文件服务器：samba

文件服务器：samba

将samba服务器端目录/smbshare共享，共享名为myshare，共享可以浏览，允许用户rose和用户marry访问
用户rose具有只读权限，marry具有读写权限 (rose和marry系统存在的用户)

服务器：

1、配置yum仓库、安装软件包（samba、samba-client）

[root@stw ~]# cd /etc/yum.repos.d/
[root@stw yum.repos.d]# ls
server.repo
[root@stw yum.repos.d]# mount /dev/cdrom /mnt
mount: /dev/sr0 is write-protected, mounting read-only
[root@stw yum.repos.d]# yum -y install samba samba-client

2、关闭防火墙设置selinux并重启

[root@stw ~]# systemctl stop firewalld.service 
[root@stw ~]# systemctl disable firewalld.service 
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@stw ~]# setenforce 0
[root@stw ~]# vim /etc/selinux/config 
[root@stw ~]# reboot

3、创建共享目录、共享目录下创建file1、file2文件用于测试

[root@stw ~]# mkdir /smbshare
[root@stw ~]# cd /smbshare
[root@stw smbshare]# touch file1 file2
[root@stw smbshare]# ls
file1  file2

4、创建rose、marry用户并把shell环境设为/sbin/nologin

[root@stw ~]# useradd rose
[root@stw ~]# useradd marry
[root@stw ~]# usermod -s /sbin/nologin rose
[root@stw ~]# usermod -s /sbin/nologin marry

5、将rose和marry用户添加进samba用户

smbpasswd -a rose
smbpasswd -a marry

[root@stw ~]# smbpasswd -a rose
New SMB password:
Retype new SMB password:
Added user rose.
[root@stw ~]# smbpasswd -a marry
New SMB password:
Retype new SMB password:
Added user marry.

6、设置samba用户的权限、可以查看samba用户（ACL）

setfacl -m u🌹r-x /smbshare/
setfacl -m u:marry:rwx /smbshare/
pdbedit -L —列出系统上配置为samba用户的所有用户

[root@stw ~]# setfacl -m u:rose:r-x /smbshare
[root@stw ~]# setfacl -m u:marry:rwx /smbshare
[root@stw ~]# pdbedit -L
rose:1001:
marry:1002:
[root@stw ~]# getfacl /smbshare  //查看是否配置
getfacl: Removing leading '/' from absolute path names
# file: smbshare
# owner: root
# group: root
user::rwx
user:rose:r-x
user:marry:rwx
group::r-x
mask::rwx
other::r-x

7、修改配置文件

vim /etc/samba/smb.conf

[myshare]
path = /smbshare
browseable = yes
valid users = rose,marry
write list = marry

[root@stw ~]# vim /etc/samba/smb.conf

8、重启服务（smb、nmb）

[root@stw ~]# systemctl restart smb.service 
[root@stw ~]# systemctl restart nmb.service 
[root@stw ~]# systemctl enable smb.service 
Created symlink from /etc/systemd/system/multi-user.target.wants/smb.service to /usr/lib/systemd
[root@stw ~]# systemctl enable nmb.service 
Created symlink from /etc/systemd/system/multi-user.target.wants/nmb.service to /usr/lib/systemd

客户端：

1、配置yum仓库，安装服务（samba-client 、cifs-utils）

[root@stw2 ~]# yum -y install samba-client cifs-utils

2、匿名用户访问samba服务器共享资源列表

[root@stw2 ~]# smbclient -L 192.168.100.10
Enter SAMBA\root's password: 
Anonymous login successfulSharename       Type      Comment---------       ----      -------smbshare        Disk      print$          Disk      Printer DriversIPC$            IPC       IPC Service (Samba 4.8.3)
Reconnecting with SMB1 for workgroup listing.
Anonymous login successfulServer               Comment---------            -------Workgroup            Master---------            -------SAMBA                STW

3、samba用户浏览samba服务器共享资源列表

[root@stw2 ~]# smbclient -L 192.168.100.10 -U rose
Enter SAMBA\rose's password: Sharename       Type      Comment---------       ----      -------smbshare        Disk      print$          Disk      Printer DriversIPC$            IPC       IPC Service (Samba 4.8.3)rose            Disk      Home Directories
Reconnecting with SMB1 for workgroup listing.Server               Comment---------            -------Workgroup            Master---------            -------SAMBA                STW

4、匿名用户访问samba服务器的共享资源（无法访问）

[root@stw2 ~]# smbclient //192.168.100.10/myshare
Enter SAMBA\root's password: 
Anonymous login successful
tree connect failed: NT_STATUS_ACCESS_DENIED

