一个samba设置案例

SAMBA方案的工作目标
有4个小组:develop productdesign test system
1.system组具有管理所有samba空间的权限
2.各部门的私有空间:各小组拥有自己的空间,除了小组成员及system组外,其它用户不可访问
3.资料库:所有用户都有读权限,不能写入
4.develop组与test组的共享空间,只有develop组与test组有权限,其它用户都不能访问
5.公共临时空间,所有用户都有读,写,删除的权限

第一步:创建目录
# mkdir -p /data/share
# cd /data/share
# mkdir develop productdesign test library develop_testrw temp
# ls develop develop_testrw  productdesign test library temp

第二步:添加用户与组
# groupadd system
# groupadd develop
# groupadd productdesign
# groupadd test
# groupadd develop_test
# adduser -g develop -G develop_test -d /data/share/develop -s /sbin/nologin develop
# adduser -g productdesign -G develop_test -d /data/share/productdesign -s /sbin/nologin productdesign
# adduser -g test -G develop_test -d /data/share/test -s /sbin/nologin test
# adduser -g system -d /data/share/ -G system,develop,productdesign,test,develop_test -d /data/share/ -s /sbin/nologin test
再用smbpasswd修改用户的密码
# smbpasswd -a system
.........

 

第三步:修改相关目录的权限与归属
# chmod 755 /data/share
# chown system.system /data/share
# cd /data/share
# chmod 2770 develop develop_testrw productdesign test library temp
# chown develop.system develop
# chown productdesign.system productdesign
# chown test.system test
# chown system.develop_test develop_testrw
# chown system.system library
# chmod 755 library
# chown system.sytem temp
# chmod 3777 temp

第四步:修改samba配置文件
[global]
workgroup = system
netbios name = system
server string = Linux samba server
security = share

[system]
comment = systemadmin
path = /data/share/
create mask = 0664
writeable = yes
valid users = system
browseable = yes

[library]
path = /data/share/library
writeable = yes
browseable = yes
guest ok = yes

[temp]
path = /data/share/temp
writeable = yes
browseable = yes
guest ok = ye

[develop_testrw]
commment = develop_testrw
path =/data/share/develop_testrw
creat mask = 0664
#creat mask 是用户创建文件时的权限掩码,对用户可读可写,对其它用户可读;
directory mask = 0775
#directory mask 是用来设置用户创建目录时的权限掩码,意思是对于用户和用户组可读可写,对其它用户可读可执行;
writeable = yes
valid users = system,@develop_test
#@develop_test是用户组
browseable = yes

[develop]
comment = develop
path = /data/share/develop
create mask = 0664
directory mask = 0775
writeable = yes
valid users = develop,@system
browseable = yes

[productdesign]
comment = develop
path = /data/share/productdesign
create mask = 0664
directory mask = 0775
writeable = yes
valid users = productdesign,@system
browseable = yes

[test]
comment = develop
path = /data/share/test
create mask = 0664
directory mask = 0775
writeable = yes
valid users = test,@system
browseable = yes