samba配置問題

anonymous0502

/etc/samba/smb.conf文件如下：

[global]
        workgroup = MYGROUP
        server string = Samba Server Version %v
    netbios name = smbtestserver
        log file = /var/log/samba/%m.log
        max log size = 5000
        security = user
    encrypt passwords = yes
    smb passwd file = /etc/samba/smbpasswd
    dns proxy = no
    name resolve order = lmhosts bcast host
        load printers = yes
        cups options = raw
idmap uid = 1000000-2000000
idmap gid = 1000000-2000000
template shell = /bin/false
winbind use default domain = no
[smbshare]
    comment = test share
    path = /sambashare
    read only = no
    public = yes
    writable = yes
    valid users = apple
    create mode =0664
    directory mode = 0775

testparm看到的結果總是不對，security = user的設置總是無效，為什么？

[root@server501 ~]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[smbshare]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
        workgroup = MYGROUP
        netbios name = SMBTESTSERVER
        server string = Samba Server Version %v
        log file = /var/log/samba/%m.log
        name resolve order = lmhosts bcast host
        dns proxy = No
        idmap uid = 1000000-2000000
        idmap gid = 1000000-2000000
        cups options = raw

[smbshare]
        comment = test share
        path = /sambashare
        valid users = apple
        read only = No
        create mask = 0664
        directory mask = 0775
        guest ok = Yes

13466852695

請問LZ，你這個配置是不是原配？木有改過？？？

anonymous0502

13466852695 發(fā)表于 2012-04-20 18:21
請問LZ，你這個配置是不是原配？木有改過？？？

謝謝，有點眉目了，以前記的在rhel4上做的筆記寫得不清不楚，自己折騰了一陣心里有點數(shù)了，但是仍然有其他疑問，還得繼續(xù)google一陣{:2_166:}

anonymous0502

以前從沒注意到這個地方：
為什么smb.conf設置了security = user，但是smbclient -L時還是不需要用戶和口令就可以查看到部分信息呢？
在windows上是會彈出對話框要求輸入用戶和口令了的
這個本來就是這么設計的？

1. [apple@server501 ~]$ smbclient -L //server501
   
2. Password:
   
3. [b]Anonymous login successful[/b]
   
4. Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.28-0.el5.8]
   
5. 
   
6.         Sharename       Type      Comment
   
7.         ---------       ----      -------
   
8.         IPC$            IPC       IPC Service (Samba Server Version 3.0.28-0.el5.8)
   
9. Anonymous login successful
   
10. Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.28-0.el5.8]
    
11. 
    
12.         Server               Comment
    
13.         ---------            -------
    
14.         SERVER501            Samba Server Version 3.0.28-0.el5.8
    
15. 
    
16.         Workgroup            Master
    
17.         ---------            -------
    
18.         MYGROUP              SERVER501

復制代碼

anonymous0502

這好像本來就是這樣子的{:2_166:}
我已經(jīng)把samba-common重新安裝過了，用的--replacepkgs，被我改動過的文件已經(jīng)被我移位了。rpm -V已經(jīng)顯示復原如初了。
只是這個結果跟我以前想的有點不同

[root@server501 samba]# rpm -qf /etc/samba/smb.conf
samba-common-3.0.28-0.el5.8
[root@server501 samba]# rpm -V samba-common
[root@server501 samba]# grep -v -E '^\s*#|^\s*;|^\s*$' smb.conf
[global]
        workgroup = MYGROUP
        server string = Samba Server Version %v
        security = user
        passdb backend = tdbsam
        load printers = yes
        cups options = raw
[homes]
        comment = Home Directories
        browseable = no
        writable = yes
[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
        guest ok = no
        writable = no
        printable = yes
[root@server501 samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
        workgroup = MYGROUP
        server string = Samba Server Version %v
        passdb backend = tdbsam
        cups options = raw

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No
[root@server501 samba]#

ulovko

1. 
   
2. 以前的筆記供您參考！
   
3. 
   
4. > cat samba.txt
   
5. # Samba
   
6. # CIFS(Common Internet File System)
   
7. # NetBIOS(Network Basic Input/Output System)
   
8. /etc/samba/smb.conf
   
9. /etc/samba/smbpasswd
   
10. /etc/samba/smbusers
    
11. 
    
12. /usr/bin/testparm
    
13. /usr/bin/smbstatus
    
14. /usr/bin/smbpasswd
    
15. /usr/bin/smbclient
    
16. /usr/bin/nmblookup
    
17. /usr/bin/smbtree
    
18. nmbd        (UDP:137,138port)
    
19. smbd        (TCP:139,445port)
    
20. samba samba-common samba-client
    
21. chkconfig smb on
    
22. service smb restart
    
23. # ATTENTION: the 'security context' should be changed as follow ~!Oops..
    
24. chcon -Rvt samba_share_t /shared/
    
25. 
    
26. dumpe2fs -h /dev/sda5
    
27. vim /etc/fstab
    
28. LABEL=/1 ext3 defaults,acl 1 1
    
29. mount -o remount,acl /
    
30. # 1>: Group Control
    
31. setfacl -m d:g:groupname:rwx /shared
    
32. getfacl /shared
    
33. mask+actual permission = effective permission
    
34. # 2>: User Control
    
35. chown jacky:jacky /shared        (Control only one user)
    
36. 
    
37. smbpasswd -a jacky
    
38. cat /etc/samba/smbpasswd
    
39. smbpasswd -d jacky
    
40. smbpasswd -e jacky
    
41. 
    
42. smbclient //192.168.0.12/shared -U jacky
    
43. smbclient -L //127.0.0.1 -U user%password
    
44. mount -t cifs //station12/shared /mnt -o username=jacky,password=jacky
    
45. # AutoMounter for Samba
    
46. chkconfig autofs on
    
47. service autofs restart
    
48. vim /etc/auto.master
    
49. /home        /etc/auto.samba        --timeout=60
    
50. cp /etc/auto.misc /etc/auto.samba
    
51. vim /etc/auto.samba
    
52. samba        -fstype=cifs,username=?,password=?        ://192.168.1.4/shared
    
53. 
    
54. # User Home's Access Control
    
55. getsebool -a | grep samba
    
56. setsebool -P samba_enable_home_dirs=1
    
57. service smb restart
    
58. 
    
59. cat /etc/sysconfig/i18n
    
60. LANG="en_US.UTF-8"

復制代碼

779699413

linux samba服務器驗證的時候windows卻之用guest去登陸，這是不是linux那配置錯了，還是windows問題。