{"id":19243,"date":"2016-07-29T06:12:32","date_gmt":"2016-07-28T22:12:32","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/07\/29\/%e5%9c%a8-centos-6-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-samba-4\/"},"modified":"2016-07-29T06:12:32","modified_gmt":"2016-07-28T22:12:32","slug":"%e5%9c%a8-centos-6-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-samba-4","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/07\/29\/%e5%9c%a8-centos-6-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-samba-4\/","title":{"rendered":"\u5728 CentOS 6.x \u4e0a\u4f7f\u7528 Samba 4"},"content":{"rendered":"

1. \u641c\u5c0b Samba \u5957\u4ef6
# yum search samba | grep ^samba<\/span>
samba-client.x86_64 : Samba client programs<\/span>
samba-common.i686 : Files used by both Samba servers and clients<\/span>
samba-common.x86_64 : Files used by both Samba servers and clients<\/span>
samba-doc.x86_64 : Documentation for the Samba suite<\/span>
samba-glusterfs.x86_64 : Samba VFS module for GlusterFS<\/span>
samba-swat.x86_64 : The Samba SMB server Web configuration program<\/span>
samba-winbind.x86_64 : Samba winbind<\/span>
samba-winbind-clients.i686 : Samba winbind clients<\/span>
samba-winbind-clients.x86_64 : Samba winbind clients<\/span>
samba-winbind-krb5-locator.x86_64 : Samba winbind krb5 locator<\/span>
samba4-client.x86_64 : Samba client programs<\/span>
samba4-common.x86_64 : Files used by both Samba servers and clients<\/span>
samba4-devel.x86_64 : Developer tools for Samba libraries<\/span>
samba4-libs.x86_64 : Samba libraries<\/span>
samba4-python.x86_64 : Samba Python libraries<\/span>
samba4-test.x86_64 : Testing tools for Samba servers and clients<\/span>
samba4-winbind.x86_64 : Samba winbind<\/span>
samba4-winbind-clients.x86_64 : Samba winbind clients<\/span>
samba4-winbind-krb5-locator.x86_64 : Samba winbind krb5 locator<\/span>
samba.x86_64 : Server and Client software to interoperate with Windows machines<\/span>
samba-domainjoin-gui.x86_64 : Domainjoin GUI<\/span>
samba-winbind-devel.i686 : Developer tools for the winbind library<\/span>
samba-winbind-devel.x86_64 : Developer tools for the winbind library<\/span>
samba4.x86_64 : Server and Client software to interoperate with Windows machines<\/span>
samba4-dc.x86_64 : AD Domain Controller placeholder package.<\/span>
samba4-dc-libs.x86_64 : AD Domain Controller libraries placeholder package.<\/span>
samba4-pidl.x86_64 : Perl IDL compiler<\/span><\/p>\n

2. \u5b89\u88dd Samba 4
# yum install -y samba4<\/span>[@more@]3. \u4fee\u6539 \/etc\/samba\/smb.conf<\/span> \u8a2d\u5b9a\u6a94
# cat \/etc\/samba\/smb.conf | grep -E -v ‘^#|^;’<\/span>
[global]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 workgroup = HOME<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 server string = Samba Server Version %v<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # log files split per-machine:<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 log file = \/var\/log\/samba\/log.%m<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # maximum size of 50KB per log file, then rotate:<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 max log size = 50<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 security = user<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 passdb backend = tdbsam<\/span><\/p>\n

[homes]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 comment = Home Directories<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 browseable = no<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 writable = yes<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 valid users = %S<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 create mode = 0664<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 directory mode = 0775<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 veto files=\/.*\/<\/span><\/p>\n

4. \u6e2c\u8a66\u8a2d\u5b9a\u6a94
# testparm<\/span>
Load smb config files from \/etc\/samba\/smb.conf<\/span>
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)<\/span>
Processing section “[homes]”<\/span>
Loaded services file OK.<\/span>
Server role: ROLE_STANDALONE<\/span><\/p>\n

Press enter to see a dump of your service definitions<\/span><\/p>\n

# Global parameters<\/span>
[global]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 workgroup = HOME<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 server string = Samba Server Version %v<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 security = USER<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 log file = \/var\/log\/samba\/log.%m<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 max log size = 50<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 idmap config * : backend = tdb<\/span><\/p>\n

