使用Samba實現Linux與Windows檔案分享權限設定實踐

標籤：

前言

一直以來都以為FTP和NFS是區域網路檔案分享權限設定的常用方式，但是在最近接觸Samba之後，瞭解到一些使用者需要簡化訪問學習成本，滿足基礎的許可權控制管理，並支援即時編輯和儲存檔案，我才明白這些需求使用之前的方法都是很難滿足的，而Samba卻可以完美的支援上述需求，雖然在開始接觸時花了一些時間學習，但把配置和文法梳理清楚之後就很簡單了。

Unix與Windows檔案分享權限設定的最佳方式之一

更新歷史

2015年07月11日 - 初稿

閱讀原文 - http://wsgzao.github.io/post/samba/

擴充閱讀

Samba - https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/
SAMBA伺服器 - http://vbird.dic.ksu.edu.tw/linux_server/0370samba.php
RHEL6.5下部署samba企業級檔案伺服器實戰 - http://yuan2.blog.51cto.com/446689/1588085

安裝samba

各個平台的安裝都蠻簡單的，略過

配置samba

建議合理規劃目錄和使用者權限，可以利用使用者組來簡化授權管理，參見擴充閱讀

#建立目錄（舉例）mkdir -p /data2/smchmod -R 777 /data2/sm#添加使用者（舉例）groupadd denglinguseradd -g dengling -s /sbin/nologin denglingsmbpasswd -a dengling#備份smb設定檔並編輯cd /etc/sambacp smb.conf smb.conf.bakvi smb.conf#全域參數[global]    security = share    lanman auth = Yes    log file = /var/log/samba/log.%m    idmap config * : backend = tdb    guest ok = Yes    hosts allow = 127., 172., 192.168.1., 192.168.3.    cups options = raw#共用參數[homes]    comment = Home Directories    read only = No    browseable = No[sheji]    comment = sheji    path = /data2/sm/sheji    valid users = share, shenwei, xuwei, shenjiamei, humengchu, rensiqiang, yeting, tongying, jinbo, zengfanan, fengpeisi    read only = No    create mask = 0775    directory mask = 0775[test]    comment = sheji    path = /data2/sm/test    valid users = test, test2, shenwei    read only = No    create mask = 0775    directory mask = 0775[q2]    comment = sheji    path = /data2/sm/q2    valid users = xuejia, sungaoshuai, lujingjing, huangsonghe, yefei, lvwenhan, fangyuan, zhanghuichen, liuguofa, xupeiyu, yangpengfei, lisuitao, sunzhen, shenwei, xuwei, shenjiamei, humengchu, rensiqiang, yeting, tongying, jinbo, zengfanan, fengpeisi, chenye, wuailing, pengnan, liangzhixue, chenhong, daimengyou, wangxiaoshuo, zhoujian, fenglu, linlijun, chenshuxian, linzhimin, yanyoushan, xiaguoying, zhanghuanrong, mayushu, xuyangjing, guogaoyan, huangyouyang, jinzhibin, huyuqing, shenxuemei, liukui    read only = No    create mask = 0775    directory mask = 0775[market]    comment = sheji    path = /data2/sm/market    valid users = zhanghuichen, shenwei, chenye, wuailing, pengnan, liangzhixue, chenhong, daimengyou, wangxiaoshuo, xuyangjing, chenshuxian, linzhimin, caoling, guogaoyan, xiehaibo, huangyouyang, jinzhibin, huyuqing    read only = No    create mask = 0777    directory mask = 0775[market_finance]    comment = sheji    path = /data2/sm/market_finance    valid users = yangqiong, shenwei, chenye, wuailing, pengnan, liangzhixue, chenhong, daimengyou, wangxiaoshuo, xiehaibo, gaofangjie, xuyangjing, chenshuxian, linzhimin, huangyouyang, jinzhibin, huyuqing    read only = No    create mask = 0777    directory mask = 0775[shenwei]    comment = sheji    path = /data2/sm/develop/shenwei    valid users = shenwei    read only = No    create mask = 0777    directory mask = 0775[qijun]    comment = qj    path = /data2/sm/homedir/qijun    valid users = qijun    read only = No    create mask = 0777    directory mask = 0775    guest ok = No[wenyong]    comment = sheji    path = /data2/sm/develop/wenyong    valid users = wenyong    read only = No    create mask = 0777    directory mask = 0775[wudi]    comment = sheji    path = /data2/sm/develop/wudi    valid users = wudi    read only = No    create mask = 0777    directory mask = 0775[caijiannan]    comment = sheji    path = /data2/sm/develop/caijiannan    valid users = caijiannan    read only = No    create mask = 0777    directory mask = 0775[weiduani2]    comment = weiduan    path = /data2/sm/develop/raochao/微端    valid users = wangfeng    read only = No    create mask = 0777    directory mask = 0775[raochao]    comment = raochao    path = /data2/sm/develop/raochao    read list = wangfeng, xuwei, shenjiamei, chenxianzhe, chenye, wuailing, liuyuting, dainan    write list = raochao[product]    comment = product    path = /data2/sm/product    read only = No    create mask = 0777    directory mask = 0777[jinbo]    comment = JinBo    path = /data2/sm/homedir/jinbo    valid users = jinbo    read only = No    guest ok = No[xiaoqiang]    comment = xiaoqiang    path = /data2/sm/homedir/xiaoqiang    valid users = xiaoqiang    read only = No    guest ok = No[share]    comment = share    path = /data2/sm/homedir/share    valid users = share, market, wal, qijun, zhanghua    read only = No

啟動samba

#常用選項[shared_name]    path =                              # 檔案系統路徑    browseable = {yes|no}               # 是否可以被查看到    public = {yes|no}                   # 是否可被所有人讀    guest ok = {yes|no}                 # 與 public 相同    read only = yes                     # 是否唯讀    writeable = yes                     # 是否可寫    write list = user1, user2           # 可寫使用者列表                @group, +group          # 可寫組列表    valid users =                       # 白名單    invalid users =                     # 黑名單#檢查文法testparm#重啟smb服務查看狀態service smb restartsmbstatus

Windows用戶端訪問

1.Windows上訪問samba

在“電腦”中輸入：\\xxx.xxx.xxx.xxx\

2.Windows斷開samba共用串連，實在不行可以選擇登出或者重啟

在【開始】→【運行】→【CMD】斷行符號中輸入：net use * /del /y

3.將samba共用的Linux目錄映射成Windows的一個磁碟機盤符

在【右鍵電腦】→【映射網路磁碟機】→【檔案夾\XX.XX.XX.XX\】

著作權聲明：本文為博主原創文章，未經博主允許不得轉載。

使用Samba實現Linux與Windows檔案分享權限設定實踐