samba可以用于linux和windows之间文件共享。
需要安装的软件包
samba-3.0.23c-2.i386.rpm
samba-client-3.0.23c-2.i386.rpm
samba-common-3.0.23c-2.i386.rpm
samba-swat-3.0.23c-2.i386.rpm
system-config-samba-1.2.39-1.el5.noarch.rpm
启动脚本：/etc/init.d/smb
配置文件：/etc/samba/smb.conf
实验完成了security安全级别为 share、user共享目录读写访问控制。
过程如下：
[chen@localhost 桌面]$ rpm -qa|grep samba
samba-winbind-clients-3.5.4-68.el6.i686
samba-common-3.5.4-68.el6.i686
samba-client-3.5.4-68.el6.i686
[chen@localhost 桌面]$ chkconfig --list|grep smb
[chen@localhost 桌面]$ yum list|grep samba
*Note* Red Hat Network repositories are not listed below. You must run this command as root to access RHN repositories.
samba-client.i686 3.5.4-68.el6 @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0
samba-common.i686 3.5.4-68.el6 @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0
samba-winbind-clients.i686 3.5.4-68.el6 @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0
samba.i686 3.5.4-68.el6 rhel-source
samba-winbind.i686 3.5.4-68.el6 rhel-source
sblim-cmpi-samba.i686 1.0-1.el6 rhel-source
[chen@localhost 桌面]$ yum -y install samba*
Loaded plugins: refresh-packagekit, rhnplugin
*Note* Red Hat Network repositories are not listed below. You must run this command as root to access RHN repositories.
You need to be root to perform this command.
[chen@localhost 桌面]$ su - root
密码：
[root@localhost ~]# yum -y install samba*
Loaded plugins: refresh-packagekit, rhnplugin
This system is not registered with RHN.
RHN support will be disabled.
rhel-source | 3.7 kB 00:00 ...
Setting up Install Process
Package samba-common-3.5.4-68.el6.i686 already installed and latest version
Package samba-winbind-clients-3.5.4-68.el6.i686 already installed and latest version
Package samba-client-3.5.4-68.el6.i686 already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package samba.i686 0:3.5.4-68.el6 set to be updated
---> Package samba-winbind.i686 0:3.5.4-68.el6 set to be updated
--> Finished Dependency Resolution
Dependencies Resolved
====================================================================================================
Package Arch Version Repository Size
====================================================================================================
Installing:
samba i686 3.5.4-68.el6 rhel-source 5.0 M
samba-winbind i686 3.5.4-68.el6 rhel-source 3.5 M
Transaction Summary
====================================================================================================
Install 2 Package(s)
Upgrade 0 Package(s)
Total download size: 8.5 M
Installed size: 30 M
Downloading Packages:
----------------------------------------------------------------------------------------------------
Total 19 MB/s | 8.5 MB 00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : samba-winbind-3.5.4-68.el6.i686 1/2
Installing : samba-3.5.4-68.el6.i686 2/2
Installed:
samba.i686 0:3.5.4-68.el6 samba-winbind.i686 0:3.5.4-68.el6
Complete!
[root@localhost ~]# chkconfig --list|grep smb
smb 0:关闭 1:关闭 2:关闭 3:关闭 4:关闭 5:关闭 6:关闭
[root@localhost ~]# chkconfig smb on
[root@localhost ~]# /etc/init.d/smb start
启动 SMB 服务： [确定]
[root@localhost ~]# ls /etc/samba/
lmhosts smb.conf smbusers
[root@localhost ~]# vim /etc/samba/smb.conf
[root@localhost ~]# tail -8 /etc/samba/smb.conf
[files]
comment = Public Files Share
path = /home/samba
public = yes
writable = yes
printable = no
[root@localhost ~]# 刚才的vim修改增加了最后那几行和把global下面到security改为了share^C
[root@localhost ~]# /etc/init.d/smb restart
关闭 SMB 服务： [确定]
启动 SMB 服务： [确定]
[root@localhost ~]# setenforce 0
[root@localhost ~]# smbclient //192.169.1.98/files #登陆不上，因为/home/samba目录还没有创建
Enter root's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
Server not using user level security and no password supplied.
tree connect failed: NT_STATUS_BAD_NETWORK_NAME
[root@localhost ~]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[printers]"
Processing section "[files]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
workgroup = MYGROUP
server string = Samba Server Version %v
security = SHARE
log file = /var/log/samba/log.%m
max log size = 50
cups options = raw
[homes]
comment = Home Directories
read only = No
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
[files]
comment = Public Files Share
path = /home/samba
read only = No
guest ok = Yes
[root@localhost ~]# mkdir /home/samba
[root@localhost ~]# chmod o+w /home/samba/
[root@localhost ~]# ls -ld /home/samba/
drwxr-xrwx. 2 root root 4096 8月 9 20:47 /home/samba/
[root@localhost ~]# smbclient //192.169.1.98/files
Enter root's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
Server not using user level security and no password supplied.
