Samba:打造企业级授权文件共享服务器

  • 2019 年 10 月 3 日
  • 笔记

??????

 

??????????????????????????????????????????????????? FTP??? VSFTP??????????????????????????????????? Samba?????????????????????????????????????????????????????

????????????????????????????????????????????????

?????????????????????

 

 

????

 

?????? XXX ??????????????????

 

?????????????????

 

???

1. ?????????? / ?? / ????????????????????????? Windows ?? BUG

 

2. ?????????

???????????????????????

??????????????????????

??????????????????

??????????????????

 

3. ???????

????????????????????????

?????????????????????????

???????????????????????????

???? zcadmin ????????????????? zc ??????????????

 

 

???????????????

 

??????????????????????????????

?????????? CentOS 7.5????? CentOS ????????????????????????

1. ?? Samba?

yum -y install samba samba-client samba-swat

 

2. ?????

mkdir /company  cd /company/  mkdir ????? ????? ??????? ????? ????  cd ????/  mkdir ????? ????? ??????? ?????

???????

tree -N /company/

?????

 

3. ????

# ???  groupadd zcgroup  groupadd devgroup  groupadd hrgroup  groupadd fdgroup    # ????  useradd -g zcgroup -s /sbin/nologin zc  useradd -g zcgroup -s /sbin/nologin zcread  useradd -g zcgroup -s /sbin/nologin zcadmin    useradd -g devgroup -s /sbin/nologin dev  useradd -g devgroup -s /sbin/nologin devread  useradd -g devgroup -s /sbin/nologin devadmin    useradd -g hrgroup -s /sbin/nologin hr  useradd -g hrgroup -s /sbin/nologin hrread  useradd -g hrgroup -s /sbin/nologin hradmin    useradd -g fdgroup -s /sbin/nologin fd  useradd -g fdgroup -s /sbin/nologin fdread  useradd -g fdgroup -s /sbin/nologin fdadmin

 

4. ???????

cd /company/    # ??????  chmod -R 1775 ????? ????? ??????? ????? ????    # ????????  chown -R devadmin.devgroup ?????  chown -R hradmin.hrgroup ???????  chown -R fdadmin.fdgroup ?????  chown -R zcadmin.zcgroup ?????

 

5. ????????/etc/samba/smb.conf

##############################################################################  # ????  ##############################################################################  [global]          workgroup = WORKGROUP          server string = Samba Server Version %v          netbios name = Samba          log file = /var/log/samba/samba_log.%m          max log size = 50          security = user          passdb backend = tdbsam          include = /etc/samba/user/%U.smb.conf

????????????????????????????????????? /etc/samba/user/???.smb.conf

 

6. ???????????

mkdir /etc/samba/user  cd /etc/samba/user

??????????????? dev ??????dev.smb.conf

[?????]      comment = dev config      path = /company/?????/      public = no      admin users = devadmin      valid users = @devgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777

 

????? devadmin ??????devread.smb.conf

[?????]      comment = dev admin config      path = /company/?????/      public = no      admin users = devadmin      valid users = @devgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777

 

???? devread ??????devadmin.smb.conf

[?????]      comment = dev read config      path = /company/?????/      public = no      admin users = devadmin      valid users = @devgroup      writable = no

???????

a. ???? 1777???????????????????????????????? 7 ?? zc ?????????

b. ???????????????????????????????? dev ?????? dev ???devadmin ? dev ??????? test ????? dev ???? dev ?????????????????????????????????? dev ?? dev ??????????

???????????? Samba ??????????????????????? admin ?????

c. ??? admin users ?????????????????????????????

d. writable = no?????????????????

e. ????????????????????????????????????????????????????

???????

 

7. ???????? Samba ??

smbpasswd -a dev  smbpasswd -a devadmin  smbpasswd -a devread
smbpasswd
-a hr smbpasswd -a hradmin smbpasswd -a hrread
smbpasswd
-a fd smbpasswd -a fdadmin smbpasswd -a fdread
smbpasswd
-a zc smbpasswd -a zcadmin smbpasswd -a zcread

?????

pdbedit -L

??????????????

pdbedit -x ???

