{"id":19253,"date":"2016-08-04T06:22:52","date_gmt":"2016-08-03T22:22:52","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/08\/04\/%e5%9c%a8-centos-7-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-samba-server\/"},"modified":"2016-08-04T06:22:52","modified_gmt":"2016-08-03T22:22:52","slug":"%e5%9c%a8-centos-7-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-samba-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/08\/04\/%e5%9c%a8-centos-7-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-samba-server\/","title":{"rendered":"\u5728 CentOS 7.x \u4e0a\u4f7f\u7528 Samba Server"},"content":{"rendered":"

1. \u5b89\u88dd Samba Server
# yum install samba<\/span><\/p>\n

2. \u4fee\u6539\u8a2d\u5b9a\u6a94 \/etc\/samba\/smb.conf<\/span>
# cat \/etc\/samba\/smb.conf | grep -E -v ‘^#|^;’<\/span>
[global]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 workgroup = HOME<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 server string = Samba Server Version %v<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # log files split per-machine:<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 log file = \/var\/log\/samba\/log.%m<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # maximum size of 50KB per log file, then rotate:<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 max log size = 50<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 security = user<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 passdb backend = tdbsam<\/span><\/p>\n

[homes]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 comment = Home Directories<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 browseable = no<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 writable = yes<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 valid users = %S<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 veto files=\/.*<\/span><\/p>\n

[@more@]3. \u6e2c\u8a66\u8a2d\u5b9a\u6a94
# testparm<\/span>
Load smb config files from \/etc\/samba\/smb.conf<\/span>
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)<\/span>
Processing section “[homes]”<\/span>
Loaded services file OK.<\/span>
Server role: ROLE_STANDALONE<\/span><\/p>\n

Press enter to see a dump of your service definitions<\/span><\/p>\n

# Global parameters<\/span>
[global]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 workgroup = HOME<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 server string = Samba Server Version %v<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 security = USER<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 log file = \/var\/log\/samba\/log.%m<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 max log size = 50<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 idmap config * : backend = tdb<\/span><\/p>\n

[homes]<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 comment = Home Directories<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 valid users = %S<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 read only = No<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 veto files = \/.*<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 browseable = No<\/span><\/p>\n

4. \u5efa\u7acb\u4f7f\u7528\u8005 Samba \u5bc6\u78bc
# \/usr\/bin\/pdbedit -a t850008<\/span>
new password:<\/span>
retype new password:<\/span>
Unix username:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 t850008<\/span>
NT username:<\/span>
Account Flags:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [U\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ]<\/span>
User SID:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 S-1-5-21-1562595748-815096285-1647261660-1000<\/span>
Primary Group SID:\u00a0\u00a0\u00a0 S-1-5-21-1562595748-815096285-1647261660-513<\/span>
Full Name:<\/span>
Home Directory:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \\localhostt850008<\/span>
HomeDir Drive:<\/span>
Logon Script:<\/span>
Profile Path:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \\localhostt850008profile<\/span>
Domain:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LOCALHOST<\/span>
Account desc:<\/span>
Workstations:<\/span>
Munged dial:<\/span>
Logon time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0<\/span>
Logoff time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Wed, 06 Feb 2036 23:06:39 CST<\/span>
Kickoff time:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Wed, 06 Feb 2036 23:06:39 CST<\/span>
Password last set:\u00a0\u00a0\u00a0 Wed, 29 Jun 2016 09:06:19 CST<\/span>
Password can change:\u00a0 Wed, 29 Jun 2016 09:06:19 CST<\/span>
Password must change: never<\/span>
Last bad password\u00a0\u00a0 : 0<\/span>
Bad password count\u00a0 : 0<\/span>
Logon hours\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF<\/span><\/p>\n

5. SELinux \u5728 Samba Server \u4e0a\u8a2d\u5b9a
# setsebool -P samba_enable_home_dirs on<\/span>
\u5982\u679c\u6709\u53e6\u5916\u5206\u4eab\u7684\u76ee\u9304
# semanage fcontext -a -t samba_share_t ‘\/sharedpath(\/.*)?’<\/span>
# restorecon -RFvv \/sharedpath<\/span><\/p>\n

6. \u8a2d\u5b9a\u958b\u6a5f\u6642\u555f\u52d5 Samba Server
# systemctl enable smb<\/span>
Created symlink from \/etc\/systemd\/system\/multi-user.target.wants\/smb.service to \/usr\/lib\/systemd\/system\/smb.service.<\/span>
# systemctl enable nmb<\/span>
Created symlink from \/etc\/systemd\/system\/multi-user.target.wants\/nmb.service to \/usr\/lib\/systemd\/system\/nmb.service.<\/span><\/p>\n

7. \u555f\u52d5 Samba Server
# systemctl start smb<\/span>
# systemctl start nmb<\/span><\/p>\n

8. \u6aa2\u67e5\u662f\u5426\u6709\u6b63\u5e38\u555f\u52d5
# netstat -an | grep -E ‘:137|:138|:139|:445’<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:139\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:445\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 :::139\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :::*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 :::445\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :::*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:137\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*<\/span>
udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:138\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

1. \u5b89\u88dd Samba Server# yum install samba 2. \u4fee\u6539\u8a2d\u5b9a\u6a94 \/etc\/sam … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5728 CentOS 7.x \u4e0a\u4f7f\u7528 Samba Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117,129,136],"tags":[],"class_list":["post-19253","post","type-post","status-publish","format-standard","hentry","category-c-78462","category-c-78474","category-c-78481"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["648895"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19253"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19253"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19253\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}