smb: \> ls
. D 0 Thu Aug 9 20:47:01 2012
.. D 0 Thu Aug 9 20:47:01 2012
40317 blocks of size 262144. 26849 blocks available
smb: \> ls
. D 0 Thu Aug 9 20:49:30 2012
.. D 0 Thu Aug 9 20:47:01 2012
8.9samba A 19725 Thu Aug 9 11:38:38 2012 #这个文件是在虚拟机外面的windows中传上去的
40317 blocks of size 262144. 26848 blocks available
smb: \> put
1 .gnote/ off .xauthnex4AK
a .gnupg/ .printer-groups.xml .xauthQDpdMq
anaconda-ks.cfg .gstreamer-0.10/ .pulse/ .xauths3w8PP
.bash_history .gtk-bookmarks .pulse-cookie .xauthWHeJNQ
.bash_logout .gvfs/ .recently-used.xbel .xauthzsGCtR
.bash_profile .ICEauthority .ssh/ 公共的/
.bashrc .icons/ .tcshrc 模板/
.cache/ .imsettings.log .themes/ 视频/
.config/ install.log .thumbnails/ 图片/
.cshrc install.log.syslog .viminfo 文档/
.dbus/ .lesshst .xauthEjNjkE 下载/
.esd_auth .lftp/ .xauthH1M7lM 音乐/
.gconf/ .local/ .xauthiHGPWs 桌面/
.gconfd/ loginDir/ .xauthKSE2s2
.gnome2/ .nautilus/ .xauthmGZjkB
smb: \> put a
putting file a as \a (0.0 kb/s) (average 0.0 kb/s)
smb: \> ls
. D 0 Thu Aug 9 20:49:30 2012
.. D 0 Thu Aug 9 20:47:01 2012
a A 0 Thu Aug 9 20:50:27 2012
8.9samba A 19725 Thu Aug 9 11:38:38 2012
40317 blocks of size 262144. 26848 blocks available
smb: \> get 8.9samba
getting file \8.9samba of size 19725 as 8.9samba (6420.7 KiloBytes/sec) (average 6420.9 KiloBytes/sec)
smb: \> quit
[root@localhost ~]# ls
1 a install.log loginDir 公共的 视频 文档 音乐
8.9samba anaconda-ks.cfg install.log.syslog off 模板 图片 下载 桌面
[root@localhost ~]#
#匿名用户可以登陆，且可以get，put
-------------------------------需要用户名和密码验证-------------------------------------
[root@localhost ~]#
[root@localhost ~]# security=share不要用户名和密码的方式实验成功，下面测试security=users需要验证^C
[root@localhost ~]#
[root@localhost ~]#
[root@localhost ~]# vim /etc/samba/smb.conf
[root@localhost ~]# 把security=user，然后添加了以下10行^C
[root@localhost ~]# tail -11 /etc/samba/smb.conf
[movies]
comment = This is a movies world!
path = /var/public/movies
public = no
writable = yes
printable = no
valid users = user1 user2 @root
write list = user1 @root
directory mask = 0744
create mask = 0600
[root@localhost ~]# service smb restart
关闭 SMB 服务： [确定]
启动 SMB 服务： [确定]
[root@localhost ~]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[printers]"
Processing section "[files]"
Processing section "[movies]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
workgroup = MYGROUP
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
cups options = raw
[homes]
comment = Home Directories
read only = No
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
[files]
comment = Public Files Share
path = /home/samba
read only = No
guest ok = Yes
[movies]
comment = This is a movies world!
path = /var/public/movies
valid users = user1, user2, @root
write list = user1, @root
read only = No
create mask = 0600
directory mask = 0744
[root@localhost ~]# smbpasswd -a user1
New SMB password:
Retype new SMB password:
Added user user1.
