• Linux_搭建Samba服务(认证访问)


    【RHEL8】—SMBserver;【RHEL7】—SMBclient

    !!!测试环境我们首关闭防火墙和selinux(SMBserver和SMBclient都需要)

    [root@localhost ~]# systemctl stop firewalld
    [root@localhost ~]# systemctl disable firewalld
    [root@localhost ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
    [root@localhost ~]# setenforce 0
    

    关于Samba配置文件的说明,访问:https://www.cnblogs.com/520qiangge/p/13413414.html

    一、Samba服务端配置

    1、查看一下服务端IP

    [root@SMBserver ~]# ifconfig 
    ens160: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
            inet 192.168.174.128  netmask 255.255.255.0  broadcast 192.168.174.255
            inet6 fe80::fa13:32e0:3b9f:2196  prefixlen 64  scopeid 0x20<link>
            ether 00:0c:29:cd:6a:1b  txqueuelen 1000  (Ethernet)
            RX packets 1109  bytes 92293 (90.1 KiB)
            RX errors 0  dropped 0  overruns 0  frame 0
            TX packets 658  bytes 77689 (75.8 KiB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
    
    lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
            inet 127.0.0.1  netmask 255.0.0.0
            inet6 ::1  prefixlen 128  scopeid 0x10<host>
            loop  txqueuelen 1000  (Local Loopback)
            RX packets 88  bytes 7600 (7.4 KiB)
            RX errors 0  dropped 0  overruns 0  frame 0
            TX packets 88  bytes 7600 (7.4 KiB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
    

    2、SMBserver安装Samba服务,并设置开机自启

    [root@SMBserver ~]# yum install -y samba
    [root@SMBserver ~]# rpm -qa samba
    samba-4.10.4-1.el8.x86_64
    [root@SMBserver ~]# systemctl start smb nmb
    [root@SMBserver ~]# systemctl enable smb nmb
    Created symlink /etc/systemd/system/multi-user.target.wants/smb.service → /usr/lib/systemd/system/smb.service.
    Created symlink /etc/systemd/system/multi-user.target.wants/nmb.service → /usr/lib/systemd/system/nmb.service.
    

    3、查看端口是否监听

    [root@SMBserver ~]# netstat -tunlp
    Active Internet connections (only servers)
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
    tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1083/sshd           
    tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      18363/smbd          
    tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      18363/smbd          
    tcp6       0      0 :::22                   :::*                    LISTEN      1083/sshd           
    tcp6       0      0 :::445                  :::*                    LISTEN      18363/smbd          
    tcp6       0      0 :::139                  :::*                    LISTEN      18363/smbd          
    udp        0      0 0.0.0.0:68              0.0.0.0:*                           1588/dhclient       
    udp        0      0 192.168.174.255:137     0.0.0.0:*                           18367/nmbd          
    udp        0      0 192.168.174.128:137     0.0.0.0:*                           18367/nmbd          
    udp        0      0 0.0.0.0:137             0.0.0.0:*                           18367/nmbd          
    udp        0      0 192.168.174.255:138     0.0.0.0:*                           18367/nmbd          
    udp        0      0 192.168.174.128:138     0.0.0.0:*                           18367/nmbd          
    udp        0      0 0.0.0.0:138             0.0.0.0:*                           18367/nmbd       
    

    4、创建认证用户(zhangsan),并为zhangsan用户创建smb共享密码

    [root@SMBserver ~]# useradd -M zhangsan
    [root@SMBserver ~]# id zhangsan
    uid=1000(zhangsan) gid=1000(zhangsan) 组=1000(zhangsan)
    [root@SMBserver ~]# smbpasswd -a zhangsan
    New SMB password:             //这里我设置密码123456
    Retype new SMB password:
    Added user zhangsan.
    

