建立samba共享,共享目录为/data,要求:(描述完整的过程)

1)共享名为shared,工作组为changecan

2)添加组develop,添加用户gentoo,centosubuntu,其中gentoocentosdevelop为附加组,ubuntu不属于develop组;密码均为用户名;

3)添加samba用户gentoo,centosubuntu,密码均为“change”

4)samba共享shared仅允许develop组具有写权限,其他用户只能以只读方式访问;

5)samba共享服务仅允许来自于192.168.190.0/24网络的主机访问;

 

(1)使用yum下载samba

[root@localhost ~]# setenforce 0 # 设置SELinux

[root@localhost ~]# getenforce

Permissive

[root@localhost ~]# service iptablesstop # 直接关闭防火墙了

[root@localhost ~]# yum install samba-y

2)添加组develop,添加用户gentoo,centosubuntu,其中gentoocentosdevelop为附加组,ubuntu不属于develop组;密码均为用户名;

[root@localhost ~]# groupadd develop
[root@localhost ~]# useradd -s/sbin/nologin -G develop gentoo

[root@localhost ~]# useradd -s/sbin/nologin -G develop centos

[root@localhost ~]# useradd -s/sbin/nologin ubuntu

[root@localhost ~]# echo"gentoo" | passwd --stdin gentoo

[root@localhost ~]# echo"centos" | passwd --stdin centos

[root@localhost ~]# echo"ubuntu" | passwd --stdin ubuntu

3)添加samba用户gentoo,centosubuntu,密码均为“change”

[root@localhost ~]# smbpasswd -a gentoo

New SMB password: #输入密码change

Retype new SMB password:

Added user gentoo.

[root@localhost ~]# smbpasswd -a centos

[root@localhost ~]# smbpasswd -a ubuntu

#注意:使用smbpasswd添加samba用户的前提是用户在系统上必须存在!!!

[root@localhost ~]# smbpasswd -a change

New SMB password:

Retype new SMB password:

Failed to add entry for user change. # 因为此用户在系统上不存在,所以添加失败

[root@localhost ~]# pdbedit -L # 查询目前已存在的Samba账号,会列出账号和UID

gentoo:500:

ubuntu:502:

centos:501:

4)samba共享shared仅允许develop组具有写权限,其他用户只能以只读方式访问;

[root@localhost ~]# mkdir /data

[root@localhost ~]# ll -d /data

drwxr-xr-x. 2 root root 4096 Oct 2011:01 /data

[root@localhost ~]# chmod g+w /data/&& chown :develop /data/

[root@localhost ~]# ll -d /data

drwxrwxr-x. 2 root develop 4096 Oct 2011:01 /data

[root@localhost ~]# cp/etc/samba/smb.conf{,.bak}

[root@localhost ~]# vim/etc/samba/smb.conf # 修改配置文件

#================== Global Settings=====================

[global] # 全局配置

workgroup = changecan # 工作组为changecan

hosts allow = 192.168.190.0/24 # 仅允许来自于192.168.190.0/24网络的主机访问

# ----------------------- StandaloneServer Options ------------------------ security = user # 用户工作模式

passdb backend = tdbsam

#================= Share Definitions=====================

[shared] # 共享名为shared,共享设置

comment = Shared test~~~ # 注释信息

path = /data # 共享目录为/data

valid users =gentoo,centos,ubuntu,@develop

read list = ubuntu #可读

write list = @develop # 指明可写用户列表

writeable = yes #可写

printable = no #可打印

[root@localhost ~]# testparm # 测试配置文件是否有语法错误,以及显示最终生效配置

[root@localhost ~]# service smb start

Starting SMB services: [ OK ]

[root@localhost ~]# service nmb start

Starting NMB services: [ OK ]

[root@localhost ~]# netstat -tunl

# 可查看到137/udp,138/udp,139/tcp,445/tcp四个端口都是打开的

(5) 测试samba服务是否正常

[root@localhost ~]# smbclient//192.168.190.138/shared -U gentoo

Enter gentoo's password: #输入密码:change

Domain=[MYGROUP] OS=[Unix]Server=[Samba 3.6.23-36.el6_8]

smb: \> mkdir gentoo # gentoo具有读写权限

smb: \> ls

. D 0 Thu Oct 20 11:28:08 2016

.. DR 0 Thu Oct 20 11:01:39 2016

gentoo D 0 Thu Oct 20 11:28:08 2016

 

35162 blocks of size 524288. 25498blocks available

smb: \> exit

[root@localhost ~]# smbclient//192.168.190.138/shared -U centos

Enter centos's password: #输入密码:change

Domain=[MYGROUP]

OS=[Unix]

Server=[Samba 3.6.23-36.el6_8]

smb: \> mkdir centos # ubuntu具有读写权限

smb: \> ls

. D 0 Thu Oct 20 11:28:35 2016

.. DR 0 Thu Oct 20 11:01:39 2016

centos D 0 Thu Oct 20 11:28:35 2016

gentoo D 0 Thu Oct 20 11:28:08 2016

 

35162 blocks of size 524288. 25498blocks available

smb: \> exit

[root@localhost ~]# smbclient//192.168.190.138/shared -U ubuntu

Enter ubuntu's password: #输入密码:change

Domain=[MYGROUP] OS=[Unix]Server=[Samba 3.6.23-36.el6_8]

smb: \> mkdir ubuntu #可以看到ubuntu用户只有读权限

NT_STATUS_MEDIA_WRITE_PROTECTED makingremote directory \ubuntu

smb: \> ls

. D 0 Thu Oct 20 11:28:35 2016

.. DR 0 Thu Oct 20 11:01:39 2016

centos D 0 Thu Oct 20 11:28:35 2016

gentoo D 0 Thu Oct 20 11:28:08 2016

 

35162 blocks of size 524288. 25498blocks available

smb: \> exit

windows上面直接输入\\192.168.190.138\shared登录用户名+密码change便可直接访问linux上面的共享目录了~~~

实现Linux与Windows文件共享---Samba服务-LMLPHP

 

02-02 09:03