在Linux CentOS 7上配置Samba服务器过程及所遇问题的解决办法

1.关闭防火墙

systemctl stop firewalld
systemctl status firewalld

2.配置本地yum源

[root@localhost network-scripts]# mkdir /mnt/cdrom
[root@localhost network-scripts]# mount /dev/sr0 /mnt/cdrom

问题一：mount: 在 /dev/sr0 上找不到媒体

解决办法：
点开设置，将已连接勾选，点击确定

再次输入命令

挂载成功

[root@localhost /]# cd /etc/yum.repos.d           //进入yum源目录
[root@localhost yum.repos.d]# ls                  //查看其中文件 
CentOS-Base.repo  CentOS-Debuginfo.repo  CentOS-Media.repo    CentOS-Vault.repo
CentOS-CR.repo    CentOS-fasttrack.repo  CentOS-Sources.repo
[root@localhost yum.repos.d]# mkdir backup        //新建目录backup
[root@localhost yum.repos.d]# mv *.repo ./backup  //将以.repo文件,移动到backup下
[root@localhost yum.repos.d]# vim dvd.repo        //新建并编辑dvd.repo
[dvd]
name=dvd
baseurl=file:///mnt/cdrom
gpgcheck=0
enable=1

清除缓存

[root@localhost yum.repos.d]# yum clean all

建立缓存

[root@localhost yum.repos.d]# yum makecache

安装Samba服务器

[root@localhost yum.repos.d]# yum install -y samba
[root@localhost yum.repos.d]# rpm -qa | grep samba

看见安装了七个包,表示安装成功
修改主配置文件

[root@localhost ~]# cd /etc/samba
[root@localhost samba]# ls
lmhosts  smb.conf  smb.conf.example
[root@localhost samba]# cp smb.conf smb.conf.bak1
[root@localhost samba]# vim smb.conf

更改配置文件中的内容

[global]
        workgroup = WORKGROUP
        security = user
        netbios name = Host1
        interfaces = 192.168.29.0/24
        hosts allow = 127. 192.168.29.
        log file = /var/log/samba/log.%m
        max log size = 500
        security = user
        map to guest = Bad User
        passdb backend = tdbsam
        printing = cups
        printcap name = cups
        load printers = yes
        cups options = raw

[homes]
        comment = Home Directories
        valid users = %S, %D%w%S
        browseable = No
        read only = No
        inherit acls = Yes
        
[tmp]
        comment = Template Directories
        path = /tmp
        browseable = yes
        writable = yes
        guest ok = yes
        
[printers]
        comment = All Printers
        path = /var/tmp
        printable = Yes
        create mask = 0600
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/drivers
        write list = @printadmin root
        force group = @printadmin
        create mask = 0664
        directory mask = 0775
      
[public]
        comment = public test
        path = /public
        browseable = yes
        writable = yes
        guest ok =yes

配置完成后保存，检查配置是否正确

[root@localhost samba]# testparm  /etc/samba/smb.conf

启动服务器并查看服务器是否打开

[root@localhost samba]# systemctl start smb.service
[root@localhost samba]# systemctl start nmb.service
[root@localhost samba]# systemctl enable smb.service
Created symlink from /etc/systemd/system/multi-user.target.wants/smb.service to /usr/lib/systemd/system/smb.service.
[root@localhost samba]# systemctl enable nmb.service
Created symlink from /etc/systemd/system/multi-user.target.wants/nmb.service to /usr/lib/systemd/system/nmb.service.
[root@localhost samba]# systemctl status smb.service

看到服务已启动
查看本地共享情况,输入命令smbclient -L //127.0.0.1

下载samba客户端安装包

[root@localhost /]# yum install samba-client cifs-utils

打开服务器，并检查是否开启成功

[root@localhost samba]# systemctl start smb.service
[root@localhost samba]# systemctl start nmb.service
[root@localhost samba]# systemctl enable smb.service
Created symlink from /etc/systemd/system/multi-user.target.wants/smb.service to /usr/lib/systemd/system/smb.service.
[root@localhost samba]# systemctl enable nmb.service
Created symlink from /etc/systemd/system/multi-user.target.wants/nmb.service to /usr/lib/systemd/system/nmb.service.
[root@localhost samba]# systemctl status smb.service