[root@localhost ~]# smbclient -U user1 //192.168.1.98/movies
Enter user1's password:
Connection to 192.168.1.98 failed (Error NT_STATUS_HOST_UNREACHABLE)
[root@localhost ~]# setenforce 0
[root@localhost ~]# mkdir -p /var/public/movies
[root@localhost ~]# chmod o+w /var/public/movies/
[root@localhost ~]# ls -ld /var/public/movies/
drwxr-xrwx. 2 root root 4096 8月 9 21:20 /var/public/movies/
[root@localhost ~]# smbclient -U user1 //192.168.1.98/movies #这里的ip地址写错了，所以登不上，囧。。。
Enter user1's password:
Connection to 192.168.1.98 failed (Error NT_STATUS_HOST_UNREACHABLE)
[root@localhost ~]# chmod o+w /var/public #这句话不加应该也可以的
[root@localhost ~]# service smb restart
关闭 SMB 服务： [确定]
启动 SMB 服务： [确定]
[root@localhost ~]# smbclient -U user1 //192.169.1.98/movies
Enter user1's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 21:20:05 2012
.. D 0 Thu Aug 9 21:20:05 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> pwd
Current directory is \\192.169.1.98\movies\
smb: \> put
1 .gnome2/ .nautilus/ .xauthmGZjkB
8.9samba .gnote/ off .xauthnex4AK
a .gnupg/ .printer-groups.xml .xauthQDpdMq
anaconda-ks.cfg .gstreamer-0.10/ .pulse/ .xauths3w8PP
.bash_history .gtk-bookmarks .pulse-cookie .xauthWHeJNQ
.bash_logout .gvfs/ .recently-used.xbel .xauthzsGCtR
.bash_profile .ICEauthority .ssh/ 公共的/
.bashrc .icons/ .tcshrc 模板/
.cache/ .imsettings.log .themes/ 视频/
.config/ install.log .thumbnails/ 图片/
.cshrc install.log.syslog .viminfo 文档/
.dbus/ .lesshst .xauthEjNjkE 下载/
.esd_auth .lftp/ .xauthH1M7lM 音乐/
.gconf/ .local/ .xauthiHGPWs 桌面/
.gconfd/ loginDir/ .xauthKSE2s2
smb: \> put a
putting file a as \a (0.0 kb/s) (average 0.0 kb/s)
smb: \> ls
. D 0 Thu Aug 9 21:22:21 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir user1dir1
smb: \> ls
. D 0 Thu Aug 9 21:22:26 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> ls
. D 0 Thu Aug 9 21:23:23 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012 #这个文件是在windows下拖进去的
user1dir1 D 0 Thu Aug 9 21:22:26 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]# smbclient -U user2 //192.169.1.98/movies
Enter user2's password:
session setup failed: NT_STATUS_LOGON_FAILURE
[root@localhost ~]# user2没有通过smbpasswd添加，所以登录不上去
-bash: user2没有通过smbpasswd添加，所以登录不上去: command not found
[root@localhost ~]# id user2 #先看本地是否有user2用户
uid=503(user2) gid=503(user2) 组=503(user2)
[root@localhost ~]# id chen #试一下没在valid users中的用户是否能登陆
uid=500(chen) gid=500(chen) 组=500(chen)
[root@localhost ~]# smbpasswd -a user2
New SMB password:
Retype new SMB password:
Added user user2.
[root@localhost ~]# smbpasswd -a chen
New SMB password:
Retype new SMB password:
Added user chen.
[root@localhost ~]# smbclient -U chen //192.169.1.98/movies
Enter chen's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
tree connect failed: NT_STATUS_ACCESS_DENIED #登陆不上
[root@localhost ~]# smbclient -U user2 //192.169.1.98/movies
Enter user2's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 21:23:23 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir user2dir2 #这里user2没在write list里面，但是还是能创建
smb: \> ls
. D 0 Thu Aug 9 21:23:23 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> put 1 #也能上传，这个是不应该的
putting file 1 as \1 (0.0 kb/s) (average 0.0 kb/s)
smb: \> ls
. D 0 Thu Aug 9 21:23:23 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
-----------------------下面是问题解决问题的试验过程，可能有不合理的地方----------------------------
[root@localhost ~]# cat /etc/group |grep user2 #看一下user2是否在root组里，因为刚才write list里有 @root
user2:x:503:
[root@localhost ~]# vim /etc/samba/smb.conf
[root@localhost ~]# 把 @root从write list中删除了 #这里的vim把 @root从write list中删除了，write list只有user1了
-bash: 把 @root从write: command not found
[root@localhost ~]# service smb restart
关闭 SMB 服务： [确定]
启动 SMB 服务： [确定]
[root@localhost ~]# smbclient -U root //192.169.1.98/movies #用root登陆进去看是否能写
Enter root's password:
session setup failed: NT_STATUS_LOGON_FAILURE
[root@localhost ~]# smbpasswd -a root
New SMB password:
Retype new SMB password:
Added user root.
