{"id":19219,"date":"2016-07-10T06:30:04","date_gmt":"2016-07-09T22:30:04","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/07\/10\/%e5%9c%a8-freebsd-%e5%ae%89%e8%a3%9d-samba4\/"},"modified":"2021-03-18T17:24:45","modified_gmt":"2021-03-18T09:24:45","slug":"%e5%9c%a8-freebsd-%e5%ae%89%e8%a3%9d-samba4","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/07\/10\/%e5%9c%a8-freebsd-%e5%ae%89%e8%a3%9d-samba4\/","title":{"rendered":"\u5728 FreeBSD \u5b89\u88dd Samba4"},"content":{"rendered":"

\u53c3\u8003\u6587\u7ae0\uff1aSamba 4.1 on FreeBSD 10.1 \u00b7 GitHub<\/a>
1. \u641c\u5c0b\u53ef\u7528\u7684\u5957\u4ef6
# pkg search samba | grep ^samba<\/span>
samba-nsupdate-9.8.6_1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsupdate utility with GSS-TSIG support<\/span>
samba-virusfilter-0.1.3_1\u00a0\u00a0\u00a0\u00a0\u00a0 On-access anti-virus filter for Samba<\/span>
samba36-3.6.25_3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Free SMB and CIFS client and server for Unix<\/span>
samba36-libsmbclient-3.6.25_2\u00a0 Shared lib from the samba package<\/span>
samba36-nmblookup-3.6.25\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NetBIOS Name lookup tool<\/span>
samba36-smbclient-3.6.25\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Samba “ftp-like” client<\/span>
samba41-4.1.22_2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Free SMB\/CIFS and AD\/DC server and client for Unix<\/span>
samba42-4.2.11\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Free SMB\/CIFS and AD\/DC server and client for Unix<\/span>
samba43-4.3.8\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Free SMB\/CIFS and AD\/DC server and client for Unix<\/span><\/p>\n

2. \u76f4\u63a5\u5b89\u88dd\u6700\u65b0\u7684\u7248\u672c
# pkg install samba43<\/span><\/p>\n

************************************************************<\/span>
Message from trousers-tddl-0.3.10_7:<\/span>
To run tcsd automatically, add the following line to \/etc\/rc.conf<\/span><\/p>\n

tcsd_enable=”YES”<\/span><\/p>\n

You might want to edit \/usr\/local\/etc\/tcsd.conf to reflect your setup.<\/span><\/p>\n

To use TPM, add your_account to ‘_tss’ group like following:<\/span><\/p>\n

# pw groupadd _tss -m your_account<\/span>
Message from cyrus-sasl-2.1.26_12:<\/span>
You can use sasldb2 for authentication, to add users use:<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 saslpasswd2 -c username<\/span><\/p>\n

===============================================================================<\/span>
Message from samba43-4.3.8:<\/span>
===============================================================================<\/span><\/p>\n

How to start: http:\/\/wiki.samba.org\/index.php\/Samba4\/HOWTO<\/span><\/p>\n

* Your configuration is: \/usr\/local\/etc\/smb4.conf<\/span><\/p>\n

* All the relevant databases are under: \/var\/db\/samba4<\/span><\/p>\n

* All the logs are under: \/var\/log\/samba4<\/span><\/p>\n

* Provisioning script is: \/usr\/local\/bin\/samba-tool<\/span><\/p>\n

For additional documentation check: http:\/\/wiki.samba.org\/index.php\/Samba4<\/span><\/p>\n

Bug reports should go to the: https:\/\/bugzilla.samba.org\/<\/span><\/p>\n

===============================================================================<\/span>[@more@]3. \u5efa\u7acb \/usr\/local\/etc\/smb4.conf<\/span>
\u00a0\u00a0\u00a0 \u8a2d\u5b9a\u6a94\u662f\u5f9e NAS4Free \u53d6\u5f97\uff0c\u518d\u7a0d\u505a\u4fee\u6539
# vim \/usr\/local\/etc\/smb4.conf<\/span>
[global]<\/span>
encrypt passwords = yes<\/span>
netbios name = freebsd<\/span>
workgroup = HOME<\/span>
server string = FreeBSD Server<\/span>
security = user<\/span>
dns proxy = no<\/span>
strict locking = no<\/span>
read raw = yes<\/span>
write raw = yes<\/span>
oplocks = yes<\/span>
max xmit = 65535<\/span>
deadtime = 15<\/span>
getwd cache = yes<\/span>
unix charset = UTF-8<\/span>
time server = yes<\/span>
max log size = 100<\/span>
logging = syslog<\/span>
loglevel = 1<\/span>
load printers = no<\/span>
printing = bsd<\/span>
printcap cache time = 0<\/span>
printcap name = \/dev\/null<\/span>
disable spoolss = yes<\/span>
dos charset = CP950<\/span>
smb passwd file = \/var\/etc\/private\/smbpasswd<\/span>
private dir = \/var\/etc\/private<\/span>
passdb backend = tdbsam<\/span>
idmap config * : backend = tdb<\/span>
idmap config * : range = 10000-39999<\/span>
aio read size = 1024<\/span>
aio write size = 1024<\/span><\/p>\n

