samba共享和访问权限设置

4r221

1、简介
配置samba共享服务器，只允许10.0.1.1这个ip访问samba服务器的共享功能，同时设置共享文件夹中上传的文件不能被修改和删除，需要用到linux的文件扩展属性
2、关闭防火墙
vim /etc/selinux/config
"SELINUX=disabled"或者"setenforce 0"
3、配置iptables策略
iptables -A INPUT -p tcp -s 10.0.1.1 --dport 138 -j ACCEPT
iptables -A INPUT -p tcp -s 10.0.1.1 --dport 139 -j ACCEPT
iptables -A INPUT -p tcp -s 10.0.1.1 --dport 145 -j ACCEPT
service iptables save
service iptables restart
iptables -L -n --line-number
4、安装配置samba
# yum install samba samba-client samba-common
# groupadd jiaoyi
# useradd -g jiaoyi user
# smbpasswd -a user
# mkdir /customer_file
# chmod 777 /customer_file
# chmod +t /customer_file        #设置sticky bit位
# mv /etc/samba/smb.conf /etc/samba/smb.conf.bak
# vim /etc/samba/smb.conf
[global]
        netbios name = Samba
        workgroup = WORKGROUP
        server string = Customer File Server
        log file = /var/log/samba/log.%m
        max log size = 50
        security = user
        smb passwd file = /etc/samba/smbpasswd

        display charset = UTF-8
        unix charset = UTF-8
        dos charset = UTF-8
        deadtime = 100
        max connections = 100

[customer_file]
    comment = customer file folder
    path = /customer_file
    public = no
    browseable = yes
    writable =yes
    create mask = 1400
    directory mask = 1400
    valid users = @root,@jiaoyi
       
# service smb start