[root@localhost ~]# smbclient -U root //192.169.1.98/movies
Enter root's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 21:49:55 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir rootdir3 #root还是可以写
smb: \> ls
. D 0 Thu Aug 9 21:49:55 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]# tail -11 /etc/samba/smb.conf #看一下配置文件
[movies]
comment = This is a movies world!
path = /var/public/movies
public = no
writable = yes
printable = no
valid users = user1 user2 @root
write list = user1
directory mask = 0744
create mask = 0600
[root@localhost ~]# vim /etc/samba/smb.conf #把writable = yes删掉了
[root@localhost ~]# service smb restart
关闭 SMB 服务： [确定]
启动 SMB 服务： [确定]
[root@localhost ~]# smbclient -U root //192.169.1.98/movies
Enter root's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir rootdir4
NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \rootdir4 #哈哈。。这下写不了了，就是这个writable捣的鬼。
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]# smbclient -U user1 //192.169.1.98/movies
Enter user1's password:
session setup failed: NT_STATUS_LOGON_FAILURE
[root@localhost ~]# smbpasswd -a user1 #上面密码可能输错了，又加了一遍
New SMB password:
Retype new SMB password:
[root@localhost ~]# smbclient -U user1 //192.169.1.98/movies #看看user1能不能写，应该是可以才对
Enter user1's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir user1dir2 #的确可以，可见只要关掉writable，write list就完全起作用了
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir2 D 0 Thu Aug 9 22:11:34 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]# smbclient -U user2 //192.169.1.98/movies #再试试user2可不可以呢？应该也不行
Enter user2's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir2 D 0 Thu Aug 9 22:11:34 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir user2dir3
NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \user2dir3 #不行，再次验证
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir2 D 0 Thu Aug 9 22:11:34 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]#
[root@localhost ~]# --------------测试selinux----------------------^C
[root@localhost ~]# setenforce 1
[root@localhost ~]# smbclient -U user1 //192.169.1.98/movies
Enter user1's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir2 D 0 Thu Aug 9 22:11:34 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> mkdir user1dir3
NT_STATUS_ACCESS_DENIED making remote directory \user1dir3 #开selinux，就不能正常创建了，虽然user1有写权限
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir2 D 0 Thu Aug 9 22:11:34 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]# ls -dZ /var/public/movies/ #看一下movies的标签（上下文）
drwxr-xrwx. root root unconfined_u:object_r:public_content_rw_t:s0 /var/public/movies/
[root@localhost ~]# chcon -t samba_share_t /var/public/movies/ #把标签改为samba_share_t
[root@localhost ~]# ls -dZ /var/public/movies/
drwxr-xrwx. root root unconfined_u:object_r:samba_share_t:s0 /var/public/movies/
[root@localhost ~]# ls -Z /var/public/movies/
-rw-------. user2 user2 unconfined_u:object_r:public_content_rw_t:s0 1
-rw-------. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 8.9samba
-rw-------. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 a
drwxr--r--. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 dir1
drwxr--r--. user2 user2 unconfined_u:object_r:public_content_rw_t:s0 dir2
drwxr--r--. root root unconfined_u:object_r:public_content_rw_t:s0 dir3
drwxr--r--. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 user1dir2
[root@localhost ~]# 这里面的文件都是public_content_rw_t这个标签，先不改，进去看是否能看到^C
[root@localhost ~]# smbclient -U user1 //192.169.1.98/movies
Enter user1's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> mkdir user1dir3 #可以创建了，原来的文件也可以看到，可能跟public_content_rw_t标签兼容有关，若是其他标签可能看不到，这时候需要把文件的标签页改过来
smb: \> ls
. D 0 Thu Aug 9 22:07:58 2012
.. D 0 Thu Aug 9 21:20:05 2012
a 0 Thu Aug 9 21:22:21 2012
user1dir2 D 0 Thu Aug 9 22:11:34 2012
rootdir3 D 0 Thu Aug 9 22:07:58 2012
8.9samba 19725 Thu Aug 9 11:38:38 2012
user1dir1 D 0 Thu Aug 9 21:22:26 2012
user1dir3 D 0 Thu Aug 9 22:25:52 2012
user2dir2 D 0 Thu Aug 9 21:49:38 2012
1 0 Thu Aug 9 21:49:55 2012
40317 blocks of size 262144. 26847 blocks available
smb: \> quit
[root@localhost ~]# smbclient -U user2 //192.169.1.98/movies #再试试改完标签后user2是否可以
Enter user2's password:
Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]
smb: \> mkdir user2dir1
NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \user2dir1 #还是不行的
smb: \> quit
[root@localhost ~]# 
扫一扫
1928
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
