Samba: Difference between revisions

From KlavoWiki
Jump to navigationJump to search
(New page: Firstly install the samba server and client <pre> yum install samba samba-client </pre> Once the required applicatons are installed we can add the computer to the domain by running authc...)
 
No edit summary
 
(18 intermediate revisions by 3 users not shown)
Line 1: Line 1:
Firstly install the samba server and client
= Installation =
The following will allow a Windows computer to connect to the Samba shares as anonymous without authentication.


<pre>
<pre>
yum install samba samba-client
yum install samba
</pre>
</pre>


Once the required applicatons are installed we can add the computer to the domain by running authconfig.
<pre>
systemctl enable smb
</pre>
 
= Configuration =
 
== Globals ==
<pre>
vi /etc/samba/smb.conf
</pre>
 
<pre>
        workgroup = WORKGROUP
        server string = My Media Server
 
        netbios name = centos
</pre>
 
<pre>
        security = user
        passdb backend = tdbsam
        map to guest = bad user
</pre>


<pre>
<pre>
authconfig
        load printers = no
</pre>
</pre>


Under the User infromation select <strong>Use Winbind</strong>
== File Shares ==
Under Authentication select <strong>Use Winbind Authentication</strong>
<pre>
[alpha]
  path = /mnt/usb-hd0/alpha
  comment = Alpha File Share
  public = yes
  browseable = yes
  writable = yes
  guest ok = yes
  read only = no
 
[beta]
  path = /mnt/usb-hd0/beta
  comment = Beta File Share
  public = yes
  browseable = yes
  writable = yes
  guest ok = yes
  read only = no
</pre>


Under the Authentication column the "Use MD5 Password" and "Use Shadow Passwords" should be automatically select.  Leave them selected.


Security Model is ads
== File Permissions ==
Domain is NETBIOS domain name
As with a Windows computer there are two aspects to file sharing.  The share permission and the file permission.<br><br>
Domain Controllers is the name of a Domain Controller
ADS Realm is DNS (FQDN) domain name
by default the /bin/false is selected.


Select Join Domain.
File Permissions
Select Ok.


<pre>
chmod -R 757 /path/to/folder
</pre>
Set Folder Owner to nobody
<pre>
chown -R nobody:nobody /path/to/folder
</pre>
Set defaults for new files
<pre>
setfacl -d -m g::rwx /path/to/folder
</pre>
= Services =
Once the /etc/samba/smb.conf file has been completed and saved restart the service.
<pre>
systemctl restart smb
</pre>
= Connecting to Windows UNC =
== Installation ==
<pre>
yum -y install samba-client cifs-utils
</pre>
== Mounting ==
<pre>
mount -t cifs -o workgroup=workgroup,username=myuser,password=mypassword //my.server.name/sharename /tmp/smbmountpoint
</pre>
If you do not have the samba client installed you will get errors like:
<pre>
CIFS VFS: cifs_mount failed w/return code = -22
</pre>
= Tools =
Viewing Default Folder Permissions
<pre>
getfacl /folder/to/view
</pre>
Setting Default Permissions
<pre>
setfacl -d -m o::rwx /folder/to/set
</pre>


[[Category: Authentication Shares]]
[[Category: Linux]]

Latest revision as of 06:43, 20 June 2015

Installation

The following will allow a Windows computer to connect to the Samba shares as anonymous without authentication.

yum install samba
systemctl enable smb

Configuration

Globals

vi /etc/samba/smb.conf
        workgroup = WORKGROUP
        server string = My Media Server

        netbios name = centos
        security = user
        passdb backend = tdbsam
        map to guest = bad user
        load printers = no

File Shares

[alpha]
  path = /mnt/usb-hd0/alpha
  comment = Alpha File Share
  public = yes
  browseable = yes
  writable = yes
  guest ok = yes
  read only = no

[beta]
  path = /mnt/usb-hd0/beta
  comment = Beta File Share
  public = yes
  browseable = yes
  writable = yes
  guest ok = yes
  read only = no


File Permissions

As with a Windows computer there are two aspects to file sharing. The share permission and the file permission.

File Permissions

chmod -R 757 /path/to/folder

Set Folder Owner to nobody

chown -R nobody:nobody /path/to/folder

Set defaults for new files

setfacl -d -m g::rwx /path/to/folder

Services

Once the /etc/samba/smb.conf file has been completed and saved restart the service.

systemctl restart smb

Connecting to Windows UNC

Installation

yum -y install samba-client cifs-utils

Mounting

mount -t cifs -o workgroup=workgroup,username=myuser,password=mypassword //my.server.name/sharename /tmp/smbmountpoint

If you do not have the samba client installed you will get errors like:

CIFS VFS: cifs_mount failed w/return code = -22

Tools

Viewing Default Folder Permissions

getfacl /folder/to/view

Setting Default Permissions

setfacl -d -m o::rwx /folder/to/set