一、要求：
1、公司有两个部门，美术部和运营部。
2、有三个文件夹分别是meishu、yunying和public
3、public包括meishu和yunying
4、美术部对meishu和public/meishu可读可写，对yunying文件夹没有权限打开，对public/yunying可读；
5、运营部对yunying和public/yunying可读可写，对meishu文件夹没有权限打开，对public/meishu可读；
二、开启防火墙samba相应端口或者直接关闭防火墙，这里直接关闭。
#/etc/init.d/iptables stop
在/etc/selinux下的config里面设置SELINUX=disabled
三、安装samba
1、#yum -y install samba samba-client samba-swat
有依赖关系的包samba-common、samba-winbind-clients、libsmbclient将自动安装上去。
启动samba：
#/etc/init.d/smb start
#/etc/init.d/nmb start
2、设置开机启动
#chkconfig --add smb
#chkconfig --add nmb
#chkconfig smb on
#chkconfig nmb on
四、配置samba
配置文件是/etc/samba/smb.conf
1、新建相关用户和用户组
#useradd -s /sbin/nologin msadmin
#useradd -g msadmin -s /sbin/nologin maomao
#useradd -s /sbin/nologin yyadmin
#useradd -g yyadmin -s /sbin/nologin zyq
#useradd -s /sbin/nologin admin
2、设置用户密码
#smbpasswd -a msadmin (其他类似)
3、建立相应文件夹
#mkdir -p /home/{meishu,yunying,public}
#mkdir -p /home/public/{meishu,yunying}
4、设置文件夹权限
#cd /home
#chown msadmin.msadmin meishu
#chown yyadmin.yyadmin yunying
#chown admin.admin public
#cd /home/public
#chown msadmin.msadmin meishu && chown yyadmin.yyadmin yunying
#chmod 1775 meishu yunying （这步很重要，要实现各部门人员对其有可写权限）
5、smb.conf配置如下：
#======================= Global Settings =====================================
[global]
# ----------------------- Network Related Options -------------------------
#
# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
#
# server string is the equivalent of the NT Description field
#
# netbios name can be used to specify a server name not tied to the hostname
workgroup = WORKGROUP
server string = shyy Samba Server Version %v
netbios name = ShyySamba
# --------------------------- Logging Options -----------------------------
#
# Log File let you specify where to put logs and how to split them up.
log file = /var/log/samba/log.%m
max log size = 50
# ----------------------- Standalone Server Options ------------------------
#
# Scurity can be set to user, share(deprecated) or server(deprecated)
security = user
passdb backend = tdbsam
#============================ Share Definitions ==============================
[meishu]
comment = This is a directory of meishu.
path = /home/meishu
public = no
admin users = msadmin
valid users = @msadmin
# writable = yes
write list = @msadmin
create mask = 0750
directory mask = 0750
[yunying]
comment = This is a directory of yunyhing.
path = /home/yunying
public = no
admin users = yyadmin
valid users = @yyadmin
# writable = yes
write list = @yyadmin
create mask = 0750
directory mask = 0750
[renshi]
comment = This is a directory of renshi.
path = /shyygame/renshi
public = no
admin users = hradmin
valid users = @hradmin
# writable = yes
write list = @hradmin
create mask = 0750
directory mask = 0750
[public]
comment = This is a share directory.
path = /home/public
public = no
valid users = admin,@hradmin,@msadmin,@yyadmin
write list = @msadmin,@yyadmin,@hradmin
# writable = yes
create mask = 0750
directory mask = 0750
测试配置命令：#testparm
五、登录
1、linux客户端连接共享服务器
#smbclient //ip/public
2、windows客户端连接共享服务器
在地址栏中输入 \\ip或者在网上邻居中找到共享的机器双击，之后要求输入账密。
