samba-创新互联

####samba#########

1samba作用

提供cifs协议实现共享文件

2安装

yum install samba samba-common samba-client -y

systemctl start smb nmb

systemctl enable smb nmb

systemctl stop firewalld.service

3添加smb用户

smb用户必须是本地用户

smbpasswd -a student

New SMB password:                   #输入smb当前用户密码

Retype new SMB password:#确认密码

Added user student.

pdbedit -L#查看smb用户信息

student:1000:Student User

pdbedit -x student#删除smb用户

setsebool -P samba_enable_home_dirs on  ##在selinux中设定smb用户可以访问自己的家目录

4共享目录的基本设定

117

mkdir /smbshare

touch /smbshare/123

vim /etc/samba/smb.conf

321         [westos]      ##共享名称

322         comment = local directory   ##对共享目录的描述

323         path = /smbshare     ##共享目录的绝对路径

当共享目录为用户自建目录时

semanage fcontext -a -t samba_share_t '/smbshare(/.*)?'

restorecon -Rvvf /smbshare/

systemctl restart smb.service

测试

17

[root@dns-server 桌面]# smbclient //172.25.254.117/westos -U student

Enter student's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

  .                                   D        0  Sat Jun  3 14:39:20 2017

  ..                                  D        0  Sat Jun  3 14:39:12 2017

  123                                 N        0  Sat Jun  3 14:39:20 2017

10473900 blocks of size 1024. 7316272 blocks available

smb: \> SMBecho failed (NT_STATUS_CONNECTION_DISCONNECTED). The connection is disconnected now

当共享目录为系统建立目录

setsebool -P samba_export_all_ro on#只读共享

setsebool -P samba_export_all_rw on#读写共享

systemctl restart smb.service

测试

17

[root@dns-server 桌面]# smbclient //172.25.254.117/westos -U student

Enter student's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

  .                                   D        0  Sat Jun  3 13:54:54 2017

  ..                                  D        0  Sat Jun  3 14:39:12 2017

  fstab                               N      313  Wed May  7 09:22:57 2014

  crypttab                            N        0  Wed May  7 09:22:57 2014

  mtab                                R        0  Sat Jun  3 14:47:19 2017

  pki                                 D        0  Wed May  7 09:27:13 2014

  rpm                                 D        0  Fri Jul 11 06:36:36 2014

  yum                                 D        0  Wed May  7 09:24:49 2014

  issue                               N       23  Tue Apr  1 21:28:10 2014

  binfmt.d                            D        0  Wed Apr  2 21:30:23 2014

  issue.net                           N       22  Tue Apr  1 21:28:10 2014

  modules-load.d                      D        0  Wed Apr  2 21:30:23 2014

  os-release                          N      493  Tue Apr  1 21:28:10 2014

  fonts                               D        0  Fri Jul 11 06:22:37 2014

  redhat-release                      N       52  Tue Apr  1 21:28:10 2014

  DIR_COLORS.256color                 N     5725  Sat Jan 25 03:23:50 2014

    。。。。。。。

5samba的配置参数

#匿名用户访问

vim /etc/samba/smb.conf

125         map to guest = bad user

324guest ok = yes

测试

17

[root@dns-server 桌面]# smbclient //172.25.254.117/westos

Enter kiosk's password:      ###无密码

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

  .                                   D        0  Sat Jun  3 14:39:20 2017

  ..                                  D        0  Sat Jun  3 14:39:12 2017

  123                                 N        0  Sat Jun  3 14:39:20 2017

10473900 blocks of size 1024. 7305320 blocks available

#访问控制

hosts allow =  ##仅允许

hosts deny =  ##仅拒绝

valid users = #当前共享的有效用户

valid users = westos#当前共享的有效用户为westos

valid users = @westos#当前共享的有效用户为westos组

valid users = +westos#当前共享的有效用户为westos组

测试

117

vim /etc/samba/smb.conf

325         hosts allow = 172.25.254.17

17

[root@dns-server 桌面]# smbclient //172.25.254.117/westos

Enter kiosk's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

  .                                   D        0  Sat Jun  3 14:39:20 2017

  ..                                  D        0  Sat Jun  3 14:39:12 2017

  123                                 N        0  Sat Jun  3 14:39:20 2017

10473900 blocks of size 1024. 7305276 blocks available

217

[root@localhost ~]# smbclient //172.25.254.117/westos

Enter root's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

tree connect failed: NT_STATUS_ACCESS_DENIED

测试

117

vim /etc/samba/smb.conf

324         valid users = westos

17

[root@dns-server 桌面]# useradd westos -s /sbin/nologin

[root@dns-server 桌面]# smbpasswd -a westos

New SMB password:

Retype new SMB password:

Added user westos.

[root@dns-server 桌面]# smbclient //172.25.254.117/westos -U westos

Enter westos's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \>

##读写控制

所有用户均可写

chmod o+w /smbshare   ##修改共享目录权限

setsebool -P samba_export_all_rw on

vim /etc/samba/smb.conf

324         writable = yes

systemctl restart smb.service

测试

17

[root@dns-server 桌面]# mount -o username=westos,password=redhat //172.25.254.117/westos /mnt/

[root@dns-server 桌面]# cd /mnt/

[root@dns-server mnt]# ls

123

[root@dns-server mnt]# touch file3

[root@dns-server mnt]# ls

123  file3

设定指定用户可写

write list = student    #可写用户

write list = +student#可写用户组

write list = @stident

admin users = westos#共享的超级用户指定

测试

117

vim /etc/samba/smb.conf

324         writable = no

325         write list = student

217

smbpasswd -a student

useradd westos

usermod -G westos student

mount -o username=student,password=123 //172.25.254.117/westos /mnt/

[root@localhost mnt]# ls

123  1234fref  file3

[root@localhost mnt]# touch file5

[root@localhost mnt]# ls

123  1234fref  file3  file5

测试

117

vim /etc/samba/smb.conf

324         writable = yes

325         admin users = westos

217

[root@localhost ~]# mount -o username=westos,password=redhat //172.25.254.117/westos /mnt/

[root@localhost ~]# cd /mnt/

[root@localhost mnt]# ls

123  1234fref  file3  file5

[root@localhost mnt]# touch file6

[root@localhost mnt]# ls -l file6

-rw-r--r--. 1 root westos 0 6月   3 04:36 file6

6smb多用户挂载

在client(客户端)上

vim /root/haha

username=student

password=123     ##密码为smb密码

chmod 600 /root/haha

yum install cifs-utils.x86_64  -y

mount -o credentials=/root/haha,multiuser,sec=ntlmssp //172.25.254.117/westos /mnt/

#credentials=/root/haha  指定挂载时所用到的用户文件

#multiuser        支持多用户认证

#sec=ntlmssp认证方式为标准smb认证方式

[root@localhost ~]# su - westos

[westos@localhost ~]$ ls /mnt

ls: cannot access /mnt: Permission denied   #因为没有作smb的认证所以无法访问smb的共享

[westos@localhost ~]$ cifscreds add -u westos 172.25.254.117

Password: ##smb用户westos的密码

[westos@localhost ~]$ ls /mnt

123  1234fref  file3  file5  file6

[westos@localhost ~]$

另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。