搭建用戶認證Samba共享服務器

搭建用戶認證Samba共享服務器

一、Samba介紹

二、環境說明

主機名	IP	環境系統
服務器	192.168.69.133	cenos7圖形化
客戶端	192.168.69.134	cenos7最小化

三、Samba安裝設置

1.配置SAMBA
服務端配置
新建samba用戶

[root@localhost ~]# yum -y install samba-*
[root@localhost ~]# useradd jerry -s /sbin/nologin
[root@localhost ~]# smbpasswd -a jerry

2.新建共享目錄，賦予權限

[root@localhost ~]# mkdir /date/samba/share -p
[root@localhost ~]# chown jerry.jerry /date/samba/share -R

3.修改配置文件，在/etc/samba/smb.conf的配置文件最下面添加

[root@localhost ~]# cat /etc/samba/smb.conf
[samba-share]
    comment = This is share
    path = /date/samba/share
    public = no
    writable = yes

4.映射系統用戶，並將路徑寫入smb.conf配置中

[root@localhost ~]# echo "jerry = qinyong" > /etc/samba/smbusers //將系統用戶jerry映射爲qinyong虛擬用戶
[root@localhost ~]# vi   /etc/samba/smb.conf
[global]
    workgroup = SAMBA
    security = user
    map to guest = Bad User
    username map = /etc/samba/smbusers   \\增加項
    passdb backend = tdbsam`
[root@localhost ~]# systemctl restart smb.service   //重啓服務

客戶端驗證,查看共享目錄
1.客戶端查看服務端哪些共享資源

[root@localhost ~]# smbclient -L 192.168.69.133 -U qinyong //需要輸入密碼
Enter SAMBA\qinyong's password: 
    Sharename       Type      Comment
    ---------       ----      -------
    samba-shard     Disk      This is shard
    samba-share     Disk      This is share
    IPC$            IPC       IPC Service (Samba 4.7.1)
Reconnecting with SMB1 for workgroup listing.

    Server               Comment
    ---------            -------

    Workgroup            Master
    -----

2.掛載

[root@localhost ~]# mkdir /samba -p
[root@localhost ~]# mount -t cifs -o username=qinyong,password=1 //192.168.69.133/samba-share /samba/   

四、檢測驗證結果

1.在客戶端創建，在服務端讀取

[root@localhost ~]# echo "hehe" >> 123 //客戶端創建
[root@localhost ~]# ls
123
[root@localhost ~]# cat /date/samba/share/123  //服務驗證該用戶有讀寫權限

2.自動掛載

[root@localhost ~]# vim /etc/fstab
//192.168.69.133/samba-share /samba             cifs    defaults,_netdev,username=qinyong,password=1 0 0
[root@samba-client ~]# mount -a
[root@samba-client ~]# df
Filesystem                   1K-blocks    Used Available Use% Mounted on
/dev/sda2                      865676 155344   753453  22% /
devtmpfs                        490012       0    494352   0% /dev
tmpfs                           499860       0    4435340   0% /dev/shm
tmpfs                           499860    6880    4354350   2% /run
tmpfs                           499860       0    493440  0% /sys/fs/cgroup
/dev/sda1                      1134546  135675    83434  12% /boot
tmpfs                            99972       0     14356  12% /run/user/0
//192.168.69.133/samba-shard  1832345 3215464  1326434 37% /cifs
//192.168.69.133/samba-share  1832345 3215464  1326434 37% /samba  //掛載成功

3.驗證客戶端重啓掛載成功

五、Samba服務模擬實驗

在server上配置samba服務
samba服務器必須是STAFF工作組的一個成員
共享/common目錄,共享名爲common
只有example.com域內的客戶端可以訪問common共享、
common必須是可以瀏覽的
用戶natasha必須能夠讀取共享中的內容,如果需要的話,驗證密碼是:tangkai
1.服務端設置

[root@server0 ~]# yum -y install samba*
[root@server0 ~]# mkdir /common
[root@server0 ~]# vi /etc/samba/smb.conf
workgroup = STAFF
[common] 
   path = /common
   browseable = yes
[root@server0 ~]# systemctl mask iptables.service ebtables.service   
[root@server0 ~]# firewall-cmd --add-rich-rule 'rule family=ipv4 source address=172.25.0.0/24 service name=samba  accept ' --permanent
success
[root@server0 ~]# firewall-cmd --add-rich-rule 'rule family=ipv4 source address=172.25.0.0/24 service name=samba-client  accept ' --permanent
success
[root@server0 ~]# firewall-cmd --reload
success
[root@server0 ~]# useradd natasha
[root@server0 ~]# smbpasswd  -a natasha
tangkai
[root@server0 ~]# setsebool  -P samba_enable_home_dirs  yes
setsebool: illegal value yes for boolean samba_enable_home_dirs
[root@server0 ~]# setsebool  -P samba_enable_home_dirs  on
[root@server0 ~]# chcon  -Rt samba_share_t  /common/
[root@server0 ~]# systemctl enable smb nmb
[root@server0 ~]# systemctl restart  smb nmb

2.客戶端設置

[root@desktop0 ~]# mount -t cifs -o username=natasha,password=tangkai //172.25.0.11/common  /mnt
[root@desktop0 ~]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/vda1              10G  3.1G  7.0G  31% /
devtmpfs              482M     0  482M   0% /dev
tmpfs                 498M   80K  497M   1% /dev/shm
tmpfs                 498M   14M  485M   3% /run
tmpfs                 498M     0  498M   0% /sys/fs/cgroup
//172.25.0.11/common   10G  3.1G  6.9G  31% /mnt
[root@desktop0 ~]# cd /mnt/
[root@desktop0 mnt]# touch a
touch: cannot touch ‘a’: Permission denied

3.服務端設置

[root@server0 ~]# touch  /common/aa
[root@server0 ~]# mkdir  /storage
[root@server0 ~]# chcon -Rt samba_share_t  /storage/
[root@server0 ~]# vi /etc/samba/smb.conf
[common]
   path = /common
   browseable = yes
   valid users = natasha
[share]
   path = /storage
   browseable = yes
   valid users = sarah,kitty
   writable = no
   write  list  = kitty
[root@server0 ~]# systemctl restart smb nmb

4.客戶端設置

[root@desktop0 ~]# umount /mnt/
[root@desktop0 ~]# ls /mnt/
[root@desktop0 ~]# mkdir /mnt/dev
[root@desktop0 ~]# vi /etc/fstab
//172.25.0.11/share  /mnt/dev  cifs  multiuser,username=sarah,password=tangkai,sec=ntlmssp 0 0
[root@desktop0 ~]#cd /mnt/dev
[root@desktop0 ~]#yum -y install cifs-utils*
[root@desktop0 ~]#su - student
[student@desktop0 ~]#cifscreds add -u kitty 172.25.0.11