搭建SAMBA服务

1 [root@foundation ~]# mkdir /smbshare/sambashare -p
2 [root@foundation /]# chown :mei /smbshare/sambashare
3 [root@foundation ~]# chmod -R 2775 /smbshare/sambashare
4 [root@foundation ~]# echo "samba share test."> /smbshare/sambashare/test.txt

11.2.2 设置SELinux

1 [root@foundation ~]# semanage fcontext -a -t samba_share_t '/smbshare(/.*)?'
2 [root@foundation ~]# restorecon -FRv /smbshare/

注意

Samba还可以提供使用SELinux 类型 public_content_t (只读）和public_content_rw_t (读写）标记的文件。

要允许对标记为public_content_rw_t的文件和目录进行读写访问，必须还要启用SELinux布尔值smba-anon-write。

11.2.3 编辑配置文件

[root@foundation ~]# grep -v -E "^$|#|;" /etc/samba/smb.conf
[global]
workgroup = SAMBA
security = user
passdb backend = tdbsam
printing = cups
printcap name = cups
load printers = yes
cups options = raw
[homes]
comment = Home Directories
valid users = %S, %D%w%S
browseable = No
read only = No
inherit acls = Yes
[printers]
comment = All Printers
path = /var/tmp
printable = Yes
create mask = 0600
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = root
create mask = 0664
directory mask = 0775
[sambashare] #共享名称
path = //smbshare/sambashare #实际路径
write list = @mei # writable为no时，用它控制可写用户是哪些，@开头表示是一个用户组
browseable = yes #所有用户可浏览
#writable = yes 默认是no，表示所有用户都可以写

11.2.4 准备SAMBA用户

[root@foundation ~]# useradd -s /sbin/nologin mei
[root@foundation ~]# useradd -G mei -s /sbin/nologin tom
[root@foundation ~]# useradd -s /sbin/nologin danny
设不设置密码都无所谓

将用户添加进SAMBA自己的数据库
[root@foundation ~]# smbpasswd -a mei
New SMB password:
Retype new SMB password:
Added user mei.
[root@foundation ~]# smbpasswd -a tom
New SMB password:
Retype new SMB password:
Added user tom.
[root@foundation ~]# smbpasswd -a danny
New SMB password:
Retype new SMB password:
Added user danny.
[root@foundation ~]#

11.3 启动服务并配置防火墙

1 [root@foundation ~]# systemctl enable smb nmb
2 [root@foundation ~]# systemctl restart smb nmb
3 [root@foundation ~]# firewall-cmd --permanent --add-service=samba
4 [root@foundation ~]# firewall-cmd --reload

11.4 客户端测试（多用户挂载）

这里我们使用rhel7主机来测试

11.4.1 安装软件包

1 [root@rhel7 ~]# yum install samba-client
2 [root@rhel7 ~]# yum install cifs-utils #默认不支持samba，所以安装文件系统clifs
3 samba的文件系统类型为cifs

11.4.2 创建挂载点

1 [root@rhel7 ~]# mkdir /smbmnt
2 [root@rhel7 ~]# chown :mei /smbmnt/
3 [root@rhel7 /]# chmod -R 2775 /smbmnt/

11.4.3 准备SAMBA用户

注意，客户端必须要实现多用户挂载，必须在存在和服务端相同用户名的用户，

用户组关系可以不一致，而且要有登录shell，如果没有，不便于我们切换用户测试权限是否正确。

1 [root@rhel7 ~]# useradd mei && echo "test" |passwd --stdin mei
2 Changing password for user mei.
3 passwd: all authentication tokens updated successfully.
4 [root@rhel7 ~]# useradd tom && echo "test" |passwd --stdin tom
5 Changing password for user tom.
6 passwd: all authentication tokens updated successfully.
7 [root@rhel7 ~]# useradd danny && echo "test" |passwd --stdin danny
8 Changing password for user danny.
9 passwd: all authentication tokens updated successfully.
10 [root@rhel7 ~]#