脚本内容如下:
#!/bin/sh
apt-get install samba -y
mkdir -p /samba/share
mkdir -p /samba/subdir
useradd -s /usr/sbin/nologin smbsubadmin
echo "123456\n123456" | smbpasswd -a smbsubadmin
useradd -g smbsubadmin -s /sbin/nologin smbsubuser
echo "123456\n123456" | smbpasswd -a smbsubuser
useradd -s /sbin/nologin smbadmin
echo "123456\n123456" | smbpasswd -a smbadmin
chown smbsubadmin.smbsubadmin /samba/subdir
chown smbadmin.smbadmin /samba/share
chmod 1775 /samba/subdir
chmod -R 0775 /samba/share
cp /etc/samba/smb.conf /etc/samba/smb.conf.bak
cat > /etc/samba/smb.conf << EOF
[global]
workgroup = WORKGROUP
server string = Samba Server Version %v
netbios name = SAMBA
log file = /var/log/samba/%m.log
max log size = 50
security = user
passdb backend = tdbsam
[subdir]
comment = This is a directory of smbsub.
path = /samba/subdir
public = no
admin users = smbsubadmin
valid users = @smbsubadmin
writable = yes
create mask = 0750
directory mask = 0750
[share]
comment = This is a share directory.
path = /samba/share
public = no
valid users = smbadmin,@smbsubadmin
writable = yes
create mask = 0755
directory mask = 0755
EOF
#新增入站规则
#iptables -A INPUT -p tcp -m multiport --dports 139,445 -j ACCEPT
#iptables -A INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
#新增出站规则
#iptables -A OUTPUT -p tcp -m multiport --sports 139,445 -j ACCEPT
#iptables -A OUTPUT -p tcp -m multiport --sports 137,138 -j ACCEPT
#iptables-save
#将下面语句加到/etc/rc.local中进行开机启动控制
/etc/init.d/samba restart
/etc/init.d/ufw stop