确认打开后，查看共享

新建共享目录,移动一些文件到/mnt/smb中

[root@localhost samba]# mkdir /mnt/smb
[root@localhost samba]# mount -t cifs //192.168.29.12/tmp /mnt/smb/
Password for smy@//192.168.29.12/tmp:  ****
mount error(13): Permission denied
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

查看挂载文件

在windows中访问共享
输入\192.168.29.11
查看内容

单击tmp，右键选择映射网络驱动器


看到tmp

使用用户名访问（需要密码的分享），每用户可以登陆访问（可读写）共享目录project，但Samba服务器上自己的主目录，只能用户自己访问（可读写），其他用户无权访问。

Samba 服务器上创建共享目录/home/project 并查看该文件夹的权限

[root@localhost ~]# mkdir /home/project
[root@localhost ~]# ll -d /home/project

创建一个属组jishubu，更改文件夹的属组，并设置权限2770 2表示强制位，说明任何用户再此目录下建立的文件，属组都与该组相同，并查看目录权限

[root@localhost ~]# groupadd jishubu
[root@localhost ~]# chgrp jishubu /home/project
[root@localhost ~]# chmod 2770 /home/project
[root@localhost ~]# ll -d /home/project
drwxrws---. 2 root jishubu 6 9月  12 10:19 /home/project

更改配置文件smb.conf.
添加以下内容，并保存

[project]
        comment = jishubu
        path = /home/project
        browseable = yes
        writable = yes
        write list = @jishubu

创建共享用户，根据权限访问共享目录，其属组为jishubu

[root@localhost samba]# useradd -s /sbin/nologin -G jishubu zhangsan
[root@localhost samba]# useradd -s /sbin/nologin -G jishubu lisi
[root@localhost samba]# useradd -s /sbin/nologin -G jishubu wangwu

为以上用户设置密码

[root@localhost samba]# echo 1234 | passwd --stdin zhangsan
更改用户 zhangsan 的密码 。
passwd：所有的身份验证令牌已经成功更新。
[root@localhost samba]# echo 1234 | passwd --stdin lisi
更改用户 lisi 的密码 。
passwd：所有的身份验证令牌已经成功更新。
[root@localhost samba]# echo 1234 | passwd --stdin wangwu
更改用户 wangwu 的密码 。
passwd：所有的身份验证令牌已经成功更新。

创建和管理Samba的共享用户，并设置密码

[root@localhost samba]# pdbedit -a -u zhangsan
new password:
retype new password:
Unix username:        zhangsan
NT username:          
Account Flags:        [U          ]
User SID:             S-1-5-21-2704764923-2834775023-388189370-1000
Primary Group SID:    S-1-5-21-2704764923-2834775023-388189370-513
Full Name:            
Home Directory:       \\host1\zhangsan
HomeDir Drive:        
Logon Script:         
Profile Path:         \\host1\zhangsan\profile
Domain:               HOST1
Account desc:         
Workstations:         
Munged dial:          
Logon time:           0
Logoff time:          三, 06 2月 2036 23:06:39 CST
Kickoff time:         三, 06 2月 2036 23:06:39 CST
Password last set:    六, 12 9月 2020 10:36:03 CST
Password can change:  六, 12 9月 2020 10:36:03 CST
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

其他用户同理
添加一个非jishubu组的成员samba

[root@localhost samba]# useradd -s /sbin/nologin samba
[root@localhost samba]# pdbedit -a -u samba
new password:
retype new password:

设置完用户及密码后查看所有共享目录

[root@localhost samba]# pdbedit -L
zhangsan:1001:
wangwu:1003:
lisi:1002:
samba:1004:

补充：
使用smbpasswd命令，修改共享用户的密码
使用 pdbedit -x 用户名 删除samba共享用户

重启服务

[root@localhost samba]# systemctl restart smb
[root@localhost samba]# systemctl restart nmb

在本地查看结果

[root@localhost samba]# smbclient -L //192.168.29.11 -U zhangsan