架设samba服务器

来源:互联网 发布:wifi信道检测软件 编辑:程序博客网 时间:2024/05/17 09:42

samba可以用于linux和windows之间文件共享。

需要安装的软件包

samba-3.0.23c-2.i386.rpm
samba-client-3.0.23c-2.i386.rpm
samba-common-3.0.23c-2.i386.rpm
samba-swat-3.0.23c-2.i386.rpm
system-config-samba-1.2.39-1.el5.noarch.rpm

启动脚本:/etc/init.d/smb
配置文件:/etc/samba/smb.conf

实验完成了security安全级别为 share、user共享目录读写访问控制。

过程如下:

[chen@localhost 桌面]$ rpm -qa|grep sambasamba-winbind-clients-3.5.4-68.el6.i686samba-common-3.5.4-68.el6.i686samba-client-3.5.4-68.el6.i686[chen@localhost 桌面]$ chkconfig --list|grep smb[chen@localhost 桌面]$ yum list|grep samba*Note* Red Hat Network repositories are not listed below. You must run this command as root to access RHN repositories.samba-client.i686                      3.5.4-68.el6                  @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0samba-common.i686                      3.5.4-68.el6                  @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0samba-winbind-clients.i686             3.5.4-68.el6                  @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0samba.i686                             3.5.4-68.el6                  rhel-sourcesamba-winbind.i686                     3.5.4-68.el6                  rhel-sourcesblim-cmpi-samba.i686                  1.0-1.el6                     rhel-source[chen@localhost 桌面]$ yum -y install samba*Loaded plugins: refresh-packagekit, rhnplugin*Note* Red Hat Network repositories are not listed below. You must run this command as root to access RHN repositories.You need to be root to perform this command.[chen@localhost 桌面]$ su - root密码:[root@localhost ~]# yum -y install samba*Loaded plugins: refresh-packagekit, rhnpluginThis system is not registered with RHN.RHN support will be disabled.rhel-source                                                                  | 3.7 kB     00:00 ... Setting up Install ProcessPackage samba-common-3.5.4-68.el6.i686 already installed and latest versionPackage samba-winbind-clients-3.5.4-68.el6.i686 already installed and latest versionPackage samba-client-3.5.4-68.el6.i686 already installed and latest versionResolving Dependencies--> Running transaction check---> Package samba.i686 0:3.5.4-68.el6 set to be updated---> Package samba-winbind.i686 0:3.5.4-68.el6 set to be updated--> Finished Dependency ResolutionDependencies Resolved==================================================================================================== Package                   Arch             Version                   Repository               Size====================================================================================================Installing: samba                     i686             3.5.4-68.el6              rhel-source             5.0 M samba-winbind             i686             3.5.4-68.el6              rhel-source             3.5 MTransaction Summary====================================================================================================Install       2 Package(s)Upgrade       0 Package(s)Total download size: 8.5 MInstalled size: 30 MDownloading Packages:----------------------------------------------------------------------------------------------------Total                                                                19 MB/s | 8.5 MB     00:00     Running rpm_check_debugRunning Transaction TestTransaction Test SucceededRunning Transaction  Installing     : samba-winbind-3.5.4-68.el6.i686                                              1/2   Installing     : samba-3.5.4-68.el6.i686                                                      2/2 Installed:  samba.i686 0:3.5.4-68.el6                    samba-winbind.i686 0:3.5.4-68.el6                   Complete![root@localhost ~]# chkconfig --list|grep smbsmb            0:关闭1:关闭2:关闭3:关闭4:关闭5:关闭6:关闭[root@localhost ~]# chkconfig smb on[root@localhost ~]# /etc/init.d/smb start启动 SMB 服务:                                            [确定][root@localhost ~]# ls /etc/samba/lmhosts  smb.conf  smbusers[root@localhost ~]# vim /etc/samba/smb.conf [root@localhost ~]# tail -8 /etc/samba/smb.conf [files]comment = Public Files Sharepath = /home/sambapublic = yeswritable = yesprintable = no[root@localhost ~]# 刚才的vim修改增加了最后那几行和把global下面到security改为了share^C[root@localhost ~]# /etc/init.d/smb restart关闭 SMB 服务:                                            [确定]启动 SMB 服务:                                            [确定][root@localhost ~]# setenforce 0[root@localhost ~]# smbclient //192.169.1.98/files#登陆不上,因为/home/samba目录还没有创建Enter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]Server not using user level security and no password supplied.tree connect failed: NT_STATUS_BAD_NETWORK_NAME[root@localhost ~]# testparm Load smb config files from /etc/samba/smb.confrlimit_max: rlimit_max (1024) below minimum Windows limit (16384)Processing section "[homes]"Processing section "[printers]"Processing section "[files]"Loaded services file OK.Server role: ROLE_STANDALONEPress enter to see a dump of your service definitions[global]workgroup = MYGROUPserver string = Samba Server Version %vsecurity = SHARElog file = /var/log/samba/log.%mmax log size = 50cups options = raw[homes]comment = Home Directoriesread only = Nobrowseable = No[printers]comment = All Printerspath = /var/spool/sambaprintable = Yesbrowseable = No[files]comment = Public Files Sharepath = /home/sambaread only = Noguest ok = Yes[root@localhost ~]# mkdir /home/samba[root@localhost ~]# chmod o+w /home/samba/[root@localhost ~]# ls -ld /home/samba/drwxr-xrwx. 2 root root 4096  8月  9 20:47 /home/samba/[root@localhost ~]# smbclient //192.169.1.98/filesEnter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]Server not using user level security and no password supplied.smb: \> ls  .                                   D        0  Thu Aug  9 20:47:01 2012  ..                                  D        0  Thu Aug  9 20:47:01 201240317 blocks of size 262144. 26849 blocks availablesmb: \> ls  .                                   D        0  Thu Aug  9 20:49:30 2012  ..                                  D        0  Thu Aug  9 20:47:01 2012  8.9samba                            A    19725  Thu Aug  9 11:38:38 2012#这个文件是在虚拟机外面的windows中传上去的40317 blocks of size 262144. 26848 blocks availablesmb: \> put 1                    .gnote/              off                  .xauthnex4AKa                    .gnupg/              .printer-groups.xml  .xauthQDpdMqanaconda-ks.cfg      .gstreamer-0.10/     .pulse/              .xauths3w8PP.bash_history        .gtk-bookmarks       .pulse-cookie        .xauthWHeJNQ.bash_logout         .gvfs/               .recently-used.xbel  .xauthzsGCtR.bash_profile        .ICEauthority        .ssh/                公共的/.bashrc              .icons/              .tcshrc              模板/.cache/              .imsettings.log      .themes/             视频/.config/             install.log          .thumbnails/         图片/.cshrc               install.log.syslog   .viminfo             文档/.dbus/               .lesshst             .xauthEjNjkE         下载/.esd_auth            .lftp/               .xauthH1M7lM         音乐/.gconf/              .local/              .xauthiHGPWs         桌面/.gconfd/             loginDir/            .xauthKSE2s2         .gnome2/             .nautilus/           .xauthmGZjkB         smb: \> put aputting file a as \a (0.0 kb/s) (average 0.0 kb/s)smb: \> ls  .                                   D        0  Thu Aug  9 20:49:30 2012  ..                                  D        0  Thu Aug  9 20:47:01 2012  a                                   A        0  Thu Aug  9 20:50:27 2012  8.9samba                            A    19725  Thu Aug  9 11:38:38 201240317 blocks of size 262144. 