3-8基于文件的存储NFS

NFS文件系统

网络文件共享系统通过kerberos加密认证，使客户端访问共享目录。linux之间共享。
单用户认证：客户端本地只能使用一个用户得到nfs；
kerberos认证凭据，双向认证。
CA是单向认证，只认证server是否正确。

NFS配置

ServerX:#lab storageshares setup  //加入kerberos域主配置#vim /etc/exports/wode 172.25.0.0/24(ro)  //以只读方式对目录wode，只允许172.25域访问；/dewo 172.25.X.0/24(rw,sec=krb5p)  //认证方式是krb5p###################################vim /etc/sysconfig/nfsRPCNFSDARGS="-V 4.2"    //版本号#mkdir /wode#mkdir /dewo#chmod o+w /dewo下载kerberos证书（双向的）#wget -O /etc/krb5.keytab http://172.25.254.254/pub/keytabs/serverX.keytab#################################systemctl restart nfs-server#systemctl restart nfs-secure-server#systemctl enable nfs-server nfs-secure-server#systemctl stop firewalld.service####################################DesktopX:#lab storageshares setup#showmount -e 172.25.0.11  //查看nfs挂载//永久挂载nfs#vim /etc/fstab172.25.0.11:/wode /mnt/nfs1 nfs defaults 0 0 172.25.0.11:/dewo /mnt/nfs2 nfs defaults,v4.2,sec=krb5p 0 0 //下载kerberos认证证书#wget -O /etc/krb5.keytab http://172.25.254.254/pub/keytabs/desktopX.keytab###############################3#systemctl restart nfs-secure#systemctl enable nfs-secure#mount -az

SMB文件共享

基于win协议的网络文件共享。
支持多用户认证：在客户端添加本地用户，用户可被授权smb用户的权利。

SMB配置

ServerX:#yum -y install samba samba-client#vim /etc/samba/smb.confworkgroup = WORKGROUPnetbios name = MYSERVER  //win的工作组hosts allow = 127. 172.25.0.......[aaa]  //共享名path = /samba  //共享路径browseable = yes //可浏览printable = no   //打印comment = djlfksd  //描述writable = yes  //第三方写入##############以下没有模板public = no    //公共访问read list = wodewrite list = dewo  //账户权限#mkdir /samba       //路径#chmod o+w /samba#semanage fcontext -a -t samba_share_t '/samba(/.*)?'#restorecon -vFR /samba  //SELinux类型#useradd wode#useradd dewo#smbpasswd -a wode#smbpasswd -a dewo#systemctl restart nmb smb#systemctl enable nmb smbDesktopX:#yum -y install samba-client cifs-utils#smbclient -L //172.25.X.11  //共享查看#smbclient //172.25.X.11/xxx -U username%password#vim /etc/fstab//172.25.X.11/aaa /mnt/cifs cifs credentials=/root/a.txt,multiuser,sec=ntlmssp 0 0#vim /root/a.txtusername=wodepassword=redhat#mount -a//多用户认证#useradd a#su - a$cifscreds add 172.25.X.11 -u wode$cifscreds clearall