samba配置问题

anonymous0502

/etc/samba/smb.conf文件如下：

[global]
        workgroup = MYGROUP
        server string = Samba Server Version %v
    netbios name = smbtestserver
        log file = /var/log/samba/%m.log
        max log size = 5000
        security = user
    encrypt passwords = yes
    smb passwd file = /etc/samba/smbpasswd
    dns proxy = no
    name resolve order = lmhosts bcast host
        load printers = yes
        cups options = raw
idmap uid = 1000000-2000000
idmap gid = 1000000-2000000
template shell = /bin/false
winbind use default domain = no
[smbshare]
    comment = test share
    path = /sambashare
    read only = no
    public = yes
    writable = yes
    valid users = apple
    create mode =0664
    directory mode = 0775

testparm看到的结果总是不对，security = user的设置总是无效，为什么？

[root@server501 ~]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[smbshare]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
        workgroup = MYGROUP
        netbios name = SMBTESTSERVER
        server string = Samba Server Version %v
        log file = /var/log/samba/%m.log
        name resolve order = lmhosts bcast host
        dns proxy = No
        idmap uid = 1000000-2000000
        idmap gid = 1000000-2000000
        cups options = raw

[smbshare]
        comment = test share
        path = /sambashare
        valid users = apple
        read only = No
        create mask = 0664
        directory mask = 0775
        guest ok = Yes

13466852695

请问LZ，你这个配置是不是原配？木有改过？？？

anonymous0502

13466852695 发表于 2012-04-20 18:21
请问LZ，你这个配置是不是原配？木有改过？？？

谢谢，有点眉目了，以前记的在rhel4上做的笔记写得不清不楚，自己折腾了一阵心里有点数了，但是仍然有其他疑问，还得继续google一阵{:2_166:}

anonymous0502

以前从没注意到这个地方：
为什么smb.conf设置了security = user，但是smbclient -L时还是不需要用户和口令就可以查看到部分信息呢？
在windows上是会弹出对话框要求输入用户和口令了的
这个本来就是这么设计的？

1. [apple@server501 ~]$ smbclient -L //server501
   
2. Password:
   
3. [b]Anonymous login successful[/b]
   
4. Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.28-0.el5.8]
   
5. 
   
6.         Sharename       Type      Comment
   
7.         ---------       ----      -------
   
8.         IPC$            IPC       IPC Service (Samba Server Version 3.0.28-0.el5.8)
   
9. Anonymous login successful
   
10. Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.28-0.el5.8]
    
11. 
    
12.         Server               Comment
    
13.         ---------            -------
    
14.         SERVER501            Samba Server Version 3.0.28-0.el5.8
    
15. 
    
16.         Workgroup            Master
    
17.         ---------            -------
    
18.         MYGROUP              SERVER501

复制代码

anonymous0502

这好像本来就是这样子的{:2_166:}
我已经把samba-common重新安装过了，用的--replacepkgs，被我改动过的文件已经被我移位了。rpm -V已经显示复原如初了。
只是这个结果跟我以前想的有点不同

[root@server501 samba]# rpm -qf /etc/samba/smb.conf
samba-common-3.0.28-0.el5.8
[root@server501 samba]# rpm -V samba-common
[root@server501 samba]# grep -v -E '^\s*#|^\s*;|^\s*$' smb.conf
[global]
        workgroup = MYGROUP
        server string = Samba Server Version %v
        security = user
        passdb backend = tdbsam
        load printers = yes
        cups options = raw
[homes]
        comment = Home Directories
        browseable = no
        writable = yes
[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
        guest ok = no
        writable = no
        printable = yes
[root@server501 samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
        workgroup = MYGROUP
        server string = Samba Server Version %v
        passdb backend = tdbsam
        cups options = raw

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No
[root@server501 samba]#

ulovko

1. 
   
2. 以前的笔记供您参考！
   
3. 
   
4. > cat samba.txt
   
5. # Samba
   
6. # CIFS(Common Internet File System)
   
7. # NetBIOS(Network Basic Input/Output System)
   
8. /etc/samba/smb.conf
   
9. /etc/samba/smbpasswd
   
10. /etc/samba/smbusers
    
11. 
    
12. /usr/bin/testparm
    
13. /usr/bin/smbstatus
    
14. /usr/bin/smbpasswd
    
15. /usr/bin/smbclient
    
16. /usr/bin/nmblookup
    
17. /usr/bin/smbtree
    
18. nmbd        (UDP:137,138port)
    
19. smbd        (TCP:139,445port)
    
20. samba samba-common samba-client
    
21. chkconfig smb on
    
22. service smb restart
    
23. # ATTENTION: the 'security context' should be changed as follow ~!Oops..
    
24. chcon -Rvt samba_share_t /shared/
    
25. 
    
26. dumpe2fs -h /dev/sda5
    
27. vim /etc/fstab
    
28. LABEL=/1 ext3 defaults,acl 1 1
    
29. mount -o remount,acl /
    
30. # 1>: Group Control
    
31. setfacl -m d:g:groupname:rwx /shared
    
32. getfacl /shared
    
33. mask+actual permission = effective permission
    
34. # 2>: User Control
    
35. chown jacky:jacky /shared        (Control only one user)
    
36. 
    
37. smbpasswd -a jacky
    
38. cat /etc/samba/smbpasswd
    
39. smbpasswd -d jacky
    
40. smbpasswd -e jacky
    
41. 
    
42. smbclient //192.168.0.12/shared -U jacky
    
43. smbclient -L //127.0.0.1 -U user%password
    
44. mount -t cifs //station12/shared /mnt -o username=jacky,password=jacky
    
45. # AutoMounter for Samba
    
46. chkconfig autofs on
    
47. service autofs restart
    
48. vim /etc/auto.master
    
49. /home        /etc/auto.samba        --timeout=60
    
50. cp /etc/auto.misc /etc/auto.samba
    
51. vim /etc/auto.samba
    
52. samba        -fstype=cifs,username=?,password=?        ://192.168.1.4/shared
    
53. 
    
54. # User Home's Access Control
    
55. getsebool -a | grep samba
    
56. setsebool -P samba_enable_home_dirs=1
    
57. service smb restart
    
58. 
    
59. cat /etc/sysconfig/i18n
    
60. LANG="en_US.UTF-8"

复制代码

779699413

linux samba服务器验证的时候windows却之用guest去登陆，这是不是linux那配置错了，还是windows问题。