    5、创建共享资源,并给予完全共享的(给全部的权限)

    [root@SMBserver ~]# mkdir -p /sambadir/share
    [root@SMBserver ~]# chmod 777 /sambadir/share/
    [root@SMBserver ~]# ll /sambadir/
    总用量 0
    drwxrwxrwx. 2 root root 6 8月   1 15:28 share
    

    6、编辑配置文件

    [root@SMBserver ~]# vim /etc/samba/smb.conf
    [root@SMBserver ~]# cat /etc/samba/smb.conf
    # See smb.conf.example for a more detailed config file or
    # read the smb.conf manpage.
    # Run 'testparm' to verify the config is correct after
    # you modified it.
    
    [global]
    	workgroup = SAMBA
    	security = user
    	passdb backend = tdbsam
    	printing = cups
    	printcap name = cups
    	load printers = yes
    	cups options = raw
    
    [homes]
    	comment = Home Directories
    	valid users = %S, %D%w%S
    	browseable = No
    	read only = No
    	inherit acls = Yes
    
    [printers]
    	comment = All Printers
    	path = /var/tmp
    	printable = Yes
    	create mask = 0600
    	browseable = No
    
    [print$]
    	comment = Printer Drivers
    	path = /var/lib/samba/drivers
    	write list = @printadmin root
    	force group = @printadmin
    	create mask = 0664
    	directory mask = 0775
    
    [share]
    	comment = my first samba-file
    	path = /sambadir/share
    	browseable = yes
    	public = yes
    	writeable = yes
    	write list = zhangsan         //添加这句,允许zhangsan 用户访问该文件目录
    

    7、测试smb.conf文件语法是否错误

    [root@SMBserver ~]# testparm 
    Load smb config files from /etc/samba/smb.conf
    Loaded services file OK.
    Server role: ROLE_STANDALONE
    
    Press enter to see a dump of your service definitions
     //这里提示这样的信息,叫你回车就会显示刚刚写的配置文件的内容,就代表没有语法错误,我就没回车了,节省时间
    

    8、重启smb,nmb服务

    [root@SMBserver ~]# systemctl restart smb
    [root@SMBserver ~]# systemctl restart nmb
    [root@SMBserver ~]# netstat -tunlp
    Active Internet connections (only servers)
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
    tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1083/sshd           
    tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      24451/smbd          
    tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      24451/smbd          
    tcp6       0      0 :::22                   :::*                    LISTEN      1083/sshd           
    tcp6       0      0 :::445                  :::*                    LISTEN      24451/smbd          
    tcp6       0      0 :::139                  :::*                    LISTEN      24451/smbd          
    udp        0      0 0.0.0.0:68              0.0.0.0:*                           1588/dhclient       
    udp        0      0 192.168.174.255:137     0.0.0.0:*                           24462/nmbd          
    udp        0      0 192.168.174.128:137     0.0.0.0:*                           24462/nmbd          
    udp        0      0 0.0.0.0:137             0.0.0.0:*                           24462/nmbd          
    udp        0      0 192.168.174.255:138     0.0.0.0:*                           24462/nmbd          
    udp        0      0 192.168.174.128:138     0.0.0.0:*                           24462/nmbd          
    udp        0      0 0.0.0.0:138             0.0.0.0:*                           24462/nmbd          

    到这认证访问的服务端就配置完成

    二、配置客户端

    1、SMBclient查看是否有安装samba-client,cifs-utils软件包

    [root@smbclient ~]# yum info samba-client cifs-utils
    已加载插件:product-id, search-disabled-repos, subscription-manager
    This system is not registered with an entitlement server. You can use subscription-manager to register.
    可安装的软件包
    名称    :cifs-utils
    架构    :x86_64
    版本    :6.2
    发布    :10.el7
    大小    :85 k
    源    :dvd
    简介    : Utilities for mounting and managing CIFS mounts
    网址    :http://linux-cifs.samba.org/cifs-utils/
    协议    : GPLv3
    描述    : The SMB/CIFS protocol is a standard file sharing protocol widely deployed
             : on Microsoft Windows machines. This package contains tools for mounting
             : shares on Linux using the SMB/CIFS protocol. The tools in this package
             : work in conjunction with support in the kernel to allow one to mount a
             : SMB/CIFS share onto a client and use it as if it were a standard Linux
             : file system.
    
