - -## Admins and HR can add and delete users -access to dn.sub="ou=people,dc=abmas,dc=biz" - by group/groupOfUniqueNames/uniqueMember="cn=hr_admin, -ou=groups,dc=abmas,dc=biz" -write - by * read - -## Admins and HR can add and delete bizputers -access to dn.sub="ou=bizputers,dc=abmas,dc=biz" - by group/groupOfUniqueNames/uniqueMember="cn=hr_admin, -ou=groups,dc=abmas,dc=biz" -write - by * read - -## Admins and HR can add and delete groups -access to dn.sub="ou=groups,dc=abmas,dc=biz" - by group/groupOfUniqueNames/uniqueMember="cn=hr_admin, -ou=groups,dc=abmas,dc=biz" -write - by * read - -## This is used to quickly deactivate any LDAP object only -## Admins have access. -access to dn.sub="ou=inactive,dc=abmas,dc=biz" - by * none - -## This is for programs like Windows Address Book that can -## detect the default search base. -access to attrs=namingcontexts,supportedControl - by anonymous =cs - by * read - -## Default to read-only access -access to * - by dn.base="cn=replica,ou=people,dc=abmas,dc=biz" write - by * read -</pre><p> -</p><p> - <a class="indexterm" name="id373778"></a> - The <code class="filename">/etc/ldap.conf</code> file used is listed in <a class="link" href="nw4migration.html#ch8ldap" title="Example 10.2. NSS LDAP Control File /etc/ldap.conf">“NSS LDAP Control File /etc/ldap.conf”</a>. - </p><div class="example"><a name="ch8ldap"></a><p class="title"><b>Example 10.2. NSS LDAP Control File /etc/ldap.conf</b></p><div class="example-contents"><pre class="screen"> -# /etc/ldap.conf -# This file is present on every *NIX client that authenticates to LDAP. -# For me, most of the defaults are fine. There is an amazing amount of -# customization that can be done see the man page for info. - -# Your LDAP server. Must be resolvable without using LDAP. The following -# is for the LDAP server all others use the FQDN of the server -URI ldap://127.0.0.1 - -# The distinguished name of the search base. -base ou=corp,dc=abmas,dc=biz - -# The LDAP version to use (defaults to 3 if supported by client library) -ldap_version 3 - -# The distinguished name to bind to the server with if the effective -# user ID is root. Password is stored in /etc/ldap.secret (mode 600) -rootbinddn cn=Manager,dc=abmas,dc=biz - -# Filter to AND with uid=%s -pam_filter objectclass=posixAccount - -# The user ID attribute (defaults to uid) -pam_login_attribute uid - -# Group member attribute -pam_member_attribute memberUID - -# Use the OpenLDAP password change -# extended operation to update the password. -pam_password exop - -# OpenLDAP SSL mechanism -# start_tls mechanism uses the normal LDAP port, LDAPS typically 636 -ssl start_tls - -tls_cacertfile /etc/ssl/certs/private/abmas-cert.pem -... -</pre></div></div><br class="example-break"><p> - The NSS control file <code class="filename">/etc/nsswitch.conf</code> has the following contents: -</p><pre class="screen"> -# /etc/nsswitch.conf -# This file controls the resolve order for system databases. - -# the following two lines obviate the "+" entry in /etc/passwd and /etc/group. -passwd: compat ldap -group: compat ldap -# The above are all that I store in LDAP at this point. There are -# possibilities to store hosts, services, ethers, and lots of other things. -</pre><p> - </p><p> - <a class="indexterm" name="id373848"></a> - <a class="indexterm" name="id373854"></a> - In my setup, users authenticate via PAM and NSS using LDAP-based accounts. - The configuration file that controls the behavior of the PAM <code class="literal">pam_unix2</code> - module is shown in <a class="link" href="nw4migration.html#sbepu2" title="Example 10.3. The PAM Control File /etc/security/pam_unix2.conf">“The PAM Control File /etc/security/pam_unix2.conf”</a> file. - This works out of the box with the configuration files in this chapter. It - enables you to have no local accounts for users (it is highly advisable - to have a local account for the root user). Traps for the unwary include the following: - </p><div class="example"><a name="sbepu2"></a><p class="title"><b>Example 10.3. The PAM Control File <code class="filename">/etc/security/pam_unix2.conf</code></b></p><div class="example-contents"><pre class="screen"> -# pam_unix2 config file -# -# This file contains options for the pam_unix2.so module. -# It contains a list of options for every type of management group, -# which will be used for authentication, account management and -# password management. Not all options will be used from all types of -# management groups. -# -# At first, pam_unix2 will read this file and then uses the local -# options. Not all options can be set her global. -# -# Allowed options are: -# -# debug (account, auth, password, session) -# nullok (auth) -# md5 (password / overwrites /etc/default/passwd) -# bigcrypt (password / overwrites /etc/default/passwd) -# blowfish (password / overwrites /etc/default/passwd) -# crypt_rounds=XX -# none (session) -# trace (session) -# call_modules=x,y,z (account, auth, password) -# -# Example: -# auth: nullok -# account: -# password: nullok blowfish crypt_rounds=8 -# session: none -# -auth: use_ldap -account: use_ldap -password: use_ldap -session: none -</pre></div></div><br class="example-break"><a class="indexterm" name="id373906"></a><a class="indexterm" name="id373913"></a><a class="indexterm" name="id373920"></a><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - If your LDAP database goes down, nobody can authenticate except for root. - </p></li><li class="listitem"><p> - If failover is configured incorrectly, weird behavior can occur. For example, - DNS can fail to resolve. - </p></li></ul></div><p> - I do have two LDAP slave servers configured. That subject is beyond the scope - of this document, and steps for implementing it are well documented. - </p><p> - The following services authenticate using LDAP: - </p><a class="indexterm" name="id373952"></a><a class="indexterm" name="id373959"></a><a class="indexterm" name="id373966"></a><table border="0" summary="Simple list" class="simplelist"><tr><td>UNIX login/ssh</td></tr><tr><td>Postfix (SMTP)</td></tr><tr><td>Courier-IMAP/IMAPS/POP3/POP3S</td></tr></table><p> - <a class="indexterm" name="id373991"></a> - <a class="indexterm" name="id373998"></a> - Companywide white pages can be searched using an LDAP client - such as the one in the Windows Address Book. - </p><p> - <a class="indexterm" name="id374009"></a> - <a class="indexterm" name="id374016"></a> - Having gained a solid understanding of LDAP and a relatively workable LDAP tree - thus far, it was time to configure Samba. I compiled the latest stable Samba and - also installed the latest <code class="literal">smbldap-tools</code> from - <a class="ulink" href="http://idealx.com" target="_top">Idealx</a>. - </p><p> - The Samba <code class="filename">smb.conf</code> file was configured as shown in <a class="link" href="nw4migration.html#ch8smbconf" title="Example 10.4. Samba Configuration File smb.conf Part A">“Samba Configuration File smb.conf Part A”</a>. - </p><div class="example"><a name="ch8smbconf"></a><p class="title"><b>Example 10.4. Samba Configuration File smb.conf Part A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id374082"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id374094"></a><em class="parameter"><code>netbios name = MASSIVE</code></em></td></tr><tr><td><a class="indexterm" name="id374105"></a><em class="parameter"><code>server string = Corp File Server</code></em></td></tr><tr><td><a class="indexterm" name="id374117"></a><em class="parameter"><code>passdb backend = ldapsam:ldap://localhost</code></em></td></tr><tr><td><a class="indexterm" name="id374128"></a><em class="parameter"><code>pam password change = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id374140"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id374152"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id374163"></a><em class="parameter"><code>log file = /data/samba/log/%m.log</code></em></td></tr><tr><td><a class="indexterm" name="id374175"></a><em class="parameter"><code>name resolve order = wins host bcast</code></em></td></tr><tr><td><a class="indexterm" name="id374186"></a><em class="parameter"><code>time server = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id374198"></a><em class="parameter"><code>printcap name = cups</code></em></td></tr><tr><td><a class="indexterm" name="id374209"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id374221"></a><em class="parameter"><code>cups options = Raw</code></em></td></tr><tr><td><a class="indexterm" name="id374232"></a><em class="parameter"><code>add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"</code></em></td></tr><tr><td><a class="indexterm" name="id374244"></a><em class="parameter"><code>add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id374256"></a><em class="parameter"><code>add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id374268"></a><em class="parameter"><code>delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"</code></em></td></tr><tr><td><a class="indexterm" name="id374280"></a><em class="parameter"><code>set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"</code></em></td></tr><tr><td><a class="indexterm" name="id374292"></a><em class="parameter"><code>add machine script = /usr/local/sbin/smbldap-useradd -w "%m"</code></em></td></tr><tr><td><a class="indexterm" name="id374304"></a><em class="parameter"><code>logon script = logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id374316"></a><em class="parameter"><code>logon path = \\%L\profiles\%U\%a</code></em></td></tr><tr><td><a class="indexterm" name="id374328"></a><em class="parameter"><code>logon drive = H:</code></em></td></tr><tr><td><a class="indexterm" name="id374339"></a><em class="parameter"><code>logon home = \\%L\%U</code></em></td></tr><tr><td><a class="indexterm" name="id374350"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id374362"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id374373"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id374385"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id374397"></a><em class="parameter"><code>ldap idmap suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id374408"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id374420"></a><em class="parameter"><code>ldap passwd sync = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id374431"></a><em class="parameter"><code>ldap suffix = ou=MEGANET2,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id374443"></a><em class="parameter"><code>ldap ssl = no</code></em></td></tr><tr><td><a class="indexterm" name="id374455"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id374466"></a><em class="parameter"><code>admin users = root, "@Domain Admins"</code></em></td></tr><tr><td><a class="indexterm" name="id374478"></a><em class="parameter"><code>printer admin = "@Domain Admins"</code></em></td></tr><tr><td><a class="indexterm" name="id374489"></a><em class="parameter"><code>force printername = Yes</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch8smbconf2"></a><p class="title"><b>Example 10.5. Samba Configuration File smb.conf Part B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id374528"></a><em class="parameter"><code>comment = Network logon service</code></em></td></tr><tr><td><a class="indexterm" name="id374540"></a><em class="parameter"><code>path = /data/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id374551"></a><em class="parameter"><code>write list = "@Domain Admins"</code></em></td></tr><tr><td><a class="indexterm" name="id374563"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id374583"></a><em class="parameter"><code>comment = Roaming Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id374595"></a><em class="parameter"><code>path = /data/samba/profiles/</code></em></td></tr><tr><td><a class="indexterm" name="id374607"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id374618"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id374630"></a><em class="parameter"><code>veto files = desktop.ini</code></em></td></tr><tr><td><a class="indexterm" name="id374641"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id374662"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id374673"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id374685"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id374696"></a><em class="parameter"><code>create mask = 0770</code></em></td></tr><tr><td><a class="indexterm" name="id374708"></a><em class="parameter"><code>veto files = desktop.ini</code></em></td></tr><tr><td><a class="indexterm" name="id374719"></a><em class="parameter"><code>hide files = desktop.ini</code></em></td></tr><tr><td><a class="indexterm" name="id374731"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[software]</code></em></td></tr><tr><td><a class="indexterm" name="id374751"></a><em class="parameter"><code>comment = Software for %a computers</code></em></td></tr><tr><td><a class="indexterm" name="id374763"></a><em class="parameter"><code>path = /data/samba/shares/software/%a</code></em></td></tr><tr><td><a class="indexterm" name="id374774"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[public]</code></em></td></tr><tr><td><a class="indexterm" name="id374795"></a><em class="parameter"><code>comment = Public Files</code></em></td></tr><tr><td><a class="indexterm" name="id374806"></a><em class="parameter"><code>path = /data/samba/shares/public</code></em></td></tr><tr><td><a class="indexterm" name="id374818"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id374829"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[PDF]</code></em></td></tr><tr><td><a class="indexterm" name="id374850"></a><em class="parameter"><code>comment = Location of documents printed to PDFCreator printer</code></em></td></tr><tr><td><a class="indexterm" name="id374862"></a><em class="parameter"><code>path = /data/samba/shares/pdf</code></em></td></tr><tr><td><a class="indexterm" name="id374873"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch8smbconf3"></a><p class="title"><b>Example 10.6. Samba Configuration File smb.conf Part C</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[EVERYTHING]</code></em></td></tr><tr><td><a class="indexterm" name="id374912"></a><em class="parameter"><code>comment = All shares</code></em></td></tr><tr><td><a class="indexterm" name="id374923"></a><em class="parameter"><code>path = /data/samba</code></em></td></tr><tr><td><a class="indexterm" name="id374934"></a><em class="parameter"><code>valid users = "@Domain Admins"</code></em></td></tr><tr><td><a class="indexterm" name="id374946"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[CDROM]</code></em></td></tr><tr><td><a class="indexterm" name="id374966"></a><em class="parameter"><code>comment = CD-ROM on MASSIVE</code></em></td></tr><tr><td><a class="indexterm" name="id374978"></a><em class="parameter"><code>path = /mnt</code></em></td></tr><tr><td><a class="indexterm" name="id374990"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id375010"></a><em class="parameter"><code>comment = Printer Drivers Share</code></em></td></tr><tr><td><a class="indexterm" name="id375022"></a><em class="parameter"><code>path = /data/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id375033"></a><em class="parameter"><code>write list = root</code></em></td></tr><tr><td><a class="indexterm" name="id375045"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id375065"></a><em class="parameter"><code>comment = All Printers</code></em></td></tr><tr><td><a class="indexterm" name="id375076"></a><em class="parameter"><code>path = /data/samba/spool</code></em></td></tr><tr><td><a class="indexterm" name="id375088"></a><em class="parameter"><code>create mask = 0644</code></em></td></tr><tr><td><a class="indexterm" name="id375100"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id375111"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[acct_hp8500]</code></em></td></tr><tr><td><a class="indexterm" name="id375131"></a><em class="parameter"><code>comment = "Accounting Color Laser Printer"</code></em></td></tr><tr><td><a class="indexterm" name="id375143"></a><em class="parameter"><code>path = /data/samba/spool/private</code></em></td></tr><tr><td><a class="indexterm" name="id375155"></a><em class="parameter"><code>valid users = @acct, @acct_admin, @hr, "@Domain Admins",@Receptionist, dwayne, terri, danae, jerry</code></em></td></tr><tr><td><a class="indexterm" name="id375167"></a><em class="parameter"><code>create mask = 0644</code></em></td></tr><tr><td><a class="indexterm" name="id375178"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id375190"></a><em class="parameter"><code>copy = printers</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[plotter]</code></em></td></tr><tr><td><a class="indexterm" name="id375210"></a><em class="parameter"><code>comment = Engineering Plotter</code></em></td></tr><tr><td><a class="indexterm" name="id375222"></a><em class="parameter"><code>path = /data/samba/spool</code></em></td></tr><tr><td><a class="indexterm" name="id375233"></a><em class="parameter"><code>create mask = 0644</code></em></td></tr><tr><td><a class="indexterm" name="id375245"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id375256"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id375268"></a><em class="parameter"><code>copy = printers</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch8smbconf4"></a><p class="title"><b>Example 10.7. Samba Configuration File smb.conf Part D</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[APPS]</code></em></td></tr><tr><td><a class="indexterm" name="id375307"></a><em class="parameter"><code>path = /data/samba/shares/Apps</code></em></td></tr><tr><td><a class="indexterm" name="id375318"></a><em class="parameter"><code>force group = "Domain Users"</code></em></td></tr><tr><td><a class="indexterm" name="id375330"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[ACCT]</code></em></td></tr><tr><td><a class="indexterm" name="id375350"></a><em class="parameter"><code>path = /data/samba/shares/Accounting</code></em></td></tr><tr><td><a class="indexterm" name="id375362"></a><em class="parameter"><code>valid users = @acct, "@Domain Admins"</code></em></td></tr><tr><td><a class="indexterm" name="id375373"></a><em class="parameter"><code>force group = acct</code></em></td></tr><tr><td><a class="indexterm" name="id375385"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id375396"></a><em class="parameter"><code>create mask = 0660</code></em></td></tr><tr><td><a class="indexterm" name="id375408"></a><em class="parameter"><code>directory mask = 0770</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[ACCT_ADMIN]</code></em></td></tr><tr><td><a class="indexterm" name="id375428"></a><em class="parameter"><code>path = /data/samba/shares/Acct_Admin</code></em></td></tr><tr><td><a class="indexterm" name="id375440"></a><em class="parameter"><code>valid users = @"acct_admin"</code></em></td></tr><tr><td><a class="indexterm" name="id375451"></a><em class="parameter"><code>force group = acct_admin</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[HR_PR]</code></em></td></tr><tr><td><a class="indexterm" name="id375472"></a><em class="parameter"><code>path = /data/samba/shares/HR_PR</code></em></td></tr><tr><td><a class="indexterm" name="id375484"></a><em class="parameter"><code>valid users = @hr, @acct_admin</code></em></td></tr><tr><td><a class="indexterm" name="id375495"></a><em class="parameter"><code>force group = hr</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[ENGR]</code></em></td></tr><tr><td><a class="indexterm" name="id375516"></a><em class="parameter"><code>path = /data/samba/shares/Engr</code></em></td></tr><tr><td><a class="indexterm" name="id375527"></a><em class="parameter"><code>valid users = @engr, @receptionist, @truss, "@Domain Admins", cheri</code></em></td></tr><tr><td><a class="indexterm" name="id375539"></a><em class="parameter"><code>force group = engr</code></em></td></tr><tr><td><a class="indexterm" name="id375550"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id375562"></a><em class="parameter"><code>create mask = 0770</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[DATA]</code></em></td></tr><tr><td><a class="indexterm" name="id375582"></a><em class="parameter"><code>path = /data/samba/shares/DATA</code></em></td></tr><tr><td><a class="indexterm" name="id375594"></a><em class="parameter"><code>valid users = @engr, @receptionist, @truss, "@Domain Admins", cheri</code></em></td></tr><tr><td><a class="indexterm" name="id375606"></a><em class="parameter"><code>force group = engr</code></em></td></tr><tr><td><a class="indexterm" name="id375617"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id375629"></a><em class="parameter"><code>create mask = 0770</code></em></td></tr><tr><td><a class="indexterm" name="id375640"></a><em class="parameter"><code>copy = engr</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch8smbconf5"></a><p class="title"><b>Example 10.8. Samba Configuration File smb.conf Part E</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[X]</code></em></td></tr><tr><td><a class="indexterm" name="id375679"></a><em class="parameter"><code>path = /data/samba/shares/X</code></em></td></tr><tr><td><a class="indexterm" name="id375690"></a><em class="parameter"><code>valid users = @engr, @acct</code></em></td></tr><tr><td><a class="indexterm" name="id375702"></a><em class="parameter"><code>force group = engr</code></em></td></tr><tr><td><a class="indexterm" name="id375713"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id375725"></a><em class="parameter"><code>create mask = 0770</code></em></td></tr><tr><td><a class="indexterm" name="id375736"></a><em class="parameter"><code>copy = engr</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[NETWORK]</code></em></td></tr><tr><td><a class="indexterm" name="id375757"></a><em class="parameter"><code>path = /data/samba/shares/network</code></em></td></tr><tr><td><a class="indexterm" name="id375768"></a><em class="parameter"><code>valid users = "@Domain Users"</code></em></td></tr><tr><td><a class="indexterm" name="id375780"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id375791"></a><em class="parameter"><code>create mask = 0770</code></em></td></tr><tr><td><a class="indexterm" name="id375803"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[UTILS]</code></em></td></tr><tr><td><a class="indexterm" name="id375823"></a><em class="parameter"><code>path = /data/samba/shares/Utils</code></em></td></tr><tr><td><a class="indexterm" name="id375835"></a><em class="parameter"><code>write list = "@Domain Admins"</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[SYS]</code></em></td></tr><tr><td><a class="indexterm" name="id375855"></a><em class="parameter"><code>path = /data/samba/shares/SYS</code></em></td></tr><tr><td><a class="indexterm" name="id375867"></a><em class="parameter"><code>valid users = chad</code></em></td></tr><tr><td><a class="indexterm" name="id375878"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id375890"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><p> - <a class="indexterm" name="id375905"></a> - <a class="indexterm" name="id375911"></a> - <a class="indexterm" name="id375918"></a> - Most of these shares are only used by one company group, but they are required - because of some ancient Qbasic and Rbase applications were that written expecting - their own drive letters. - </p><p> - <a class="indexterm" name="id375930"></a> - <a class="indexterm" name="id375937"></a> - <a class="indexterm" name="id375944"></a> - Note: During the process of building the new server, I kept data files - up to date with the Novell server via use of <code class="literal">rsync</code>. - On a separate system (my workstation in fact), which could be rebooted - whenever necessary, I set up a mount point to the Novell server via - <code class="literal">ncpmount</code>. I then created a - <code class="filename">rsyncd.conf</code> to share that mount point out to my - new server, and synchronized once an hour. The script I used to synchronize - is shown in <a class="link" href="nw4migration.html#sbersync" title="Example 10.9. Rsync Script">“Rsync Script”</a>. The files exclusion list I used - is shown in <a class="link" href="nw4migration.html#sbexcld" title="Example 10.10. Rsync Files Exclusion List /root/excludes.txt">“Rsync Files Exclusion List /root/excludes.txt”</a>. The reason I had to have the - <code class="literal">rsync</code> daemon running on a system that could be - rebooted frequently is because <code class="constant">ncpfs</code> - (part of the MARS NetWare Emulation package) has a nasty habit of creating stale - mount points that cannot be recovered without a reboot. The reason for hourly - synchronization is because some part of the chain was very slow and - performance-heavy (whether <code class="literal">rsync</code> itself, the network, - or the Novell server, I am not sure, but it was probably the Novell server). - </p><div class="example"><a name="sbersync"></a><p class="title"><b>Example 10.9. Rsync Script</b></p><div class="example-contents"><pre class="screen"> -#!/bin/bash -# Part 1 - rsync the Novell directories to the new server -echo "#############################################" -echo "New sync operation starting at `date`" -if ! pgrep -fl '^rsync\> ; then - echo "Good, no rsync is running!" - echo "Synchronizing oink to BHPRO" - rsync -av --exclude-from=/root/excludes.txt -baa.corp:/BHPRO/SYS1/ /data/samba/shares/SYS1 - retval=$? - [ ${retval} = 0 ] && echo "Sync operation completed at `date`" - echo "Fixing permissions" - # I had a whole lot more permission-fixing stuff here. It got - # pared down as groups got moved over. The problem - # was that the way I was mounting the directory, everything - # was owned by the Novell administrator which translated to - # Root. This is also why I could only do one-way sync because - # I could not fix the ACLs on the Novell side. - find /data/samba/shares/Engr/ -perm +770 -exec chmod 770 {} \; - find /data/samba/shares/Engr/ ! -group engr -exec chgrp engr {} \; -else - # This rsync took ages and ages -- I had it set to run every hour but - # I needed a way to prevent it running into itself. - echo "Oh no, rsync is already running!" -echo "#############################################" -fi -</pre></div></div><br class="example-break"><div class="example"><a name="sbexcld"></a><p class="title"><b>Example 10.10. Rsync Files Exclusion List <code class="filename">/root/excludes.txt</code></b></p><div class="example-contents"><pre class="screen"> -/Acct/ -/Apps/ -/DATA/ -/Engr/*.pc3 -/Engr/plotter -/Engr/APPOLO/ -/Engr/LIBRARY/ -/Home/Accounting/ -/Home/Angie/ -/Home/AngieY/ -/Home/Brandon/ -/Home/Carl/ -</pre></div></div><br class="example-break"><p> - After Samba was configured, I initialized the LDAP database. The first - thing I had to do was store the LDAP password in the Samba configuration by - issuing the command (as root): -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w verysecret -</pre><p> - where <span class="quote">“<span class="quote">verysecret</span>”</span> is replaced by the LDAP bind password. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> -The Idealx smbldap-tools package can be configured using a script called -<code class="literal">configure.pl</code> that is provided as part of the tool. See <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a> -for an example of its use. Many administrators, like Misty, choose to do this manually -so as to maintain greater awareness of how the tool-chain works and possibly to avoid -undesirable actions from occurring unnoticed. -</p></div><p> - Now Samba was ready for use and it was time to configure the smbldap-tools. There are two - relevant files, which are usually put into the directory - <code class="filename">/etc/smbldap-tools</code>. The main file, - <code class="filename">smbldap.conf</code> is shown in <a class="link" href="nw4migration.html#ch8ideal" title="Example 10.11. Idealx smbldap-tools Control File Part A">“Idealx smbldap-tools Control File Part A”</a>. - </p><div class="example"><a name="ch8ideal"></a><p class="title"><b>Example 10.11. Idealx smbldap-tools Control File Part A</b></p><div class="example-contents"><pre class="screen"> -######### -# -# located in /etc/smbldap-tools/smbldap.conf -# -###################################################################### -# -# General Configuration -# -###################################################################### - -# Put your own SID -# to obtain this number do: net getlocalsid -SID="S-1-5-21-725326080-1709766072-2910717368" - -###################################################################### -# -# LDAP Configuration -# -###################################################################### - -# Notes: to use to dual ldap servers backend for Samba, you must patch -# Samba with the dual-head patch from IDEALX. If not using this patch -# just use the same server for slaveLDAP and masterLDAP. -# Those two servers declarations can also be used when you have -# . one master LDAP server where all writing operations must be done -# . one slave LDAP server where all reading operations must be done -# (typically a replication directory) - -# Ex: slaveLDAP=127.0.0.1 -slaveLDAP="127.0.0.1" -slavePort="389" - -# Master LDAP : needed for write operations -# Ex: masterLDAP=127.0.0.1 -masterLDAP="127.0.0.1" -masterPort="389" - -# Use TLS for LDAP -# If set to 1, this option will use start_tls for connection -# (you should also used the port 389) -ldapTLS="0" - -# How to verify the server's certificate (none, optional or require) -# see "man Net::LDAP" in start_tls section for more details -verify="" -</pre></div></div><br class="example-break"><div class="example"><a name="ch8ideal2"></a><p class="title"><b>Example 10.12. Idealx smbldap-tools Control File Part B</b></p><div class="example-contents"><pre class="screen"> -# CA certificate -# see "man Net::LDAP" in start_tls section for more details -cafile="" - certificate to use to connect to the ldap server -# see "man Net::LDAP" in start_tls section for more details -clientcert="" - -# key certificate to use to connect to the ldap server -# see "man Net::LDAP" in start_tls section for more details -clientkey="" - -# LDAP Suffix -# Ex: suffix=dc=IDEALX,dc=ORG -suffix="ou=MEGANET2,dc=abmas,dc=biz" - -# Where are stored Users -# Ex: usersdn="ou=Users,dc=IDEALX,dc=ORG" -usersdn="ou=People,${suffix}" - -# Where are stored Computers -# Ex: computersdn="ou=Computers,dc=IDEALX,dc=ORG" -computersdn="ou=People,${suffix}" - -# Where are stored Groups -# Ex groupsdn="ou=Groups,dc=IDEALX,dc=ORG" -groupsdn="ou=Groups,${suffix}" - -# Where are stored Idmap entries -# (used if samba is a domain member server) -# Ex groupsdn="ou=Idmap,dc=IDEALX,dc=ORG" -idmapdn="ou=Idmap,${suffix}" - -# Where to store next uidNumber and gidNumber available -sambaUnixIdPooldn="sambaDomainName=MEGANET2,${suffix}" - -# Default scope Used -scope="sub" -</pre></div></div><br class="example-break"><div class="example"><a name="ch8ideal3"></a><p class="title"><b>Example 10.13. Idealx smbldap-tools Control File Part C</b></p><div class="example-contents"><pre class="screen"> -# Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA) -hash_encrypt="MD5" - -# if hash_encrypt is set to CRYPT, you may set a salt format. -# default is "%s", but many systems will generate MD5 hashed -# passwords if you use "$1$%.8s". This parameter is optional! -crypt_salt_format="%s" - -###################################################################### -# -# Unix Accounts Configuration -# -###################################################################### - -# Login defs -# Default Login Shell -# Ex: userLoginShell="/bin/bash" -userLoginShell="/bin/false" - -# Home directory -# Ex: userHome="/home/%U" -userHome="/home/%U" - -# Gecos -userGecos="Samba User" - -# Default User (POSIX and Samba) GID -defaultUserGid="513" - -# Default Computer (Samba) GID -defaultComputerGid="515" - -# Skel dir -skeletonDir="/etc/skel" - -# Default password validation time (time in days) Comment the next -# line if you don't want password to be enable for -# defaultMaxPasswordAge days (be careful to the sambaPwdMustChange -# attribute's value) -defaultMaxPasswordAge="45" -</pre></div></div><br class="example-break"><div class="example"><a name="ch8ideal4"></a><p class="title"><b>Example 10.14. Idealx smbldap-tools Control File Part D</b></p><div class="example-contents"><pre class="screen"> -###################################################################### -# -# SAMBA Configuration -# -###################################################################### - -# The UNC path to home drives location (%U username substitution) -# Ex: \\My-PDC-netbios-name\homes\%U -# Just set it to a null string if you want to use the smb.conf -# 'logon home' directive and/or disable roaming profiles -userSmbHome="" - -# The UNC path to profiles locations (%U username substitution) -# Ex: \\My-PDC-netbios-name\profiles\%U -# Just set it to a null string if you want to use the smb.conf -# 'logon path' directive and/or disable roaming profiles -userProfile="" - -# The default Home Drive Letter mapping -# (will be automatically mapped at logon time if home directory exist) -# Ex: H: for H: -userHomeDrive="" - -# The default user netlogon script name (%U username substitution) -# if not used, will be automatically username.cmd -# make sure script file is edited under DOS -# Ex: %U.cmd -# userScript="startup.cmd" # make sure script file is edited under DOS -userScript="" - -# Domain appended to the users "mail"-attribute -# when smbldap-useradd -M is used -mailDomain="abmas.org" - -###################################################################### -# -# SMBLDAP-TOOLS Configuration (default are ok for a RedHat) -# -###################################################################### -# Allows not to use smbpasswd -# (if with_smbpasswd == 0 in smbldap_conf.pm) but -# prefer Crypt::SmbHash library -with_smbpasswd="0" -smbpasswd="/usr/bin/smbpasswd" -</pre></div></div><br class="example-break"><p> - <a class="indexterm" name="id376262"></a> - Note: I chose not to take advantage of the TLS capability of this. - Eventually I may go back and tweak it. Also, I chose not to take advantage - of the master/slave configuration as I heard horror stories that it was - unstable. My slave servers are replicas only. - </p><p> - The <code class="filename">/etc/smbldap-tools/smbldap_bind.conf</code> file is shown here: -</p><pre class="screen"> -# smbldap_bind.conf -# -# This file simply tells smbldap-tools how to bind to your LDAP server. -# It has to be a DN with full write access to the Samba portion of -# the database. - -############################ -# Credential Configuration # -############################ -# Notes: you can specify two different configurations if you use a -# master ldap for writing access and a slave ldap server for reading access -# By default, we will use the same DN (so it will work for standard Samba -# release) -slaveDN="cn=Manager,dc=abmas,dc=biz" -slavePw="verysecret" -masterDN="cn=Manager,dc=abmas,dc=biz" -masterPw="verysecret" -</pre><p> - </p><p> - The next step was to run the <code class="literal">smbldap-populate</code> command, which populates - the LDAP tree with the appropriate default users, groups, and UID and GID pools. - It creates a user called Administrator with UID=0 and GID=0 matching the - Domain Admins group. This is fine because you can still log on as root to a Windows system, - but it will break cached credentials if you need to log on as the administrator - to a system that is not on the network. - </p><p> - After the LDAP database has been preloaded, it is prudent to validate that the - information needed is in the LDAP directory. This can be done done by restarting - the LDAP server, then performing an LDAP search by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> ldapsearch -W -x -b "dc=abmas,dc=biz"\ - -D "cn=Manager,dc=abmas,dc=biz" \ - "(Objectclass=*)" -Enter LDAP Password: -# extended LDIF -# -# LDAPv3 -# base <dc=abmas,dc=biz> with scope sub -# filter: (ObjectClass=*) -# requesting: ALL -# - -# abmas.biz -dn: dc=abmas,dc=biz -objectClass: dcObject -objectClass: organization -o: abmas -dc: abmas - -# People, abmas.biz -dn: ou=People,dc=abmas,dc=biz -objectClass: organizationalUnit -ou: People - -# Groups, abmas.biz -dn: ou=Groups,dc=abmas,dc=biz -objectClass: organizationalUnit -ou: Groups - -# Idmap, abmas.biz -dn: ou=Idmap,dc=abmas,dc=biz -objectClass: organizationalUnit -ou: Idmap -... -</pre><p> - </p><p> - <a class="indexterm" name="id376336"></a> - <a class="indexterm" name="id376343"></a> - <a class="indexterm" name="id376350"></a> - <a class="indexterm" name="id376357"></a> - <a class="indexterm" name="id376363"></a> - With the LDAP directory now initialized, it was time to create the Windows and POSIX - (UNIX) group accounts as well as the mappings from Windows groups to UNIX groups. - The easiest way to do this was to use <code class="literal">smbldap-groupadd</code> command. - It creates the group with the posixGroup and sambaGroupMapping attributes, a - unique GID, and an automatically determined RID. I learned the hard way not to - try to do this by hand. - </p><p> - <a class="indexterm" name="id376383"></a> - <a class="indexterm" name="id376389"></a> - <a class="indexterm" name="id376396"></a> - After I had my group mappings in place, I added users to the groups (the users - don't really have to exist yet). I used the <code class="literal">smbldap-groupmod</code> - command to accomplish this. It can also be done manually by adding memberUID - attributes to the group entries in LDAP. - </p><p> - <a class="indexterm" name="id376414"></a> - <a class="indexterm" name="id376421"></a> - <a class="indexterm" name="id376428"></a> - The most monumental task of all was adding the sambaSamAccount information to each - already existent posixAccount entry. I did it one at a time as I moved people onto - the new server, by issuing the command: -</p><pre class="screen"> -<code class="prompt">root# </code> smbldap-usermod -a -P username -</pre><p> - <a class="indexterm" name="id376448"></a> - <a class="indexterm" name="id376455"></a> - <a class="indexterm" name="id376462"></a> - I completed that step for every user after asking the person what his or her current - NetWare password was. The wiser way to have done it would probably have been to dump the - entire database to an LDIF file. This can be done by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat > somefile.ldif -</pre><p> - <a class="indexterm" name="id376483"></a> - <a class="indexterm" name="id376490"></a> - Then update the LDIF file created by using a Perl script to parse and add the - appropriate attributes and objectClasses to each entry, followed by re-importing - the entire database into the LDAP directory. - </p><p> - Rebuilding of the LDAP directory can be done as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> rcldap stop -<code class="prompt">root# </code> cd /data/ldap -<code class="prompt">root# </code> rm *bdb _* log* -<code class="prompt">root# </code> su - ldap -c "slapadd -l somefile.ldif" -<code class="prompt">root# </code> rcldap start -</pre><p> - This can be done at any time and for any reason, with no harm to the database. - </p><p> - I first added a test user, of course. The LDIF for this test user looks like - this, to give you an idea: -</p><pre class="screen"> -# Entry 1: cn=Test User,ou=people,ou=corp,dc=abmas,dc=biz -dn:cn=Test User,ou=people,ou=corp,dc=abmas,dc=biz -cn: Test User -gecos: Test User -gidNumber: 513 -givenName: Test -homeDirectory: /home/test.user -homePhone: 555 -l: Somewhere -l: ST -mail: test.user -o: Corp -objectClass: top -objectClass: inetOrgPerson -objectClass: posixAccount -objectClass: sambaSamAccount -postalCode: 12345 -sn: User -street: 10 Some St. -uid: test.user -uidNumber: 1074 -sambaLogonTime: 0 -sambaLogoffTime: 2147483647 -sambaKickoffTime: 2147483647 -sambaPwdCanChange: 0 -displayName: Samba User -sambaSID: S-1-5-21-725326080-1709766072-2910717368-3148 -sambaLMPassword: 9D29C287C58448F9AAD3B435B51404EE -sambaAcctFlags: [U] -sambaNTPassword: D062088E99C95E37D7702287BB35E770 -sambaPwdLastSet: 1102537694 -sambaPwdMustChange: 1106425694 -userPassword: {SSHA}UzFZ2VxRGdwUueLnTGtsTBtnsvMO1oj8 -loginShell: /bin/false -</pre><p> - </p><p> - Then I went over to a spare Windows NT machine and joined it to the MEGANET2 domain. - It worked, and the machine's account entry under ou=Computers looks like this: -</p><pre class="screen"> -dn:uid=w2kengrspare$,ou=Computers,ou=MEGANET2,dc=abmas,dc=biz -objectClass: top -objectClass: inetOrgPerson -objectClass: posixAccount -objectClass: sambaSamAccount -cn: w2kengrspare$ -sn: w2kengrspare$ -uid: w2kengrspare$ -uidNumber: 1104 -gidNumber: 515 -homeDirectory: /dev/null -loginShell: /bin/false -description: Computer -gecos: Computer -sambaSID: S-1-5-21-725326080-1709766072-2910717368-3208 -sambaPrimaryGroupSID: S-1-5-21-725326080-1709766072-2910717368-2031 -displayName: W2KENGRSPARE$ -sambaPwdCanChange: 1103149236 -sambaPwdMustChange: 2147483647 -sambaNTPassword: CA199C45CB6737035DB6D9D9F6CD1834 -sambaPwdLastSet: 1103149236 -sambaAcctFlags: [W ] -</pre><p> - </p><p> - <a class="indexterm" name="id376575"></a> - So now I could log on with a test user from the machine w2kengrspare. It was all well and - good, but that user was in no groups yet and so had pretty boring access. I fixed that - by writing the login script! To write the login script, I used - <a class="ulink" href="http://www.kixtart.org" target="_top">Kixtart</a> because it will work - with every architecture of Windows, has an active and helpful user base, and was both - easier to learn and more powerful than the standard netlogon scripts I have seen. - I also did not have to do a logon script per user or per group. - </p><p> - <a class="indexterm" name="id376595"></a> - I downloaded Kixtart and put the following files in my netlogon share: -</p><pre class="screen"> -KIX32.EXE -KX32.dll -KX95.dll <-- Not needed unless you are running Win9x clients. -kx16.dll <-- Probably not needed unless you are running DOS clients. -kxrpc.exe <-- Probably useless as it has to run on the server and can - only be run on NT. It's for Windows 95 to become group-aware. - We can get around the need. -</pre><p> - </p><p> - <a class="indexterm" name="id376618"></a> - I then wrote the <code class="filename">logon.kix</code> file that is shown in - <a class="link" href="nw4migration.html#ch8kix" title="Example 10.15. Kixtart Control File File: logon.kix">“Kixtart Control File File: logon.kix”</a>. I chose to keep it all in one file, but it - can be split up and linked via include directives. - </p><div class="example"><a name="ch8kix"></a><p class="title"><b>Example 10.15. Kixtart Control File File: logon.kix</b></p><div class="example-contents"><pre class="screen"> -; This script just calls the other scripts. - -; First we want to get things done for everyone. - -; Second, we do first-time login stuff. - -; Third, we go through the group-oriented scripts one at a time. - - -; We want to check for group membership here to avoid the overhead of running -; scripts which don't apply. -call "\\massive\netlogon\scripts\main.kix" -call "\\massive\netlogon\scripts\setup.kix" -IF INGROUP("MEGANET2\ACCT") - call "scripts\acct.kix" -ENDIF -IF INGROUP("MEGANET2\ENGR","MEGANET2\RECEPTIONIST") -call "\\massive\netlogon\scripts\engr.kix" -ENDIF -IF INGROUP("MEGANET2\FURN") - call "\\massive\netlogon\scripts\furn.kix" -ENDIF -IF INGROUP("MEGANET2\TRUSS") - call "\\massive\netlogon\scripts\truss.kix" -ENDIF -</pre></div></div><br class="example-break"><div class="example"><a name="ch8kix2"></a><p class="title"><b>Example 10.16. Kixtart Control File File: main.kix</b></p><div class="example-contents"><pre class="screen"> -break on - -; Choose whether to hide the login window or not -IF INGROUP("MEGANET2\Domain Admins") - USE Z: \\massive\everything - SETCONSOLE("show") -ELSE - ; Nobody cares about seeing the login script except admins - SETCONSOLE("hide") -ENDIF - -; Delete all previously connected shares -USE * /delete - -SETTITLE("Logging on @USERID to @LDOMAIN at @TIME") - -; Set the time on the workstation -$Timeserver = "\\massive" -Settime $TimeServer - -; Map the home directory -USE H: @HOMESHR ; connect to user's home share -IF @ERROR = 0 - - H: - CD @HOMEDIR ; change directory to user's home directory -ENDIF - -; Everyone gets the N drive -USE N: \\massive\network -</pre></div></div><br class="example-break"><div class="example"><a name="ch8kix3"></a><p class="title"><b>Example 10.17. Kixtart Control File File: setup.kix, Part A</b></p><div class="example-contents"><pre class="screen"> -; My setup.kix is where all of the redirection stuff happens. Note that with -; the use of registry keys, this only happens the first time they log in ,or if -; I delete the pertinent registry keys which triggers it to happen again: - -; Check to see if we have written the abmas sub-key before -$RETURNCODE = EXISTKEY("HKEY_CURRENT_USER\abmas") -IF NOT $RETURNCODE = 0 -; Add key for abmas-specific things on the first login - ADDKEY("HKEY_CURRENT_USER\abmas") - ; The following key gets deleted at the end of the first login - ADDKEY("HKEY_CURRENT_USER\abmas\FIRST_LOGIN") -ENDIF - -; People with laptops need My Documents to be in their profile. People with -; desktops can have My Documents redirected to their home directory to avoid -; long delays with logging out and out-of-sync files. - -; Check to see if this is the first login -- doesn't make sense to do this -; at the very first login - -$RETURNCODE = EXISTKEY("HKEY_CURRENT_USER\abmas\FIRST_LOGIN") -IF NOT $RETURNCODE = 0 - -; We don't want to do this stuff for people with laptops or people in the FURN -; group. (They store their profiles in a different server) - - IF NOT INGROUP("MASSIVE\Laptop","MASSIVE\FURN") - $RETURNCODE=EXISTKEY("HKEY_CURRENT_USER\abmas\profile_copied") - -; A crude way to tell what OS our profile is for and copy the "My Documents" -; to the redirected folder on the server. It works because the profiles -; are stored as \\server\profiles\user\architecture - IF NOT $RETURNCODE = 0 - IF EXIST("\\massive\profiles\@userID\WinXP") - copy "\\massive\profiles\@userID\WinXP\My Documents\*" -"\\massive\@userID\" - ENDIF - IF EXIST("\\massive\profiles\@userID\Win2K") - copy "\\massive\profiles\@userID\Win2K\My Documents\*" -"\\massive\@userID\" - ENDIF - IF EXIST("\\massive\profiles\@userID\WinNT") - copy "\\massive\profiles\@userID\WinNT\My Documents\*" -"\\massive\@userID\" - ENDIF -</pre></div></div><br class="example-break"><div class="example"><a name="ch8kix3b"></a><p class="title"><b>Example 10.18. Kixtart Control File File: setup.kix, Part B</b></p><div class="example-contents"><pre class="screen"> -; Now we will write the registry values to redirect the locations of "My -Documents" -; and other folders. - ADDKEY("HKEY_CURRENT_USER\abmas\profile_copied") - WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\ -Windows\CurrentVersion\Explorer\User -Shell Folders", "Personal","\\massive\@userID","REG_SZ") - WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\ -Windows\CurrentVersion\Explorer\User -Shell Folders", "My Pictures", "\\massive\@userID\My Pictures", "REG_SZ") - IF @PRODUCTTYPE="Windows 2000 Professional" or @PRODUCTTYPE="Windows XP -Professional" - WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\ -Windows\CurrentVersion\Explorer\User -Shell Folders", "My Videos", "\\massive\@userID\My Videos", "REG_SZ") - WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\ -Windows\CurrentVersion\Explorer\User -Shell Folders", "My Music", "\\massive\@userID\My Music", "REG_SZ") - WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\ -Windows\CurrentVersion\Explorer\User -Shell Folders", "My eBooks", "\\massive\@userID\My eBooks", "REG_SZ") - ENDIF - ENDIF - ENDIF - -; Now we will delete the FIRST_LOGIN sub-key that we made before. -; Note - to run this script again you will want to delete the HKCU\abmas -; sub-key, log out, and log back in. -$RETURNVALUE = EXISTKEY("HKEY_CURRENT_USER\abmas\FIRST_LOGIN") -IF $RETURNVALUE = 0 - DELKEY("HKEY_CURRENT_USER\abmas\FIRST_LOGIN") -ENDIF -</pre></div></div><br class="example-break"><div class="example"><a name="ch8kix4"></a><p class="title"><b>Example 10.19. Kixtart Control File File: acct.kix</b></p><div class="example-contents"><pre class="screen"> -; And here is one group-oriented script to show what can be -; done that way: acct.kix: - -IF INGROUP("MASSIVE\Acct_Admin","MASSIVE\HR") - USE I: \\MEGANET2\HR_PR -ENDIF - -; Set up printer -$RETURNVALUE = existkey("HKEY_CURRENT_USER\Printers\,,massive,acct_hp8500") -IF NOT $RETURNVALUE = 0 - ADDPRINTERCONNECTION("\\massive\acct_hp8500") - SETDEFAULTPRINTER("\\massive\acct_hp8500") -ENDIF -; Set up drive mappings - USE M: \\massive\ACCT - IF INGROUP("MEGANET2\ABRA") - USE T: \\trussrv\abra - ENDIF -</pre></div></div><br class="example-break"><p> - As you can see in the script, I redirected the My Documents to the user's home - share if he or she were not in the Laptop group. I also added printers on a - group-by-group basis, and if applicable I set the group printer. For this to - be effective, the print drivers must be installed on the Samba server in the - <code class="filename">[print$]</code> share. Ample documentation exists about how to - do that, so it is not covered here. - </p><p> - I call this script via the logon.bat script in the [netlogon] directory: -</p><pre class="screen"> -\\corpsrv\netlogon\kix32 \\corpsrv\netlogon\logon.kix /f -</pre><p> - I only had to fully qualify the paths for Windows 9x, as Windows NT and - greater automatically add [NETLOGON] to the path. - </p><p> - Also of note for Win9x is that the drive mappings and printer setup will not - work because they rely on RPC. You merely have to put the appropriate settings - into the <code class="filename">c:\autoexec.bat</code> file or map the drives manually. - One option is to check the OS as part of the Kixtart script, and if it - is Win9x and is the first login, copy a premade - <code class="filename">autoexec.bat</code> to the <code class="filename">C:</code> drive. I - have only three such machines, and one is going away in the very near future, - so it was easier to do it by hand. - </p><p> - <a class="indexterm" name="id376842"></a> - At this point I was able to add the users. This is the part that really falls - into upgrade. I moved the users over one group at a time, starting with the - people who used the least amount of resources on the network. With each group - that I moved, I first logged on as a standard user in that group and took - careful note of the environment, mainly the printers he or she used, the PATH, - and what network resources he or she had access to (most importantly, which ones - the user actually needed access to). - </p><p> - I then added the user's SambaSamAccount information as mentioned earlier, - and join the computer to the domain. The very first thing I had to do was to - copy the user's profile to the new server. This was very important, and I really - struggled with the most effective way to do it. Here is the method that worked - for every one of my users on Windows NT, 2000, and XP: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Log in as the user on the domain. This creates the local copy - of the user's profile and copies it to the server as he or she logs out. - </p></li><li class="step" title="Step 2"><p> - Reboot the computer and log in as the local machine administrator. - </p></li><li class="step" title="Step 3"><p> - Right-click My Computer, click Properties, and navigate to the - user profiles tab (varies per version of Windows). - </p></li><li class="step" title="Step 4"><p> - Select the user's local profile <code class="constant">(COMPUTERNAME\username)</code>, - and click the <code class="literal">Copy To</code> button. - </p></li><li class="step" title="Step 5"><p> - In the next dialog, copy it directly to the profiles share on the - Samba server (in my case \\PDCname\profiles\user\<architecture>. - You will have had to make a connection to the share as that - user (e.g., Windows Explorer type \\PDCname\profiles\username). - </p></li><li class="step" title="Step 6"><p> - When the copy is complete (it can take a while) log out, and log back in - as the user. All of his or her settings and all contents of My Documents, - Favorites, and the registry should have been copied successfully. - </p></li><li class="step" title="Step 7"><p> - If it doesn't look right (the dead giveaway is the desktop background), - shut down the computer without logging out (power cycle) and try logging - in as the user again. If it still doesn't work, repeat the steps above. - I only had to ever repeat it once. - </p></li></ol></div><p> - Words to the Wise: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - If the user was anything other than a standard user on his or her system - before, you will save yourself some headaches by giving him or her identical - permissions (on the local machine) as his or her domain account <span class="emphasis"><em>before</em></span> - copying the profile over. Do this through the User Administrator - in the Control Panel, after joining the computer to the domain and - before logging on as that user for the first time. Otherwise the user will - have trouble with permissions on his or her registry keys. - </p></li><li class="listitem"><p> - If any application was installed for the user only, rather than for - the entire system, it will probably not work without being reinstalled. - </p></li></ul></div><p> - After all these steps are accomplished, only cleanup details are left. Make sure user's - shortcuts and Network Places point to the appropriate place on the new server, check - the important applications to be sure they work as expected and troubleshoot any problems - that might arise, and check to be sure the user's printers are present and working. By the - way, if there are any network printers installed as system printers (the Novell way), - you will need to log in as a local administrator and delete them. - </p><p> - For my non-laptop systems, I would then log in and out a couple times as the user - to be sure that his or her registry settings were modified, and then I was finished. - </p><p> - Some compatibility issues that cropped up included the following: - </p><p> - Blackberry client: It did not like having its registry settings moved around - and so had to be reinstalled. Also, it needed write permissions to a portion of - the hard drive, and I had to give it those manually on the one system where - this was an issue. - </p><p> - CAMedia: Digital camera software for Canon cameras caused all kinds of trouble - with the registry. I had to use the Run as service to open the registry of - the local user while logged in as the domain user, and give the domain user - the appropriate permissions to some registry keys, then export that portion - of the registry to a file. Then, as the domain user, I had to import that file - into the registry. - </p><p> - Crystal Reports version 7: More registry problems that were solved by recopying - the user's profile. - </p><p> - Printing from legacy applications: I found out that Novell sends its jobs to - the printer in a raw format. CUPS sends them in PostScript by default. I had - to make a second printer definition for one printer and tell CUPS specifically - to send raw data to the printer, then assign this printer to the LPT port with - Kixtart's version of the net use command. - </p><p> - These were all eventually solved by elbow grease, queries to the Samba mailing - list and others, and diligence. The complete migration took about 5 weeks. - My userbase is relatively small but includes multiple versions of Windows, - multiple Linux member servers, a mechanized saw, a pen plotter, and legacy - applications written in Qbasic and R:Base, just to name a few. I actually - ended up making some of these applications work better (or work again, as - some of them had stopped functioning on the old server) because as part of - the process I had to find out how things were supposed to work. - </p><p> - The one thing I have not been able to get working is a very old database that - we had around for reference purposes; it uses Novell's Btrieve engine. - </p><p> - As the resources compare, I went from 95 percent disk usage to just around 10 percent. - I went from a very high load on the server to an average load of between one - and two runnable processes on the server. I have improved the security and - robustness of the system. I have also implemented - <a class="ulink" href="http://www.clamav.net" target="_top">ClamAV</a> antivirus software, - which scans the entire Samba server for viruses every 2 hours and - quarantines them. I have found it much less problematic than our ancient - version of Norton Antivirus Corporate Edition, and much more up-to-date. - </p><p> - In short, my users are much happier now that the new server is running, and that - is what is important to me. - </p></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ntmigration.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="DMSMig.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="RefSection.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 9. Migrating NT4 Domain to Samba-3 </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Part III. Reference Section</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/pr01.html b/docs/htmldocs/Samba3-ByExample/pr01.html deleted file mode 100644 index 27159dcff7..0000000000 --- a/docs/htmldocs/Samba3-ByExample/pr01.html +++ /dev/null @@ -1,31 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>About the Cover Artwork</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="index.html" title="Samba-3 by Example"><link rel="next" href="pr02.html" title="Acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">About the Cover Artwork</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="index.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="pr02.html">Next</a></td></tr></table><hr></div><div lang="en-US" class="preface" title="About the Cover Artwork"><div class="titlepage"><div><div><h2 class="title"><a name="id281291"></a>About the Cover Artwork</h2></div></div></div><p> - The cover artwork of this book continues the freedom theme of the first - edition of <span class="quote">“<span class="quote">Samba-3 by Example</span>”</span>. The history of civilization - demonstrates the fragile nature of freedom. It can be lost in a moment, - and once lost, the cost of recovering liberty can be incredible. The last - edition cover featured Alfred the Great who liberated England from the - constant assault of Vikings and Norsemen. Events in England that - finally liberated the common people came about in small steps, but - the result should not be under-estimated. Today, as always, freedom and - liberty are seldom appreciated until they are lost. If we can not quantify - what is the value of freedom, we shall be little motivated to protect it. - </p><p> - <span class="emphasis"><em>Samba-3 by Example Cover Artwork:</em></span> The British houses - of parliament are a symbol of the Westminster system of government. This form - of government permits the people to govern themselves at the lowest level, yet - it provides for courts of appeal that are designed to protect freedom and to - hold back all forces of tyranny. The clock is a pertinent symbol of the - importance of time and place. - </p><p> - The information technology industry is being challenged by the imposition of - new laws, hostile litigation, and the imposition of significant constraint - of practice that threatens to remove the freedom to develop and deploy open - source software solutions. Samba is a software solution that epitomizes freedom - of choice in network interoperability for Microsoft Windows clients. - </p><p> - I hope you will take the time needed to deploy it well, and that you may realize - the greatest benefits that may be obtained. You are free to use it in ways never - considered, but in doing so there may be some obstacles. Every obstacle that is - overcome adds to the freedom you can enjoy. Use Samba well, and it will serve - you well. - </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="index.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="pr02.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Samba-3 by Example </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Acknowledgments</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/pr02.html b/docs/htmldocs/Samba3-ByExample/pr02.html deleted file mode 100644 index 0d18b42872..0000000000 --- a/docs/htmldocs/Samba3-ByExample/pr02.html +++ /dev/null @@ -1,35 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Acknowledgments</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="pr01.html" title="About the Cover Artwork"><link rel="next" href="pr03.html" title="Foreword"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr01.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="pr03.html">Next</a></td></tr></table><hr></div><div lang="en-US" class="preface" title="Acknowledgments"><div class="titlepage"><div><div><h2 class="title"><a name="id281791"></a>Acknowledgments</h2></div></div></div><p> - <span class="emphasis"><em>Samba-3 by Example</em></span> would not have been written except - as a result of feedback provided by reviewers and readers of the book <span class="emphasis"><em>The - Official Samba-3 HOWTO and Reference Guide.</em></span> This second edition - was made possible by generous feedback from Samba users. I hope this book - more than answers the challenge and needs of many more networks that are - languishing for a better networking solution. - </p><p> - I am deeply indebted to a large group of diligent people. Space prevents - me from listing all of them, but a few stand out as worthy of mention. - Jelmer Vernooij made the notable contribution of building the XML production - environment and thereby made possible the typesetting of this book. - </p><p> - Samba would not have come into existence if Andrew Tridgell had not taken - the first steps. He continues to lead the project. Under the shadow of his - mantle are some great folks who never give up and are always ready to help. - Thank you to: Jeremy Allison, Jerry Carter, Andrew Bartlett, Jelmer Vernooij, - Alexander Bokovoy, Volker Lendecke, and other team members who answered my - continuous stream of questions all of which resulted in improved content - in this book. - </p><p> - My heartfelt thanks go out also to a small set of reviewers (alphabetically - listed) who gave substantial feedback and significant suggestions for improvement: - Tony Earnshaw, William Enestvedt, Eric Hines, Roland Gruber, Gavin Henry, - Steven Henry, Luke Howard, Tarjei Huse, Jon Johnston, Alan Munter, Mike MacIsaac, - Scott Mann, Ed Riddle, Geoff Scott, Santos Soler, Misty Stanley-Jones, Mark Taylor, - and Jérôme Tournier. - </p><p> - My appreciation is extended to a team of more than 30 additional reviewers who - helped me to find my way around dark corners. - </p><p> - Particular mention is due to Lyndell, Amos, and Melissa who gave me the - latitude necessary to spend nearly an entire year writing Samba documentation, - and then gave more so this second edition could be created. - </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr01.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="pr03.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">About the Cover Artwork </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Foreword</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/pr03.html b/docs/htmldocs/Samba3-ByExample/pr03.html deleted file mode 100644 index de641604e3..0000000000 --- a/docs/htmldocs/Samba3-ByExample/pr03.html +++ /dev/null @@ -1,55 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Foreword</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="pr02.html" title="Acknowledgments"><link rel="next" href="preface.html" title="Preface"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Foreword</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr02.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="preface.html">Next</a></td></tr></table><hr></div><div lang="en-US" class="preface" title="Foreword"><div class="titlepage"><div><div><h2 class="title"><a name="id280651"></a>Foreword</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="pr03.html#id280658">By John M. Weathersby, Executive Director, OSSI</a></span></dt></dl></div><div class="sect1" title="By John M. Weathersby, Executive Director, OSSI"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id280658"></a>By John M. Weathersby, Executive Director, OSSI</h2></div></div></div><div class="blockquote"><blockquote class="blockquote"><p> -The Open Source Software Institute (OSSI) is comprised of representatives from a broad spectrum of business and -non-business organizations that share a common interest in the promotion of development and implementation -of open source software solutions globally, and in particular within the United States of America. -</p><p> -The OSSI has global affiliations with like-minded organizations. Our affiliate in the United Kingdom is the -Open Source Consortium (OSC). Both the OSSI and the OSC share a common objective to expand the use of open source -software in federal, state, and municipal government agencies; and in academic institutions. We represent -businesses that provide professional support services that answer the needs of our target organizational -information technology consumers in an effective and cost-efficient manner. -</p><p> -Open source software has matured greatly over the past five years with the result that an increasing number of -people who hold key decisionmaking positions want to know how the business model works. They -want to understand how problems get resolved, how questions get answered, and how the development model -is sustained. Information and communications technology directors in defense organizations, and in other -government agencies that deal with sensitive information, want to become familiar with development road-maps -and, in particular, seek to evaluate the track record of the mainstream open source project teams. -</p><p> -Wherever the OSSI gains entrance to new opportunities we find that Microsoft Windows technologies are the -benchmark against which open source software solutions are measured. Two open source software projects -are key to our ability to present a structured and convincing proposition that there are alternatives -to the incumbent proprietary means of meeting information technology needs. They are the Apache Web Server -and Samba. -</p><p> -Just as the Apache Web Server is the standard in web serving technology, Samba is the definitive standard -for providing interoperability with UNIX systems and other non-Microsoft operating system platforms. Both -open source applications have a truly remarkable track record that extends for more than a decade. Both have -demonstrated the unique capacity to innovate and maintain a level of development that has not only kept -pace with demands, but, in many areas, each project has also proven to be an industry leader. -</p><p> -One of the areas in which the Samba project has demonstrated key leadership is in documentation. The OSSI -was delighted when we saw the Samba Team, and John H. Terpstra in particular, release two amazingly -well-written books to help Samba software users deploy, maintain, and troubleshoot Windows networking -installations. We were concerned that, given the large volume of documentation, the challenge to maintain -it and keep it current might prove difficult. -</p><p> -This second edition of the book, <span class="emphasis"><em>Samba-3 by Example</em></span>, barely one year following the release -of the first edition, has removed all concerns and is proof that open source solutions are a compelling choice. -The first edition was released shortly following the release of Samba version 3.0 itself, and has become -the authoritative instrument for training and for guiding deployment. -</p><p> -I am personally aware of how much effort has gone into this second edition. John Terpstra has worked with -government bodies and with large organizations that have deployed Samba-3 since it was released. He also -worked to ensure that this book gained community following. He asked those who have worked at the coalface -of large and small organizations alike, to contribute their experiences. He has captured that in this book -and has succeeded yet again. His recipe is persistence, intuition, and a high level of respect for the people -who use Samba. -</p><p> -This book is the first source you should turn to before you deploy Samba and as you are mastering its -deployment. I am proud and excited to be associated in a small way with such a useful tool. This book has -reached maturity that is demonstrated by reiteration that every step in deployment must be validated. -This book makes it easy to succeed, and difficult to fail, to gain a stable network environment. -</p><p> -I recommend this book for use by all IT managers and network administrators. -</p></blockquote></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr02.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="preface.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Acknowledgments </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Preface</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/preface.html b/docs/htmldocs/Samba3-ByExample/preface.html deleted file mode 100644 index d2d301de68..0000000000 --- a/docs/htmldocs/Samba3-ByExample/preface.html +++ /dev/null @@ -1,386 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Preface</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="index.html" title="Samba-3 by Example"><link rel="prev" href="pr03.html" title="Foreword"><link rel="next" href="ExNetworks.html" title="Part I. Example Network Configurations"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Preface</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr03.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="ExNetworks.html">Next</a></td></tr></table><hr></div><div class="preface" title="Preface"><div class="titlepage"><div><div><h2 class="title"><a name="preface"></a>Preface</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="preface.html#id280788">Why Is This Book Necessary?</a></span></dt><dd><dl><dt><span class="sect2"><a href="preface.html#id280825">Samba 3.0.20 Update Edition</a></span></dt></dl></dd><dt><span class="sect1"><a href="preface.html#id280643">Prerequisites</a></span></dt><dt><span class="sect1"><a href="preface.html#id322292">Approach</a></span></dt><dt><span class="sect1"><a href="preface.html#id322341">Summary of Topics</a></span></dt><dt><span class="sect1"><a href="preface.html#id322920">Conventions Used</a></span></dt></dl></div><p> - Network administrators live busy lives. We face distractions and pressures - that drive us to seek proven, working case scenarios that can be easily - implemented. Often this approach lands us in trouble. There is a - saying that, geometrically speaking, the shortest distance between two - points is a straight line, but practically we find that the quickest - route to a stable network solution is the long way around. - </p><p> - This book is your means to the straight path. It provides step-by-step, - proven, working examples of Samba deployments. If you want to deploy - Samba-3 with the least effort, or if you want to become an expert at deploying - Samba-3 without having to search through lots of documentation, this - book is the ticket to your destination. - </p><p> - Samba is software that can be run on a platform other than Microsoft Windows, - for example, UNIX, Linux, IBM System 390, OpenVMS, and other operating systems. - Samba uses the TCP/IP protocol that is installed on the host server. When - correctly configured, it allows that host to interact with a Microsoft Windows - client or server as if it is a Windows file and print server. This book - will help you to implement Windows-compatible file and print services. - </p><p> - The examples presented in this book are typical of various businesses and - reflect the problems and challenges they face. Care has been taken to preserve - attitudes, perceptions, practices, and demands from real network case studies. - The maximum benefit may be obtained from this book by working carefully through - each exercise. You may be in a hurry to satisfy a specific need, so feel - free to locate the example that most closely matches your need, copy it, and - innovate as much as you like. Above all, enjoy the process of learning the - secrets of MS Windows networking that is truly liberated by Samba. - </p><p> - The focus of attention in this book is Samba-3. Specific notes are made in - respect of how Samba may be made secure. This book does not attempt to provide - detailed information regarding secure operation and configuration of peripheral - services and applications such as OpenLDAP, DNS and DHCP, the need for which - can be met from other resources that are dedicated to the subject. - </p><div class="sect1" title="Why Is This Book Necessary?"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id280788"></a>Why Is This Book Necessary?