Samba服务的配置与使用操作系统weixin43557605的博客-

1. 服务端安装rpm软件包

[root@localhost ~]# yum -y install samba  

2. 服务端配置Samba

[root@localhost ~]# mkdir /pub [root@localhost ~]# chmod -R 777 /pub [root@localhost ~]# mkdir /public [root@localhost ~]# chmod -R 777 /public/ [root@localhost ~]# echo data > /public/1.txt [root@localhost ~]# echo data > /pub/2.txt [root@localhost ~]# vim /etc/samba/smb.conf #修改全局配置并在尾部追加两个模块 [global]         workgroup = SAMBA         security = user         map to guest = Bad User         guest account=Nobody #新添加的 后边有解释         passdb backend = smbpasswd  #新添加的  [files]         comment = share files         path = /pub         browseable = yes         writable = yes         public = yes [check]         comment = share files         path = /public         browseable = yes         writable = yes         public = no  files模块用于验证匿名共享是否OK public字段等于yes check模块用于验证需要验证的模块是否OK pulic字段等于no  这里写了两个模块，是想说明可以同时多个模块   下边添加用于验证Samba服务的用户，主要是给check模块使用 [root@localhost ~]# useradd -M -s /sbin/nologin smb1 [root@localhost ~]# smbpasswd -a smb1  # -a表示添加Samba用户 New SMB password: Retype new SMB password: Added user smb1.  

map to user默认值是Never 表示不允许使用无效密码的用户登陆 写上它并改为Bad user 表示当用户名存在时，可以使用无效密码 我们使用匿名用户挂载和登陆的时候都是默认用当前系统的登陆用户， 用户是有的，所以想登陆和挂载要设置成这个值  guest account=Nobody 表示如果被认为是访客则账户等同于nobody账户  passdb backend = tdbsam 　passdb backend就是用户后台的意思。目前有三种后台：smbpasswd、tdbsam和ldapsam。    一般选择smbpasswd对Samba服务进行管理 

3. 服务端调整防火墙和selinux的状态

[root@localhost ~]# firewall-cmd --permanent --add-service=samba success [root@localhost ~]# firewall-cmd --permanent --add-service=samba-client success [root@localhost ~]# firewall-cmd --reload success [root@localhost ~]# setenforce 0  

4. 服务端检测并启动服务

[root@localhost ~]# testparm /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[homes]" Processing section "[printers]" Processing section "[print$]" Processing section "[files]" Processing section "[check]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions  # Global parameters [global]  printcap name = cups  security = USER  workgroup = SAMBA  idmap config * : backend = tdb  cups options = raw   [homes]  browseable = No  comment = Home Directories  inherit acls = Yes  read only = No  valid users = %S %D%w%S   [printers]  browseable = No  comment = All Printers  create mask = 0600  path = /var/tmp  printable = Yes   [print$]  comment = Printer Drivers  create mask = 0664  directory mask = 0775  force group = @printadmin  path = /var/lib/samba/drivers  write list = @printadmin root   [files]  comment = share files  guest ok = Yes  path = /pub  read only = No   [check]  comment = share files  path = /pub  read only = No    [root@localhost ~]# systemctl start smb  

5. 客户端登陆和挂载使用

先验证匿名用户是否可以登陆，遇到输入密码，直接回车即可 [root@localhost ~]# yum -y install samba-client cifs-utils [root@localhost ~]# smbclient -L 192.168.20.121/files Enter SAMBAroot's password:  Anonymous login successful   Sharename       Type      Comment  ---------       ----      -------  print$          Disk      Printer Drivers  files           Disk      share files  check           Disk      share files  IPC$            IPC       IPC Service (Samba 4.8.3) Reconnecting with SMB1 for workgroup listing. Anonymous login successful   Server               Comment  ---------            -------   Workgroup            Master  ---------            -------   再测试需要验证的是否OK [root@localhost ~]# smbclient -U smb1 -L 192.168.20.121/check Enter SAMBAsmb1's password:    Sharename       Type      Comment  ---------       ----      -------  print$          Disk      Printer Drivers  files           Disk      share files  check           Disk      share files  IPC$            IPC       IPC Service (Samba 4.8.3)  smb1            Disk      Home Directories Reconnecting with SMB1 for workgroup listing.   Server               Comment  ---------            -------   Workgroup            Master  ---------            -------  下边挂载带验证的模块 [root@localhost ~]# mkdir /yanzheng [root@localhost ~]# mount -t cifs -o username=smb1 //192.168.20.121/check /yanzheng/ Password for smb1@//192.168.20.121/check:  ****** [root@localhost ~]# ls /yanzheng/ 1.txt  下边挂载匿名用户的 [root@localhost ~]# mkdir /niming [root@localhost ~]# mount -t cifs  //192.168.20.121/files /niming Password for root@//192.168.20.121/files:   [root@localhost ~]# ls anaconda-ks.cfg  Documents  initial-setup-ks.cfg  nginx.conf       Pictures  Templates Desktop          Downloads  Music                 original-ks.cfg  Public    Videos [root@localhost ~]# ls /niming/ 2.txt  

6. windows系统访问Samba服务