[t850008]<\/span>
comment = t850008<\/span>
path = \/home\/t850008<\/span>
writeable = yes<\/span>
printable = no<\/span>
hide dot files = yes<\/span>
guest ok = no<\/span>
inherit permissions = yes<\/span>
inherit acls = yes<\/span><\/p>\n

4. \u6e2c\u8a66\u8a2d\u5b9a\u6a94\u662f\u5426\u6b63\u78ba
# \/usr\/local\/bin\/testparm<\/span>
Load smb config files from \/usr\/local\/etc\/smb4.conf<\/span>
Processing section “[t850008]”<\/span>
Loaded services file OK.<\/span>
Server role: ROLE_STANDALONE<\/span><\/p>\n

Press enter to see a dump of your service definitions<\/span><\/p>\n

# Global parameters<\/span>
[global]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 dos charset = CP950<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 workgroup = HOME<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 server string = FreeBSD Server<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 security = USER<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 smb passwd file = \/var\/etc\/private\/smbpasswd<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 private dir = \/var\/etc\/private<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 logging = syslog<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 max log size = 100<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 max xmit = 65535<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 time server = Yes<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 deadtime = 15<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 load printers = No<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 printcap cache time = 0<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 printcap name = \/dev\/null<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 disable spoolss = Yes<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 dns proxy = No<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 idmap config * : range = 10000-39999<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 idmap config * : backend = tdb<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 aio read size = 1024<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 aio write size = 1024<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 strict locking = No<\/span><\/p>\n

[t850008]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 comment = t850008<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 path = \/home\/t850008<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 read only = No<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 inherit permissions = Yes<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 inherit acls = Yes<\/span><\/p>\n

5. \u4fee\u6539 \/etc\/rc.conf<\/span> \u555f\u52d5\u8a2d\u5b9a\u6a94
# vim \/etc\/rc.conf<\/span>
\u52a0\u5165\u4e0b\u9762\u9019\u4e00\u884c\u8a2d\u5b9a
samba_server_enable=”YES”<\/span>
\u6216
# echo ‘samba_server_enable=”YES”‘ >> \/etc\/rc.conf<\/span><\/p>\n

6. \u555f\u52d5 Samba Server
# \/usr\/local\/etc\/rc.d\/samba_server start<\/span>
Performing sanity check on Samba configuration: OK<\/span>
Starting nmbd.<\/span>
Starting smbd<\/span><\/p>\n

7. \u6aa2\u67e5 Samba Server \u662f\u5426\u6709\u6b63\u5e38\u555f\u52d5
# netstat -an | grep -E ‘137|138|139|445’<\/span>
tcp4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 *.139\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 *.445\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 *.139\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 *.445\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
udp4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 *.138\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.*<\/span>
udp4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 *.137\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.*<\/span><\/p>\n

8. \u8a2d\u5b9a\u4f7f\u7528\u8005\u5bc6\u78bc
# \/usr\/local\/bin\/pdbedit -a t850008<\/span>
new password:<\/span>
retype new password:<\/span>
Unix username:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 t850008<\/span>
NT username:<\/span>
Account Flags:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [U\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ]<\/span>
User SID:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 S-1-5-21-1407030253-4189778233-248147614-1000<\/span>
Primary Group SID:\u00a0\u00a0\u00a0 S-1-5-21-1407030253-4189778233-248147614-513<\/span>
Full Name:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 User &<\/span>
Home Directory:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 freebsdt850008<\/span>
HomeDir Drive:<\/span>
Logon Script:<\/span>
Profile Path:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 freebsdt850008profile<\/span>
Domain:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 FREEBSD<\/span>
Account desc:<\/span>
Workstations:<\/span>
Munged dial:<\/span>
Logon time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0<\/span>
Logoff time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u65e5, 00\u00a0 1\u6708 1900 00:00:00 CST<\/span>
Kickoff time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u65e5, 00\u00a0 1\u6708 1900 00:00:00 CST<\/span>
Password last set:\u00a0\u00a0\u00a0 \u65e5, 26\u00a0 6\u6708 2016 09:59:39 CST<\/span>
Password can change:\u00a0 \u65e5, 26\u00a0 6\u6708 2016 09:59:39 CST<\/span>
Password must change: never<\/span>
Last bad password\u00a0\u00a0 : 0<\/span>
Bad password count\u00a0 : 0<\/span>
Logon hours\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u6587\u7ae0\uff1aSamba 4.1 on FreeBSD 10.1 \u00b7 GitHub1. \u641c\u5c0b\u53ef\u7528\u7684\u5957\u4ef6# pkg … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5728 FreeBSD \u5b89\u88dd Samba4\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[105,129],"tags":[],"class_list":["post-19219","post","type-post","status-publish","format-standard","hentry","category-c-98634","category-c-78474"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["648462"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19219"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19219"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19219\/revisions"}],"predecessor-version":[{"id":20785,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19219\/revisions\/20785"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}