 

8. ?????????????????????????????? / ??? / ???

 

 

??????????????

 

??????????????????????????????????????

?????zcadmin ??????? admin ????? zc ???????????????

1. ????????????

usermod -a -G devgroup zc  usermod -a -G devgroup zcadmin  usermod -a -G hrgroup zc  usermod -a -G hrgroup zcadmin  usermod -a -G fdgroup zc  usermod -a -G fdgroup zcadmin

 

2. ?? zc.smb.conf ? zcadmin.smb.conf

[?????]      comment = zc config      path = /company/?????/      public = no      admin users = zcadmin      valid users = @zcgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777    [?????]      comment = zc config      path = /company/?????/      public = no      admin users = devadmin,zcadmin      valid users = @devgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777    [???????]      comment = hr config      path = /company/???????/      public = no      admin users = hradmin,zcadmin      valid users = @hrgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777    [?????]      comment = fd config      path = /company/?????/      public = no      admin users = fdadmin,zcadmin      valid users = @fdgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777

???????????????

a. devadmin ?????? ????? ??? admin ??? admin ???

b. ??? dev ??????? admin ??? admin ????????????? admin ???? dev ???????? dev ??? dev ???

c. ?? zc ??? ???? ????? ?????????????? admin ???? zc ???????? zc ??? zc ???

d. ?? devadmin ? zcadmin ?? ????? ??????????

??????????????????????????????

 

 

????????? 

 

????????????????????????????????????????????????????

????????????????????????????????

1. ???????

cd /company/????    chown -R devadmin.devgroup ?????  chown -R hradmin.hrgroup ???????  chown -R fdadmin.fdgroup ?????  chown -R zcadmin.zcgroup ?????

????????? ???? ???????????? root??????????

 

2. ???????????????smb.conf

##############################################################################  # ????  ##############################################################################  [global]          workgroup = WORKGROUP          server string = Samba Server Version %v          netbios name = Samba          log file = /var/log/samba/samba_log.%m          max log size = 500          security = user          passdb backend = tdbsam          include = /etc/samba/common.cmb.conf          include = /etc/samba/user/%U.smb.conf

?????????????????????????????????????????????????????????????????????????????

????????????????????????

 

3. ?? common ???/etc/samba/common.cmb.conf

[????]      comment = common config      path = /company/????/      public = no
admin users = zcadmin valid users
= @zcgroup,@devgroup,@hrgroup,@fdgroup writable = yes create mask = 1777 directory mask = 1777 force create mode = 1777 force directory mode = 1777

???????????????????????????????????

???zcadmin ?????????????????????????

 

4. ???????????devread.smb.conf

[?????]      comment = dev read config      path = /company/?????/      public = no      admin users = devadmin      valid users = @devgroup      writable = no    [????]      comment = common config      path = /company/????/      public = no      valid users = @zcgroup,@devgroup,@hrgroup,@fdgroup      writable = no

??????????

 

5. ????????????????????????????????

 

6. ?????????????????????????????????

??????????????????????????????????????????????????

????????????????????????????

???????? zcadmin???????????????????????????????????

??? devadmin ???devadmin.smb.conf

[?????]      comment = dev admin config      path = /company/?????/      public = no      admin users = devadmin      valid users = @devgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777    [????-?????]      comment = common config      path = /company/????/?????/      public = no      admin users = zcadmin,devadmin      valid users = @zcgroup,@devgroup,@hrgroup,@fdgroup      writable = yes      create mask = 1777      directory mask = 1777      force create mode = 1777      force directory mode = 1777
browseable = no

 

????????

a. ???????????????????????????????????????????

b. ????????????????????????????????????

c. zc ???????????????????????

d. ???????????????

 

7. ????????????

 

 

??

 

????????????????????windows ????????????????????????

???Samba ?????????????????????????? FTP ????????? Samba???????????????

???? Samba ???????????????????????????????????

??????????????????????