Samba共享系统实例应用

opiuytr1

企业应用案例
ZMM是一家网站设计公司，下面有运营部，设计部，开发部和运维部，为了加强部门的互联互通，优化工作流程和提高效率，现部署一台Samba服务器。
根据公司情况，需要创建5个一级目录，和公共目录下的四个共享目录；公共共享目录每个部门一个目录。部门内员工可以在部门的一级目录内建立目录和文件，在公共目录内的二级部门目录，可以互相访问；一级目录各部门不可互访，公共目录内可以。
1 创建各级共享目录
[iyunv@localhost~]#
mkdir -p /ZMM/{sales,desgin,develop,ops,share/{sales,desgin,develop,ops}}

2 创建用户 为每个部门创建3个用户，并创建共享目录管理员
用脚本批量创建用户
vim userad.sh
#!/bin/bash
bumen=(sales desgin develop ops)
for i in ${ bumen[@] }
    do

        groupadd $i

        for u in $(seq 1 2 3)

            do

                useradd -M -s /sbin/nologin -g ${i} ${i}$u

            done

    done

[iyunv@localhost~]# chmod a+x useradd.sh
[iyunv@localhost~]# sh useradd.sh
[iyunv@localhost~]# smbpasswd -a sales1 #逐个为各个部门用户设置不同密码

3 修改Samba配置文件,设置共享权限
vim /etc/samba/smb.conf
###############################
[global]
workgroup = MYGROUP
server string = ZMM.corp share
log file = /var/log/samba/log.%m
max log size = 50
security = user
passdb backend = tdbsam
load printers = yes
cups options = raw
################################
[homes]
comment = Home Directories
browseable = no
writable = yes
###*******************###
[sales]
comment = sales share

path = /ZMM/sales
browseable = yes
guest ok = no
writable = no
writelist = @sales

###*******************###
[design]
comment = design share

path = /ZMM/design
browseable = yes
guest ok = no
writable = no
writelist = @design
###*******************###
[develop]
comment = develop share

path = /ZMM/develop
browseable = yes
guest ok = no
writable = no
writelist = @develop
###*******************###
[ops]
comment = ops share

path = /ZMM/ops
browseable = yes
guest ok = no
writable = no
writelist = @ops
###*******************###
[share]
comment = comment share

path = /ZMM/share
browseable = yes
guest ok = no
writable = yes

4 修改权限启动服务

[iyunv@localhost~]# chmod 1770 /ZMM/{sales,design,develop,ops}  #添加S位权限
[iyunv@localhost~]# chmod 1777 /ZMM/share
[iyunv@localhost~]# chown :sales /ZMM/sales
[iyunv@localhost~]# chown :design /ZMM/design
[iyunv@localhost~]# chown :develop /ZMM/develop

[iyunv@localhost~]# chown :ops /ZMM/ops

[iyunv@localhost~]# service smb start