Linux网络服务：Samba服务与实现

Samba基本共享Samba服务基础：---smbd：提供端口TCP139、TCP445---nmbd：提供基于NetBIOs协议的主机名解析系统服务脚本：---/etc/init.d/smb配置目录及主要配置文件：---/etc/samba/---/etc/samba/smb.conf配置文件检查工具：---testparmSmb.conf配置解析：



Linux访问共享

实验五：将目录 /usr/src 共享给所有人共享名设为 tools允许所有人访问、无需密码验证访问权限为只读1、安装软件包[root@localhost ~]# rpm -q samba-client samba samba-common//查看是否安装package samba-client is not installedpackage samba is not installedpackage samba-common is not installed[root@localhost ~]# cd /etc/yum.repos.d///配置yum[root@localhost yum.repos.d]# cp rhel-debuginfo.repo rhel- server.repo[root@localhost yum.repos.d]# cat rhel-server.repo[rhel-server]name=Red Hat Enterprise Linux Serverbaseurl=file:///misc/cd/Serverenabled=1gpgcheck=1gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release[root@localhost yum.repos.d]# yum clean all[root@localhost yum.repos.d]# yum -y install samba samba-clientsamba-common//安装samb，需要三个包2、修改主配置文件[root@ser1 ~]# vim /etc/samba/smb.conf...74workgroup = Tarena//工作组名称75server string = Win File Ser//服务器描述...89log file = /var/log/samba/%m.log//日志路径...91max log size = 50//日志最大容量...101security = share//使用安全级别221load printers = no//隐藏打印机...289 [tools]290comment = Tools Public291path = /usr/src//指定共享路径292public = yes//是否所有人可用293read only = yes //只读3、启动服务[root@ser1 ~]# testparm //配置文件检查工具[root@ser1 ~]# service smb restart[root@ser1 ~]# chkconfig smb on[root@ser1 ~]# netstat -anptu | grep mbdtcp00 0.0.0.0:1390.0.0.0:*LISTEN7008/smbdtcp00 0.0.0.0:4450.0.0.0:*LISTEN7008/smbdudp00 192.168.10.10:1370.0.0.0:*7011/nmbdudp00 0.0.0.0:1370.0.0.0:*7011/nmbdudp00 192.168.10.10:1380.0.0.0:*7011/nmbdudp00 0.0.0.0:1380.0.0.0:*7011/nmbd4、客户端测试：WindownUNC路径 \\192.168.10.253Linux:[root@localhost ~]# yum -y install samba-client/需要安装samba-client[root@localhost ~]# smbclient -L 192.168.10.10[root@localhost ~]# smbclient //192.168.10.10/tools//！pwd可以执行外部命令 lcd切换[root@localhost ~]# mkdir -p /data/smb[root@localhost ~]# mount -t cifs //192.168.10.10/tools /data/smb///可以挂载[root@localhost ~]# grep smb /etc/fstab//192.168.10.10/tools/data/smbcifs defaults00//可以设置开机自动挂载试验二 Samba用户验证修改原有的 [tools] 匿名共享设置不再允许所有人访问只允许nick读取、tom写入拒绝其他用户或匿名访问1、新建相应账户与samba密码[root@localhost ~]# useradd nick[root@localhost ~]# useradd tom[root@localhost ~]# echo "123456" | passwd --stdin nickChanging password for user nick.passwd: all authentication tokens updated successfully.[root@localhost ~]# echo "123456" | passwd --stdin tom//新建3个用户设置密码Changing password for user tom.passwd: all authentication tokens updated successfully.[root@localhost ~]# pdbedit -a nick//设置samba密码（客户机登录samba密码）[root@localhost ~]# pdbedit -a tom2、修改主配置文件[root@ser1 ~]# vim /etc/samba/smb.conf...101security = user用户认证...289 [tools]290comment = Tools Public说明291path = /usr/src共享目录的位置292public = no是所有人可用293valid users = nick,tom共享账号列表294write list = tom可写帐户295read only = yes只读296directory mask = 0755297create mask = 0644...[root@ser1 samba]# setfacl -m u:tom:rwx /usr/src/3、启动服务[root@ser1 ~]# service smb restart关闭 SMB 服务：[确定]关闭 NMB 服务：[确定]启动 SMB 服务：[确定]启动 NMB 服务：[确定]4验证试验三 Samba账户别名与访问地址控制把普通帐户nick设置别名为kaka设置只允许192.168.10.5地址访问1、修改Samba用户别名文件[root@localhost ~]# vim /etc/samba/smbusers# Unix_name = SMB_name1 SMB_name2 ...root = administrator adminnobody = guest pcguest smbguestnick = kaka2、修改主配置文件[root@localhost ~]# vim /etc/samba/smb.conf...76username map = /etc/samba/smbusers...289 [tools]290comment = Tools Public291path = /usr/src292public = no293valid users = nick,tom294write list = tom295read only = yes296directory mask = 0755297create mask = 0644298hosts allow = 192.168.10.5