SMB文件共享——实验篇
实验环境：RHEL7.0
服务器 server1.example.com 172.25.254.1
客户端 server2.example.com 172.25.254.2
1.安装配置SMB
1.1安装
[root@server1 ~]# yum install samba samba-client -y
[root@server1 ~]# systemctl start smb
[root@server1 ~]# systemctl enable smb
1.2配置火墙策略
[root@server1 ~]# firewall-cmd --permanent --add-service=samba
[root@server1 ~]# firewall-cmd --permanent --add-service=samba-client
[root@server1 ~]# firewall-cmd --reload
1.3添加smb用户
[root@server1 ~]# useradd willis ##创建用户
[root@server1 ~]# useradd student
[root@server1 ~]# smbpasswd -a willis ##新建为smb用户并加密
New SMB password:
Retype new SMB password:
Added user willis.
[root@server1 ~]# smbpasswd -a student
New SMB password:
Retype new SMB password:
Added user student.
[root@server1 ~]# pdbedit -L
willis:1001:
student:1002:
[root@server1 ~]# smbclient -L //172.25.254.1 -U student
Enter student's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
Sharename Type Comment
--------- ---- -------
IPC$ IPC IPC Service (Samba Server Version 4.1.1)
student Disk Home Directories
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
Server Comment
--------- -------
Workgroup Master
--------- -------
[root@server1 ~]# smbclient //172.25.254.1/student -U student
Enter student's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
smb: \> ls
. D 0 Thu Sep 22 18:33:14 2016
.. D 0 Thu Sep 22 18:33:14 2016
.mozilla DH 0 Thu Aug 4 23:45:35 2016
.bash_logout H 18 Wed Jan 29 20:45:18 2014
.bash_profile H 193 Wed Jan 29 20:45:18 2014
.bashrc H 231 Wed Jan 29 20:45:18 2014
34808 blocks of size 262144. 22711 blocks available
smb: \> quit
2. 改共享目录
2.1 自建目录
[root@server1 ~]# mkdir /share
[root@server1 ~]# vim /etc/samba/smb.conf
[test]
comment = test share
path = /share
[root@server1 ~]# touch /share/file
[root@server1 ~]# smbclient //172.25.254.1/test -U willis
Enter willis's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
smb: \> ls
. D 0 Thu Sep 22 20:15:26 2016
.. D 0 Thu Sep 22 18:41:38 2016
file N 0 Thu Sep 22 20:15:26 2016
34808 blocks of size 262144. 22696 blocks available
smb: \>
2.2共享系统目录
[root@server1 ~]# vim /etc/samba/smb.conf
[test]
comment = test share
path = /mnt
[root@server1 ~]# ls /mnt/
[root@server1 ~]# touch /mnt/file1
[root@server1 ~]# smbclient //172.25.254.1/test -U willis
Enter willis's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
smb: \> ls
. D 0 Thu Sep 22 20:18:31 2016
.. D 0 Thu Sep 22 18:41:38 2016
file1 N 0 Thu Sep 22 20:18:31 2016
34808 blocks of size 262144. 22696 blocks available
smb: \>
3. 改工作组
[root@server1 ~]# smbclient -L //172.25.254.1 -U willis
Enter willis's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
Sharename Type Comment
--------- ---- -------
test Disk test share
IPC$ IPC IPC Service (Samba Server Version 4.1.1)
willis Disk Home Directories
Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.1]
Server Comment
--------- -------
Workgroup Master
--------- -------
[root@server1 ~]#
[root@server1 ~]# vim /etc/samba/smb.conf
workgroup = willis
[root@server1 ~]# smbclient -L //172.25.254.1 -U willis
Enter willis's password:
Domain=[WILLIS] OS=[Unix] Server=[Samba 4.1.1]
Sharename Type Comment
--------- ---- -------
test Disk test share
IPC$ IPC IPC Service (Samba Server Version 4.1.1)
willis Disk Home Directories
Domain=[WILLIS] OS=[Unix] Server=[Samba 4.1.1]
Server Comment
--------- -------
Workgroup Master
--------- -------
[root@server1 ~]#
4. 允许/拒绝访问服务的主机设置
[root@server1 ~]# vim /etc/samba/smb.conf (随改立即生效)
hosts deny = 172.25.254.2
测试：
[root@server2 ~]# smbclient -L //172.25.254.1 -U willis
Enter willis's password:
protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
5.客户端挂载使用
RHEL6 可匿名登陆并挂载（share级别）
RHEL 7 不能匿名挂载
服务器端：
[root@server1 ~]# vim /etc/samba/smb.conf
security = user
passdb backend = tdbsam
map to guest = bad user #添加此句
[test]
comment = test share
path = /share
guest ok = yes #添加此句
[root@server1 ~]# systemctl restart smb.service
客户端：
[root@server2 mnt]# mount //172.25.254.1/test /mnt -o username=willis,password=redhat
[root@server2 mnt]# df -h
//172.25.254.1/test 8.5G 3.0G 5.6G 35% /mnt
常用参数
[test]
Guest ok = yes # 匿名用户可登陆
Browseable = no #隐藏共享
Writable = yes #允许所有用户写入
Weite list = student #只允许student写入
Write list = +student
Write list = @student #允许student用户组写入 +和@功能一样
Valid users = +student #test这个组只能student用户组使用
Admin users = student # student是以root身份运行
