samba

发布时间：2020-04-09 17:56:04 作者：漂浮的天堂
来源：网络阅读：528

####samba#########

1samba作用

提供cifs协议实现共享文件

2安装

yum install samba samba-common samba-client -y

systemctl start smb nmb

systemctl enable smb nmb

systemctl stop firewalld.service

3添加smb用户

smb用户必须是本地用户

smbpasswd -a student

New SMB password: #输入smb当前用户密码

Retype new SMB password:#确认密码

Added user student.

pdbedit -L#查看smb用户信息

student:1000:Student User

pdbedit -x student#删除smb用户

setsebool -P samba_enable_home_dirs on ##在selinux中设定smb用户可以访问自己的家目录

4共享目录的基本设定

117

mkdir /smbshare

touch /smbshare/123

vim /etc/samba/smb.conf

321 [westos] ##共享名称

322 comment = local directory ##对共享目录的描述

323 path = /smbshare ##共享目录的绝对路径

semanage fcontext -a -t samba_share_t '/smbshare(/.*)?'

restorecon -Rvvf /smbshare/

systemctl restart smb.service

测试

[root@dns-server 桌面]# smbclient //172.25.254.117/westos -U student

Enter student's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

. D 0 Sat Jun 3 14:39:20 2017

.. D 0 Sat Jun 3 14:39:12 2017

123 N 0 Sat Jun 3 14:39:20 2017

10473900 blocks of size 1024. 7316272 blocks available

smb: \> SMBecho failed (NT_STATUS_CONNECTION_DISCONNECTED). The connection is disconnected now

setsebool -P samba_export_all_ro on#只读共享

setsebool -P samba_export_all_rw on#读写共享

systemctl restart smb.service

测试

[root@dns-server 桌面]# smbclient //172.25.254.117/westos -U student

Enter student's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

. D 0 Sat Jun 3 13:54:54 2017

.. D 0 Sat Jun 3 14:39:12 2017

fstab N 313 Wed May 7 09:22:57 2014

crypttab N 0 Wed May 7 09:22:57 2014

mtab R 0 Sat Jun 3 14:47:19 2017

pki D 0 Wed May 7 09:27:13 2014

rpm D 0 Fri Jul 11 06:36:36 2014

yum D 0 Wed May 7 09:24:49 2014

issue N 23 Tue Apr 1 21:28:10 2014

binfmt.d D 0 Wed Apr 2 21:30:23 2014

issue.net N 22 Tue Apr 1 21:28:10 2014

modules-load.d D 0 Wed Apr 2 21:30:23 2014

os-release N 493 Tue Apr 1 21:28:10 2014

fonts D 0 Fri Jul 11 06:22:37 2014

redhat-release N 52 Tue Apr 1 21:28:10 2014

DIR_COLORS.256color N 5725 Sat Jan 25 03:23:50 2014

。。。。。。。

5samba的配置参数

#匿名用户访问

vim /etc/samba/smb.conf

125 map to guest = bad user

324guest ok = yes

测试

[root@dns-server 桌面]# smbclient //172.25.254.117/westos

Enter kiosk's password: ###无密码

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

. D 0 Sat Jun 3 14:39:20 2017

.. D 0 Sat Jun 3 14:39:12 2017

123 N 0 Sat Jun 3 14:39:20 2017

10473900 blocks of size 1024. 7305320 blocks available

#访问控制

hosts allow = ##仅允许

hosts deny = ##仅拒绝

valid users = #当前共享的有效用户

valid users = westos#当前共享的有效用户为westos

valid users = @westos#当前共享的有效用户为westos组

valid users = +westos#当前共享的有效用户为westos组

测试

117

vim /etc/samba/smb.conf

325 hosts allow = 172.25.254.17

[root@dns-server 桌面]# smbclient //172.25.254.117/westos

Enter kiosk's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \> ls

. D 0 Sat Jun 3 14:39:20 2017

.. D 0 Sat Jun 3 14:39:12 2017

123 N 0 Sat Jun 3 14:39:20 2017

10473900 blocks of size 1024. 7305276 blocks available

217

[root@localhost ~]# smbclient //172.25.254.117/westos

Enter root's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

tree connect failed: NT_STATUS_ACCESS_DENIED

测试

117

vim /etc/samba/smb.conf

324 valid users = westos

[root@dns-server 桌面]# useradd westos -s /sbin/nologin

[root@dns-server 桌面]# smbpasswd -a westos

New SMB password:

Retype new SMB password:

Added user westos.

[root@dns-server 桌面]# smbclient //172.25.254.117/westos -U westos

Enter westos's password:

Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]

smb: \>

##读写控制

所有用户均可写

chmod o+w /smbshare ##修改共享目录权限

setsebool -P samba_export_all_rw on

vim /etc/samba/smb.conf

324 writable = yes

systemctl restart smb.service

测试

[root@dns-server 桌面]# mount -o username=westos,password=redhat //172.25.254.117/westos /mnt/

[root@dns-server 桌面]# cd /mnt/

[root@dns-server mnt]# ls

123

[root@dns-server mnt]# touch file3

[root@dns-server mnt]# ls

123 file3

设定指定用户可写

write list = student #可写用户

write list = +student#可写用户组

write list = @stident

admin users = westos#共享的超级用户指定

测试

117

vim /etc/samba/smb.conf

324 writable = no

325 write list = student

217

smbpasswd -a student

useradd westos

usermod -G westos student

mount -o username=student,password=123 //172.25.254.117/westos /mnt/

[root@localhost mnt]# ls

123 1234fref file3

[root@localhost mnt]# touch file5

[root@localhost mnt]# ls

123 1234fref file3 file5

测试

117

vim /etc/samba/smb.conf

324 writable = yes

325 admin users = westos

217

[root@localhost ~]# mount -o username=westos,password=redhat //172.25.254.117/westos /mnt/

[root@localhost ~]# cd /mnt/

[root@localhost mnt]# ls

123 1234fref file3 file5

[root@localhost mnt]# touch file6

[root@localhost mnt]# ls -l file6

-rw-r--r--. 1 root westos 0 6月 3 04:36 file6

6smb多用户挂载

在client(客户端)上

vim /root/haha

username=student

password=123 ##密码为smb密码

chmod 600 /root/haha

yum install cifs-utils.x86_64 -y

mount -o credentials=/root/haha,multiuser,sec=ntlmssp //172.25.254.117/westos /mnt/

#credentials=/root/haha 指定挂载时所用到的用户文件

#multiuser 支持多用户认证

#sec=ntlmssp认证方式为标准smb认证方式

[root@localhost ~]# su - westos

[westos@localhost ~]$ ls /mnt

ls: cannot access /mnt: Permission denied #因为没有作smb的认证所以无法访问smb的共享

[westos@localhost ~]$ cifscreds add -u westos 172.25.254.117

Password: ##smb用户westos的密码

[westos@localhost ~]$ ls /mnt

123 1234fref file3 file5 file6

[westos@localhost ~]$

samba

相关阅读