1、简介

配置samba共享服务器，只允许10.0.1.1这个ip访问samba服务器的共享功能，同时设置共享文件夹中上传的文件不能被修改和删除，需要用到linux的文件扩展属性

2、关闭防火墙

vim /etc/selinux/config

"SELINUX=disabled"或者"setenforce 0"

3、配置iptables策略

iptables -A INPUT -p tcp -s 10.0.1.1 --dport 138 -j ACCEPT

iptables -A INPUT -p tcp -s 10.0.1.1 --dport 139 -j ACCEPT

iptables -A INPUT -p tcp -s 10.0.1.1 --dport 145 -j ACCEPT

service iptables save

service iptables restart

iptables -L -n --line-number

4、安装配置samba

# yum install samba samba-client samba-common

# groupadd jiaoyi

# useradd -g jiaoyi user

# smbpasswd -a user

# mkdir /customer_file

# chmod 777 /customer_file

# chmod +t /customer_file #设置sticky bit位

# mv /etc/samba/smb.conf /etc/samba/smb.conf.bak

# vim /etc/samba/smb.conf

[global]

netbios name = Samba

workgroup = WORKGROUP

server string = Customer File Server

log file = /var/log/samba/log.%m

max log size = 50

security = user

smb passwd file = /etc/samba/smbpasswd


display charset = UTF-8

unix charset = UTF-8

dos charset = UTF-8

deadtime = 100

max connections = 100


[customer_file]

    comment = customer file folder

    path = /customer_file

    public = no

    browseable = yes

    writable =yes

    create mask = 1400

    directory mask = 1400

    valid users = @root,@jiaoyi

# service smb start