User Tools

Site Tools


файловые_сервисы_unix_для_пользователей_windows

This is an old revision of the document!


Файловые сервисы UNIX для пользователей Windows

Установка

FreeBSD

[gate:~] # pkg_add -r samba3
[gate:~] # cat /etc/rc.conf
…
nmbd_enable="YES"
smbd_enable="YES"
winbindd_enable="NO"
…

[gate:~] # rehash

[gate:~] # сd /usr/local/etc/

Ubuntu

root@gate:~# apt-get install samba

root@gate:~# cd /etc/samba/

Публичный каталог доступный на чтение

FreeBSD/Ubuntu

gate# cat smb.conf
[global]
   workgroup = CORPX
   security = share 
[share]
   path = /usr/share
   guest ok = yes

или

[global]
   workgroup = CORPX
   security = user
   map to guest = Bad User
[share]
   path = /usr/share
   guest ok = Yes
gate# testparm

Публичный каталог доступный на запись

FreeBSD/Ubuntu

gate# mkdir /var/samba

gate# cat smb.conf
[global]
   workgroup = CORPX
   security = share
   hosts allow = 192.168.X. 
[share]
   path = /var/samba
   guest ok = yes
   read only = no
gate# chmod 777 /var/samba

или

[global]
   workgroup = CORPX
   security = user
   hosts allow = 192.168.X. 
   map to guest = Bad User
[share]
   path = /var/samba
   guest ok = yes
   read only = no
   force user = nobody
gate# chmod -R nobody:nobody /var/samba
gate# testparm

Идентификация доступа к файловому серверу на основе копии базы данных учетных записей (smbd должен быть запущен)

gate# adduser user1
...
gate# adduser userN

gate# smbpasswd -a user1
...
gate# smbpasswd -a userN

gate# cat smb.conf
[global]
        workgroup = CORPX
        security = user
[user]
        path = /home/user
        valid users = user1, ... ,userN
#       force user = user1  #if need all files owned by single user
        read only = No

Или для всех пользователей с домашними каталогами

[global]
        workgroup = CORPX
        security = user
[homes]
        read only = no

Идентификация доступа к файловому серверу на основе регистрации в AD

WINBIND синхронизация пользователей с Microsoft AD

gate# cat smb.conf
...
[user_write]
        path = /tmp
        valid users = CORPX\user, CORPX\Administrator
        read only = no
[group_write]
        path = /tmp
        valid users = "@CORPX\domain users"
        read only = no
        force user = nobody
файловые_сервисы_unix_для_пользователей_windows.1284447574.txt.gz · Last modified: 2013/05/22 13:50 (external edit)