基础服务——Samba文件共享服务

 

服务理论：

在windows网络环境中，主机之间进行文件和打印机共享是通过微软公司自己的SMB/CIFS网络协议实现的，SMB（Server Message Block，服务消息块）和CIFS（Common Internet File System，通用互联网文件系统）协议是微软的私有协议，在Samba项目出现之前，并不能直接与Linux/UNIX系统进行通信。

Samba是著名的开源软件项目之一，它在Linux/UNIX系统中实现了微软的SMB/CIFS网络协议，从而使得跨平台的文件共享变得更加容易。在部署windows/Linux/UNIX混合平台的企业环境时，选用Samba可以很好的解决不同系统之间的文件互访问题。

 

1、samba软件包的构成：

在Centos7系统的DVD安装光盘中可以找到与Samba相关的几个软件包，主要包括服务软件Samba，客户端软件samba-client，用于提供服务端和客户端程序的公共组件samba-common。

  大部分软件包已经随Centos7系统默认安装好了，用户可以查询系统中samba相关软件包的安装情况。

 

2、搭建Samba

实验环境：本地YUM的一台Centos虚拟机

实验步骤：

 

搭建Samba文件共享服务

 

[root@localhost ~]# rpm -qa | grep "^samba"       查看samba所需要的依赖包

samba-client-libs-4.4.4-9.el7.x86_64

samba-common-4.4.4-9.el7.noarch

samba-common-libs-4.4.4-9.el7.x86_64

samba-client-4.4.4-9.el7.x86_64

 

[root@localhost yfr]# cd /media/dvd/Packages/                      进入我们的yum库文件

[root@localhost Packages]# rpm -ivh pytalloc-2.1.6-1.el7.x86_64.rpm 下载依赖包pytalloc  

warning: pytalloc-2.1.6-1.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY

Preparing...                          ################################# [100%]

Updating / installing...

1:pytalloc-2.1.6-1.el7             ################################# [100%]

[root@localhost Packages]# rpm -ivh samba-libs-4.4.4-9.el7.x86_64.rpm下载依赖包samba-libs

warning: samba-libs-4.4.4-9.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY

Preparing...                          ################################# [100%]

Updating / installing...

1:samba-libs-0:4.4.4-9.el7         ################################# [100%] 

下载依赖包sam-common-tools：    

[root@localhost Packages]# rpm -ivh samba-common-tools-4.4.4-9.el7.x86_64.rpm

warning: samba-common-tools-4.4.4-9.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY

Preparing...                          ################################# [100%]

Updating / installing...

 1:samba-common-tools-0:4.4.4-9.el7 ################################# [100%]

[root@localhost Packages]# rpm -ivh samba-4.4.4-9.el7.x86_64.rpm  下载并且安装samba

warning:samba-4.4.4-9.el7.x86_64.rpm:Header V3 RSA/SHA256 Signature, key IDf4a80eb5:NOKEY

Preparing...              #################################[100%]

Updating / installing...

1:samba-0:4.4.4-9.el7              ################################# [100%]

 

[root@localhost Packages]# systemctl start smb nmb           启动samba

[root@localhost Packages]# netstat -anput | grep smb                  搜索端口查看是否启动smb

tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      4320/smbd          

tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      4320/smbd          

tcp6       0      0 :::139                  :::*                    LISTEN      4320/smbd          

tcp6       0      0 :::445                  :::*                    LISTEN      4320/smbd          

[root@localhost Packages]# netstat -anput | grep nmb         搜索端口查看是否启动nmb

udp        0      0 192.168.122.255:137     0.0.0.0:*                           4318/nmbd          

udp        0      0 192.168.122.1:137       0.0.0.0:*                           4318/nmbd          

udp        0      0 192.168.199.255:137     0.0.0.0:*                           4318/nmbd           

udp        0      0 192.168.199.52:137      0.0.0.0:*                           4318/nmbd          

udp        0      0 0.0.0.0:137             0.0.0.0:*                           4318/nmbd          

udp        0      0 192.168.122.255:138     0.0.0.0:*                           4318/nmbd          

udp        0      0 192.168.122.1:138       0.0.0.0:*                           4318/nmbd          

udp        0      0 192.168.199.255:138     0.0.0.0:*                           4318/nmbd          

udp        0      0 192.168.199.52:138      0.0.0.0:*                           4318/nmbd          

udp        0      0 0.0.0.0:138             0.0.0.0:*                           4318/nmbd          

