samba文件共享服务器的搭建方法

应一个同事的要求按需求，弄了一把samba。分享给大家，ldap认证域认证等需要的时候我在测试吧。勉强实现了同事的需求。下面配置既
命令：
1、配置搭建环境
# vim /etc/sysconfig/selinux
SELINUX=disabled

# systemctl stop firewalld
# setenforce 0
2、安装samba
# yum -y install vim epel-release
# yum -y install samba samba-client
# mv smb.conf{,.bak1}
# mkdir /samba/{group1,group2,public} -pv

3、目录以及权限
# chmod 070 -R /samba
# groupadd -r -g 308 samba
# useradd -g 308 -r -M test1
# useradd -g 308 -r -M test2
# useradd -g 308 -r -M test3
# chown root:samba /samba/ -R

4、配置samba

# vim /etc/samba/smb.conf
[global]
workgroup = WORKGROUP
server string = Samba Server Version %v
netbios name = Samba Server Version %v
interfaces = 192.168.1.101/24
hosts allow = 192.168.1.
log file = /var/log/samba/log.%m
max log size = 50
security = user
passdb backend = tdbsam
;[homes]
; comment = Home Directories
; browseable = no
; writable = no
; valid users = %S
; valid users = MYDOMAIN\%S

[group1]
comment = Network Logon Service
path = /samba/group1
guest ok = no
writable = yes
share modes = no
valid users = test1
browseable = yes
[group2]
comment = Network Logon Service
path = /samba/group2
guest ok = no
writable = yes
share modes = no
valid users = test2
browseable = yes
[public]
comment = Public Stuff
path = /samba/public
public = yes
; writable = no
; printable = no
write list = test3
browseable = yes
valid users = @samba
guest ok = yes

6、创建samba用户密码

# smbpasswd -a test1
New SMB password:
Retype new SMB password:
Added user test1.
# smbpasswd -a test2
New SMB password:
Retype new SMB password:
Added user test2.
# smbpasswd -a test3
New SMB password:
Retype new SMB password:
Added user test3.

6、启动samba
# systemctl start smb nmb

7、附上samba的测试命令
# smbclient -L 192.168.1.101 -U test1
Enter WORKGROUP\test1’s password:
Domain=[SAMBA SERVER VERSION %V] OS=[Windows 6.1] Server=[Samba 4.6.2]

Sharename Type Comment
——— —- ——-
samba_group1 Disk Network Logon Service
public Disk Public Stuff
IPC$ IPC IPC Service (Samba Server Version 4.6.2)
test1 Disk Home Directories
Domain=[SAMBA SERVER VERSION %V] OS=[Windows 6.1] Server=[Samba 4.6.2]

Server Comment
——— ——-

Workgroup Master
——— ——-
WORKGROUP
# smbclient //192.168.1.101/group2 -U test2
Enter WORKGROUP\test2’s password:
Domain=[SAMBA SERVER VERSION %V] OS=[Windows 6.1] Server=[Samba 4.6.2]
smb: \> ls
. DR 0 Mon Nov 13 14:48:24 2017
.. DR 0 Mon Nov 13 14:48:24 2017

17811456 blocks of size 1024. 16637252 blocks available
smb: \>

8、配置防火墙

yum -y install iptables-utils iptables-services iptables

# vim /etc/sysconfig/iptables
# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.4.21 on Tue Nov 14 11:51:37 2017
*filter
:INPUT DROP [1:328]
:FORWARD DROP [0:0]
:OUTPUT DROP [1:328]
-A INPUT -p tcp -m tcp –dport 22 –tcp-flags FIN,SYN,RST,ACK SYN -m connlimit –connlimit-above 3 –connlimit-mask 32 –connlimit-saddr -j DROP
-A INPUT -d 192.168.1.0/24 -p tcp -m tcp –tcp-flags FIN,SYN,RST,ACK SYN -m multiport –dports 22,445 -m state –state NEW -m recent –update –seconds 3600 –hitcount 5 –name tcp_limits –mask 255.255.255.255 –rsource -j DROP
-A INPUT -d 192.168.1.0/24 -p tcp -m tcp –tcp-flags FIN,SYN,RST,ACK SYN -m state –state NEW -m multiport –dports 22,445 -m recent –set –name tcp_limits –mask 255.255.255.255 –rsource -j ACCEPT
-A INPUT -p icmp -m icmp –icmp-type 8 -m limit –limit 10/min –limit-burst 10 -j ACCEPT
-A INPUT -p icmp -m state –state ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp –tcp-flags FIN,SYN,RST,ACK SYN -m connlimit –connlimit-above 3 –connlimit-mask 32 –connlimit-saddr -j DROP
-A INPUT -m state –state ESTABLISHED -j ACCEPT
-A OUTPUT -m state –state ESTABLISHED -j ACCEPT
-A OUTPUT -p icmp -m state –state NEW -m icmp –icmp-type 8 -j ACCEPT
COMMIT
# Completed on Tue Nov 14 11:51:37 2017

9、配置服务自启动
# systemctl enable smb nmb
# systemctl enable iptables