26848 blocks availablesmb: \> get 8.9samba getting file \8.9samba of size 19725 as 8.9samba (6420.7 KiloBytes/sec) (average 6420.9 KiloBytes/sec)smb: \> quit[root@localhost ~]# ls1         a                install.log         loginDir  公共的  视频  文档  音乐8.9samba  anaconda-ks.cfg  install.log.syslog  off       模板    图片  下载  桌面[root@localhost ~]# #匿名用户可以登陆,且可以get,put-------------------------------需要用户名和密码验证-------------------------------------[root@localhost ~]# [root@localhost ~]# security=share不要用户名和密码的方式实验成功,下面测试security=users需要验证^C[root@localhost ~]# [root@localhost ~]# [root@localhost ~]# vim /etc/samba/smb.conf [root@localhost ~]# 把security=user,然后添加了以下10行^C[root@localhost ~]# tail -11 /etc/samba/smb.conf [movies]comment = This is a movies world!path = /var/public/moviespublic = nowritable = yesprintable = novalid users = user1 user2 @rootwrite list = user1 @rootdirectory mask = 0744create mask = 0600[root@localhost ~]# service smb restart关闭 SMB 服务:                                            [确定]启动 SMB 服务:                                            [确定][root@localhost ~]# testparm Load smb config files from /etc/samba/smb.confrlimit_max: rlimit_max (1024) below minimum Windows limit (16384)Processing section "[homes]"Processing section "[printers]"Processing section "[files]"Processing section "[movies]"Loaded services file OK.Server role: ROLE_STANDALONEPress enter to see a dump of your service definitions[global]workgroup = MYGROUPserver string = Samba Server Version %vlog file = /var/log/samba/log.%mmax log size = 50cups options = raw[homes]comment = Home Directoriesread only = Nobrowseable = No[printers]comment = All Printerspath = /var/spool/sambaprintable = Yesbrowseable = No[files]comment = Public Files Sharepath = /home/sambaread only = Noguest ok = Yes[movies]comment = This is a movies world!path = /var/public/moviesvalid users = user1, user2, @rootwrite list = user1, @rootread only = Nocreate mask = 0600directory mask = 0744[root@localhost ~]# smbpasswd -a user1New SMB password:Retype new SMB password:Added user user1.[root@localhost ~]# smbclient -U user1 //192.168.1.98/moviesEnter user1's password: Connection to 192.168.1.98 failed (Error NT_STATUS_HOST_UNREACHABLE)[root@localhost ~]# setenforce 0[root@localhost ~]# mkdir -p /var/public/movies[root@localhost ~]# chmod o+w /var/public/movies/[root@localhost ~]# ls -ld /var/public/movies/drwxr-xrwx. 2 root root 4096  8月  9 21:20 /var/public/movies/[root@localhost ~]# smbclient -U user1 //192.168.1.98/movies#这里的ip地址写错了,所以登不上,囧。。。Enter user1's password: Connection to 192.168.1.98 failed (Error NT_STATUS_HOST_UNREACHABLE)[root@localhost ~]# chmod o+w /var/public#这句话不加应该也可以的[root@localhost ~]# service smb restart关闭 SMB 服务:                                            [确定]启动 SMB 服务:                                            [确定][root@localhost ~]# smbclient -U user1 //192.169.1.98/moviesEnter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 21:20:05 2012  ..                                  D        0  Thu Aug  9 21:20:05 201240317 blocks of size 262144. 26847 blocks availablesmb: \> pwdCurrent directory is \\192.169.1.98\movies\smb: \> put 1                    .gnome2/             .nautilus/           .xauthmGZjkB8.9samba             .gnote/              off                  .xauthnex4AKa                    .gnupg/              .printer-groups.xml  .xauthQDpdMqanaconda-ks.cfg      .gstreamer-0.10/     .pulse/              .xauths3w8PP.bash_history        .gtk-bookmarks       .pulse-cookie        .xauthWHeJNQ.bash_logout         .gvfs/               .recently-used.xbel  .xauthzsGCtR.bash_profile        .ICEauthority        .ssh/                公共的/.bashrc              .icons/              .tcshrc              模板/.cache/              .imsettings.log      .themes/             视频/.config/             install.log          .thumbnails/         图片/.cshrc               install.log.syslog   .viminfo             文档/.dbus/               .lesshst             .xauthEjNjkE         下载/.esd_auth            .lftp/               .xauthH1M7lM         音乐/.gconf/              .local/              .xauthiHGPWs         桌面/.gconfd/             loginDir/            .xauthKSE2s2         smb: \> put aputting file a as \a (0.0 kb/s) (average 0.0 kb/s)smb: \> ls  .                                   