5、samba用户浏览samba服务器共享资源（rose用户上传写入文件或目录，marry用户可以）

[root@stw2 ~]# smbclient //192.168.100.10/myshare -U rose
Enter SAMBA\rose's password: 
Try "help" to get a list of possible commands.
smb: \> ls.                                   D        0  Thu Aug 14 11:50:01 2025..                                 DR        0  Thu Aug 14 11:49:49 2025file1                               N        0  Thu Aug 14 11:50:01 2025file2                               N        0  Thu Aug 14 11:50:01 202552403200 blocks of size 1024. 48697424 blocks available
smb: \> [root@stw2 ~]# touch rose
[root@stw2 ~]# smbclient //192.168.100.10/myshare -U rose
Enter SAMBA\rose's password: 
Try "help" to get a list of possible commands.
smb: \> ls.                                   D        0  Thu Aug 14 11:50:01 2025..                                 DR        0  Thu Aug 14 11:49:49 2025file1                               N        0  Thu Aug 14 11:50:01 2025file2                               N        0  Thu Aug 14 11:50:01 202552403200 blocks of size 1024. 48697424 blocks available
smb: \> put rose
NT_STATUS_ACCESS_DENIED opening remote file \rose
smb: \> exit
[root@stw2 ~]# smbclient //192.168.100.10/myshare -U marry
Enter SAMBA\marry's password: 
Try "help" to get a list of possible commands.
smb: \> ls.                                   D        0  Thu Aug 14 11:50:01 2025..                                 DR        0  Thu Aug 14 11:49:49 2025file1                               N        0  Thu Aug 14 11:50:01 2025file2                               N        0  Thu Aug 14 11:50:01 202552403200 blocks of size 1024. 48698012 blocks available
smb: \> put rose
putting file rose as \rose (0.0 kb/s) (average 0.0 kb/s)
smb: \> ls.                                   D        0  Thu Aug 14 15:39:19 2025..                                 DR        0  Thu Aug 14 11:49:49 2025file1                               N        0  Thu Aug 14 11:50:01 2025file2                               N        0  Thu Aug 14 11:50:01 2025rose                                A        0  Thu Aug 14 15:39:19 202552403200 blocks of size 1024. 48698012 blocks available
smb: \> 

6、使用mount命令讲samba服务器共享资源挂载到本地目录下

交互式挂载—等待你输入密码（rose用户不能在挂载目录中创建文件、marry用户可以在挂载文件中创建目录）

[root@stw2 ~]# mkdir /smbmount
[root@stw2 ~]# mount -t cifs -o username=rose //192.168.100.10/myshare /smbmount
Password for rose@//192.168.100.10/myshare:  ****
[root@stw2 ~]# df -Th
Filesystem               Type      Size  Used Avail Use% Mounted on
/dev/sda2                xfs        50G  3.6G   47G   8% /
devtmpfs                 devtmpfs  2.0G     0  2.0G   0% /dev
tmpfs                    tmpfs     2.0G     0  2.0G   0% /dev/shm
tmpfs                    tmpfs     2.0G   13M  2.0G   1% /run
tmpfs                    tmpfs     2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/sda1                xfs      1014M  163M  852M  17% /boot
tmpfs                    tmpfs     394M   12K  394M   1% /run/user/42
tmpfs                    tmpfs     394M     0  394M   0% /run/user/0
/dev/sr0                 iso9660   4.3G  4.3G     0 100% /mnt
//192.168.100.10/myshare cifs       50G  3.6G   47G   8% /smbmount
[root@stw2 ~]# cd /smbmount
[root@stw2 smbmount]# ls
file1  file2
[root@stw2 smbmount]# touch file3
touch: cannot touch ‘file3’: Permission denied
[root@stw2 smbmount]# cd
[root@stw2 ~]# umount /smbmount
[root@stw2 ~]# mount -t cifs -o username=marry //192.168.100.10/myshare /smbmount
Password for marry@//192.168.100.10/myshare:  *****
[root@stw2 ~]# cd /smbmount
[root@stw2 smbmount]# ls
file1  file2
[root@stw2 smbmount]# touch file3
[root@stw2 smbmount]# ls
file1  file2  file3

