samba的文件共享服務采用服務器/客戶端模式，本質為服務器端的特定目錄實現在客戶機端特定目錄的掛載，從而實現服務器端和客戶機端的目錄文件共享。
在以下實驗中，PC1為服務器端，IP為192.168.10.10； PC2為客戶機端，IP為192.168.10.20；
1、在PC1服務器端安裝samba服務
[root@PC1 ~]# yum install samba -y Loaded plugins: langpacks, product-id, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. rhel7 | 4.1 kB 00:00:00 Resolving Dependencies --> Running transaction check ---> Package samba.x86_64 0:4.1.1-31.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================== Package Arch Version Repository Size ================================================================================== Installing: samba x86_64 4.1.1-31.el7 rhel7 527 k Transaction Summary ================================================================================== Install 1 Package Total download size: 527 k Installed size: 1.5 M Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : samba-4.1.1-31.el7.x86_64 1/1 rhel7/productid | 1.6 kB 00:00:00 Verifying : samba-4.1.1-31.el7.x86_64 1/1 Installed: samba.x86_64 0:4.1.1-31.el7 Complete!
2、在PC1服務器端精簡samba服務的主配置文件
[root@PC1 ~]# cd /etc/samba/ [root@PC1 samba]# ls lmhosts smb.conf [root@PC1 samba]# cp smb.conf smb.conf.bak [root@PC1 samba]# grep -v "#" smb.conf.bak | grep -v ";" | grep -v "^$" > smb.conf [root@PC1 samba]# cat smb.conf [global] workgroup = MYGROUP server string = Samba Server Version %v log file = /var/log/samba/log.%m max log size = 50 security = user passdb backend = tdbsam load printers = yes cups options = raw [homes] comment = Home Directories browseable = no writable = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes
3、在PC1服務器端創建用於訪問共享資源的賬戶信息（samba服務采用用戶口令認證模式，用於登錄的用戶在PC1服務器端必須已經存在）
[root@PC1 ~]# id linuxprobe uid=1000(linuxprobe) gid=1000(linuxprobe) groups=1000(linuxprobe),10(wheel) [root@PC1 ~]# pdbedit -a -u linuxprobe new password: ## 此處設定在客戶端登錄時的密碼 retype new password: Unix username: linuxprobe NT username: Account Flags: [U ] User SID: S-1-5-21-1761013935-1237571759-2663186072-1000 Primary Group SID: S-1-5-21-1761013935-1237571759-2663186072-513 Full Name: linuxprobe Home Directory: \\pc1\linuxprobe HomeDir Drive: Logon Script: Profile Path: \\pc1\linuxprobe\profile Domain: PC1 Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Wed, 06 Feb 2036 23:06:39 CST Kickoff time: Wed, 06 Feb 2036 23:06:39 CST Password last set: Tue, 15 Dec 2020 21:22:58 CST Password can change: Tue, 15 Dec 2020 21:22:58 CST Password must change: never Last bad password : 0 Bad password count : 0 Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
4、在PC1服務器端創建用戶共享資源的文件目錄
[root@PC1 ~]# mkdir /home/database [root@PC1 ~]# ll -d /home/database/ drwxr-xr-x. 2 root root 6 Dec 15 21:25 /home/database/ [root@PC1 ~]# chown -R linuxprobe:linuxprobe /home/database/ ## 修改權限，客戶端登錄用戶權限 [root@PC1 ~]# ll -d /home/database/ drwxr-xr-x. 2 linuxprobe linuxprobe 6 Dec 15 21:25 /home/database/ [root@PC1 ~]# ll -ldZ /home/database/ ## 查看SELinux上下文 drwxr-xr-x. linuxprobe linuxprobe unconfined_u:object_r:home_root_t:s0 /home/database/ [root@PC1 ~]# semanage fcontext -a -t samba_share_t /home/database ## 修改上下文 [root@PC1 ~]# restorecon -Rv /home/database/ ## 啟動 restorecon reset /home/database context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:samba_share_t:s0 [root@PC1 ~]# ll -ldZ /home/database/ drwxr-xr-x. linuxprobe linuxprobe unconfined_u:object_r:samba_share_t:s0 /home/database/
5、在PC1服務器端設置SELinux服務於策略，使家目錄支持samba服務
