SAMBA 服务器配置过程
以前在做实验的过程中总结和写的一些教程的一些资料，一直没时间发布到博客上面，五一到了，终于有点时间发布啦！关于Linux上面还会有RHCE系列的学习笔记发表
Samba 服务的安装包：
[root@cisco RPMS]# rpm -qa|grep samba
samba-3.0.10-1.4E
samba-common-3.0.10-1.4E
samba-client-3.0.10-1.4E
samba 的配置文件：/etc/samba/smb.conf
samba 的守护进程：smb nmb
下面用一个具体实例来说明 samba 的配置过程：
要求：1、公司所有的员工都能够在公司内流动办公，但不管在那台电脑上工作，都要把自
己的文件数据保存在 samba 文件服务器上；
2、市场部和技术部都要有各自的目录，同一个部门的人共同拥有一个共享目录，其
他部门的人都只能访问在服务器上自己的个人 home 目录
3、所有用户都不能允许使用服务器上的 shelll
具体案例实施：
1、为所有用户创建账号和目录，不分配 shell.。假设市场部有 tom、jack 两个用户，
技术部有 red、blue，总经理是 ceo
2、创建组 sales和tech，并把相应的用户加入到组中
3、创建两个目录./home/sales 和/home/tech，并且修改两个目录的权限，分别属于 sales
组和 tech 组
4、通过 samba 共享两个文件夹
5、测试
操作步骤：
1、[root@cisco RPMS]# groupadd sales
[root@cisco RPMS]# groupadd tech
[root@cisco RPMS]# vi /etc/passwd
[root@cisco RPMS]# vi /etc/passwd
[root@cisco RPMS]# useradd -g sales -s /bin/false
[root@cisco RPMS]# man false
Formatting page, please wait...
[root@cisco RPMS]# useradd -g sales -s /bin/false tom
[root@cisco RPMS]# useradd -g sales -s /bin/false jack
[root@cisco RPMS]# useradd -g tech -s /bin/false red
[root@cisco RPMS]# useradd -g tech -s /bin/false blue
[root@cisco RPMS]# smbpasswd -a tom
New SMB password:
Retype new SMB password:
startsmbfilepwent_internal: file /etc/samba/smbpasswd did not exist. File successfully created.
Added user tom.
[root@cisco RPMS]# smbpasswd -a jack
New SMB password:
Retype new SMB password:
Mismatch - password unchanged.
www.wqmsl.cnUnable to get new password.
[root@cisco RPMS]# smbpasswd -a jack
New SMB password:
Retype new SMB password:
Added user jack.
[root@cisco RPMS]#
[root@cisco RPMS]# smbpasswd -a red
New SMB password:
Retype new SMB password:
Added user red.
[root@cisco RPMS]# smbpasswd -a blue
New SMB password:
Retype new SMB password:
Added user blue.
[root@cisco RPMS]#
[root@cisco RPMS]# useradd ceo
[root@cisco RPMS]# smbpasswd -a ceo
New SMB password:
Retype new SMB password:
Added user ceo.