</h2></div></div></div><p> - This book is the result of observations and feedback. The feedback from - the Samba-HOWTO-Collection has been positive and complimentary. There - have been requests for far more worked examples, a - <span class="quote">“<span class="quote">Samba Cookbook,</span>”</span> and for training materials to - help kick-start the process of mastering Samba. - </p><p> - The Samba mailing lists users have asked for sample configuration files - that work. It is natural to question one's own ability to correctly - configure a complex tool such as Samba until a minimum necessary - knowledge level has been attained. - </p><p> - The Samba-HOWTO-Collection as does <span class="emphasis"><em>The Official Samba-3 HOWTO and - Reference Guide</em></span> documents Samba features and functionality in - a topical context. This book takes a completely different approach. It - walks through Samba network configurations that are working within particular - environmental contexts, providing documented step-by-step implementations. - All example case configuration files, scripts, and other tools are provided - on the CD-ROM. This book is descriptive, provides detailed diagrams, and - makes deployment of Samba-3 a breeze. - </p><div class="sect2" title="Samba 3.0.20 Update Edition"><div class="titlepage"><div><div><h3 class="title"><a name="id280825"></a>Samba 3.0.20 Update Edition</h3></div></div></div><p> - The Samba 3.0.x series has been remarkably popular. At the time this book first - went to print samba-3.0.2 was being released. There have been significant modifications - and enhancements between samba-3.0.2 and samba-3.0.14 (the current release) that - necessitate this documentation update. This update has the specific intent to - refocus this book so that its guidance can be followed for samba-3.0.20 - and beyond. Further changes are expected as Samba-3 matures further and will - be reflected in future updates. - </p><p> - The changes shown in <a class="link" href="preface.html#pref-new" title="Table 1. Samba Changes 3.0.2 to 3.0.20">“Samba Changes 3.0.2 to 3.0.20”</a> are incorporated in this update. - </p><div class="table"><a name="pref-new"></a><p class="title"><b>Table 1. Samba Changes 3.0.2 to 3.0.20</b></p><div class="table-contents"><table summary="Samba Changes 3.0.2 to 3.0.20" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left"> - <p> - New Feature - </p> - </th><th align="left"> - <p> - Description - </p> - </th></tr></thead><tbody><tr><td align="left"> - <p> - Winbind Case Handling - </p> - </td><td align="justify"> - <p> - User and group names returned by <code class="literal">winbindd</code> are now converted to lower case - for better consistency. Samba implementations that depend on the case of information returned - by winbind (such as %u and %U) must now convert the dependency to expecting lower case values. - This affects mail spool files, home directories, valid user lines in the <code class="filename">smb.conf</code> file, etc. - </p> - </td></tr><tr><td align="left"> - <p> - Schema Changes - </p> - </td><td align="justify"> - <p> - Addition of code to handle password aging, password uniqueness controls, bad - password instances at logon time, have made necessary extensions to the SambaSAM - schema. This change affects all sites that use LDAP and means that the directory - schema must be updated. - </p> - </td></tr><tr><td align="left"> - <p> - Username Map Handling - </p> - </td><td align="justify"> - <p> - Samba-3.0.8 redefined the behavior: Local authentication results in a username map file - lookup before authenticating the connection. All authentication via an external domain - controller will result in the use of the fully qualified name (i.e.: DOMAIN\username) - after the user has been successfully authenticated. - </p> - </td></tr><tr><td align="left"> - <p> - UNIX Extension Handling - </p> - </td><td align="justify"> - <p> - Symbolically linked files and directories on the UNIX host to absolute paths will - now be followed. This can be turned off using <span class="quote">“<span class="quote">wide links = No</span>”</span> in - the share stanza in the <code class="filename">smb.conf</code> file. Turning off <span class="quote">“<span class="quote">wide links</span>”</span> - support will degrade server performance because each path must be checked. - </p> - </td></tr><tr><td align="left"> - <p> - Privileges Support - </p> - </td><td align="justify"> - <p> - Versions of Samba prior to samba-3.0.11 required the use of the UNIX <code class="constant">root</code> - account from network Windows clients. The new <span class="quote">“<span class="quote">enable privileges = Yes</span>”</span> capability - means that functions such as adding machines to the domain, managing printers, etc. can now - be delegated to normal user accounts or to groups of users. - </p> - </td></tr></tbody></table></div></div><br class="table-break"></div></div><div class="sect1" title="Prerequisites"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id280643"></a>Prerequisites</h2></div></div></div><p> - This book is not a tutorial on UNIX or Linux administration. UNIX and Linux - training is best obtained from books dedicated to the subject. This book - assumes that you have at least the basic skill necessary to use these operating - systems, and that you can use a basic system editor to edit and configure files. - It has been written with the assumption that you have experience with Samba, - have read <span class="emphasis"><em>The Official Samba-3 HOWTO and Reference Guide</em></span> and - the Samba-HOWTO-Collection, or that you have familiarity with Microsoft Windows. - </p><p> - If you do not have this experience, you can follow the examples in this book but may - find yourself at times intimidated by assumptions made. In this situation, you - may need to refer to administrative guides or manuals for your operating system - platform to find what is the best method to achieve what the text of this book describes. - </p></div><div class="sect1" title="Approach"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id322292"></a>Approach</h2></div></div></div><p> - The first chapter deals with some rather thorny network analysis issues. Do not be - put off by this. The information you glean, even without a detailed understanding - of network protocol analysis, can help you understand how Windows networking functions. - </p><p> - Each following chapter of this book opens with the description of a networking solution - sought by a hypothetical site. Bob Jordan is a hypothetical decision maker - for an imaginary company, <code class="constant">Abmas Biz NL</code>. We will use the - non-existent domain name <code class="constant">abmas.biz</code>. All <span class="emphasis"><em>facts</em></span> - presented regarding this company are fictitious and have been drawn from a variety of real - business scenarios over many years. Not one of these reveal the identify of the - real-world company from which the scenario originated. - </p><p> - In any case, Mr. Jordan likes to give all his staff nasty little assignments. - Stanley Saroka is one of his proteges; Christine Roberson is the network administrator - Bob trusts. Jordan is inclined to treat other departments well because they finance - Abmas IT operations. - </p><p> - Each chapter presents a summary of the network solution we have chosen to - demonstrate together with a rationale to help you to understand the - thought process that drove that solution. The chapter then documents in precise - detail all configuration files and steps that must be taken to implement the - example solution. Anyone wishing to gain serious value from this book will - do well to take note of the implications of points made, so watch out for the - <span class="emphasis"><em>this means that</em></span> notations. - </p><p> - Each chapter has a set of questions and answers to help you to - to understand and digest key attributes of the solutions presented. - </p></div><div class="sect1" title="Summary of Topics"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id322341"></a>Summary of Topics</h2></div></div></div><p> - The contents of this second edition of <span class="emphasis"><em>Samba-3 by Example</em></span> - have been rearranged based on feedback from purchasers of the first edition. - </p><p> - Clearly the first edition contained most of what was needed and that was missing - from other books that cover this difficult subject. The new arrangement adds - additional material to meet consumer requests and includes changes that originated - as suggestions for improvement. - </p><p> - Chapter 1 now dives directly into the heart of the implementation of Windows - file and print server networks that use Samba at the heart. - </p><div class="variablelist"><dl><dt><span class="term">Chapter 1 No Frills Samba Servers.</span></dt><dd><p> - Here you design a solution for three different business scenarios, each for a - company called Abmas. There are two simple networking problems and one slightly - more complex networking challenge. In the first two cases, Abmas has a small - simple office, and they want to replace a Windows 9x peer-to-peer network. The - third example business uses Windows 2000 Professional. This must be simple, - so let's see how far we can get. If successful, Abmas grows quickly and - soon needs to replace all servers and workstations. - </p><p><span class="emphasis"><em>TechInfo</em></span> This chapter demands: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Case 1: The simplest <code class="filename">smb.conf</code> file that may - reasonably be used. Works with Samba-2.x also. This - configuration uses Share Mode security. Encrypted - passwords are not used, so there is no - <code class="filename">smbpasswd</code> file. - </p></li><li class="listitem"><p>Case 2: Another simple <code class="filename">smb.conf</code> file that adds - WINS support and printing support. This case deals with - a special requirement that demonstrates how to deal with - purpose-built software that has a particular requirement - for certain share names and printing demands. This - configuration uses Share Mode security and also works with - Samba-2.x. Encrypted passwords are not used, so there is no - <code class="filename">smbpasswd</code> file. - </p></li><li class="listitem"><p>Case 3: This <code class="filename">smb.conf</code> configuration uses User Mode - security. The file share configuration demonstrates - the ability to provide master access to an administrator - while restricting all staff to their own work areas. - Encrypted passwords are used, so there is an implicit - <code class="filename">smbpasswd</code> file. - </p></li></ul></div><p> - </p></dd><dt><span class="term">Chapter 2 Small Office Networking.</span></dt><dd><p> - Abmas is a successful company now. They have 50 network users - and want a little more varoom from the network. This is a typical - small office and they want better systems to help them to grow. This is - your chance to really give advanced users a bit more functionality and usefulness. - </p><p><span class="emphasis"><em>TechInfo</em></span> This <code class="filename">smb.conf</code> file - makes use of encrypted passwords, so there is an <code class="filename">smbpasswd</code> - file. It also demonstrates use of the <em class="parameter"><code>valid users</code></em> and - <em class="parameter"><code>valid groups</code></em> to restrict share access. The Windows - clients access the server as Domain members. Mobile users log onto - the Domain while in the office, but use a local machine account while on the - road. The result is an environment that answers mobile computing user needs. - </p></dd><dt><span class="term">Chapter 3 Secure Office Networking.</span></dt><dd><p> - Abmas is growing rapidly now. Money is a little tight, but with 130 - network users, security has become a concern. They have many new machines - to install and the old equipment will be retired. This time they want the - new network to scale and grow for at least two years. Start with a sufficient - system and allow room for growth. You are now implementing an Internet - connection and have a few reservations about user expectations. - </p><p><span class="emphasis"><em>TechInfo</em></span> This <code class="filename">smb.conf</code> file - makes use of encrypted passwords, and you can use a <code class="filename">tdbsam</code> - password backend. Domain logons are introduced. Applications are served from the central - server. Roaming profiles are mandated. Access to the server is tightened up - so that only domain members can access server resources. Mobile computing - needs still are catered to. - </p></dd><dt><span class="term">Chapter 4 The 500 User Office.</span></dt><dd><p> - The two-year projections were met. Congratulations, you are a star. - Now Abmas needs to replace the network. Into the existing user base, they - need to merge a 280-user company they just acquired. It is time to build a serious - network. There are now three buildings on one campus and your assignment is - to keep everyone working while a new network is rolled out. Oh, isn't it nice - to roll out brand new clients and servers! Money is no longer tight, you get - to buy and install what you ask for. You will install routers and a firewall. - This is exciting! - </p><p><span class="emphasis"><em>TechInfo</em></span> This <code class="filename">smb.conf</code> file - makes use of encrypted passwords, and a <code class="filename">tdbsam</code> - password backend is used. You are not ready to launch into LDAP yet, so you - accept the limitation of having one central Domain Controller with a Domain - Member server in two buildings on your campus. A number of clever techniques - are used to demonstrate some of the smart options built into Samba. - </p></dd><dt><span class="term">Chapter 5 Making Happy Users.</span></dt><dd><p> - Congratulations again. Abmas is happy with your services and you have been given another raise. - Your users are becoming much more capable and are complaining about little - things that need to be fixed. Are you up to the task? Mary says it takes her 20 minutes - to log onto the network and it is killing her productivity. Email is a bit <span class="emphasis"><em> - unreliable</em></span> have you been sleeping on the job? We do not discuss the - technology of email but when the use of mail clients breaks because of networking - problems, you had better get on top of it. It's time for a change. - </p><p><span class="emphasis"><em>TechInfo</em></span> This <code class="filename">smb.conf</code> file - makes use of encrypted passwords; a distributed <code class="filename">ldapsam</code> - password backend is used. Roaming profiles are enabled. Desktop profile controls - are introduced. Check out the techniques that can improve the user experience - of network performance. As a special bonus, this chapter documents how to configure - smart downloading of printer drivers for drag-and-drop printing support. And, yes, - the secret of configuring CUPS is clearly documented. Go for it; this one will - tease you, too. - </p></dd><dt><span class="term">Chapter 6 A Distributed 2000 User Network.</span></dt><dd><p> - Only eight months have passed, and Abmas has acquired another company. You now need to expand - the network further. You have to deal with a network that spans several countries. - There are three new networks in addition to the original three buildings at the head-office - campus. The head office is in New York and you have branch offices in Washington, Los Angeles, and - London. Your desktop standard is Windows XP Professional. In many ways, everything has changed - and yet it must remain the same. Your team is primed for another roll-out. You know there are - further challenges ahead. - </p><p><span class="emphasis"><em>TechInfo</em></span> Slave LDAP servers are introduced. Samba is - configured to use multiple LDAP backends. This is a brief chapter; it assumes that the - technology has been mastered and gets right down to concepts and how to deploy them. - </p></dd><dt><span class="term">Chapter 7 Adding UNIX/Linux Servers and Clients.</span></dt><dd><p> - Well done, Bob, your team has achieved much. Now help Abmas integrate the entire network. - You want central control and central support and you need to cut costs. How can you reduce administrative - overheads and yet get better control of the network? - </p><p> - This chapter has been contributed by Mark Taylor <code class="email"><<a class="email" href="mailto:mark.taylor@siriusit.co.uk">mark.taylor@siriusit.co.uk</a>></code> - and is based on a live site. For further information regarding this example case, - please contact Mark directly. - </p><p><span class="emphasis"><em>TechInfo</em></span> It is time to consider how to add Samba servers - and UNIX and Linux network clients. Users who convert to Linux want to be able to log on - using Windows network accounts. You explore nss_ldap, pam_ldap, winbind, and a few neat - techniques for taking control. Are you ready for this? - </p></dd><dt><span class="term">Chapter 8 Updating Samba-3.</span></dt><dd><p> - This chapter is the result of repeated requests for better documentation of the steps - that must be followed when updating or upgrading a Samba server. It attempts to cover - the entire subject in broad-brush but at the same time provides detailed background - information that is not covered elsewhere in the Samba documentation. - </p><p><span class="emphasis"><em>TechInfo</em></span> Samba stores a lot of essential network - information in a large and growing collection of files. This chapter documents the - essentials of where those files may be located and how to find them. It also provides - an insight into inter-related matters that affect a Samba installation. - </p></dd><dt><span class="term">Chapter 9 Migrating NT4 Domain to Samba-3.</span></dt><dd><p> - Another six months have passed. Abmas has acquired yet another company. You will find a - way to migrate all users off the old network onto the existing network without loss - of passwords and will effect the change-over during one weekend. May the force (and caffeine) be with - you, may you keep your back to the wind and may the sun shine on your face. - </p><p><span class="emphasis"><em>TechInfo</em></span> This chapter demonstrates the use of - the <code class="literal">net rpc migrate</code> facility using an LDAP ldapsam backend, and also - using a tdbsam passdb backend. Both are much-asked-for examples of NT4 Domain migration. - </p></dd><dt><span class="term">Chapter 10 Migrating NetWare 4.11 Server to Samba.</span></dt><dd><p> - Misty Stanley-Jones has contributed information that summarizes her experience at migration - from a NetWare server to Samba-3. - </p><p><span class="emphasis"><em>TechInfo</em></span> The documentation provided demonstrates - how one site migrated from NetWare to Samba. Some alternatives tools are mentioned. These - could be used to provide another pathway to a successful migration. - </p></dd><dt><span class="term">Chapter 11 Active Directory, Kerberos and Security.</span></dt><dd><p> - Abmas has acquired another company that has just migrated to running Windows Server 2003 and - Active Directory. One of your staff makes offhand comments that land you in hot water. - A network security auditor is hired by the head of the new business and files a damning - report, and you must address the <span class="emphasis"><em>defects</em></span> reported. You have hired new - network engineers who want to replace Microsoft Active Directory with a pure Kerberos - solution. How will you handle this? - </p><p><span class="emphasis"><em>TechInfo</em></span> This chapter is your answer. Learn about - share access controls, proper use of UNIX/Linux file system access controls, and Windows - 200x Access Control Lists. Follow these steps to beat the critics. - </p></dd><dt><span class="term">Chapter 12 Integrating Additional Services.</span></dt><dd><p> - The battle is almost over, Samba-3 has won the day. Your team are delighted and now you - find yourself at yet another cross-roads. Abmas have acquired a snack food business, you - made promises you must keep. IT costs must be reduced, you have new resistance, but you - will win again. This time you choose to install the Squid proxy server to validate the - fact that Samba is far more than just a file and print server. SPNEGO authentication - support means that your Microsoft Windows clients gain transparent proxy access. - </p><p><span class="emphasis"><em>TechInfo</em></span> Samba provides the <code class="literal">ntlm_auth</code> - module that makes it possible for MS Windows Internet Explorer to connect via the Squid Web - and FTP proxy server. You will configure Samba-3 as well as Squid to deliver authenticated - access control using the Active Directory Domain user security credentials. - </p></dd><dt><span class="term">Chapter 13 Performance, Reliability and Availability.</span></dt><dd><p> - Bob, are you sure the new Samba server is up to the load? Your network is serving many - users who risk becoming unproductive. What can you do to keep ahead of demand? Can you - keep the cost under control also? What can go wrong? - </p><p><span class="emphasis"><em>TechInfo</em></span> Hot tips that put chili into your - network. Avoid name resolution problems, identify potential causes of network collisions, - avoid Samba configuration options that will weigh the server down. MS distributed file - services to make your network fly and much more. This chapter contains a good deal of - <span class="quote">“<span class="quote">Did I tell you about this...?</span>”</span> type of hints to help keep your name on the top - performers list. - </p></dd><dt><span class="term">Chapter 14 Samba Support.</span></dt><dd><p> - This chapter has been added specifically to help those who are seeking professional - paid support for Samba. The critics of Open Source Software often assert that - there is no support for free software. Some critics argue that free software - undermines the service that proprietary commercial software vendors depend on. - This chapter explains what are the support options for Samba and the fact that - a growing number of businesses make money by providing commercial paid-for - Samba support. - </p></dd><dt><span class="term">Chapter 15 A Collection of Useful Tid-bits.</span></dt><dd><p> - Sometimes it seems that there is not a good place for certain odds and ends that - impact Samba deployment. Some readers would argue that everyone can be expected - to know this information, or at least be able to find it easily. So to avoid - offending a reader's sensitivities, the tid-bits have been placed in this chapter. - Do check out the contents, you may find something of value among the loose ends. - </p></dd><dt><span class="term">Chapter 16 Windows Networking Primer.</span></dt><dd><p> - Here we cover practical exercises to help us to understand how MS Windows - network protocols function. A network protocol analyzer helps you to - appreciate the fact that Windows networking is highly dependent on broadcast - messaging. Additionally, you can look into network packets that a Windows - client sends to a network server to set up a network connection. On completion, - you should have a basic understanding of how network browsing functions and - have seen some of the information a Windows client sends to - a file and print server to create a connection over which file and print - operations may take place. - </p></dd></dl></div></div><div class="sect1" title="Conventions Used"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id322920"></a>Conventions Used</h2></div></div></div><p> - The following notation conventions are used throughout this book: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - TOSHARG2 is used as an abbreviation for the book, <span class="quote">“<span class="quote">The Official Samba-3 - HOWTO and Reference Guide, Second Edition</span>”</span> Editors: John H. Terpstra and Jelmer R. Vernooij, - Publisher: Prentice Hall, ISBN: 0131882228. - </p></li><li class="listitem"><p> - S3bE2 is used as an abbreviation for the book, <span class="quote">“<span class="quote">Samba-3 by Example, Second Edition</span>”</span> - Editors: John H. Terpstra, Publisher: Prentice Hall, ISBN: 013188221X. - </p></li><li class="listitem"><p> - Directories and filenames appear in mono-font. For example, - <code class="filename">/etc/pam.conf</code>. - </p></li><li class="listitem"><p> - Executable names are bolded. For example, <code class="literal">smbd</code>. - </p></li><li class="listitem"><p> - Menu items and buttons appear in bold. For example, click <span class="guibutton">Next</span>. - </p></li><li class="listitem"><p> - Selecting a menu item is indicated as: - <span class="guimenu">Start</span> → <span class="guimenuitem">Control Panel</span> → <span class="guimenuitem">Administrative Tools</span> → <span class="guimenuitem">Active Directory Users and Computers</span> - </p></li></ul></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr03.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="ExNetworks.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Foreword </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Part I. Example Network Configurations</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/primer.html b/docs/htmldocs/Samba3-ByExample/primer.html deleted file mode 100644 index e0edaf7921..0000000000 --- a/docs/htmldocs/Samba3-ByExample/primer.html +++ /dev/null @@ -1,548 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 16. Networking Primer</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="RefSection.html" title="Part III. Reference Section"><link rel="prev" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits"><link rel="next" href="apa.html" title="Appendix A. GNU General Public License version 3"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 16. Networking Primer</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="appendix.html">Prev</a> </td><th width="60%" align="center">Part III. Reference Section</th><td width="20%" align="right"> <a accesskey="n" href="apa.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 16. Networking Primer"><div class="titlepage"><div><div><h2 class="title"><a name="primer"></a>Chapter 16. Networking Primer</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="primer.html#id390627">Requirements and Notes</a></span></dt><dt><span class="sect1"><a href="primer.html#id390763">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id390813">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#id390920">Exercises</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id391033">Single-Machine Broadcast Activity</a></span></dt><dt><span class="sect2"><a href="primer.html#secondmachine">Second Machine Startup Broadcast Interaction</a></span></dt><dt><span class="sect2"><a href="primer.html#id392130">Simple Windows Client Connection Characteristics</a></span></dt><dt><span class="sect2"><a href="primer.html#id392597">Windows 200x/XP Client Interaction with Samba-3</a></span></dt><dt><span class="sect2"><a href="primer.html#id393121">Conclusions to Exercises</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#chap01conc">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="primer.html#id393223">Technical Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="primer.html#chap01qa">Questions and Answers</a></span></dt></dl></div><p> - You are about to use the equivalent of a microscope to look at the information - that runs through the veins of a Windows network. We do more to observe the information than - to interrogate it. When you are done with this primer, you should have a good understanding - of the types of information that flow over the network. Do not worry, this is not - a biology lesson. We won't lose you in unnecessary detail. Think to yourself, <span class="quote">“<span class="quote">This - is easy,</span>”</span> then tackle each exercise without fear. - </p><p> - Samba can be configured with a minimum of complexity. Simplicity should be mastered - before you get too deeply into complexities. Let's get moving: we have work to do. - </p><div class="sect1" title="Requirements and Notes"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id390627"></a>Requirements and Notes</h2></div></div></div><p> - Successful completion of this primer requires two Microsoft Windows 9x/Me Workstations - as well as two Microsoft Windows XP Professional Workstations, each equipped with an Ethernet - card connected using a hub. Also required is one additional server (either Windows - NT4 Server, Windows 2000 Server, or a Samba-3 on UNIX/Linux server) running a network - sniffer and analysis application (Wireshark is a good choice). All work should be undertaken - on a quiet network where there is no other traffic. It is best to use a dedicated hub - with only the machines under test connected at the time of the exercises. - </p><p><a class="indexterm" name="id390642"></a> - Wireshark (formerly Ethereal) has become the network protocol analyzer of choice for many network administrators. - You may find more information regarding this tool from the - <a class="ulink" href="http://www.wireshark.org" target="_top">Wireshark</a> Web site. Wireshark installation - files for Windows may be obtained from the Wireshark Web site. Wireshark is provided with - SUSE and Red Hat Linux distributions, as well as with many other Linux distributions. It may - not be installed on your system by default. If it is not installed, you may also need - to install the <code class="literal">libpcap</code> software before you can install or use Wireshark. - Please refer to the instructions for your operating system or to the Wireshark Web site - for information regarding the installation and operation of Wireshark. - </p><p> - To obtain <code class="literal">Wireshark</code> for your system, please visit the Wireshark - <a class="ulink" href="http://www.wireshark.org/download.html" target="_top">download site</a>. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - The successful completion of this chapter requires that you capture network traffic - using <code class="literal">Wireshark</code>. It is recommended that you use a hub, not an - Ethernet switch. It is necessary for the device used to act as a repeater, not as a - filter. Ethernet switches may filter out traffic that is not directed at the machine - that is used to monitor traffic; this would not allow you to complete the projects. - </p></div><p> - <a class="indexterm" name="id390701"></a> - Do not worry too much if you do not have access to all this equipment; network captures - from the exercises are provided on the enclosed CD-ROM. This makes it possible to dive directly - into the analytical part of the exercises if you so desire. - </p><p><a class="indexterm" name="id390714"></a><a class="indexterm" name="id390726"></a> - Please do not be alarmed at the use of a high-powered analysis tool (Wireshark) in this - primer. We expose you only to a minimum of detail necessary to complete - the exercises. If you choose to use any other network sniffer and protocol - analysis tool, be advised that it may not allow you to examine the contents of - recently added security protocols used by Windows 200x/XP. - </p><p> - You could just skim through the exercises and try to absorb the key points made. - The exercises provide all the information necessary to convince the die-hard network - engineer. You possibly do not require so much convincing and may just want to move on, - in which case you should at least read <a class="link" href="primer.html#chap01conc" title="Dissection and Discussion">“Dissection and Discussion”</a>. - </p><p> - <a class="link" href="primer.html#chap01qa" title="Questions and Answers">“Questions and Answers”</a> also provides useful information - that may help you to avoid significantly time-consuming networking problems. - </p></div><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id390763"></a>Introduction</h2></div></div></div><p> - The purpose of this chapter is to create familiarity with key aspects of Microsoft Windows - network computing. If you want a solid technical grounding, do not gloss over these exercises. - The points covered are recurrent issues on the Samba mailing lists. - </p><p><a class="indexterm" name="id390775"></a> - You can see from these exercises that Windows networking involves quite a lot of network - broadcast traffic. You can look into the contents of some packets, but only to see - some particular information that the Windows client sends to a server in the course of - establishing a network connection. - </p><p> - To many people, browsing is everything that happens when one uses Microsoft Internet Explorer. - It is only when you start looking at network traffic and noting the protocols - and types of information that are used that you can begin to appreciate the complexities of - Windows networking and, more importantly, what needs to be configured so that it can work. - Detailed information regarding browsing is provided in the recommended - preparatory reading. - </p><p> - Recommended preparatory reading: <span class="emphasis"><em>The Official Samba-3 HOWTO and Reference Guide, Second - Edition</em></span> (TOSHARG2) Chapter 9, <span class="quote">“<span class="quote">Network Browsing,</span>”</span> and Chapter 3, - <span class="quote">“<span class="quote">Server Types and Security Modes.</span>”</span> - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id390813"></a>Assignment Tasks</h3></div></div></div><p><a class="indexterm" name="id390820"></a> - You are about to witness how Microsoft Windows computer networking functions. The - exercises step through identification of how a client machine establishes a - connection to a remote Windows server. You observe how Windows machines find - each other (i.e., how browsing works) and how the two key types of user identification - (share mode security and user mode security) are affected. - </p><p><a class="indexterm" name="id390834"></a> - The networking protocols used by MS Windows networking when working with Samba - use TCP/IP as the transport protocol. The protocols that are specific to Windows - networking are encapsulated in TCP/IP. The network analyzer we use (Wireshark) - is able to show you the contents of the TCP/IP packets (or messages). - </p><div class="procedure" title="Procedure 16.1. Diagnostic Tasks"><a name="chap01tasks"></a><p class="title"><b>Procedure 16.1. Diagnostic Tasks</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p><a class="indexterm" name="id390864"></a><a class="indexterm" name="id390875"></a><a class="indexterm" name="id390883"></a> - Examine network traces to witness SMB broadcasts, host announcements, - and name resolution processes. - </p></li><li class="step" title="Step 2"><p> - Examine network traces to witness how share mode security functions. - </p></li><li class="step" title="Step 3"><p> - Examine network traces to witness the use of user mode security. - </p></li><li class="step" title="Step 4"><p> - Review traces of network logons for a Windows 9x/Me client as well as - a domain logon for a Windows XP Professional client. - </p></li></ol></div></div></div><div class="sect1" title="Exercises"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id390920"></a>Exercises</h2></div></div></div><p> - <a class="indexterm" name="id390928"></a> - You are embarking on a course of discovery. The first part of the exercise requires - two MS Windows 9x/Me systems. We called one machine <code class="constant">WINEPRESSME</code> and the - other <code class="constant">MILGATE98</code>. Each needs an IP address; we used <code class="literal">10.1.1.10</code> - and <code class="literal">10.1.1.11</code>. The test machines need to be networked via a <span class="emphasis"><em>hub</em></span>. A UNIX/Linux - machine is required to run <code class="literal">Wireshark</code> to enable the network activity to be captured. - It is important that the machine from which network activity is captured must not interfere with - the operation of the Windows workstations. It is helpful for this machine to be passive (does not - send broadcast information) to the network. - </p><p> - For these exercises, our test environment consisted of a SUSE 9.2 Professional Linux Workstation running - VMWare 4.5. The following VMWare images were prepared: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Windows 98 name: MILGATE98</p></li><li class="listitem"><p>Windows Me name: WINEPRESSME</p></li><li class="listitem"><p>Windows XP Professional name: LightrayXP</p></li><li class="listitem"><p>Samba-3.0.20 running on a SUSE Enterprise Linux 9</p></li></ul></div><p> - Choose a workgroup name (MIDEARTH) for each exercise. - </p><p> - <a class="indexterm" name="id391010"></a> - The network captures provided on the CD-ROM included with this book were captured using <code class="constant">Ethereal</code> - version <code class="literal">0.10.6</code>. A later version suffices without problems (i.e. you should be using Wireshark), but an earlier version may not - expose all the information needed. Each capture file has been decoded and listed as a trace file. A summary of all - packets has also been included. This makes it possible for you to do all the studying you like without the need to - perform the time-consuming equipment configuration and test work. This is a good time to point out that the value - that can be derived from this book really does warrant your taking sufficient time to practice each exercise with - care and attention to detail. - </p><div class="sect2" title="Single-Machine Broadcast Activity"><div class="titlepage"><div><div><h3 class="title"><a name="id391033"></a>Single-Machine Broadcast Activity</h3></div></div></div><p> - In this section, we start a single Windows 9x/Me machine, then monitor network activity for 30 minutes. - </p><div class="procedure" title="Procedure 16.2. Monitoring Windows 9x Steps"><a name="id391043"></a><p class="title"><b>Procedure 16.2. Monitoring Windows 9x Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Start the machine from which network activity will be monitored (using <code class="literal">Wireshark</code>). - Launch <code class="literal">Wireshark</code>, click - <span class="guimenu">Capture</span> → <span class="guimenuitem">Start</span>. - </p><p> - Click the following: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Update list of packets in real time</p></li><li class="listitem"><p>Automatic scrolling in live capture</p></li><li class="listitem"><p>Enable MAC name resolution</p></li><li class="listitem"><p>Enable network name resolution</p></li><li class="listitem"><p>Enable transport name resolution</p></li></ol></div><p> - Click <span class="guibutton">OK</span>. - </p></li><li class="step" title="Step 2"><p> - Start the Windows 9x/Me machine to be monitored. Let it run for a full 30 minutes. While monitoring, - do not press any keyboard keys, do not click any on-screen icons or menus, and do not answer any dialog boxes. - </p></li><li class="step" title="Step 3"><p> - At the conclusion of 30 minutes, stop the capture. Save the capture to a file so you can go back to it later. - Leave this machine running in preparation for the task in <a class="link" href="primer.html#secondmachine" title="Second Machine Startup Broadcast Interaction">“Second Machine Startup Broadcast Interaction”</a>. - </p></li><li class="step" title="Step 4"><p> - Analyze the capture. Identify each discrete message type that was captured. Note what transport protocol - was used. Identify the timing between messages of identical types. - </p></li></ol></div><div class="sect3" title="Findings"><div class="titlepage"><div><div><h4 class="title"><a name="id391158"></a>Findings</h4></div></div></div><p> - The summary of the first 10 minutes of the packet capture should look like <a class="link" href="primer.html#pktcap01" title="Figure 16.1. Windows Me Broadcasts The First 10 Minutes">“Windows Me Broadcasts The First 10 Minutes”</a>. - A screenshot of a later stage of the same capture is shown in <a class="link" href="primer.html#pktcap02" title="Figure 16.2. Windows Me Later Broadcast Sample">“Windows Me Later Broadcast Sample”</a>. - </p><div class="figure"><a name="pktcap01"></a><p class="title"><b>Figure 16.1. Windows Me Broadcasts The First 10 Minutes</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/WINREPRESSME-Capture.png" width="216" alt="Windows Me Broadcasts The First 10 Minutes"></div></div></div><br class="figure-break"><div class="figure"><a name="pktcap02"></a><p class="title"><b>Figure 16.2. Windows Me Later Broadcast Sample</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/WINREPRESSME-Capture2.png" width="226.8" alt="Windows Me Later Broadcast Sample"></div></div></div><br class="figure-break"><p><a class="indexterm" name="id391271"></a><a class="indexterm" name="id391282"></a> - Broadcast messages observed are shown in <a class="link" href="primer.html#capsstats01" title="Table 16.1. Windows Me Startup Broadcast Capture Statistics">“Windows Me Startup Broadcast Capture Statistics”</a>. - Actual observations vary a little, but not by much. - Early in the startup process, the Windows Me machine broadcasts its name for two reasons: - first to ensure that its name would not result in a name clash, and second to establish its - presence with the Local Master Browser (LMB). - </p><div class="table"><a name="capsstats01"></a><p class="title"><b>Table 16.1. Windows Me Startup Broadcast Capture Statistics</b></p><div class="table-contents"><table summary="Windows Me Startup Broadcast Capture Statistics" border="1"><colgroup><col align="left"><col align="center"><col align="center"><col align="left"></colgroup><thead><tr><th align="left">Message</th><th align="center">Type</th><th align="center">Num</th><th align="left">Notes</th></tr></thead><tbody><tr><td align="left">WINEPRESSME<00></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.6 sec apart</td></tr><tr><td align="left">WINEPRESSME<03></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.6 sec apart</td></tr><tr><td align="left">WINEPRESSME<20></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<00></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<1d></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<1e></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<1b></td><td align="center">Qry</td><td align="center">84</td><td align="left">300 sec apart at stable operation</td></tr><tr><td align="left">__MSBROWSE__</td><td align="center">Reg</td><td align="center">8</td><td align="left">Registered after winning election to Browse Master</td></tr><tr><td align="left">JHT<03></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 x 2. This is the name of the user that logged onto Windows</td></tr><tr><td align="left">Host Announcement WINEPRESSME</td><td align="center">Ann</td><td align="center">2</td><td align="left">Observed at 10 sec</td></tr><tr><td align="left">Domain/Workgroup Announcement MIDEARTH</td><td align="center">Ann</td><td align="center">18</td><td align="left">300 sec apart at stable operation</td></tr><tr><td align="left">Local Master Announcement WINEPRESSME</td><td align="center">Ann</td><td align="center">18</td><td align="left">300 sec apart at stable operation</td></tr><tr><td align="left">Get Backup List Request</td><td align="center">Qry</td><td align="center">12</td><td align="left">6 x 2 early in startup, 0.5 sec apart</td></tr><tr><td align="left">Browser Election Request</td><td align="center">Ann</td><td align="center">10</td><td align="left">5 x 2 early in startup</td></tr><tr><td align="left">Request Announcement WINEPRESSME</td><td align="center">Ann</td><td align="center">4</td><td align="left">Early in startup</td></tr></tbody></table></div></div><br class="table-break"><p><a class="indexterm" name="id391620"></a><a class="indexterm" name="id391628"></a> - From the packet trace, it should be noted that no messages were propagated over TCP/IP; - all messages employed UDP/IP. When steady-state operation has been achieved, there is a cycle - of various announcements, re-election of a browse master, and name queries. These create - the symphony of announcements by which network browsing is made possible. - </p><p><a class="indexterm" name="id391642"></a> - For detailed information regarding the precise behavior of the CIFS/SMB protocols, - refer to the book <span class="quote">“<span class="quote">Implementing CIFS: The Common Internet File System,</span>”</span> - by Christopher Hertel, (Prentice Hall PTR, ISBN: 013047116X). - </p></div></div><div class="sect2" title="Second Machine Startup Broadcast Interaction"><div class="titlepage"><div><div><h3 class="title"><a name="secondmachine"></a>Second Machine Startup Broadcast Interaction</h3></div></div></div><p> - At this time, the machine you used to capture the single-system startup trace should still be running. - The objective of this task is to identify the interaction of two machines in respect to broadcast activity. - </p><div class="procedure" title="Procedure 16.3. Monitoring of Second Machine Activity"><a name="id391674"></a><p class="title"><b>Procedure 16.3. Monitoring of Second Machine Activity</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - On the machine from which network activity will be monitored (using <code class="literal">Wireshark</code>), - launch <code class="literal">Wireshark</code> and click - <span class="guimenu">Capture</span> → <span class="guimenuitem">Start</span>. - </p><p> - Click: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Update list of packets in real time</p></li><li class="listitem"><p>Automatic scrolling in live capture</p></li><li class="listitem"><p>Enable MAC name resolution</p></li><li class="listitem"><p>Enable network name resolution</p></li><li class="listitem"><p>Enable transport name resolution</p></li></ol></div><p> - Click <span class="guibutton">OK</span>. - </p></li><li class="step" title="Step 2"><p> - Start the second Windows 9x/Me machine. Let it run for 15 to 20 minutes. While monitoring, do not press - any keyboard keys, do not click any on-screen icons or menus, and do not answer any dialog boxes. - </p></li><li class="step" title="Step 3"><p> - At the conclusion of the capture time, stop the capture. Be sure to save the captured data so you - can examine the network data capture again at a later date should that be necessary. - </p></li><li class="step" title="Step 4"><p> - Analyze the capture trace, taking note of the transport protocols used, the types of messages observed, - and what interaction took place between the two machines. Leave both machines running for the next task. - </p></li></ol></div><div class="sect3" title="Findings"><div class="titlepage"><div><div><h4 class="title"><a name="id391782"></a>Findings</h4></div></div></div><p> - <a class="link" href="primer.html#capsstats02" title="Table 16.2. Second Machine (Windows 98) Capture Statistics">“Second Machine (Windows 98) Capture Statistics”</a> summarizes capture statistics observed. As in the previous case, - all announcements used UDP/IP broadcasts. Also, as was observed with the last example, the second - Windows 9x/Me machine broadcasts its name on startup to ensure that there exists no name clash - (i.e., the name is already registered by another machine) on the network segment. Those wishing - to explore the inner details of the precise mechanism of how this functions should refer to - <span class="quote">“<span class="quote">Implementing CIFS: The Common Internet File System.</span>”</span> - </p><div class="table"><a name="capsstats02"></a><p class="title"><b>Table 16.2. Second Machine (Windows 98) Capture Statistics</b></p><div class="table-contents"><table summary="Second Machine (Windows 98) Capture Statistics" border="1"><colgroup><col align="left"><col align="center"><col align="center"><col align="left"></colgroup><thead><tr><th align="left">Message</th><th align="center">Type</th><th align="center">Num</th><th align="left">Notes</th></tr></thead><tbody><tr><td align="left">MILGATE98<00></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.6 sec apart</td></tr><tr><td align="left">MILGATE98<03></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.6 sec apart</td></tr><tr><td align="left">MILGATE98<20></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<00></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<1d></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<1e></td><td align="center">Reg</td><td align="center">8</td><td align="left">4 lots of 2, 0.75 sec apart</td></tr><tr><td align="left">MIDEARTH<1b></td><td align="center">Qry</td><td align="center">18</td><td align="left">900 sec apart at stable operation</td></tr><tr><td align="left">JHT<03></td><td align="center">Reg</td><td align="center">2</td><td align="left">This is the name of the user that logged onto Windows</td></tr><tr><td align="left">Host Announcement MILGATE98</td><td align="center">Ann</td><td align="center">14</td><td align="left">Every 120 sec</td></tr><tr><td align="left">Domain/Workgroup Announcement MIDEARTH</td><td align="center">Ann</td><td align="center">6</td><td align="left">900 sec apart at stable operation</td></tr><tr><td align="left">Local Master Announcement WINEPRESSME</td><td align="center">Ann</td><td align="center">6</td><td align="left">Insufficient detail to determine frequency</td></tr></tbody></table></div></div><br class="table-break"><p> - <a class="indexterm" name="id392055"></a> - <a class="indexterm" name="id392062"></a> - <a class="indexterm" name="id392069"></a> - Observation of the contents of Host Announcements, Domain/Workgroup Announcements, - and Local Master Announcements is instructive. These messages convey a significant - level of detail regarding the nature of each machine that is on the network. An example - dissection of a Host Announcement is given in <a class="link" href="primer.html#hostannounce" title="Figure 16.3. Typical Windows 9x/Me Host Announcement">“Typical Windows 9x/Me Host Announcement”</a>. - </p><div class="figure"><a name="hostannounce"></a><p class="title"><b>Figure 16.3. Typical Windows 9x/Me Host Announcement</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/HostAnnouncment.png" width="221.4" alt="Typical Windows 9x/Me Host Announcement"></div></div></div><br class="figure-break"></div></div><div class="sect2" title="Simple Windows Client Connection Characteristics"><div class="titlepage"><div><div><h3 class="title"><a name="id392130"></a>Simple Windows Client Connection Characteristics</h3></div></div></div><p> - The purpose of this exercise is to discover how Microsoft Windows clients create (establish) - connections with remote servers. The methodology involves analysis of a key aspect of how - Windows clients access remote servers: the session setup protocol. - </p><div class="procedure" title="Procedure 16.4. Client Connection Exploration Steps"><a name="id392141"></a><p class="title"><b>Procedure 16.4. Client Connection Exploration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure a Windows 9x/Me machine (MILGATE98) with a share called <code class="constant">Stuff</code>. - Create a <em class="parameter"><code>Full Access</code></em> control password on this share. - </p></li><li class="step" title="Step 2"><p> - Configure another Windows 9x/Me machine (WINEPRESSME) as a client. Make sure that it exports - no shared resources. - </p></li><li class="step" title="Step 3"><p> - Start both Windows 9x/Me machines and allow them to stabilize for 10 minutes. Log on to both - machines using a user name (JHT) of your choice. Wait approximately 2 minutes before proceeding. - </p></li><li class="step" title="Step 4"><p> - Start Wireshark (or the network sniffer of your choice). - </p></li><li class="step" title="Step 5"><p> - From the WINEPRESSME machine, right-click <span class="guimenu">Network Neighborhood</span>, select - <span class="guimenuitem">Explore</span>, select - <span class="guimenuitem">My Network Places</span> → <span class="guimenuitem">Entire Network</span> → <span class="guimenuitem">MIDEARTH</span> → <span class="guimenuitem">MILGATE98</span> → <span class="guimenuitem">Stuff</span>. - Enter the password you set for the <code class="constant">Full Control</code> mode for the - <code class="constant">Stuff</code> share. - </p></li><li class="step" title="Step 6"><p> - When the share called <code class="constant">Stuff</code> is being displayed, stop the capture. - Save the captured data in case it is needed for later analysis. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id392265"></a> - From the top of the packets captured, scan down to locate the first packet that has - interpreted as <code class="constant">Session Setup AndX, User: anonymous; Tree Connect AndX, - Path: \\MILGATE98\IPC$</code>. - </p></li><li class="step" title="Step 8"><p><a class="indexterm" name="id392283"></a><a class="indexterm" name="id392291"></a> - In the dissection (analysis) panel, expand the <code class="constant">SMB, Session Setup AndX Request, - and Tree Connect AndX Request</code>. Examine both operations. Identify the name of - the user Account and what password was used. The Account name should be empty. - This is a <code class="constant">NULL</code> session setup packet. - </p></li><li class="step" title="Step 9"><p> - Return to the packet capture sequence. There will be a number of packets that have been - decoded of the type <code class="constant">Session Setup AndX</code>. Locate the last such packet - that was targeted at the <code class="constant">\\MILGATE98\IPC$</code> service. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id392331"></a> - <a class="indexterm" name="id392338"></a> - Dissect this packet as per the previous one. This packet should have a password length - of 24 (characters) and should have a password field, the contents of which is a - long hexadecimal number. Observe the name in the Account field. This is a User Mode - session setup packet. - </p></li></ol></div><div class="sect3" title="Findings and Comments"><div class="titlepage"><div><div><h4 class="title"><a name="id392350"></a>Findings and Comments</h4></div></div></div><p> - <a class="indexterm" name="id392358"></a> - The <code class="constant">IPC$</code> share serves a vital purpose<sup>[<a name="id392369" href="#ftn.id392369" class="footnote">15</a>]</sup> - in SMB/CIFS-based networking. A Windows client connects to this resource to obtain the list of - resources that are available on the server. The server responds with the shares and print queues that - are available. In most but not all cases, the connection is made with a <code class="constant">NULL</code> - username and a <code class="constant">NULL</code> password. - </p><p> - <a class="indexterm" name="id392386"></a> - The two packets examined are material evidence of how Windows clients may - interoperate with Samba. Samba requires every connection setup to be authenticated using - valid UNIX account credentials (UID/GID). This means that even a <code class="constant">NULL</code> - session setup can be established only by automatically mapping it to a valid UNIX - account. - </p><p> - <a class="indexterm" name="id392403"></a><a class="indexterm" name="id392408"></a> - <a class="indexterm" name="id392417"></a> - Samba has a special name for the <code class="constant">NULL</code>, or empty, user account: - it calls it the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>. The - default value of this parameter is <code class="constant">nobody</code>; however, this can be - changed to map the function of the guest account to any other UNIX identity. Some - UNIX administrators prefer to map this account to the system default anonymous - FTP account. A sample NULL Session Setup AndX packet dissection is shown in - <a class="link" href="primer.html#nullconnect" title="Figure 16.4. Typical Windows 9x/Me NULL SessionSetUp AndX Request">“Typical Windows 9x/Me NULL SessionSetUp AndX Request”</a>. - </p><div class="figure"><a name="nullconnect"></a><p class="title"><b>Figure 16.4. Typical Windows 9x/Me NULL SessionSetUp AndX Request</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/NullConnect.png" width="221.4" alt="Typical Windows 9x/Me NULL SessionSetUp AndX Request"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id392498"></a> - <a class="indexterm" name="id392505"></a> - <a class="indexterm" name="id392512"></a> - When a UNIX/Linux system does not have a <code class="constant">nobody</code> user account - (<code class="filename">/etc/passwd</code>), the operation of the <code class="constant">NULL</code> - account cannot validate and thus connections that utilize the guest account - fail. This breaks all ability to browse the Samba server and is a common - problem reported on the Samba mailing list. A sample User Mode session setup AndX - is shown in <a class="link" href="primer.html#userconnect" title="Figure 16.5. Typical Windows 9x/Me User SessionSetUp AndX Request">“Typical Windows 9x/Me User SessionSetUp AndX Request”</a>. - </p><div class="figure"><a name="userconnect"></a><p class="title"><b>Figure 16.5. Typical Windows 9x/Me User SessionSetUp AndX Request</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/UserConnect.png" width="221.4" alt="Typical Windows 9x/Me User SessionSetUp AndX Request"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id392585"></a> - The User Mode connection packet contains the account name and the domain name. - The password is provided in Microsoft encrypted form, and its length is shown - as 24 characters. This is the length of Microsoft encrypted passwords. - </p></div></div><div class="sect2" title="Windows 200x/XP Client Interaction with Samba-3"><div class="titlepage"><div><div><h3 class="title"><a name="id392597"></a>Windows 200x/XP Client Interaction with Samba-3</h3></div></div></div><p> - By now you may be asking, <span class="quote">“<span class="quote">Why did you choose to work with Windows 9x/Me?</span>”</span> - </p><p> - First, we want to demonstrate the simple case. This book is not intended to be a detailed treatise - on the Windows networking protocols, but rather to provide prescriptive guidance for deployment of Samba. - Second, by starting out with the simple protocol, it can be demonstrated that the more complex case mostly - follows the same principles. - </p><p> - The following exercise demonstrates the case that even MS Windows XP Professional with up-to-date service - updates also uses the <code class="constant">NULL</code> account, as well as user accounts. Simply follow the procedure - to complete this exercise. - </p><p> - To complete this exercise, you need a Windows XP Professional client that has been configured as - a domain member of either a Samba-controlled domain or a Windows NT4 or 200x Active Directory domain. - Here we do not provide details for how to configure this, as full coverage is provided earlier in this book. - </p><div class="procedure" title="Procedure 16.5. Steps to Explore Windows XP Pro Connection Set-up"><a name="id392631"></a><p class="title"><b>Procedure 16.5. Steps to Explore Windows XP Pro Connection Set-up</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Start your domain controller. Also, start the Wireshark monitoring machine, launch Wireshark, - and then wait for the next step to complete. - </p></li><li class="step" title="Step 2"><p> - Start the Windows XP Client and wait 5 minutes before proceeding. - </p></li><li class="step" title="Step 3"><p> - On the machine from which network activity will be monitored (using <code class="literal">Wireshark</code>), - launch <code class="literal">Wireshark</code> and click - <span class="guimenu">Capture</span> → <span class="guimenuitem">Start</span>. - </p><p> - Click: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Update list of packets in real time</p></li><li class="listitem"><p>Automatic scrolling in live capture</p></li><li class="listitem"><p>Enable MAC name resolution</p></li><li class="listitem"><p>Enable network name resolution</p></li><li class="listitem"><p>Enable transport name resolution</p></li></ol></div><p> - Click <span class="guibutton">OK</span>. - </p></li><li class="step" title="Step 4"><p> - On the Windows XP Professional client, press <span class="guimenu">Ctrl-Alt-Delete</span> to bring - up the domain logon screen. Log in using valid credentials for a domain user account. - </p></li><li class="step" title="Step 5"><p> - Now proceed to connect to the domain controller as follows: - <span class="guimenu">Start</span> → <span class="guimenuitem">(right-click) My Network Places</span> → <span class="guimenuitem">Explore</span> → <span class="guimenuitem">{Left Panel} [+] Entire Network</span> → <span class="guimenuitem">{Left Panel} [+] Microsoft Windows Network</span> → <span class="guimenuitem">{Left Panel} [+] Midearth</span> → <span class="guimenuitem">{Left Panel} [+] Frodo</span> → <span class="guimenuitem">{Left Panel} [+] data</span>. Close the explorer window. - </p><p> - In this step, our domain name is <code class="constant">Midearth</code>, the domain controller is called - <code class="constant">Frodo</code>, and we have connected to a share called <code class="constant">data</code>. - </p></li><li class="step" title="Step 6"><p> - Stop the capture on the <code class="literal">Wireshark</code> monitoring machine. Be sure to save the captured data - to a file so that you can refer to it again later. - </p></li><li class="step" title="Step 7"><p> - If desired, the Windows XP Professional client and the domain controller are no longer needed for exercises - in this chapter. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id392845"></a> - <a class="indexterm" name="id392852"></a> - From the top of the packets captured, scan down to locate the first packet that has - interpreted as <code class="constant">Session Setup AndX Request, NTLMSSP_AUTH</code>. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id392870"></a> - <a class="indexterm" name="id392877"></a> - <a class="indexterm" name="id392884"></a> - In the dissection (analysis) panel, expand the <code class="constant">SMB, Session Setup AndX Request</code>. - Expand the packet decode information, beginning at the <code class="constant">Security Blob:</code> - entry. Expand the <code class="constant">GSS-API -> SPNEGO -> netTokenTarg -> responseToken -> NTLMSSP</code> - keys. This should reveal that this is a <code class="constant">NULL</code> session setup packet. - The <code class="constant">User name: NULL</code> so indicates. An example decode is shown in - <a class="link" href="primer.html#XPCap01" title="Figure 16.6. Typical Windows XP NULL Session Setup AndX Request">“Typical Windows XP NULL Session Setup AndX Request”</a>. - </p></li><li class="step" title="Step 10"><p> - Return to the packet capture sequence. There will be a number of packets that have been - decoded of the type <code class="constant">Session Setup AndX Request</code>. Click the last such packet that - has been decoded as <code class="constant">Session Setup AndX Request, NTLMSSP_AUTH</code>. - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id392941"></a> - In the dissection (analysis) panel, expand the <code class="constant">SMB, Session Setup AndX Request</code>. - Expand the packet decode information, beginning at the <code class="constant">Security Blob:</code> - entry. Expand the <code class="constant">GSS-API -> SPNEGO -> netTokenTarg -> responseToken -> NTLMSSP</code> - keys. This should reveal that this is a <code class="constant">User Mode</code> session setup packet. - The <code class="constant">User name: jht</code> so indicates. An example decode is shown in - <a class="link" href="primer.html#XPCap02" title="Figure 16.7. Typical Windows XP User Session Setup AndX Request">“Typical Windows XP User Session Setup AndX Request”</a>. In this case the user name was <code class="constant">jht</code>. This packet - decode includes the <code class="constant">Lan Manager Response:</code> and the <code class="constant">NTLM Response:</code>. - The values of these two parameters are the Microsoft encrypted password hashes: respectively, the LanMan - password and then the NT (case-preserving) password hash. - </p></li><li class="step" title="Step 12"><p> - <a class="indexterm" name="id392995"></a> - <a class="indexterm" name="id393002"></a> - The passwords are 24-character hexadecimal numbers. This packet confirms that this is a User Mode - session setup packet. - </p></li></ol></div><div class="figure"><a name="XPCap01"></a><p class="title"><b>Figure 16.6. Typical Windows XP NULL Session Setup AndX Request</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/WindowsXP-NullConnection.png" width="270" alt="Typical Windows XP NULL Session Setup AndX Request"></div></div></div><br class="figure-break"><div class="figure"><a name="XPCap02"></a><p class="title"><b>Figure 16.7. Typical Windows XP User Session Setup AndX Request</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/WindowsXP-UserConnection.png" width="270" alt="Typical Windows XP User Session Setup AndX Request"></div></div></div><br class="figure-break"><div class="sect3" title="Discussion"><div class="titlepage"><div><div><h4 class="title"><a name="id393094"></a>Discussion</h4></div></div></div><p><a class="indexterm" name="id393101"></a> - This exercise demonstrates that, while the specific protocol for the Session Setup AndX is handled - in a more sophisticated manner by recent MS Windows clients, the underlying rules or principles - remain the same. Thus it is demonstrated that MS Windows XP Professional clients still use a - <code class="constant">NULL-Session</code> connection to query and locate resources on an advanced network - technology server (one using Windows NT4/200x or Samba). It also demonstrates that an authenticated - connection must be made before resources can be used. - </p></div></div><div class="sect2" title="Conclusions to Exercises"><div class="titlepage"><div><div><h3 class="title"><a name="id393121"></a>Conclusions to Exercises</h3></div></div></div><p> - In summary, the following points have been established in this chapter: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - When NetBIOS over TCP/IP protocols are enabled, MS Windows networking employs broadcast-oriented messaging protocols to provide knowledge of network services. - </p></li><li class="listitem"><p> - Network browsing protocols query information stored on browse masters that manage - information provided by NetBIOS Name Registrations and by way of ongoing host - announcements and workgroup announcements. - </p></li><li class="listitem"><p> - All Samba servers must be configured with a mechanism for mapping the <code class="constant">NULL-Session</code> - to a valid but nonprivileged UNIX system account. - </p></li><li class="listitem"><p> - The use of Microsoft encrypted passwords is built right into the fabric of Windows - networking operations. Such passwords cannot be provided from the UNIX <code class="filename">/etc/passwd</code> - database and thus must be stored elsewhere on the UNIX system in a manner that Samba can - use. Samba-2.x permitted such encrypted passwords to be stored in the <code class="constant">smbpasswd</code> - file or in an LDAP database. Samba-3 permits use of multiple <em class="parameter"><code>passdb backend</code></em> - databases in concurrent deployment. Refer to <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 10, <span class="quote">“<span class="quote">Account Information Databases.</span>”</span> - </p></li></ul></div></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="chap01conc"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id393199"></a> - The exercises demonstrate the use of the <code class="constant">guest</code> account, the way that - MS Windows clients and servers resolve computer names to a TCP/IP address, and how connections - between a client and a server are established. - </p><p> - Those wishing background information regarding NetBIOS name types should refer to - the Microsoft knowledgebase article - <a class="ulink" href="http://support.microsoft.com/support/kb/articles/Q102/78/8.asp" target="_top">Q102878.</a> - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id393223"></a>Technical Issues</h3></div></div></div><p> - <a class="indexterm" name="id393231"></a> - Network browsing involves SMB broadcast announcements, SMB enumeration requests, - connections to the <code class="constant">IPC$</code> share, share enumerations, and SMB connection - setup processes. The use of anonymous connections to a Samba server involve the use of - the <em class="parameter"><code>guest account</code></em> that must map to a valid UNIX UID. - </p></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="chap01qa"></a>Questions and Answers</h2></div></div></div><p> - The questions and answers given in this section are designed to highlight important aspects of Microsoft - Windows networking. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id393266"></a><dl><dt> <a href="primer.html#id393272"> - What is the significance of the MIDEARTH<1b> type query? - </a></dt><dt> <a href="primer.html#id393315"> - What is the significance of the MIDEARTH<1d> type name registration? - </a></dt><dt> <a href="primer.html#id393382"> - What is the role and significance of the <01><02>__MSBROWSE__<02><01> - name registration? - </a></dt><dt> <a href="primer.html#id393410"> - What is the significance of the MIDEARTH<1e> type name registration? - </a></dt><dt> <a href="primer.html#id393437"> - - What is the significance of the guest account in smb.conf? - </a></dt><dt> <a href="primer.html#id393508"> - Is it possible to reduce network broadcast activity with Samba-3? - </a></dt><dt> <a href="primer.html#id393609"> - Can I just use plain-text passwords with Samba? - </a></dt><dt> <a href="primer.html#id393684"> - What parameter in the smb.conf file is used to enable the use of encrypted passwords? - </a></dt><dt> <a href="primer.html#id393723"> - Is it necessary to specify encrypt passwords = Yes - when Samba-3 is configured as a domain member? - </a></dt><dt> <a href="primer.html#id393753"> - Is it necessary to specify a guest account when Samba-3 is configured - as a domain member server? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id393272"></a><a name="id393275"></a></td><td align="left" valign="top"><p> - What is the significance of the MIDEARTH<1b> type query? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id393286"></a> - <a class="indexterm" name="id393296"></a> - This is a broadcast announcement by which the Windows machine is attempting to - locate a Domain Master Browser (DMB) in the event that it might exist on the network. - Refer to <span class="emphasis"><em>TOSHARG2,</em></span> Chapter 9, Section 9.7, <span class="quote">“<span class="quote">Technical Overview of Browsing,</span>”</span> - for details regarding the function of the DMB and its role in network browsing. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393315"></a><a name="id393317"></a></td><td align="left" valign="top"><p> - What is the significance of the MIDEARTH<1d> type name registration? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id393329"></a> - <a class="indexterm" name="id393338"></a> - This name registration records the machine IP addresses of the LMBs. - Network clients can query this name type to obtain a list of browser servers from the - master browser. - </p><p> - The LMB is responsible for monitoring all host announcements on the local network and for - collating the information contained within them. Using this information, it can provide answers to other Windows - network clients that request information such as: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - The list of machines known to the LMB (i.e., the browse list) - </p></li><li class="listitem"><p> - The IP addresses of all domain controllers known for the domain - </p></li><li class="listitem"><p> - The IP addresses of LMBs - </p></li><li class="listitem"><p> - The IP address of the DMB (if one exists) - </p></li><li class="listitem"><p> - The IP address of the LMB on the local segment - </p></li></ul></div></td></tr><tr class="question"><td align="left" valign="top"><a name="id393382"></a><a name="id393384"></a></td><td align="left" valign="top"><p> - What is the role and significance of the <01><02>__MSBROWSE__<02><01> - name registration? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id393397"></a> - This name is registered by the browse master to broadcast and receive domain announcements. - Its scope is limited to the local network segment, or subnet. By querying this name type, - master browsers on networks that have multiple domains can find the names of master browsers - for each domain. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393410"></a><a name="id393412"></a></td><td align="left" valign="top"><p> - What is the significance of the MIDEARTH<1e> type name registration? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id393423"></a> - This name is registered by all browse masters in a domain or workgroup. The registration - name type is known as the Browser Election Service. Master browsers register themselves - with this name type so that DMBs can locate them to perform cross-subnet - browse list updates. This name type is also used to initiate elections for Master Browsers. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393437"></a><a name="id393439"></a></td><td align="left" valign="top"><p> - <a class="indexterm" name="id393443"></a> - What is the significance of the <em class="parameter"><code>guest account</code></em> in smb.conf? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - This parameter specifies the default UNIX account to which MS Windows networking - NULL session connections are mapped. The default name for the UNIX account used for - this mapping is called <code class="constant">nobody</code>. If the UNIX/Linux system that - is hosting Samba does not have a <code class="constant">nobody</code> account and an alternate - mapping has not been specified, network browsing will not work at all. - </p><p> - It should be noted that the <em class="parameter"><code>guest account</code></em> is essential to - Samba operation. Either the operating system must have an account called <code class="constant">nobody</code> - or there must be an entry in the <code class="filename">smb.conf</code> file with a valid UNIX account, such as - <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account = ftp</a>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393508"></a><a name="id393510"></a></td><td align="left" valign="top"><p> - Is it possible to reduce network broadcast activity with Samba-3? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id393521"></a> - <a class="indexterm" name="id393528"></a> - Yes, there are two ways to do this. The first involves use of WINS (See <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 9, - Section 9.5, <span class="quote">“<span class="quote">WINS The Windows Inter-networking Name Server</span>”</span>); the - alternate method involves disabling the use of NetBIOS over TCP/IP. This second method requires - a correctly configured DNS server (see <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 9, Section 9.3, <span class="quote">“<span class="quote">Discussion</span>”</span>). - </p><p> - <a class="indexterm" name="id393558"></a> - <a class="indexterm" name="id393564"></a> - <a class="indexterm" name="id393573"></a> - The use of WINS reduces network broadcast traffic. The reduction is greatest when all network - clients are configured to operate in <em class="parameter"><code>Hybrid Mode</code></em>. This can be effected through - use of DHCP to set the NetBIOS node type to type 8 for all network clients. Additionally, it is - beneficial to configure Samba to use <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER" target="_top">name resolve order = wins host cast</a>. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - Use of SMB without NetBIOS is possible only on Windows 200x/XP Professional clients and servers, as - well as with Samba-3. - </p></div></td></tr><tr class="question"><td align="left" valign="top"><a name="id393609"></a><a name="id393611"></a></td><td align="left" valign="top"><p> - Can I just use plain-text passwords with Samba? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes, you can configure Samba to use plain-text passwords, though this does create a few problems. - </p><p> - First, the use of <code class="filename">/etc/passwd</code>-based plain-text passwords requires that registry - modifications be made on all MS Windows client machines to enable plain-text passwords support. This - significantly diminishes the security of MS Windows client operation. Many network administrators - are bitterly opposed to doing this. - </p><p> - Second, Microsoft has not maintained plain-text password support since the default setting was made - disabling this. When network connections are dropped by the client, it is not possible to re-establish - the connection automatically. Users need to log off and then log on again. Plain-text password support - may interfere with recent enhancements that are part of the Microsoft move toward a more secure computing - environment. - </p><p> - Samba-3 supports Microsoft encrypted passwords. Be advised not to reintroduce plain-text password handling. - Just create user accounts by running <code class="literal">smbpasswd -a 'username'</code> - </p><p> - It is not possible to add a user to the <em class="parameter"><code>passdb backend</code></em> database unless there is - a UNIX system account for that user. On systems that run <code class="literal">winbindd</code> to access the Samba - PDC/BDC to provide Windows user and group accounts, the <em class="parameter"><code>idmap uid, idmap gid</code></em> ranges - set in the <code class="filename">smb.conf</code> file provide the local UID/GIDs needed for local identity management purposes. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393684"></a><a name="id393686"></a></td><td align="left" valign="top"><p> - What parameter in the <code class="filename">smb.conf</code> file is used to enable the use of encrypted passwords? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The parameter in the <code class="filename">smb.conf</code> file that controls this behavior is known as <em class="parameter"><code>encrypt - passwords</code></em>. The default setting for this in Samba-3 is <code class="constant">Yes (Enabled)</code>. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393723"></a><a name="id393725"></a></td><td align="left" valign="top"><p> - Is it necessary to specify <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = Yes</a> - when Samba-3 is configured as a domain member? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - No. This is the default behavior. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id393753"></a><a name="id393756"></a></td><td align="left" valign="top"><p> - Is it necessary to specify a <em class="parameter"><code>guest account</code></em> when Samba-3 is configured - as a domain member server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes. This is a local function on the server. The default setting is to use the UNIX account - <code class="constant">nobody</code>. If this account does not exist on the UNIX server, then it is - necessary to provide a <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account = an_account</a>, - where <code class="constant">an_account</code> is a valid local UNIX user account. - </p></td></tr></tbody></table></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id392369" href="#id392369" class="para">15</a>] </sup>TOSHARG2, Sect 4.5.1</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="appendix.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="RefSection.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="apa.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 15. A Collection of Useful Tidbits </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Appendix A. - <acronym class="acronym">GNU</acronym> General Public License version 3 - </td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/samba.css b/docs/htmldocs/Samba3-ByExample/samba.css deleted file mode 100644 index 3d926e8e74..0000000000 --- a/docs/htmldocs/Samba3-ByExample/samba.css +++ /dev/null @@ -1,80 +0,0 @@ -BODY { - font-family: helvetica, arial, lucida sans, sans-serif; - background-color: white; -} - -H1, H2, H3 { - color: blue; - font-size: 120%; - padding: 2px; - margin-top: 0px; -} - -H1 { - background-color: #EEEEFF; - color: blue; -} - -H2 { - background-color: #DDDDFF; - color: blue; -} - -H3 { - background-color: #CCCCFF; - color: blue; -} - -H4 { - color: blue; -} - -TR.qandadiv TD { - padding-top: 1em; -} - -DIV.navhead { - font-size: 80%; -} - -A:link { - color: #36F; -} - -A:visited { - color: #96C; -} - -A:active { - color: #F63; -} - -TR.question { - color: #33C; - font-weight: bold; -} - -TR.question TD { - padding-top: 1em; -} - -DIV.variablelist { - padding-left: 2em; - color: #33C; -} - -P { - color: black; -} - -DIV.note, DIV.warning, DIV.caution, DIV.tip, DIV.important { - border: dashed 1px; - background-color: #EEEEFF; - width: 40em; -} - -PRE.programlisting, PRE.screen { - border: #630 1px dashed; - color: #630; -} - diff --git a/docs/htmldocs/Samba3-ByExample/secure.html b/docs/htmldocs/Samba3-ByExample/secure.html deleted file mode 100644 index 600a6dc1c3..0000000000 --- a/docs/htmldocs/Samba3-ByExample/secure.html +++ /dev/null @@ -1,1859 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 3. Secure Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="small.html" title="Chapter 2. Small Office Networking"><link rel="next" href="Big500users.html" title="Chapter 4. The 500-User Office"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 3. Secure Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="small.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="Big500users.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 3. Secure Office Networking"><div class="titlepage"><div><div><h2 class="title"><a name="secure"></a>Chapter 3. Secure Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="secure.html#id330143">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#id330177">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id330386">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#id330398">Technical Issues</a></span></dt><dt><span class="sect2"><a href="secure.html#id330742">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id330776">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="secure.html#ch4bsc">Basic System Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#id331530">Samba Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4dhcpdns">Configuration of DHCP and DNS Servers</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4ptrcfg">Printer Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#procstart">Process Startup Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4valid">Validation</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4appscfg">Application Share Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#ch4wincfg">Windows Client Configuration</a></span></dt><dt><span class="sect2"><a href="secure.html#id335513">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="secure.html#id335566">Questions and Answers</a></span></dt></dl></div><p> - Congratulations, your Samba networking skills are developing nicely. You started out - with three simple networks in <a class="link" href="simple.html" title="Chapter 1. No-Frills Samba Servers">“No-Frills Samba Servers”</a>, and then in <a class="link" href="small.html" title="Chapter 2. Small Office Networking">“Small Office Networking”</a> - you designed and built a network that provides a high degree of flexibility, integrity, - and dependability. It was enough for the basic needs each was designed to fulfill. In - this chapter you address a more complex set of needs. The solution you explore - introduces you to basic features that are specific to Samba-3. - </p><p> - You should note that a working and secure solution could be implemented using Samba-2.2.x. - In the exercises presented here, you are gradually using more Samba-3-specific features, - so caution is advised for anyone who tries to use Samba-2.2.x with the guidance here given. - To avoid confusion, this book is all about Samba-3. Let's get the exercises in this - chapter underway. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id330143"></a>Introduction</h2></div></div></div><p> - You have made Mr. Meany a very happy man. Recently he paid you a fat bonus for work - well done. It is one year since the last network upgrade. You have been quite busy. - Two months ago Mr. Meany gave approval to hire Christine Roberson, who has taken over - general network management. Soon she will provide primary user support. You have - demonstrated that you can delegate responsibility and can plan and execute according - to that plan. Above all, you have shown Mr. Meany that you are a responsible person. - Today is a big day. Mr. Meany called you to his office at 9 a.m. for news you never - expected: You are going to take charge of business operations. Mr. Meany - is retiring and has entrusted the business to your capable hands. - </p><p> - Mr. Meany may be retiring from this company, but not from work. He is taking the - opportunity to develop Abmas Accounting into a larger and more substantial company. - He says that it took him many years to learn that there is no future in just running - a business. He now realizes there is great personal satisfaction in the creation of - career opportunities for people in the local community. He wants to do more for others, - as he is doing for you. Today he spent a lot of time talking about his grand plan - for growth, which you will deal with in the chapters ahead. - </p><p> - Over the past year, the growth projections were exceeded. The network has grown to - meet the needs of 130 users. Along with growth, the demand for improved services - and better functionality has also developed. You are about to make an interim - improvement and then hand over all Help desk and network maintenance to Christine. - Christine has professional certifications in Microsoft Windows as well as in Linux; - she is a hard worker and quite likable. Christine does not want to manage the department - (although she manages well). She gains job satisfaction when left to sort things out. - Occasionally she wants to work with you on a challenging problem. When you told her - about your move, she almost resigned, although she was reassured that a new manager would - be hired to run Information Technology, and she would be responsible only for operations. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id330177"></a>Assignment Tasks</h3></div></div></div><p> - You promised the staff Internet services including Web browsing, electronic mail, virus - protection, and a company Web site. Christine is eager to help turn the vision into - reality. Let's see how close you can get to the promises made. - </p><p> - The network you are about to deliver will service 130 users today. Within a year, - Abmas will aquire another company. Mr. Meany claims that within 2 years there will be - well over 500 users on the network. You have bought into the big picture, so prepare - for growth. You have purchased a new server and will implement a new network infrastructure. - </p><p> - You have decided to not recycle old network components. The only items that will be - carried forward are notebook computers. You offered staff new notebooks, but not - one person wanted the disruption for what was perceived as a marginal update. - You decided to give everyone, even the notebook user, a new desktop computer. - </p><p> - You procured a DSL Internet connection that provides 1.5 Mb/sec (bidirectional) - and a 10 Mb/sec ethernet port. You registered the domain - <code class="constant">abmas.us</code>, and the Internet Service Provider (ISP) is supplying - secondary DNS. Information furnished by your ISP is shown in <a class="link" href="secure.html#chap4netid" title="Table 3.1. Abmas.US ISP Information">“Abmas.US ISP Information”</a>. - </p><p> - It is of paramount priority that under no circumstances will Samba offer - service access from an Internet connection. You are paying an ISP to - give, as part of its value-added services, full firewall protection for your - connection to the outside world. The only services allowed in from - the Internet side are the following destination ports: <code class="constant">http/https (ports - 80 and 443), email (port 25), DNS (port 53)</code>. All Internet traffic - will be allowed out after network address translation (NAT). No internal IP addresses - are permitted through the NAT filter because complete privacy of internal network - operations must be assured. - </p><div class="table"><a name="chap4netid"></a><p class="title"><b>Table 3.1. Abmas.US ISP Information</b></p><div class="table-contents"><table summary="Abmas.US ISP Information" border="1"><colgroup><col align="left"><col align="center"></colgroup><thead><tr><th align="left">Parameter</th><th align="center">Value</th></tr></thead><tbody><tr><td align="left">Server IP Address</td><td align="center">123.45.67.66</td></tr><tr><td align="left">DSL Device IP Address</td><td align="center">123.45.67.65</td></tr><tr><td align="left">Network Address</td><td align="center">123.45.67.64/30</td></tr><tr><td align="left">Gateway Address</td><td align="center">123.45.54.65</td></tr><tr><td align="left">Primary DNS Server</td><td align="center">123.45.54.65</td></tr><tr><td align="left">Secondary DNS Server</td><td align="center">123.45.54.32</td></tr><tr><td align="left">Forwarding DNS Server</td><td align="center">123.45.12.23</td></tr></tbody></table></div></div><br class="table-break"><div class="figure"><a name="ch04net"></a><p class="title"><b>Figure 3.1. Abmas Network Topology 130 Users</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap4-net.png" width="351" alt="Abmas Network Topology 130 Users"></div></div></div><br class="figure-break"><p> - Christine recommended that desktop systems should be installed from a single cloned - master system that has a minimum of locally installed software and loads all software - off a central application server. The benefit of having the central application server - is that it allows single-point maintenance of all business applications, a more - efficient way to manage software. She further recommended installation of antivirus - software on workstations as well as on the Samba server. Christine knows the dangers - of potential virus infection and insists on a comprehensive approach to detective - as well as corrective action to protect network operations. - </p><p> - A significant concern is the problem of managing company growth. Recently, a number - of users had to share a PC while waiting for new machines to arrive. This presented - some problems with desktop computers and software installation into the new users' - desktop profiles. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id330386"></a>Dissection and Discussion</h2></div></div></div><p> - Many of the conclusions you draw here are obvious. Some requirements are not very clear - or may simply be your means of drawing the most out of Samba-3. Much can be done more simply - than you will demonstrate here, but keep in mind that the network must scale to at least 500 - users. This means that some functionality will be overdesigned for the current 130-user - environment. - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id330398"></a>Technical Issues</h3></div></div></div><p> - In this exercise we use a 24-bit subnet mask for the two local networks. This, - of course, limits our network to a maximum of 253 usable IP addresses. The network - address range chosen is one assigned by RFC1918 for private networks. - When the number of users on the network begins to approach the limit of usable - addresses, it is a good idea to switch to a network address specified in RFC1918 - in the 172.16.0.0/16 range. This is done in subsequent chapters. - </p><p> - <a class="indexterm" name="id330412"></a> - <a class="indexterm" name="id330419"></a> - The high growth rates projected are a good reason to use the <code class="constant">tdbsam</code> - passdb backend. The use of <code class="constant">smbpasswd</code> for the backend may result in - performance problems. The <code class="constant">tdbsam</code> passdb backend offers features that - are not available with the older, flat ASCII-based <code class="constant">smbpasswd</code> database. - </p><p> - <a class="indexterm" name="id330443"></a> - The proposed network design uses a single server to act as an Internet services host for - electronic mail, Web serving, remote administrative access via SSH, - Samba-based file and print services. This design is often chosen by sites that feel - they cannot afford or justify the cost or overhead of having separate servers. It must - be realized that if security of this type of server should ever be violated (compromised), - the whole network and all data is at risk. Many sites continue to choose this type - of solution; therefore, this chapter provides detailed coverage of key implementation - aspects. - </p><p> - Samba will be configured to specifically not operate on the Ethernet interface that is - directly connected to the Internet. - </p><p> - <a class="indexterm" name="id330462"></a> - <a class="indexterm" name="id330469"></a> - <a class="indexterm" name="id330475"></a> - <a class="indexterm" name="id330483"></a> - You know that your ISP is providing full firewall services, but you cannot rely on that. - Always assume that human error will occur, so be prepared by using Linux firewall facilities - based on <code class="literal">iptables</code> to effect NAT. Block all - incoming traffic except to permitted well-known ports. You must also allow incoming packets - to establish outgoing connections. You will permit all internal outgoing requests. - </p><p> - The configuration of Web serving, Web proxy services, electronic mail, and the details of - generic antivirus handling are beyond the scope of this book and therefore are not - covered except insofar as this affects Samba-3. - </p><p> - <a class="indexterm" name="id330507"></a> - Notebook computers are configured to use a network login when in the office and a - local account to log in while away from the office. Users store all work done in - transit (away from the office) by using a local share for work files. Standard procedures - dictate that on completion of the work that necessitates mobile file access, all - work files are moved back to secure storage on the office server. Staff is instructed - to not carry on any company notebook computer any files that are not absolutely required. - This is a preventative measure to protect client information as well as private business - records. - </p><p> - <a class="indexterm" name="id330527"></a> - All applications are served from the central server from a share called <code class="constant">apps</code>. - Microsoft Office XP Professional and OpenOffice 1.1.0 will be installed using a network - (or administrative) installation. Accounting and financial management software can also - be run only from the central application server. Notebook users are provided with - locally installed applications on a need-to-have basis only. - </p><p> - <a class="indexterm" name="id330543"></a> - The introduction of roaming profiles support means that users can move between - desktop computer systems without constraint while retaining full access to their data. - The desktop travels with them as they move. - </p><p> - <a class="indexterm" name="id330555"></a> - The DNS server implementation must now address both internal and external - needs. You forward DNS lookups to your ISP-provided server as well as the - <code class="constant">abmas.us</code> external secondary DNS server. - </p><p> - <a class="indexterm" name="id330569"></a> - <a class="indexterm" name="id330575"></a> - <a class="indexterm" name="id330584"></a> - Compared with the DHCP server configuration in <a class="link" href="small.html" title="Chapter 2. Small Office Networking">“Small Office Networking”</a>, <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>, the - configuration used in this example has to deal with the presence of an Internet connection. - The scope set for it ensures that no DHCP services will be offered on the external - connection. All printers are configured as DHCP clients so that the DHCP server assigns - the printer a fixed IP address by way of the Ethernet interface (MAC) address. One additional - feature of this DHCP server configuration file is the inclusion of parameters to allow dynamic - DNS (DDNS) operation. - </p><p> - This is the first implementation that depends on a correctly functioning DNS server. - Comprehensive steps are included to provide for a fully functioning DNS server that also - is enabled for DDNS operation. This means that DHCP clients can be autoregistered - with the DNS server. - </p><p> - You are taking the opportunity to manually set the netbios name of the Samba server to - a name other than what will be automatically resolved. You are doing this to ensure that - the machine has the same NetBIOS name on both network segments. - </p><p> - As in the previous network configuration, printing in this network configuration uses - direct raw printing (i.e., no smart printing and no print driver autodownload to Windows - clients). Printer drivers are installed on the Windows client manually. This is not - a problem because Christine is to install and configure one single workstation and - then clone that configuration, using Norton Ghost, to all workstations. Each machine is - identical, so this should pose no problem. - </p><div class="sect3" title="Hardware Requirements"><div class="titlepage"><div><div><h4 class="title"><a name="id330622"></a>Hardware Requirements</h4></div></div></div><p> - <a class="indexterm" name="id330630"></a> - This server runs a considerable number of services. From similarly configured Linux - installations, the approximate calculated memory requirements are as shown in - <a class="link" href="secure.html#ch4memoryest" title="Example 3.1. Estimation of Memory Requirements">“Estimation of Memory Requirements”</a>. - -</p><div class="example"><a name="ch4memoryest"></a><p class="title"><b>Example 3.1. Estimation of Memory Requirements</b></p><div class="example-contents"><pre class="screen"> -Application Memory per User 130 Users 500 Users - Name (MBytes) Total MBytes Total MBytes ------------ --------------- ------------ ------------ -DHCP 2.5 3 3 -DNS 16.0 16 16 -Samba (nmbd) 16.0 16 16 -Samba (winbind) 16.0 16 16 -Samba (smbd) 4.0 520 2000 -Apache 10.0 (20 User) 200 200 -CUPS 3.5 16 32 -Basic OS 256.0 256 256 - -------------- -------------- - Total: 1043 MBytes 2539 MBytes - -------------- -------------- -</pre></div></div><p><br class="example-break"> - You should add a safety margin of at least 50% to these estimates. The minimum - system memory recommended for initial startup 1 GB, but to permit the system - to scale to 500 users, it makes sense to provision the machine with 4 GB memory. - An initial configuration with only 1 GB memory would lead to early performance complaints - as the system load builds up. Given the low cost of memory, it does not make sense to - compromise in this area. - </p><p> - <a class="indexterm" name="id330669"></a> - Aggregate input/output loads should be considered for sizing network configuration as - well as disk subsystems. For network bandwidth calculations, one would typically use an - estimate of 0.1 MB/sec per user. This suggests that 100-Base-T (approx. 10 MB/sec) - would deliver below acceptable capacity for the initial user load. It is therefore a good - idea to begin with 1 Gb Ethernet cards for the two internal networks, each attached - to a 1 Gb Ethernet switch that provides connectivity to an expandable array of 100-Base-T - switched ports. - </p><p> - <a class="indexterm" name="id330683"></a> - <a class="indexterm" name="id330689"></a> - Considering the choice of 1 Gb Ethernet interfaces for the two local network segments, - the aggregate network I/O capacity will be 2100 Mb/sec (about 230 MB/sec), an I/O - demand that would require a fast disk storage I/O capability. Peak disk throughput is - limited by the disk subsystem chosen. It is desirable to provide the maximum - I/O bandwidth affordable. If a low-cost solution must be chosen, - 3Ware IDE RAID Controllers are a good choice. These controllers can be fitted into a - 64-bit, 66 MHz PCI-X slot. They appear to the operating system as a high-speed SCSI - controller that can operate at the peak of the PCI-X bandwidth (approximately 450 MB/sec). - Alternative SCSI-based hardware RAID controllers should also be considered. Alternately, - it makes sense to purchase well-known, branded hardware that has appropriate performance - specifications. As a minimum, one should attempt to provide a disk subsystem that can - deliver I/O rates of at least 100 MB/sec. - </p><p> - Disk storage requirements may be calculated as shown in <a class="link" href="secure.html#ch4diskest" title="Example 3.2. Estimation of Disk Storage Requirements">“Estimation of Disk Storage Requirements”</a>. - -</p><div class="example"><a name="ch4diskest"></a><p class="title"><b>Example 3.2. Estimation of Disk Storage Requirements</b></p><div class="example-contents"><pre class="screen"> -Corporate Data: 100 MBytes/user per year -Email Storage: 500 MBytes/user per year -Applications: 5000 MBytes -Safety Buffer: At least 50% - -Given 500 Users and 2 years: ------------------------------ - Corporate Data: 2 x 100 x 500 = 100000 MBytes = 100 GBytes - Email Storage: 2 x 500 x 500 = 500000 MBytes = 500 GBytes - Applications: 5000 MBytes = 5 GBytes - ---------------------------- - Total: 605 GBytes - Add 50% buffer 303 GBytes - Recommended Storage: 908 GBytes -</pre></div></div><p><br class="example-break"> - <a class="indexterm" name="id330731"></a> - The preferred storage capacity should be approximately 1 Terabyte. Use of RAID level 5 - with two hot spare drives would require an 8-drive by 200 GB capacity per drive array. - </p></div></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id330742"></a>Political Issues</h3></div></div></div><p> - Your industry is coming under increasing accountability pressures. Increased paranoia - is necessary so you can demonstrate that you have acted with due diligence. You must - not trust your Internet connection. - </p><p> - Apart from permitting more efficient management of business applications through use of - an application server, your primary reason for the decision to implement this is that it - gives you greater control over software licensing. - </p><p> - <a class="indexterm" name="id330760"></a> - You are well aware that the current configuration results in some performance issues - as the size of the desktop profile grows. Given that users use Microsoft Outlook - Express, you know that the storage implications of the <code class="constant">.PST</code> file - is something that needs to be addressed later. - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id330776"></a>Implementation</h2></div></div></div><p> - <a class="link" href="secure.html#ch04net" title="Figure 3.1. Abmas Network Topology 130 Users">“Abmas Network Topology 130 Users”</a> demonstrates the overall design of the network that you will implement. - </p><p> - The information presented here assumes that you are already familiar with many basic steps. - As this stands, the details provided already extend well beyond just the necessities of - Samba configuration. This decision is deliberate to ensure that key determinants - of a successful installation are not overlooked. This is the last case that documents - the finite minutiae of DHCP and DNS server configuration. Beyond the information provided - here, there are many other good reference books on these subjects. - </p><p> - The <code class="filename">smb.conf</code> file has the following noteworthy features: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - The NetBIOS name of the Samba server is set to <code class="constant">DIAMOND</code>. - </p></li><li class="listitem"><p> - The Domain name is set to <code class="constant">PROMISES</code>. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id330826"></a> - <a class="indexterm" name="id330832"></a> - <a class="indexterm" name="id330838"></a> - Ethernet interface <code class="constant">eth0</code> is attached to the Internet connection - and is externally exposed. This interface is explicitly not available for Samba to use. - Samba listens on this interface for broadcast messages but does not broadcast any - information on <code class="constant">eth0</code>, nor does it accept any connections from it. - This is achieved by way of the <em class="parameter"><code>interfaces</code></em> parameter and the - <em class="parameter"><code>bind interfaces only</code></em> entry. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id330868"></a> - <a class="indexterm" name="id330874"></a> - <a class="indexterm" name="id330881"></a> - The <em class="parameter"><code>passdb backend</code></em> parameter specifies the creation and use - of the <code class="constant">tdbsam</code> password backend. This is a binary database that - has excellent scalability for a large number of user account entries. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id330901"></a> - <a class="indexterm" name="id330907"></a> - <a class="indexterm" name="id330913"></a> - WINS serving is enabled by the <a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = Yes</a>, - and name resolution is set to use it by means of the - <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER" target="_top">name resolve order = wins bcast hosts</a> entry. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id330940"></a> - The Samba server is configured for use by Windows clients as a time server. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id330950"></a> - <a class="indexterm" name="id330957"></a> - <a class="indexterm" name="id330963"></a> - Samba is configured to directly interface with CUPS via the direct internal interface - that is provided by CUPS libraries. This is achieved with the - <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing = CUPS</a> as well as the - <a class="link" href="smb.conf.5.html#PRINTCAPNAME" target="_top">printcap name = CUPS</a> entries. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id330990"></a> - <a class="indexterm" name="id330996"></a> - <a class="indexterm" name="id331003"></a> - External interface scripts are provided to enable Samba to interface smoothly to - essential operating system functions for user and group management. This is important - to enable workstations to join the Domain and is also important so that you can use - the Windows NT4 Domain User Manager as well as the Domain Server Manager. These tools - are provided as part of the <code class="filename">SRVTOOLS.EXE</code> toolkit that can be - downloaded from the Microsoft FTP - <a class="ulink" href="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE" target="_top">site</a>. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id331028"></a> - The <code class="filename">smb.conf</code> file specifies that the Samba server will operate in (default) <em class="parameter"><code> - security = user</code></em> mode<sup>[<a name="id331045" href="#ftn.id331045" class="footnote">5</a>]</sup> - (User Mode). - </p></li><li class="listitem"><p> - <a class="indexterm" name="id331061"></a> - <a class="indexterm" name="id331067"></a> - Domain logon services as well as a Domain logon script are specified. The logon script - will be used to add robustness to the overall network configuration. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id331079"></a> - <a class="indexterm" name="id331085"></a> - <a class="indexterm" name="id331092"></a> - Roaming profiles are enabled through the specification of the parameter, - <a class="link" href="smb.conf.5.html#LOGONPATH" target="_top">logon path = \\%L\profiles\%U</a>. The value of this parameter translates the - <code class="constant">%L</code> to the name by which the Samba server is called by the client (for this - configuration, it translates to the name <code class="constant">DIAMOND</code>), and the <code class="constant">%U</code> - will translate to the name of the user within the context of the connection made to the profile share. - It is the administrator's responsibility to ensure there is a directory in the root of the - profile share for each user. This directory must be owned by the user also. An exception to this - requirement is when a profile is created for group use. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id331124"></a> - <a class="indexterm" name="id331130"></a> - Precautionary veto is effected for particular Windows file names that have been targeted by - virus-related activity. Additionally, Microsoft Office files are vetoed from opportunistic locking - controls. This should help to prevent lock contention-related file access problems. - </p></li><li class="listitem"><p> - Every user has a private home directory on the UNIX/Linux host. This is mapped to - a network drive that is the same for all users. - </p></li></ul></div><p> - The configuration of the server is the most complex so far. The following steps are used: - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p> - Basic System Configuration - </p></li><li class="listitem"><p> - Samba Configuration - </p></li><li class="listitem"><p> - DHCP and DNS Server Configuration - </p></li><li class="listitem"><p> - Printer Configuration - </p></li><li class="listitem"><p> - Process Start-up Configuration - </p></li><li class="listitem"><p> - Validation - </p></li><li class="listitem"><p> - Application Share Configuration - </p></li><li class="listitem"><p> - Windows Client Configuration - </p></li></ol></div><p> - The following sections cover each step in logical and defined detail. - </p><div class="sect2" title="Basic System Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ch4bsc"></a>Basic System Configuration</h3></div></div></div><p> - <a class="indexterm" name="id331207"></a> - The preparation in this section assumes that your SUSE Enterprise Linux Server 8.0 system has been - freshly installed. It prepares basic files so that the system is ready for comprehensive - operation in line with the network diagram shown in <a class="link" href="secure.html#ch04net" title="Figure 3.1. Abmas Network Topology 130 Users">“Abmas Network Topology 130 Users”</a>. - </p><div class="procedure" title="Procedure 3.1. Server Configuration Steps"><a name="id331220"></a><p class="title"><b>Procedure 3.1. Server Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id331231"></a> - Using the UNIX/Linux system tools, name the server <code class="constant">server.abmas.us</code>. - Verify that your hostname is correctly set by running: -</p><pre class="screen"> -<code class="prompt">root# </code> uname -n -server -</pre><p> - An alternate method to verify the hostname is: -</p><pre class="screen"> -<code class="prompt">root# </code> hostname -f -server.abmas.us -</pre><p> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id331268"></a> - <a class="indexterm" name="id331274"></a> - Edit your <code class="filename">/etc/hosts</code> file to include the primary names and addresses - of all network interfaces that are on the host server. This is necessary so that during - startup the system can resolve all its own names to the IP address prior to - startup of the DNS server. An example of entries that should be in the - <code class="filename">/etc/hosts</code> file is: -</p><pre class="screen"> -127.0.0.1 localhost -192.168.1.1 sleeth1.abmas.biz sleeth1 diamond -192.168.2.1 sleeth2.abmas.biz sleeth2 -123.45.67.66 server.abmas.us server -</pre><p> - You should check the startup order of your system. If the CUPS print server is started before - the DNS server (<code class="literal">named</code>), you should also include an entry for the printers - in the <code class="filename">/etc/hosts</code> file, as follows: -</p><pre class="screen"> -192.168.1.20 qmsa.abmas.biz qmsa -192.168.1.30 hplj6a.abmas.biz hplj6a -192.168.2.20 qmsf.abmas.biz qmsf -192.168.2.30 hplj6f.abmas.biz hplj6f -</pre><p> - <a class="indexterm" name="id331319"></a> - <a class="indexterm" name="id331325"></a> - <a class="indexterm" name="id331332"></a> - The printer entries are not necessary if <code class="literal">named</code> is started prior to - startup of <code class="literal">cupsd</code>, the CUPS daemon. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id331354"></a> - <a class="indexterm" name="id331361"></a> - <a class="indexterm" name="id331367"></a> - The host server is acting as a router between the two internal network segments as well - as for all Internet access. This necessitates that IP forwarding be enabled. This can be - achieved by adding to the <code class="filename">/etc/rc.d/boot.local</code> an entry as follows: -</p><pre class="screen"> -echo 1 > /proc/sys/net/ipv4/ip_forward -</pre><p> - To ensure that your kernel is capable of IP forwarding during configuration, you may - wish to execute that command manually also. This setting permits the Linux system to - act as a router.<sup>[<a name="id331388" href="#ftn.id331388" class="footnote">6</a>]</sup> - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id331400"></a> - <a class="indexterm" name="id331406"></a> - Installation of a basic firewall and NAT facility is necessary. - The following script can be installed in the <code class="filename">/usr/local/sbin</code> - directory. It is executed from the <code class="filename">/etc/rc.d/boot.local</code> startup - script. In your case, this script is called <code class="filename">abmas-netfw.sh</code>. The - script contents are shown in <a class="link" href="secure.html#ch4natfw" title="Example 3.3. NAT Firewall Configuration Script">“NAT Firewall Configuration Script”</a>. - -</p><div class="example"><a name="ch4natfw"></a><p class="title"><b>Example 3.3. NAT Firewall Configuration Script</b></p><div class="example-contents"><pre class="screen"> -#!/bin/sh -echo -e "\n\nLoading NAT firewall.\n" -IPTABLES=/usr/sbin/iptables -EXTIF="eth0" -INTIFA="eth1" -INTIFB="eth2" - -/sbin/depmod -a -/sbin/modprobe ip_tables -/sbin/modprobe ip_conntrack -/sbin/modprobe ip_conntrack_ftp -/sbin/modprobe iptable_nat -/sbin/modprobe ip_nat_ftp -$IPTABLES -P INPUT DROP -$IPTABLES -F INPUT -$IPTABLES -P OUTPUT ACCEPT -$IPTABLES -F OUTPUT -$IPTABLES -P FORWARD DROP -$IPTABLES -F FORWARD - -$IPTABLES -A INPUT -i lo -j ACCEPT -$IPTABLES -A INPUT -i $INTIFA -j ACCEPT -$IPTABLES -A INPUT -i $INTIFB -j ACCEPT -$IPTABLES -A INPUT -i $EXTIF -m state --state ESTABLISHED,RELATED -j ACCEPT -# Enable incoming traffic for: SSH, SMTP, DNS(tcp), HTTP, HTTPS -for i in 22 25 53 80 443 -do - $IPTABLES -A INPUT -i $EXTIF -p tcp --dport $i -j ACCEPT -done -# Allow DNS(udp) -$IPTABLES -A INPUT -i $EXTIF -p udp -dport 53 -j ACCEPT -echo "Allow all connections OUT and only existing and specified ones IN" -$IPTABLES -A FORWARD -i $EXTIF -o $INTIFA -m state \ - --state ESTABLISHED,RELATED -j ACCEPT -$IPTABLES -A FORWARD -i $EXTIF -o $INTIFB -m state \ - --state ESTABLISHED,RELATED -j ACCEPT -$IPTABLES -A FORWARD -i $INTIFA -o $EXTIF -j ACCEPT -$IPTABLES -A FORWARD -i $INTIFB -o $EXTIF -j ACCEPT -$IPTABLES -A FORWARD -j LOG -echo " Enabling SNAT (MASQUERADE) functionality on $EXTIF" -$IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE -echo "1" > /proc/sys/net/ipv4/ip_forward -echo -e "\nNAT firewall done.\n" -</pre></div></div><p><br class="example-break"> - </p></li><li class="step" title="Step 5"><p> - Execute the following to make the script executable: -</p><pre class="screen"> -<code class="prompt">root# </code> chmod 755 /usr/local/sbin/abmas-natfw.sh -</pre><p> - You must now edit <code class="filename">/etc/rc.d/boot.local</code> to add an entry - that runs your <code class="literal">abmas-natfw.sh</code> script. The following - entry works for you: -</p><pre class="screen"> -#! /bin/sh -# -# Copyright (c) 2002 SUSE Linux AG Nuernberg, Germany. -# All rights reserved. -# -# Author: Werner Fink, 1996 -# Burchard Steinbild, 1996 -# -# /etc/init.d/boot.local -# -# script with local commands to be executed from init on system startup -# -# Here you should add things that should happen directly after booting -# before we're going to the first run level. -# -/usr/local/sbin/abmas-natfw.sh -</pre><p> - </p></li></ol></div><p> - <a class="indexterm" name="id331512"></a> - The server is now ready for Samba configuration. During the validation step, you remove - the entry for the Samba server <code class="constant">diamond</code> from the <code class="filename">/etc/hosts</code> - file. This is done after you are satisfied that DNS-based name resolution is functioning correctly. - </p></div><div class="sect2" title="Samba Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="id331530"></a>Samba Configuration</h3></div></div></div><p> - When you have completed this section, the Samba server is ready for testing and validation; - however, testing and validation have to wait until DHCP, DNS, and printing (CUPS) services have - been configured. - </p><div class="procedure" title="Procedure 3.2. Samba Configuration Steps"><a name="id331541"></a><p class="title"><b>Procedure 3.2. Samba Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Install the Samba-3 binary RPM from the Samba-Team FTP site. Assuming that the binary - RPM file is called <code class="filename">samba-3.0.20-1.i386.rpm</code>, one way to install this - file is as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -Uvh samba-3.0.20-1.i386.rpm -</pre><p> - This operation must be performed while logged in as the <code class="literal">root</code> user. - Successful operation is clearly indicated. If this installation should fail for any reason, - refer to the operating system manufacturer's documentation for guidance. - </p></li><li class="step" title="Step 2"><p> - Install the <code class="filename">smb.conf</code> file shown in <a class="link" href="secure.html#promisnet" title="Example 3.4. 130 User Network with tdbsam [globals] Section">“130 User Network with tdbsam [globals] Section”</a>, <a class="link" href="secure.html#promisnetsvca" title="Example 3.5. 130 User Network with tdbsam Services Section Part A">“130 User Network with tdbsam Services Section Part A”</a>, - and <a class="link" href="secure.html#promisnetsvcb" title="Example 3.6. 130 User Network with tdbsam Services Section Part B">“130 User Network with tdbsam Services Section Part B”</a>. Concatenate (join) all three files to make a single <code class="filename">smb.conf</code> - file. The final, fully qualified path for this file should be <code class="filename">/etc/samba/smb.conf</code>. - -</p><div class="example"><a name="promisnet"></a><p class="title"><b>Example 3.4. 130 User Network with <span class="emphasis"><em>tdbsam</em></span> [globals] Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id331640"></a><em class="parameter"><code>workgroup = PROMISES</code></em></td></tr><tr><td><a class="indexterm" name="id331650"></a><em class="parameter"><code>netbios name = DIAMOND</code></em></td></tr><tr><td><a class="indexterm" name="id331661"></a><em class="parameter"><code>interfaces = eth1, eth2, lo</code></em></td></tr><tr><td><a class="indexterm" name="id331671"></a><em class="parameter"><code>bind interfaces only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331682"></a><em class="parameter"><code>passdb backend = tdbsam</code></em></td></tr><tr><td><a class="indexterm" name="id331692"></a><em class="parameter"><code>pam password change = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331702"></a><em class="parameter"><code>passwd program = /usr/bin/passwd %u</code></em></td></tr><tr><td><a class="indexterm" name="id331713"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n *Re-enter*new*password*%n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id331724"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id331734"></a><em class="parameter"><code>unix password sync = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331745"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id331755"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id331766"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id331776"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id331786"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id331797"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id331807"></a><em class="parameter"><code>time server = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331818"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id331828"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id331838"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id331849"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id331859"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id331870"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id331880"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -G '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id331891"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id331902"></a><em class="parameter"><code>shutdown script = /var/lib/samba/scripts/shutdown.sh</code></em></td></tr><tr><td><a class="indexterm" name="id331912"></a><em class="parameter"><code>abort shutdown script = /sbin/shutdown -c</code></em></td></tr><tr><td><a class="indexterm" name="id331923"></a><em class="parameter"><code>logon script = scripts\logon.bat</code></em></td></tr><tr><td><a class="indexterm" name="id331933"></a><em class="parameter"><code>logon path = \\%L\profiles\%U</code></em></td></tr><tr><td><a class="indexterm" name="id331944"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id331954"></a><em class="parameter"><code>logon home = \\%L\%U</code></em></td></tr><tr><td><a class="indexterm" name="id331964"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331975"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331985"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id331996"></a><em class="parameter"><code>utmp = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332006"></a><em class="parameter"><code>map acl inherit = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332016"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td><a class="indexterm" name="id332027"></a><em class="parameter"><code>cups options = Raw</code></em></td></tr><tr><td><a class="indexterm" name="id332037"></a><em class="parameter"><code>veto files = /*.eml/*.nws/*.{*}/</code></em></td></tr><tr><td><a class="indexterm" name="id332048"></a><em class="parameter"><code>veto oplock files = /*.doc/*.xls/*.mdb/</code></em></td></tr></table></div></div><p><br class="example-break"> - -</p><div class="example"><a name="promisnetsvca"></a><p class="title"><b>Example 3.5. 130 User Network with <span class="emphasis"><em>tdbsam</em></span> Services Section Part A</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id332085"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id332096"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id332106"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id332117"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id332135"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id332146"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id332156"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332167"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332177"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332187"></a><em class="parameter"><code>default devmode = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332198"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id332217"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id332227"></a><em class="parameter"><code>path = /var/lib/samba/netlogon</code></em></td></tr><tr><td><a class="indexterm" name="id332237"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332248"></a><em class="parameter"><code>locking = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[profiles]</code></em></td></tr><tr><td><a class="indexterm" name="id332267"></a><em class="parameter"><code>comment = Profile Share</code></em></td></tr><tr><td><a class="indexterm" name="id332277"></a><em class="parameter"><code>path = /var/lib/samba/profiles</code></em></td></tr><tr><td><a class="indexterm" name="id332287"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id332298"></a><em class="parameter"><code>profile acls = Yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id332317"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id332327"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id332337"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><p><br class="example-break"> - -</p><div class="example"><a name="promisnetsvcb"></a><p class="title"><b>Example 3.6. 130 User Network with <span class="emphasis"><em>tdbsam</em></span> Services Section Part B</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[service]</code></em></td></tr><tr><td><a class="indexterm" name="id332375"></a><em class="parameter"><code>comment = Financial Services Files</code></em></td></tr><tr><td><a class="indexterm" name="id332386"></a><em class="parameter"><code>path = /data/service</code></em></td></tr><tr><td><a class="indexterm" name="id332396"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[pidata]</code></em></td></tr><tr><td><a class="indexterm" name="id332415"></a><em class="parameter"><code>comment = Property Insurance Files</code></em></td></tr><tr><td><a class="indexterm" name="id332425"></a><em class="parameter"><code>path = /data/pidata</code></em></td></tr><tr><td><a class="indexterm" name="id332436"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[apps]</code></em></td></tr><tr><td><a class="indexterm" name="id332454"></a><em class="parameter"><code>comment = Application Files</code></em></td></tr><tr><td><a class="indexterm" name="id332465"></a><em class="parameter"><code>path = /apps</code></em></td></tr><tr><td><a class="indexterm" name="id332475"></a><em class="parameter"><code>read only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id332486"></a><em class="parameter"><code>admin users = bjordan</code></em></td></tr></table></div></div><p><br class="example-break"> - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id332503"></a><a class="indexterm" name="id332508"></a> - Add the <code class="constant">root</code> user to the password backend as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -a root -New SMB password: XXXXXXXX -Retype new SMB password: XXXXXXXX -<code class="prompt">root# </code> -</pre><p> - The <code class="constant">root</code> account is the UNIX equivalent of the Windows Domain Administrator. - This account is essential in the regular maintenance of your Samba server. It must never be - deleted. If for any reason the account is deleted, you may not be able to recreate this account - without considerable trouble. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id332548"></a> - Create the username map file to permit the <code class="constant">root</code> account to be called - <code class="constant">Administrator</code> from the Windows network environment. To do this, create - the file <code class="filename">/etc/samba/smbusers</code> with the following contents: -</p><pre class="screen"> -#### -# User mapping file -#### -# File Format -# ----------- -# Unix_ID = Windows_ID -# -# Examples: -# root = Administrator -# janes = "Jane Smith" -# jimbo = Jim Bones -# -# Note: If the name contains a space it must be double quoted. -# In the example above the name 'jimbo' will be mapped to Windows -# user names 'Jim' and 'Bones' because the space was not quoted. -####################################################################### -root = Administrator -#### -# End of File -#### -</pre><p> - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id332583"></a> - <a class="indexterm" name="id332590"></a> - <a class="indexterm" name="id332600"></a> - <a class="indexterm" name="id332611"></a> - Create and map Windows Domain Groups to UNIX groups. A sample script is provided in <a class="link" href="small.html" title="Chapter 2. Small Office Networking">“Small Office Networking”</a>, - <a class="link" href="small.html#initGrps" title="Example 2.1. Script to Map Windows NT Groups to UNIX Groups">“Script to Map Windows NT Groups to UNIX Groups”</a>. Create a file containing this script. We called ours - <code class="filename">/etc/samba/initGrps.sh</code>. Set this file so it can be executed, - and then execute the script. Sample output should be as follows: - -</p><div class="example"><a name="ch4initGrps"></a><p class="title"><b>Example 3.7. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id332645"></a><pre class="screen"> -#!/bin/bash -# -# initGrps.sh -# - -# Create UNIX groups -groupadd acctsdep -groupadd finsrvcs - -# Map Windows Domain Groups to UNIX groups -net groupmap add ntgroup="Domain Admins" unixgroup=root type=d -net groupmap add ntgroup="Domain Users" unixgroup=users type=d -net groupmap add ntgroup="Domain Guests" unixgroup=nobody type=d - -# Add Functional Domain Groups -net groupmap add ntgroup="Accounts Dept" unixgroup=acctsdep type=d -net groupmap add ntgroup="Financial Services" unixgroup=finsrvcs type=d -net groupmap add ntgroup="Insurance Group" unixgroup=piops type=d - -# Map Windows NT machine local groups to local UNIX groups -# Mapping of local groups is not necessary and not functional -# for this installation. -</pre></div></div><p><br class="example-break"> - -</p><pre class="screen"> -<code class="prompt">root# </code> chmod 755 initGrps.sh -<code class="prompt">root# </code> /etc/samba # ./initGrps.sh -Updated mapping entry for Domain Admins -Updated mapping entry for Domain Users -Updated mapping entry for Domain Guests -No rid or sid specified, choosing algorithmic mapping -Successfully added group Accounts Dept to the mapping db -No rid or sid specified, choosing algorithmic mapping -Successfully added group Domain Guests to the mapping db - -<code class="prompt">root# </code> /etc/samba # net groupmap list | sort -Account Operators (S-1-5-32-548) -> -1 -Accounts Dept (S-1-5-21-179504-2437109-488451-2003) -> acctsdep -Administrators (S-1-5-32-544) -> -1 -Backup Operators (S-1-5-32-551) -> -1 -Domain Admins (S-1-5-21-179504-2437109-488451-512) -> root -Domain Guests (S-1-5-21-179504-2437109-488451-514) -> nobody -Domain Users (S-1-5-21-179504-2437109-488451-513) -> users -Financial Services (S-1-5-21-179504-2437109-488451-2005) -> finsrvcs -Guests (S-1-5-32-546) -> -1 -Power Users (S-1-5-32-547) -> -1 -Print Operators (S-1-5-32-550) -> -1 -Replicators (S-1-5-32-552) -> -1 -System Operators (S-1-5-32-549) -> -1 -Users (S-1-5-32-545) -> -1 -</pre><p> - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id332701"></a> - <a class="indexterm" name="id332708"></a> - <a class="indexterm" name="id332714"></a> - <a class="indexterm" name="id332720"></a> - <a class="indexterm" name="id332726"></a> - <a class="indexterm" name="id332733"></a> - <a class="indexterm" name="id332741"></a> - There is one preparatory step without which you will not have a working Samba - network environment. You must add an account for each network user. - For each user who needs to be given a Windows Domain account, make an entry in the - <code class="filename">/etc/passwd</code> file as well as in the Samba password backend. - Use the system tool of your choice to create the UNIX system account, and use the Samba - <code class="literal">smbpasswd</code> to create a Domain user account. - There are a number of tools for user management under UNIX, such as - <code class="literal">useradd</code>, and <code class="literal">adduser</code>, as well as a plethora of custom - tools. You also want to create a home directory for each user. - You can do this by executing the following steps for each user: -</p><pre class="screen"> -<code class="prompt">root# </code> useradd -m <em class="parameter"><code>username</code></em> -<code class="prompt">root# </code> passwd <em class="parameter"><code>username</code></em> -Changing password for <em class="parameter"><code>username</code></em>. -New password: XXXXXXXX -Re-enter new password: XXXXXXXX -Password changed -<code class="prompt">root# </code> smbpasswd -a <em class="parameter"><code>username</code></em> -New SMB password: XXXXXXXX -Retype new SMB password: XXXXXXXX -Added user <em class="parameter"><code>username</code></em>. -</pre><p> - You do of course use a valid user login ID in place of <em class="parameter"><code>username</code></em>. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id332838"></a> - <a class="indexterm" name="id332846"></a> - <a class="indexterm" name="id332854"></a> - Using the preferred tool for your UNIX system, add each user to the UNIX groups created - previously as necessary. File system access control will be based on UNIX group membership. - </p></li><li class="step" title="Step 8"><p> - Create the directory mount point for the disk subsystem that can be mounted to provide - data storage for company files. In this case the mount point is indicated in the <code class="filename">smb.conf</code> - file is <code class="filename">/data</code>. Format the file system as required, and mount the formatted - file system partition using appropriate system tools. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id332889"></a> - Create the top-level file storage directories for data and applications as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /data/{accounts,finsrvcs} -<code class="prompt">root# </code> mkdir -p /apps -<code class="prompt">root# </code> chown -R root:root /data -<code class="prompt">root# </code> chown -R root:root /apps -<code class="prompt">root# </code> chown -R bjordan:acctsdep /data/accounts -<code class="prompt">root# </code> chown -R bjordan:finsrvcs /data/finsrvcs -<code class="prompt">root# </code> chmod -R ug+rwxs,o-rwx /data -<code class="prompt">root# </code> chmod -R ug+rwx,o+rx-w /apps -</pre><p> - Each department is responsible for creating its own directory structure within the departmental - share. The directory root of the <code class="literal">accounts</code> share is <code class="filename">/data/accounts</code>. - The directory root of the <code class="literal">finsvcs</code> share is <code class="filename">/data/finsvcs</code>. - The <code class="filename">/apps</code> directory is the root of the <code class="constant">apps</code> share - that provides the application server infrastructure. - </p></li><li class="step" title="Step 10"><p> - The <code class="filename">smb.conf</code> file specifies an infrastructure to support roaming profiles and network - logon services. You can now create the file system infrastructure to provide the - locations on disk that these services require. Adequate planning is essential, - since desktop profiles can grow to be quite large. For planning purposes, a minimum of - 200 MB of storage should be allowed per user for profile storage. The following - commands create the directory infrastructure needed: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /var/spool/samba -<code class="prompt">root# </code> mkdir -p /var/lib/samba/{netlogon/scripts,profiles} -<code class="prompt">root# </code> chown -R root:root /var/spool/samba -<code class="prompt">root# </code> chown -R root:root /var/lib/samba -<code class="prompt">root# </code> chmod a+rwxt /var/spool/samba -<code class="prompt">root# </code> chmod 2775 /var/lib/samba/profiles -<code class="prompt">root# </code> chgrp users /var/lib/samba/profiles -</pre><p> - For each user account that is created on the system, the following commands should be - executed: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir /var/lib/samba/profiles/'username' -<code class="prompt">root# </code> chown 'username':users /var/lib/samba/profiles/'username' -<code class="prompt">root# </code> chmod ug+wrx,o+rx,-w /var/lib/samba/profiles/'username' -</pre><p> - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id333063"></a> - <a class="indexterm" name="id333069"></a> - <a class="indexterm" name="id333075"></a> - Create a logon script. It is important that each line is correctly terminated with - a carriage return and line-feed combination (i.e., DOS encoding). The following procedure - works if the right tools (<code class="constant">unix2dos</code> and <code class="constant">dos2unix</code>) are installed. - First, create a file called <code class="filename">/var/lib/samba/netlogon/scripts/logon.bat.unix</code> - with the following contents: -</p><pre class="screen"> -net time \\diamond /set /yes -net use h: /home -net use p: \\diamond\apps -</pre><p> - Convert the UNIX file to a DOS file using the <code class="literal">unix2dos</code> as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> unix2dos < /var/lib/samba/netlogon/scripts/logon.bat.unix \ - > /var/lib/samba/netlogon/scripts/logon.bat -</pre><p> - </p></li></ol></div></div><div class="sect2" title="Configuration of DHCP and DNS Servers"><div class="titlepage"><div><div><h3 class="title"><a name="ch4dhcpdns"></a>Configuration of DHCP and DNS Servers</h3></div></div></div><p> - DHCP services are a basic component of the entire network client installation. DNS operation is - foundational to Internet access as well as to trouble-free operation of local networking. When - you have completed this section, the server should be ready for solid duty operation. - </p><div class="procedure" title="Procedure 3.3. DHCP and DNS Server Configuration Steps"><a name="id333134"></a><p class="title"><b>Procedure 3.3. DHCP and DNS Server Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id333145"></a> - Create a file called <code class="filename">/etc/dhcpd.conf</code> with the contents as - shown in <a class="link" href="secure.html#prom-dhcp" title="Example 3.8. DHCP Server Configuration File /etc/dhcpd.conf">“DHCP Server Configuration File /etc/dhcpd.conf”</a>. - -</p><div class="example"><a name="prom-dhcp"></a><p class="title"><b>Example 3.8. DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><pre class="screen"> -# Abmas Accounting Inc. -default-lease-time 86400; -max-lease-time 172800; -default-lease-time 86400; -option ntp-servers 192.168.1.1; -option domain-name "abmas.biz"; -option domain-name-servers 192.168.1.1, 192.168.2.1; -option netbios-name-servers 192.168.1.1, 192.168.2.1; -option netbios-node-type 8; ### Node type = Hybrid ### -ddns-updates on; ### Dynamic DNS enabled ### -ddns-update-style interim; - -subnet 192.168.1.0 netmask 255.255.255.0 { - range dynamic-bootp 192.168.1.128 192.168.1.254; - option subnet-mask 255.255.255.0; - option routers 192.168.1.1; - allow unknown-clients; - host qmsa { - hardware ethernet 08:00:46:7a:35:e4; - fixed-address 192.168.1.20; - } - host hplj6a { - hardware ethernet 00:03:47:cb:81:e0; - fixed-address 192.168.1.30; - } - } -subnet 192.168.2.0 netmask 255.255.255.0 { - range dynamic-bootp 192.168.2.128 192.168.2.254; - option subnet-mask 255.255.255.0; - option routers 192.168.2.1; - allow unknown-clients; - host qmsf { - hardware ethernet 01:04:31:db:e1:c0; - fixed-address 192.168.1.20; - } - host hplj6f { - hardware ethernet 00:03:47:cf:83:e2; - fixed-address 192.168.2.30; - } - } -subnet 127.0.0.0 netmask 255.0.0.0 { - } -subnet 123.45.67.64 netmask 255.255.255.252 { - } -</pre></div></div><p><br class="example-break"> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id333199"></a> - Create a file called <code class="filename">/etc/named.conf</code> that has the combined contents - of the <a class="link" href="secure.html#ch4namedcfg" title="Example 3.9. DNS Master Configuration File /etc/named.conf Master Section">“DNS Master Configuration File /etc/named.conf Master Section”</a>, <a class="link" href="secure.html#ch4namedvarfwd" title="Example 3.10. DNS Master Configuration File /etc/named.conf Forward Lookup Definition Section">“DNS Master Configuration File /etc/named.conf Forward Lookup Definition Section”</a>, and - <a class="link" href="secure.html#ch4namedvarrev" title="Example 3.11. DNS Master Configuration File /etc/named.conf Reverse Lookup Definition Section">“DNS Master Configuration File /etc/named.conf Reverse Lookup Definition Section”</a> files that are concatenated (merged) in this - specific order. - </p></li><li class="step" title="Step 3"><p> - Create the files shown in their respective directories as shown in <a class="link" href="secure.html#namedrscfiles" title="Table 3.2. DNS (named) Resource Files">DNS - (named) Resource Files</a>. - - </p><div class="table"><a name="namedrscfiles"></a><p class="title"><b>Table 3.2. DNS (named) Resource Files</b></p><div class="table-contents"><table summary="DNS (named) Resource Files" border="1"><colgroup><col align="left"><col align="left"></colgroup><thead><tr><th align="left">Reference</th><th align="left">File Location</th></tr></thead><tbody><tr><td align="left"><a class="link" href="appendix.html#loopback" title="Example 15.3. DNS Localhost Forward Zone File: /var/lib/named/localhost.zone">“DNS Localhost Forward Zone File: /var/lib/named/localhost.zone”</a></td><td align="left">/var/lib/named/localhost.zone</td></tr><tr><td align="left"><a class="link" href="appendix.html#dnsloopy" title="Example 15.4. DNS Localhost Reverse Zone File: /var/lib/named/127.0.0.zone">“DNS Localhost Reverse Zone File: /var/lib/named/127.0.0.zone”</a></td><td align="left">/var/lib/named/127.0.0.zone</td></tr><tr><td align="left"><a class="link" href="appendix.html#roothint" title="Example 15.5. DNS Root Name Server Hint File: /var/lib/named/root.hint">“DNS Root Name Server Hint File: /var/lib/named/root.hint”</a></td><td align="left">/var/lib/named/root.hint</td></tr><tr><td align="left"><a class="link" href="secure.html#abmasbiz" title="Example 3.14. DNS Abmas.biz Forward Zone File">“DNS Abmas.biz Forward Zone File”</a></td><td align="left">/var/lib/named/master/abmas.biz.hosts</td></tr><tr><td align="left"><a class="link" href="secure.html#abmasus" title="Example 3.15. DNS Abmas.us Forward Zone File">“DNS Abmas.us Forward Zone File”</a></td><td align="left">/var/lib/named/abmas.us.hosts</td></tr><tr><td align="left"><a class="link" href="secure.html#eth1zone" title="Example 3.12. DNS 192.168.1 Reverse Zone File">“DNS 192.168.1 Reverse Zone File”</a></td><td align="left">/var/lib/named/192.168.1.0.rev</td></tr><tr><td align="left"><a class="link" href="secure.html#eth2zone" title="Example 3.13. DNS 192.168.2 Reverse Zone File">“DNS 192.168.2 Reverse Zone File”</a></td><td align="left">/var/lib/named/192.168.2.0.rev</td></tr></tbody></table></div></div><p><br class="table-break"> - -</p><div class="example"><a name="ch4namedcfg"></a><p class="title"><b>Example 3.9. DNS Master Configuration File <code class="filename">/etc/named.conf</code> Master Section</b></p><div class="example-contents"><a class="indexterm" name="id333369"></a><pre class="screen"> -### -# Abmas Biz DNS Control File -### -# Date: November 15, 2003 -### -options { - directory "/var/lib/named"; - forwarders { - 123.45.12.23; - }; - forward first; - listen-on { - mynet; - }; - auth-nxdomain yes; - multiple-cnames yes; - notify no; -}; - -zone "." in { - type hint; - file "root.hint"; -}; - -zone "localhost" in { - type master; - file "localhost.zone"; -}; - -zone "0.0.127.in-addr.arpa" in { - type master; - file "127.0.0.zone"; -}; - -acl mynet { - 192.168.1.0/24; - 192.168.2.0/24; - 127.0.0.1; -}; - -acl seconddns { - 123.45.54.32; -}; - -</pre></div></div><p><br class="example-break"> - -</p><div class="example"><a name="ch4namedvarfwd"></a><p class="title"><b>Example 3.10. DNS Master Configuration File <code class="filename">/etc/named.conf</code> Forward Lookup Definition Section</b></p><div class="example-contents"><pre class="screen"> -zone "abmas.biz" { - type master; - file "/var/lib/named/master/abmas.biz.hosts"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; - -zone "abmas.us" { - type master; - file "/var/lib/named/master/abmas.us.hosts"; - allow-query { - any; - }; - allow-transfer { - seconddns; - }; -}; -</pre></div></div><p><br class="example-break"> - -</p><div class="example"><a name="ch4namedvarrev"></a><p class="title"><b>Example 3.11. DNS Master Configuration File <code class="filename">/etc/named.conf</code> Reverse Lookup Definition Section</b></p><div class="example-contents"><pre class="screen"> -zone "1.168.192.in-addr.arpa" { - type master; - file "/var/lib/named/master/192.168.1.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; - -zone "2.168.192.in-addr.arpa" { - type master; - file "/var/lib/named/master/192.168.2.0.rev"; - allow-query { - mynet; - }; - allow-transfer { - mynet; - }; - allow-update { - mynet; - }; -}; -</pre></div></div><p><br class="example-break"> - -</p><div class="example"><a name="eth1zone"></a><p class="title"><b>Example 3.12. DNS 192.168.1 Reverse Zone File</b></p><div class="example-contents"><pre class="screen"> -$ORIGIN . -$TTL 38400 ; 10 hours 40 minutes -1.168.192.in-addr.arpa IN SOA sleeth.abmas.biz. root.abmas.biz. ( - 2003021825 ; serial - 10800 ; refresh (3 hours) - 3600 ; retry (1 hour) - 604800 ; expire (1 week) - 38400 ; minimum (10 hours 40 minutes) - ) - NS sleeth1.abmas.biz. -$ORIGIN 1.168.192.in-addr.arpa. -1 PTR sleeth1.abmas.biz. -20 PTR qmsa.abmas.biz. -30 PTR hplj6a.abmas.biz. -</pre></div></div><p><br class="example-break"> - -</p><div class="example"><a name="eth2zone"></a><p class="title"><b>Example 3.13. DNS 192.168.2 Reverse Zone File</b></p><div class="example-contents"><pre class="screen"> -$ORIGIN . -$TTL 38400 ; 10 hours 40 minutes -2.168.192.in-addr.arpa IN SOA sleeth.abmas.biz. root.abmas.biz. ( - 2003021825 ; serial - 10800 ; refresh (3 hours) - 3600 ; retry (1 hour) - 604800 ; expire (1 week) - 38400 ; minimum (10 hours 40 minutes) - ) - NS sleeth2.abmas.biz. -$ORIGIN 2.168.192.in-addr.arpa. -1 PTR sleeth2.abmas.biz. -20 PTR qmsf.abmas.biz. -30 PTR hplj6f.abmas.biz. -</pre></div></div><p><br class="example-break"> - -</p><div class="example"><a name="abmasbiz"></a><p class="title"><b>Example 3.14. DNS Abmas.biz Forward Zone File</b></p><div class="example-contents"><pre class="screen"> -$ORIGIN . -$TTL 38400 ; 10 hours 40 minutes -abmas.biz IN SOA sleeth1.abmas.biz. root.abmas.biz. ( - 2003021833 ; serial - 10800 ; refresh (3 hours) - 3600 ; retry (1 hour) - 604800 ; expire (1 week) - 38400 ; minimum (10 hours 40 minutes) - ) - NS dns.abmas.biz. - MX 10 mail.abmas.biz. -$ORIGIN abmas.biz. -sleeth1 A 192.168.1.1 -sleeth2 A 192.168.2.1 -qmsa A 192.168.1.20 -hplj6a A 192.168.1.30 -qmsf A 192.168.2.20 -hplj6f A 192.168.2.30 -dns CNAME sleeth1 -diamond CNAME sleeth1 -mail CNAME sleeth1 -</pre></div></div><p><br class="example-break"> - -</p><div class="example"><a name="abmasus"></a><p class="title"><b>Example 3.15. DNS Abmas.us Forward Zone File</b></p><div class="example-contents"><pre class="screen"> -$ORIGIN . -$TTL 38400 ; 10 hours 40 minutes -abmas.us IN SOA server.abmas.us. root.abmas.us. ( - 2003021833 ; serial - 10800 ; refresh (3 hours) - 3600 ; retry (1 hour) - 604800 ; expire (1 week) - 38400 ; minimum (10 hours 40 minutes) - ) - NS dns.abmas.us. - NS dns2.abmas.us. - MX 10 mail.abmas.us. -$ORIGIN abmas.us. -server A 123.45.67.66 -dns2 A 123.45.54.32 -gw A 123.45.67.65 -www CNAME server -mail CNAME server -dns CNAME server -</pre></div></div><p><br class="example-break"> - - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id333533"></a><a class="indexterm" name="id333539"></a> - All DNS name resolution should be handled locally. To ensure that the server is configured - correctly to handle this, edit <code class="filename">/etc/resolv.conf</code> to have the following - content: -</p><pre class="screen"> -search abmas.us abmas.biz -nameserver 127.0.0.1 -nameserver 123.45.54.23 -</pre><p> - <a class="indexterm" name="id333561"></a> - This instructs the name resolver function (when configured correctly) to ask the DNS server - that is running locally to resolve names to addresses. In the event that the local name server - is not available, ask the name server provided by the ISP. The latter, of course, does not resolve - purely local names to IP addresses. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id333580"></a> - The final step is to edit the <code class="filename">/etc/nsswitch.conf</code> file. - This file controls the operation of the various resolver libraries that are part of the Linux - Glibc libraries. Edit this file so that it contains the following entries: -</p><pre class="screen"> -hosts: files dns wins -</pre><p> - </p></li></ol></div><p> - The basic DHCP and DNS services are now ready for validation testing. Before you can proceed, - there are a few more steps along the road. First, configure the print spooling and print - processing system. Then you can configure the server so that all services - start automatically on reboot. You must also manually start all services prior to validation testing. - </p></div><div class="sect2" title="Printer Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ch4ptrcfg"></a>Printer Configuration</h3></div></div></div><p> - Network administrators who are new to CUPS based-printing typically experience some difficulty mastering - its powerful features. The steps outlined in this section are designed to navigate around the distractions - of learning CUPS. Instead of implementing smart features and capabilities, our approach is to use it as a - transparent print queue that performs no filtering, and only minimal handling of each print job that is - submitted to it. In other words, our configuration turns CUPS into a raw-mode print queue. This means that - the correct printer driver must be installed on all clients. - </p><div class="procedure" title="Procedure 3.4. Printer Configuration Steps"><a name="id333627"></a><p class="title"><b>Procedure 3.4. Printer Configuration Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure each printer to be a DHCP client, carefully following the manufacturer's guidelines. - </p></li><li class="step" title="Step 2"><p> - Follow the instructions in the printer manufacturer's manuals to permit printing to port 9100. - Use any other port the manufacturer specifies for direct-mode raw printing, and adjust the - port as necessary in the following example commands. - This allows the CUPS spooler to print using raw mode protocols. - <a class="indexterm" name="id333649"></a> - <a class="indexterm" name="id333656"></a> - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id333669"></a><a class="indexterm" name="id333677"></a> - Configure the CUPS Print Queues as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> lpadmin -p qmsa -v socket://qmsa.abmas.biz:9100 -E -<code class="prompt">root# </code> lpadmin -p hplj6a -v socket://hplj6a.abmas.biz:9100 -E -<code class="prompt">root# </code> lpadmin -p qmsf -v socket://qmsf.abmas.biz:9100 -E -<code class="prompt">root# </code> lpadmin -p hplj6f -v socket://hplj6f.abmas.biz:9100 -E -</pre><p> - <a class="indexterm" name="id333717"></a> - This creates the necessary print queues with no assigned print filter. - </p></li><li class="step" title="Step 4"><p><a class="indexterm" name="id333731"></a> - Print queues may not be enabled at creation. Use <code class="literal">lpc stat</code> to check - the status of the print queues and, if necessary, make certain that the queues you have - just created are enabled by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/bin/enable qmsa -<code class="prompt">root# </code> /usr/bin/enable hplj6a -<code class="prompt">root# </code> /usr/bin/enable qmsf -<code class="prompt">root# </code> /usr/bin/enable hplj6f -</pre><p> - </p></li><li class="step" title="Step 5"><p><a class="indexterm" name="id333783"></a> - Even though your print queues may be enabled, it is still possible that they - are not accepting print jobs. A print queue services incoming printing - requests only when configured to do so. Ensure that your print queues are - set to accept incoming jobs by executing the following commands: -</p><pre class="screen"> -<code class="prompt">root# </code> /usr/sbin/accept qmsa -<code class="prompt">root# </code> /usr/sbin/accept hplj6a -<code class="prompt">root# </code> /usr/sbin/accept qmsf -<code class="prompt">root# </code> /usr/sbin/accept hplj6f -</pre><p> - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id333831"></a> - <a class="indexterm" name="id333838"></a> - <a class="indexterm" name="id333844"></a> - Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream application/vnd.cups-raw 0 - -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id333871"></a> - Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream -</pre><p> - </p></li><li class="step" title="Step 8"><p> - Printing drivers are installed on each network client workstation. - </p></li></ol></div><p> - Note: If the parameter <em class="parameter"><code>cups options = Raw</code></em> is specified in the <code class="filename">smb.conf</code> file, - the last two steps can be omitted with CUPS version 1.1.18, or later. - </p><p> - The UNIX system print queues have been configured and are ready for validation testing. - </p></div><div class="sect2" title="Process Startup Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="procstart"></a>Process Startup Configuration</h3></div></div></div><p> - <a class="indexterm" name="id333932"></a> - There are two essential steps to process startup configuration. First, the process - must be configured so that it automatically restarts each time the server - is rebooted. This step involves use of the <code class="literal">chkconfig</code> tool that - creates the appropriate symbolic links from the master daemon control file that is - located in the <code class="filename">/etc/rc.d</code> directory, to the <code class="filename">/etc/rc'x'.d</code> - directories. Links are created so that when the system run level is changed, the - necessary start or kill script is run. - </p><p> - <a class="indexterm" name="id333964"></a> - <a class="indexterm" name="id333970"></a> - <a class="indexterm" name="id333977"></a> - <a class="indexterm" name="id333984"></a> - <a class="indexterm" name="id333991"></a> - In the event that a service is not run as a daemon, but via the internetworking - super daemon (<code class="literal">inetd</code> or <code class="literal">xinetd</code>), then the <code class="literal">chkconfig</code> - tool makes the necessary entries in the <code class="filename">/etc/xinetd.d</code> directory - and sends a hang-up (HUP) signal to the the super daemon, thus forcing it to - re-read its control files. - </p><p> - Last, each service must be started to permit system validation to proceed. - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Use the standard system tool to configure each service to restart - automatically at every system reboot. For example, - <a class="indexterm" name="id334038"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig dhpcd on -<code class="prompt">root# </code> chkconfig named on -<code class="prompt">root# </code> chkconfig cups on -<code class="prompt">root# </code> chkconfig smb on -</pre><p> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id334080"></a> - <a class="indexterm" name="id334087"></a> - <a class="indexterm" name="id334094"></a> - Now start each service to permit the system to be validated. - Execute each of the following in the sequence shown: - -</p><pre class="screen"> -<code class="prompt">root# </code> /etc/rc.d/init.d/dhcpd restart -<code class="prompt">root# </code> /etc/rc.d/init.d/named restart -<code class="prompt">root# </code> /etc/rc.d/init.d/cups restart -<code class="prompt">root# </code> /etc/rc.d/init.d/smb restart -</pre><p> - </p></li></ol></div></div><div class="sect2" title="Validation"><div class="titlepage"><div><div><h3 class="title"><a name="ch4valid"></a>Validation</h3></div></div></div><p> - <a class="indexterm" name="id334146"></a> - Complex networking problems are most often caused by simple things that are poorly or incorrectly - configured. The validation process adopted here should be followed carefully; it is the result of the - experience gained from years of making and correcting the most common mistakes. Shortcuts often lead to basic errors. You should - refrain from taking shortcuts, from making basic assumptions, and from not exercising due process - and diligence in network validation. By thoroughly testing and validating every step in the process - of network installation and configuration, you can save yourself from sleepless nights and restless - days. A well debugged network is a foundation for happy network users and network administrators. - Later in this book you learn how to make users happier. For now, it is enough to learn to - validate. Let's get on with it. - </p><div class="procedure" title="Procedure 3.5. Server Validation Steps"><a name="id334161"></a><p class="title"><b>Procedure 3.5. Server Validation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id334172"></a> - One of the most important facets of Samba configuration is to ensure that - name resolution functions correctly. You can check name resolution - with a few simple tests. The most basic name resolution is provided from the - <code class="filename">/etc/hosts</code> file. To test its operation, make a - temporary edit to the <code class="filename">/etc/nsswitch.conf</code> file. Using - your favorite editor, change the entry for <code class="constant">hosts</code> to read: -</p><pre class="screen"> -hosts: files -</pre><p> - When you have saved this file, execute the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> ping diamond -PING sleeth1.abmas.biz (192.168.1.1) 56(84) bytes of data. -64 bytes from sleeth1 (192.168.1.1): icmp_seq=1 ttl=64 time=0.131 ms -64 bytes from sleeth1 (192.168.1.1): icmp_seq=2 ttl=64 time=0.179 ms -64 bytes from sleeth1 (192.168.1.1): icmp_seq=3 ttl=64 time=0.192 ms -64 bytes from sleeth1 (192.168.1.1): icmp_seq=4 ttl=64 time=0.191 ms - ---- sleeth1.abmas.biz ping statistics --- -4 packets transmitted, 4 received, 0% packet loss, time 3016ms -rtt min/avg/max/mdev = 0.131/0.173/0.192/0.026 ms -</pre><p> - This proves that name resolution via the <code class="filename">/etc/hosts</code> file - is working. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id334233"></a> - So far, your installation is going particularly well. In this step we validate - DNS server and name resolution operation. Using your favorite UNIX system editor, - change the <code class="filename">/etc/nsswitch.conf</code> file so that the - <code class="constant">hosts</code> entry reads: -</p><pre class="screen"> -hosts: dns -</pre><p> - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id334263"></a> - Before you test DNS operation, it is a good idea to verify that the DNS server - is running by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> ps ax | grep named - 437 ? S 0:00 /sbin/syslogd -a /var/lib/named/dev/log - 524 ? S 0:00 /usr/sbin/named -t /var/lib/named -u named - 525 ? S 0:00 /usr/sbin/named -t /var/lib/named -u named - 526 ? S 0:00 /usr/sbin/named -t /var/lib/named -u named - 529 ? S 0:00 /usr/sbin/named -t /var/lib/named -u named - 540 ? S 0:00 /usr/sbin/named -t /var/lib/named -u named - 2552 pts/2 S 0:00 grep named -</pre><p> - This means that we are ready to check DNS operation. Do so by executing: - <a class="indexterm" name="id334287"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> ping diamond -PING sleeth1.abmas.biz (192.168.1.1) 56(84) bytes of data. -64 bytes from sleeth1 (192.168.1.1): icmp_seq=1 ttl=64 time=0.156 ms -64 bytes from sleeth1 (192.168.1.1): icmp_seq=2 ttl=64 time=0.183 ms - ---- sleeth1.abmas.biz ping statistics --- -2 packets transmitted, 2 received, 0% packet loss, time 999ms -rtt min/avg/max/mdev = 0.156/0.169/0.183/0.018 ms -</pre><p> - You should take a few more steps to validate DNS server operation, as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> host -f diamond.abmas.biz -sleeth1.abmas.biz has address 192.168.1.1 -</pre><p> - <a class="indexterm" name="id334321"></a> - You may now remove the entry called <code class="constant">diamond</code> from the - <code class="filename">/etc/hosts</code> file. It does not hurt to leave it there, - but its removal reduces the number of administrative steps for this name. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id334346"></a> - WINS is a great way to resolve NetBIOS names to their IP address. You can test - the operation of WINS by starting <code class="literal">nmbd</code> (manually or by way - of the Samba startup method shown in <a class="link" href="secure.html#procstart" title="Process Startup Configuration">“Process Startup Configuration”</a>). You must edit - the <code class="filename">/etc/nsswitch.conf</code> file so that the <code class="constant">hosts</code> - entry is as follows: -</p><pre class="screen"> -hosts: wins -</pre><p> - The next step is to make certain that Samba is running using <code class="literal">ps ax | grep mbd</code>. - The <code class="literal">nmbd</code> daemon will provide the WINS name resolution service when the - <code class="filename">smb.conf</code> file <em class="parameter"><code>global</code></em> parameter <a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = Yes</a> has been specified. Having validated that Samba is operational, - excute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> ping diamond -PING diamond (192.168.1.1) 56(84) bytes of data. -64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.094 ms -64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=0.479 ms -</pre><p> - <a class="indexterm" name="id334432"></a> - Now that you can relax with the knowledge that all three major forms of name - resolution to IP address resolution are working, edit the <code class="filename">/etc/nsswitch.conf</code> - again. This time you add all three forms of name resolution to this file. - Your edited entry for <code class="constant">hosts</code> should now look like this: -</p><pre class="screen"> -hosts: files dns wins -</pre><p> - The system is looking good. Let's move on. - </p></li><li class="step" title="Step 5"><p> - It would give you peace of mind to know that the DHCP server is running - and available for service. You can validate DHCP services by running: - -</p><pre class="screen"> -<code class="prompt">root# </code> ps ax | grep dhcp - 2618 ? S 0:00 /usr/sbin/dhcpd ... - 8180 pts/2 S 0:00 grep dhcp -</pre><p> - This shows that the server is running. The proof of whether or not it is working - comes when you try to add the first DHCP client to the network. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id334485"></a> - This is a good point at which to start validating Samba operation. You are - content that name resolution is working for basic TCP/IP needs. Let's move on. - If your <code class="filename">smb.conf</code> file has bogus options or parameters, this may cause Samba - to refuse to start. The first step should always be to validate the contents - of this file by running: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s -Load smb config files from smb.conf -Processing section "[homes]" -Processing section "[printers]" -Processing section "[netlogon]" -Processing section "[profiles]" -Processing section "[accounts]" -Processing section "[service]" -Processing section "[apps]" -Loaded services file OK. -# Global parameters -[global] - workgroup = PROMISES - netbios name = DIAMOND - interfaces = eth1, eth2, lo - bind interfaces only = Yes - passdb backend = tdbsam - pam password change = Yes - passwd program = /usr/bin/passwd '%u' - passwd chat = *New*Password* %n\n \ - *Re-enter*new*password* %n\n *Password*changed* - username map = /etc/samba/smbusers - unix password sync = Yes - log level = 1 - syslog = 0 - log file = /var/log/samba/%m - max log size = 50 - smb ports = 139 - name resolve order = wins bcast hosts - time server = Yes - printcap name = CUPS - show add printer wizard = No - add user script = /usr/sbin/useradd -m '%u' - delete user script = /usr/sbin/userdel -r '%u' - add group script = /usr/sbin/groupadd '%g' - delete group script = /usr/sbin/groupdel '%g' - add user to group script = /usr/sbin/usermod -G '%g' '%u' - add machine script = /usr/sbin/useradd \ - -s /bin/false -d /dev/null '%u' - shutdown script = /var/lib/samba/scripts/shutdown.sh - abort shutdown script = /sbin/shutdown -c - logon script = scripts\logon.bat - logon path = \\%L\profiles\%U - logon drive = X: - logon home = \\%L\%U - domain logons = Yes - preferred master = Yes - wins support = Yes - utmp = Yes - winbind use default domain = Yes - map acl inherit = Yes - cups options = Raw - veto files = /*.eml/*.nws/*.{*}/ - veto oplock files = /*.doc/*.xls/*.mdb/ - -[homes] - comment = Home Directories - valid users = %S - read only = No - browseable = No -... -### Remainder cut to save space ### -</pre><p> - Clear away all errors before proceeding. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id334550"></a> - <a class="indexterm" name="id334557"></a> - <a class="indexterm" name="id334564"></a> - <a class="indexterm" name="id334571"></a> - Check that the Samba server is running: -</p><pre class="screen"> -<code class="prompt">root# </code> ps ax | grep mbd -14244 ? S 0:00 /usr/sbin/nmbd -D -14245 ? S 0:00 /usr/sbin/nmbd -D -14290 ? S 0:00 /usr/sbin/smbd -D - -$rootprompt; ps ax | grep winbind -14293 ? S 0:00 /usr/sbin/winbindd -D -14295 ? S 0:00 /usr/sbin/winbindd -D -</pre><p> - The <code class="literal">winbindd</code> daemon is running in split mode (normal), so there are also - two instances<sup>[<a name="id334598" href="#ftn.id334598" class="footnote">7</a>]</sup> of it. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id334627"></a> - <a class="indexterm" name="id334634"></a> - Check that an anonymous connection can be made to the Samba server: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient -L localhost -U% - - Sharename Type Comment - --------- ---- ------- - IPC$ IPC IPC Service (Samba 3.0.20) - netlogon Disk Network Logon Service - profiles Disk Profile Share - accounts Disk Accounting Files - service Disk Financial Services Files - apps Disk Application Files - ADMIN$ IPC IPC Service (Samba 3.0.20) - hplj6a Printer hplj6a - hplj6f Printer hplj6f - qmsa Printer qmsa - qmsf Printer qmsf - - Server Comment - --------- ------- - DIAMOND Samba 3.0.20 - - Workgroup Master - --------- ------- - PROMISES DIAMOND -</pre><p> - This demonstrates that an anonymous listing of shares can be obtained. This is the equivalent - of browsing the server from a Windows client to obtain a list of shares on the server. - The <code class="constant">-U%</code> argument means to send a <code class="constant">NULL</code> username and - a <code class="constant">NULL</code> password. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id334682"></a> - <a class="indexterm" name="id334688"></a> - <a class="indexterm" name="id334695"></a> - Verify that each printer has the IP address assigned in the DHCP server configuration file. - The easiest way to do this is to ping the printer name. Immediately after the ping response - has been received, execute <code class="literal">arp -a</code> to find the MAC address of the printer - that has responded. Now you can compare the IP address and the MAC address of the printer - with the configuration information in the <code class="filename">/etc/dhcpd.conf</code> file. They - should, of course, match. For example, -</p><pre class="screen"> -<code class="prompt">root# </code> ping hplj6 -PING hplj6a (192.168.1.30) 56(84) bytes of data. -64 bytes from hplj6a (192.168.1.30): icmp_seq=1 ttl=64 time=0.113 ms - -<code class="prompt">root# </code> arp -a -hplj6a (192.168.1.30) at 00:03:47:CB:81:E0 [ether] on eth0 -</pre><p> - <a class="indexterm" name="id334736"></a> - The MAC address <code class="constant">00:03:47:CB:81:E0</code> matches that specified for the - IP address from which the printer has responded and with the entry for it in the - <code class="filename">/etc/dhcpd.conf</code> file. Repeat this for each printer configured. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id334763"></a> - Make an authenticated connection to the server using the <code class="literal">smbclient</code> tool: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient //diamond/accounts -U gholmes -Password: XXXXXXX -smb: \> dir - . D 0 Thu Nov 27 15:07:09 2003 - .. D 0 Sat Nov 15 17:40:50 2003 - zakadmin.exe 161424 Thu Nov 27 15:06:52 2003 - zak.exe 6066384 Thu Nov 27 15:06:52 2003 - dhcpd.conf 1256 Thu Nov 27 15:06:52 2003 - smb.conf 2131 Thu Nov 27 15:06:52 2003 - initGrps.sh A 1089 Thu Nov 27 15:06:52 2003 - POLICY.EXE 86542 Thu Nov 27 15:06:52 2003 - - 55974 blocks of size 65536. 33968 blocks available -smb: \> q -</pre><p> - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id334807"></a> - Your new server is connected to an Internet-accessible connection. Before you start - your firewall, you should run a port scanner against your system. You should repeat that - after the firewall has been started. This helps you understand to what extent the - server may be vulnerable to external attack. One way you can do this is by using an - external service, such as the <a class="ulink" href="http://www.dslreports.com/scan" target="_top">DSL Reports</a> - tools. Alternately, if you can gain root-level access to a remote - UNIX/Linux system that has the <code class="literal">nmap</code> tool, you can run the following: -</p><pre class="screen"> -<code class="prompt">root# </code> nmap -v -sT server.abmas.us - -Starting nmap V. 3.00 ( www.insecure.org/nmap/ ) -Host server.abmas.us (123.45.67.66) appears to be up ... good. -Initiating Connect() Scan against server.abmas.us (123.45.67.66) -Adding open port 6000/tcp -Adding open port 873/tcp -Adding open port 445/tcp -Adding open port 10000/tcp -Adding open port 901/tcp -Adding open port 631/tcp -Adding open port 25/tcp -Adding open port 111/tcp -Adding open port 32770/tcp -Adding open port 3128/tcp -Adding open port 53/tcp -Adding open port 80/tcp -Adding open port 443/tcp -Adding open port 139/tcp -Adding open port 22/tcp -The Connect() Scan took 0 seconds to scan 1601 ports. -Interesting ports on server.abmas.us (123.45.67.66): -(The 1587 ports scanned but not shown below are in state: closed) -Port State Service -22/tcp open ssh -25/tcp open smtp -53/tcp open domain -80/tcp open http -111/tcp open sunrpc -139/tcp open netbios-ssn -443/tcp open https -445/tcp open microsoft-ds -631/tcp open ipp -873/tcp open rsync -901/tcp open samba-swat -3128/tcp open squid-http -6000/tcp open X11 -10000/tcp open snet-sensor-mgmt -32770/tcp open sometimes-rpc3 - -Nmap run completed -- 1 IP address (1 host up) scanned in 1 second -</pre><p> - The above scan was run before the external interface was locked down with the NAT-firewall - script you created above. The following results are obtained after the firewall rules - have been put into place: -</p><pre class="screen"> -<code class="prompt">root# </code> nmap -v -sT server.abmas.us - -Starting nmap V. 3.00 ( www.insecure.org/nmap/ ) -Host server.abmas.us (123.45.67.66) appears to be up ... good. -Initiating Connect() Scan against server.abmas.us (123.45.67.66) -Adding open port 53/tcp -Adding open port 22/tcp -The Connect() Scan took 168 seconds to scan 1601 ports. -Interesting ports on server.abmas.us (123.45.67.66): -(The 1593 ports scanned but not shown below are in state: filtered) -Port State Service -22/tcp open ssh -25/tcp closed smtp -53/tcp open domain -80/tcp closed http -443/tcp closed https - -Nmap run completed -- 1 IP address (1 host up) scanned in 168 seconds -</pre><p> - </p></li></ol></div></div><div class="sect2" title="Application Share Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ch4appscfg"></a>Application Share Configuration</h3></div></div></div><p> - <a class="indexterm" name="id334886"></a> - <a class="indexterm" name="id334893"></a> - The use of an application server is a key mechanism by which desktop administration overheads - can be reduced. Check the application manual for your software to identify how best to - create an administrative installation. - </p><p> - Some Windows software will only run locally on the desktop computer. Such software - is typically not suited for administrative installation. Administratively installed software - permits one or more of the following installation choices: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Install software fully onto a workstation, storing data files on the same workstation. - </p></li><li class="listitem"><p> - Install software fully onto a workstation with central network data file storage. - </p></li><li class="listitem"><p> - Install software to run off a central application server with data files stored - on the local workstation. This is often called a minimum installation, or a - network client installation. - </p></li><li class="listitem"><p> - Install software to run off a central application server with data files stored - on a central network share. This type of installation often prevents storage - of work files on the local workstation. - </p></li></ul></div><p> - <a class="indexterm" name="id334936"></a> - A common application deployed in this environment is an office suite. - Enterprise editions of Microsoft Office XP Professional can be administratively installed - by launching the installation from a command shell. The command that achieves this is - <code class="literal">setup /a</code>. It results in a set of prompts through which various - installation choices can be made. Refer to the Microsoft Office Resource SDK and Resource - Kit for more information regarding this mode of installation of MS Office XP Professional. - The full administrative installation of MS Office XP Professional requires approximately - 650 MB of disk space. - </p><p> - When the MS Office XP Professional product has been installed to the administrative network - share, the product can be installed onto a workstation by executing the normal setup program. - The installation process now provides a choice to either perform a minimum installation - or a full local installation. A full local installation takes over 100 MB of disk space. - A network workstation (minimum) installation requires typically 10 MB to 15 MB of - local disk space. In the latter case, when the applications are used, they load over the network. - </p><p> - <a class="indexterm" name="id334963"></a> - <a class="indexterm" name="id334970"></a> - Microsoft Office Service Packs can be unpacked to update an administrative share. This makes - it possible to update MS Office XP Professional for all users from a single installation - of the service pack and generally circumvents the need to run updates on each network - Windows client. - </p><p> - The default location for MS Office XP Professional data files can be set through registry - editing or by way of configuration options inside each Office XP Professional application. - </p><p> - <a class="indexterm" name="id334988"></a> - OpenOffice.Org OpenOffice Version 1.1.0 can be installed locally. It can also - be installed to run off a network share. The latter is a most desirable solution for office-bound - network users and for administrative staff alike. It permits quick and easy updates - to be rolled out to all users with a minimum of disruption and with maximum flexibility. - </p><p> - The process for installation of administrative shared OpenOffice involves download of the - distribution ZIP file, followed by extraction of the ZIP file into a temporary disk area. - When fully extracted using the unzipping tool of your choosing, change into the Windows - installation files directory then execute <code class="literal">setup -net</code>. You are - prompted on screen for the target installation location. This is the administrative - share point. The full administrative OpenOffice share takes approximately 150 MB of disk - space. - </p><div class="sect3" title="Comments Regarding Software Terms of Use"><div class="titlepage"><div><div><h4 class="title"><a name="id335012"></a>Comments Regarding Software Terms of Use</h4></div></div></div><p> - Many single-user products can be installed into an administrative share, but - personal versions of products such as Microsoft Office XP Professional do not permit this. - Many people do not like terms of use typical with commercial products, so a few comments - regarding software licensing seem important. - </p><p> - Please do not use an administrative installation of proprietary and commercially licensed - software products to violate the copyright holders' property. All software is licensed, - particularly software that is licensed for use free of charge. All software is the property - of the copyright holder unless the author and/or copyright holder has explicitly disavowed - ownership and has placed the software into the public domain. - </p><p> - Software that is under the GNU General Public License, like proprietary software, is - licensed in a way that restricts use. For example, if you modify GPL software and then - distribute the binary version of your modifications, you must offer to provide the source - code as well. This restriction is designed to maintain the momentum - of the diffusion of technology and to protect against the withholding of innovations. - </p><p> - Commercial and proprietary software generally restrict use to those who have paid the - license fees and who comply with the licensee's terms of use. Software that is released - under the GNU General Public License is restricted to particular terms and conditions - also. Whatever the licensing terms may be, if you do not approve of the terms of use, - please do not use the software. - </p><p> - <a class="indexterm" name="id335047"></a> - Samba is provided under the terms of the GNU GPL Version 2, a copy of which is provided - with the source code. - </p></div></div><div class="sect2" title="Windows Client Configuration"><div class="titlepage"><div><div><h3 class="title"><a name="ch4wincfg"></a>Windows Client Configuration</h3></div></div></div><p> - Christine needs to roll out 130 new desktop systems. There is no doubt that she also needs - to reinstall many of the notebook computers that will be recycled for use with the new network - configuration. The smartest way to handle the challenge of the roll-out program is to build - a staged system for each type of target machine, and then use an image replication tool such as Norton - Ghost (enterprise edition) to replicate the staged machine to its target desktops. The same can - be done with notebook computers as long as they are identical or sufficiently similar. - </p><div class="procedure" title="Procedure 3.6. Windows Client Configuration Procedure"><a name="sbewinclntprep"></a><p class="title"><b>Procedure 3.6. Windows Client Configuration Procedure</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id335091"></a> - <a class="indexterm" name="id335098"></a> - Install MS Windows XP Professional. During installation, configure the client to use DHCP for - TCP/IP protocol configuration. DHCP configures all Windows clients to use the WINS Server - address that has been defined for the local subnet. - </p></li><li class="step" title="Step 2"><p> - Join the Windows Domain <code class="constant">PROMISES</code>. Use the Domain Administrator - username <code class="constant">root</code> and the SMB password you assigned to this account. - A detailed step-by-step procedure for joining a Windows 200x/XP Professional client to - a Windows Domain is given in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. - Reboot the machine as prompted and then log on using the Domain Administrator account - (<code class="constant">root</code>). - </p></li><li class="step" title="Step 3"><p> - Verify <code class="constant">DIAMOND</code> is visible in <span class="guimenu">My Network Places</span>, - that it is possible to connect to it and see the shares <span class="guimenuitem">accounts</span>, - <span class="guimenuitem">apps</span>, and <span class="guimenuitem">finsvcs</span>, and that it is - possible to open each share to reveal its contents. - </p></li><li class="step" title="Step 4"><p> - Create a drive mapping to the <code class="constant">apps</code> share on the server <code class="constant">DIAMOND</code>. - </p></li><li class="step" title="Step 5"><p> - Perform an administrative installation of each application to be used. Select the options - that you wish to use. Of course, you can choose to run applications over the network, correct? - </p></li><li class="step" title="Step 6"><p> - Now install all applications to be installed locally. Typical tools include Adobe Acrobat, - NTP-based time synchronization software, drivers for specific local devices such as fingerprint - scanners, and the like. Probably the most significant application for local installation - is antivirus software. - </p></li><li class="step" title="Step 7"><p> - Now install all four printers onto the staging system. The printers you install - include the accounting department HP LaserJet 6 and Minolta QMS Magicolor printers. You will - also configure identical printers that are located in the financial services department. - Install printers on each machine following the steps shown in the Windows client printer - preparation procedure below. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id335222"></a> - When you are satisfied that the staging systems are complete, use the appropriate procedure to - remove the client from the domain. Reboot the system and then log on as the local administrator - and clean out all temporary files stored on the system. Before shutting down, use the disk - defragmentation tool so that the file system is in optimal condition before replication. - </p></li><li class="step" title="Step 9"><p> - Boot the workstation using the Norton (Symantec) Ghosting diskette (or CD-ROM) and image the - machine to a network share on the server. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id335246"></a> - <a class="indexterm" name="id335256"></a> - You may now replicate the image to the target machines using the appropriate Norton Ghost - procedure. Make sure to use the procedure that ensures each machine has a unique - Windows security identifier (SID). When the installation of the disk image has completed, boot the PC. - </p></li><li class="step" title="Step 11"><p> - Log on to the machine as the local Administrator (the only option), and join the machine to - the Domain, following the procedure set out in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. The system is now - ready for the user to log on, provided you have created a network logon account for that - user, of course. - </p></li><li class="step" title="Step 12"><p> - Instruct all users to log on to the workstation using their assigned username and password. - </p></li></ol></div><div class="procedure" title="Procedure 3.7. Windows Client Printer Preparation Procedure"><a name="sbewinclntptrprep"></a><p class="title"><b>Procedure 3.7. Windows Client Printer Preparation Procedure</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Click <span class="guimenu">Start</span> → <span class="guimenuitem">Settings</span> → <span class="guimenuitem">Printers</span>+<span class="guiicon">Add Printer</span>+<span class="guibutton">Next</span>. Do not click <span class="guimenuitem">Network printer</span>. - Ensure that <span class="guimenuitem">Local printer</span> is selected. - </p></li><li class="step" title="Step 2"><p> - Click <span class="guibutton">Next</span>. In the - <span class="guimenuitem">Manufacturer:</span> panel, select <code class="constant">HP</code>. - In the <span class="guimenuitem">Printers:</span> panel, select the printer called - <code class="constant">HP LaserJet 6</code>. Click <span class="guibutton">Next</span>. - </p></li><li class="step" title="Step 3"><p> - In the <span class="guimenuitem">Available ports:</span> panel, select - <code class="constant">FILE:</code>. Accept the default printer name by clicking - <span class="guibutton">Next</span>. When asked, <span class="quote">“<span class="quote">Would you like to print a - test page?,</span>”</span> click <span class="guimenuitem">No</span>. Click - <span class="guibutton">Finish</span>. - </p></li><li class="step" title="Step 4"><p> - You may be prompted for the name of a file to print to. If so, close the - dialog panel. Right-click <span class="guiicon">HP LaserJet 6</span> → <span class="guimenuitem">Properties</span> → <span class="guisubmenu">Details (Tab)</span> → <span class="guimenuitem">Add Port</span>. - </p></li><li class="step" title="Step 5"><p> - In the <span class="guimenuitem">Network</span> panel, enter the name of - the print queue on the Samba server as follows: <code class="constant">\\DIAMOND\hplj6a</code>. - Click <span class="guibutton">OK</span>+<span class="guibutton">OK</span> to complete the installation. - </p></li><li class="step" title="Step 6"><p> - Repeat the printer installation steps above for both HP LaserJet 6 printers - as well as for both QMS Magicolor laser printers. - </p></li></ol></div></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id335513"></a>Key Points Learned</h3></div></div></div><p> - How do you feel? You have built a capable network, a truly ambitious project. - Future network updates can be handled by - your staff. You must be a satisfied manager. Let's review the achievements. - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - A simple firewall has been configured to protect the server in the event that - the ISP firewall service should fail. - </p></li><li class="listitem"><p> - The Samba configuration uses measures to ensure that only local network users - can connect to SMB/CIFS services. - </p></li><li class="listitem"><p> - Samba uses the new <code class="constant">tdbsam</code> passdb backend facility. - Considerable complexity was added to Samba functionality. - </p></li><li class="listitem"><p> - A DHCP server was configured to implement dynamic DNS (DDNS) updates to the DNS - server. - </p></li><li class="listitem"><p> - The DNS server was configured to permit DDNS only for local network clients. This - server also provides primary DNS services for the company Internet presence. - </p></li><li class="listitem"><p> - You introduced an application server as well as the concept of cloning a Windows - client in order to effect improved standardization of desktops and to reduce - the costs of network management. - </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id335566"></a>Questions and Answers</h2></div></div></div><p> - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id335576"></a><dl><dt>1. <a href="secure.html#id335582"> - What is the maximum number of account entries that the tdbsam - passdb backend can handle? - </a></dt><dt>2. <a href="secure.html#id335635"> - Would Samba operate any better if the OS level is set to a value higher than 35? - </a></dt><dt>3. <a href="secure.html#id335654"> - Why in this example have you provided UNIX group to Windows Group mappings for only Domain Groups? - </a></dt><dt>4. <a href="secure.html#id335674"> - Why has a path been specified in the IPC$ share? - </a></dt><dt>5. <a href="secure.html#id335699"> - Why does the smb.conf file in this exercise include an entry for smb ports? - </a></dt><dt>6. <a href="secure.html#id335740"> - What is the difference between a print queue and a printer? - </a></dt><dt>7. <a href="secure.html#id335768"> - Can all MS Windows application software be installed onto an application server share? - </a></dt><dt>8. <a href="secure.html#id335788"> - Why use dynamic DNS (DDNS)? - </a></dt><dt>9. <a href="secure.html#id335807"> - Why would you use WINS as well as DNS-based name resolution? - </a></dt><dt>10. <a href="secure.html#id335876"> - What are the major benefits of using an application server? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question" title="1."><td align="left" valign="top"><a name="id335582"></a><a name="id335584"></a><p><b>1.</b></p></td><td align="left" valign="top"><p> - What is the maximum number of account entries that the <em class="parameter"><code>tdbsam</code></em> - passdb backend can handle? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The tdb data structure and support system can handle more entries than the number of - accounts that are possible on most UNIX systems. A practical limit would come into - play long before a performance boundary would be anticipated. That practical limit - is controlled by the nature of Windows networking. There are few Windows file and - print servers that can handle more than a few hundred concurrent client connections. - The key limiting factors that predicate offloading of services to additional servers - are memory capacity, the number of CPUs, network bandwidth, and disk I/O limitations. - All of these are readily exhausted by just a few hundred concurrent active users. - Such bottlenecks can best be removed by segmentation of the network (distributing - network load across multiple networks). - </p><p> - As the network grows, it becomes necessary to provide additional authentication - servers (domain controllers). The tdbsam is limited to a single machine and cannot - be reliably replicated. This means that practical limits on network design dictate - the point at which a distributed passdb backend is required; at this time, there is - no real alternative other than ldapsam (LDAP). - </p><p> - The guideline provided in <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 10, Section 10.1.2, - is to limit the number of accounts in the tdbsam backend to 250. This is the point - at which most networks tend to want backup domain controllers (BDCs). Samba-3 does - not provide a mechanism for replicating tdbsam data so it can be used by a BDC. The - limitation of 250 users per tdbsam is predicated only on the need for replication, - not on the limits<sup>[<a name="id335626" href="#ftn.id335626" class="footnote">8</a>]</sup> of the tdbsam backend itself. - </p></td></tr><tr class="question" title="2."><td align="left" valign="top"><a name="id335635"></a><a name="id335637"></a><p><b>2.</b></p></td><td align="left" valign="top"><p> - Would Samba operate any better if the OS level is set to a value higher than 35? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - No. MS Windows workstations and servers do not use a value higher than 33. Setting this to a value - of 35 already assures Samba of precedence over MS Windows products in browser elections. There is - no gain to be had from setting this higher. - </p></td></tr><tr class="question" title="3."><td align="left" valign="top"><a name="id335654"></a><a name="id335656"></a><p><b>3.</b></p></td><td align="left" valign="top"><p> - Why in this example have you provided UNIX group to Windows Group mappings for only Domain Groups? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - At this time, Samba has the capacity to use only Domain Groups mappings. It is possible that at - a later date Samba may make use of Windows Local Groups, as well as of the Active Directory special - Groups. Proper operation requires Domain Groups to be mapped to valid UNIX groups. - </p></td></tr><tr class="question" title="4."><td align="left" valign="top"><a name="id335674"></a><a name="id335676"></a><p><b>4.</b></p></td><td align="left" valign="top"><p> - Why has a path been specified in the <em class="parameter"><code>IPC$</code></em> share? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - This is done so that in the event that a software bug may permit a client connection to the IPC$ share to - obtain access to the file system, it does so at a location that presents least risk. Under normal operation - this type of paranoid step should not be necessary. The use of this parameter should not be necessary. - </p></td></tr><tr class="question" title="5."><td align="left" valign="top"><a name="id335699"></a><a name="id335701"></a><p><b>5.</b></p></td><td align="left" valign="top"><p> - Why does the <code class="filename">smb.conf</code> file in this exercise include an entry for <a class="link" href="smb.conf.5.html#SMBPORTS" target="_top">smb ports</a>? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The default order by which Samba-3 attempts to communicate with MS Windows clients is via port 445 (the TCP port - used by Windows clients when NetBIOS-less SMB over TCP/IP is in use). TCP port 139 is the primary port used for NetBIOS - over TCP/IP. In this configuration Windows network operations are predicated around NetBIOS over TCP/IP. By - specifying the use of only port 139, the intent is to reduce unsuccessful service connection attempts. - The result of this is improved network performance. Where Samba-3 is installed as an Active Directory Domain - member, the default behavior is highly beneficial and should not be changed. - </p></td></tr><tr class="question" title="6."><td align="left" valign="top"><a name="id335740"></a><a name="id335742"></a><p><b>6.</b></p></td><td align="left" valign="top"><p> - What is the difference between a print queue and a printer? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - A printer is a physical device that is connected either directly to the network or to a computer - via a serial, parallel, or USB connection so that print jobs can be submitted to it to create a - hard copy printout. Network-attached printers that use TCP/IP-based printing generally accept a - single print data stream and block all secondary attempts to dispatch jobs concurrently to the - same device. If many clients were to concurrently print directly via TCP/IP to the same printer, - it would result in a huge amount of network traffic through continually failing connection attempts. - </p><p> - A print server (like CUPS or LPR/LPD) accepts multiple concurrent input streams or - print requests. When the data stream has been fully received, the input stream is closed, - and the job is then submitted to a sequential print queue where the job is stored until - the printer is ready to receive the job. - </p></td></tr><tr class="question" title="7."><td align="left" valign="top"><a name="id335768"></a><a name="id335770"></a><p><b>7.</b></p></td><td align="left" valign="top"><p> - Can all MS Windows application software be installed onto an application server share? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Much older Windows software is not compatible with installation to and execution from - an application server. Enterprise versions of Microsoft Office XP Professional can - be installed to an application server. Retail consumer versions of Microsoft Office XP - Professional do not permit installation to an application server share and can be installed - and used only to/from a local workstation hard disk. - </p></td></tr><tr class="question" title="8."><td align="left" valign="top"><a name="id335788"></a><a name="id335791"></a><p><b>8.</b></p></td><td align="left" valign="top"><p> - Why use dynamic DNS (DDNS)? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - When DDNS records are updated directly from the DHCP server, it is possible for - network clients that are not NetBIOS-enabled, and thus cannot use WINS, to locate - Windows clients via DNS. - </p></td></tr><tr class="question" title="9."><td align="left" valign="top"><a name="id335807"></a><a name="id335809"></a><p><b>9.</b></p></td><td align="left" valign="top"><p> - Why would you use WINS as well as DNS-based name resolution? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - WINS is to NetBIOS names as DNS is to fully qualified domain names (FQDN). The FQDN is - a name like <span class="quote">“<span class="quote">myhost.mydomain.tld</span>”</span> where <em class="parameter"><code>tld</code></em> - means <code class="constant">top-level domain</code>. A FQDN is a longhand but easy-to-remember - expression that may be up to 1024 characters in length and that represents an IP address. - A NetBIOS name is always 16 characters long. The 16<sup>th</sup> character - is a name type indicator. A specific name type is registered<sup>[<a name="id335840" href="#ftn.id335840" class="footnote">9</a>]</sup> for each - type of service that is provided by the Windows server or client and that may be registered - where a WINS server is in use. - </p><p> - WINS is a mechanism by which a client may locate the IP Address that corresponds to a - NetBIOS name. The WINS server may be queried to obtain the IP Address for a NetBIOS name - that includes a particular registered NetBIOS name type. DNS does not provide a mechanism - that permits handling of the NetBIOS name type information. - </p><p> - DNS provides a mechanism by which TCP/IP clients may locate the IP address of a particular - hostname or service name that has been registered in the DNS database for a particular domain. - A DNS server has limited scope of control and is said to be authoritative for the zone over - which it has control. - </p><p> - Windows 200x Active Directory requires the registration in the DNS zone for the domain it - controls of service locator<sup>[<a name="id335866" href="#ftn.id335866" class="footnote">10</a>]</sup> records - that Windows clients and servers will use to locate Kerberos and LDAP services. ADS also - requires the registration of special records that are called global catalog (GC) entries - and site entries by which domain controllers and other essential ADS servers may be located. - </p></td></tr><tr class="question" title="10."><td align="left" valign="top"><a name="id335876"></a><a name="id335879"></a><p><b>10.</b></p></td><td align="left" valign="top"><p> - What are the major benefits of using an application server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The use of an application server can significantly reduce application update maintenance. - By providing a centralized application share, software updates need be applied to only - one location for all major applications used. This results in faster update roll-outs and - significantly better application usage control. - </p></td></tr></tbody></table></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id331045" href="#id331045" class="para">5</a>] </sup>See <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 3. - This is necessary so that Samba can act as a Domain Controller (PDC); see - <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 4, for additional information.</p></div><div class="footnote"><p><sup>[<a name="ftn.id331388" href="#id331388" class="para">6</a>] </sup>You may want to do the echo command last and include - "0" in the init scripts, since it opens up your network for a short time.</p></div><div class="footnote"><p><sup>[<a name="ftn.id334598" href="#id334598" class="para">7</a>] </sup>For more information regarding winbindd, see <span class="emphasis"><em>TOSHARG2</em></span>, - Chapter 23, Section 23.3. The single instance of <code class="literal">smbd</code> is normal. One additional - <code class="literal">smbd</code> slave process is spawned for each SMB/CIFS client - connection.</p></div><div class="footnote"><p><sup>[<a name="ftn.id335626" href="#id335626" class="para">8</a>] </sup>Bench tests have shown that tdbsam is a very - effective database technology. There is surprisingly little performance loss even - with over 4000 users.</p></div><div class="footnote"><p><sup>[<a name="ftn.id335840" href="#id335840" class="para">9</a>] </sup> - See <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 9, for more information.</p></div><div class="footnote"><p><sup>[<a name="ftn.id335866" href="#id335866" class="para">10</a>] </sup>See TOSHARG2, Chapter 9, Section 9.3.3.</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="small.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ExNetworks.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="Big500users.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 2. Small Office Networking </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 4. The 500-User Office</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/simple.html b/docs/htmldocs/Samba3-ByExample/simple.html deleted file mode 100644 index d9baecada1..0000000000 --- a/docs/htmldocs/Samba3-ByExample/simple.html +++ /dev/null @@ -1,862 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 1. No-Frills Samba Servers</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="next" href="small.html" title="Chapter 2. Small Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 1. No-Frills Samba Servers</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ExNetworks.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="small.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 1. No-Frills Samba Servers"><div class="titlepage"><div><div><h2 class="title"><a name="simple"></a>Chapter 1. No-Frills Samba Servers</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="simple.html#id323089">Introduction</a></span></dt><dt><span class="sect1"><a href="simple.html#id323120">Assignment Tasks</a></span></dt><dd><dl><dt><span class="sect2"><a href="simple.html#id323158">Drafting Office</a></span></dt><dt><span class="sect2"><a href="simple.html#id323803">Charity Administration Office</a></span></dt><dt><span class="sect2"><a href="simple.html#AccountingOffice">Accounting Office</a></span></dt></dl></dd><dt><span class="sect1"><a href="simple.html#id326925">Questions and Answers</a></span></dt></dl></div><p> - This is the start of the real journey toward the successful deployment of Samba. For some this chapter - is the end of the road because their needs will have been adequately met. For others, this chapter is - the beginning of a journey that will take them well past the contents of this book. This book provides - example configurations of, for the greater part, complete networking solutions. The intent of this book - is to help you to get your Samba installation working with the least amount of pain and aggravation. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id323089"></a>Introduction</h2></div></div></div><p> - This chapter lays the groundwork for understanding the basics of Samba operation. - Instead of a bland technical discussion, each principle is demonstrated by way of a - real-world scenario for which a working solution<sup>[<a name="id323099" href="#ftn.id323099" class="footnote">1</a>]</sup> is fully described. - </p><p> - The practical exercises take you on a journey through a drafting office, a charity administration - office, and an accounting office. You may choose to apply any or all of these exercises to your own environment. - </p><p> - Every assignment case can be implemented far more creatively, but remember that the solutions you - create are designed to demonstrate a particular solution possibility. With experience, you should - find much improved solutions compared with those presented here. By the time you complete this book, - you should aim to be a Samba expert, so do attempt to find better solutions and try them as you work your - way through the examples. - </p></div><div class="sect1" title="Assignment Tasks"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id323120"></a>Assignment Tasks</h2></div></div></div><p> - Each case presented highlights different aspects of Windows networking for which a simple - Samba-based solution can be provided. Each has subtly different requirements taken from real-world cases. - The cases are briefly reviewed to cover important points. Instructions are based - on the assumption that the official Samba Team RPM package has been installed. - </p><p> - This chapter has three assignments built around fictitious companies: - </p><p> - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>A drafting office</p></li><li class="listitem"><p>A charity administration office</p></li><li class="listitem"><p>An accounting office</p></li></ul></div><p> - </p><p> - Let's get started. - </p><div class="sect2" title="Drafting Office"><div class="titlepage"><div><div><h3 class="title"><a name="id323158"></a>Drafting Office</h3></div></div></div><p> - Our fictitious company is called <span class="emphasis"><em>Abmas Design, Inc.</em></span> This is a three-person - computer-aided design (CAD) business that often has more work than can be handled. The - business owner hires contract draftspeople from wherever he can. They bring their own - notebook computers into the office. There are four permanent drafting machines. Abmas has a - collection of over 10 years of plans that must be available for all draftsmen to reference. - Abmas hires the services of an experienced network engineer to update the - plans that are stored on a central server one day per month. She knows how to upload - plans from each machine. The files available from the server must remain read-only. - Anyone should be able to access the plans at any time and without barriers or difficulty. - </p><p><a class="indexterm" name="id323177"></a> - <a class="indexterm" name="id323183"></a> - Mr. Bob Jordan has asked you to install the new server as economically as possible. The central - server has a Pentium-IV 1.6GHz CPU, 768MB RAM, a 20GB IDE boot drive, a 160GB IDE second disk - to store plans, and a 100-base-T Ethernet card. You have already installed Red Hat Fedora CoreX and - have upgraded Samba to version 3.0.20 using the RPM package that is provided from the Samba - <a class="ulink" href="http://www.samba.org" target="_top">FTP</a> sites. (Note: Fedora CoreX indicates your favorite - version.) - </p><p><a class="indexterm" name="id323204"></a> - The four permanent drafting machines (Microsoft Windows workstations) have attached printers - and plotters that are shared on a peer-to-peer basis by any and all network users. The intent - is to continue to share printers in this manner. The three permanent staff work together with - all contractors to store all new work on one PC. A daily copy is made of the work storage - area to another PC for safekeeping. When the network consultant arrives, the weekly work - area is copied to the central server and the files are removed from the main weekly storage - machine. The office works best with this arrangement and does not want to change anything. - Old habits are too ingrained. - </p><div class="sect3" title="Dissection and Discussion"><div class="titlepage"><div><div><h4 class="title"><a name="id323219"></a>Dissection and Discussion</h4></div></div></div><p> - <a class="indexterm" name="id323227"></a> - The requirements for this server installation demand simplicity. An anonymous read-only - file server adequately meets all needs. The network consultant determines how - to upload all files from the weekly storage area to the server. This installation should - focus only on critical aspects of the installation. - </p><p> - It is not necessary to have specific users on the server. The site has a method for storing - all design files (plans). Each plan is stored in a directory that is named YYYYWW,<sup>[<a name="id323243" href="#ftn.id323243" class="footnote">2</a>]</sup> where - YYYY is the year, and WW is the week of the year. This arrangement allows work to be stored - by week of year to preserve the filing technique the site is familiar with. - There is also a customer directory that is alphabetically listed. At the top level are 26 - directories (A-Z), in each is a second-level of directory for the first plus second letters of the name - (A-Z); inside each is a directory by the customers' name. Inside each directory is a symbolic - link to each design drawing or plan. This way of storing customer data files permits all - plans to be located both by customer name and by the date the work was performed, without - demanding the disk space that would be needed if a duplicate file copy were to be stored. - The share containing the plans is called <span class="emphasis"><em>Plans</em></span>. - </p></div><div class="sect3" title="Implementation"><div class="titlepage"><div><div><h4 class="title"><a name="id323262"></a>Implementation</h4></div></div></div><p> - It is assumed that the server is fully installed and ready for installation and - configuration of Samba 3.0.20 and any support files needed. All TCP/IP addresses - have been hard-coded. In our case the IP address of the Samba server is - <code class="constant">192.168.1.1</code> and the netmask is <code class="constant">255.255.255.0</code>. - The hostname of the server used is <code class="constant">server</code>. - </p><div class="procedure" title="Procedure 1.1. Samba Server Configuration"><a name="id323282"></a><p class="title"><b>Procedure 1.1. Samba Server Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Download the Samba-3 RPM packages for Red Hat Fedora Core2 from the Samba - <a class="ulink" href="http://www.samba.org" target="_top">FTP servers.</a> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id323305"></a> - <a class="indexterm" name="id323314"></a> - Install the RPM package using either the Red Hat Linux preferred GUI - tool or the <code class="literal">rpm</code>: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -Uvh samba-3.0.20-1.i386.rpm -</pre><p> - </p></li><li class="step" title="Step 3"><p> - Create a mount point for the file system that will be used to store all data files. - You can create a directory called <code class="filename">/plans</code>: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir /plans -<code class="prompt">root# </code> chmod 755 /plans -</pre><p> - The 755 permissions on this directory (mount point) permit the owner to read, write, - and execute, and the group and everyone else to read and execute only. - </p><p> - <a class="indexterm" name="id323369"></a> - Use Red Hat Linux system tools (refer to Red Hat instructions) - to format the 160GB hard drive with a suitable file system. An Ext3 file system - is suitable. Configure this drive to automatically mount using the <code class="filename">/plans</code> - directory as the mount point. - </p></li><li class="step" title="Step 4"><p> - Install the <code class="filename">smb.conf</code> file shown in <a class="link" href="simple.html#draft-smbconf" title="Example 1.1. Drafting Office smb.conf File">“Drafting Office smb.conf File”</a> in the - <code class="filename">/etc/samba</code> directory. - -</p><div class="example"><a name="draft-smbconf"></a><p class="title"><b>Example 1.1. Drafting Office <code class="filename">smb.conf</code> File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global Parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id323435"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id323446"></a><em class="parameter"><code>security = SHARE</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[Plans]</code></em></td></tr><tr><td><a class="indexterm" name="id323464"></a><em class="parameter"><code>path = /plans</code></em></td></tr><tr><td><a class="indexterm" name="id323475"></a><em class="parameter"><code>read only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id323485"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr></table></div></div><p><br class="example-break"> - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id323503"></a> - Verify that the <code class="filename">/etc/hosts</code> file contains the following entry: -</p><pre class="screen"> -192.168.1.1 server -</pre><p> - - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id323526"></a> - <a class="indexterm" name="id323534"></a> - <a class="indexterm" name="id323540"></a> - Use the standard system tool to start Samba and to configure it to restart - automatically at every system reboot. For example, -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> /etc/rc.d/init.d/smb restart -</pre><p> - </p></li></ol></div><div class="procedure" title="Procedure 1.2. Windows Client Configuration"><a name="id323566"></a><p class="title"><b>Procedure 1.2. Windows Client Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Make certain that all clients are set to the same network address range as - used for the Samba server. For example, one client might have an IP - address 192.168.1.10. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id323584"></a> - Ensure that the netmask used on the Windows clients matches that used - for the Samba server. All clients must have the same netmask, such as - 255.255.255.0. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id323598"></a> - Set the workgroup name on all clients to <code class="constant">MIDEARTH</code>. - </p></li><li class="step" title="Step 4"><p> - Verify on each client that the machine called <code class="constant">SERVER</code> - is visible in the <span class="guimenu">Network Neighborhood</span>, that it is - possible to connect to it and see the share <span class="guimenuitem">Plans</span>, - and that it is possible to open that share to reveal its contents. - </p></li></ol></div></div><div class="sect3" title="Validation"><div class="titlepage"><div><div><h4 class="title"><a name="validate1"></a>Validation</h4></div></div></div><p> - <a class="indexterm" name="id323642"></a> - The first priority in validating the new Samba configuration should be to check - that Samba answers on the loop-back interface. Then it is time to check that Samba - answers its own name correctly. Last, check that a client can connect to the Samba - server. - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id323659"></a> - <a class="indexterm" name="id323665"></a> - <a class="indexterm" name="id323671"></a> - To check the ability to access the <code class="literal">smbd</code> daemon - services, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient -L localhost -U% - Sharename Type Comment - --------- ---- ------- - Plans Disk - IPC$ IPC IPC Service (Samba 3.0.20) - ADMIN$ IPC IPC Service (Samba 3.0.20) - - Server Comment - --------- ------- - SERVER Samba 3.0.20 - - Workgroup Master - --------- -------- - MIDEARTH SERVER -</pre><p> - <a class="indexterm" name="id323697"></a> - <a class="indexterm" name="id323703"></a> - This indicates that Samba is able to respond on the loopback interface to - a NULL connection. The <em class="parameter"><code>-U%</code></em> means send an empty - username and an empty password. This command should be repeated after - Samba has been running for 15 minutes. - </p></li><li class="step" title="Step 2"><p> - Now verify that Samba correctly handles being passed a username - and password, and that it answers its own name. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient -L server -Uroot%password -</pre><p> - The output should be identical to the previous response. Samba has been - configured to ignore all usernames given; instead it uses the - <em class="parameter"><code>guest account</code></em> for all connections. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id323748"></a> - <a class="indexterm" name="id323754"></a> - From the Windows 9x/Me client, launch Windows Explorer: - <span class="guiicon">[Desktop: right-click] Network Neighborhood</span>+<span class="guimenu">Explore</span> → <span class="guimenuitem">[Left Panel] [+] Entire Network</span> → <span class="guimenuitem">[Left Panel] [+] Server</span> → <span class="guimenuitem">[Left Panel] [+] Plans</span>. In the right panel you should see the files and directories - (folders) that are in the <span class="guiicon">Plans</span> share. - </p></li></ol></div></div></div><div class="sect2" title="Charity Administration Office"><div class="titlepage"><div><div><h3 class="title"><a name="id323803"></a>Charity Administration Office</h3></div></div></div><p> - The fictitious charity organization is called <span class="emphasis"><em>Abmas Vision NL</em></span>. This office - has five networked computers. Staff are all volunteers, staff changes are frequent. - Ms. Amy May, the director of operations, wants a no-hassle network. Anyone should be able to - use any PC. Only two Windows applications are used: a custom funds tracking and management package - that stores all files on the central server and Microsoft Word. The office prepares mail-out - letters, invitations, and thank-you notes. All files must be stored in perpetuity. - The custom funds tracking and management (FTM) software is configured to use a server named - <code class="constant">SERVER</code>, a share named <code class="constant">FTMFILES</code>, and a printer queue - named <code class="constant">PRINTQ</code> that uses preprinted stationery, thus demanding a - dedicated printer. This printer does not need to be mapped to a local printer on the workstations. - </p><p> - The FTM software has been in use since the days of Windows 3.11. The software was configured - by the vendor who has since gone out of business. The identities of the file - server and the printer are hard-coded in a configuration file that was created using a - setup tool that the vendor did not provide to Abmas Vision NL or to its predecessors. The - company that produced the software is no longer in business. In order to avoid risk of - any incompatibilities, the share name and the name of the target print queue must be set - precisely as the application expects. In fact, share names and print queue names - should be treated as case insensitive (i.e., case does not matter), but Abmas Vision advises - that if the share name is not in lowercase, the application claims it cannot find the - file share. - </p><p> - <a class="indexterm" name="id323847"></a> - <a class="indexterm" name="id323854"></a> - Printer handling in Samba results in a significant level of confusion. Samba presents to the - MS Windows client only a print queue. The Samba <code class="literal">smbd</code> process passes a - print job sent to it from the Windows client to the native UNIX printing system. The native - UNIX printing system (spooler) places the job in a print queue from which it is - delivered to the printer. In this book, network diagrams refer to a printer by the name - of the print queue that services that printer. It does not matter what the fully qualified - name (or the hostname) of a network-attached printer is. The UNIX print spooler is configured - to correctly deliver all jobs to the printer. - </p><p> - This organization has a policy forbidding use of privately owned computers on site as a measure - to prevent leakage of confidential information. Only the five PCs owned by Abmas Vision NL are - used on this network. - </p><p> - <a class="indexterm" name="id323879"></a> - The central server was donated by a local computer store. It is a dual processor Pentium-III - server, has 1GB RAM, a 3-Ware IDE RAID Controller that has four 200GB IDE hard drives, and a - 100-base-T network card. The office has 100-base-T permanent network connections that go to - a central hub, and all equipment is new. The five network computers all are equipped with Microsoft - Windows Me. Funding is limited, so the server has no operating system on it. You have approval - to install Samba on Linux, provided it works without problems. There are two HP LaserJet - 5 PS printers that are network connected. The second printer is to be used for general - office and letter printing. Your recommendation to allow only the Linux server to print directly - to the printers was accepted. You have supplied SUSE Enterprise Linux Server 9 and - have upgraded Samba to version 3.0.20. - </p><div class="sect3" title="Dissection and Discussion"><div class="titlepage"><div><div><h4 class="title"><a name="id323894"></a>Dissection and Discussion</h4></div></div></div><p> - <a class="indexterm" name="id323902"></a> - <a class="indexterm" name="id323908"></a> - <a class="indexterm" name="id323914"></a> - <a class="indexterm" name="id323920"></a> - This installation demands simplicity. Frequent turnover of volunteer staff indicates that - a network environment that requires users to logon might be problematic. It is suggested that the - best solution for this office would be one where the user can log onto any PC with any username - and password. Samba can accommodate an office like this by using the <em class="parameter"><code>force user</code></em> - parameter in share and printer definitions. Using the <em class="parameter"><code>force user</code></em> - parameter ensures that all files are owned by same user identifier (UID) and thus that there - will never be a problem with file access due to file access permissions. Additionally, you elect - to use the <em class="parameter"><code>nt acl support = No</code></em> option to ensure that - access control lists (Posix type) cannot be written to any file or directory. This prevents - an inadvertent ACL from overriding actual file permissions. - </p><p> - <a class="indexterm" name="id323953"></a> - <a class="indexterm" name="id323959"></a> - <a class="indexterm" name="id323965"></a> - This organization is a prime candidate for Share Mode security. The <em class="parameter"><code>force user</code></em> - allows all files to be owned by the same user and group. In addition, it would not hurt to - set SUID and set SGID shared directories. This means that all new files that are created, no matter - who creates it, are owned by the owner or group of the directory in which they are created. - For further information regarding the significance of the SUID/SGID settings, see <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#ch12-SUIDSGID" title="Effect of Setting File and Directory SUID/SGID Permissions Explained">“Effect of Setting File and Directory SUID/SGID Permissions Explained”</a>. - </p><p> - <a class="indexterm" name="id323994"></a> - <a class="indexterm" name="id324000"></a> - <a class="indexterm" name="id324009"></a> - <a class="indexterm" name="id324015"></a> - All client workstations print to a print queue on the server. This ensures that print jobs - continue to print in the event that a user shuts down the workstation immediately after - sending a job to the printer. Today, both Red Hat Linux and SUSE Linux use CUPS-based printing. - Older Linux systems offered a choice between the LPRng printing system or CUPS. It appears, however, - that CUPS has become the leading UNIX printing technology. - </p><p> - <a class="indexterm" name="id324028"></a> - The print queues are set up as <code class="constant">Raw</code> devices, which means that CUPS will - not do intelligent print processing, and vendor-supplied drivers must be installed locally on the - Windows clients. - </p><p> - The hypothetical software, FTM, is representative of - custom-built software that directly uses a NetBIOS interface. Most such software originated in - the days of MS/PC DOS. NetBIOS names are uppercase (and functionally are case insensitive), - so some old software applications would permit only uppercase names to be entered. - Some such applications were later ported to MS Windows but retain the uppercase network - resource naming conventions because customers are familiar with that. We made the decision - to name shares and print queues for this application in uppercase for the same reason. - Nothing would break if we were to use lowercase names, but that decision might create a need - to retrain staff something well avoided at this time. - </p><p> - NetBIOS networking does not print directly to a printer. Instead, all printing is done to a - print queue. The print spooling system is responsible for communicating with the physical - printer. In this example, therefore, the resource called <code class="constant">PRINTQ</code> - really is just a print queue. The name of the print queue is representative of - the device to which the print spooler delivers print jobs. - </p></div><div class="sect3" title="Implementation"><div class="titlepage"><div><div><h4 class="title"><a name="id324064"></a>Implementation</h4></div></div></div><p> - It is assumed that the server is fully installed and ready for configuration of - Samba 3.0.20 and for necessary support files. All TCP/IP addresses should be hard-coded. - In our case, the IP address of the Samba server is 192.168.1.1 and the netmask is - 255.255.255.0. The hostname of the server used is <code class="constant">server</code>. - The office network is built as shown in <a class="link" href="simple.html#charitynet" title="Figure 1.1. Charity Administration Office Network">“Charity Administration Office Network”</a>. - </p><div class="figure"><a name="charitynet"></a><p class="title"><b>Figure 1.1. Charity Administration Office Network</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/Charity-Network.png" width="432" alt="Charity Administration Office Network"></div></div></div><br class="figure-break"><div class="procedure" title="Procedure 1.3. Samba Server Configuration"><a name="id324118"></a><p class="title"><b>Procedure 1.3. Samba Server Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id324129"></a> - Create a group account for office file storage: -</p><pre class="screen"> -<code class="prompt">root# </code> groupadd office -</pre><p> - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id324152"></a> - <a class="indexterm" name="id324158"></a> - Create a user account for office file storage: -</p><pre class="screen"> -<code class="prompt">root# </code> useradd -m abmas -<code class="prompt">root# </code> passwd abmas -Changing password for abmas. -New password: XXXXXXXX -Re-enter new password: XXXXXXXX -Password changed -</pre><p> - where XXXXXXXX is a secret password. - </p></li><li class="step" title="Step 3"><p> - Use the 3-Ware IDE RAID Controller firmware utilities to configure the four 200GB - drives as a single RAID level 5 drive, with one drive set aside as the hot spare. - (Refer to the 3-Ware RAID Controller Manual for the manufacturer's preferred procedure.) - The resulting drive has a capacity of approximately 500GB of usable space. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id324197"></a> - Create a mount point for the file system that can be used to store all data files. - Create a directory called <code class="filename">/data</code>: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir /data -<code class="prompt">root# </code> chmod 755 /data -</pre><p> - The 755 permissions on this directory (mount point) permit the owner to read, write, and execute, - and the group and everyone else to read and execute only. - </p></li><li class="step" title="Step 5"><p> - Use SUSE Linux system tools (refer to the SUSE Administrators Guide for correct - procedures) to format the partition with a suitable file system. The reiserfs file system - is suitable. Configure this drive to automount using the <code class="filename">/data</code> - directory as the mount point. It must be mounted before proceeding. - </p></li><li class="step" title="Step 6"><p> - Under the directory called <code class="filename">/data</code>, create two directories - named <code class="filename">ftmfiles</code> and <code class="filename">officefiles</code>, and set - ownership and permissions: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /data/{ftmfiles,officefiles/{letters,invitations,misc}} -<code class="prompt">root# </code> chown -R abmas:office /data -<code class="prompt">root# </code> chmod -R ug+rwxs,o-w,o+rx /data -</pre><p> - These demonstrate compound operations. The <code class="literal">mkdir</code> command - creates in one step these directories: -</p><pre class="programlisting"> -/data/fmtfiles -/data/officefiles -/data/officefiles/letters -/data/officefiles/invitations -/data/officefiles/misc -</pre><p> - <a class="indexterm" name="id324296"></a> - The <code class="literal">chown</code> operation sets the owner to the user <code class="constant">abmas</code> - and the group to <code class="constant">office</code> on all directories just created. It recursively - sets the permissions so that the owner and group have SUID/SGID with read, write, and execute - permission, and everyone else has read and execute permission. This means that all files and - directories are created with the same owner and group as the directory in which they are - created. Any new directories created still have the same owner, group, and permissions as the - directory they are in. This should eliminate all permissions-based file access problems. For - more information on this subject, refer to TOSHARG2<sup>[<a name="id324318" href="#ftn.id324318" class="footnote">3</a>]</sup> or refer - to the UNIX man page for the <code class="literal">chmod</code> and the <code class="literal">chown</code> commands. - </p></li><li class="step" title="Step 7"><p> - Install the <code class="filename">smb.conf</code> file shown in <a class="link" href="simple.html#charity-smbconfnew" title="Example 1.2. Charity Administration Office smb.conf New-style File">“Charity Administration Office smb.conf New-style File”</a> in the - <code class="filename">/etc/samba</code> directory. This newer <code class="filename">smb.conf</code> file uses user-mode security - and is more suited to the mode of operation of Samba-3 than the older share-mode security - configuration that was shown in the first edition of this book. - </p><p> - Note: If you want to use the older-style configuration that uses share-mode security, you - can install the file shown in <a class="link" href="simple.html#charity-smbconf" title="Example 1.3. Charity Administration Office smb.conf Old-style File">“Charity Administration Office smb.conf Old-style File”</a> in the - <code class="filename">/etc/samba</code> directory. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id324382"></a> - We must ensure that the <code class="literal">smbd</code> can resolve the name of the Samba - server to its IP address. Verify that the <code class="filename">/etc/hosts</code> file - contains the following entry: -</p><pre class="screen"> -192.168.1.1 server -</pre><p> - </p></li><li class="step" title="Step 9"><p> - Configure the printers with the IP address as shown in <a class="link" href="simple.html#charitynet" title="Figure 1.1. Charity Administration Office Network">“Charity Administration Office Network”</a>. - Follow the instructions in the manufacturer's manual to permit printing to port 9100 - so that the CUPS spooler can print using raw mode protocols. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id324423"></a> - Configure the CUPS Print Queues: -</p><pre class="screen"> -<code class="prompt">root# </code> lpadmin -p PRINTQ -v socket://192.168.1.20:9100 -E -<code class="prompt">root# </code> lpadmin -p hplj5 -v socket://192.168.1.30:9100 -E -</pre><p> - This creates the necessary print queues with no assigned print filter. - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id324452"></a> - <a class="indexterm" name="id324459"></a> - <a class="indexterm" name="id324465"></a> - Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream application/vnd.cups-raw 0 - -</pre><p> - </p></li><li class="step" title="Step 12"><p> - <a class="indexterm" name="id324488"></a> - Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream -</pre><p> - </p></li><li class="step" title="Step 13"><p> - <a class="indexterm" name="id324511"></a> - Use the standard system tool to start Samba and CUPS to configure them to restart - automatically at every system reboot. For example, - </p><p> - <a class="indexterm" name="id324522"></a> - <a class="indexterm" name="id324528"></a> - <a class="indexterm" name="id324535"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> chkconfig cups on -<code class="prompt">root# </code> /etc/rc.d/init.d/smb restart -<code class="prompt">root# </code> /etc/rc.d/init.d/cups restart -</pre><p> - </p></li></ol></div><div class="example"><a name="charity-smbconfnew"></a><p class="title"><b>Example 1.2. Charity Administration Office <code class="filename">smb.conf</code> New-style File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global Parameters - Newer Configuration</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id324598"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id324609"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id324619"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id324630"></a><em class="parameter"><code>map to guest = Bad User</code></em></td></tr><tr><td><a class="indexterm" name="id324640"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id324650"></a><em class="parameter"><code>wins support = yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[FTMFILES]</code></em></td></tr><tr><td><a class="indexterm" name="id324669"></a><em class="parameter"><code>comment = Funds Tracking & Management Files</code></em></td></tr><tr><td><a class="indexterm" name="id324680"></a><em class="parameter"><code>path = /data/ftmfiles</code></em></td></tr><tr><td><a class="indexterm" name="id324690"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id324700"></a><em class="parameter"><code>force user = abmas</code></em></td></tr><tr><td><a class="indexterm" name="id324711"></a><em class="parameter"><code>force group = office</code></em></td></tr><tr><td><a class="indexterm" name="id324721"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id324732"></a><em class="parameter"><code>nt acl support = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[office]</code></em></td></tr><tr><td><a class="indexterm" name="id324750"></a><em class="parameter"><code>comment = General Office Files</code></em></td></tr><tr><td><a class="indexterm" name="id324761"></a><em class="parameter"><code>path = /data/officefiles</code></em></td></tr><tr><td><a class="indexterm" name="id324771"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id324782"></a><em class="parameter"><code>force user = abmas</code></em></td></tr><tr><td><a class="indexterm" name="id324792"></a><em class="parameter"><code>force group = office</code></em></td></tr><tr><td><a class="indexterm" name="id324802"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id324813"></a><em class="parameter"><code>nt acl support = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id324832"></a><em class="parameter"><code>comment = Print Temporary Spool Configuration</code></em></td></tr><tr><td><a class="indexterm" name="id324842"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id324852"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id324863"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id324873"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id324884"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="charity-smbconf"></a><p class="title"><b>Example 1.3. Charity Administration Office <code class="filename">smb.conf</code> Old-style File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global Parameters - Older Style Configuration</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id324924"></a><em class="parameter"><code>workgroup = MIDEARTH</code></em></td></tr><tr><td><a class="indexterm" name="id324935"></a><em class="parameter"><code>security = SHARE</code></em></td></tr><tr><td><a class="indexterm" name="id324945"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id324956"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id324966"></a><em class="parameter"><code>disable spoolss = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id324976"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id324987"></a><em class="parameter"><code>wins support = yes</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[FTMFILES]</code></em></td></tr><tr><td><a class="indexterm" name="id325006"></a><em class="parameter"><code>comment = Funds Tracking & Management Files</code></em></td></tr><tr><td><a class="indexterm" name="id325016"></a><em class="parameter"><code>path = /data/ftmfiles</code></em></td></tr><tr><td><a class="indexterm" name="id325026"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id325037"></a><em class="parameter"><code>force user = abmas</code></em></td></tr><tr><td><a class="indexterm" name="id325047"></a><em class="parameter"><code>force group = office</code></em></td></tr><tr><td><a class="indexterm" name="id325058"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id325068"></a><em class="parameter"><code>nt acl support = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[office]</code></em></td></tr><tr><td><a class="indexterm" name="id325087"></a><em class="parameter"><code>comment = General Office Files</code></em></td></tr><tr><td><a class="indexterm" name="id325097"></a><em class="parameter"><code>path = /data/officefiles</code></em></td></tr><tr><td><a class="indexterm" name="id325108"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id325118"></a><em class="parameter"><code>force user = abmas</code></em></td></tr><tr><td><a class="indexterm" name="id325128"></a><em class="parameter"><code>force group = office</code></em></td></tr><tr><td><a class="indexterm" name="id325139"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id325149"></a><em class="parameter"><code>nt acl support = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id325168"></a><em class="parameter"><code>comment = Print Temporary Spool Configuration</code></em></td></tr><tr><td><a class="indexterm" name="id325178"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id325189"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id325199"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id325210"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id325220"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"><div class="procedure" title="Procedure 1.4. Windows Client Configuration"><a name="id325232"></a><p class="title"><b>Procedure 1.4. Windows Client Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure clients to the network settings shown in <a class="link" href="simple.html#charitynet" title="Figure 1.1. Charity Administration Office Network">“Charity Administration Office Network”</a>. - </p></li><li class="step" title="Step 2"><p> - Ensure that the netmask used on the Windows clients matches that used - for the Samba server. All clients must have the same netmask, such as - <code class="constant">255.255.255.0</code>. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id325264"></a> - On all Windows clients, set the WINS Server address to <code class="constant">192.168.1.1</code>, - the IP address of the server. - </p></li><li class="step" title="Step 4"><p> - Set the workgroup name on all clients to <code class="constant">MIDEARTH</code>. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id325290"></a> - Install the <span class="quote">“<span class="quote">Client for Microsoft Networks.</span>”</span> Ensure that the only option - enabled in its properties is the option <span class="quote">“<span class="quote">Logon and restore network connections.</span>”</span> - </p></li><li class="step" title="Step 6"><p> - Click <span class="guibutton">OK</span> when you are prompted to reboot the system. Reboot the - system, then log on using any username and password you choose. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id325322"></a> - Verify on each client that the machine called <code class="constant">SERVER</code> - is visible in <span class="guimenu">My Network Places</span>, that it is - possible to connect to it and see the share <span class="guimenuitem">office</span>, - and that it is possible to open that share to reveal its contents. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id325350"></a> - <a class="indexterm" name="id325356"></a> - Disable password caching on all Windows 9x/Me machines using the registry change file - shown in <a class="link" href="simple.html#MEreg" title="Example 1.4. Windows Me Registry Edit File: Disable Password Caching">“Windows Me Registry Edit File: Disable Password Caching”</a>. Be sure to remove all files that have the - <code class="filename">PWL</code> extension that are in the <code class="filename">C:\WINDOWS</code> - directory. -</p><div class="example"><a name="MEreg"></a><p class="title"><b>Example 1.4. Windows Me Registry Edit File: Disable Password Caching</b></p><div class="example-contents"><pre class="screen"> -REGEDIT4 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ - Windows\CurrentVersion\Policies\Network] - "DisablePwdCaching"=dword:00000001 -</pre></div></div><p><br class="example-break"> - The best way to apply this change is to save the patch in a file called - <code class="filename">ME-dpwc.reg</code> and then execute: -</p><pre class="screen"> -C:\WINDOWS: regedit ME-dpwc.reg -</pre><p> - </p></li><li class="step" title="Step 9"><p> - Instruct all users to log onto the workstation using a name and password of their own - choosing. The Samba server has been - configured to ignore the username and password given. - </p></li><li class="step" title="Step 10"><p> - On each Windows Me workstation, configure a network drive mapping to drive <code class="filename">G:</code> - that redirects to the uniform naming convention (UNC) resource - <code class="filename">\\server\office</code>. Make this a permanent drive connection: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 10.1"><p> - Right-click <span class="guimenu">My Network</span> → <span class="guimenuitem">Map Network Drive...</span> - </p></li><li class="step" title="Step 10.2"><p> - In the box labeled <span class="quote">“<span class="quote">Drive:</span>”</span>, type G. - </p></li><li class="step" title="Step 10.3"><p> - In the box labeled <span class="quote">“<span class="quote">Path:</span>”</span>, enter - <code class="filename">\\server\officefiles</code>. - </p></li><li class="step" title="Step 10.4"><p> - Click <span class="guimenuitem">Reconnect at logon</span>. - Click <span class="guibutton">OK</span>. - </p></li></ol></div></li><li class="step" title="Step 11"><p> - On each workstation, install the FTM software following the - manufacturer's instructions. - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 11.1"><p> - During installation, you are prompted for the name of the Windows 98 - server. Enter the name <code class="constant">SERVER</code>. - </p></li><li class="step" title="Step 11.2"><p> - You are prompted for the name of the data share. - The prompt defaults to <code class="constant">FTMFILES</code>. Press enter to accept the default value. - </p></li><li class="step" title="Step 11.3"><p> - You are now prompted for the print queue name. The default prompt is the name of - the server you entered (<code class="constant">SERVER</code> as follows: - <code class="constant">\\SERVER\PRINTQ</code>). Simply accept the default and press enter to - continue. The software now completes the installation. - </p></li></ol></div></li><li class="step" title="Step 12"><p> - Install an office automation software package of the customer's choice. Either Microsoft - Office 2003 Standard or OpenOffice 1.1.0 suffices for any functions the office may - need to perform. Repeat this on each workstation. - </p></li><li class="step" title="Step 13"><p> - Install a printer on each workstation using the following steps: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 13.1"><p> - Click <span class="guimenu">Start</span> → <span class="guimenuitem">Settings</span> → <span class="guimenuitem">Printers</span>+<span class="guiicon">Add Printer</span>+<span class="guibutton">Next</span>. Do not click <span class="guimenuitem">Network printer</span>. - Ensure that <span class="guimenuitem">Local printer</span> is selected. - </p></li><li class="step" title="Step 13.2"><p> - Click <span class="guibutton">Next</span>. In the Manufacturer: panel, select - <code class="constant">HP</code>. In the Printers: panel, select the printer called - <code class="constant">HP LaserJet 5/5M Postscript</code>. Click <span class="guibutton">Next</span>. - </p></li><li class="step" title="Step 13.3"><p> - In the Available ports: panel, select <code class="constant">FILE:</code>. Accept the - default printer name by clicking <span class="guibutton">Next</span>. When asked, - <span class="quote">“<span class="quote">Would you like to print a test page?</span>”</span>, click - <span class="guimenuitem">No</span>. Click <span class="guibutton">Finish</span>. - </p></li><li class="step" title="Step 13.4"><p> - You may be prompted for the name of a file to print to. If so, close the - dialog panel. Right-click <span class="guiicon">HP LaserJet 5/5M Postscript</span> → <span class="guimenuitem">Properties</span> → <span class="guisubmenu">Details (Tab)</span> → <span class="guimenuitem">Add Port</span>. - </p></li><li class="step" title="Step 13.5"><p> - In the Network panel, enter the name of - the print queue on the Samba server as follows: <code class="constant">\\SERVER\hplj5</code>. - Click <span class="guibutton">OK</span>+<span class="guibutton">OK</span> to complete the installation. - </p></li><li class="step" title="Step 13.6"><p> - It is a good idea to test the functionality of the complete installation before - handing the newly configured network over to the Charity Administration Office - for production use. - </p></li></ol></div></li></ol></div></div><div class="sect3" title="Validation"><div class="titlepage"><div><div><h4 class="title"><a name="id325734"></a>Validation</h4></div></div></div><p> - Use the same validation process as was followed in <a class="link" href="simple.html#validate1" title="Validation">“Validation”</a>. - </p></div></div><div class="sect2" title="Accounting Office"><div class="titlepage"><div><div><h3 class="title"><a name="AccountingOffice"></a>Accounting Office</h3></div></div></div><p> - Abmas Accounting is a 40-year-old family-run business. There are nine permanent - computer users. The network clients were upgraded two years ago. All computers run Windows 2000 - Professional. This year the server will be upgraded from an old Windows NT4 server (actually - running Windows NT4 Workstation, which worked fine for fewer than 10 users) that has - run in workgroup (standalone) mode, to a new Linux server running Samba. - </p><p> - The office does not want a Domain Server. Mr. Alan Meany wants to keep the Windows 2000 Professional - clients running as workgroup machines so that any staff member can take a machine home and keep - working. It has worked well so far, and your task is to replace the old server. All users have - their own workstation logon (you configured it that way when the machines were installed). - Mr. Meany wants the new system to operate the same way as the old Windows NT4 server users - cannot access each others' files, but he can access everyone's files. Each person's work files are - in a separate share on the server. Users log on to their Windows workstation with their username - and enter an assigned password; they do not need to enter a password when accessing their files - on the server. - </p><p> - <a class="indexterm" name="id325783"></a> - The new server will run Red Hat Fedora Core2. You should install Samba-3.0.20 and - copy all files from the old system to the new one. The existing Windows NT4 server has a parallel - port HP LaserJet 4 printer that is shared by all. The printer driver is installed on each - workstation. You must not change anything on the workstations. Mr. Meany gave instructions to - replace the server, <span class="quote">“<span class="quote">but leave everything else alone to avoid staff unrest.</span>”</span> - </p><p> - You have tried to educate Mr. Meany and found that he has no desire to understand networking. - He believes that Windows for Workgroups 3.11 was <span class="quote">“<span class="quote">the best server Microsoft ever sold - </span>”</span> and that Windows NT and 2000 are <span class="quote">“<span class="quote">too fang-dangled complex!</span>”</span> - </p><div class="sect3" title="Dissection and Discussion"><div class="titlepage"><div><div><h4 class="title"><a name="id325807"></a>Dissection and Discussion</h4></div></div></div><p> - <a class="indexterm" name="id325814"></a> - The requirements of this network installation are not unusual. The staff are not interested in the - details of networking. Passwords are never changed. In this example solution, we demonstrate the use - of User Mode security in a simple context. Directories should be set SGID to ensure that members - of a common group can access the contents. Each user has his or her own share to which only they - can connect. Mr. Meany's share will be a top-level directory above the share point for each employee. - Mr. Meany is a member of the same group as his staff and can access their work files. - The well-used HP LaserJet 4 is available as a service called <code class="constant">hplj</code>. - </p><p> - You have finished configuring the new hardware and have just completed installation of Red Hat - Fedora Core2. Roll up your sleeves and let's get to work. - </p></div><div class="sect3" title="Implementation"><div class="titlepage"><div><div><h4 class="title"><a name="AcctgNet"></a>Implementation</h4></div></div></div><p> - The workstations have fixed IP addresses. The old server runs Windows NT4 Workstation, so it - cannot be running as a WINS server. It is best that the new configuration preserves the same - configuration. The office does not use Internet access, so security really is not an issue. - </p><p> - The core information regarding the users, their passwords, the directory share point, and the - share name is given in <a class="link" href="simple.html#acctingnet" title="Table 1.1. Accounting Office Network Information">“Accounting Office Network Information”</a>. The overall network topology is shown in - <a class="link" href="simple.html#acctingnet2" title="Figure 1.2. Accounting Office Network Topology">“Accounting Office Network Topology”</a>. All machines have been configured as indicated prior to the - start of Samba configuration. The following prescriptive steps may now commence. - </p><div class="figure"><a name="acctingnet2"></a><p class="title"><b>Figure 1.2. Accounting Office Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/AccountingNetwork.png" width="459" alt="Accounting Office Network Topology"></div></div></div><br class="figure-break"><div class="table"><a name="acctingnet"></a><p class="title"><b>Table 1.1. Accounting Office Network Information</b></p><div class="table-contents"><table summary="Accounting Office Network Information" border="1"><colgroup><col align="left"><col align="left"><col align="left"><col align="left"><col align="left"><col align="left"></colgroup><thead><tr><th align="left">User</th><th align="left">Login-ID</th><th align="left">Password</th><th align="left">Share Name</th><th align="left">Directory</th><th align="left">Wkst</th></tr></thead><tbody><tr><td align="left">Alan Meany</td><td align="left">alan</td><td align="left">alm1961</td><td align="left">alan</td><td align="left">/data</td><td align="left">PC1</td></tr><tr><td align="left">James Meany</td><td align="left">james</td><td align="left">jimm1962</td><td align="left">james</td><td align="left">/data/james</td><td align="left">PC2</td></tr><tr><td align="left">Jeannie Meany</td><td align="left">jeannie</td><td align="left">jema1965</td><td align="left">jeannie</td><td align="left">/data/jeannie</td><td align="left">PC3</td></tr><tr><td align="left">Suzy Millicent</td><td align="left">suzy</td><td align="left">suzy1967</td><td align="left">suzy</td><td align="left">/data/suzy</td><td align="left">PC4</td></tr><tr><td align="left">Ursula Jenning</td><td align="left">ujen</td><td align="left">ujen1974</td><td align="left">ursula</td><td align="left">/data/ursula</td><td align="left">PC5</td></tr><tr><td align="left">Peter Pan</td><td align="left">peter</td><td align="left">pete1984</td><td align="left">peter</td><td align="left">/data/peter</td><td align="left">PC6</td></tr><tr><td align="left">Dale Roland</td><td align="left">dale</td><td align="left">dale1986</td><td align="left">dale</td><td align="left">/data/dale</td><td align="left">PC7</td></tr><tr><td align="left">Bertrand E Paoletti</td><td align="left">eric</td><td align="left">eric1993</td><td align="left">eric</td><td align="left">/data/eric</td><td align="left">PC8</td></tr><tr><td align="left">Russell Lewis</td><td align="left">russ</td><td align="left">russ2001</td><td align="left">russell</td><td align="left">/data/russell</td><td align="left">PC9</td></tr></tbody></table></div></div><br class="table-break"><div class="procedure" title="Procedure 1.5. Migration from Windows NT4 Workstation System to Samba-3"><a name="id326171"></a><p class="title"><b>Procedure 1.5. Migration from Windows NT4 Workstation System to Samba-3</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p><a class="indexterm" name="id326181"></a> - Rename the old server from <code class="constant">CASHPOOL</code> to <code class="constant">STABLE</code> - by logging onto the console as the <code class="constant">Administrator</code>. Restart the machine - following system prompts. - </p></li><li class="step" title="Step 2"><p> - Name the new server <code class="constant">CASHPOOL</code> using the standard configuration method. - Restart the machine following system prompts. - </p></li><li class="step" title="Step 3"><p> - Install the latest Samba-3 binary Red Hat Linux RPM that is available from the - Samba FTP site. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id326223"></a> - <a class="indexterm" name="id326230"></a> - Add a group account for the office to use. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> groupadd accts -</pre><p> - </p></li><li class="step" title="Step 5"><p> - Install the <code class="filename">smb.conf</code> file shown<sup>[<a name="id326258" href="#ftn.id326258" class="footnote">4</a>]</sup> - in <a class="link" href="simple.html#acctconf" title="Example 1.5. Accounting Office Network smb.conf Old Style Configuration File">“Accounting Office Network smb.conf Old Style Configuration File”</a>. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id326289"></a> - <a class="indexterm" name="id326296"></a> - <a class="indexterm" name="id326302"></a> - For each user who uses this system (see <a class="link" href="simple.html#acctingnet" title="Table 1.1. Accounting Office Network Information">“Accounting Office Network Information”</a>), - execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> useradd -m -G accts -c "Name of User" "LoginID" -<code class="prompt">root# </code> passwd "LoginID" -Changing password for user "LoginID" -New Password: XXXXXXXXX <-- the password from the table -Retype new password: XXXXXXXXX -<code class="prompt">root# </code> smbpasswd -a "LoginID" -New SMB password: XXXXXXXXX <-- the password from the table -Retype new SMB password: XXXXXXXXX -Added user "LoginID" -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id326344"></a> - Create the directory structure for the file shares by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /data -<code class="prompt">root# </code> chown alan /data -<code class="prompt">root# </code> for i in james suzy ujen peter dale eric jeannie russ -> do -> mkdir -p /data/$i -> chown $i /data/$i -> done -<code class="prompt">root# </code> chgrp -R accts /data -<code class="prompt">root# </code> chmod -R ug+rwxs,o-r+x /data -</pre><p> - The data storage structure is now prepared for use. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id326390"></a> - Configure the CUPS Print Queues: -</p><pre class="screen"> -<code class="prompt">root# </code> lpadmin -p hplj -v parallel:/dev/lp0 -E -</pre><p> - This creates the necessary print queues with no assigned print filter. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id326414"></a> - <a class="indexterm" name="id326420"></a> - Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream application/vnd.cups-raw 0 - -</pre><p> - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id326444"></a> - <a class="indexterm" name="id326450"></a> - Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream -</pre><p> - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id326473"></a> - Use the standard system tool to start Samba and CUPS to configure them to restart - automatically at every system reboot. For example, - </p><p> - <a class="indexterm" name="id326484"></a> - <a class="indexterm" name="id326490"></a> - <a class="indexterm" name="id326497"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> chkconfig cups on -<code class="prompt">root# </code> /etc/rc.d/init.d/smb restart -<code class="prompt">root# </code> /etc/rc.d/init.d/cups restart -</pre><p> - </p></li><li class="step" title="Step 12"><p> - On Alan's workstation, use Windows Explorer to migrate the files from the old server - to the new server. The new server should appear in the <span class="guimenu">Network Neighborhood</span> - with the name of the old server (<code class="constant">CASHPOOL</code>). - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 12.1"><p> - Log on to Alan's workstation as the user <code class="constant">alan</code>. - </p></li><li class="step" title="Step 12.2"><p> - Launch a second instance of Windows Explorer and navigate to the share called - <span class="guiicon">files</span> on the server called <span class="guimenu">STABLE</span>. - </p></li><li class="step" title="Step 12.3"><p> - Click in the right panel, and press <span class="guimenu">Ctrl-A</span> to select all files and - directories. Press <span class="guimenu">Ctrl-C</span> to instruct Windows that you wish to - copy all selected items. - </p></li><li class="step" title="Step 12.4"><p> - Launch the Windows Explorer, and navigate to the share called <span class="guiicon">files</span> - on the server called <span class="guimenu">CASHPOOL</span>. Click in the right panel, and then press - <span class="guimenu">Ctrl-V</span> to commence the copying process. - </p></li></ol></div></li><li class="step" title="Step 13"><p> - Verify that the files are being copied correctly from the Windows NT4 machine to the Samba-3 server. - This is best done on the Samba-3 server. Check the contents of the directory tree under - <code class="filename">/data</code> by executing the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> ls -aR /data -</pre><p> - Make certain to check the ownership and permissions on all files. If in doubt, execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> chown alan /data -<code class="prompt">root# </code> for i in james suzy ujen peter dale eric jeannie russ -> do -> chown $i /data/$i -> done -<code class="prompt">root# </code> chgrp -R accts /data -<code class="prompt">root# </code> chmod -R ug+rwxs,o-r+x /data -</pre><p> - </p></li><li class="step" title="Step 14"><p> - The migration of all data should now be complete. It is time to validate the installation. - For this, you should make sure all applications, including printing, work before asking the - customer to test drive the new network. - </p></li></ol></div><div class="example"><a name="acctconf"></a><p class="title"><b>Example 1.5. Accounting Office Network <code class="filename">smb.conf</code> Old Style Configuration File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id326708"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id326718"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id326729"></a><em class="parameter"><code>disable spoolss = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id326739"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id326750"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[files]</code></em></td></tr><tr><td><a class="indexterm" name="id326768"></a><em class="parameter"><code>comment = Work area files</code></em></td></tr><tr><td><a class="indexterm" name="id326779"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id326789"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[master]</code></em></td></tr><tr><td><a class="indexterm" name="id326808"></a><em class="parameter"><code>comment = Master work area files</code></em></td></tr><tr><td><a class="indexterm" name="id326818"></a><em class="parameter"><code>path = /data</code></em></td></tr><tr><td><a class="indexterm" name="id326829"></a><em class="parameter"><code>valid users = alan</code></em></td></tr><tr><td><a class="indexterm" name="id326839"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id326858"></a><em class="parameter"><code>comment = Print Temporary Spool Configuration</code></em></td></tr><tr><td><a class="indexterm" name="id326868"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id326879"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id326889"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id326900"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id326910"></a><em class="parameter"><code>browseable = No</code></em></td></tr></table></div></div><br class="example-break"></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id326925"></a>Questions and Answers</h2></div></div></div><p> - The following questions and answers draw from the examples in this chapter. - Many design decisions are impacted by the configurations chosen. The intent - is to expose some of the hidden implications. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id326935"></a><dl><dt> <a href="simple.html#id326941"> - What makes an anonymous Samba server more simple than a non-anonymous Samba server? - </a></dt><dt> <a href="simple.html#id326964"> - How is the operation of the parameter force user different from - setting the root directory of the share SUID? - </a></dt><dt> <a href="simple.html#id327008"> - When would you both use the per share parameter force user and set - the share root directory SUID? - </a></dt><dt> <a href="simple.html#id327031"> - What is better about CUPS printing than LPRng printing? - </a></dt><dt> <a href="simple.html#id327065"> - When should Windows client IP addresses be hard-coded? - </a></dt><dt> <a href="simple.html#id327086"> - Under what circumstances is it best to use a DHCP server? - </a></dt><dt> <a href="simple.html#id327117"> - What is the purpose of setting the parameter guest ok on a share? - </a></dt><dt> <a href="simple.html#id327140"> - When would you set the global parameter disable spoolss? - </a></dt><dt> <a href="simple.html#id327209"> - Why would you disable password caching on Windows 9x/Me clients? - </a></dt><dt> <a href="simple.html#id327230"> - The example of Abmas Accounting uses User Mode security. How does this provide anonymous access? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id326941"></a><a name="id326943"></a></td><td align="left" valign="top"><p> - What makes an anonymous Samba server more simple than a non-anonymous Samba server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - In the anonymous server, the only account used is the <code class="constant">guest</code> account. - In a non-anonymous configuration, it is necessary to add real user accounts to both the - UNIX system and to the Samba configuration. Non-anonymous servers require additional - administration. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id326964"></a><a name="id326966"></a></td><td align="left" valign="top"><p> - How is the operation of the parameter <em class="parameter"><code>force user</code></em> different from - setting the root directory of the share SUID? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The parameter <em class="parameter"><code>force user</code></em> causes all operations on the share to assume the UID - of the forced user. The new default GID that applies is the primary GID of the forced user. - This gives all users of this resource the actual privilege of the forced user. - </p><p> - When a directory is set SUID, the operating system forces files that are written within it - to be owned by the owner of the directory. While this happens, the user who is using the share - has only the level of privilege he or she is assigned within the operating system context. - </p><p> - The parameter <em class="parameter"><code>force user</code></em> has potential security implications that go - beyond the actual share root directory. Be careful and wary of using this parameter. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327008"></a><a name="id327010"></a></td><td align="left" valign="top"><p> - When would you both use the per share parameter <em class="parameter"><code>force user</code></em> and set - the share root directory SUID? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - You would use both parameters when it is necessary to guarantee that all share handling operations - are conducted as the forced user, while all file and directory creation are done as the SUID - directory owner. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327031"></a><a name="id327034"></a></td><td align="left" valign="top"><p> - What is better about CUPS printing than LPRng printing? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - CUPS is a print spooling system that has integrated remote management facilities, provides completely - automated print processing/preprocessing, and can be configured to automatically - apply print preprocessing filters to ensure that a print job submitted is correctly rendered for the - target printer. CUPS includes an image file RIP that supports printing of image files to - non-PostScript printers. CUPS has lots of bells and whistles and is more like a supercharged MS Windows - NT/200x print monitor and processor. Its complexity can be eliminated or turbocharged to suit - any fancy. - </p><p> - The LPRng software is an enhanced, extended, and portable implementation of the Berkeley LPR print - spooler functionality. It provides the same interface and meets RFC1179 requirements. LPRng can be - configured to act like CUPS, but it is in principle a replacement for the old Berkeley lpr/lpd - spooler. LPRng is generally preferred by those who are familiar with Berkeley lpr/lpd. - </p><p> - Which spooling system is better is a matter of personal taste. It depends on what you want to do and how you want to - do it and manage it. Most modern Linux systems ship with CUPS as the default print management system. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327065"></a><a name="id327067"></a></td><td align="left" valign="top"><p> - When should Windows client IP addresses be hard-coded? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - When there are few MS Windows clients, little client change, no mobile users, and users are not - inclined to tamper with network settings, it is a safe and convenient matter to hard-code Windows - client TCP/IP settings. Given that it is possible to lock down the Windows desktop and remove - user ability to access network configuration controls, fixed configuration eliminates the need - for a DHCP server. This reduces maintenance overheads and eliminates a possible point of network - failure. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327086"></a><a name="id327088"></a></td><td align="left" valign="top"><p> - Under what circumstances is it best to use a DHCP server? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - In network configurations where there are mobile users, or where Windows client PCs move around - (particularly between offices or between subnets), it makes complete sense to control all Windows - client configurations using a DHCP server. Additionally, when users do tamper with the network - settings, DHCP can be used to normalize all client settings. - </p><p> - One underappreciated benefit of using a DHCP server to assign all network client - device TCP/IP settings is that it makes it a pain-free process to change network TCP/IP - settings, change network addressing, or enhance the ability of client devices to - benefit from new network services. - </p><p> - Another benefit of modern DHCP servers is their ability to register dynamically - assigned IP addresses with the DNS server. The benefits of Dynamic DNS (DDNS) are considerable in - a large Windows network environment. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327117"></a><a name="id327119"></a></td><td align="left" valign="top"><p> - What is the purpose of setting the parameter <em class="parameter"><code>guest ok</code></em> on a share? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - If this parameter is set to yes for a service, then no password is required to connect to the service. - Privileges are those of the guest account. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327140"></a><a name="id327142"></a></td><td align="left" valign="top"><p> - When would you set the global parameter <em class="parameter"><code>disable spoolss</code></em>? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Setting this parameter to <code class="constant">Yes</code> disables Samba's support for the SPOOLSS set of - MS-RPCs and yields behavior identical to Samba 2.0.x. Windows NT/2000 clients can downgrade to - using LanMan style printing commands. Windows 9x/Me are unaffected by the parameter. However, this - disables the ability to upload printer drivers to a Samba server via the Windows NT/200x Add Printer - Wizard or by using the NT printer properties dialog window. It also disables the capability of - Windows NT/200x clients to download print drivers from the Samba host on demand. Be extremely careful about - setting this parameter. - </p><p> - The alternate parameter <em class="parameter"><code>use client driver</code></em> applies only to Windows NT/200x clients. It has no - effect on Windows 95/98/Me clients. When serving a printer to Windows NT/200x clients without first installing a valid - printer driver on the Samba host, the client is required to install a local printer driver. From this point on, - the client treats the printer as a local printer and not a network printer connection. This is much the same behavior - that occurs when <em class="parameter"><code>disable spoolss = yes</code></em>. - </p><p> - Under normal circumstances, the NT/200x client attempts to open the network printer using MS-RPC. Because the client - considers the printer to be local, it attempts to issue the <em class="parameter"><code>OpenPrinterEx()</code></em> call requesting - access rights associated with the logged on user. If the user possesses local administrator rights but not root - privilege on the Samba host (often the case), the <em class="parameter"><code>OpenPrinterEx()</code></em> call fails. The result is - that the client now displays an <span class="quote">“<span class="quote">Access Denied; Unable to connect</span>”</span> message in the printer queue window - (even though jobs may be printed successfully). This parameter MUST not be enabled on a print share that has a valid - print driver installed on the Samba server. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327209"></a><a name="id327211"></a></td><td align="left" valign="top"><p> - Why would you disable password caching on Windows 9x/Me clients? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Windows 9x/Me workstations that are set at default (password caching enabled) store the username and - password in files located in the Windows master directory. Such files can be scavenged (read off a client - machine) and decrypted, thus revealing the user's access credentials for all systems the user may have accessed. - It is most insecure to allow any Windows 9x/Me client to operate with password caching enabled. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id327230"></a><a name="id327232"></a></td><td align="left" valign="top"><p> - The example of Abmas Accounting uses User Mode security. How does this provide anonymous access? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The example used does not provide anonymous access. Since the clients are all Windows 2000 Professional, - and given that users are logging onto their machines, by default the client attempts to connect to - a remote server using currently logged in user credentials. By ensuring that the user's login ID and - password are the same as those set on the Samba server, access is transparent and does not require - separate user authentication. - </p></td></tr></tbody></table></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id323099" href="#id323099" class="para">1</a>] </sup>The examples given mirror those documented - in The Official Samba-3 HOWTO and Reference Guide, Second Edition (TOSHARG2) Chapter 2, Section 2.3.1. You may gain additional - insight from the standalone server configurations covered in TOSHARG2, sections 2.3.1.2 through 2.3.1.4. - </p></div><div class="footnote"><p><sup>[<a name="ftn.id323243" href="#id323243" class="para">2</a>] </sup> - This information is given purely as an example of how data may be stored in such a way that it - will be easy to locate records at a later date. The example is not meant to imply any instructions - that may be construed as essential to the design of the solution; this is something you will almost - certainly want to determine for yourself.</p></div><div class="footnote"><p><sup>[<a name="ftn.id324318" href="#id324318" class="para">3</a>] </sup>The Official Samba-3 HOWTO and - Reference Guide, Chapter 15, File, Directory and Share Access Controls.</p></div><div class="footnote"><p><sup>[<a name="ftn.id326258" href="#id326258" class="para">4</a>] </sup>This example uses the - <em class="parameter"><code>smbpasswd</code></em> file in an obtuse way, since the use of - the <em class="parameter"><code>passdb backend</code></em> has not been specified in the <code class="filename">smb.conf</code> - file. This means that you are depending on correct default behavior.</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ExNetworks.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ExNetworks.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="small.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Part I. Example Network Configurations </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 2. Small Office Networking</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/small.html b/docs/htmldocs/Samba3-ByExample/small.html deleted file mode 100644 index d16a51543a..0000000000 --- a/docs/htmldocs/Samba3-ByExample/small.html +++ /dev/null @@ -1,807 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 2. Small Office Networking</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="ExNetworks.html" title="Part I. Example Network Configurations"><link rel="prev" href="simple.html" title="Chapter 1. No-Frills Samba Servers"><link rel="next" href="secure.html" title="Chapter 3. Secure Office Networking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 2. Small Office Networking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><th width="60%" align="center">Part I. Example Network Configurations</th><td width="20%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 2. Small Office Networking"><div class="titlepage"><div><div><h2 class="title"><a name="small"></a>Chapter 2. Small Office Networking</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="small.html#id327308">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327326">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327371">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id327416">Technical Issues</a></span></dt><dt><span class="sect2"><a href="small.html#id327588">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id327606">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="small.html#id329058">Validation</a></span></dt><dt><span class="sect2"><a href="small.html#id329633">Notebook Computers: A Special Case</a></span></dt><dt><span class="sect2"><a href="small.html#id329652">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="small.html#id329716">Questions and Answers</a></span></dt></dl></div><p> - <a class="link" href="simple.html" title="Chapter 1. No-Frills Samba Servers">“No-Frills Samba Servers”</a> focused on the basics of simple yet effective - network solutions. Network administrators who take pride in their work - (that's most of us, right?) take care to deliver what our users want, - but not too much more. If we make things too complex, we confound our users - and increase costs of network ownership. A professional network manager - avoids the temptation to put too much pizazz into the way that the network - operates. Some creativity is helpful, but keep it under control - good advice that the following two scenarios illustrate. - </p><p> - <a class="indexterm" name="id327280"></a> - In one case the network administrator of a mid-sized company spent three - months building a new network to replace an old Netware server. What he - delivered had all the bells and whistles he could muster. There were a - few teething problems during the changeover, nothing serious but a little - disruptive all the same. Users were exposed to many changes at once. The - network administrator was asked to resign two months after implementing - the new system because so many staff complained they had lost time and - were not happy with the new network. Everything was automated, and he - delivered more features than any advanced user could think of. He was - just too smart for his own good. - </p><p> - In the case of the other company, a new network manager was appointed - to oversee the replacement of a LanTastic network with an MS Windows - NT 4.0 network. He had the replacement installed and operational within - two weeks. Before installation and changeover, he called a meeting to - explain to all users what was going to happen, how it would affect them, - and that he would be available 24 hours a day to help them transition. - One week after conversion, he held another meeting asking for cooperation - in the introduction of a few new features that would help to make life - easier. Network users were thrilled with the help he provided. The network - he implemented was nowhere near as complex as in the first example, had fewer - features, and yet he had happy users. Months later he was still adding - new innovations. He always asked the users if a - particular feature was what they wanted. He asked his boss for a raise - and got it. He often told me, <span class="quote">“<span class="quote">Always keep a few new tricks up your - sleeves for when you need them.</span>”</span> Was he smart? You decide. Let's - get on with our next exercise. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id327308"></a>Introduction</h2></div></div></div><p> - Abmas Accounting has grown. Mr. Meany likes you and says he knew you - were the right person for the job. That's why he asked you to install the - new server. The past few months have been hard work. You advised Mr. Meany - that it is time for a change. Abmas now has 52 users, having acquired an - investment consulting business recently. The new users were added to the - network without any problems. - </p><p> - Some of the Windows clients are nearly past their use-by date. You found damaged and unusable software on - some of the workstations that came with the acquired business and found some machines in need of both - hardware and software maintenance. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id327326"></a>Assignment Tasks</h3></div></div></div><p> - <a class="indexterm" name="id327333"></a> - Mr. Meany is retiring in 12 months. Before he goes, he wants you to help ensure - that the business is running efficiently. Many of the new staff want notebook - computers. They visit customer business premises and need to use local network - facilities; these users are technically competent. The company uses a - business application that requires Windows XP Professional. In short, a complete - client upgrade is about to happen. Mr. Meany told you that he is working - on another business acquisition and that by the time he retires there will be - 80 to 100 users. - </p><p> - Mr. Meany is not concerned about security. He wants to make it easier for - staff to do their work. He has hired you to help him appoint a full-time - network manager before he retires. Above all, he says he is investing in - the ability to grow. He is determined to live his lifelong dream and - hand the business over to a bright and capable executive who can make - things happen. This means your network design must cope well with - growth. - </p><p> - In a few months, Abmas will require an Internet connection for email and so - that staff can easily obtain software updates. Mr. Meany is warming up to - the installation of antivirus software but is not yet ready to approve - this expense. He told you to spend the money a virus scanner costs - on better quality notebook computers for mobile users. - </p><p> - One of Mr. Meany's golfing partners convinced him to buy new laser - printers, one black only, the other a color laser printer. Staff support - the need for a color printer so they can present more attractive proposals - and reports. - </p><p> - Mr. Meany also asked if it would be possible for one of the staff to manage - user accounts from the Windows desktop. That person will be responsible for - basic operations. - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id327371"></a>Dissection and Discussion</h2></div></div></div><p> - What are the key requirements in this business example? A quick review indicates - a need for - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Scalability, from 52 to over 100 users in 12 months - </p></li><li class="listitem"><p> - Mobile computing capability - <a class="indexterm" name="id327391"></a> - </p></li><li class="listitem"><p> - Improved reliability and usability - </p></li><li class="listitem"><p> - Easier administration - </p></li></ul></div><p> - In this instance the installed Linux system is assumed to be a Red Hat Linux Fedora Core2 server - (as in <a class="link" href="simple.html#AccountingOffice" title="Accounting Office">“Accounting Office”</a>). - - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id327416"></a>Technical Issues</h3></div></div></div><p> - <a class="indexterm" name="id327424"></a> - <a class="indexterm" name="id327430"></a> - <a class="indexterm" name="id327436"></a> - <a class="indexterm" name="id327443"></a> - <a class="indexterm" name="id327449"></a> - It is time to implement a domain security environment. You will use the <code class="constant"> - smbpasswd</code> (default) backend. You should implement a DHCP server. There is no need to - run DNS at this time, but the system will use WINS. The domain name will be <code class="constant"> - BILLMORE</code>. This time, the name of the server will be <code class="constant">SLEETH</code>. - </p><p> - All printers will be configured as DHCP clients. The DHCP server will assign - the printer a fixed IP address by way of its Ethernet interface (MAC) address. - See <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - The <code class="filename">smb.conf</code> file you are creating in this exercise can be used with equal effectiveness - with Samba-2.2.x series releases. This is deliberate so that in the next chapter it is - possible to start with the installation that you have created here, migrate it - to a Samba-3 configuration, and then secure the system further. Configurations following - this one utilize features that may not be supported in Samba-2.2.x releases. - However, you should note that the examples in each chapter start with the assumption - that a fresh new installation is being effected. - </p></div><p> - Later on, when the Internet connection is implemented, you will add DNS as well as - other enhancements. It is important that you plan accordingly. - </p><p> - <a class="indexterm" name="id327498"></a> - You have split the network into two separate areas. Each has its own Ethernet switch. - There are 20 users on the accounting network and 32 users on the financial services - network. The server has two network interfaces, one serving each network. The - network printers will be located in a central area. You plan to install the new - printers and keep the old printer in use also. - </p><p> - You will provide separate file storage areas for each business entity. The old system - will go away, accounting files will be handled under a single directory, and files will - be stored under customer name, not under a personal work area. Staff will be made - responsible for file location, so the old share point must be maintained. - </p><p> - Given that DNS will not be used, you will configure WINS name resolution for UNIX - hostname name resolution. - </p><p> - <a class="indexterm" name="id327521"></a> - <a class="indexterm" name="id327530"></a> - It is necessary to map Windows Domain Groups to UNIX groups. It is - advisable to also map Windows Local Groups to UNIX groups. Additionally, the two - key staff groups in the firm are accounting staff and financial services staff. - For these, it is necessary to create UNIX groups as well as Windows Domain Groups. - </p><p> - In the sample <code class="filename">smb.conf</code> file, you have configured Samba to call the UNIX - <code class="literal">groupadd</code> to add group entries. This utility does not permit - the addition of group names that contain uppercase characters or spaces. This - is considered a bug. The <code class="literal">groupadd</code> is part of the - <code class="literal">shadow-utils</code> open source software package. A later release - of this package may have been patched to resolve this bug. If your operating - platform has this bug, it means that attempts to add a Windows Domain Group that - has either a space or uppercase characters in it will fail. See - <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 11, Section 11.3.1, Example 11.1, for - more information. - </p><p> - <a class="indexterm" name="id327576"></a> - Vendor-supplied printer drivers will be installed on each client. The CUPS print - spooler on the UNIX host will be operated in <code class="constant">raw</code> mode. - </p></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id327588"></a>Political Issues</h3></div></div></div><p> - Mr. Meany is an old-school manager. He sets the rules and wants to see compliance. - He is willing to spend money on things he believes are of value. You need more - time to convince him of real priorities. - </p><p> - Go ahead, buy better notebooks. Wouldn't it be neat if they happened to be - supplied with antivirus software? Above all, demonstrate good purchase value and remember - to make your users happy. - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id327606"></a>Implementation</h2></div></div></div><p> - <a class="indexterm" name="id327614"></a> - In this example, the assumption is made that this server is being configured from a clean start. - The alternate approach could be to demonstrate the migration of the system that is documented - in <a class="link" href="simple.html#AcctgNet" title="Implementation">“Implementation”</a> to meet the new requirements. The decision to treat this case, as with - future examples, as a new installation is based on the premise that you can determine - the migration steps from the information provided in <a class="link" href="ntmigration.html" title="Chapter 9. Migrating NT4 Domain to Samba-3">“Migrating NT4 Domain to Samba-3”</a>. - Additionally, a fresh installation makes the example easier to follow. - </p><p> - <a class="indexterm" name="id327636"></a> - Each user will be given a home directory on the UNIX system, which will be available as a private - share. Two additional shares will be created, one for the accounting department and the other for - the financial services department. Network users will be given access to these shares by way - of group membership. - </p><p> - <a class="indexterm" name="id327648"></a> - UNIX group membership is the primary mechanism by which Windows Domain users will be granted - rights and privileges within the Windows environment. - </p><p> - <a class="indexterm" name="id327661"></a> - The user <code class="literal">alanm</code> will be made the owner of all files. This will be preserved - by setting the sticky bit (set UID/GID) on the top-level directories. - </p><p> - </p><div class="figure"><a name="acct2net"></a><p class="title"><b>Figure 2.1. Abmas Accounting 52-User Network Topology</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/acct2net.png" alt="Abmas Accounting 52-User Network Topology"></div></div></div><p><br class="figure-break"> -</p><div class="procedure" title="Procedure 2.1. Server Installation Steps"><a name="id327717"></a><p class="title"><b>Procedure 2.1. Server Installation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Using UNIX/Linux system tools, name the server <code class="constant">sleeth</code>. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id327737"></a> - Place an entry for the machine <code class="constant">sleeth</code> in the <code class="filename">/etc/hosts</code>. - The printers are network attached, so there should be entries for the - network printers also. An example <code class="filename">/etc/hosts</code> file is shown here: -</p><pre class="screen"> -192.168.1.1 sleeth sleeth1 -192.168.2.1 sleeth2 -192.168.1.10 hplj6 -192.168.1.11 hplj4 -192.168.2.10 qms -</pre><p> - </p></li><li class="step" title="Step 3"><p> - Install the Samba-3 binary RPM from the Samba-Team FTP site. - </p></li><li class="step" title="Step 4"><p> - Install the ISC DHCP server using the UNIX/Linux system tools available to you. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id327784"></a> - <a class="indexterm" name="id327791"></a> - <a class="indexterm" name="id327797"></a> - <a class="indexterm" name="id327803"></a> - Because Samba will be operating over two network interfaces and clients on each side - may want to be able to reach clients on the other side, it is imperative that IP forwarding - is enabled. Use the system tool of your choice to enable IP forwarding. In the - absence of such a tool on the Linux system, add to the <code class="filename">/etc/rc.d/rc.local</code> - file an entry as follows: -</p><pre class="screen"> -echo 1 > /proc/sys/net/ipv4/ip_forward -</pre><p> - This causes the Linux kernel to forward IP packets so that it acts as a router. - </p></li><li class="step" title="Step 6"><p> - Install the <code class="filename">smb.conf</code> file as shown in <a class="link" href="small.html#acct2conf" title="Example 2.3. Accounting Office Network smb.conf File [globals] Section">“Accounting Office Network smb.conf File [globals] Section”</a> and - <a class="link" href="small.html#acct3conf" title="Example 2.4. Accounting Office Network smb.conf File Services and Shares Section">“Accounting Office Network smb.conf File Services and Shares Section”</a>. Combine these two examples to form a single - <code class="filename">/etc/samba/smb.conf</code> file. - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id327856"></a> - Add the user <code class="literal">root</code> to the Samba password backend: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -a root -New SMB password: XXXXXXX -Retype new SMB password: XXXXXXX -<code class="prompt">root# </code> -</pre><p> - <a class="indexterm" name="id327884"></a> - This is the Windows Domain Administrator password. Never delete this account from - the password backend after Windows Domain Groups have been initialized. If you delete - this account, your system is crippled. You cannot restore this account, - and your Samba server can no longer be administered. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id327899"></a> - Create the username map file to permit the <code class="constant">root</code> account to be called - <code class="constant">Administrator</code> from the Windows network environment. To do this, create - the file <code class="filename">/etc/samba/smbusers</code> with the following contents: -</p><pre class="screen"> -#### -# User mapping file -#### -# File Format -# ----------- -# Unix_ID = Windows_ID -# -# Examples: -# root = Administrator -# janes = "Jane Smith" -# jimbo = Jim Bones -# -# Note: If the name contains a space it must be double quoted. -# In the example above the name 'jimbo' will be mapped to Windows -# user names 'Jim' and 'Bones' because the space was not quoted. -####################################################################### -root = Administrator -#### -# End of File -#### -</pre><p> - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id327933"></a> - Create and map Windows Domain Groups to UNIX groups. A sample script is provided in - <a class="link" href="small.html#initGrps" title="Example 2.1. Script to Map Windows NT Groups to UNIX Groups">“Script to Map Windows NT Groups to UNIX Groups”</a>. Create a file containing this script. We called ours - <code class="filename">/etc/samba/initGrps.sh</code>. Set this file so it can be executed, - and then execute the script. Sample output should be as follows: - -</p><div class="example"><a name="initGrps"></a><p class="title"><b>Example 2.1. Script to Map Windows NT Groups to UNIX Groups</b></p><div class="example-contents"><a class="indexterm" name="id327958"></a><pre class="screen"> -#!/bin/bash -# -# initGrps.sh -# - -# Create UNIX groups -groupadd acctsdep -groupadd finsrvcs - -# Map Windows Domain Groups to UNIX groups -net groupmap add ntgroup="Domain Admins" unixgroup=root type=d -net groupmap add ntgroup="Domain Users" unixgroup=users type=d -net groupmap add ntgroup="Domain Guests" unixgroup=nobody type=d - -# Add Functional Domain Groups -net groupmap add ntgroup="Accounts Dept" unixgroup=acctsdep type=d -net groupmap add ntgroup="Financial Services" unixgroup=finsrvcs type=d -</pre></div></div><p><br class="example-break"> - -</p><pre class="screen"> -<code class="prompt">root# </code> chmod 755 initGrps.sh -<code class="prompt">root# </code> cd /etc/samba -<code class="prompt">root# </code> ./initGrps.sh -Updated mapping entry for Domain Admins -Updated mapping entry for Domain Users -Updated mapping entry for Domain Guests -No rid or sid specified, choosing algorithmic mapping -Successfully added group Accounts Dept to the mapping db -No rid or sid specified, choosing algorithmic mapping -Successfully added group Domain Guests to the mapping db - -<code class="prompt">root# </code> cd /etc/samba -<code class="prompt">root# </code> net groupmap list | sort -Account Operators (S-1-5-32-548) -> -1 -Accounts Dept (S-1-5-21-194350-25496802-3394589-2003) -> acctsdep -Administrators (S-1-5-32-544) -> -1 -Backup Operators (S-1-5-32-551) -> -1 -Domain Admins (S-1-5-21-194350-25496802-3394589-512) -> root -Domain Guests (S-1-5-21-194350-25496802-3394589-514) -> nobody -Domain Users (S-1-5-21-194350-25496802-3394589-513) -> users -Financial Services (S-1-5-21-194350-25496802-3394589-2005) -> finsrvcs -Guests (S-1-5-32-546) -> -1 -Power Users (S-1-5-32-547) -> -1 -Print Operators (S-1-5-32-550) -> -1 -Replicators (S-1-5-32-552) -> -1 -System Operators (S-1-5-32-549) -> -1 -Users (S-1-5-32-545) -> -1 -</pre><p> - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id328022"></a> - <a class="indexterm" name="id328029"></a> - <a class="indexterm" name="id328037"></a> - For each user who needs to be given a Windows Domain account, make an entry in the - <code class="filename">/etc/passwd</code> file as well as in the Samba password backend. - Use the system tool of your choice to create the UNIX system accounts, and use the Samba - <code class="literal">smbpasswd</code> program to create the Domain user accounts. - </p><p> - <a class="indexterm" name="id328059"></a> - <a class="indexterm" name="id328066"></a> - <a class="indexterm" name="id328072"></a> - There are a number of tools for user management under UNIX, such as - <code class="literal">useradd</code> and <code class="literal">adduser</code>, as well as a plethora of custom - tools. With the tool of your choice, create a home directory for each user. - </p></li><li class="step" title="Step 11"><p> - Using the preferred tool for your UNIX system, add each user to the UNIX groups created - previously, as necessary. File system access control will be based on UNIX group membership. - </p></li><li class="step" title="Step 12"><p> - Create the directory mount point for the disk subsystem that is mounted to provide - data storage for company files. In this case the mount point is indicated in the <code class="filename">smb.conf</code> - file is <code class="filename">/data</code>. Format the file system as required, mount the formatted - file system partition using <code class="literal">mount</code>, - and make the appropriate changes in <code class="filename">/etc/fstab</code>. - </p></li><li class="step" title="Step 13"><p> - Create the top-level file storage directories are follows: -</p><pre class="screen"> -<code class="prompt">root# </code> mkdir -p /data/{accounts,finsvcs} -<code class="prompt">root# </code> chown -R root:root /data -<code class="prompt">root# </code> chown -R alanm:acctsdep /data/accounts -<code class="prompt">root# </code> chown -R alanm:finsrvcs /data/finsrvcs -<code class="prompt">root# </code> chmod -R ug+rwx,o+rx-w /data -</pre><p> - Each department is responsible for creating its own directory structure within its - share. The directory root of the <code class="literal">accounts</code> share is <code class="filename">/data/accounts</code>. - The directory root of the <code class="literal">finsvcs</code> share is <code class="filename">/data/finsvcs</code>. - </p></li><li class="step" title="Step 14"><p> - Configure the printers with the IP addresses as shown in <a class="link" href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">“Abmas Accounting 52-User Network Topology”</a>. - Follow the instructions in the manufacturers' manuals to permit printing to port 9100. - This allows the CUPS spooler to print using raw mode protocols. - <a class="indexterm" name="id328203"></a> - <a class="indexterm" name="id328209"></a> - </p></li><li class="step" title="Step 15"><p> - <a class="indexterm" name="id328222"></a> - <a class="indexterm" name="id328230"></a> - Configure the CUPS Print Queues as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> lpadmin -p hplj4 -v socket://192.168.1.11:9100 -E -<code class="prompt">root# </code> lpadmin -p hplj6 -v socket://192.168.1.10:9100 -E -<code class="prompt">root# </code> lpadmin -p qms -v socket://192.168.2.10:9100 -E -</pre><p> - <a class="indexterm" name="id328257"></a> - This creates the necessary print queues with no assigned print filter. - </p></li><li class="step" title="Step 16"><p> - <a class="indexterm" name="id328270"></a> - <a class="indexterm" name="id328277"></a> - <a class="indexterm" name="id328283"></a> - Edit the file <code class="filename">/etc/cups/mime.convs</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream application/vnd.cups-raw 0 - -</pre><p> - </p></li><li class="step" title="Step 17"><p> - <a class="indexterm" name="id328306"></a> - Edit the file <code class="filename">/etc/cups/mime.types</code> to uncomment the line: -</p><pre class="screen"> -application/octet-stream -</pre><p> - </p></li><li class="step" title="Step 18"><p> - <a class="indexterm" name="id328329"></a> - Using your favorite system editor, create an <code class="filename">/etc/dhcpd.conf</code> with the - contents as shown in <a class="link" href="small.html#dhcp01" title="Example 2.2. Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf">“Abmas Accounting DHCP Server Configuration File /etc/dhcpd.conf”</a>. -</p><div class="example"><a name="dhcp01"></a><p class="title"><b>Example 2.2. Abmas Accounting DHCP Server Configuration File <code class="filename">/etc/dhcpd.conf</code></b></p><div class="example-contents"><a class="indexterm" name="id328359"></a><pre class="screen"> -default-lease-time 86400; -max-lease-time 172800; -default-lease-time 86400; - -option ntp-servers 192.168.1.1; -option domain-name "abmas.biz"; -option domain-name-servers 192.168.1.1, 192.168.2.1; -option netbios-name-servers 192.168.1.1, 192.168.2.1; -option netbios-node-type 8; -### NOTE ### -# netbios-node-type=8 means set clients to Hybrid Mode -# so they will use Unicast communication with the WINS -# server and thus reduce the level of UDP broadcast -# traffic by up to 90%. -############ - -subnet 192.168.1.0 netmask 255.255.255.0 { - range dynamic-bootp 192.168.1.128 192.168.1.254; - option subnet-mask 255.255.255.0; - option routers 192.168.1.1; - allow unknown-clients; - host hplj4 { - hardware ethernet 08:00:46:7a:35:e4; - fixed-address 192.168.1.10; - } - host hplj6 { - hardware ethernet 00:03:47:cb:81:e0; - fixed-address 192.168.1.11; - } - } -subnet 192.168.2.0 netmask 255.255.255.0 { - range dynamic-bootp 192.168.2.128 192.168.2.254; - option subnet-mask 255.255.255.0; - option routers 192.168.2.1; - allow unknown-clients; - host qms { - hardware ethernet 01:04:31:db:e1:c0; - fixed-address 192.168.1.10; - } - } -subnet 127.0.0.0 netmask 255.0.0.0 { - } -</pre></div></div><p><br class="example-break"> - </p></li><li class="step" title="Step 19"><p> - Use the standard system tool to start Samba and CUPS and configure them to start - automatically at every system reboot. For example, - </p><p> - <a class="indexterm" name="id328392"></a> - <a class="indexterm" name="id328398"></a> - <a class="indexterm" name="id328404"></a> - <a class="indexterm" name="id328411"></a> - <a class="indexterm" name="id328417"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> chkconfig dhcp on -<code class="prompt">root# </code> chkconfig smb on -<code class="prompt">root# </code> chkconfig cups on -<code class="prompt">root# </code> /etc/rc.d/init.d/dhcp restart -<code class="prompt">root# </code> /etc/rc.d/init.d/smb restart -<code class="prompt">root# </code> /etc/rc.d/init.d/cups restart -</pre><p> - </p></li><li class="step" title="Step 20"><p> - <a class="indexterm" name="id328466"></a> - <a class="indexterm" name="id328472"></a> - <a class="indexterm" name="id328480"></a> - <a class="indexterm" name="id328487"></a> - <a class="indexterm" name="id328493"></a> - <a class="indexterm" name="id328499"></a> - Configure the name service switch (NSS) to handle WINS-based name resolution. - Since this system does not use a DNS server, it is safe to remove this option from - the NSS configuration. Edit the <code class="filename">/etc/nsswitch.conf</code> file so that - the <code class="constant">hosts:</code> entry looks like this: -</p><pre class="screen"> -hosts: files wins -</pre><p> - </p></li></ol></div><div class="example"><a name="acct2conf"></a><p class="title"><b>Example 2.3. Accounting Office Network <code class="filename">smb.conf</code> File [globals] Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id328555"></a><em class="parameter"><code>workgroup = BILLMORE</code></em></td></tr><tr><td><a class="indexterm" name="id328565"></a><em class="parameter"><code>passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*</code></em></td></tr><tr><td><a class="indexterm" name="id328576"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id328587"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id328597"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id328607"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id328618"></a><em class="parameter"><code>show add printer wizard = No</code></em></td></tr><tr><td><a class="indexterm" name="id328628"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m -G users '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328639"></a><em class="parameter"><code>delete user script = /usr/sbin/userdel -r '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328649"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id328659"></a><em class="parameter"><code>delete group script = /usr/sbin/groupdel '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id328670"></a><em class="parameter"><code>add user to group script = /usr/sbin/usermod -A '%g' '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328681"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id328692"></a><em class="parameter"><code>logon script = scripts\login.bat</code></em></td></tr><tr><td><a class="indexterm" name="id328702"></a><em class="parameter"><code>logon path = </code></em></td></tr><tr><td><a class="indexterm" name="id328713"></a><em class="parameter"><code>logon drive = X:</code></em></td></tr><tr><td><a class="indexterm" name="id328723"></a><em class="parameter"><code>domain logons = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328734"></a><em class="parameter"><code>preferred master = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328744"></a><em class="parameter"><code>wins support = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328754"></a><em class="parameter"><code>printing = CUPS</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="acct3conf"></a><p class="title"><b>Example 2.4. Accounting Office Network <code class="filename">smb.conf</code> File Services and Shares Section</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id328794"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id328805"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id328815"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id328825"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id328844"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id328855"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id328865"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328875"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328886"></a><em class="parameter"><code>use client driver = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id328896"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[netlogon]</code></em></td></tr><tr><td><a class="indexterm" name="id328915"></a><em class="parameter"><code>comment = Network Logon Service</code></em></td></tr><tr><td><a class="indexterm" name="id328925"></a><em class="parameter"><code>path = /data/%U</code></em></td></tr><tr><td><a class="indexterm" name="id328936"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id328946"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[accounts]</code></em></td></tr><tr><td><a class="indexterm" name="id328965"></a><em class="parameter"><code>comment = Accounting Files</code></em></td></tr><tr><td><a class="indexterm" name="id328975"></a><em class="parameter"><code>path = /data/accounts</code></em></td></tr><tr><td><a class="indexterm" name="id328986"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id328996"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[finsrvcs]</code></em></td></tr><tr><td><a class="indexterm" name="id329015"></a><em class="parameter"><code>comment = Financial Service Files</code></em></td></tr><tr><td><a class="indexterm" name="id329025"></a><em class="parameter"><code>path = /data/finsrvcs</code></em></td></tr><tr><td><a class="indexterm" name="id329036"></a><em class="parameter"><code>valid users = %G</code></em></td></tr><tr><td><a class="indexterm" name="id329046"></a><em class="parameter"><code>read only = No</code></em></td></tr></table></div></div><br class="example-break"><div class="sect2" title="Validation"><div class="titlepage"><div><div><h3 class="title"><a name="id329058"></a>Validation</h3></div></div></div><p> - Does everything function as it ought? That is the key question at this point. - Here are some simple steps to validate your Samba server configuration. - </p><div class="procedure" title="Procedure 2.2. Validation Steps"><a name="id329068"></a><p class="title"><b>Procedure 2.2. Validation Steps</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id329078"></a> - If your <code class="filename">smb.conf</code> file has bogus options or parameters, this may cause Samba - to refuse to start. The first step should always be to validate the contents - of this file by running: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s -Load smb config files from smb.conf -Processing section "[homes]" -Processing section "[printers]" -Processing section "[netlogon]" -Processing section "[accounts]" -Processing section "[service]" -Loaded services file OK. -# Global parameters -[global] - workgroup = BILLMORE - passwd chat = *New*Password* \ - %n\n *Re-enter*new*password* %n\n *Password*changed* - username map = /etc/samba/smbusers - syslog = 0 - name resolve order = wins bcast hosts - printcap name = CUPS - show add printer wizard = No - add user script = /usr/sbin/useradd -m -G users '%u' - delete user script = /usr/sbin/userdel -r '%u' - add group script = /usr/sbin/groupadd '%g' - delete group script = /usr/sbin/groupdel '%g' - add user to group script = /usr/sbin/usermod -A '%g' '%u' - add machine script = /usr/sbin/useradd - -s /bin/false -d /var/lib/nobody '%u' - logon script = scripts\logon.bat - logon path = - logon drive = X: - domain logons = Yes - preferred master = Yes - wins support = Yes -... -### Remainder cut to save space ### -</pre><p> - The inclusion of an invalid parameter (say one called dogbert) would generate an - error as follows: -</p><pre class="screen"> -Unknown parameter encountered: "dogbert" -Ignoring unknown parameter "dogbert" -</pre><p> - Clear away all errors before proceeding, and start or restart samba as necessary. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id329135"></a> - <a class="indexterm" name="id329141"></a> - <a class="indexterm" name="id329148"></a> - <a class="indexterm" name="id329154"></a> - Check that the Samba server is running: -</p><pre class="screen"> -<code class="prompt">root# </code> ps ax | grep mbd -14244 ? S 0:00 /usr/sbin/nmbd -D -14245 ? S 0:00 /usr/sbin/nmbd -D -14290 ? S 0:00 /usr/sbin/smbd -D - -$rootprompt; ps ax | grep winbind -14293 ? S 0:00 /usr/sbin/winbindd -D -14295 ? S 0:00 /usr/sbin/winbindd -D -</pre><p> - The <code class="literal">winbindd</code> daemon is running in split mode (normal), so there are also - two instances of it. For more information regarding <code class="literal">winbindd</code>, see - <span class="emphasis"><em>TOSHARG2</em></span>, Chapter 23, Section 23.3. The single instance of - <code class="literal">smbd</code> is normal. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id329199"></a> - Check that an anonymous connection can be made to the Samba server: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient -L localhost -U% - - Sharename Type Comment - --------- ---- ------- - netlogon Disk Network Logon Service - accounts Disk Accounting Files - finsvcs Disk Financial Service Files - IPC$ IPC IPC Service (Samba3) - ADMIN$ IPC IPC Service (Samba3) - hplj4 Printer Hewlett-Packard LaserJet 4 - hplj6 Printer Hewlett-Packard LaserJet 6 - qms Printer QMS Magicolor Laser Printer XXXX - - Server Comment - --------- ------- - SLEETH Samba 3.0.20 - - Workgroup Master - --------- ------- - BILLMORE SLEETH -</pre><p> - This demonstrates that an anonymous listing of shares can be obtained. This is the equivalent - of browsing the server from a Windows client to obtain a list of shares on the server. - The <code class="constant">-U%</code> argument means to send a <code class="constant">NULL</code> username and - a <code class="constant">NULL</code> password. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id329241"></a> - <a class="indexterm" name="id329247"></a> - <a class="indexterm" name="id329254"></a> - Verify that the printers have the IP addresses assigned in the DHCP server configuration file. - The easiest way to do this is to ping the printer name. Immediately after the ping response - has been received, execute <code class="literal">arp -a</code> to find the MAC address of the printer - that has responded. Now you can compare the IP address and the MAC address of the printer - with the configuration information in the <code class="filename">/etc/dhcpd.conf</code> file. They - should, of course, match. For example, -</p><pre class="screen"> -<code class="prompt">root# </code> ping hplj4 -PING hplj4 (192.168.1.11) 56(84) bytes of data. -64 bytes from hplj4 (192.168.1.11): icmp_seq=1 ttl=64 time=0.113 ms - -<code class="prompt">root# </code> arp -a -hplj4 (192.168.1.11) at 08:00:46:7A:35:E4 [ether] on eth0 -</pre><p> - The MAC address <code class="constant">08:00:46:7A:35:E4</code> matches that specified for the - IP address from which the printer has responded and the entry for it in the - <code class="filename">/etc/dhcpd.conf</code> file. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id329307"></a> - Make an authenticated connection to the server using the <code class="literal">smbclient</code> tool: -</p><pre class="screen"> -<code class="prompt">root# </code> smbclient //sleeth/accounts -U alanm -Password: XXXXXXX -smb: \> dir - . D 0 Sun Nov 9 01:28:34 2003 - .. D 0 Sat Aug 16 17:24:26 2003 - .mc DH 0 Sat Nov 8 21:57:38 2003 - .qt DH 0 Fri Sep 5 00:48:25 2003 - SMB D 0 Sun Oct 19 23:04:30 2003 - Documents D 0 Sat Nov 1 00:31:51 2003 - xpsp1a_en_x86.exe 131170400 Sun Nov 2 01:25:44 2003 - - 65387 blocks of size 65536. 28590 blocks available -smb: \> q -</pre><p> - </p></li></ol></div></div><div class="procedure" title="Procedure 2.3. Windows XP Professional Client Configuration"><a name="id329344"></a><p class="title"><b>Procedure 2.3. Windows XP Professional Client Configuration</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure clients to the network settings shown in <a class="link" href="small.html#acct2net" title="Figure 2.1. Abmas Accounting 52-User Network Topology">“Abmas Accounting 52-User Network Topology”</a>. - All clients use DHCP for TCP/IP protocol stack configuration. - <a class="indexterm" name="id329359"></a> - <a class="indexterm" name="id329366"></a> - DHCP configures all Windows clients to use the WINS Server address <code class="constant">192.168.1.1</code>. - </p></li><li class="step" title="Step 2"><p> - Join the Windows Domain called <code class="constant">BILLMORE</code>. Use the Domain Administrator - username <code class="constant">root</code> and the SMB password you assigned to this account. - A detailed step-by-step procedure for joining a Windows 200x/XP Professional client to - a Windows Domain is given in <a class="link" href="appendix.html" title="Chapter 15. A Collection of Useful Tidbits">“A Collection of Useful Tidbits”</a>, <a class="link" href="appendix.html#domjoin" title="Joining a Domain: Windows 200x/XP Professional">“Joining a Domain: Windows 200x/XP Professional”</a>. - Reboot the machine as prompted and then log on using a Domain User account. - </p></li><li class="step" title="Step 3"><p> - Verify on each client that the machine called <code class="constant">SLEETH</code> - is visible in <span class="guimenu">My Network Places</span>, that it is - possible to connect to it and see the shares <span class="guimenuitem">accounts</span> - and <span class="guimenuitem">finsvcs</span>, - and that it is possible to open that share to reveal its contents. - </p></li><li class="step" title="Step 4"><p> - Instruct all users to log onto the workstation using their assigned username and password. - </p></li><li class="step" title="Step 5"><p> - Install a printer on each using the following steps: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 5.1"><p> - Click <span class="guimenu">Start</span> → <span class="guimenuitem">Settings</span> → <span class="guimenuitem">Printers</span>+<span class="guiicon">Add Printer</span>+<span class="guibutton">Next</span>. Do not click <span class="guimenuitem">Network printer</span>. - Ensure that <span class="guimenuitem">Local printer</span> is selected. - </p></li><li class="step" title="Step 5.2"><p> - Click <span class="guibutton">Next</span>. In the - <span class="guimenuitem">Manufacturer:</span> panel, select <code class="constant">HP</code>. - In the <span class="guimenuitem">Printers:</span> panel, select the printer called - <code class="constant">HP LaserJet 4</code>. Click <span class="guibutton">Next</span>. - </p></li><li class="step" title="Step 5.3"><p> - In the <span class="guimenuitem">Available ports:</span> panel, select - <code class="constant">FILE:</code>. Accept the default printer name by clicking - <span class="guibutton">Next</span>. When asked, <span class="quote">“<span class="quote">Would you like to print a - test page?</span>”</span>, click <span class="guimenuitem">No</span>. Click - <span class="guibutton">Finish</span>. - </p></li><li class="step" title="Step 5.4"><p> - You may be prompted for the name of a file to print to. If so, close the - dialog panel. Right-click <span class="guiicon">HP LaserJet 4</span> → <span class="guimenuitem">Properties</span> → <span class="guisubmenu">Details (Tab)</span> → <span class="guimenuitem">Add Port</span>. - </p></li><li class="step" title="Step 5.5"><p> - In the <span class="guimenuitem">Network</span> panel, enter the name of - the print queue on the Samba server as follows: <code class="constant">\\SERVER\hplj4</code>. - Click <span class="guibutton">OK</span>+<span class="guibutton">OK</span> to complete the installation. - </p></li><li class="step" title="Step 5.6"><p> - Repeat the printer installation steps above for the HP LaserJet 6 printer - as well as for the QMS Magicolor XXXX laser printer. - </p></li></ol></div></li></ol></div><div class="sect2" title="Notebook Computers: A Special Case"><div class="titlepage"><div><div><h3 class="title"><a name="id329633"></a>Notebook Computers: A Special Case</h3></div></div></div><p> - As a network administrator, you already know how to create local machine accounts for Windows 200x/XP - Professional systems. This is the preferred solution to provide continuity of work for notebook users - so that absence from the office network environment does not become a barrier to productivity. - </p><p> - By creating a local machine account that has the same username and password as you create for that - user in the Windows Domain environment, the user can log onto the machine locally and still - transparently access network resources as if logged onto the domain itself. There are some trade-offs - that mean that as the network is more tightly secured, it becomes necessary to modify Windows client - configuration somewhat. - </p></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id329652"></a>Key Points Learned</h3></div></div></div><p> - In this network design and implementation exercise, you created a Windows NT4-style Domain - Controller using Samba-3.0.20. Following these guidelines, you experienced - and implemented several important aspects of Windows networking. In the next chapter, - you build on the experience. These are the highlights from this chapter: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id329669"></a> - You implemented a DHCP server, and Microsoft Windows clients were able to obtain all necessary - network configuration settings from this server. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id329681"></a> - You created a Windows Domain Controller. You were able to use the network logon service - and successfully joined Windows 200x/XP Professional clients to the Domain. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id329693"></a> - You created raw print queues in the CUPS printing system. You maintained a simple - printing system so that all users can share centrally managed printers. You installed - native printer drivers on the Windows clients. - </p></li><li class="listitem"><p> - You experienced the benefits of centrally managed user accounts on the server. - </p></li><li class="listitem"><p> - You offered Mobile notebook users a solution that allows them to continue to work - while away from the office and not connected to the corporate network. - </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id329716"></a>Questions and Answers</h2></div></div></div><p> - Your new Domain Controller is ready to serve you. What does it mean? Here are some questions and answers that - may help. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id329726"></a><dl><dt>1. <a href="small.html#id329728"> - What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? - </a></dt><dt>2. <a href="small.html#id329750"> - Are there any DHCP server configuration parameters in the /etc/dhcpd.conf - that should be noted in particular? - </a></dt><dt>3. <a href="small.html#id329776"> - Is it possible to create a Windows Domain account that is specifically called Administrator? - </a></dt><dt>4. <a href="small.html#id329810"> - Why is it necessary to give the Windows Domain Administrator a UNIX UID of 0? - </a></dt><dt>5. <a href="small.html#id329843"> - One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him - root access. How can we do this? - </a></dt><dt>6. <a href="small.html#id329878"> - Why must I map Windows Domain Groups to UNIX groups? - </a></dt><dt>7. <a href="small.html#id329912"> - I deleted my root account and now I cannot add it back! What can I do? - </a></dt><dt>8. <a href="small.html#id329978"> - When I run net groupmap list, it reports a group called Administrators - as well as Domain Admins. What is the difference between them? - </a></dt><dt>9. <a href="small.html#id330018"> - What is the effect of changing the name of a Samba server or of changing the Domain name? - </a></dt><dt>10. <a href="small.html#id330060"> - How can I manage user accounts from my Windows XP Professional workstation? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question" title="1."><td align="left" valign="top"><a name="id329728"></a><a name="id329730"></a><p><b>1.</b></p></td><td align="left" valign="top"><p> - What is the key benefit of using DHCP to configure Windows client TCP/IP stacks? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - First and foremost, portability. It means that notebook users can move between - the Abmas office and client offices (so long as they, too, use DHCP) without having to manually - reconfigure their machines. It also means that when they work from their home environments - either using DHCP assigned addressing or when using dial-up networking, settings such as - default routes and DNS server addresses that apply only to the Abmas office environment do - not interfere with remote operations. This is an extremely important feature of DHCP. - </p></td></tr><tr class="question" title="2."><td align="left" valign="top"><a name="id329750"></a><a name="id329752"></a><p><b>2.</b></p></td><td align="left" valign="top"><p> - Are there any DHCP server configuration parameters in the <code class="filename">/etc/dhcpd.conf</code> - that should be noted in particular? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes. The configuration you created automatically provides each client with the IP address - of your WINS server. It also configures the client to preferentially register NetBIOS names - with the WINS server, and then instructs the client to first query the WINS server when a - NetBIOS machine name needs to be resolved to an IP Address. This configuration - results in far lower UDP broadcast traffic than would be the case if WINS was not used. - </p></td></tr><tr class="question" title="3."><td align="left" valign="top"><a name="id329776"></a><a name="id329778"></a><p><b>3.</b></p></td><td align="left" valign="top"><p> - Is it possible to create a Windows Domain account that is specifically called <code class="constant">Administrator</code>? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - You can surely create a Windows Domain account called <code class="constant">Administrator</code>. It is also - possible to map that account so that it has the effective UNIX UID of 0. This way it isn't - necessary to use the <em class="parameter"><code>username map</code></em> facility to map this account to the UNIX - account called <code class="constant">root</code>. - </p></td></tr><tr class="question" title="4."><td align="left" valign="top"><a name="id329810"></a><a name="id329812"></a><p><b>4.</b></p></td><td align="left" valign="top"><p> - Why is it necessary to give the Windows Domain <code class="constant">Administrator</code> a UNIX UID of 0? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The Windows Domain <code class="constant">Administrator</code> account is the most privileged account that - exists on the Windows platform. This user can change any setting, add, delete, or modify user - accounts, and completely reconfigure the system. The equivalent to this account in the UNIX - environment is the <code class="constant">root</code> account. If you want to permit the Windows Domain - Administrator to manage accounts as well as permissions, privileges, and security - settings within the Domain and on the Samba server, equivalent rights must be assigned. This is - achieved with the <code class="constant">root</code> UID equal to 0. - </p></td></tr><tr class="question" title="5."><td align="left" valign="top"><a name="id329843"></a><a name="id329845"></a><p><b>5.</b></p></td><td align="left" valign="top"><p> - One of my junior staff needs the ability to add machines to the Domain, but I do not want to give him - <code class="constant">root</code> access. How can we do this? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Users who are members of the <code class="constant">Domain Admins</code> group can add machines to the - Domain. This group is mapped to the UNIX group account called <code class="constant">root</code> - (or the equivalent <code class="constant">wheel</code> on some UNIX systems) that has a GID of 0. - This must be the primary GID of the account of the user who is a member of the Windows <code class="constant"> - Domain Admins</code> account. - </p></td></tr><tr class="question" title="6."><td align="left" valign="top"><a name="id329878"></a><a name="id329880"></a><p><b>6.</b></p></td><td align="left" valign="top"><p> - Why must I map Windows Domain Groups to UNIX groups? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Samba-3 does not permit a Domain Group to become visible to Domain network clients unless the account - has a UNIX group account equivalent. The Domain groups that should be given UNIX equivalents are - <span class="guimenu">Domain Guests</span>, <span class="guimenu">Domain Users</span>, and <span class="guimenu">Domain Admins</span>. - </p></td></tr><tr class="question" title="7."><td align="left" valign="top"><a name="id329912"></a><a name="id329914"></a><p><b>7.</b></p></td><td align="left" valign="top"><p> - I deleted my <code class="constant">root</code> account and now I cannot add it back! What can I do? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - This is a nasty problem. Fortunately, there is a solution. - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Back up your existing configuration files in case you need to restore them. - </p></li><li class="step" title="Step 2"><p> - Rename the <code class="filename">group_mapping.tdb</code> file. - </p></li><li class="step" title="Step 3"><p> - Use the <code class="literal">smbpasswd</code> to add the root account. - </p></li><li class="step" title="Step 4"><p> - Restore the <code class="filename">group_mapping.tdb</code> file. - </p></li></ol></div></td></tr><tr class="question" title="8."><td align="left" valign="top"><a name="id329978"></a><a name="id329980"></a><p><b>8.</b></p></td><td align="left" valign="top"><p> - When I run <code class="literal">net groupmap list</code>, it reports a group called <span class="guimenu">Administrators</span> - as well as <span class="guimenu">Domain Admins</span>. What is the difference between them? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - The group called <span class="guimenu">Administrators</span> is representative of the same account that would be - present as the Local Group account on a Domain Member server or workstation. Samba uses only Domain - Groups at this time. A Workstation or Server Local Group has no meaning in a Samba context. This - may change at some later date. These accounts are provided only so that security objects are correctly shown. - </p></td></tr><tr class="question" title="9."><td align="left" valign="top"><a name="id330018"></a><a name="id330020"></a><p><b>9.</b></p></td><td align="left" valign="top"><p> - What is the effect of changing the name of a Samba server or of changing the Domain name? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - If you elect to change the name of the Samba server, on restarting <code class="literal">smbd</code>, - Windows security identifiers are changed. In the case of a standalone server or a Domain Member server, - the machine SID is changed. This may break Domain membership. In the case of a change of the Domain name - (Workgroup name), the Domain SID is changed. This affects all Domain memberships. - </p><p> - If it becomes necessary to change either the server name or the Domain name, be sure to back up the respective - SID before the change is made. You can back up the SID using the <code class="literal">net getlocalsid</code> (Samba-3) - or the <code class="literal">smbpasswd</code> (Samba-2.2.x). To change the SID, you use the same tool. Be sure - to check the man page for this command for detailed instructions regarding the steps involved. - </p></td></tr><tr class="question" title="10."><td align="left" valign="top"><a name="id330060"></a><a name="id330062"></a><p><b>10.</b></p></td><td align="left" valign="top"><p> - How can I manage user accounts from my Windows XP Professional workstation? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Samba-3 implements a Windows NT4-style security domain architecture. This type of Domain cannot - be managed using tools present on a Windows XP Professional installation. You may download from the - Microsoft Web site the SRVTOOLS.EXE package. Extract it into the directory from which you wish to use - it. This package extracts the tools: <code class="literal">User Manager for Domains</code>, <code class="literal">Server Manager</code>, and <code class="literal">Event - Viewer</code>. You may use the <span class="guimenu">User Manager for Domains</span> to manage your Samba-3 - Domain user and group accounts. Of course, you do need to be logged on as the <code class="constant">Administrator</code> - for the Samba-3 Domain. It may help to log on as the <code class="constant">root</code> account. - </p></td></tr></tbody></table></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="simple.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ExNetworks.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="secure.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 1. No-Frills Samba Servers </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 3. Secure Office Networking</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/unixclients.html b/docs/htmldocs/Samba3-ByExample/unixclients.html deleted file mode 100644 index cee6e42071..0000000000 --- a/docs/htmldocs/Samba3-ByExample/unixclients.html +++ /dev/null @@ -1,1790 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 7. Adding Domain Member Servers and Clients</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="DMSMig.html" title="Part II. Domain Members, Updating Samba and Migration"><link rel="prev" href="DMSMig.html" title="Part II. Domain Members, Updating Samba and Migration"><link rel="next" href="upgrades.html" title="Chapter 8. Updating Samba-3"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 7. Adding Domain Member Servers and Clients</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="DMSMig.html">Prev</a> </td><th width="60%" align="center">Part II. Domain Members, Updating Samba and Migration</th><td width="20%" align="right"> <a accesskey="n" href="upgrades.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 7. Adding Domain Member Servers and Clients"><div class="titlepage"><div><div><h2 class="title"><a name="unixclients"></a>Chapter 7. Adding Domain Member Servers and Clients</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="unixclients.html#id357946">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#id357994">Assignment Tasks</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id358022">Dissection and Discussion</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#id358046">Technical Issues</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id358646">Political Issues</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id358731">Implementation</a></span></dt><dd><dl><dt><span class="sect2"><a href="unixclients.html#sdcsdmldap">Samba Domain with Samba Domain Member Server Using NSS LDAP</a></span></dt><dt><span class="sect2"><a href="unixclients.html#wdcsdm">NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</a></span></dt><dt><span class="sect2"><a href="unixclients.html#dcwonss">NT4/Samba Domain with Samba Domain Member Server without NSS Support</a></span></dt><dt><span class="sect2"><a href="unixclients.html#adssdm">Active Directory Domain with Samba Domain Member Server</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id364506">UNIX/Linux Client Domain Member</a></span></dt><dt><span class="sect2"><a href="unixclients.html#id365002">Key Points Learned</a></span></dt></dl></dd><dt><span class="sect1"><a href="unixclients.html#id365047">Questions and Answers</a></span></dt></dl></div><p><a class="indexterm" name="id357857"></a><a class="indexterm" name="id357864"></a> - The most frequently discussed Samba subjects over the past 2 years have focused around domain control and printing. - It is well known that Samba is a file and print server. A recent survey conducted by <span class="emphasis"><em>Open Magazine</em></span> found - that of all respondents, 97 percent use Samba for file and print services, and 68 percent use Samba for Domain Control. See the - <a class="ulink" href="http://www.open-mag.com/cgi-bin/opencgi/surveys/survey.cgi?survey_name=samba" target="_top">Open-Mag</a> - Web site for current information. The survey results as found on January 14, 2004, are shown in - <a class="link" href="unixclients.html#ch09openmag" title="Figure 7.1. Open Magazine Samba Survey">“Open Magazine Samba Survey”</a>. - </p><div class="figure"><a name="ch09openmag"></a><p class="title"><b>Figure 7.1. Open Magazine Samba Survey</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/openmag.png" width="324" alt="Open Magazine Samba Survey"></div></div></div><br class="figure-break"><p> - While domain control is an exciting subject, basic file and print sharing remains the staple bread-and-butter - function that Samba provides. Yet this book may give the appearance of having focused too much on more - exciting aspects of Samba deployment. This chapter directs your attention to provide important information on - the addition of Samba servers into your present Windows network whatever the controlling technology - may be. So let's get back to our good friends at Abmas. - </p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id357946"></a>Introduction</h2></div></div></div><p><a class="indexterm" name="id357952"></a><a class="indexterm" name="id357960"></a> - Looking back over the achievements of the past year or two, daily events at Abmas are rather straightforward - with not too many distractions or problems. Your team is doing well, but a number of employees - are asking for Linux desktop systems. Your network has grown and demands additional domain member servers. Let's - get on with this; Christine and Stan are ready to go. - </p><p><a class="indexterm" name="id357978"></a> - Stan is firmly in control of the department of the future, while Christine is enjoying a stable and - predictable network environment. It is time to add more servers and to add Linux desktops. It is - time to meet the demands of future growth and endure trial by fire. - </p><div class="sect2" title="Assignment Tasks"><div class="titlepage"><div><div><h3 class="title"><a name="id357994"></a>Assignment Tasks</h3></div></div></div><p><a class="indexterm" name="id358000"></a> - You must now add UNIX/Linux domain member servers to your network. You have a friend who has a Windows 2003 - Active Directory domain network who wants to add a Samba/Linux server and has asked Christine to help him - out. Your real objective is to help Christine to see more of the way the Microsoft world lives and use - her help to get validation that Samba really does live up to expectations. - </p><p> - Over the past 6 months, you have hired several new staff who want Linux on their desktops. You must integrate - these systems to make sure that Abmas is not building islands of technology. You ask Christine to - do likewise at Swodniw Biz NL (your friend's company) to help them to evaluate a Linux desktop. You want to make - the right decision, don't you? - </p></div></div><div class="sect1" title="Dissection and Discussion"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id358022"></a>Dissection and Discussion</h2></div></div></div><p> - <a class="indexterm" name="id358030"></a> - Recent Samba mailing-list activity is witness to how many sites are using winbind. Some have no trouble - at all with it, yet to others the problems seem insurmountable. Periodically there are complaints concerning - an inability to achieve identical user and group IDs between Windows and UNIX environments. - </p><p> - You provide step-by-step implementations of the various tools that can be used for identity - resolution. You also provide working examples of solutions for integrated authentication for - both UNIX/Linux and Windows environments. - </p><div class="sect2" title="Technical Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id358046"></a>Technical Issues</h3></div></div></div><p> - One of the great challenges we face when people ask us, <span class="quote">“<span class="quote">What is the best way to solve - this problem?</span>”</span> is to get beyond the facts so we not only can clearly comprehend - the immediate technical problem, but also can understand how needs may change. - </p><p> - <a class="indexterm" name="id358063"></a> - There are a few facts we should note when dealing with the question of how best to - integrate UNIX/Linux clients and servers into a Windows networking environment: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id358078"></a> - <a class="indexterm" name="id358084"></a> - <a class="indexterm" name="id358091"></a> - <a class="indexterm" name="id358100"></a> - <a class="indexterm" name="id358107"></a> - A domain controller (PDC or BDC) is always authoritative for all accounts in its domain. - This means that a BDC must (of necessity) be able to resolve all account UIDs and GIDs - to the same values that the PDC resolved them to. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id358120"></a> - <a class="indexterm" name="id358127"></a> - <a class="indexterm" name="id358138"></a> - <a class="indexterm" name="id358145"></a> - A domain member can be authoritative for local accounts, but is never authoritative for - domain accounts. If a user is accessing a domain member server and that user's account - is not known locally, the domain member server must resolve the identity of that user - from the domain in which that user's account resides. It must then map that ID to a - UID/GID pair that it can use locally. This is handled by <code class="literal">winbindd</code>. - </p></li><li class="listitem"><p> - Samba, when running on a domain member server, can resolve user identities from a - number of sources: - </p><div class="itemizedlist"><ul class="itemizedlist" type="circle"><li class="listitem"><p> - <a class="indexterm" name="id358173"></a> - <a class="indexterm" name="id358180"></a> - <a class="indexterm" name="id358187"></a> - <a class="indexterm" name="id358193"></a> - <a class="indexterm" name="id358200"></a> - By executing a system <code class="literal">getpwnam()</code> or <code class="literal">getgrnam()</code> call. - On systems that support it, this utilizes the name service switch (NSS) facility to - resolve names according to the configuration of the <code class="filename">/etc/nsswitch.conf</code> - file. NSS can be configured to use LDAP, winbind, NIS, or local files. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id358231"></a> - <a class="indexterm" name="id358238"></a> - <a class="indexterm" name="id358245"></a> - Performing, via NSS, a direct LDAP search (where an LDAP passdb backend has been configured). - This requires the use of the PADL nss_ldap tool (or equivalent). - </p></li><li class="listitem"><p> - <a class="indexterm" name="id358257"></a> - <a class="indexterm" name="id358264"></a> - <a class="indexterm" name="id358271"></a> - <a class="indexterm" name="id358277"></a> - Directly by querying <code class="literal">winbindd</code>. The <code class="literal">winbindd</code> - contacts a domain controller to attempt to resolve the identity of the user or group. It - receives the Windows networking security identifier (SID) for that appropriate - account and then allocates a local UID or GID from the range of available IDs and - creates an entry in its <code class="filename">winbindd_idmap.tdb</code> and - <code class="filename">winbindd_cache.tdb</code> files. - </p><p> - <a class="indexterm" name="id358314"></a> - <a class="indexterm" name="id358321"></a> - If the parameter <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend = ldap:ldap://myserver.domain</a> - was specified and the LDAP server has been configured with a container in which it may - store the IDMAP entries, all domain members may share a common mapping. - </p></li></ul></div><p> - Irrespective of how <code class="filename">smb.conf</code> is configured, winbind creates and caches a local copy of - the ID mapping database. It uses the <code class="filename">winbindd_idmap.tdb</code> and - <code class="filename">winbindd_cache.tdb</code> files to do this. - </p><p> - Which of the resolver methods is chosen is determined by the way that Samba is configured - in the <code class="filename">smb.conf</code> file. Some of the configuration options are rather less than obvious to the - casual user. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id358380"></a> - <a class="indexterm" name="id358387"></a> - <a class="indexterm" name="id358397"></a> - If you wish to make use of accounts (users and/or groups) that are local to (i.e., capable - of being resolved using) the NSS facility, it is possible to use the - <a class="link" href="smb.conf.5.html#WINBINDTRUSTEDDOMAINSONLY" target="_top">winbind trusted domains only = Yes</a> - in the <code class="filename">smb.conf</code> file. This parameter specifically applies to domain controllers, - and to domain member servers. - </p></li></ul></div><p> - <a class="indexterm" name="id358428"></a> - <a class="indexterm" name="id358434"></a> - <a class="indexterm" name="id358441"></a> - For many administrators, it should be plain that the use of an LDAP-based repository for all network - accounts (both for POSIX accounts and for Samba accounts) provides the most elegant and - controllable facility. You eventually appreciate the decision to use LDAP. - </p><p> - <a class="indexterm" name="id358454"></a> - <a class="indexterm" name="id358460"></a> - <a class="indexterm" name="id358467"></a> - If your network account information resides in an LDAP repository, you should use it ahead of any - alternative method. This means that if it is humanly possible to use the <code class="literal">nss_ldap</code> - tools to resolve UNIX account UIDs/GIDs via LDAP, this is the preferred solution, because it provides - a more readily controllable method for asserting the exact same user and group identifiers - throughout the network. - </p><p> - <a class="indexterm" name="id358486"></a> - <a class="indexterm" name="id358495"></a> - <a class="indexterm" name="id358502"></a> - <a class="indexterm" name="id358509"></a> - <a class="indexterm" name="id358515"></a> - <a class="indexterm" name="id358522"></a> - In the situation where UNIX accounts are held on the domain member server itself, the only effective - way to use them involves the <code class="filename">smb.conf</code> entry - <a class="link" href="smb.conf.5.html#WINBINDTRUSTEDDOMAINSONLY" target="_top">winbind trusted domains only = Yes</a>. This forces - Samba (<code class="literal">smbd</code>) to perform a <code class="literal">getpwnam()</code> system call that can - then be controlled via <code class="filename">/etc/nsswitch.conf</code> file settings. The use of this parameter - disables the use of Samba with trusted domains (i.e., external domains). - </p><p> - <a class="indexterm" name="id358570"></a> - <a class="indexterm" name="id358577"></a> - <a class="indexterm" name="id358586"></a> - <a class="indexterm" name="id358593"></a> - Winbind can be used to create an appliance mode domain member server. In this capacity, <code class="literal">winbindd</code> - is configured to automatically allocate UIDs/GIDs from numeric ranges set in the <code class="filename">smb.conf</code> file. The allocation - is made for all accounts that connect to that domain member server, whether within its own domain or from - trusted domains. If not stored in an LDAP backend, each domain member maintains its own unique mapping database. - This means that it is almost certain that a given user who accesses two domain member servers does not have the - same UID/GID on both servers however, this is transparent to the Windows network user. This data - is stored in the <code class="filename">winbindd_idmap.tdb</code> and <code class="filename">winbindd_cache.tdb</code> files. - </p><p> - <a class="indexterm" name="id358634"></a> - The use of an LDAP backend for the Winbind IDMAP facility permits Windows domain SIDs - mappings to UIDs/GIDs to be stored centrally. The result is a consistent mapping across all domain member - servers so configured. This solves one of the major headaches for network administrators who need to copy - files between or across network file servers. - </p></div><div class="sect2" title="Political Issues"><div class="titlepage"><div><div><h3 class="title"><a name="id358646"></a>Political Issues</h3></div></div></div><p> - <a class="indexterm" name="id358654"></a> - <a class="indexterm" name="id358661"></a> - <a class="indexterm" name="id358667"></a> - <a class="indexterm" name="id358676"></a> - One of the most fierce conflicts recently being waged is resistance to the adoption of LDAP, in - particular OpenLDAP, as a replacement for UNIX NIS (previously called Yellow Pages). Let's face it, LDAP - is different and requires a new approach to the need for a better identity management solution. The more - you work with LDAP, the more its power and flexibility emerges from its dark, cavernous chasm. - </p><p> - LDAP is a most suitable solution for heterogenous environments. If you need crypto, add Kerberos. - The reason these are preferable is because they are heterogenous. Windows solutions of this sort are <span class="emphasis"><em>not</em></span> - heterogenous by design. This is fundamental it isn't religious or political. This also doesn't say that - you can't use Windows Active Directory in a heterogenous environment it can be done, it just requires - commercial integration products. But it's not what Active Directory was designed for. - </p><p> - <a class="indexterm" name="id358707"></a> - <a class="indexterm" name="id358713"></a> - A number of long-term UNIX devotees have recently commented in various communications that the Samba Team - is the first application group to almost force network administrators to use LDAP. It should be pointed - out that we resisted this for as long as we could. It is not out of laziness or malice that LDAP has - finally emerged as the preferred identity management backend for Samba. We recommend LDAP for your total - organizational directory needs. - </p></div></div><div class="sect1" title="Implementation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id358731"></a>Implementation</h2></div></div></div><p> - <a class="indexterm" name="id358738"></a> - <a class="indexterm" name="id358748"></a> - <a class="indexterm" name="id358757"></a> - The domain member server and the domain member client are at the center of focus in this chapter. - Configuration of Samba-3 domain controller is covered in earlier chapters, so if your - interest is in domain controller configuration, you will not find that here. You will find good - oil that helps you to add domain member servers and clients. - </p><p> - <a class="indexterm" name="id358770"></a> - In practice, domain member servers and domain member workstations are very different entities, but in - terms of technology they share similar core infrastructure. A technologist would argue that servers - and workstations are identical. Many users would argue otherwise, given that in a well-disciplined - environment a workstation (client) is a device from which a user creates documents and files that - are located on servers. A workstation is frequently viewed as a disposable (easy to replace) item, - but a server is viewed as a core component of the business. - </p><p> - <a class="indexterm" name="id358787"></a> - We can look at this another way. If a workstation breaks down, one user is affected, but if a - server breaks down, hundreds of users may not be able to work. The services that a workstation - must provide are document- and file-production oriented; a server provides information storage - and is distribution oriented. - </p><p> - <a class="indexterm" name="id358800"></a> - <a class="indexterm" name="id358807"></a> - <a class="indexterm" name="id358813"></a> - <span class="emphasis"><em>Why is this important?</em></span> For starters, we must identify what - components of the operating system and its environment must be configured. Also, it is necessary - to recognize where the interdependencies between the various services to be used are. - In particular, it is important to understand the operation of each critical part of the - authentication process, the logon process, and how user identities get resolved and applied - within the operating system and applications (like Samba) that depend on this and may - actually contribute to it. - </p><p> - So, in this chapter we demonstrate how to implement the technology. It is done within a context of - what type of service need must be fulfilled. - </p><div class="sect2" title="Samba Domain with Samba Domain Member Server Using NSS LDAP"><div class="titlepage"><div><div><h3 class="title"><a name="sdcsdmldap"></a>Samba Domain with Samba Domain Member Server Using NSS LDAP</h3></div></div></div><p> - <a class="indexterm" name="id358848"></a> - <a class="indexterm" name="id358854"></a> - <a class="indexterm" name="id358861"></a> - <a class="indexterm" name="id358868"></a> - <a class="indexterm" name="id358877"></a> - <a class="indexterm" name="id358884"></a> - In this example, it is assumed that you have Samba PDC/BDC servers. This means you are using - an LDAP ldapsam backend. We are adding to the LDAP backend database (directory) - containers for use by the IDMAP facility. This makes it possible to have globally consistent - mapping of SIDs to and from UIDs and GIDs. This means that it is necessary to run - <code class="literal">winbindd</code> as part of your configuration. The primary purpose of running - <code class="literal">winbindd</code> (within this operational context) is to permit mapping of foreign - SIDs (those not originating from the the local Samba server). Foreign SIDs can come from any - domain member client or server, or from Windows clients that do not belong to a domain. Another - way to explain the necessity to run <code class="literal">winbindd</code> is that Samba can locally - resolve only accounts that belong to the security context of its own machine SID. Winbind - handles all non-local SIDs and maps them to a local UID/GID value. The UID and GID are allocated - from the parameter values set in the <code class="filename">smb.conf</code> file for the <em class="parameter"><code>idmap uid</code></em> and - <em class="parameter"><code>idmap gid</code></em> ranges. Where LDAP is used, the mappings can be stored in LDAP - so that all domain member servers can use a consistent mapping. - </p><p> - <a class="indexterm" name="id358942"></a> - <a class="indexterm" name="id358948"></a> - <a class="indexterm" name="id358955"></a> - If your installation is accessed only from clients that are members of your own domain, and all - user accounts are present in a local passdb backend then it is not necessary to run - <code class="literal">winbindd</code>. The local passdb backend can be in smbpasswd, tdbsam, or in ldapsam. - </p><p> - It is possible to use a local passdb backend with any convenient means of resolving the POSIX - user and group account information. The POSIX information is usually obtained using the - <code class="literal">getpwnam()</code> system call. On NSS-enabled systems, the actual POSIX account - source can be provided from - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id358988"></a> - <a class="indexterm" name="id358995"></a> - Accounts in <code class="filename">/etc/passwd</code> or in <code class="filename">/etc/group</code>. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id359018"></a> - <a class="indexterm" name="id359025"></a> - <a class="indexterm" name="id359031"></a> - <a class="indexterm" name="id359038"></a> - <a class="indexterm" name="id359045"></a> - <a class="indexterm" name="id359052"></a> - <a class="indexterm" name="id359058"></a> - <a class="indexterm" name="id359065"></a> - <a class="indexterm" name="id359072"></a> - Resolution via NSS. On NSS-enabled systems, there is usually a facility to resolve IDs - via multiple methods. The methods typically include <code class="literal">files</code>, - <code class="literal">compat</code>, <code class="literal">db</code>, <code class="literal">ldap</code>, - <code class="literal">nis</code>, <code class="literal">nisplus</code>, <code class="literal">hesiod.</code> When - correctly installed, Samba adds to this list the <code class="literal">winbindd</code> facility. - The ldap facility is frequently the nss_ldap tool provided by PADL Software. - </p></li></ul></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - To advoid confusion the use of the term <code class="literal">local passdb backend</code> means that - the user account backend is not shared by any other Samba server instead, it is - used only locally on the Samba domain member server under discussion. - </p></div><p> - <a class="indexterm" name="id359146"></a> - The diagram in <a class="link" href="unixclients.html#ch9-sambadc" title="Figure 7.2. Samba Domain: Samba Member Server">“Samba Domain: Samba Member Server”</a> demonstrates the relationship of Samba and system - components that are involved in the identity resolution process where Samba is used as a domain - member server within a Samba domain control network. - </p><div class="figure"><a name="ch9-sambadc"></a><p class="title"><b>Figure 7.2. Samba Domain: Samba Member Server</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap9-SambaDC.png" width="324" alt="Samba Domain: Samba Member Server"></div></div></div><br class="figure-break"><p> - <a class="indexterm" name="id359206"></a> - <a class="indexterm" name="id359213"></a> - In this example configuration, Samba will directly search the LDAP-based passwd backend ldapsam - to obtain authentication and user identity information. The IDMAP information is stored in the LDAP - backend so that it can be shared by all domain member servers so that every user will have a - consistent UID and GID across all of them. The IDMAP facility will be used for all foreign - (i.e., not having the same SID as the domain it is a member of) domains. The configuration of - NSS will ensure that all UNIX processes will obtain a consistent UID/GID. - </p><p> - The instructions given here apply to the Samba environment shown in <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a> and <a class="link" href="net2000users.html" title="Chapter 6. A Distributed 2000-User Network">“A Distributed 2000-User Network”</a>. - If the network does not have an LDAP slave server (i.e., <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a> configuration), - change the target LDAP server from <code class="constant">lapdc</code> to <code class="constant">massive.</code> - </p><div class="procedure" title="Procedure 7.1. Configuration of NSS_LDAP-Based Identity Resolution"><a name="id359255"></a><p class="title"><b>Procedure 7.1. Configuration of NSS_LDAP-Based Identity Resolution</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Create the <code class="filename">smb.conf</code> file as shown in <a class="link" href="unixclients.html#ch9-sdmsdc" title="Example 7.1. Samba Domain Member in Samba Domain Using LDAP smb.conf File">“Samba Domain Member in Samba Domain Using LDAP smb.conf File”</a>. Locate - this file in the directory <code class="filename">/etc/samba</code>. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id359292"></a> - Configure the file that will be used by <code class="constant">nss_ldap</code> to - locate and communicate with the LDAP server. This file is called <code class="filename">ldap.conf</code>. - If your implementation of <code class="constant">nss_ldap</code> is consistent with - the defaults suggested by PADL (the authors), it will be located in the - <code class="filename">/etc</code> directory. On some systems, the default location is - the <code class="filename">/etc/openldap</code> directory, however this file is intended - for use by the OpenLDAP utilities and should not really be used by the nss_ldap - utility since its content and structure serves the specific purpose of enabling - the resolution of user and group IDs via NSS. - </p><p> - Change the parameters inside the file that is located on your OS so it matches - <a class="link" href="unixclients.html#ch9-sdmlcnf" title="Example 7.3. Configuration File for NSS LDAP Support /etc/ldap.conf">“Configuration File for NSS LDAP Support /etc/ldap.conf”</a>. To find the correct location of this file, you - can obtain this from the library that will be used by executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> strings /lib/libnss_ldap* | grep ldap.conf -/etc/ldap.conf -</pre><p> - </p></li><li class="step" title="Step 3"><p> - Configure the NSS control file so it matches the one shown in - <a class="link" href="unixclients.html#ch9-sdmnss" title="Example 7.4. NSS using LDAP for Identity Resolution File: /etc/nsswitch.conf">“NSS using LDAP for Identity Resolution File: /etc/nsswitch.conf”</a>. - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id359372"></a> - <a class="indexterm" name="id359379"></a> - Before proceeding to configure Samba, validate the operation of the NSS identity - resolution via LDAP by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -... -root:x:0:512:Netbios Domain Administrator:/root:/bin/false -nobody:x:999:514:nobody:/dev/null:/bin/false -bobj:x:1000:513:Robert Jordan:/home/bobj:/bin/bash -stans:x:1001:513:Stanley Soroka:/home/stans:/bin/bash -chrisr:x:1002:513:Christine Roberson:/home/chrisr:/bin/bash -maryv:x:1003:513:Mary Vortexis:/home/maryv:/bin/bash -jht:x:1004:513:John H Terpstra:/home/jht:/bin/bash -bldg1$:x:1006:553:bldg1$:/dev/null:/bin/false -temptation$:x:1009:553:temptation$:/dev/null:/bin/false -vaioboss$:x:1005:553:vaioboss$:/dev/null:/bin/false -fran$:x:1008:553:fran$:/dev/null:/bin/false -josephj:x:1007:513:Joseph James:/home/josephj:/bin/bash -</pre><p> - You should notice the location of the users' home directories. First, make certain that - the home directories exist on the domain member server; otherwise, the home directory - share is not available. The home directories could be mounted off a domain controller - using NFS or by any other suitable means. Second, the absence of the domain name in the - home directory path is indicative that identity resolution is not being done via winbind. -</p><pre class="screen"> -<code class="prompt">root# </code> getent group -... -Domain Admins:x:512:root,jht -Domain Users:x:513:bobj,stans,chrisr,maryv,jht,josephj -Domain Guests:x:514: -Accounts:x:1000: -Finances:x:1001: -PIOps:x:1002: -sammy:x:4321: -</pre><p> - <a class="indexterm" name="id359426"></a> - <a class="indexterm" name="id359433"></a> - <a class="indexterm" name="id359440"></a> - This shows that all is working as it should be. Notice that in the LDAP database - the users' primary and secondary group memberships are identical. It is not - necessary to add secondary group memberships (in the group database) if the - user is already a member via primary group membership in the password database. - When using winbind, it is in fact undesirable to do this because it results in - doubling up of group memberships and may cause problems with winbind under certain - conditions. It is intended that these limitations with winbind will be resolved soon - after Samba-3.0.20 has been released. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id359458"></a> - The LDAP directory must have a container object for IDMAP data. There are several ways you can - check that your LDAP database is able to receive IDMAP information. One of the simplest is to - execute: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat | grep -i idmap -dn: ou=Idmap,dc=abmas,dc=biz -ou: idmap -</pre><p> - <a class="indexterm" name="id359479"></a> - If the execution of this command does not return IDMAP entries, you need to create an LDIF - template file (see <a class="link" href="unixclients.html#ch9-ldifadd" title="Example 7.2. LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF">“LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF”</a>). You can add the required entries using - the following command: -</p><pre class="screen"> -<code class="prompt">root# </code> ldapadd -x -D "cn=Manager,dc=abmas,dc=biz" \ - -w not24get < /etc/openldap/idmap.LDIF -</pre><p> - </p></li><li class="step" title="Step 6"><p> - Samba automatically populates the LDAP directory container when it needs to. To permit Samba - write access to the LDAP directory it is necessary to set the LDAP administrative password - in the <code class="filename">secrets.tdb</code> file as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w not24get -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id359538"></a> - <a class="indexterm" name="id359549"></a> - The system is ready to join the domain. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -U root%not24get -Joined domain MEGANET2. -</pre><p> - This indicates that the domain join succeeded. - </p><p> - Failure to join the domain could be caused by any number of variables. The most common - causes of failure to join are: - </p><p> - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Broken resolution of NetBIOS names to the respective IP address.</p></li><li class="listitem"><p>Incorrect username and password credentials.</p></li><li class="listitem"><p>The NT4 <em class="parameter"><code>restrict anonymous</code></em> is set to exclude anonymous - connections.</p></li></ul></div><p> - </p><p> - The connection setup can be diagnosed by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc join -S 'pdc-name' -U administrator%password -d 5 -</pre><p> - <a class="indexterm" name="id359616"></a> - <a class="indexterm" name="id359623"></a> - <a class="indexterm" name="id359629"></a> - <a class="indexterm" name="id359636"></a> - Note: Use "root" for UNIX/Linux and Samba, use "Administrator" for Windows NT4/200X. If the cause of - the failure appears to be related to a rejected or failed NT_SESSION_SETUP* or an error message that - says NT_STATUS_ACCESS_DENIED immediately check the Windows registry setting that controls the - <code class="constant">restrict anonymous</code> setting. Set this to the value 0 so that an anonymous connection - can be sustained, then try again. - </p><p> - It is possible (perhaps even recommended) to use the following to validate the ability to connect - to an NT4 PDC/BDC: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc info -S 'pdc-name' -U Administrator%not24get -Domain Name: MEGANET2 -Domain SID: S-1-5-21-422319763-4138913805-7168186429 -Sequence number: 1519909596 -Num users: 7003 -Num domain groups: 821 -Num local groups: 8 - -<code class="prompt">root# </code> net rpc testjoin -S 'pdc-name' -U Administrator%not24get -Join to 'MEGANET2' is OK -</pre><p> - If for any reason the following response is obtained to the last command above,it is time to - call in the Networking Super-Snooper task force (i.e., start debugging): -</p><pre class="screen"> -NT_STATUS_ACCESS_DENIED -Join to 'MEGANET2' failed. -</pre><p> - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id359688"></a> - Just joining the domain is not quite enough; you must now provide a privileged set - of credentials through which <code class="literal">winbindd</code> can interact with the - domain servers. Execute the following to implant the necessary credentials: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo --set-auth-user=Administrator%not24get -</pre><p> - The configuration is now ready to obtain the Samba domain user and group information. - </p></li><li class="step" title="Step 9"><p> - You may now start Samba in the usual manner, and your Samba domain member server - is ready for use. Just add shares as required. - </p></li></ol></div><div class="example"><a name="ch9-sdmsdc"></a><p class="title"><b>Example 7.1. Samba Domain Member in Samba Domain Using LDAP <code class="filename">smb.conf</code> File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id359761"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id359773"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id359784"></a><em class="parameter"><code>security = DOMAIN</code></em></td></tr><tr><td><a class="indexterm" name="id359796"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id359807"></a><em class="parameter"><code>log level = 10</code></em></td></tr><tr><td><a class="indexterm" name="id359819"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id359830"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id359842"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id359853"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id359865"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id359876"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id359888"></a><em class="parameter"><code>wins server = 192.168.2.1</code></em></td></tr><tr><td><a class="indexterm" name="id359899"></a><em class="parameter"><code>ldap suffix = dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id359911"></a><em class="parameter"><code>ldap machine suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id359923"></a><em class="parameter"><code>ldap user suffix = ou=People</code></em></td></tr><tr><td><a class="indexterm" name="id359934"></a><em class="parameter"><code>ldap group suffix = ou=Groups</code></em></td></tr><tr><td><a class="indexterm" name="id359946"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id359957"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=abmas,dc=biz</code></em></td></tr><tr><td><a class="indexterm" name="id359969"></a><em class="parameter"><code>idmap backend = ldap:ldap://lapdc.abmas.biz</code></em></td></tr><tr><td><a class="indexterm" name="id359981"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id359992"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id360004"></a><em class="parameter"><code>winbind trusted domains only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id360016"></a><em class="parameter"><code>printer admin = root</code></em></td></tr><tr><td><a class="indexterm" name="id360027"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id360047"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id360059"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id360070"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id360082"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id360102"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id360114"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id360125"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id360137"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id360148"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id360169"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id360180"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id360192"></a><em class="parameter"><code>admin users = root, Administrator</code></em></td></tr><tr><td><a class="indexterm" name="id360204"></a><em class="parameter"><code>write list = root</code></em></td></tr></table></div></div><br class="example-break"><div class="example"><a name="ch9-ldifadd"></a><p class="title"><b>Example 7.2. LDIF IDMAP Add-On Load File File: /etc/openldap/idmap.LDIF</b></p><div class="example-contents"><pre class="screen"> -dn: ou=Idmap,dc=abmas,dc=biz -objectClass: organizationalUnit -ou: idmap -structuralObjectClass: organizationalUnit -</pre></div></div><br class="example-break"><div class="example"><a name="ch9-sdmlcnf"></a><p class="title"><b>Example 7.3. Configuration File for NSS LDAP Support <code class="filename">/etc/ldap.conf</code></b></p><div class="example-contents"><pre class="screen"> -URI ldap://massive.abmas.biz ldap://massive.abmas.biz:636 -host 192.168.2.1 -base dc=abmas,dc=biz -binddn cn=Manager,dc=abmas,dc=biz -bindpw not24get - -pam_password exop - -nss_base_passwd ou=People,dc=abmas,dc=biz?one -nss_base_shadow ou=People,dc=abmas,dc=biz?one -nss_base_group ou=Groups,dc=abmas,dc=biz?one -ssl no -</pre></div></div><br class="example-break"><div class="example"><a name="ch9-sdmnss"></a><p class="title"><b>Example 7.4. NSS using LDAP for Identity Resolution File: <code class="filename">/etc/nsswitch.conf</code></b></p><div class="example-contents"><pre class="screen"> -passwd: files ldap -shadow: files ldap -group: files ldap - -hosts: files dns wins -networks: files dns - -services: files -protocols: files -rpc: files -ethers: files -netmasks: files -netgroup: files -publickey: files - -bootparams: files -automount: files -aliases: files -</pre></div></div><br class="example-break"></div><div class="sect2" title="NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind"><div class="titlepage"><div><div><h3 class="title"><a name="wdcsdm"></a>NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind</h3></div></div></div><p> - You need to use this method for creating a Samba domain member server if any of the following conditions - prevail: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - LDAP support (client) is not installed on the system. - </p></li><li class="listitem"><p> - There are mitigating circumstances forcing a decision not to use LDAP. - </p></li><li class="listitem"><p> - The Samba domain member server must be part of a Windows NT4 Domain, or a Samba Domain. - </p></li></ul></div><p> - <a class="indexterm" name="id360323"></a> - <a class="indexterm" name="id360329"></a> - <a class="indexterm" name="id360336"></a> - Later in the chapter, you can see how to configure a Samba domain member server for a Windows ADS domain. - Right now your objective is to configure a Samba server that can be a member of a Windows NT4-style - domain and/or does not use LDAP. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - <a class="indexterm" name="id360349"></a> - If you use <code class="literal">winbind</code> for identity resolution, make sure that there are no - duplicate accounts. - </p><p> - <a class="indexterm" name="id360366"></a> - For example, do not have more than one account that has UID=0 in the password database. If there - is an account called <code class="constant">root</code> in the <code class="filename">/etc/passwd</code> database, - it is okay to have an account called <code class="constant">root</code> in the LDAP ldapsam or in the - tdbsam. But if there are two accounts in the passdb backend that have the same UID, winbind will - break. This means that the <code class="constant">Administrator</code> account must be called - <code class="constant">root</code>. - </p><p> - <a class="indexterm" name="id360400"></a> - <a class="indexterm" name="id360406"></a> - <a class="indexterm" name="id360413"></a> - Winbind will break if there is an account in <code class="filename">/etc/passwd</code> that has - the same UID as an account that is in LDAP ldapsam (or in tdbsam) but that differs in name only. - </p></div><p> - <a class="indexterm" name="id360431"></a> - <a class="indexterm" name="id360437"></a> - <a class="indexterm" name="id360444"></a> - <a class="indexterm" name="id360451"></a> - <a class="indexterm" name="id360460"></a> - The following configuration uses CIFS/SMB protocols alone to obtain user and group credentials. - The winbind information is locally cached in the <code class="filename">winbindd_cache.tdb winbindd_idmap.tdb</code> - files. This provides considerable performance benefits compared with the LDAP solution, particularly - where the LDAP lookups must traverse WAN links. You may examine the contents of these - files using the tool <code class="literal">tdbdump</code>, though you may have to build this from the Samba - source code if it has not been supplied as part of a binary package distribution that you may be using. - </p><div class="procedure" title="Procedure 7.2. Configuration of Winbind-Based Identity Resolution"><a name="id360484"></a><p class="title"><b>Procedure 7.2. Configuration of Winbind-Based Identity Resolution</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Using your favorite text editor, create the <code class="filename">smb.conf</code> file so it has the contents - shown in <a class="link" href="unixclients.html#ch0-NT4DSDM" title="Example 7.5. Samba Domain Member Server Using Winbind smb.conf File for NT4 Domain">“Samba Domain Member Server Using Winbind smb.conf File for NT4 Domain”</a>. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id360515"></a> - Edit the <code class="filename">/etc/nsswitch.conf</code> so it has the entries shown in - <a class="link" href="unixclients.html#ch9-sdmnss" title="Example 7.4. NSS using LDAP for Identity Resolution File: /etc/nsswitch.conf">“NSS using LDAP for Identity Resolution File: /etc/nsswitch.conf”</a>. - </p></li><li class="step" title="Step 3"><p> - <a class="indexterm" name="id360540"></a> - The system is ready to join the domain. Execute the following: -</p><pre class="screen"> -net rpc join -U root%not2g4et -Joined domain MEGANET2. -</pre><p> - This indicates that the domain join succeed. - - </p></li><li class="step" title="Step 4"><p> - <a class="indexterm" name="id360565"></a> - <a class="indexterm" name="id360572"></a> - Validate operation of <code class="literal">winbind</code> using the <code class="literal">wbinfo</code> - tool as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -u -MEGANET2+root -MEGANET2+nobody -MEGANET2+jht -MEGANET2+maryv -MEGANET2+billr -MEGANET2+jelliott -MEGANET2+dbrady -MEGANET2+joeg -MEGANET2+balap -</pre><p> - This shows that domain users have been listed correctly. -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -g -MEGANET2+Domain Admins -MEGANET2+Domain Users -MEGANET2+Domain Guests -MEGANET2+Accounts -MEGANET2+Finances -MEGANET2+PIOps -</pre><p> - This shows that domain groups have been correctly obtained also. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id360624"></a> - <a class="indexterm" name="id360631"></a> - <a class="indexterm" name="id360637"></a> - The next step verifies that NSS is able to obtain this information - correctly from <code class="literal">winbind</code> also. -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -... -MEGANET2+root:x:10000:10001:NetBIOS Domain Admin: - /home/MEGANET2/root:/bin/bash -MEGANET2+nobody:x:10001:10001:nobody: - /home/MEGANET2/nobody:/bin/bash -MEGANET2+jht:x:10002:10001:John H Terpstra: - /home/MEGANET2/jht:/bin/bash -MEGANET2+maryv:x:10003:10001:Mary Vortexis: - /home/MEGANET2/maryv:/bin/bash -MEGANET2+billr:x:10004:10001:William Randalph: - /home/MEGANET2/billr:/bin/bash -MEGANET2+jelliott:x:10005:10001:John G Elliott: - /home/MEGANET2/jelliott:/bin/bash -MEGANET2+dbrady:x:10006:10001:Darren Brady: - /home/MEGANET2/dbrady:/bin/bash -MEGANET2+joeg:x:10007:10001:Joe Green: - /home/MEGANET2/joeg:/bin/bash -MEGANET2+balap:x:10008:10001:Bala Pillay: - /home/MEGANET2/balap:/bin/bash -</pre><p> - The user account information has been correctly obtained. This information has - been merged with the winbind template information configured in the <code class="filename">smb.conf</code> file. -</p><pre class="screen"> -<code class="prompt">root# </code># getent group -... -MEGANET2+Domain Admins:x:10000:MEGANET2+root,MEGANET2+jht -MEGANET2+Domain Users:x:10001:MEGANET2+jht,MEGANET2+maryv,\ - MEGANET2+billr,MEGANET2+jelliott,MEGANET2+dbrady,\ - MEGANET2+joeg,MEGANET2+balap -MEGANET2+Domain Guests:x:10002:MEGANET2+nobody -MEGANET2+Accounts:x:10003: -MEGANET2+Finances:x:10004: -MEGANET2+PIOps:x:10005: -</pre><p> - </p></li><li class="step" title="Step 6"><p> - The Samba member server of a Windows NT4 domain is ready for use. - </p></li></ol></div><div class="example"><a name="ch0-NT4DSDM"></a><p class="title"><b>Example 7.5. Samba Domain Member Server Using Winbind <code class="filename">smb.conf</code> File for NT4 Domain</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id360734"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id360745"></a><em class="parameter"><code>workgroup = MEGANET2</code></em></td></tr><tr><td><a class="indexterm" name="id360757"></a><em class="parameter"><code>security = DOMAIN</code></em></td></tr><tr><td><a class="indexterm" name="id360768"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id360780"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id360791"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id360803"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id360814"></a><em class="parameter"><code>max log size = 0</code></em></td></tr><tr><td><a class="indexterm" name="id360826"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id360837"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id360849"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id360860"></a><em class="parameter"><code>wins server = 192.168.2.1</code></em></td></tr><tr><td><a class="indexterm" name="id360872"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id360883"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id360895"></a><em class="parameter"><code>template primary group = "Domain Users"</code></em></td></tr><tr><td><a class="indexterm" name="id360906"></a><em class="parameter"><code>template shell = /bin/bash</code></em></td></tr><tr><td><a class="indexterm" name="id360918"></a><em class="parameter"><code>winbind separator = +</code></em></td></tr><tr><td><a class="indexterm" name="id360929"></a><em class="parameter"><code>printer admin = root</code></em></td></tr><tr><td><a class="indexterm" name="id360941"></a><em class="parameter"><code>hosts allow = 192.168.2., 192.168.3., 127.</code></em></td></tr><tr><td><a class="indexterm" name="id360953"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id360973"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id360985"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id360996"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id361008"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id361028"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id361040"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id361051"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id361062"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id361074"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id361094"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id361106"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id361118"></a><em class="parameter"><code>admin users = root, Administrator</code></em></td></tr><tr><td><a class="indexterm" name="id361129"></a><em class="parameter"><code>write list = root</code></em></td></tr></table></div></div><br class="example-break"></div><div class="sect2" title="NT4/Samba Domain with Samba Domain Member Server without NSS Support"><div class="titlepage"><div><div><h3 class="title"><a name="dcwonss"></a>NT4/Samba Domain with Samba Domain Member Server without NSS Support</h3></div></div></div><p> - No matter how many UNIX/Linux administrators there may be who believe that a UNIX operating - system that does not have NSS and PAM support to be outdated, the fact is there - are still many such systems in use today. Samba can be used without NSS support, but this - does limit it to the use of local user and group accounts only. - </p><p> - The following steps may be followed to implement Samba with support for local accounts. - In this configuration Samba is made a domain member server. All incoming connections - to the Samba server will cause the look-up of the incoming username. If the account - is found, it is used. If the account is not found, one will be automatically created - on the local machine so that it can then be used for all access controls. - </p><div class="procedure" title="Procedure 7.3. Configuration Using Local Accounts Only"><a name="id361165"></a><p class="title"><b>Procedure 7.3. Configuration Using Local Accounts Only</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Using your favorite text editor, create the <code class="filename">smb.conf</code> file so it has the contents - shown in <a class="link" href="unixclients.html#ch0-NT4DSCM" title="Example 7.6. Samba Domain Member Server Using Local Accounts smb.conf File for NT4 Domain">“Samba Domain Member Server Using Local Accounts smb.conf File for NT4 Domain”</a>. - </p></li><li class="step" title="Step 2"><p><a class="indexterm" name="id361197"></a> - The system is ready to join the domain. Execute the following: -</p><pre class="screen"> -net rpc join -U root%not24get -Joined domain MEGANET2. -</pre><p> - This indicates that the domain join succeed. - </p></li><li class="step" title="Step 3"><p> - Be sure to run all three Samba daemons: <code class="literal">smbd</code>, <code class="literal">nmbd</code>, <code class="literal">winbindd</code>. - </p></li><li class="step" title="Step 4"><p> - The Samba member server of a Windows NT4 domain is ready for use. - </p></li></ol></div><div class="example"><a name="ch0-NT4DSCM"></a><p class="title"><b>Example 7.6. Samba Domain Member Server Using Local Accounts <code class="filename">smb.conf</code> File for NT4 Domain</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id361282"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id361294"></a><em class="parameter"><code>workgroup = MEGANET3</code></em></td></tr><tr><td><a class="indexterm" name="id361305"></a><em class="parameter"><code>netbios name = BSDBOX</code></em></td></tr><tr><td><a class="indexterm" name="id361317"></a><em class="parameter"><code>security = DOMAIN</code></em></td></tr><tr><td><a class="indexterm" name="id361328"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id361340"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id361351"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id361363"></a><em class="parameter"><code>add user script = /usr/sbin/useradd -m '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id361374"></a><em class="parameter"><code>add machine script = /usr/sbin/useradd -M '%u'</code></em></td></tr><tr><td><a class="indexterm" name="id361386"></a><em class="parameter"><code>add group script = /usr/sbin/groupadd '%g'</code></em></td></tr><tr><td><a class="indexterm" name="id361398"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id361409"></a><em class="parameter"><code>max log size = 0</code></em></td></tr><tr><td><a class="indexterm" name="id361421"></a><em class="parameter"><code>smb ports = 139</code></em></td></tr><tr><td><a class="indexterm" name="id361432"></a><em class="parameter"><code>name resolve order = wins bcast hosts</code></em></td></tr><tr><td><a class="indexterm" name="id361444"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id361455"></a><em class="parameter"><code>wins server = 192.168.2.1</code></em></td></tr><tr><td><a class="indexterm" name="id361467"></a><em class="parameter"><code>printer admin = root</code></em></td></tr><tr><td><a class="indexterm" name="id361478"></a><em class="parameter"><code>hosts allow = 192.168.2., 192.168.3., 127.</code></em></td></tr><tr><td><a class="indexterm" name="id361490"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id361511"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id361522"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id361534"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id361545"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id361566"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id361577"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id361589"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id361600"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id361612"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id361632"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id361644"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id361655"></a><em class="parameter"><code>admin users = root, Administrator</code></em></td></tr><tr><td><a class="indexterm" name="id361667"></a><em class="parameter"><code>write list = root</code></em></td></tr></table></div></div><br class="example-break"></div><div class="sect2" title="Active Directory Domain with Samba Domain Member Server"><div class="titlepage"><div><div><h3 class="title"><a name="adssdm"></a>Active Directory Domain with Samba Domain Member Server</h3></div></div></div><p> - <a class="indexterm" name="id361692"></a> - <a class="indexterm" name="id361701"></a> - <a class="indexterm" name="id361707"></a> - One of the much-sought-after features new to Samba-3 is the ability to join an Active Directory - domain using Kerberos protocols. This makes it possible to operate an entire Windows network - without the need to run NetBIOS over TCP/IP and permits more secure networking in general. An - exhaustively complete discussion of the protocols is not possible in this book; perhaps a - later book may explore the intricacies of the NetBIOS-less operation that Samba-3 can participate - in. For now, we simply focus on how a Samba-3 server can be made a domain member server. - </p><p> - <a class="indexterm" name="id361725"></a> - <a class="indexterm" name="id361732"></a> - <a class="indexterm" name="id361738"></a> - <a class="indexterm" name="id361745"></a> - The diagram in <a class="link" href="unixclients.html#ch9-adsdc" title="Figure 7.3. Active Directory Domain: Samba Member Server">“Active Directory Domain: Samba Member Server”</a> demonstrates how Samba-3 interfaces with - Microsoft Active Directory components. It should be noted that if Microsoft Windows Services - for UNIX (SFU) has been installed and correctly configured, it is possible to use client LDAP - for identity resolution just as can be done with Samba-3 when using an LDAP passdb backend. - The UNIX tool that you need for this, as in the case of LDAP on UNIX/Linux, is the PADL - Software nss_ldap tool-set. Compared with use of winbind and Kerberos, the use of - LDAP-based identity resolution is a little less secure. In view of the fact that this solution - requires additional software to be installed on the Windows 200x ADS domain controllers, - and that means more management overhead, it is likely that most Samba-3 ADS client sites - may elect to use winbind. - </p><p> - Do not attempt to use this procedure if you are not 100 percent certain that the build of Samba-3 - you are using has been compiled and linked with all the tools necessary for this to work. - Given the importance of this step, you must first validate that the Samba-3 message block - daemon (<code class="literal">smbd</code>) has the necessary features. - </p><p> - The hypothetical domain you are using in this example assumes that the Abmas London office - decided to take its own lead (some would say this is a typical behavior in a global - corporate world; besides, a little divergence and conflict makes for an interesting life). - The Windows Server 2003 ADS domain is called <code class="constant">london.abmas.biz</code> and the - name of the server is <code class="constant">W2K3S</code>. In ADS realm terms, the domain controller - is known as <code class="constant">w2k3s.london.abmas.biz</code>. In NetBIOS nomenclature, the - domain name is <code class="constant">LONDON</code> and the server name is <code class="constant">W2K3S</code>. - </p><div class="figure"><a name="ch9-adsdc"></a><p class="title"><b>Figure 7.3. Active Directory Domain: Samba Member Server</b></p><div class="figure-contents"><div class="mediaobject"><img src="images/chap9-ADSDC.png" width="324" alt="Active Directory Domain: Samba Member Server"></div></div></div><br class="figure-break"><div class="procedure" title="Procedure 7.4. Joining a Samba Server as an ADS Domain Member"><a name="id361844"></a><p class="title"><b>Procedure 7.4. Joining a Samba Server as an ADS Domain Member</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id361856"></a> - Before you try to use Samba-3, you want to know for certain that your executables have - support for Kerberos and for LDAP. Execute the following to identify whether or - not this build is perhaps suitable for use: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /usr/sbin -<code class="prompt">root# </code> smbd -b | grep KRB - HAVE_KRB5_H - HAVE_ADDR_TYPE_IN_KRB5_ADDRESS - HAVE_KRB5 - HAVE_KRB5_AUTH_CON_SETKEY - HAVE_KRB5_GET_DEFAULT_IN_TKT_ETYPES - HAVE_KRB5_GET_PW_SALT - HAVE_KRB5_KEYBLOCK_KEYVALUE - HAVE_KRB5_KEYTAB_ENTRY_KEYBLOCK - HAVE_KRB5_MK_REQ_EXTENDED - HAVE_KRB5_PRINCIPAL_GET_COMP_STRING - HAVE_KRB5_SET_DEFAULT_IN_TKT_ETYPES - HAVE_KRB5_STRING_TO_KEY - HAVE_KRB5_STRING_TO_KEY_SALT - HAVE_LIBKRB5 -</pre><p> - This output was obtained on a SUSE Linux system and shows the output for - Samba that has been compiled and linked with the Heimdal Kerberos libraries. - The following is a typical output that will be found on a Red Hat Linux system that - has been linked with the MIT Kerberos libraries: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /usr/sbin -<code class="prompt">root# </code> smbd -b | grep KRB - HAVE_KRB5_H - HAVE_ADDRTYPE_IN_KRB5_ADDRESS - HAVE_KRB5 - HAVE_KRB5_AUTH_CON_SETUSERUSERKEY - HAVE_KRB5_ENCRYPT_DATA - HAVE_KRB5_FREE_DATA_CONTENTS - HAVE_KRB5_FREE_KTYPES - HAVE_KRB5_GET_PERMITTED_ENCTYPES - HAVE_KRB5_KEYTAB_ENTRY_KEY - HAVE_KRB5_LOCATE_KDC - HAVE_KRB5_MK_REQ_EXTENDED - HAVE_KRB5_PRINCIPAL2SALT - HAVE_KRB5_PRINC_COMPONENT - HAVE_KRB5_SET_DEFAULT_TGS_KTYPES - HAVE_KRB5_SET_REAL_TIME - HAVE_KRB5_STRING_TO_KEY - HAVE_KRB5_TKT_ENC_PART2 - HAVE_KRB5_USE_ENCTYPE - HAVE_LIBGSSAPI_KRB5 - HAVE_LIBKRB5 -</pre><p> - You can validate that Samba has been compiled and linked with LDAP support - by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> smbd -b | grep LDAP -massive:/usr/sbin # smbd -b | grep LDAP - HAVE_LDAP_H - HAVE_LDAP - HAVE_LDAP_DOMAIN2HOSTLIST - HAVE_LDAP_INIT - HAVE_LDAP_INITIALIZE - HAVE_LDAP_SET_REBIND_PROC - HAVE_LIBLDAP - LDAP_SET_REBIND_PROC_ARGS -</pre><p> - This does look promising; <code class="literal">smbd</code> has been built with Kerberos and LDAP - support. You are relieved to know that it is safe to progress. - </p></li><li class="step" title="Step 2"><p> - <a class="indexterm" name="id361938"></a> - <a class="indexterm" name="id361947"></a> - <a class="indexterm" name="id361954"></a> - <a class="indexterm" name="id361960"></a> - <a class="indexterm" name="id361970"></a> - <a class="indexterm" name="id361979"></a> - <a class="indexterm" name="id361986"></a> - <a class="indexterm" name="id361993"></a> - <a class="indexterm" name="id361999"></a> - The next step is to identify which version of the Kerberos libraries have been used. - In order to permit Samba-3 to interoperate with Windows 2003 Active Directory, it is - essential that it has been linked with either MIT Kerberos version 1.3.1 or later, - or that it has been linked with Heimdal Kerberos 0.6 plus specific patches. You may - identify what version of the MIT Kerberos libraries are installed on your system by - executing (on Red Hat Linux): -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -q krb5 -</pre><p> - Or on SUSE Linux, execute: -</p><pre class="screen"> -<code class="prompt">root# </code> rpm -q heimdal -</pre><p> - Please note that the RPMs provided by the Samba-Team are known to be working and have - been validated. Red Hat Linux RPMs may be obtained from the Samba FTP sites. SUSE - Linux RPMs may be obtained from <a class="ulink" href="ftp://ftp.sernet.de" target="_top">Sernet</a> in - Germany. - </p><p> - From this point on, you are certain that the Samba-3 build you are using has the - necessary capabilities. You can now configure Samba-3 and the NSS. - </p></li><li class="step" title="Step 3"><p> - Using you favorite editor, configure the <code class="filename">smb.conf</code> file that is located in the - <code class="filename">/etc/samba</code> directory so that it has the contents shown - in <a class="link" href="unixclients.html#ch9-adssdm" title="Example 7.7. Samba Domain Member smb.conf File for Active Directory Membership">“Samba Domain Member smb.conf File for Active Directory Membership”</a>. - </p></li><li class="step" title="Step 4"><p> - Edit or create the NSS control file so it has the contents shown in <a class="link" href="unixclients.html#ch9-sdmnss" title="Example 7.4. NSS using LDAP for Identity Resolution File: /etc/nsswitch.conf">“NSS using LDAP for Identity Resolution File: /etc/nsswitch.conf”</a>. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id362091"></a> - Delete the file <code class="filename">/etc/samba/secrets.tdb</code> if it exists. Of course, you - do keep a backup, don't you? - </p></li><li class="step" title="Step 6"><p> - Delete the tdb files that cache Samba information. You keep a backup of the old - files, of course. You also remove all files to ensure that nothing can pollute your - nice, new configuration. Execute the following (example is for SUSE Linux): -</p><pre class="screen"> -<code class="prompt">root# </code> rm /var/lib/samba/*tdb -</pre><p> - </p></li><li class="step" title="Step 7"><p> - <a class="indexterm" name="id362132"></a> - Validate your <code class="filename">smb.conf</code> file using <code class="literal">testparm</code> (as you have - done previously). Correct all errors reported before proceeding. The command you - execute is: -</p><pre class="screen"> -<code class="prompt">root# </code> testparm -s | less -</pre><p> - Now that you are satisfied that your Samba server is ready to join the Windows - ADS domain, let's move on. - </p></li><li class="step" title="Step 8"><p> - <a class="indexterm" name="id362171"></a> - <a class="indexterm" name="id362182"></a> - This is a good time to double-check everything and then execute the following - command when everything you have done has checked out okay: -</p><pre class="screen"> -<code class="prompt">root# </code> net ads join -UAdministrator%not24get -Using short domain name -- LONDON -Joined 'FRAN' to realm 'LONDON.ABMAS.BIZ' -</pre><p> - You have successfully made your Samba-3 server a member of the ADS domain - using Kerberos protocols. - </p><p> - <a class="indexterm" name="id362207"></a> - <a class="indexterm" name="id362214"></a> - In the event that you receive no output messages, a silent return means that the - domain join failed. You should use <code class="literal">ethereal</code> to identify what - may be failing. Common causes of a failed join include: - - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - <a class="indexterm" name="id362233"></a> - Defective or misconfigured DNS name resolution. - </p></li><li class="listitem"><p> - <a class="indexterm" name="id362247"></a> - Restrictive security settings on the Windows 200x ADS domain controller - preventing needed communications protocols. You can check this by searching - the Windows Server 200x Event Viewer. - </p></li><li class="listitem"><p> - Incorrectly configured <code class="filename">smb.conf</code> file settings. - </p></li><li class="listitem"><p> - Lack of support of necessary Kerberos protocols because the version of MIT - Kerberos (or Heimdal) in use is not up to date enough to support the necessary - functionality. - </p></li></ul></div><p> - - <a class="indexterm" name="id362275"></a> - <a class="indexterm" name="id362286"></a> - <a class="indexterm" name="id362293"></a> - In any case, never execute the <code class="literal">net rpc join</code> command in an attempt - to join the Samba server to the domain, unless you wish not to use the Kerberos - security protocols. Use of the older RPC-based domain join facility requires that - Windows Server 200x ADS has been configured appropriately for mixed mode operation. - </p></li><li class="step" title="Step 9"><p> - <a class="indexterm" name="id362314"></a> - <a class="indexterm" name="id362321"></a> - If the <code class="literal">tdbdump</code> is installed on your system (not essential), - you can look inside the <code class="filename">/etc/samba/secrets.tdb</code> file. If - you wish to do this, execute: -</p><pre class="screen"> -<code class="prompt">root# </code> tdbdump secrets.tdb -{ -key = "SECRETS/SID/LONDON" -data = "\01\04\00\00\00\00\00\05\15\00\00\00\EBw\86\F1\ED\BD\ - F6{\5C6\E5W\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\ - 00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\ - 00\00\00\00\00\00\00\00" -} -{ -key = "SECRETS/MACHINE_PASSWORD/LONDON" -data = "le3Q5FPnN5.ueC\00" -} -{ -key = "SECRETS/MACHINE_SEC_CHANNEL_TYPE/LONDON" -data = "\02\00\00\00" -} -{ -key = "SECRETS/MACHINE_LAST_CHANGE_TIME/LONDON" -data = "E\89\F6?" -} -</pre><p> - This is given to demonstrate to the skeptics that this process truly does work. - </p></li><li class="step" title="Step 10"><p> - It is now time to start Samba in the usual way (as has been done many time before - in this book). - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id362371"></a> - This is a good time to verify that everything is working. First, check that - winbind is able to obtain the list of users and groups from the ADS domain controller. - Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -u -LONDON+Administrator -LONDON+Guest -LONDON+SUPPORT_388945a0 -LONDON+krbtgt -LONDON+jht -</pre><p> - Good, the list of users was obtained. Now do likewise for group accounts: -</p><pre class="screen"> -<code class="prompt">root# </code> wbinfo -g -LONDON+Domain Computers -LONDON+Domain Controllers -LONDON+Schema Admins -LONDON+Enterprise Admins -LONDON+Domain Admins -LONDON+Domain Users -LONDON+Domain Guests -LONDON+Group Policy Creator Owners -LONDON+DnsUpdateProxy -</pre><p> - Excellent. That worked also, as expected. - </p></li><li class="step" title="Step 12"><p><a class="indexterm" name="id362412"></a> - Now repeat this via NSS to validate that full identity resolution is - functional as required. Execute: -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd -... -LONDON+Administrator:x:10000:10000:Administrator: - /home/LONDON/administrator:/bin/bash -LONDON+Guest:x:10001:10001:Guest: - /home/LONDON/guest:/bin/bash -LONDON+SUPPORT_388945a0:x:10002:10000:SUPPORT_388945a0: - /home/LONDON/support_388945a0:/bin/bash -LONDON+krbtgt:x:10003:10000:krbtgt: - /home/LONDON/krbtgt:/bin/bash -LONDON+jht:x:10004:10000:John H. Terpstra: - /home/LONDON/jht:/bin/bash -</pre><p> - Okay, ADS user accounts are being resolved. Now you try group resolution: -</p><pre class="screen"> -<code class="prompt">root# </code> getent group -... -LONDON+Domain Computers:x:10002: -LONDON+Domain Controllers:x:10003: -LONDON+Schema Admins:x:10004:LONDON+Administrator -LONDON+Enterprise Admins:x:10005:LONDON+Administrator -LONDON+Domain Admins:x:10006:LONDON+jht,LONDON+Administrator -LONDON+Domain Users:x:10000: -LONDON+Domain Guests:x:10001: -LONDON+Group Policy Creator Owners:x:10007:LONDON+Administrator -LONDON+DnsUpdateProxy:x:10008: -</pre><p> - This is very pleasing. Everything works as expected. - </p></li><li class="step" title="Step 13"><p> - <a class="indexterm" name="id362460"></a> - <a class="indexterm" name="id362471"></a> - <a class="indexterm" name="id362480"></a> - You may now perform final verification that communications between Samba-3 winbind and - the Active Directory server is using Kerberos protocols. Execute the following: -</p><pre class="screen"> -<code class="prompt">root# </code> net ads info -LDAP server: 192.168.2.123 -LDAP server name: w2k3s -Realm: LONDON.ABMAS.BIZ -Bind Path: dc=LONDON,dc=ABMAS,dc=BIZ -LDAP port: 389 -Server time: Sat, 03 Jan 2004 02:44:44 GMT -KDC server: 192.168.2.123 -Server time offset: 2 -</pre><p> - It should be noted that Kerberos protocols are time-clock critical. You should - keep all server time clocks synchronized using the network time protocol (NTP). - In any case, the output we obtained confirms that all systems are operational. - </p></li><li class="step" title="Step 14"><p> - <a class="indexterm" name="id362511"></a> - There is one more action you elect to take, just because you are paranoid and disbelieving, - so you execute the following command: -</p><pre class="programlisting"> -<code class="prompt">root# </code> net ads status -UAdministrator%not24get -objectClass: top -objectClass: person -objectClass: organizationalPerson -objectClass: user -objectClass: computer -cn: fran -distinguishedName: CN=fran,CN=Computers,DC=london,DC=abmas,DC=biz -instanceType: 4 -whenCreated: 20040103092006.0Z -whenChanged: 20040103092006.0Z -uSNCreated: 28713 -uSNChanged: 28717 -name: fran -objectGUID: 58f89519-c467-49b9-acb0-f099d73696e -userAccountControl: 69632 -badPwdCount: 0 -codePage: 0 -countryCode: 0 -badPasswordTime: 0 -lastLogoff: 0 -lastLogon: 127175965783327936 -localPolicyFlags: 0 -pwdLastSet: 127175952062598496 -primaryGroupID: 515 -objectSid: S-1-5-21-4052121579-2079768045-1474639452-1109 -accountExpires: 9223372036854775807 -logonCount: 13 -sAMAccountName: fran$ -sAMAccountType: 805306369 -operatingSystem: Samba -operatingSystemVersion: 3.0.20-SUSE -dNSHostName: fran -userPrincipalName: HOST/fran@LONDON.ABMAS.BIZ -servicePrincipalName: CIFS/fran.london.abmas.biz -servicePrincipalName: CIFS/fran -servicePrincipalName: HOST/fran.london.abmas.biz -servicePrincipalName: HOST/fran -objectCategory: CN=Computer,CN=Schema,CN=Configuration, - DC=london,DC=abmas,DC=biz -isCriticalSystemObject: FALSE --------------- Security Descriptor (revision: 1, type: 0x8c14) -owner SID: S-1-5-21-4052121579-2079768045-1474639452-512 -group SID: S-1-5-21-4052121579-2079768045-1474639452-513 -------- (system) ACL (revision: 4, size: 120, number of ACEs: 2) -------- ACE (type: 0x07, flags: 0x5a, size: 0x38, - mask: 0x20, object flags: 0x3) -access SID: S-1-1-0 -access type: AUDIT OBJECT -Permissions: - [Write All Properties] -------- ACE (type: 0x07, flags: 0x5a, size: 0x38, - mask: 0x20, object flags: 0x3) -access SID: S-1-1-0 -access type: AUDIT OBJECT -Permissions: - [Write All Properties] -------- (user) ACL (revision: 4, size: 1944, number of ACEs: 40) -------- ACE (type: 0x00, flags: 0x00, size: 0x24, mask: 0xf01ff) -access SID: S-1-5-21-4052121579-2079768045-1474639452-512 -access type: ALLOWED -Permissions: [Full Control] -------- ACE (type: 0x00, flags: 0x00, size: 0x18, mask: 0xf01ff) -access SID: S-1-5-32-548 -... -------- ACE (type: 0x05, flags: 0x12, size: 0x38, - mask: 0x10, object flags: 0x3) -access SID: S-1-5-9 -access type: ALLOWED OBJECT -Permissions: - [Read All Properties] --------------- End Of Security Descriptor -</pre><p> - And now you have conclusive proof that your Samba-3 ADS domain member server - called <code class="constant">FRAN</code> is able to communicate fully with the ADS - domain controllers. - </p></li></ol></div><p> - Your Samba-3 ADS domain member server is ready for use. During training sessions, - you may be asked what is inside the <code class="filename">winbindd_cache.tdb and winbindd_idmap.tdb</code> - files. Since curiosity just took hold of you, execute the following: -</p><pre class="programlisting"> -<code class="prompt">root# </code> tdbdump /var/lib/samba/winbindd_idmap.tdb -{ -key = "S-1-5-21-4052121579-2079768045-1474639452-501\00" -data = "UID 10001\00" -} -{ -key = "UID 10005\00" -data = "S-1-5-21-4052121579-2079768045-1474639452-1111\00" -} -{ -key = "GID 10004\00" -data = "S-1-5-21-4052121579-2079768045-1474639452-518\00" -} -{ -key = "S-1-5-21-4052121579-2079768045-1474639452-502\00" -data = "UID 10003\00" -} -... - -<code class="prompt">root# </code> tdbdump /var/lib/samba/winbindd_cache.tdb -{ -key = "UL/LONDON" -data = "\00\00\00\00bp\00\00\06\00\00\00\0DAdministrator\0D - Administrator-S-1-5-21-4052121579-2079768045-1474639452-500- - S-1-5-21-4052121579-2079768045-1474639452-513\05Guest\05 - Guest-S-1-5-21-4052121579-2079768045-1474639452-501- - S-1-5-21-4052121579-2079768045-1474639452-514\10 - SUPPORT_388945a0\10SUPPORT_388945a0. - S-1-5-21-4052121579-2079768045-1474639452-1001- - S-1-5-21-4052121579-2079768045-1474639452-513\06krbtgt\06 - krbtgt-S-1-5-21-4052121579-2079768045-1474639452-502- - S-1-5-21-4052121579-2079768045-1474639452-513\03jht\10 - John H. Terpstra.S-1-5-21-4052121579-2079768045-1474639452-1110- - S-1-5-21-4052121579-2079768045-1474639452-513" -} -{ -key = "GM/S-1-5-21-4052121579-2079768045-1474639452-512" -data = "\00\00\00\00bp\00\00\02\00\00\00. - S-1-5-21-4052121579-2079768045-1474639452-1110\03 - jht\01\00\00\00-S-1-5-21-4052121579-2079768045-1474639452-500\0D - Administrator\01\00\00\00" -} -{ -key = "SN/S-1-5-21-4052121579-2079768045-1474639452-513" -data = "\00\00\00\00xp\00\00\02\00\00\00\0CDomain Users" -} -{ -key = "GM/S-1-5-21-4052121579-2079768045-1474639452-518" -data = "\00\00\00\00bp\00\00\01\00\00\00- - S-1-5-21-4052121579-2079768045-1474639452-500\0D - Administrator\01\00\00\00" -} -{ -key = "SEQNUM/LONDON\00" -data = "xp\00\00C\92\F6?" -} -{ -key = "U/S-1-5-21-4052121579-2079768045-1474639452-1110" -data = "\00\00\00\00xp\00\00\03jht\10John H. Terpstra. - S-1-5-21-4052121579-2079768045-1474639452-1110- - S-1-5-21-4052121579-2079768045-1474639452-513" -} -{ -key = "NS/S-1-5-21-4052121579-2079768045-1474639452-502" -data = "\00\00\00\00bp\00\00- - S-1-5-21-4052121579-2079768045-1474639452-502" -} -{ -key = "SN/S-1-5-21-4052121579-2079768045-1474639452-1001" -data = "\00\00\00\00bp\00\00\01\00\00\00\10SUPPORT_388945a0" -} -{ -key = "SN/S-1-5-21-4052121579-2079768045-1474639452-500" -data = "\00\00\00\00bp\00\00\01\00\00\00\0DAdministrator" -} -{ -key = "U/S-1-5-21-4052121579-2079768045-1474639452-502" -data = "\00\00\00\00bp\00\00\06krbtgt\06krbtgt- - S-1-5-21-4052121579-2079768045-1474639452-502- - S-1-5-21-4052121579-2079768045-1474639452-513" -} -.... -</pre><p> - Now all is revealed. Your curiosity, as well as that of your team, has been put at ease. - May this server serve well all who happen upon it. - </p><div class="example"><a name="ch9-adssdm"></a><p class="title"><b>Example 7.7. Samba Domain Member <code class="filename">smb.conf</code> File for Active Directory Membership</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id362682"></a><em class="parameter"><code>unix charset = LOCALE</code></em></td></tr><tr><td><a class="indexterm" name="id362694"></a><em class="parameter"><code>workgroup = LONDON</code></em></td></tr><tr><td><a class="indexterm" name="id362705"></a><em class="parameter"><code>realm = LONDON.ABMAS.BIZ</code></em></td></tr><tr><td><a class="indexterm" name="id362717"></a><em class="parameter"><code>server string = Samba 3.0.20</code></em></td></tr><tr><td><a class="indexterm" name="id362729"></a><em class="parameter"><code>security = ADS</code></em></td></tr><tr><td><a class="indexterm" name="id362740"></a><em class="parameter"><code>username map = /etc/samba/smbusers</code></em></td></tr><tr><td><a class="indexterm" name="id362752"></a><em class="parameter"><code>log level = 1</code></em></td></tr><tr><td><a class="indexterm" name="id362763"></a><em class="parameter"><code>syslog = 0</code></em></td></tr><tr><td><a class="indexterm" name="id362775"></a><em class="parameter"><code>log file = /var/log/samba/%m</code></em></td></tr><tr><td><a class="indexterm" name="id362786"></a><em class="parameter"><code>max log size = 50</code></em></td></tr><tr><td><a class="indexterm" name="id362798"></a><em class="parameter"><code>printcap name = CUPS</code></em></td></tr><tr><td><a class="indexterm" name="id362809"></a><em class="parameter"><code>ldap ssl = no</code></em></td></tr><tr><td><a class="indexterm" name="id362821"></a><em class="parameter"><code>idmap uid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id362832"></a><em class="parameter"><code>idmap gid = 10000-20000</code></em></td></tr><tr><td><a class="indexterm" name="id362844"></a><em class="parameter"><code>template primary group = "Domain Users"</code></em></td></tr><tr><td><a class="indexterm" name="id362855"></a><em class="parameter"><code>template shell = /bin/bash</code></em></td></tr><tr><td><a class="indexterm" name="id362867"></a><em class="parameter"><code>winbind separator = +</code></em></td></tr><tr><td><a class="indexterm" name="id362878"></a><em class="parameter"><code>printing = cups</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[homes]</code></em></td></tr><tr><td><a class="indexterm" name="id362899"></a><em class="parameter"><code>comment = Home Directories</code></em></td></tr><tr><td><a class="indexterm" name="id362910"></a><em class="parameter"><code>valid users = %S</code></em></td></tr><tr><td><a class="indexterm" name="id362922"></a><em class="parameter"><code>read only = No</code></em></td></tr><tr><td><a class="indexterm" name="id362933"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[printers]</code></em></td></tr><tr><td><a class="indexterm" name="id362954"></a><em class="parameter"><code>comment = SMB Print Spool</code></em></td></tr><tr><td><a class="indexterm" name="id362965"></a><em class="parameter"><code>path = /var/spool/samba</code></em></td></tr><tr><td><a class="indexterm" name="id362977"></a><em class="parameter"><code>guest ok = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id362988"></a><em class="parameter"><code>printable = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id363000"></a><em class="parameter"><code>browseable = No</code></em></td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[print$]</code></em></td></tr><tr><td><a class="indexterm" name="id363020"></a><em class="parameter"><code>comment = Printer Drivers</code></em></td></tr><tr><td><a class="indexterm" name="id363032"></a><em class="parameter"><code>path = /var/lib/samba/drivers</code></em></td></tr><tr><td><a class="indexterm" name="id363043"></a><em class="parameter"><code>admin users = root, Administrator</code></em></td></tr><tr><td><a class="indexterm" name="id363055"></a><em class="parameter"><code>write list = root</code></em></td></tr></table></div></div><br class="example-break"><div class="sect3" title="IDMAP_RID with Winbind"><div class="titlepage"><div><div><h4 class="title"><a name="id363067"></a>IDMAP_RID with Winbind</h4></div></div></div><p> - <a class="indexterm" name="id363075"></a> - <a class="indexterm" name="id363082"></a> - <a class="indexterm" name="id363088"></a> - <a class="indexterm" name="id363095"></a> - The <code class="literal">idmap_rid</code> facility is a new tool that, unlike native winbind, creates a - predictable mapping of MS Windows SIDs to UNIX UIDs and GIDs. The key benefit of this method - of implementing the Samba IDMAP facility is that it eliminates the need to store the IDMAP data - in a central place. The downside is that it can be used only within a single ADS domain and - is not compatible with trusted domain implementations. - </p><p> - <a class="indexterm" name="id363115"></a> - <a class="indexterm" name="id363122"></a> - <a class="indexterm" name="id363128"></a> - <a class="indexterm" name="id363135"></a> - This alternate method of SID to UID/GID mapping can be achieved with the idmap_rid - plug-in. This plug-in uses the RID of the user SID to derive the UID and GID by adding the - RID to a base value specified. This utility requires that the parameter - <span class="quote">“<span class="quote">allow trusted domains = No</span>”</span> must be specified, as it is not compatible - with multiple domain environments. The <em class="parameter"><code>idmap uid</code></em> and - <em class="parameter"><code>idmap gid</code></em> ranges must be specified. - </p><p> - <a class="indexterm" name="id363164"></a> - <a class="indexterm" name="id363171"></a> - The idmap_rid facility can be used both for NT4/Samba-style domains as well as with Active Directory. - To use this with an NT4 domain, the <em class="parameter"><code>realm</code></em> is not used. Additionally the - method used to join the domain uses the <code class="constant">net rpc join</code> process. - </p><p> - An example <code class="filename">smb.conf</code> file for an ADS domain environment is shown in <a class="link" href="unixclients.html#sbe-idmapridex" title="Example 7.8. Example smb.conf File Using idmap_rid">“Example smb.conf File Using idmap_rid”</a>. - </p><div class="example"><a name="sbe-idmapridex"></a><p class="title"><b>Example 7.8. Example <code class="filename">smb.conf</code> File Using <code class="constant">idmap_rid</code></b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id363243"></a><em class="parameter"><code>workgroup = KPAK</code></em></td></tr><tr><td><a class="indexterm" name="id363254"></a><em class="parameter"><code>netbios name = BIGJOE</code></em></td></tr><tr><td><a class="indexterm" name="id363266"></a><em class="parameter"><code>realm = CORP.KPAK.COM</code></em></td></tr><tr><td><a class="indexterm" name="id363277"></a><em class="parameter"><code>server string = Office Server</code></em></td></tr><tr><td><a class="indexterm" name="id363289"></a><em class="parameter"><code>security = ADS</code></em></td></tr><tr><td><a class="indexterm" name="id363300"></a><em class="parameter"><code>allow trusted domains = No</code></em></td></tr><tr><td><a class="indexterm" name="id363312"></a><em class="parameter"><code>idmap backend = idmap_rid:KPAK=500-100000000</code></em></td></tr><tr><td><a class="indexterm" name="id363324"></a><em class="parameter"><code>idmap uid = 500-100000000</code></em></td></tr><tr><td><a class="indexterm" name="id363335"></a><em class="parameter"><code>idmap gid = 500-100000000</code></em></td></tr><tr><td><a class="indexterm" name="id363347"></a><em class="parameter"><code>template shell = /bin/bash</code></em></td></tr><tr><td><a class="indexterm" name="id363359"></a><em class="parameter"><code>winbind use default domain = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id363370"></a><em class="parameter"><code>winbind enum users = No</code></em></td></tr><tr><td><a class="indexterm" name="id363382"></a><em class="parameter"><code>winbind enum groups = No</code></em></td></tr><tr><td><a class="indexterm" name="id363393"></a><em class="parameter"><code>winbind nested groups = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id363405"></a><em class="parameter"><code>printer admin = "KPAK\Domain Admins"</code></em></td></tr></table></div></div><br class="example-break"><p> - <a class="indexterm" name="id363420"></a> - <a class="indexterm" name="id363427"></a> - <a class="indexterm" name="id363433"></a> - <a class="indexterm" name="id363440"></a> - In a large domain with many users, it is imperative to disable enumeration of users and groups. - For example, at a site that has 22,000 users in Active Directory the winbind-based user and - group resolution is unavailable for nearly 12 minutes following first start-up of - <code class="literal">winbind</code>. Disabling of such enumeration results in instantaneous response. - The disabling of user and group enumeration means that it will not be possible to list users - or groups using the <code class="literal">getent passwd</code> and <code class="literal">getent group</code> - commands. It will be possible to perform the lookup for individual users, as shown in the procedure - below. - </p><p> - <a class="indexterm" name="id363473"></a> - <a class="indexterm" name="id363480"></a> - The use of this tool requires configuration of NSS as per the native use of winbind. Edit the - <code class="filename">/etc/nsswitch.conf</code> so it has the following parameters: -</p><pre class="screen"> -... -passwd: files winbind -shadow: files winbind -group: files winbind -... -hosts: files wins -... -</pre><p> - </p><p> - The following procedure can be used to utilize the idmap_rid facility: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Create or install and <code class="filename">smb.conf</code> file with the above configuration. - </p></li><li class="step" title="Step 2"><p> - Edit the <code class="filename">/etc/nsswitch.conf</code> file as shown above. - </p></li><li class="step" title="Step 3"><p> - Execute: -</p><pre class="screen"> -<code class="prompt">root# </code> net ads join -UAdministrator%password -Using short domain name -- KPAK -Joined 'BIGJOE' to realm 'CORP.KPAK.COM' -</pre><p> - </p><p> - <a class="indexterm" name="id363555"></a> - An invalid or failed join can be detected by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> net ads testjoin -BIGJOE$@'s password: -[2004/11/05 16:53:03, 0] utils/net_ads.c:ads_startup(186) - ads_connect: No results returned -Join to domain is not valid -</pre><p> - The specific error message may differ from the above because it depends on the type of failure that - may have occurred. Increase the <em class="parameter"><code>log level</code></em> to 10, repeat the above test, - and then examine the log files produced to identify the nature of the failure. - </p></li><li class="step" title="Step 4"><p> - Start the <code class="literal">nmbd</code>, <code class="literal">winbind,</code> and <code class="literal">smbd</code> daemons in the order shown. - </p></li><li class="step" title="Step 5"><p> - Validate the operation of this configuration by executing: - <a class="indexterm" name="id363616"></a> -</p><pre class="screen"> -<code class="prompt">root# </code> getent passwd administrator -administrator:x:1000:1013:Administrator:/home/BE/administrator:/bin/bash -</pre><p> - </p></li></ol></div></div><div class="sect3" title="IDMAP Storage in LDAP using Winbind"><div class="titlepage"><div><div><h4 class="title"><a name="id363637"></a>IDMAP Storage in LDAP using Winbind</h4></div></div></div><p> - <a class="indexterm" name="id363645"></a> - <a class="indexterm" name="id363652"></a> - The storage of IDMAP information in LDAP can be used with both NT4/Samba-3-style domains as well as - with ADS domains. OpenLDAP is a commonly used LDAP server for this purpose, although any standards-compliant - LDAP server can be used. It is therefore possible to deploy this IDMAP configuration using - the Sun iPlanet LDAP server, Novell eDirectory, Microsoft ADS plus ADAM, and so on. - </p><p> - The example in <a class="link" href="unixclients.html#sbeunxa" title="Example 7.9. Typical ADS Style Domain smb.conf File">“Typical ADS Style Domain smb.conf File”</a> is for an ADS-style domain. - </p><div class="example"><a name="sbeunxa"></a><p class="title"><b>Example 7.9. Typical ADS Style Domain <code class="filename">smb.conf</code> File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id363706"></a><em class="parameter"><code>workgroup = SNOWSHOW</code></em></td></tr><tr><td><a class="indexterm" name="id363718"></a><em class="parameter"><code>netbios name = GOODELF</code></em></td></tr><tr><td><a class="indexterm" name="id363729"></a><em class="parameter"><code>realm = SNOWSHOW.COM</code></em></td></tr><tr><td><a class="indexterm" name="id363741"></a><em class="parameter"><code>server string = Samba Server</code></em></td></tr><tr><td><a class="indexterm" name="id363752"></a><em class="parameter"><code>security = ADS</code></em></td></tr><tr><td><a class="indexterm" name="id363764"></a><em class="parameter"><code>log level = 1 ads:10 auth:10 sam:10 rpc:10</code></em></td></tr><tr><td><a class="indexterm" name="id363776"></a><em class="parameter"><code>ldap admin dn = cn=Manager,dc=SNOWSHOW,dc=COM</code></em></td></tr><tr><td><a class="indexterm" name="id363787"></a><em class="parameter"><code>ldap idmap suffix = ou=Idmap</code></em></td></tr><tr><td><a class="indexterm" name="id363799"></a><em class="parameter"><code>ldap suffix = dc=SNOWSHOW,dc=COM</code></em></td></tr><tr><td><a class="indexterm" name="id363811"></a><em class="parameter"><code>idmap backend = ldap:ldap://ldap.snowshow.com</code></em></td></tr><tr><td><a class="indexterm" name="id363822"></a><em class="parameter"><code>idmap uid = 150000-550000</code></em></td></tr><tr><td><a class="indexterm" name="id363834"></a><em class="parameter"><code>idmap gid = 150000-550000</code></em></td></tr><tr><td><a class="indexterm" name="id363846"></a><em class="parameter"><code>template shell = /bin/bash</code></em></td></tr><tr><td><a class="indexterm" name="id363857"></a><em class="parameter"><code>winbind use default domain = Yes</code></em></td></tr></table></div></div><br class="example-break"><p> - <a class="indexterm" name="id363872"></a> - In the case of an NT4 or Samba-3-style domain the <em class="parameter"><code>realm</code></em> is not used, and the - command used to join the domain is <code class="literal">net rpc join</code>. The above example also demonstrates - advanced error reporting techniques that are documented in the chapter called "Reporting Bugs" in - <span class="quote">“<span class="quote">The Official Samba-3 HOWTO and Reference Guide, Second Edition</span>”</span> (TOSHARG2). - </p><p> - <a class="indexterm" name="id363900"></a> - <a class="indexterm" name="id363907"></a> - <a class="indexterm" name="id363914"></a> - Where MIT kerberos is installed (version 1.3.4 or later), edit the <code class="filename">/etc/krb5.conf</code> - file so it has the following contents: -</p><pre class="screen"> -[logging] - default = FILE:/var/log/krb5libs.log - kdc = FILE:/var/log/krb5kdc.log - admin_server = FILE:/var/log/kadmind.log - -[libdefaults] - default_realm = SNOWSHOW.COM - dns_lookup_realm = false - dns_lookup_kdc = true - -[appdefaults] - pam = { - debug = false - ticket_lifetime = 36000 - renew_lifetime = 36000 - forwardable = true - krb4_convert = false - } -</pre><p> - </p><p> - Where Heimdal kerberos is installed, edit the <code class="filename">/etc/krb5.conf</code> - file so it is either empty (i.e., no contents) or it has the following contents: -</p><pre class="screen"> -[libdefaults] - default_realm = SNOWSHOW.COM - clockskew = 300 - -[realms] - SNOWSHOW.COM = { - kdc = ADSDC.SHOWSHOW.COM - } - -[domain_realm] - .snowshow.com = SNOWSHOW.COM -</pre><p> - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - Samba cannot use the Heimdal libraries if there is no <code class="filename">/etc/krb5.conf</code> file. - So long as there is an empty file, the Heimdal kerberos libraries will be usable. There is no - need to specify any settings because Samba, using the Heimdal libraries, can figure this out automatically. - </p></div><p> - Edit the NSS control file <code class="filename">/etc/nsswitch.conf</code> so it has the following entries: -</p><pre class="screen"> -... -passwd: files ldap -shadow: files ldap -group: files ldap -... -hosts: files wins -... -</pre><p> - </p><p> - <a class="indexterm" name="id363986"></a> - <a class="indexterm" name="id363993"></a> - You will need the <a class="ulink" href="http://www.padl.com" target="_top">PADL</a> <code class="literal">nss_ldap</code> - tool set for this solution. Configure the <code class="filename">/etc/ldap.conf</code> file so it has - the information needed. The following is an example of a working file: -</p><pre class="screen"> -host 192.168.2.1 -base dc=snowshow,dc=com -binddn cn=Manager,dc=snowshow,dc=com -bindpw not24get - -pam_password exop - -nss_base_passwd ou=People,dc=snowshow,dc=com?one -nss_base_shadow ou=People,dc=snowshow,dc=com?one -nss_base_group ou=Groups,dc=snowshow,dc=com?one -ssl no -</pre><p> - </p><p> - The following procedure may be followed to affect a working configuration: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Configure the <code class="filename">smb.conf</code> file as shown above. - </p></li><li class="step" title="Step 2"><p> - Create the <code class="filename">/etc/krb5.conf</code> file following the indications above. - </p></li><li class="step" title="Step 3"><p> - Configure the <code class="filename">/etc/nsswitch.conf</code> file as shown above. - </p></li><li class="step" title="Step 4"><p> - Download, build, and install the PADL nss_ldap tool set. Configure the - <code class="filename">/etc/ldap.conf</code> file as shown above. - </p></li><li class="step" title="Step 5"><p> - Configure an LDAP server and initialize the directory with the top-level entries needed by IDMAP - as shown in the following LDIF file: -</p><pre class="screen"> -dn: dc=snowshow,dc=com -objectClass: dcObject -objectClass: organization -dc: snowshow -o: The Greatest Snow Show in Singapore. -description: Posix and Samba LDAP Identity Database - -dn: cn=Manager,dc=snowshow,dc=com -objectClass: organizationalRole -cn: Manager -description: Directory Manager - -dn: ou=Idmap,dc=snowshow,dc=com -objectClass: organizationalUnit -ou: idmap -</pre><p> - </p></li><li class="step" title="Step 6"><p> - Execute the command to join the Samba domain member server to the ADS domain as shown here: -</p><pre class="screen"> -<code class="prompt">root# </code> net ads testjoin -Using short domain name -- SNOWSHOW -Joined 'GOODELF' to realm 'SNOWSHOW.COM' -</pre><p> - </p></li><li class="step" title="Step 7"><p> - Store the LDAP server access password in the Samba <code class="filename">secrets.tdb</code> file as follows: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -w not24get -</pre><p> - </p></li><li class="step" title="Step 8"><p> - Start the <code class="literal">nmbd</code>, <code class="literal">winbind</code>, and <code class="literal">smbd</code> daemons in the order shown. - </p></li></ol></div><p> - <a class="indexterm" name="id364177"></a> - Follow the diagnostic procedures shown earlier in this chapter to identify success or failure of the join. - In many cases a failure is indicated by a silent return to the command prompt with no indication of the - reason for failure. - </p></div><div class="sect3" title="IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension"><div class="titlepage"><div><div><h4 class="title"><a name="id364188"></a>IDMAP and NSS Using LDAP from ADS with RFC2307bis Schema Extension</h4></div></div></div><p> - <a class="indexterm" name="id364196"></a> - <a class="indexterm" name="id364203"></a> - The use of this method is messy. The information provided in this section is for guidance only - and is very definitely not complete. This method does work; it is used in a number of large sites - and has an acceptable level of performance. - </p><p> - An example <code class="filename">smb.conf</code> file is shown in <a class="link" href="unixclients.html#sbewinbindex" title="Example 7.10. ADS Membership Using RFC2307bis Identity Resolution smb.conf File">“ADS Membership Using RFC2307bis Identity Resolution smb.conf File”</a>. - </p><div class="example"><a name="sbewinbindex"></a><p class="title"><b>Example 7.10. ADS Membership Using RFC2307bis Identity Resolution <code class="filename">smb.conf</code> File</b></p><div class="example-contents"><table border="0" summary="Simple list" class="simplelist"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><em class="parameter"><code>[global]</code></em></td></tr><tr><td><a class="indexterm" name="id364262"></a><em class="parameter"><code>workgroup = BUBBAH</code></em></td></tr><tr><td><a class="indexterm" name="id364274"></a><em class="parameter"><code>netbios name = MADMAX</code></em></td></tr><tr><td><a class="indexterm" name="id364285"></a><em class="parameter"><code>realm = BUBBAH.COM</code></em></td></tr><tr><td><a class="indexterm" name="id364297"></a><em class="parameter"><code>server string = Samba Server</code></em></td></tr><tr><td><a class="indexterm" name="id364308"></a><em class="parameter"><code>security = ADS</code></em></td></tr><tr><td><a class="indexterm" name="id364320"></a><em class="parameter"><code>idmap uid = 150000-550000</code></em></td></tr><tr><td><a class="indexterm" name="id364331"></a><em class="parameter"><code>idmap gid = 150000-550000</code></em></td></tr><tr><td><a class="indexterm" name="id364343"></a><em class="parameter"><code>template shell = /bin/bash</code></em></td></tr><tr><td><a class="indexterm" name="id364355"></a><em class="parameter"><code>winbind use default domain = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id364366"></a><em class="parameter"><code>winbind trusted domains only = Yes</code></em></td></tr><tr><td><a class="indexterm" name="id364378"></a><em class="parameter"><code>winbind nested groups = Yes</code></em></td></tr></table></div></div><br class="example-break"><p> - <a class="indexterm" name="id364393"></a> - The DMS must be joined to the domain using the usual procedure. Additionally, it is necessary - to build and install the PADL nss_ldap tool set. Be sure to build this tool set with the - following: -</p><pre class="screen"> -./configure --enable-rfc2307bis --enable-schema-mapping -make install -</pre><p> - </p><p> - <a class="indexterm" name="id364411"></a> - The following <code class="filename">/etc/nsswitch.conf</code> file contents are required: -</p><pre class="screen"> -... -passwd: files ldap -shadow: files ldap -group: files ldap -... -hosts: files wins -... -</pre><p> - </p><p> - <a class="indexterm" name="id364434"></a> - <a class="indexterm" name="id364441"></a> - The <code class="filename">/etc/ldap.conf</code> file must be configured also. Refer to the PADL documentation - and source code for nss_ldap instructions. - </p><p> - The next step involves preparation on the ADS schema. This is briefly discussed in the remaining - part of this chapter. - </p><div class="sect4" title="IDMAP, Active Directory, and MS Services for UNIX 3.5"><div class="titlepage"><div><div><h5 class="title"><a name="id364460"></a>IDMAP, Active Directory, and MS Services for UNIX 3.5</h5></div></div></div><p> - <a class="indexterm" name="id364468"></a> - The Microsoft Windows Service for UNIX version 3.5 is available for free - <a class="ulink" href="http://www.microsoft.com/windows/sfu/" target="_top">download</a> - from the Microsoft Web site. You will need to download this tool and install it following - Microsoft instructions. - </p></div><div class="sect4" title="IDMAP, Active Directory, and AD4UNIX"><div class="titlepage"><div><div><h5 class="title"><a name="id364486"></a>IDMAP, Active Directory, and AD4UNIX</h5></div></div></div><p> - Instructions for obtaining and installing the AD4UNIX tool set can be found from the - <a class="ulink" href="http://www.geekcomix.com/cgi-bin/classnotes/wiki.pl?LDAP01/An_Alternative_Approach" target="_top"> - Geekcomix</a> Web site. - </p></div></div></div><div class="sect2" title="UNIX/Linux Client Domain Member"><div class="titlepage"><div><div><h3 class="title"><a name="id364506"></a>UNIX/Linux Client Domain Member</h3></div></div></div><p><a class="indexterm" name="id364512"></a> - So far this chapter has been mainly concerned with the provision of file and print - services for domain member servers. However, an increasing number of UNIX/Linux - workstations are being installed that do not act as file or print servers to anyone - other than a single desktop user. The key demand for desktop systems is to be able - to log onto any UNIX/Linux or Windows desktop using the same network user credentials. - </p><p><a class="indexterm" name="id364527"></a> - The ability to use a common set of user credential across a variety of network systems - is generally regarded as a single sign-on (SSO) solution. SSO systems are sold by a - large number of vendors and include a range of technologies such as: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Proxy sign-on - </p></li><li class="listitem"><p> - Federated directory provisioning - </p></li><li class="listitem"><p> - Metadirectory server solutions - </p></li><li class="listitem"><p> - Replacement authentication systems - </p></li></ul></div><p><a class="indexterm" name="id364566"></a> - There are really four solutions that provide integrated authentication and - user identity management facilities: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Samba winbind (free). Samba-3.0.20 introduced a complete replacement for Winbind that now - provides a greater level of scalability in large ADS environments. - </p></li><li class="listitem"><p> - <a class="ulink" href="http://www.padl.com" target="_top">PADL</a> PAM and LDAP tools (free). - </p></li><li class="listitem"><p> - <a class="ulink" href="http://www.vintela.com" target="_top">Vintela</a> Authentication Services (commercial). - </p></li><li class="listitem"><p> - <a class="ulink" href="http://www.centrify.com" target="_top">Centrify</a> DirectControl (commercial). - Centrify's commercial product allows UNIX and Linux systems to use Active Directory - security, directory and policy services. Enhancements include a centralized ID mapping that - allows Samba, DirectControl and Active Directory to seamlessly work together. - </p></li></ul></div><p> - The following guidelines are pertinent to the deployment of winbind-based authentication - and identity resolution with the express purpose of allowing users to log on to UNIX/Linux desktops - using Windows network domain user credentials (username and password). - </p><p> - You should note that it is possible to use LDAP-based PAM and NSS tools to permit distributed - systems logons (SSO), providing user and group accounts are stored in an LDAP directory. This - provides logon services for UNIX/Linux users, while Windows users obtain their sign-on - support via Samba-3. - </p><p> - <a class="indexterm" name="id364633"></a> - On the other hand, if the authentication and identity resolution backend must be provided by - a Windows NT4-style domain or from an Active Directory Domain that does not have the Microsoft - Windows Services for UNIX installed, winbind is your best friend. Specific guidance for these - situations now follows. - </p><p> - <a class="indexterm" name="id364648"></a> - <a class="indexterm" name="id364655"></a> - <a class="indexterm" name="id364662"></a> - To permit users to log on to a Linux system using Windows network credentials, you need to - configure identity resolution (NSS) and PAM. This means that the basic steps include those - outlined above with the addition of PAM configuration. Given that most workstations (desktop/client) - usually do not need to provide file and print services to a group of users, the configuration - of shares and printers is generally less important. Often this allows the share specifications - to be entirely removed from the <code class="filename">smb.conf</code> file. That is obviously an administrator decision. - </p><div class="sect3" title="NT4 Domain Member"><div class="titlepage"><div><div><h4 class="title"><a name="id364680"></a>NT4 Domain Member</h4></div></div></div><p> - The following steps provide a Linux system that users can log onto using - Windows NT4 (or Samba-3) domain network credentials: - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Follow the steps outlined in <a class="link" href="unixclients.html#wdcsdm" title="NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind">“NT4/Samba Domain with Samba Domain Member Server: Using NSS and Winbind”</a> and ensure that - all validation tests function as shown. - </p></li><li class="step" title="Step 2"><p> - Identify what services users must log on to. On Red Hat Linux, if it is - intended that the user shall be given access to all services, it may be - most expeditious to simply configure the file - <code class="filename">/etc/pam.d/system-auth</code>. - </p></li><li class="step" title="Step 3"><p> - Carefully make a backup copy of all PAM configuration files before you - begin making changes. If you break the PAM configuration, please note - that you may need to use an emergency boot process to recover your Linux - system. It is possible to break the ability to log into the system if - PAM files are incorrectly configured. The entire directory - <code class="filename">/etc/pam.d</code> should be backed up to a safe location. - </p></li><li class="step" title="Step 4"><p> - If you require only console login support, edit the <code class="filename">/etc/pam.d/login</code> - so it matches <a class="link" href="unixclients.html#ch9-pamwnbdlogin" title="Example 7.11. SUSE: PAM login Module Using Winbind">“SUSE: PAM login Module Using Winbind”</a>. - </p></li><li class="step" title="Step 5"><p> - To provide the ability to log onto the graphical desktop interface, you must edit - the files <code class="filename">gdm</code> and <code class="filename">xdm</code> in the - <code class="filename">/etc/pam.d</code> directory. - </p></li><li class="step" title="Step 6"><p> - Edit only one file at a time. Carefully validate its operation before attempting - to reboot the machine. - </p></li></ol></div></div><div class="sect3" title="ADS Domain Member"><div class="titlepage"><div><div><h4 class="title"><a name="id364792"></a>ADS Domain Member</h4></div></div></div><p> - This procedure should be followed to permit a Linux network client (workstation/desktop) - to permit users to log on using Microsoft Active Directory-based user credentials. - </p><div class="procedure"><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Follow the steps outlined in <a class="link" href="unixclients.html#adssdm" title="Active Directory Domain with Samba Domain Member Server">“Active Directory Domain with Samba Domain Member Server”</a> and ensure that - all validation tests function as shown. - </p></li><li class="step" title="Step 2"><p> - Identify what services users must log on to. On Red Hat Linux, if it is - intended that the user shall be given access to all services, it may be - most expeditious to simply configure the file - <code class="filename">/etc/pam.d/system-auth</code> as shown in <a class="link" href="unixclients.html#ch9-rhsysauth" title="Example 7.13. Red Hat 9: PAM System Authentication File: /etc/pam.d/system-auth Module Using Winbind">“Red Hat 9: PAM System Authentication File: /etc/pam.d/system-auth Module Using Winbind”</a>. - </p></li><li class="step" title="Step 3"><p> - Carefully make a backup copy of all PAM configuration files before you - begin making changes. If you break the PAM configuration, please note - that you may need to use an emergency boot process to recover your Linux - system. It is possible to break the ability to log into the system if - PAM files are incorrectly configured. The entire directory - <code class="filename">/etc/pam.d</code> should be backed up to a safe location. - </p></li><li class="step" title="Step 4"><p> - If you require only console login support, edit the <code class="filename">/etc/pam.d/login</code> - so it matches <a class="link" href="unixclients.html#ch9-pamwnbdlogin" title="Example 7.11. SUSE: PAM login Module Using Winbind">“SUSE: PAM login Module Using Winbind”</a>. - </p></li><li class="step" title="Step 5"><p> - To provide the ability to log onto the graphical desktop interface, you must edit - the files <code class="filename">gdm</code> and <code class="filename">xdm</code> in the - <code class="filename">/etc/pam.d</code> directory. - </p></li><li class="step" title="Step 6"><p> - Edit only one file at a time. Carefully validate its operation before attempting - to reboot the machine. - </p></li></ol></div></div><div class="example"><a name="ch9-pamwnbdlogin"></a><p class="title"><b>Example 7.11. SUSE: PAM <code class="filename">login</code> Module Using Winbind</b></p><div class="example-contents"><pre class="screen"> -# /etc/pam.d/login - -#%PAM-1.0 -auth sufficient pam_unix2.so nullok -auth sufficient pam_winbind.so use_first_pass use_authtok -auth required pam_securetty.so -auth required pam_nologin.so -auth required pam_env.so -auth required pam_mail.so -account sufficient pam_unix2.so -account sufficient pam_winbind.so user_first_pass use_authtok -password required pam_pwcheck.so nullok -password sufficient pam_unix2.so nullok use_first_pass use_authtok -password sufficient pam_winbind.so use_first_pass use_authtok -session sufficient pam_unix2.so none -session sufficient pam_winbind.so use_first_pass use_authtok -session required pam_limits.so -</pre></div></div><br class="example-break"><div class="example"><a name="ch9-pamwbndxdm"></a><p class="title"><b>Example 7.12. SUSE: PAM <code class="filename">xdm</code> Module Using Winbind</b></p><div class="example-contents"><pre class="screen"> -# /etc/pam.d/gdm (/etc/pam.d/xdm) - -#%PAM-1.0 -auth sufficient pam_unix2.so nullok -auth sufficient pam_winbind.so use_first_pass use_authtok -account sufficient pam_unix2.so -account sufficient pam_winbind.so use_first_pass use_authtok -password sufficient pam_unix2.so -password sufficient pam_winbind.so use_first_pass use_authtok -session sufficient pam_unix2.so -session sufficient pam_winbind.so use_first_pass use_authtok -session required pam_dev perm.so -session required pam_resmgr.so -</pre></div></div><br class="example-break"><div class="example"><a name="ch9-rhsysauth"></a><p class="title"><b>Example 7.13. Red Hat 9: PAM System Authentication File: <code class="filename">/etc/pam.d/system-auth</code> Module Using Winbind</b></p><div class="example-contents"><pre class="screen"> -#%PAM-1.0 -auth required /lib/security/$ISA/pam_env.so -auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok -auth sufficient /lib/security/$ISA/pam_winbind.so use_first_pass -auth required /lib/security/$ISA/pam_deny.so - -account required /lib/security/$ISA/pam_unix.so -account sufficient /lib/security/$ISA/pam_winbind.so use_first_pass - -password required /lib/security/$ISA/pam_cracklib.so retry=3 type= -# Note: The above line is complete. There is nothing following the '=' -password sufficient /lib/security/$ISA/pam_unix.so \ - nullok use_authtok md5 shadow -password sufficient /lib/security/$ISA/pam_winbind.so use_first_pass -password required /lib/security/$ISA/pam_deny.so - -session required /lib/security/$ISA/pam_limits.so -session sufficient /lib/security/$ISA/pam_unix.so -session sufficient /lib/security/$ISA/pam_winbind.so use_first_pass -</pre></div></div><br class="example-break"></div><div class="sect2" title="Key Points Learned"><div class="titlepage"><div><div><h3 class="title"><a name="id365002"></a>Key Points Learned</h3></div></div></div><p> - The addition of UNIX/Linux Samba servers and clients is a common requirement. In this chapter, you - learned how to integrate such servers so that the UID/GID mappings they use can be consistent - across all domain member servers. You also discovered how to implement the ability to use Samba - or Windows domain account credentials to log on to a UNIX/Linux client. - </p><p> - The following are key points made in this chapter: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Domain controllers are always authoritative for the domain. - </p></li><li class="listitem"><p> - Domain members may have local accounts and must be able to resolve the identity of - domain user accounts. Domain user account identity must map to a local UID/GID. That - local UID/GID can be stored in LDAP. This way, it is possible to share the IDMAP data - across all domain member machines. - </p></li><li class="listitem"><p> - Resolution of user and group identities on domain member machines may be implemented - using direct LDAP services or using winbind. - </p></li><li class="listitem"><p> - On NSS/PAM enabled UNIX/Linux systems, NSS is responsible for identity management - and PAM is responsible for authentication of logon credentials (username and password). - </p></li></ul></div></div></div><div class="sect1" title="Questions and Answers"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id365047"></a>Questions and Answers</h2></div></div></div><p> - The following questions were obtained from the mailing list and also from private discussions - with Windows network administrators. - </p><div class="qandaset" title="Frequently Asked Questions"><a name="id365057"></a><dl><dt> <a href="unixclients.html#id365063"> - We use NIS for all UNIX accounts. Why do we need winbind? - </a></dt><dt> <a href="unixclients.html#id365171"> - Our IT management people do not like LDAP but are looking at Microsoft Active Directory. - Which is better? - </a></dt><dt> <a href="unixclients.html#id365244"> - We want to implement a Samba PDC, four Samba BDCs, and 10 Samba servers. Is it possible - to use NIS in place of LDAP? - </a></dt><dt> <a href="unixclients.html#id365348"> - Are you suggesting that users should not log on to a domain member server? If so, why? - </a></dt><dt> <a href="unixclients.html#id365457"> - We want to ensure that only users from our own domain plus from trusted domains can use our - Samba servers. In the smb.conf file on all servers, we have enabled the winbind - trusted domains only parameter. We now find that users from trusted domains - cannot access our servers, and users from Windows clients that are not domain members - can also access our servers. Is this a Samba bug? - </a></dt><dt> <a href="unixclients.html#id365622"> - What are the benefits of using LDAP for my domain member servers? - </a></dt><dt> <a href="unixclients.html#id365797"> - Is proper DNS operation necessary for Samba-3 plus LDAP? If so, what must I put into - my DNS configuration? - </a></dt><dt> <a href="unixclients.html#id365944"> - Our Windows 2003 Server Active Directory domain runs with NetBIOS disabled. Can we - use Samba-3 with that configuration? - </a></dt><dt> <a href="unixclients.html#id365962"> - When I tried to execute net ads join, I got no output. It did not work, so - I think that it failed. I then executed net rpc join and that worked fine. - That is okay, isn't it? - </a></dt></dl><table border="0" width="100%" summary="Q and A Set"><col align="left" width="1%"><col><tbody><tr class="question"><td align="left" valign="top"><a name="id365063"></a><a name="id365066"></a></td><td align="left" valign="top"><p> - We use NIS for all UNIX accounts. Why do we need winbind? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - <a class="indexterm" name="id365077"></a> - <a class="indexterm" name="id365083"></a> - <a class="indexterm" name="id365090"></a> - <a class="indexterm" name="id365097"></a> - <a class="indexterm" name="id365104"></a> - <a class="indexterm" name="id365111"></a> - You can use NIS for your UNIX accounts. NIS does not store the Windows encrypted - passwords that need to be stored in one of the acceptable passdb backends. - Your choice of backend is limited to <em class="parameter"><code>smbpasswd</code></em> or - <em class="parameter"><code>tdbsam</code></em>. Winbind is needed to handle the resolution of - SIDs from trusted domains to local UID/GID values. - </p><p> - <a class="indexterm" name="id365135"></a> - <a class="indexterm" name="id365142"></a> - On a domain member server, you effectively map Windows domain users to local users - that are in your NIS database by specifying the <em class="parameter"><code>winbind trusted domains - only</code></em>. This causes user and group account lookups to be routed via - the <code class="literal">getpwnam()</code> family of systems calls. On an NIS-enabled client, - this pushes the resolution of users and groups out through NIS. - </p><p> - As a general rule, it is always a good idea to run winbind on all Samba servers. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365171"></a><a name="id365173"></a></td><td align="left" valign="top"><p> - Our IT management people do not like LDAP but are looking at Microsoft Active Directory. - Which is better?<a class="indexterm" name="id365178"></a> - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id365193"></a><a class="indexterm" name="id365204"></a><a class="indexterm" name="id365212"></a> - Microsoft Active Directory is an LDAP server that is intricately tied to a Kerberos - infrastructure. Most IT managers who object to LDAP do so because - an LDAP server is most often supplied as a raw tool that needs to be configured and - for which the administrator must create the schema, create the administration tools, and - devise the backup and recovery facilities in a site-dependent manner. LDAP servers - in general are seen as a high-energy, high-risk facility. - </p><p><a class="indexterm" name="id365227"></a> - Microsoft Active Directory by comparison is easy to install and configure and - is supplied with all tools necessary to implement and manage the directory. For sites - that lack a lot of technical competence, Active Directory is a good choice. For sites - that have the technical competence to handle Active Directory well, LDAP is a good - alternative. The real issue is, What type of solution does - the site want? If management wants a choice to use an alternative, they may want to - consider the options. On the other hand, if management just wants a solution that works, - Microsoft Active Directory is a good solution. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365244"></a><a name="id365247"></a></td><td align="left" valign="top"><p> - We want to implement a Samba PDC, four Samba BDCs, and 10 Samba servers. Is it possible - to use NIS in place of LDAP? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id365257"></a><a class="indexterm" name="id365265"></a><a class="indexterm" name="id365273"></a><a class="indexterm" name="id365281"></a><a class="indexterm" name="id365289"></a><a class="indexterm" name="id365296"></a><a class="indexterm" name="id365304"></a> - Yes, it is possible to use NIS in place of LDAP, but there may be problems with keeping - the Windows (SMB) encrypted passwords database correctly synchronized across the entire - network. Workstations (Windows client machines) periodically change their domain - membership secure account password. How can you keep changes that are on remote BDCs - synchronized on the PDC? - </p><p><a class="indexterm" name="id365318"></a><a class="indexterm" name="id365326"></a><a class="indexterm" name="id365334"></a> - LDAP is a more elegant solution because it permits centralized storage and management - of all network identities (user, group, and machine accounts) together with all information - Samba needs to provide to network clients and their users. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365348"></a><a name="id365350"></a></td><td align="left" valign="top"><p> - Are you suggesting that users should not log on to a domain member server? If so, why? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id365361"></a><a class="indexterm" name="id365369"></a><a class="indexterm" name="id365380"></a> - Many UNIX administrators mock the model that the personal computer industry has adopted - as normative since the early days of Novell NetWare. The old - perception of the necessity to keep users off file and print servers was a result of - fears concerning the security and integrity of data. It was a simple and generally - effective measure to keep users away from servers, except through mapped drives. - </p><p><a class="indexterm" name="id365395"></a><a class="indexterm" name="id365403"></a><a class="indexterm" name="id365410"></a><a class="indexterm" name="id365418"></a><a class="indexterm" name="id365426"></a> - UNIX administrators are fully correct in asserting that UNIX servers and workstations - are identical in terms of the software that is installed. They correctly assert that - in a well-secured environment it is safe to store files on a system that has hundreds - of users. But all network administrators must factor into the decision to allow or - reject general user logins to a UNIX system that is principally a file and print - server the risk to operations through simple user errors. - Only then can one begin to appraise the best strategy and adopt a site-specific - policy that best protects the needs of users and of the organization alike. - </p><p><a class="indexterm" name="id365443"></a> - From experience, it is my recommendation to keep general system-level logins to a - practical minimum and to eliminate them if possible. This should not be taken as a - hard rule, though. The better question is, what works best for the site? - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365457"></a><a name="id365459"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id365462"></a><a class="indexterm" name="id365470"></a><a class="indexterm" name="id365482"></a><a class="indexterm" name="id365490"></a> - We want to ensure that only users from our own domain plus from trusted domains can use our - Samba servers. In the <code class="filename">smb.conf</code> file on all servers, we have enabled the <em class="parameter"><code>winbind - trusted domains only</code></em> parameter. We now find that users from trusted domains - cannot access our servers, and users from Windows clients that are not domain members - can also access our servers. Is this a Samba bug? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id365519"></a><a class="indexterm" name="id365527"></a><a class="indexterm" name="id365534"></a><a class="indexterm" name="id365542"></a><a class="indexterm" name="id365550"></a><a class="indexterm" name="id365558"></a> - The manual page for this <em class="parameter"><code>winbind trusted domains only</code></em> parameter says, - <span class="quote">“<span class="quote">This parameter is designed to allow Samba servers that are members of a Samba-controlled - domain to use UNIX accounts distributed vi NIS, rsync, or LDAP as the UIDs for winbindd users - in the hosts primary domain. Therefore, the user <code class="constant">SAMBA\user1</code> would be - mapped to the account <code class="constant">user1</code> in <code class="filename">/etc/passwd</code> instead - of allocating a new UID for him or her.</span>”</span> This clearly suggests that you are trying - to use this parameter inappropriately. - </p><p><a class="indexterm" name="id365596"></a> - A far better solution is to use the <em class="parameter"><code>valid users</code></em> by specifying - precisely the domain users and groups that should be permitted access to the shares. You could, - for example, set the following parameters: -</p><pre class="screen"> -[demoshare] - path = /export/demodata - valid users = @"Domain Users", @"OTHERDOMAIN\Domain Users" -</pre><p> - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365622"></a><a name="id365624"></a></td><td align="left" valign="top"><p> - What are the benefits of using LDAP for my domain member servers? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id365634"></a><a class="indexterm" name="id365642"></a><a class="indexterm" name="id365650"></a><a class="indexterm" name="id365657"></a><a class="indexterm" name="id365665"></a><a class="indexterm" name="id365673"></a><a class="indexterm" name="id365681"></a><a class="indexterm" name="id365689"></a><a class="indexterm" name="id365696"></a> - The key benefit of using LDAP is that the UID of all users and the GID of all groups - are globally consistent on domain controllers as well as on domain member servers. - This means that it is possible to copy/replicate files across servers without - loss of identity. - </p><p><a class="indexterm" name="id365710"></a><a class="indexterm" name="id365718"></a><a class="indexterm" name="id365726"></a><a class="indexterm" name="id365734"></a><a class="indexterm" name="id365741"></a><a class="indexterm" name="id365749"></a><a class="indexterm" name="id365761"></a><a class="indexterm" name="id365768"></a> - When use is made of account identity resolution via winbind, even when an IDMAP backend - is stored in LDAP, the UID/GID on domain member servers is consistent, but differs - from the ID that the user/group has on domain controllers. The winbind allocated UID/GID - that is stored in LDAP (or locally) will be in the numeric range specified in the <em class="parameter"><code> - idmap uid/gid</code></em> in the <code class="filename">smb.conf</code> file. On domain controllers, the UID/GID is - that of the POSIX value assigned in the LDAP directory as part of the POSIX account information. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365797"></a><a name="id365799"></a></td><td align="left" valign="top"><p> - Is proper DNS operation necessary for Samba-3 plus LDAP? If so, what must I put into - my DNS configuration? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id365810"></a><a class="indexterm" name="id365821"></a><a class="indexterm" name="id365832"></a><a class="indexterm" name="id365840"></a><a class="indexterm" name="id365847"></a><a class="indexterm" name="id365855"></a><a class="indexterm" name="id365863"></a> - Samba depends on correctly functioning resolution of hostnames to their IP address. Samba - makes no direct DNS lookup calls, but rather redirects all name-to-address calls via the - <code class="literal">getXXXbyXXX()</code> function calls. The configuration of the <code class="constant">hosts</code> - entry in the NSS <code class="filename">/etc/nsswitch.conf</code> file determines how the underlying - resolution process is implemented. If the <code class="constant">hosts</code> entry in your NSS - control file says: -</p><pre class="screen"> -hosts: files dns wins -</pre><p> - this means that a hostname lookup first tries the <code class="filename">/etc/hosts</code>. - If this fails to resolve, it attempts a DNS lookup, and if that fails, it tries a - WINS lookup. - </p><p><a class="indexterm" name="id365913"></a><a class="indexterm" name="id365920"></a><a class="indexterm" name="id365928"></a> - The addition of the WINS-based name lookup makes sense only if NetBIOS over TCP/IP has - been enabled on all Windows clients. Where NetBIOS over TCP/IP has been disabled, DNS - is the preferred name resolution technology. This usually makes most sense when Samba - is a client of an Active Directory domain, where NetBIOS use has been disabled. In this - case, the Windows 200x autoregisters all locator records it needs with its own DNS - server or servers. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365944"></a><a name="id365947"></a></td><td align="left" valign="top"><p> - Our Windows 2003 Server Active Directory domain runs with NetBIOS disabled. Can we - use Samba-3 with that configuration? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p> - Yes. - </p></td></tr><tr class="question"><td align="left" valign="top"><a name="id365962"></a><a name="id365964"></a></td><td align="left" valign="top"><p><a class="indexterm" name="id365967"></a><a class="indexterm" name="id365982"></a> - When I tried to execute net ads join, I got no output. It did not work, so - I think that it failed. I then executed net rpc join and that worked fine. - That is okay, isn't it? - </p></td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><p><a class="indexterm" name="id366004"></a><a class="indexterm" name="id366012"></a> - No. This is not okay. It means that your Samba-3 client has joined the ADS domain as - a Windows NT4 client, and Samba-3 will not be using Kerberos-based authentication. - </p></td></tr></tbody></table></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="DMSMig.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="DMSMig.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="upgrades.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Part II. Domain Members, Updating Samba and Migration </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 8. Updating Samba-3</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Samba3-ByExample/upgrades.html b/docs/htmldocs/Samba3-ByExample/upgrades.html deleted file mode 100644 index f025a2ab38..0000000000 --- a/docs/htmldocs/Samba3-ByExample/upgrades.html +++ /dev/null @@ -1,947 +0,0 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 8. Updating Samba-3</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Samba-3 by Example"><link rel="up" href="DMSMig.html" title="Part II. Domain Members, Updating Samba and Migration"><link rel="prev" href="unixclients.html" title="Chapter 7. Adding Domain Member Servers and Clients"><link rel="next" href="ntmigration.html" title="Chapter 9. Migrating NT4 Domain to Samba-3"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 8. Updating Samba-3</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="unixclients.html">Prev</a> </td><th width="60%" align="center">Part II. Domain Members, Updating Samba and Migration</th><td width="20%" align="right"> <a accesskey="n" href="ntmigration.html">Next</a></td></tr></table><hr></div><div class="chapter" title="Chapter 8. Updating Samba-3"><div class="titlepage"><div><div><h2 class="title"><a name="upgrades"></a>Chapter 8. Updating Samba-3</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="upgrades.html#id366117">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#id366200">Cautions and Notes</a></span></dt></dl></dd><dt><span class="sect1"><a href="upgrades.html#id367413">Upgrading from Samba 1.x and 2.x to Samba-3</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#sbeug2">Samba 1.9.x and 2.x Versions Without LDAP</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id367754">Applicable to All Samba 2.x to Samba-3 Upgrades</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368069">Samba-2.x with LDAP Support</a></span></dt></dl></dd><dt><span class="sect1"><a href="upgrades.html#id368184">Updating a Samba-3 Installation</a></span></dt><dd><dl><dt><span class="sect2"><a href="upgrades.html#id368281">Samba-3 to Samba-3 Updates on the Same Server</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368465">Migrating Samba-3 to a New Server</a></span></dt><dt><span class="sect2"><a href="upgrades.html#id368842">Migration of Samba Accounts to Active Directory</a></span></dt></dl></dd></dl></div><p> -<a class="indexterm" name="id366043"></a> -<a class="indexterm" name="id366050"></a> -It was a little difficult to select an appropriate title for this chapter. -From email messages on the Samba mailing lists it is clear that many people -consider the updating and upgrading of Samba to be a migration matter. Others -talk about migrating Samba servers when in fact the issue at hand is one of -installing a new Samba server to replace an older existing Samba server. -</p><p> -<a class="indexterm" name="id366063"></a> -<a class="indexterm" name="id366070"></a> -There has also been much talk about migration of Samba-3 from an smbpasswd -passdb backend to the use of the tdbsam or ldapsam facilities that are new -to Samba-3. -</p><p> -Clearly, there is not a great deal of clarity in the terminology that various -people apply to these modes by which Samba servers are updated. This is further -highlighted by an email posting that included the following neat remark: -</p><div class="blockquote"><blockquote class="blockquote"><p> -<a class="indexterm" name="id366088"></a> -I like the <span class="quote">“<span class="quote">net rpc vampire</span>”</span> on NT4, but that to my surprise does -not seem to work against a Samba PDC and, if addressed in the Samba to Samba -context in either book, I could not find it. -</p></blockquote></div><p> -<a class="indexterm" name="id366107"></a> -So in response to the significant request for these situations to be better -documented, this chapter has now been added. User contributions and documentation -of real-world experiences are a most welcome addition to this chapter. -</p><div class="sect1" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id366117"></a>Introduction</h2></div></div></div><p> -<a class="indexterm" name="id366125"></a> -<a class="indexterm" name="id366131"></a> -<a class="indexterm" name="id366138"></a> -A Windows network administrator explained in an email what changes he was -planning to make and followed with the question: <span class="quote">“<span class="quote">Anyone done this -before?</span>”</span> Many of us have upgraded and updated Samba without incident. -Others have experienced much pain and user frustration. So it is to be hoped -that the notes in this chapter will make a positive difference by assuring -that someone will be saved a lot of discomfort. -</p><p> -Before anyone commences an upgrade or an update of Samba, the one cardinal -rule that must be observed is: Backup all Samba configuration files in -case it is necessary to revert to the old version. Even if you do not like -this precautionary step, users will punish an administrator who -fails to take adequate steps to avoid situations that may inflict lost -productivity on them. -</p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> -<a class="indexterm" name="id366163"></a> -<a class="indexterm" name="id366170"></a> -Samba makes it possible to upgrade and update configuration files, but it -is not possible to downgrade the configuration files. Please ensure that -all configuration and control files are backed up to permit a down-grade -in the rare event that this may be necessary. -</p></div><p> -<a class="indexterm" name="id366182"></a> -<a class="indexterm" name="id366189"></a> -It is prudent also to backup all data files on the server before attempting -to perform a major upgrade. Many administrators have experienced the consequences -of failure to take adequate precautions. So what is adequate? That is simple! -If data is lost during an upgrade or update and it can not be restored, -the precautions taken were inadequate. If a backup was not needed, but was available, -caution was on the side of the victor. -</p><div class="sect2" title="Cautions and Notes"><div class="titlepage"><div><div><h3 class="title"><a name="id366200"></a>Cautions and Notes</h3></div></div></div><p> - Someone once said, <span class="quote">“<span class="quote">It is good to be sorry, but better never to need to be!</span>”</span> - These are wise words of advice to those contemplating a Samba upgrade or update. - </p><p> - <a class="indexterm" name="id366216"></a> - <a class="indexterm" name="id366223"></a> - <a class="indexterm" name="id366230"></a> - This is as good a time as any to define the terms <code class="constant">upgrade</code> and - <code class="constant">update</code>. The term <code class="constant">upgrade</code> refers to - the installation of a version of Samba that is a whole generation or more ahead of - that which is installed. Generations are indicated by the first digit of the version - number. So far Samba has been released in generations 1.x, 2.x, 3.x, and currently 4.0 - is in development. - </p><p> - <a class="indexterm" name="id366254"></a> - The term <code class="constant">update</code> refers to a minor version number installation - in place of one of the same generation. For example, updating from Samba 3.0.10 to 3.0.14 - is an update. The move from Samba 2.0.7 to 3.0.14 is an upgrade. - </p><p> - <a class="indexterm" name="id366269"></a> - While the use of these terms is an exercise in semantics, what needs to be realized - is that there are major functional differences between a Samba 2.x release and a Samba - 3.0.x release. Such differences may require a significantly different approach to - solving the same networking challenge and generally require careful review of the - latest documentation to identify precisely how the new installation may need to be - modified to preserve prior functionality. - </p><p> - There is an old axiom that says, <span class="quote">“<span class="quote">The greater the volume of the documentation, - the greater the risk that noone will read it, but where there is no documentation, - noone can read it!</span>”</span> While true, some documentation is an evil necessity. - It is hoped that this update to the documentation will avoid both extremes. - </p><div class="sect3" title="Security Identifiers (SIDs)"><div class="titlepage"><div><div><h4 class="title"><a name="id366291"></a>Security Identifiers (SIDs)</h4></div></div></div><p> - <a class="indexterm" name="id366298"></a> - <a class="indexterm" name="id366308"></a> - <a class="indexterm" name="id366315"></a> - <a class="indexterm" name="id366322"></a> - <a class="indexterm" name="id366328"></a> - <a class="indexterm" name="id366337"></a> - Before the days of Windows NT and OS/2, every Windows and DOS networking client - that used the SMB protocols was an entirely autonomous entity. There was no concept - of a security identifier for a machine or a user outside of the username, the - machine name, and the workgroup name. In actual fact, these were not security identifiers - in the same context as the way that the SID is used since the development of - Windows NT 3.10. - </p><p> - <a class="indexterm" name="id366353"></a> - <a class="indexterm" name="id366360"></a> - <a class="indexterm" name="id366367"></a> - <a class="indexterm" name="id366374"></a> - <a class="indexterm" name="id366380"></a> - <a class="indexterm" name="id366387"></a> - Versions of Samba prior to 1.9 did not make use of a SID. Instead they make exclusive use - of the username that is embedded in the SessionSetUpAndX component of the connection - setup process between a Windows client and an SMB/CIFS server. - </p><p> - <a class="indexterm" name="id366402"></a> - <a class="indexterm" name="id366409"></a> - <a class="indexterm" name="id366415"></a> - Around November 1997 support was added to Samba-1.9 to handle the Windows security - RPC-based protocols that implemented support for Samba to store a machine SID. This - information was stored in a file called <code class="filename">MACHINE.SID.</code> - </p><p> - <a class="indexterm" name="id366433"></a> - <a class="indexterm" name="id366440"></a> - <a class="indexterm" name="id366446"></a> - Within the lifetime of the early Samba 2.x series, the machine SID information was - relocated into a tdb file called <code class="filename">secrets.tdb</code>, which is where - it is still located in Samba 3.0.x along with other information that pertains to the - local machine and its role within a domain security context. - </p><p> - <a class="indexterm" name="id366464"></a> - <a class="indexterm" name="id366474"></a> - <a class="indexterm" name="id366483"></a> - <a class="indexterm" name="id366489"></a> - There are two types of SID, those pertaining to the machine itself and the domain to - which it may belong, and those pertaining to users and groups within the security - context of the local machine, in the case of standalone servers (SAS) and domain member - servers (DMS). - </p><p> - <a class="indexterm" name="id366501"></a> - <a class="indexterm" name="id366508"></a> - <a class="indexterm" name="id366515"></a> - <a class="indexterm" name="id366522"></a> - <a class="indexterm" name="id366529"></a> - <a class="indexterm" name="id366535"></a> - When the Samba <code class="literal">smbd</code> daemon is first started, if the <code class="filename">secrets.tdb</code> - file does not exist, it is created at the first client connection attempt. If this file does - exist, <code class="literal">smbd</code> checks that there is a machine SID (if it is a domain controller, - it searches for the domain SID). If <code class="literal">smbd</code> does not find one for the current - name of the machine or for the current name of the workgroup, a new SID will be generated and - then written to the <code class="filename">secrets.tdb</code> file. The SID is generated in a nondeterminative - manner. This means that each time it is generated for a particular combination of machine name - (hostname) and domain name (workgroup), it will be different. - </p><p> - <a class="indexterm" name="id366580"></a> - The SID is the key used by MS Windows networking for all networking operations. This means - that when the machine or domain SID changes, all security-encoded objects such as profiles - and ACLs may become unusable. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - It is of paramount importance that the machine and domain SID be backed up so that in - the event of a change of hostname (machine name) or domain name (workgroup) the SID can - be restored to its previous value. - </p></div><p> - <a class="indexterm" name="id366598"></a> - <a class="indexterm" name="id366604"></a> - <a class="indexterm" name="id366611"></a> - <a class="indexterm" name="id366617"></a> - <a class="indexterm" name="id366624"></a> - <a class="indexterm" name="id366631"></a> - <a class="indexterm" name="id366638"></a> - <a class="indexterm" name="id366645"></a> - <a class="indexterm" name="id366651"></a> - <a class="indexterm" name="id366658"></a> - In Samba-3 on a domain controller (PDC or BDC), the domain name controls the domain - SID. On all prior versions the hostname (computer name, or NetBIOS name) controlled - the SID. On a standalone server the hostname still controls the SID. - </p><p> - <a class="indexterm" name="id366670"></a> - <a class="indexterm" name="id366679"></a> - The local machine SID can be backed up using this procedure (Samba-3): -</p><pre class="screen"> -<code class="prompt">root# </code> net getlocalsid > /etc/samba/my-local-SID -</pre><p> - The contents of the file <code class="filename">/etc/samba/my-local-SID</code> will be: -</p><pre class="screen"> -SID for domain FRODO is: S-1-5-21-726309263-4128913605-1168186429 -</pre><p> - This SID can be restored by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> net setlocalsid S-1-5-21-726309263-4128913605-1168186429 -</pre><p> - </p><p> - Samba 1.9.x stored the machine SID in the the file <code class="filename">/etc/MACHINE.SID</code> - from which it could be recovered and stored into the <code class="filename">secrets.tdb</code> file - using the procedure shown above. - </p><p> - Where the <code class="filename">secrets.tdb</code> file exists and a version of Samba 2.x or later - has been used, there is no specific need to go through this update process. Samba-3 has the - ability to read the older tdb file and to perform an in-situ update to the latest tdb format. - This is not a reversible process it is a one-way upgrade. - </p><p> - <a class="indexterm" name="id366761"></a> - In the course of the Samba 2.0.x series the <code class="literal">smbpasswd</code> was modified to - permit the domain SID to be captured to the <code class="filename">secrets.tdb</code> file by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -S PDC -Uadministrator%password -</pre><p> - </p><p> - The release of the Samba 2.2.x series permitted the SID to be obtained by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -S PDC -Uadministrator%password -</pre><p> - from which the SID could be copied to a file and then written to the Samba-2.2.x - <code class="filename">secrets.tdb</code> file by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> smbpasswd -W S-1-5-21-726309263-4128913605-1168186429 -</pre><p> - </p><p> - <a class="indexterm" name="id366829"></a> - <a class="indexterm" name="id366835"></a> - Domain security information, which includes the domain SID, can be obtained from Samba-2.2.x - systems by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> rpcclient hostname lsaquery -Uroot%password -</pre><p> - This can also be done with Samba-3 by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> net rpc info -Uroot%password -Domain Name: MIDEARTH -Domain SID: S-1-5-21-726309263-4128913605-1168186429 -Sequence number: 1113415916 -Num users: 4237 -Num domain groups: 86 -Num local groups: 0 -</pre><p> - It is a very good practice to store this SID information in a safely kept file, just in - case it is ever needed at a later date. - </p><p> - <a class="indexterm" name="id366877"></a> - <a class="indexterm" name="id366884"></a> - <a class="indexterm" name="id366891"></a> - Take note that the domain SID is used extensively in Samba. Where LDAP is used for the - <em class="parameter"><code>passdb backend</code></em>, all user, group, and trust accounts are encoded - with the domain SID. This means that if the domain SID changes for any reason, the entire - Samba environment can become broken and require extensive corrective action if the - original SID cannot be restored. Fortunately, it can be recovered from a dump of the - LDAP database. A dump of the LDAP directory database can be obtained by executing: -</p><pre class="screen"> -<code class="prompt">root# </code> slapcat -v -l filename.ldif -</pre><p> - </p><p> - <a class="indexterm" name="id366922"></a> - <a class="indexterm" name="id366929"></a> - <a class="indexterm" name="id366936"></a> - When the domain SID has changed, roaming profiles cease to be functional. The recovery - of roaming profiles necessitates resetting of the domain portion of the user SID - that owns the profile. This is encoded in the <code class="filename">NTUser.DAT</code> and can be - updated using the Samba <code class="literal">profiles</code> utility. Please be aware that not all - Linux distributions of the Samba RPMs include this essential utility. Please do not - complain to the Samba Team if this utility is missing; that issue that must be - addressed to the creator of the RPM package. The Samba Team do their best to make - available all the tools needed to manage a Samba-based Windows networking environment. - </p></div><div class="sect3" title="Change of hostname"><div class="titlepage"><div><div><h4 class="title"><a name="id366964"></a>Change of hostname</h4></div></div></div><p> - <a class="indexterm" name="id366972"></a> - <a class="indexterm" name="id366981"></a> - Samba uses two methods by which the primary NetBIOS machine name (also known as a computer - name or the hostname) may be determined: If the <code class="filename">smb.conf</code> file contains a - <em class="parameter"><code>netbios name</code></em> entry, its value will be used directly. In the absence - of such an entry, the UNIX system hostname will be used. - </p><p> - Many sites have become victims of lost Samba functionality because the UNIX system - hostname was changed for one reason or another. Such a change will cause a new machine - SID to be generated. If this happens on a domain controller, it will also change the - domain SID. These SIDs can be updated (restored) using the procedure outlined previously. - </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - Do NOT change the hostname or the <em class="parameter"><code>netbios name</code></em>. If this - is changed, be sure to reset the machine SID to the original setting. Otherwise - there may be serious interoperability and/or operational problems. - </p></div></div><div class="sect3" title="Change of Workgroup (Domain) Name"><div class="titlepage"><div><div><h4 class="title"><a name="id367023"></a>Change of Workgroup (Domain) Name</h4></div></div></div><p> - <a class="indexterm" name="id367030"></a> - The domain name of a Samba server is identical to the workgroup name and is - set in the <code class="filename">smb.conf</code> file using the <em class="parameter"><code>workgroup</code></em> parameter. - This has been consistent throughout the history of Samba and across all versions. - </p><p> - <a class="indexterm" name="id367054"></a> - Be aware that when the workgroup name is changed, a new SID will be generated. - The old domain SID can be reset using the procedure outlined earlier in this chapter. - </p></div><div class="sect3" title="Location of config files"><div class="titlepage"><div><div><h4 class="title"><a name="sbeug1"></a>Location of config files</h4></div></div></div><p> - The Samba-Team has maintained a constant default location for all Samba control files - throughout the life of the project. People who have produced binary packages of Samba - have varied the location of the Samba control files. This has led to some confusion - for network administrators. - </p><p> - <a class="indexterm" name="id367081"></a> - The Samba 1.9.x <code class="filename">smb.conf</code> file may be found either in the <code class="filename">/etc</code> - directory or in <code class="filename">/usr/local/samba/lib</code>. - </p><p> - During the life of the Samba 2.x release, the <code class="filename">smb.conf</code> file was relocated - on Linux systems to the <code class="filename">/etc/samba</code> directory where it - remains located also for Samba 3.0.x installations. - </p><p> - <a class="indexterm" name="id367126"></a> - Samba 2.x introduced the <code class="filename">secrets.tdb</code> file that is also stored in the - <code class="filename">/etc/samba</code> directory, or in the <code class="filename">/usr/local/samba/lib</code> - directory subsystem. - </p><p> - <a class="indexterm" name="id367154"></a> - The location at which <code class="literal">smbd</code> expects to find all configuration and control - files is determined at the time of compilation of Samba. For versions of Samba prior to - 3.0, one way to find the expected location of these files is to execute: -</p><pre class="screen"> -<code class="prompt">root# </code> strings /usr/sbin/smbd | grep conf -<code class="prompt">root# </code> strings /usr/sbin/smbd | grep secret -<code class="prompt">root# </code> strings /usr/sbin/smbd | grep smbpasswd -</pre><p> - Note: The <code class="literal">smbd</code> executable may be located in the path - <code class="filename">/usr/local/samba/sbin</code>. - </p><p> - <a class="indexterm" name="id367209"></a> - Samba-3 provides a neat new way to track the location of all control files as well as to - find the compile-time options used as the Samba package was built. Here is how the dark - secrets of the internals of the location of control files within Samba executables can - be uncovered: -</p><pre class="screen"> -<code class="prompt">root# </code> smbd -b | less -Build environment: - Built by: root@frodo - Built on: Mon Apr 11 20:23:27 MDT 2005 - Built using: gcc - Build host: Linux frodo 2.6... - SRCDIR: /usr/src/packages/BUILD/samba-3.0.20/source - BUILDDIR: /usr/src/packages/BUILD/samba-3.0.20/source - -Paths: - SBINDIR: /usr/sbin - BINDIR: /usr/bin - SWATDIR: /usr/share/samba/swat - CONFIGFILE: /etc/samba/smb.conf - LOGFILEBASE: /var/log/samba - LMHOSTSFILE: /etc/samba/lmhosts - LIBDIR: /usr/lib/samba - SHLIBEXT: so - LOCKDIR: /var/lib/samba - PIDDIR: /var/run/samba - SMB_PASSWD_FILE: /etc/samba/smbpasswd - PRIVATE_DIR: /etc/samba - ... -</pre><p> - </p><p> - <a class="indexterm" name="id367238"></a> - It is important that both the <code class="filename">smb.conf</code> file and the <code class="filename">secrets.tdb</code> - be backed up before attempting any upgrade. The <code class="filename">secrets.tdb</code> file - is version-encoded, and therefore a newer version may not work with an older version - of Samba. A backup means that it is always possible to revert a failed or problematic - upgrade. - </p></div><div class="sect3" title="International Language Support"><div class="titlepage"><div><div><h4 class="title"><a name="id367266"></a>International Language Support</h4></div></div></div><p> - <a class="indexterm" name="id367273"></a> - <a class="indexterm" name="id367280"></a> - <a class="indexterm" name="id367287"></a> - <a class="indexterm" name="id367294"></a> - Samba-2.x had no support for Unicode; instead, all national language character-set support in file names - was done using particular locale codepage mapping techniques. Samba-3 supports Unicode in file names, thus - providing true internationalization support. - </p><p> - <a class="indexterm" name="id367306"></a> - Non-English users whose national language character set has special characters and who upgrade naively will - find that many files that have the special characters in the file name will see them garbled and jumbled up. - This typically happens with umlauts and accents because these characters were particular to the codepage - that was in use with Samba-2.x using an 8-bit encoding scheme. - </p><p> - <a class="indexterm" name="id367320"></a> - Files that are created with Samba-3 will use UTF-8 encoding. Should the file system ever end up with a - mix of codepage (unix charset)-encoded file names and UTF-8-encoded file names, the mess will take some - effort to set straight. - </p><p> - <a class="indexterm" name="id367332"></a> - A very helpful tool is available from Bjorn Jacke's <a class="ulink" href="http://j3e.de/linux/convmv/" target="_top">convmv</a> - work. Convmv is a tool that can be used to convert file and directory names from one encoding method to - another. The most common use for this tool is to convert locale-encoded files to UTF-8 Unicode encoding. - </p></div><div class="sect3" title="Updates and Changes in Idealx smbldap-tools"><div class="titlepage"><div><div><h4 class="title"><a name="id367349"></a>Updates and Changes in Idealx smbldap-tools</h4></div></div></div><p> - The smbldap-tools have been maturing rapidly over the past year. With maturation comes change. - The location of the <code class="filename">smbldap.conf</code> and the <code class="filename">smbldap_bind.conf</code> - configuration files have been moved from the directory <code class="filename">/etc/smbldap-tools</code> to - the new location of <code class="filename">/etc/opt/IDEALX/smblda-tools</code> directory. - </p><p> - The smbldap-tools maintains an entry in the LDAP directory in which it stores the next - values that should be used for UID and GID allocation for POSIX accounts that are created - using this tool. The DIT location of these values has changed recently. The original - <code class="constant">sambaUnixIdPooldn object</code> entity was stored in a directory entry (DIT object) - called <code class="constant">NextFreeUnixId</code>, this has been changed to the DIT object - <code class="constant">sambaDomainName</code>. Anyone who updates from an older version to the - current release should note that the information stored under <code class="constant">NextFreeUnixId</code> - must now be relocated to the DIT object <code class="constant">sambaDomainName</code>. - </p></div></div></div><div class="sect1" title="Upgrading from Samba 1.x and 2.x to Samba-3"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id367413"></a>Upgrading from Samba 1.x and 2.x to Samba-3</h2></div></div></div><p> -Sites that are being upgraded from Samba-2 (or earlier versions) to Samba-3 -may experience little difficulty or may require a lot of effort, depending -on the complexity of the configuration. Samba-1.9.x upgrades to Samba-3 will -generally be simple and straightforward, although no upgrade should be -attempted without proper planning and preparation. -</p><p> -There are two basic modes of use of Samba versions prior to Samba-3. The first -does not use LDAP, the other does. Samba-1.9.x did not provide LDAP support. -Samba-2.x could be compiled with LDAP support. -</p><div class="sect2" title="Samba 1.9.x and 2.x Versions Without LDAP"><div class="titlepage"><div><div><h3 class="title"><a name="sbeug2"></a>Samba 1.9.x and 2.x Versions Without LDAP</h3></div></div></div><p> - Where it is necessary to upgrade an old Samba installation to Samba-3, - the following procedure can be followed: - </p><div class="procedure" title="Procedure 8.1. Upgrading from a Pre-Samba-3 Version"><a name="id367444"></a><p class="title"><b>Procedure 8.1. Upgrading from a Pre-Samba-3 Version</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - <a class="indexterm" name="id367455"></a> - <a class="indexterm" name="id367462"></a> - <a class="indexterm" name="id367468"></a> - Stop Samba. This can be done using the appropriate system tool - that is particular for each operating system or by executing the - <code class="literal">kill</code> command on <code class="literal">smbd</code>, - <code class="literal">nmbd</code>, and <code class="literal">winbindd</code>. - </p></li><li class="step" title="Step 2"><p> - Find the location of the Samba <code class="filename">smb.conf</code> file and back it up to a - safe location. - </p></li><li class="step" title="Step 3"><p> - Find the location of the <code class="filename">smbpasswd</code> file and - back it up to a safe location. - </p></li><li class="step" title="Step 4"><p> - Find the location of the <code class="filename">secrets.tdb</code> file and - back it up to a safe location. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id367546"></a> - <a class="indexterm" name="id367553"></a> - <a class="indexterm" name="id367560"></a> - <a class="indexterm" name="id367567"></a> - Find the location of the lock directory. This is the directory - in which Samba stores all its tdb control files. The default - location used by the Samba Team is in - <code class="filename">/usr/local/samba/var/locks</code> directory, - but on Linux systems the old location was under the - <code class="filename">/var/cache/samba</code> directory. However, the - Linux Standards Base specified location is now under the - <code class="filename">/var/lib/samba</code> directory. Copy all the - tdb files to a safe location. - </p></li><li class="step" title="Step 6"><p> - <a class="indexterm" name="id367601"></a> - It is now safe to upgrade the Samba installation. On Linux systems - it is not necessary to remove the Samba RPMs because a simple - upgrade installation will automatically remove the old files. - </p><p> - On systems that do not support a reliable package management system - it is advisable either to delete the Samba old installation or to - move it out of the way by renaming the directories that contain the - Samba binary files. - </p></li><li class="step" title="Step 7"><p> - When the Samba upgrade has been installed, the first step that should - be completed is to identify the new target locations for the control - files. Follow the steps shown in <a class="link" href="upgrades.html#sbeug1" title="Location of config files">“Location of config files”</a> to locate - the correct directories to which each control file must be moved. - </p></li><li class="step" title="Step 8"><p> - Do not change the hostname. - </p></li><li class="step" title="Step 9"><p> - Do not change the workgroup name. - </p></li><li class="step" title="Step 10"><p> - <a class="indexterm" name="id367650"></a> - Execute the <code class="literal">testparm</code> to validate the <code class="filename">smb.conf</code> file. - This process will flag any parameters that are no longer supported. - It will also flag configuration settings that may be in conflict. - </p><p> - One solution that may be used to clean up and to update the <code class="filename">smb.conf</code> - file involves renaming it to <code class="filename">smb.conf.master</code> and - then executing the following: -</p><pre class="screen"> -<code class="prompt">root# </code> cd /etc/samba -<code class="prompt">root# </code> testparm -s smb.conf.master > smb.conf -</pre><p> - <a class="indexterm" name="id367704"></a> - The resulting <code class="filename">smb.conf</code> file will be stripped of all comments - and of all nonconforming configuration settings. - </p></li><li class="step" title="Step 11"><p> - <a class="indexterm" name="id367725"></a> - It is now safe to start Samba using the appropriate system tool. - Alternately, it is possible to just execute <code class="literal">nmbd</code>, - <code class="literal">smbd</code>, and <code class="literal">winbindd</code> for the command - line while logged in as the root user. - </p></li></ol></div></div><div class="sect2" title="Applicable to All Samba 2.x to Samba-3 Upgrades"><div class="titlepage"><div><div><h3 class="title"><a name="id367754"></a>Applicable to All Samba 2.x to Samba-3 Upgrades</h3></div></div></div><p> - <a class="indexterm" name="id367762"></a> - <a class="indexterm" name="id367769"></a> - <a class="indexterm" name="id367776"></a> - Samba 2.x servers that were running as a domain controller (PDC) - require changes to the configuration of the scripting interface - tools that Samba uses to perform OS updates for - users, groups, and trust accounts (machines and interdomain). - </p><p> - <a class="indexterm" name="id367788"></a> - The following parameters are new to Samba-3 and should be correctly configured. - Please refer to <a class="link" href="secure.html" title="Chapter 3. Secure Office Networking">“Secure Office Networking”</a> through <a class="link" href="net2000users.html" title="Chapter 6. A Distributed 2000-User Network">“A Distributed 2000-User Network”</a> - in this book for examples of use of the new parameters shown here: - <a class="indexterm" name="id367807"></a> - <a class="indexterm" name="id367814"></a> - <a class="indexterm" name="id367821"></a> - <a class="indexterm" name="id367828"></a> - <a class="indexterm" name="id367834"></a> - <a class="indexterm" name="id367841"></a> - <a class="indexterm" name="id367848"></a> - </p><p> - </p><table border="0" summary="Simple list" class="simplelist"><tr><td>add group script</td></tr><tr><td>add machine script</td></tr><tr><td>add user to group script</td></tr><tr><td>delete group script</td></tr><tr><td>delete user from group script</td></tr><tr><td>passdb backend</td></tr><tr><td>set primary group script</td></tr></table><p> - </p><p> - <a class="indexterm" name="id367892"></a> - <a class="indexterm" name="id367898"></a> - The <em class="parameter"><code>add machine script</code></em> functionality was previously - handled by the <em class="parameter"><code>add user script</code></em>, which in Samba-3 is - used exclusively to add user accounts. - </p><p> - <a class="indexterm" name="id367921"></a> - <a class="indexterm" name="id367928"></a> - <a class="indexterm" name="id367935"></a> - <a class="indexterm" name="id367942"></a> - <a class="indexterm" name="id367948"></a> - <a class="indexterm" name="id367955"></a> - <a class="indexterm" name="id367962"></a> - <a class="indexterm" name="id367969"></a> - <a class="indexterm" name="id367976"></a> - Where the <em class="parameter"><code>passdb backend</code></em> used is either <code class="constant">smbpasswd</code> - (the default) or the new <code class="constant">tdbsam</code>, the system interface scripts - are typically used. These involve use of OS tools such as <code class="literal">useradd</code>, - <code class="literal">usermod</code>, <code class="literal">userdel</code>, <code class="literal">groupadd</code>, - <code class="literal">groupmod</code>, <code class="literal">groupdel</code>, and so on. - </p><p> - <a class="indexterm" name="id368035"></a> - <a class="indexterm" name="id368042"></a> - <a class="indexterm" name="id368048"></a> - Where the <em class="parameter"><code>passdb backend</code></em> makes use of an LDAP directory, - it is necessary either to use the <code class="constant">smbldap-tools</code> provided - by Idealx or to use an alternate toolset provided by a third - party or else home-crafted to manage the LDAP directory accounts. - </p></div><div class="sect2" title="Samba-2.x with LDAP Support"><div class="titlepage"><div><div><h3 class="title"><a name="id368069"></a>Samba-2.x with LDAP Support</h3></div></div></div><p> - Samba version 2.x could be compiled for use either with or without LDAP. - The LDAP control settings in the <code class="filename">smb.conf</code> file in this old version are - completely different (and less complete) than they are with Samba-3. This - means that after migrating the control files, it is necessary to reconfigure - the LDAP settings entirely. - </p><p> - Follow the procedure outlined in <a class="link" href="upgrades.html#sbeug2" title="Samba 1.9.x and 2.x Versions Without LDAP">“Samba 1.9.x and 2.x Versions Without LDAP”</a> to affect a migration - of all files to the correct locations. - </p><p> - <a class="indexterm" name="id368099"></a> - <a class="indexterm" name="id368106"></a> - The Samba SAM schema required for Samba-3 is significantly different from that - used with Samba 2.x. This means that the LDAP directory must be updated - using the procedure outlined in the Samba WHATSNEW.txt file that accompanies - all releases of Samba-3. This information is repeated here directly from this - file: -</p><pre class="screen"> -This is an extract from the Samba-3.0.x WHATSNEW.txt file: -========================================================== -Changes in Behavior -------------------- - -The following issues are known changes in behavior between Samba 2.2 and -Samba 3.0 that may affect certain installations of Samba. - - 1) When operating as a member of a Windows domain, Samba 2.2 would - map any users authenticated by the remote DC to the 'guest account' - if a uid could not be obtained via the getpwnam() call. Samba 3.0 - rejects the connection as NT_STATUS_LOGON_FAILURE. There is no - current work around to re-establish the 2.2 behavior. - - 2) When adding machines to a Samba 2.2 controlled domain, the - 'add user script' was used to create the UNIX identity of the - machine trust account. Samba 3.0 introduces a new 'add machine - script' that must be specified for this purpose. Samba 3.0 will - not fall back to using the 'add user script' in the absence of - an 'add machine script' - -###################################################################### -Passdb Backends and Authentication -################################## - -There have been a few new changes that Samba administrators should be -aware of when moving to Samba 3.0. - - 1) encrypted passwords have been enabled by default in order to - inter-operate better with out-of-the-box Windows client - installations. This does mean that either (a) a samba account - must be created for each user, or (b) 'encrypt passwords = no' - must be explicitly defined in smb.conf. - - 2) Inclusion of new 'security = ads' option for integration - with an Active Directory domain using the native Windows - Kerberos 5 and LDAP protocols. - - MIT kerberos 1.3.1 supports the ARCFOUR-HMAC-MD5 encryption - type which is necessary for servers on which the - administrator password has not been changed, or kerberos-enabled - SMB connections to servers that require Kerberos SMB signing. - Besides this one difference, either MIT or Heimdal Kerberos - distributions are usable by Samba 3.0. - - -Samba 3.0 also includes the possibility of setting up chains -of authentication methods (auth methods) and account storage -backends (passdb backend). Please refer to the smb.conf(5) -man page for details. While both parameters assume sane default -values, it is likely that you will need to understand what the -values actually mean in order to ensure Samba operates correctly. - -The recommended passdb backends at this time are - - * smbpasswd - 2.2 compatible flat file format - * tdbsam - attribute rich database intended as an smbpasswd - replacement for stand alone servers - * ldapsam - attribute rich account storage and retrieval - backend utilizing an LDAP directory. - * ldapsam_compat - a 2.2 backward compatible LDAP account - backend - -Certain functions of the smbpasswd(8) tool have been split between the -new smbpasswd(8) utility, the net(8) tool, and the new pdbedit(8) -utility. See the respective man pages for details. - -###################################################################### -LDAP -#### - -This section outlines the new features affecting Samba / LDAP -integration. - -New Schema ----------- - -A new object class (sambaSamAccount) has been introduced to replace -the old sambaAccount. This change aids us in the renaming of -attributes to prevent clashes with attributes from other vendors. -There is a conversion script (examples/LDAP/convertSambaAccount) to -modify and LDIF file to the new schema. - -Example: - - $ ldapsearch .... -b "ou=people,dc=..." > sambaAcct.ldif - $ convertSambaAccount --sid=<Domain SID> \ - --input=sambaAcct.ldif --output=sambaSamAcct.ldif \ - --changetype=[modify|add] - -The <DOM SID> can be obtained by running 'net getlocalsid -<DOMAINNAME>' on the Samba PDC as root. The changetype determines -the format of the generated LDIF output--either create new entries -or modify existing entries. - -The old sambaAccount schema may still be used by specifying the -"ldapsam_compat" passdb backend. However, the sambaAccount and -associated attributes have been moved to the historical section of -the schema file and must be uncommented before use if needed. -The 2.2 object class declaration for a sambaAccount has not changed -in the 3.0 samba.schema file. - -Other new object classes and their uses include: - - * sambaDomain - domain information used to allocate rids - for users and groups as necessary. The attributes are added - in 'ldap suffix' directory entry automatically if - an idmap uid/gid range has been set and the 'ldapsam' - passdb backend has been selected. - - * sambaGroupMapping - an object representing the - relationship between a posixGroup and a Windows - group/SID. These entries are stored in the 'ldap - group suffix' and managed by the 'net groupmap' command. - - * sambaUnixIdPool - created in the 'ldap idmap suffix' entry - automatically and contains the next available 'idmap uid' and - 'idmap gid' - - * sambaIdmapEntry - object storing a mapping between a - SID and a UNIX uid/gid. These objects are created by the - idmap_ldap module as needed. - - * sambaSidEntry - object representing a SID alone, as a Structural - class on which to build the sambaIdmapEntry. - - -New Suffix for Searching ------------------------- - -The following new smb.conf parameters have been added to aid in directing -certain LDAP queries when 'passdb backend = ldapsam://...' has been -specified. - - * ldap suffix - used to search for user and computer accounts - * ldap user suffix - used to store user accounts - * ldap machine suffix - used to store machine trust accounts - * ldap group suffix - location of posixGroup/sambaGroupMapping entries - * ldap idmap suffix - location of sambaIdmapEntry objects - -If an 'ldap suffix' is defined, it will be appended to all of the -remaining sub-suffix parameters. In this case, the order of the suffix -listings in smb.conf is important. Always place the 'ldap suffix' first -in the list. - -Due to a limitation in Samba's smb.conf parsing, you should not surround -the DN's with quotation marks. -</pre><p> - </p></div></div><div class="sect1" title="Updating a Samba-3 Installation"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id368184"></a>Updating a Samba-3 Installation</h2></div></div></div><p> -The key concern in this section is to deal with the changes that have been -affected in Samba-3 between the Samba-3.0.0 release and the current update. -Network administrators have expressed concerns over the steps that should be -taken to update Samba-3 versions. -</p><p> -<a class="indexterm" name="id368197"></a> -The information in <a class="link" href="upgrades.html#sbeug1" title="Location of config files">“Location of config files”</a> would not be necessary if every -person who has ever produced Samba executable (binary) files could agree on -the preferred location of the <code class="filename">smb.conf</code> file and other Samba control files. -Clearly, such agreement is further away than a pipedream. -</p><p> -<a class="indexterm" name="id368220"></a> -Vendors and packagers who produce Samba binary installable packages do not, -as a rule, use the default paths used by the Samba-Team for the location of -the binary files, the <code class="filename">smb.conf</code> file, and the Samba control files (tdb's -as well as files such as <code class="filename">secrets.tdb</code>). This means that -the network or UNIX administrator who sets out to build the Samba executable -files from the Samba tarball must take particular care. Failure to take care -will result in both the original vendor's version of Samba remaining installed -and the new version being installed in the default location used -by the Samba-Team. This can lead to confusion and to much lost time as the -uninformed administrator deals with apparent failure of the update to take -effect. -</p><p> -<a class="indexterm" name="id368248"></a> -The best advice for those lacking in code compilation experience is to use -only vendor (or Samba-Team) provided binary packages. The Samba packages -that are provided by the Samba-Team are generally built to use file paths -that are compatible with the original OS vendor's practices. -</p><p> -<a class="indexterm" name="id368261"></a> -<a class="indexterm" name="id368268"></a> -If you are not sure whether a binary package complies with the OS -vendor's practices, it is better to ask the package maintainer via -email than to waste much time dealing with the nuances. -Alternately, just diagnose the paths specified by the binary files following -the procedure outlined above. -</p><div class="sect2" title="Samba-3 to Samba-3 Updates on the Same Server"><div class="titlepage"><div><div><h3 class="title"><a name="id368281"></a>Samba-3 to Samba-3 Updates on the Same Server</h3></div></div></div><p> - The guidance in this section deals with updates to an existing - Samba-3 server installation. - </p><div class="sect3" title="Updating from Samba Versions Earlier than 3.0.5"><div class="titlepage"><div><div><h4 class="title"><a name="id368291"></a>Updating from Samba Versions Earlier than 3.0.5</h4></div></div></div><p> - With the provision that the binary Samba-3 package has been built - with the same path and feature settings as the existing Samba-3 - package that is being updated, an update of Samba-3 versions 3.0.0 - through 3.0.4 can be updated to 3.0.5 without loss of functionality - and without need to change either the <code class="filename">smb.conf</code> file or, where - used, the LDAP schema. - </p></div><div class="sect3" title="Updating from Samba Versions between 3.0.6 and 3.0.10"><div class="titlepage"><div><div><h4 class="title"><a name="id368310"></a>Updating from Samba Versions between 3.0.6 and 3.0.10</h4></div></div></div><p> - <a class="indexterm" name="id368318"></a> - <a class="indexterm" name="id368324"></a> - When updating versions of Samba-3 prior to 3.0.6 to 3.0.6 through 3.0.10, - it is necessary only to update the LDAP schema (where LDAP is used). - Always use the LDAP schema file that is shipped with the latest Samba-3 - update. - </p><p> - <a class="indexterm" name="id368339"></a> - <a class="indexterm" name="id368346"></a> - <a class="indexterm" name="id368352"></a> - Samba-3.0.6 introduced the ability to remember the last <span class="emphasis"><em>n</em></span> number - of passwords a user has used. This information will work only with - the <code class="constant">tdbsam</code> and <code class="constant">ldapsam</code> - <em class="parameter"><code>passdb backend</code></em> facilities. - </p><p> - After updating the LDAP schema, do not forget to re-index the LDAP database. - </p></div><div class="sect3" title="Updating from Samba Versions after 3.0.6 to a Current Release"><div class="titlepage"><div><div><h4 class="title"><a name="id368384"></a>Updating from Samba Versions after 3.0.6 to a Current Release</h4></div></div></div><p> - <a class="indexterm" name="id368392"></a> - Samba-3.0.8 introduced changes in how the <em class="parameter"><code>username map</code></em> - behaves. It also included a change in behavior of <code class="literal">winbindd</code>. - Please refer to the man page for <code class="filename">smb.conf</code> before implementing any update - from versions prior to 3.0.8 to a current version. - </p><p> - <a class="indexterm" name="id368421"></a> - In Samba-3.0.11 a new privileges interface was implemented. Please - refer to <a class="link" href="happy.html#sbehap-ppc" title="Addition of Machines to the Domain">“Addition of Machines to the Domain”</a> for information regarding this new - feature. It is not necessary to implement the privileges interface, but it - is one that has been requested for several years and thus may be of interest - at your site. - </p><p> - In Samba-3.0.11 there were some functional changes to the <em class="parameter"><code>ldap user - suffix</code></em> and to the <em class="parameter"><code>ldap machine suffix</code></em> behaviors. - The following information has been extracted from the WHATSNEW.txt file from this - release: -</p><pre class="screen"> -============ -LDAP Changes -============ - -If "ldap user suffix" or "ldap machine suffix" are defined in -smb.conf, all user-accounts must reside below the user suffix, -and all machine and inter-domain trust-accounts must be located -below the machine suffix. Previous Samba releases would fall -back to searching the 'ldap suffix' in some cases. -</pre><p> - </p></div></div><div class="sect2" title="Migrating Samba-3 to a New Server"><div class="titlepage"><div><div><h3 class="title"><a name="id368465"></a>Migrating Samba-3 to a New Server</h3></div></div></div><p> - The two most likely candidates for replacement of a server are - domain member servers and domain controllers. Each needs to be - handled slightly differently. - </p><div class="sect3" title="Replacing a Domain Member Server"><div class="titlepage"><div><div><h4 class="title"><a name="id368475"></a>Replacing a Domain Member Server</h4></div></div></div><p> - <a class="indexterm" name="id368483"></a> - Replacement of a domain member server should be done - using the same procedure as outlined in <a class="link" href="unixclients.html" title="Chapter 7. Adding Domain Member Servers and Clients">“Adding Domain Member Servers and Clients”</a>. - </p><p> - Usually the new server will be introduced with a temporary name. After - the old server data has been migrated to the new server, it is customary - that the new server be renamed to that of the old server. This will - change its SID and will necessitate rejoining to the domain. - </p><p> - <a class="indexterm" name="id368506"></a> - <a class="indexterm" name="id368512"></a> - <a class="indexterm" name="id368519"></a> - <a class="indexterm" name="id368526"></a> - <a class="indexterm" name="id368532"></a> - <a class="indexterm" name="id368539"></a> - Following a change of hostname (NetBIOS name) it is a good idea on all servers - to shut down the Samba <code class="literal">smbd</code>, <code class="literal">nmbd</code>, and - <code class="literal">winbindd</code> services, delete the <code class="filename">wins.dat</code> - and <code class="filename">browse.dat</code> files, then restart Samba. This will ensure - that the old name and IP address information is no longer able to interfere with - name to IP address resolution. If this is not done, there can be temporary name - resolution problems. These problems usually clear within 45 minutes of a name - change, but can persist for a longer period of time. - </p><p> - <a class="indexterm" name="id368583"></a> - <a class="indexterm" name="id368589"></a> - <a class="indexterm" name="id368596"></a> - <a class="indexterm" name="id368603"></a> - If the old domain member server had local accounts, it is necessary to create - on the new domain member server the same accounts with the same UID and GID - for each account. Where the <em class="parameter"><code>passdb backend</code></em> database - is stored in the <code class="constant">smbpasswd</code> or in the - <code class="constant">tdbsam</code> format, the user and group account information - for UNIX accounts that match the Samba accounts will reside in the system - <code class="filename">/etc/passwd</code>, <code class="filename">/etc/shadow</code>, and - <code class="filename">/etc/group</code> files. In this case, be sure to copy these - account entries to the new target server. - </p><p> - <a class="indexterm" name="id368648"></a> - Where the user accounts for both UNIX and Samba are stored in LDAP, the new - target server must be configured to use the <code class="literal">nss_ldap</code> tool set. - This will automatically ensure that the appropriate user entities are - available on the new server. - </p></div><div class="sect3" title="Replacing a Domain Controller"><div class="titlepage"><div><div><h4 class="title"><a name="id368664"></a>Replacing a Domain Controller</h4></div></div></div><p> - <a class="indexterm" name="id368672"></a> - In the past, people who replaced a Windows NT4 domain controller typically - installed a new server, created printers and file shares on it, then migrate across - all data that was destined to reside on it. The same can of course be done with - Samba. - </p><p> - From recent mailing list postings it would seem that some administrators - have the intent to just replace the old Samba server with a new one with - the same name as the old one. In this case, simply follow the same process - as for upgrading a Samba 2.x system and do the following: - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - Where UNIX (POSIX) user and group accounts are stored in the system - <code class="filename">/etc/passwd</code>, <code class="filename">/etc/shadow</code>, and - <code class="filename">/etc/group</code> files, be sure to add the same accounts - with identical UID and GID values for each user. - </p><p> - Where LDAP is used, if the new system is intended to be the LDAP server, - migrate it across by configuring the LDAP server - (<code class="filename">/etc/openldap/slapd.conf</code>). The directory can - be populated either initially by setting this LDAP server up as a slave or - by dumping the data from the old LDAP server using the <code class="literal">slapcat</code> - command and then reloading the same data into the new LDAP server using the - <code class="literal">slapadd</code> command. Do not forget to install and configure - the <code class="literal">nss_ldap</code> tool and the <code class="filename">/etc/nsswitch.conf</code> - (as shown in <a class="link" href="happy.html" title="Chapter 5. Making Happy Users">“Making Happy Users”</a>). - </p></li><li class="listitem"><p> - Copy the <code class="filename">smb.conf</code> file from the old server to the new server into the correct - location as indicated previously in this chapter. - </p></li><li class="listitem"><p> - Copy the <code class="filename">secrets.tdb</code> file, the <code class="filename">smbpasswd</code> - file (if it is used), the <code class="filename">/etc/samba/passdb.tdb</code> file (only - used by the <code class="constant">tdbsam</code> backend), and all the tdb control files - from the old system to the correct location on the new system. - </p></li><li class="listitem"><p> - Before starting the Samba daemons, verify that the hostname of the new server - is identical to that of the old one. Note: The IP address can be different - from that of the old server. - </p></li><li class="listitem"><p> - Copy all files from the old server to the new server, taking precaution to - preserve all file ownership and permissions as well as any POSIX ACLs that - may have been created on the old server. - </p></li></ul></div><p> - When replacing a Samba domain controller (PDC or BDC) that uses LDAP, the new server - need simply be configured to use the LDAP directory, and for the rest it should just - work. The domain SID is obtained from the LDAP directory as part of the first connect - to the LDAP directory server. - </p><p> - All Samba servers, other than one that uses LDAP, depend on the tdb files, and - particularly on the <code class="filename">secrets.tdb</code> file. So long as the tdb files are - all in place, the <code class="filename">smb.conf</code> file is preserved, and either the hostname is identical - or the <em class="parameter"><code>netbios name</code></em> is set to the original server name, Samba - should correctly pick up the original SID and preserve all other settings. It is - sound advice to validate this before turning the system over to users. - </p></div></div><div class="sect2" title="Migration of Samba Accounts to Active Directory"><div class="titlepage"><div><div><h3 class="title"><a name="id368842"></a>Migration of Samba Accounts to Active Directory</h3></div></div></div><p> - Yes, it works. The Windows ADMT tool can be used to migrate Samba accounts - to MS Active Directory. There are a few pitfalls to be aware of: - </p><div class="procedure" title="Procedure 8.2. Migration to Active Directory"><a name="id368853"></a><p class="title"><b>Procedure 8.2. Migration to Active Directory</b></p><ol class="procedure" type="1"><li class="step" title="Step 1"><p> - Administrator password must be THE SAME on the Samba server, - the 2003 ADS, and the local Administrator account on the workstations. - Perhaps this goes without saying, but there needs to be an account - called <code class="constant">Administrator</code> in your Samba domain, with - full administrative (root) rights to that domain. - </p></li><li class="step" title="Step 2"><p> - In the Advanced/DNS section of the TCP/IP settings on your Windows - workstations, make sure the <em class="parameter"><code>DNS suffix for this - connection</code></em> field is blank. - </p></li><li class="step" title="Step 3"><p> - Because you are migrating from Samba, user passwords cannot be - migrated. You'll have to reset everyone's passwords. (If you were - migrating from NT4 to ADS, you could migrate passwords as well.) - </p><p> - To date this has not been attempted with roaming profile support; - it has been documented as working with local profiles. - </p></li><li class="step" title="Step 4"><p> - Disable the Windows Firewall on all workstations. Otherwise, - workstations won't be migrated to the new domain. - </p></li><li class="step" title="Step 5"><p> - <a class="indexterm" name="id368911"></a> - When migrating machines, always test first (using ADMT's test mode) - and satisfy all errors before committing the migration. Note that the - test will always fail, because the machine will not have been actually - migrated. You'll need to interpret the errors to know whether the - failure was due to a problem or simply to the fact that it was just - a test. - </p></li></ol></div><p> - <a class="indexterm" name="id368925"></a> - There are some significant benefits of using the ADMT, besides just - migrating user accounts. ADMT can be found on the Windows 2003 CD. - </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> - You can migrate workstations remotely. You can specify that SIDs - be simply added instead of replaced, giving you the option of joining a - workstation back to the old domain if something goes awry. The - workstations will be joined to the new domain. - </p></li><li class="listitem"><p> - Not only are user accounts migrated from the old domain to the new - domain, but ACLs on the workstations are migrated as well. Like SIDs, - ACLs can be added instead of replaced. - </p></li><li class="listitem"><p> - Locally stored user profiles on workstations are migrated as well, - presenting almost no disruption to the user. Saved passwords will be - lost, just as when you administratively reset the password in Windows ADS. - </p></li><li class="listitem"><p> - The ADMT lets you test all operations before actually performing the - migration. Accounts and workstations can be migrated individually or in - batches. User accounts can be safely migrated all at once (since no - changes are made on the original domain). It is recommended to migrate only one - or two workstations as a test before committing them all. - </p></li></ul></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="unixclients.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="DMSMig.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ntmigration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 7. Adding Domain Member Servers and Clients </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 9. Migrating NT4 Domain to Samba-3</td></tr></table></div></body></html> |