[root@PC1 ~]# getsebool -a | grep samba samba_create_home_dirs --> off samba_domain_controller --> off samba_enable_home_dirs --> off samba_export_all_ro --> off samba_export_all_rw --> off samba_portmapper --> off samba_run_unconfined --> off samba_share_fusefs --> off samba_share_nfs --> off sanlock_use_samba --> off use_samba_home_dirs --> off virt_sandbox_use_samba --> off virt_use_samba --> off [root@PC1 ~]# setsebool -P samba_enable_home_dirs=on [root@PC1 ~]# getsebool -a | grep samba samba_create_home_dirs --> off samba_domain_controller --> off samba_enable_home_dirs --> on samba_export_all_ro --> off samba_export_all_rw --> off samba_portmapper --> off samba_run_unconfined --> off samba_share_fusefs --> off samba_share_nfs --> off sanlock_use_samba --> off use_samba_home_dirs --> off virt_sandbox_use_samba --> off virt_use_samba --> off
6、在PC1服務器端修改samba服務主配置文件，填寫共享信息
[root@PC1 ~]# vim /etc/samba/smb.conf [global] workgroup = MYGROUP server string = Samba Server Version %v log file = /var/log/samba/log.%m max log size = 50 security = user passdb backend = tdbsam load printers = yes cups options = raw [homes] comment = Home Directories browseable = no writable = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [database] comment = Do not arbitrarily modify the database file path = /home/database public = no writable = yes ~
7、在PC1服務器端重啟samba服務
[root@PC1 ~]# systemctl restart smb [root@PC1 ~]# systemctl enable smb ln -s '/usr/lib/systemd/system/smb.service' '/etc/systemd/system/multi-user.target.wants/smb.service'
8、在PC1服務器端清空防火牆策略
[root@PC1 ~]# iptables -F [root@PC1 ~]# service iptables save iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ] [root@PC1 ~]# systemctl status smb ## 查看samba服務狀態 smb.service - Samba SMB Daemon Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled) Active: active (running) since Tue 2020-12-15 21:41:03 CST; 1min 42s ago Main PID: 4487 (smbd) Status: "smbd: ready to serve connections..." CGroup: /system.slice/smb.service ├─4487 /usr/sbin/smbd └─4490 /usr/sbin/smbd Dec 15 21:41:03 PC1 smbd[4487]: [2020/12/15 21:41:03.287294, 0] ../lib/util/become_daemon.c:...ady) Dec 15 21:41:03 PC1 systemd[1]: Started Samba SMB Daemon. Hint: Some lines were ellipsized, use -l to show in full.
9、查看PC1服務器端IP
[root@PC1 ~]# ifconfig | head -n 5 eno16777728: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.10.10 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::20c:29ff:fe66:37f7 prefixlen 64 scopeid 0x20<link> ether 00:0c:29:66:37:f7 txqueuelen 1000 (Ethernet) RX packets 222 bytes 45170 (44.1 KiB)
10、在PC2客戶端測試與PC1服務器主機的連通性
[root@PC2 ~]# ifconfig | head -n 5 eno16777728: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.10.20 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::20c:29ff:fe25:bb3e prefixlen 64 scopeid 0x20<link> ether 00:0c:29:25:bb:3e txqueuelen 1000 (Ethernet) RX packets 78 bytes 26676 (26.0 KiB) [root@PC2 ~]# ping -c 3 192.168.10.10 PING 192.168.10.10 (192.168.10.10) 56(84) bytes of data. 64 bytes from 192.168.10.10: icmp_seq=1 ttl=64 time=0.408 ms 64 bytes from 192.168.10.10: icmp_seq=2 ttl=64 time=0.231 ms 64 bytes from 192.168.10.10: icmp_seq=3 ttl=64 time=0.238 ms --- 192.168.10.10 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 0.231/0.292/0.408/0.083 ms
11、在PC2客戶端安裝支持文件共享服務的軟件包（cifs-utils）
[root@PC2 ~]# yum install cifs-utils -y Loaded plugins: langpacks, product-id, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. Resolving Dependencies --> Running transaction check ---> Package cifs-utils.x86_64 0:6.2-6.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: cifs-utils x86_64 6.2-6.el7 rhel7 83 k Transaction Summary ================================================================================ Install 1 Package Total download size: 83 k Installed size: 174 k Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : cifs-utils-6.2-6.el7.x86_64 1/1 rhel7/productid | 1.6 kB 00:00 Verifying : cifs-utils-6.2-6.el7.x86_64 1/1 Installed: cifs-utils.x86_64 0:6.2-6.el7 Complete!