[homes]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 comment = Home Directories<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 valid users = %S<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 read only = No<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 create mask = 0664<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 directory mask = 0775<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 veto files = \/.*\/<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 browseable = No<\/span><\/span><\/p>\n

5. \u5efa\u7acb\u4f7f\u7528\u8005 Samba \u5bc6\u78bc
# \/usr\/bin\/pdbedit -a t850008<\/span>
new password:<\/span>
retype new password:<\/span>
Unix username:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 t850008<\/span>
NT username:<\/span>
Account Flags:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [U\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ]<\/span>
User SID:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 S-1-5-21-1562595748-815096285-1647261660-1000<\/span>
Primary Group SID:\u00a0\u00a0\u00a0 S-1-5-21-1562595748-815096285-1647261660-513<\/span>
Full Name:<\/span>
Home Directory:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \\localhostt850008<\/span>
HomeDir Drive:<\/span>
Logon Script:<\/span>
Profile Path:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \\localhostt850008profile<\/span>
Domain:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LOCALHOST<\/span>
Account desc:<\/span>
Workstations:<\/span>
Munged dial:<\/span>
Logon time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0<\/span>
Logoff time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Wed, 06 Feb 2036 23:06:39 CST<\/span>
Kickoff time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Wed, 06 Feb 2036 23:06:39 CST<\/span>
Password last set:\u00a0\u00a0\u00a0 Wed, 29 Jun 2016 09:06:19 CST<\/span>
Password can change:\u00a0 Wed, 29 Jun 2016 09:06:19 CST<\/span>
Password must change: never<\/span>
Last bad password\u00a0\u00a0 : 0<\/span>
Bad password count\u00a0 : 0<\/span>
Logon hours\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<\/span><\/p>\n

6. SELinux \u5728 Samba Server \u4e0a\u7684\u8a2d\u5b9a
# setsebool -P samba_enable_home_dirs on<\/span>
# chcon -R -t samba_share_t \/home\/homework<\/span>
# chcon -R -t samba_share_t \/home\/share<\/span><\/p>\n

7. \u555f\u52d5 Samba Server
# \/etc\/init.d\/smb start<\/span>
# \/etc\/init.d\/nmb start<\/span><\/p>\n

8. \u6aa2\u67e5 Samba Server \u662f\u5426\u6709\u6b63\u5e38\u555f\u52d5
# netstat -an | grep -E ‘:137|:138|:139|:445’<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:445\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:139\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 :::445\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :::*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 :::139\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :::*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:137\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*<\/span>
udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:138\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*<\/span><\/p>\n

9. \u8a2d\u5b9a\u958b\u6a5f\u6642\u555f\u52d5 Samba Server
# chkconfig –level 3 smb on<\/span>
# chkconfig –level 3 nmb on<\/span><\/p>\n

10. \u9632\u706b\u7246\u4e0a\u7684\u8a2d\u5b9a
\u9632\u706b\u7246\u8a2d\u5b9a \u8a2d\u5b9a\u5167\u90e8\u7db2\u8def IP 192.168.1.0\/24
# iptables -A INPUT -s 192.168.1.0\/24 -m state –state NEW -m udp -p udp –dport 137 -j ACCEPT<\/span>
#<\/span> iptables -A INPUT -s 192.168.1.0\/24 -m state –state NEW -m udp -p udp –dport 138 -j ACCEPT<\/span>
#<\/span> iptables -A INPUT -s 192.168.1.0\/24 -m state –state NEW -m tcp -p tcp –dport 139 -j ACCEPT<\/span>
#<\/span> iptables -A INPUT -s 192.168.1.0\/24 -m state –state NEW -m tcp -p tcp –dport 445 -j ACCEPT<\/span>
#<\/span> iptables -A INPUT -s 192.168.1.0\/24 -m state –state NEW -m udp -p udp –dport 445 -j ACCEPT<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

1. \u641c\u5c0b Samba \u5957\u4ef6# yum search samba | grep ^sambasamba-cli … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5728 CentOS 6.x \u4e0a\u4f7f\u7528 Samba 4\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117,129,136],"tags":[],"class_list":["post-19243","post","type-post","status-publish","format-standard","hentry","category-c-78462","category-c-78474","category-c-78481"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["648800"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19243"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19243"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19243\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19243"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19243"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19243"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}