非交互式挂载—直接挂载上、不用密码

[root@stw2 ~]# umount /smbmount   //先取消一下刚刚的挂载
[root@stw2 ~]# df -Th
Filesystem     Type      Size  Used Avail Use% Mounted on
/dev/sda2      xfs        50G  3.6G   47G   8% /
devtmpfs       devtmpfs  2.0G     0  2.0G   0% /dev
tmpfs          tmpfs     2.0G     0  2.0G   0% /dev/shm
tmpfs          tmpfs     2.0G   13M  2.0G   1% /run
tmpfs          tmpfs     2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/sda1      xfs      1014M  163M  852M  17% /boot
tmpfs          tmpfs     394M   12K  394M   1% /run/user/42
tmpfs          tmpfs     394M     0  394M   0% /run/user/0
/dev/sr0       iso9660   4.3G  4.3G     0 100% /mnt
[root@stw2 ~]# mount -t cifs -o username=marry,password=marry,sec=ntlmssp //192.168.100.1
[root@stw2 ~]# df -Th
Filesystem               Type      Size  Used Avail Use% Mounted on
/dev/sda2                xfs        50G  3.6G   47G   8% /
devtmpfs                 devtmpfs  2.0G     0  2.0G   0% /dev
tmpfs                    tmpfs     2.0G     0  2.0G   0% /dev/shm
tmpfs                    tmpfs     2.0G   13M  2.0G   1% /run
tmpfs                    tmpfs     2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/sda1                xfs      1014M  163M  852M  17% /boot
tmpfs                    tmpfs     394M   12K  394M   1% /run/user/42
tmpfs                    tmpfs     394M     0  394M   0% /run/user/0
/dev/sr0                 iso9660   4.3G  4.3G     0 100% /mnt
//192.168.100.10/myshare cifs       50G  3.6G   47G   8% /smbmount
[root@stw2 ~]# vim /etc/fstab    //下次启动生效（永久挂载）
[root@stw2 ~]# mount -a

7、多用户挂载，使用multiuser选项

让普通用户stw借用marry的权限能够在挂载点中写入文件或者目录（即使挂载的是rose用户）

[root@stw2 ~]# ls /home
stw
[root@stw2 ~]# su - stw   //先切换到普通用户，发现普通用户是没有写入权限的
[stw@stw2 ~]$ cd /smbmount
[stw@stw2 smbmount]$ ls
file1  file2  file3
[stw@stw2 smbmount]$ touch file4
touch: cannot touch ‘file4’: Permission denied
[stw@stw2 smbmount]$ exit
logout

只能用root的身份调用marry来执行写入权限，普通用户没有写入权限

挂载rose用户，root用户也没有写入权限（多用户挂载需要在配置文件中加上multiuser）

[root@stw2 ~]# umount /smbmount
[root@stw2 ~]# vim /etc/fstab
[root@stw2 ~]# mount -a
[root@stw2 ~]# df -Th
Filesystem               Type      Size  Used Avail Use% Mounted on
/dev/sda2                xfs        50G  3.6G   47G   8% /
devtmpfs                 devtmpfs  2.0G     0  2.0G   0% /dev
tmpfs                    tmpfs     2.0G     0  2.0G   0% /dev/shm
tmpfs                    tmpfs     2.0G   13M  2.0G   1% /run
tmpfs                    tmpfs     2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/sda1                xfs      1014M  163M  852M  17% /boot
tmpfs                    tmpfs     394M   12K  394M   1% /run/user/42
tmpfs                    tmpfs     394M     0  394M   0% /run/user/0
/dev/sr0                 iso9660   4.3G  4.3G     0 100% /mnt
//192.168.100.10/myshare cifs       50G  3.6G   47G   8% /smbmount
[root@stw2 ~]# cd /smbmount
[root@stw2 smbmount]# ls
file1  file2  file3
[root@stw2 smbmount]# touch file4
touch: cannot touch ‘file4’: Permission denied

然后切换到普通用户stw，执行多用户挂载命令（调用marry的权限）

[root@stw2 ~]# su - stw
Last login: Thu Aug 14 15:51:48 CST 2025 on pts/0
[stw@stw2 ~]$ cd /smbmount
[stw@stw2 smbmount]$ ls
ls: reading directory .: Permission denied
[stw@stw2 smbmount]$ cifscreds add 192.168.100.10 -u marry
Password: 
[stw@stw2 smbmount]$ cd /smbmount
[stw@stw2 smbmount]$ ls
file1  file2  file3
[stw@stw2 smbmount]$ touch file4
[stw@stw2 smbmount]$ ls
file1  file2  file3  file4

因为普通用户stw调用的是marry的权限，所以即使挂载的是rose用户，stw用户也可以写入文件或目录

可以查看到file4的所属用户为marry（服务器中查看）

[root@stw smbshare]# ll
total 0
-rw-r--r-- 1 root  root  0 Aug 14 11:50 file1
-rw-r--r-- 1 root  root  0 Aug 14 11:50 file2
-rwxr--r-- 1 marry marry 0 Aug 14 15:43 file3
-rwxr--r-- 1 marry marry 0 Aug 14 16:00 file4