12、在PC2客戶端，將登陸用戶、密碼和共享域寫入到認證文件中
[root@PC2 ~]# pwd /root [root@PC2 ~]# vim auth.smb username=linuxprobe password=abc123456 ## 此處的密碼為在PC1服務器端使用pdbedit命令創建用戶資料是設定的登陸密碼 domain=MYGROUP [root@PC2 ~]# ll auth.smb -rw-r--r--. 1 root root 54 Dec 15 22:09 auth.smb [root@PC2 ~]# chmod 600 auth.smb ## 設定為僅root可查看 [root@PC2 ~]# ll auth.smb -rw-------. 1 root root 54 Dec 15 22:09 auth.smb
13、在PC2客戶機端創建掛載點
[root@PC2 ~]# mkdir /database
14、修改開機自動掛載配置文件
[root@PC2 ~]# vim /etc/fstab # # /etc/fstab # Created by anaconda on Wed Dec 2 16:46:09 2020 # # Accessible filesystems, by reference, are maintained under '/dev/disk' # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info # /dev/mapper/rhel-root / xfs defaults 1 1 UUID=5cc50fd7-fef7-4902-a0f6-d583b437954d /boot xfs defaults 1 2
/dev/mapper/rhel-swap swap swap defaults 0 0
/dev/cdrom /media/cdrom iso9660 defaults 0 0
//192.168.10.10/database /database cifs credentials=/root/auth.smb 0 0
15、在PC1服務器端的共享點創建測試文件
[root@PC1 database]# cd /home/database/ [root@PC1 database]# echo 'i am pc1' > pc1 [root@PC1 database]# mkdir dirpc1 [root@PC1 database]# ls dirpc1 pc1
16、在PC2客戶機端掛載共享目錄
[root@PC2 ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/rhel-root 18G 3.0G 15G 17% / devtmpfs 985M 0 985M 0% /dev tmpfs 994M 80K 994M 1% /dev/shm tmpfs 994M 8.8M 986M 1% /run tmpfs 994M 0 994M 0% /sys/fs/cgroup /dev/sda1 497M 119M 379M 24% /boot /dev/sr0 3.5G 3.5G 0 100% /media/cdrom [root@PC2 ~]# mount -a [root@PC2 ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/rhel-root 18G 3.0G 15G 17% / devtmpfs 985M 0 985M 0% /dev tmpfs 994M 80K 994M 1% /dev/shm tmpfs 994M 8.8M 986M 1% /run tmpfs 994M 0 994M 0% /sys/fs/cgroup /dev/sda1 497M 119M 379M 24% /boot /dev/sr0 3.5G 3.5G 0 100% /media/cdrom //192.168.10.10/database 18G 3.0G 15G 17% /database
17、在PC2端進入掛載點，檢測是否PC1服務器端測試文件
[root@PC2 database]# cd /database/ [root@PC2 database]# ls dirpc1 pc1 [root@PC2 database]# cat pc1 i am pc1 [root@PC2 database]# echo 'i am pc2' > pc2 [root@PC2 database]# mkdir dirpc2 [root@PC2 database]# ls dirpc1 dirpc2 pc1 pc2
18、在PC1服務器端共享目錄檢測客戶端創建的文件
[root@PC1 database]# cd /home/database/ [root@PC1 database]# ls dirpc1 dirpc2 pc1 pc2 [root@PC1 database]# cat pc2 i am pc2
以上實驗說明了PC1服務器端的目錄 /home/database在客戶機端/database(掛載點）實現了文件共享。