[root@cisco RPMS]# cat /etc/samba/smbpasswd
tom:502:67BD2EC1E23AEA8CAAD3B435B51404EE:3ABCFAF9E6F23022460DC080176DFE
9E:[U ]:LCT-4A30CECE:
jack:503:75DB7F84A583EFD9AAD3B435B51404EE:66DADABB531CEADF75FA0CCDB63B
A214:[U ]:LCT-4A30CEE7:
red:504:7B96B77A223162B1AAD3B435B51404EE:2C8A51B3BC2395D6F3623A0B7C4F1CF
A:[U ]:LCT-4A30D580:
blue:505:9095220ABA77AA81AAD3B435B51404EE:505A9279CFD2F94C658980551CFDE73
5:[U ]:LCT-4A30D58B:
ceo:506:422E5EA80C550F9AAAD3B435B51404EE:0A5ECB1958AF159FED0F21FFFD6FBE
C6:[U ]:LCT-4A30D5D3:
[root@cisco RPMS]#
2、[root@cisco ~]# mkdir /home/sales
[root@cisco ~]# mkdir /home/tech
[root@cisco ~]#
[root@cisco ~]# ls -ld /home/sales /home/tech
drwxr-xr-x 2 root root 4096 Jun 12 08:26 /home/sales
drwxr-xr-x 2 root root 4096 Jun 12 08:26 /home/tech
[root@cisco ~]# chgrp sales /home/sales
[root@cisco ~]# chgrp tech /home/tech
[root@cisco ~]# ls -ld /home/sales/ /home/tech/
drwxr-xr-x 2 root sales 4096 Jun 12 08:26 /home/sales/
drwxr-xr-x 2 root tech 4096 Jun 12 08:26 /home/tech/
[root@cisco ~]# chmod 770 /home/sales/ [root@cisco ~]# chmod 770 /home/tech
[root@cisco ~]# ls -ld /home/sales/ /home/tech/
drwxrwx--- 2 root sales 4096 Jun 12 08:26 /home/sales/
drwxrwx--- 2 root tech 4096 Jun 12 08:26 /home/tech/
3、[root@cisco mnt]# vi /etc/samba/smb.conf
[sales]
path=/home/sales
comment=sales file
public=no
valid users=@sales
writable=yes
create mask=0750
directory mask=0750
[tech]
path=/home/tech
comment=tech file
public=no
valid users=@tech
writable=yes
create mask=0750
directory mask=0750
4、测试：可以用 windows 验证
[root@cisco ~]# smbclient -L 192.168.20.1
Password:
Anonymous login successful
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.10-1.4E]
Sharename Type Comment
--------- ---- -------
sales Disk sales file
tech Disk tech file
IPC$ IPC IPC Service (Samba Server)
ADMIN$ IPC IPC Service (Samba Server)
Anonymous login successful
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.10-1.4E]
Server Comment
--------- -------
CISCO Samba Server
Workgroup Master
--------- -------
MYGROUP CISCO
[root@cisco ~]# smbclient //192.168.20.1/sales -U tom%tom Domain=[CISCO] OS=[Unix] Server=[Samba 3.0.10-1.4E]
smb: \> help
? altname archive blocksize cancel
case_sensitive cd chmod chown del
dir du exit get hardlink
help history lcd link lowercase
ls mask md mget mkdir
more mput newer open print
printmode prompt put pwd q
queue quit rd recurse reget
rename reput rm rmdir setmode
stat symlink tar tarmode translate
vuid logon !
smb: \> quit
[root@cisco ~]#
[root@cisco ~]# mkdir abc
mkdir: cannot create directory `abc': File exists
[root@cisco ~]# ls
abc anaconda-ks.cfg install.log install.log.syslog login.txt
[root@cisco ~]# smbmount //192.168.20.1/sales /root/abc -o username=tom
Password:
[root@cisco ~]# cd /root/abc/
[root@cisco abc]# ls
123.txt aaaa qqqq sales.txt
[root@cisco abc]#
用网页管理 SAMBA
[root@cisco RPMS]# rpm -ivh samba-swat-3.0.10-1.4E.i386.rpm
warning: samba-swat-3.0.10-1.4E.i386.rpm: V3 DSA signature: NOKEY, key ID db42a60e
Preparing... ########################################### [100%]
1:samba-swat ########################################### [100%]
[root@cisco RPMS]# chkconfig swat on
[root@cisco RPMS]# vi /etc/xinetd.d/swat
[root@cisco RPMS]# cat /etc/xinetd.d/swat
# default: off
# description: SWAT is the Samba Web Admin Tool. Use swat \
# to configure your Samba server. To use SWAT, \
# connect to port 901 with your favorite web browser.
service swat
{
disable = no
port = 901
socket_type = stream
wait = no
only_from = 192.168.20.10 user = root
server = /usr/sbin/swat
log_on_failure += USERID
}
[root@cisco RPMS]# service xinetd restart
Stopping xinetd: [ OK ]
Starting xinetd: [ OK ]
然后用windows主机登陆即可：http://192.168.20.1:901 用root用户
