samba实例

samba配置实例需求：
       搭建办公室文件共享系统，有以下用户方：
       管理人员(licheng)
       开发人员(devA,devB)
       系统人员(sysA,sysB)
       行政人员(mmA,mmB,mmC,mmD,mmE)
       财务人员(moneyA)
       工程人员(engineerA,engineerB)
      
       实现功能：
       1.licheng能管理所有的文件共享
       2.每个部门都一个供自己部门的人员进行读写的文件共享目录，对其他部门隐私
       3.有一个文件共享目录供所有部门共享


服务器环境：
       Ubuntu 12.10
       3.5.0-18-generic
       普通PC硬件


实现方案：
      1.安装samba软件

# apt-get install samba

        2.创建相应三无用户和组，并设置权限

root@licheng-G41D3:~# for gg in dev syser mm money engineer  #创建相应组用户
> do
> groupadd $gg
> done

useradd -g dev -s /sbin/nologin devA    #把对应的用户加到组用户中
useradd -g dev -s /sbin/nologin devB


root@licheng-G41D3:~# mkdir /smbdata/
root@licheng-G41D3:~# chown licheng.licheng /smbdata  #设置目录权限


root@licheng-G41D3:~# mkdir /smbdata/mm/
root@licheng-G41D3:~# chown licheng.mm /smbdata/mm  #设置目录组权限
root@licheng-G41D3:~# chmod 770 /smbdata/mm/

root@licheng-G41D3:~# mkdir /smbdata/dev/
root@licheng-G41D3:~# chown licheng.dev /smbdata/dev
root@licheng-G41D3:~# chmod 770 /smbdata/dev/

其他用户和组都进行类似设置

        3.配置smb.conf

[global]
   workgroup = WORKGROUP
   server string = %h server (Samba, Ubuntu)
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   security = user
   encrypt passwords = true
   passdb backend = tdbsam

[admin]
   comment = sa
   path = /smbdata
   valid users = licheng
   create mask = 0664
   writeable = yes
   browseable = no
   public=no

[开发组]
   comment = deverloper
   path = /smbdata/dev/
   valid users = licheng,@dev   #--@dev代表组用户
   create mask = 0664
   writeable = yes
   browseable = yes
   public=yes

[系统组]
   comment = systemadmin
   path = /smbdata/sys/
   valid users = @syser,licheng
   create mask = 0664
   writeable = yes
   browseable = yes
   public=yes

[行政组]
   comment = mm
   path = /smbdata/mm/
   valid users = licheng,@mm
   create mask = 0664
   writeable = yes
   browseable = yes
   public=yes

[财务组]
   comment = money
   path = /smbdata/money/
   valid users = @money,licheng
   create mask = 0664
   writeable = yes
   browseable = yes
   public=yes

[工程组]
   comment = engineer
   path = /smbdata/engineer/
   valid users = @engineer,licheng
   create mask = 0664
   writeable = yes
   browseable = yes
   public=yes

[分享组]
   comment = share
   path = /smbdata/share/
   create mask = 0664
   browseable = yes
   public=yes
   read only = no
   guest ok = yes

            4. 通过pdbedie配置tdbsam类型的各部门帐号密码

root@licheng-G41D3:~# pdbedit -a devA
new password:
retype new password:
Unix username:        devA
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-732587476-2757912329-675466344-1000
Primary Group SID:    S-1-5-21-732587476-2757912329-675466344-513
Full Name:
Home Directory:       \\licheng-g41d3\deva
HomeDir Drive:
Logon Script:
Profile Path:         \\licheng-g41d3\deva\profile
Domain:               LICHENG-G41D3
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    四, 22 11月 2012 16:07:22 CST
Password can change:  四, 22 11月 2012 16:07:22 CST
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

            设置完成后可以通过pdbedit -L 进行查看已设置的帐号

root@licheng-G41D3:~# pdbedit -L
devA:1001:
sysA:1003:
sysB:1004:
devB:1002:
licheng:1000:licheng
mmA:1005:
mmB:1006:
mmC:1007:
mmD:1008:
mmE:1009:
moneyA:1010:
engineerA:1011:
engineerB:1012:

           5.启动samba

root@licheng-G41D3:~# /etc/init.d/nmbd start
Rather than invoking init scripts through /etc/init.d, use the service(8)
utility, e.g. service nmbd start

Since the script you are attempting to invoke has been converted to an
Upstart job, you may also use the start(8) utility, e.g. start nmbd
nmbd start/running, process 7796
root@licheng-G41D3:~# /etc/init.d/smbd start
Rather than invoking init scripts through /etc/init.d, use the service(8)
utility, e.g. service smbd start

Since the script you are attempting to invoke has been converted to an
Upstart job, you may also use the start(8) utility, e.g. start smbd
smbd start/running, process 7811

           6.检测. 当在windows上进行\\检测的时候，如果你已经连接了一个帐号密码，要测试第二个的时候会报以下错误：
      "不允许一个用户使用一个以上用户名与一个服务器或共享资源的多重连接......."
      是因为windows的机制造成的，可以用以下命令后再做第二个帐号检测:

net use * /del /y

         
           7.如果有新的用户加入，只要将这个用户的组权限设置到对应的部门目录即可.