D        0  Thu Aug  9 21:22:21 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir user1dir1smb: \> ls  .                                   D        0  Thu Aug  9 21:22:26 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 201240317 blocks of size 262144. 26847 blocks availablesmb: \> ls  .                                   D        0  Thu Aug  9 21:23:23 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012#这个文件是在windows下拖进去的  user1dir1                           D        0  Thu Aug  9 21:22:26 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# smbclient -U user2 //192.169.1.98/moviesEnter user2's password: session setup failed: NT_STATUS_LOGON_FAILURE[root@localhost ~]# user2没有通过smbpasswd添加,所以登录不上去-bash: user2没有通过smbpasswd添加,所以登录不上去: command not found[root@localhost ~]# id user2#先看本地是否有user2用户uid=503(user2) gid=503(user2) 组=503(user2)[root@localhost ~]# id chen#试一下没在valid users中的用户是否能登陆uid=500(chen) gid=500(chen) 组=500(chen)[root@localhost ~]# smbpasswd -a user2New SMB password:Retype new SMB password:Added user user2.[root@localhost ~]# smbpasswd -a chenNew SMB password:Retype new SMB password:Added user chen.[root@localhost ~]# smbclient -U chen //192.169.1.98/moviesEnter chen's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]tree connect failed: NT_STATUS_ACCESS_DENIED#登陆不上[root@localhost ~]# smbclient -U user2 //192.169.1.98/moviesEnter user2's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 21:23:23 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir user2dir2#这里user2没在write list里面,但是还是能创建smb: \> ls  .                                   D        0  Thu Aug  9 21:23:23 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 201240317 blocks of size 262144. 26847 blocks availablesmb: \> put 1#也能上传,这个是不应该的putting file 1 as \1 (0.0 kb/s) (average 0.0 kb/s)smb: \> ls  .                                   D        0  Thu Aug  9 21:23:23 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit-----------------------下面是问题解决问题的试验过程,可能有不合理的地方----------------------------[root@localhost ~]# cat /etc/group |grep user2#看一下user2是否在root组里,因为刚才write list里有 @rootuser2:x:503:[root@localhost ~]# vim /etc/samba/smb.conf [root@localhost ~]# 把 @root从write list中删除了#这里的vim把 @root从write list中删除了,write list只有user1了-bash: 把 @root从write: command not found[root@localhost ~]# service smb restart关闭 SMB 服务:                                            [确定]启动 SMB 服务:                                            [确定][root@localhost ~]# smbclient -U root //192.169.1.98/movies#用root登陆进去看是否能写Enter root's password: session setup failed: NT_STATUS_LOGON_FAILURE[root@localhost ~]# smbpasswd -a rootNew SMB password:Retype new SMB password:Added user root.[root@localhost ~]# smbclient -U root //192.169.1.98/moviesEnter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 21:49:55 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2      D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir rootdir3#root还是可以写smb: \> ls  .                                   D        0  Thu Aug  9 21:49:55 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# tail -11 /etc/samba/smb.conf#看一下配置文件[movies]comment = This is a movies world!path = /var/public/moviespublic = nowritable = yesprintable = novalid users = user1 user2 @rootwrite list = user1 directory mask = 0744create mask = 0600[root@localhost ~]# vim /etc/samba/smb.conf#把writable = yes删掉了[root@localhost ~]# service smb restart关闭 SMB 服务:                                            [确定]启动 SMB 服务:                                            [确定][root@localhost ~]# smbclient -U root //192.169.1.98/moviesEnter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir rootdir4NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \rootdir4#哈哈。。这下写不了了,就是这个writable捣的鬼。smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# smbclient -U user1 //192.169.1.98/moviesEnter user1's password: session setup failed: NT_STATUS_LOGON_FAILURE[root@localhost ~]# smbpasswd -a user1#上面密码可能输错了,又加了一遍New SMB password:Retype new SMB password:[root@localhost ~]# smbclient -U user1 //192.169.1.98/movies#看看user1能不能写,应该是可以才对Enter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir user1dir2#的确可以,可见只要关掉writable,write list就完全起作用了smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir2                           D        0  Thu Aug  9 22:11:34 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# smbclient -U user2 //192.169.1.98/movies#再试试user2可不可以呢?应该也不行Enter user2's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir2                           D        0  Thu Aug  9 22:11:34 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir user2dir3NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \user2dir3#不行,再次验证smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir2                           D        0  Thu Aug  9 22:11:34 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# [root@localhost ~]# --------------测试selinux----------------------^C[root@localhost ~]# setenforce 1[root@localhost ~]# smbclient -U user1 //192.169.1.98/moviesEnter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir2                           D        0  Thu Aug  9 22:11:34 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> mkdir user1dir3NT_STATUS_ACCESS_DENIED making remote directory \user1dir3#开selinux,就不能正常创建了,虽然user1有写权限smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir2                           D        0  Thu Aug  9 22:11:34 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# ls -dZ /var/public/movies/#看一下movies的标签(上下文)drwxr-xrwx. root root unconfined_u:object_r:public_content_rw_t:s0 /var/public/movies/[root@localhost ~]# chcon -t samba_share_t /var/public/movies/#把标签改为samba_share_t[root@localhost ~]# ls -dZ /var/public/movies/drwxr-xrwx. root root unconfined_u:object_r:samba_share_t:s0 /var/public/movies/[root@localhost ~]# ls -Z /var/public/movies/-rw-------. user2 user2 unconfined_u:object_r:public_content_rw_t:s0 1-rw-------. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 8.9samba-rw-------. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 adrwxr--r--. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 dir1drwxr--r--. user2 user2 unconfined_u:object_r:public_content_rw_t:s0 dir2drwxr--r--. root  root  unconfined_u:object_r:public_content_rw_t:s0 dir3drwxr--r--. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 user1dir2[root@localhost ~]# 这里面的文件都是public_content_rw_t这个标签,先不改,进去看是否能看到^C[root@localhost ~]# smbclient -U user1 //192.169.1.98/moviesEnter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> mkdir user1dir3#可以创建了,原来的文件也可以看到,可能跟public_content_rw_t标签兼容有关,若是其他标签可能看不到,这时候需要把文件的标签页改过来smb: \> ls  .                                   D        0  Thu Aug  9 22:07:58 2012  ..                                  D        0  Thu Aug  9 21:20:05 2012  a                                            0  Thu Aug  9 21:22:21 2012  user1dir2                           D        0  Thu Aug  9 22:11:34 2012  rootdir3                            D        0  Thu Aug  9 22:07:58 2012  8.9samba                                 19725  Thu Aug  9 11:38:38 2012  user1dir1                           D        0  Thu Aug  9 21:22:26 2012  user1dir3                           D        0  Thu Aug  9 22:25:52 2012  user2dir2                           D        0  Thu Aug  9 21:49:38 2012  1                                            0  Thu Aug  9 21:49:55 201240317 blocks of size 262144. 26847 blocks availablesmb: \> quit[root@localhost ~]# smbclient -U user2 //192.169.1.98/movies#再试试改完标签后user2是否可以Enter user2's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6]smb: \> mkdir user2dir1NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \user2dir1#还是不行的smb: \> quit[root@localhost ~]# 


原创粉丝点击