    名称    :samba-client
    架构    :x86_64
    版本    :4.6.2
    发布    :8.el7
    大小    :597 k
    源    :dvd
    简介    : Samba client programs
    网址    :http://www.samba.org/
    协议    : GPLv3+ and LGPLv3+
    描述    : The samba-client package provides some SMB/CIFS clients to complement
             : the built-in SMB/CIFS filesystem in Linux. These clients allow access
             : of SMB/CIFS shares and printing to SMB/CIFS printers.
    

    2、安装samba-client,cifs-utils软件包

    [root@smbclient ~]# yum install -y samba-client cifs-utils
    [root@smbclient ~]# rpm -qa samba-client cifs-utils
    cifs-utils-6.2-10.el7.x86_64
    samba-client-4.6.2-8.el7.x86_64
    

    3、客户端以zhangsan用户身份查看samba服务器有哪些共享资源

    [root@smbclient ~]# smbclient -L //192.168.174.128 -U zhangsan
    Enter SAMBAzhangsan's password:               //输入刚刚给zhangsan用户创建的smb共享密码
    Domain=[SMBSERVER] OS=[Windows 6.1] Server=[Samba 4.10.4]
    
    	Sharename       Type      Comment
    	---------       ----      -------
    	print$          Disk      Printer Drivers
    	share           Disk      my first samba-file
    	IPC$            IPC       IPC Service (Samba 4.10.4)
    	zhangsan        Disk      Home Directories
    Domain=[SMBSERVER] OS=[Windows 6.1] Server=[Samba 4.10.4]
    
    	Server               Comment
    	---------            -------
    
    	Workgroup            Master
    	---------            -------
    	SAMBA                SMBSERVER
    

    4、客户端创建挂载目录

    [root@smbclient ~]# mkdir /smbdir
    

    5、客户端以zhangsan用户身份挂载服务端共享的资源目录

    [root@smbclient ~]# mount.cifs -o username=zhangsan,password=123456 //192.168.174.128/share /smbdir/
     //这里不需要输入密码
    
    如果密码错误会会提示报错
    错误示例:
    [root@smbclient ~]# mount.cifs -o username=zhangsan,password=123 //192.168.174.128/share /smbdir/
    mount error(13): Permission denied
    Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
     //这里就会显示拒绝访问
    

    6、查看是否挂载成功

    [root@smbclient ~]# df -h
    文件系统                 容量  已用  可用 已用% 挂载点
    /dev/mapper/rhel-root     50G  1.1G   49G    3% /
    devtmpfs                 901M     0  901M    0% /dev
    tmpfs                    912M     0  912M    0% /dev/shm
    tmpfs                    912M  8.7M  904M    1% /run
    tmpfs                    912M     0  912M    0% /sys/fs/cgroup
    /dev/sr0                 3.8G  3.8G     0  100% /mnt
    /dev/mapper/rhel-home     27G   33M   27G    1% /home
    /dev/sda1               1014M  143M  872M   15% /boot
    tmpfs                    183M     0  183M    0% /run/user/0
    //192.168.174.128/share   50G  2.0G   49G    4% /smbdir
     //最后一行说明挂载成功

    三、测试

    1、首先在客户端创建两个文件,然后在服务端查看

    //SMBclient
    [root@smbclient ~]# cd /smbdir/
    [root@smbclient smbdir]# ls
    [root@smbclient smbdir]# touch {file1,file2}
    [root@smbclient smbdir]# ls
    file1  file2
    
    //SMBserver
    [root@SMBserver ~]# cd /sambadir/share/
    [root@SMBserver share]# ls
    file1  file2
    

    2、在windows的资源管理器上登录

     

     

     

  • 相关阅读:
    Golang 学习之路
    Kubernetes 资源对象之DaemonSet
    Spring Cloud服务注册中心交付至kubernetes
    自动化运维之Ansible入门
    MySQL 高可用之主从复制
    Kubernetes 强大的namespace
    SaltStack RESTful API操作
    Kubernetes 服务自动发现CoreDNS
    2个月……
    一次游玩与这两周的一些感想
  • 原文地址:https://www.cnblogs.com/itwangqiang/p/13413950.html
Copyright © 2020-2023  润新知