 

[root@localhost Packages]# grep -v '#' /etc/samba/smb.conf | grep -v "^;" | grep -v "^$"

 [global]                                                          全局参数

      workgroup = SAMBA                           工作组名称

         security = user                                      安全指标

         passdb backend = tdbsam                 用户数据库

      printing = cups                                     

      printc printing ap name = cups

      load printers = yes                              

      cups options = raw                             

[homes]                                                           家目录参数

      comment = Home Directories         

      valid users = %S, %D%w%S

      browseable = No                                 

      read only = No

      inherit acls = Yes

[printers]                                                      共享打印机的配置

      comment = All Printers

      path = /var/tmp

      printable = Yes

      create mask = 0600

      browseable = No

[print$]                                                          打印参数

      comment = Printer Drivers

         path = /var/lib/samba/drivers

         write list = root

         create mask = 0664

         directory mask = 0775

 

[root@localhost Packages]# vim /etc/samba/smb.conf

9         map to guest = Bad user

41 [centos7]

42         comment = centos 7.3 DVD directory      

43         path = /media/dvd              共享的路径

44         public = yes                           是否公开

45         read only = yes                     是否可读

46         writable = no                        是否写入

[root@localhost Packages]# systemctl restart smb nmb       重启samba服务

[root@localhost Packages]# testpram          检查samba服务配置文件是否正确

Load smb config files from /etc/samba/smb.conf

rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)      这里显示报错

Processing section "[homes]"

Processing section "[printers]"

Processing section "[print$]"

Processing section "[centos7]"

Loaded services file OK.

Server role: ROLE_STANDALONE

 

Press enter to see a dump of your service definitions

 

# Global parameters

[global]

workgroup = SAMBA

printcap name = cups

map to guest = Bad User

security = USER

idmap config * : backend = tdb

cups options = raw

 

 

[homes]

comment = Home Directories

browseable = No

inherit acls = Yes

read only = No

valid users = %S %D%w%S

 

[printers]

comment = All Printers

path = /var/tmp

browseable = No

printable = Yes

create mask = 0600

 

[print$]

comment = Printer Drivers

path = /var/lib/samba/drivers

create mask = 0664

directory mask = 0775

write list = root

 

[centos7]

comment = centos 7.3 DVD directory

path = /media/dvd

guest ok = Yes

如果出现16384报错，就是缺少了windows的配置文件

[root@localhost Packages]# vim /etc/security/limits.conf           去更改配置文件

#@student        -       maxlogins       4

 60 *                -       nofile          16384

 61 # End of file

[root@localhost Packages]# systemctl stop firewalld.service     关闭防火墙

[root@localhost Packages]# setenforce 0                                            关闭selinux防火墙

 

客户端连接

[root@localhost yfr]# smbclient //192.168.199.52/centos7

Enter lws's password:

Domain=[SAMBA] OS=[Windows 6.1] Server=[Samba 4.4.4]

smb: \>

smb: \> ls

  .                                   D        0  Mon Dec  5 21:20:27 2016

  ..                                  D        0  Wed Aug 28 19:35:58 2019

  CentOS_BuildTag                     N       14  Mon Dec  5 21:02:38 2016

  EFI                                 D        0  Mon Dec  5 21:20:19 2016

  EULA                                N      215  Thu Dec 10 06:35:46 2015

  GPL                                 N    18009  Thu Dec 10 06:35:46 2015

  images                              D        0  Mon Dec  5 21:47:24 2016

  isolinux                            D        0  Mon Dec  5 21:20:19 2016

  LiveOS                              D        0  Mon Dec  5 21:20:19 2016

  Packages                            D        0  Mon Dec  5 21:35:41 2016

  repodata                            D        0  Mon Dec  5 21:37:18 2016

  RPM-GPG-KEY-CentOS-Testing-7        N     1690  Thu Dec 10 06:35:46 2015

  RPM-GPG-KEY-CentOS-7                N     1690  Thu Dec 10 06:35:46 2015

  TRANS.TBL                           R     2883  Mon Dec  5 21:55:45 2016

  .discinfo                           H       29  Mon Dec  5 21:17:03 2016

  .treeinfo                           H      366  Mon Dec  5 21:20:27 2016

 

