建立cover组 成员有cover01 cover02     建立team组 成员有team 01 team02     建立user组 成员有user

建立cover组、成员cover01， cover02

groupadd cover
useradd -g cover cover01
echo abc/123 | passwd --stdin cover01
useradd -g cover cover02
echo abc/123 | passwd --stdin cover02

建立team组、成员team 01, team02
groupadd team
useradd -g team team01
echo abc/123 | passwd --stdin team01
useradd -g team team02
echo abc/123 | passwd --stdin team02

建立user组、成员user01, user02
groupadd user
useradd -g user user01
echo abc/123 | passwd --stdin user01
useradd -g user user02
echo abc/123 | passwd --stdin user02

建立共享文件夹
mkdir -p /share/cover /share/public /share/team /share/user
chmod -R 777 /share
vim /etc/samba/smb.conf
[global]

workgroup = WORKGROUP、工作组

server string = Samba Server Version %vsamba信息

security = user验证机制

passdb backend = tdbsam##用户密码保存方式

配置共享目录cover的访问规则
[cover]
共享目录描述
comment = cover

共享目录路径
path = /share/cover

隐藏共享目录
browseable = no

不允许匿名访问
public = no

##配置允许访问共享目录的用户(组)
valid users = @cover配置可写用户(组)如果使用此配置
write list = @cover

配置共享目录team访问规则
[team]
comment = team
path = /share/team
public = no
valid users = @team @cover user01
write list = @team
[user]
comment = user
path = /share/user
public = no
read list = @user
write list = @cover
通过write list列表配置的用户可以get共享目录的数据
chown user01:user /share/user/
chmod 773 /share/user

[public]
comment = public
path = /share/user
public = no
writable = yes
valid users = @cover @team @user
配置用户新建文件的默认权限
creat mask=0644
directory mask=0755
#为用户配置smb密码
smbpasswd -a username
#重启smb服务
/etc/init.d/smb restart
#停用iptables
service iptables stop
#停用selinux
vim /etc/selinux/config
SELINUX=disabled
setenforce 0 暂时停用selinux(
试smb服务
smbclient -L 192.168.18.139 -U username
smbclient //192.168.18.139/sharedir -U username

##问题：如何使隐藏文件夹cover能够只对其他用户组隐藏，而cover组成员登录

##config file = /etc/samba/smb.conf.%U
include = /etc/samba/smb.
在全局配置中添加下列代码
##config file = /etc/samba/smb.conf.%U
##include = /etc/samba/smb.conf.%U
#配置用户的独立配置文件/etc/samba/smb.conf.gruopname(username)
vim /etc/samba/smb.conf.cover
[cover]
comment = cover
path = /share/cover
public = no
write list = @cover
#重启samba服务
service samba restart
#测试配置