最近我們的小團隊需要在服務器上共分出一個共享文件夾用于大家存放公共的資源文檔， 大家想啊，這肯定很簡單呀，在Windows下面只要創建相關的windows account，共享某個文件夾，把讀/寫權限給我們創建的account的，就完成了共享，但在Linux下面就沒有這么美好了，網上查閱資源資料多指向通過Samba完成共享任務，但一些blog只介紹了怎么做，但沒有為什么這么做，搭建工作且不太順利，對Linux算不上熟悉，走了很多彎路，所以通過這篇blog深入理解其中的每一步。

Samba的簡介

Samba是在Linux和UNIX系統上實現SMB協議的一個免費軟件，由服務器及客戶端程序構成。這些是廢話….. 來看點有意思的。作者Tridgwell申請使用SMBServer ( Server Message Block 的簡寫 ) 注冊這個軟件的商標, 因為SMB 是沒有意義的文字而沒有辦法注冊。然后他就翻字典，看到SAMBA一遍正好包含SMB幾個字母 ，這這個詞也是我們熟知的拉丁舞蹈的名稱，然后就有了三八這個名字。

搭建Samba共享目錄, 如果需要使用用戶名/密碼的形式訪問共享目錄，我們需要先創建Linux的user，然后通過smbpasswd創建samba用戶（用戶名需要一致），原文在這里:

To provide authentication on a standalone host, you have to create the accounts locally on the operating system and additionally in the Samba database. By default, Samba uses the tdbsam back end and stores the database in the /usr/local/samba/private/passdb.tdb file. Optionally set a different location in the smb.conf file using the passdb backend parameter. See the smb.conf 5 man page for details(from https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server).

搭建需要用戶名驗證的共享目錄

1． 創建共享目錄的用戶,  我們這里使用來組(group)來演示

cp /etc/samba/smb.conf /etc/samba/smb.conf.orig

#為暴露在我的芳鄰里點進去看到的文件夾名稱 [share] 　　comment = Secure File Server Share 　　# 為需要共享的目錄 　　path = /srv/samba/secure 　　# 可訪問的用戶，多用戶用空格隔開, 以@開頭為用戶組 　　valid users = @smbgrp 　　# 關閉匿名訪問，設置為no 　　guest ok = no 　　writable = yes 　　browsable = yes

# See smb.conf.example for a more detailed config file or # read the smb.conf manpage. # Run 'testparm' to verify the config is correct after # you modified it. [global] 　　workgroup = WORKGROUP 　　netbios name = centos 　　security = user 　　passdb backend = tdbsam 　　printing = cups 　　printcap name = cups 　　load printers = no 　　cups options = raw [printers] 　　comment = All Printers 　　path = /var/tmp 　　printable = Yes 　　create mask = 0600 　　browseable = No [print$] 　　comment = Printer Drivers 　　path = /var/lib/samba/drivers 　　write list = @printadmin root 　　force group = @printadmin 　　create mask = 0664 　　directory mask = 0775 　[share] 　　comment = secure file share 　　path = /srv/samba/secure 　　valid users = @smbgrp 　　guest ok = no 　　writable = yes 　　browsable = yes 　　browseable = yes

[root@localhost software]# testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[printers]" Processing section "[print$]" Processing section "[share]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions # Global parameters [global] load printers = No netbios name = CENTOS-SHARE printcap name = cups security = USER idmap config * : backend = tdb cups options = raw [printers] browseable = No comment = All Printers create mask = 0600 path = /var/tmp printable = Yes [print$] comment = Printer Drivers create mask = 0664 directory mask = 0775 force group = @printadmin path = /var/lib/samba/drivers write list = @printadmin root [share] comment = secure file share path = /home/share read only = No valid users = @smbgrp [root@localhost software]#

systemctl restart smb.service systemctl restart nmb.service