                   4276440 blocks of size 1024. 0 blocks available

smb: \> quit    退出

当完成匿名访问之后，我们现在换一种访问方式，换成用户访问

 

用户访问操作步骤如下：

 

 

服务器：

[root@localhost Packages]# useradd abc                创建用户

[root@localhost Packages]# pdbedit -a -u abc        让abc这个用户添加到samba中

new password:                                                                 新的密码

retype new password:                                                   重新输入密码

Unix username:        abc                                      unix 用户名

NT username:                                                     NT 用户名

Account Flags:        [U          ]

User SID:             S-1-5-21-3222340337-1416471442-3454317994-1000

Primary Group SID:    S-1-5-21-3222340337-1416471442-3454317994-513

Full Name:           

Home Directory:       \\localhost\abc                 主目录

HomeDir Drive:                                                    

Logon Script:        

Profile Path:         \\localhost\abc\profile      

Domain:               LOCALHOST

Account desc:        

Workstations:        

Munged dial:         

Logon time:           0

Logoff time:          Wed, 06 Feb 2036 23:06:39 CST                登陆时间

Kickoff time:         Wed, 06 Feb 2036 23:06:39 CST                 

Password last set:    Wed, 28 Aug 2019 22:45:48 CST                  修改密码时间

Password can change:  Wed, 28 Aug 2019 22:45:48 CST

Password must change: never                                                       永不更改密码

Last bad password   : 0

Bad password count  : 0

Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF                        登陆时间

当看到这样的数据弹出时候，说明创建成功

 

[root@localhost Packages]# pdbedit -L abc 查看一下

abc:1001：说明成功了

[root@localhost Packages]# useradd 123                再创一个用户

[root@localhost Packages]# pdbedit -L 123             查看一下创建的用户

Username not found!                                                     没有显示，因为没有添加到samba中

[root@localhost Packages]# pdbedit -a -u 123        添加到samba中

new password:                 

retype new password:

Unix username:        123

NT username:         

Account Flags:        [U          ]

User SID:             S-1-5-21-3222340337-1416471442-3454317994-1001

Primary Group SID:    S-1-5-21-3222340337-1416471442-3454317994-513

Full Name:           

Home Directory:       \\localhost\123

HomeDir Drive:       

Logon Script:        

Profile Path:         \\localhost\123\profile

Domain:               LOCALHOST

Account desc:        

Workstations:        

Munged dial:         

Logon time:           0

Logoff time:          Wed, 06 Feb 2036 23:06:39 CST

Kickoff time:         Wed, 06 Feb 2036 23:06:39 CST

Password last set:    Wed, 28 Aug 2019 22:49:15 CST

Password can change:  Wed, 28 Aug 2019 22:49:15 CST

Password must change: never

Last bad password   : 0

Bad password count  : 0

Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

[root@localhost Packages]# pdbedit –L

abc：1001：

123：1002：

 

修改一下主配文件，然后我们把之前的centos7去掉，换成share

 

[root@localhost Packages]#  vim /etc/samba/smb.conf     

6 [global]

 7         workgroup = SAMBA

 8         security = user

 9 #       map to guest = Bad user

 10         hosts allow = 192.168.199 192.168.220

 11         hosts deny = 192.168.1 192.168.2

 12         passdb backend = tdbsam

 13

40 [share]

 41         comment = share file

 42         path = /share

 43         public = no

 44         read only = yes

 45         valid users = abc 123

 46         write list = 123

 47         directory mask = 0755

 48         create mask = 0644

[root@localhost Packages]# mkdir /share

[root@localhost Packages]# chmod 777  /share           给他777权限

[root@localhost Packages]# systemctl restart smb nmb       重启服务

现在回到客户端：

[root@localhost yfr]#  smbclient -U 123 //192.168.199.4/share

Enter 123's password:

Domain=[SAMBA] OS=[Windows 6.1] Server=[Samba 4.4.4]

smb: \> mkdir 1.txt

smb: \> ls

  .                      D        0  Wed Aug 28 23:19:19 2019

  ..                                 DR        0  Wed Aug 28 23:05:03 2019

  1.txt                               D        0  Wed Aug 28 23:19:19 2019

 

                   17811456 blocks of size 1024. 14183608 blocks available

smb: \> quit     退出

然后我们回到服务端的共享目录查看是否有1.txt

[root@localhost Packages] #cd /share

[root@localhost Packages] #ls

1. txt

当看到1.txt时候，实验成功！