[gate:~] # pkg_add -r samba3
[gate:~] # cat /etc/rc.conf
…
nmbd_enable="YES"
smbd_enable="YES"
winbindd_enable="NO"
…

[gate:~] # rehash

[gate:~] # сd /usr/local/etc/

root@gate:~# apt-get install samba

root@gate:~# cd /etc/samba/

gate# cat smb.conf

[global]
   workgroup = CORPX
   security = share 
[share]
   path = /usr/share
   guest ok = yes

или

[global]
   workgroup = CORPX
   security = user
   map to guest = Bad User
[share]
   path = /usr/share
   guest ok = Yes

gate# testparm

gate# mkdir /var/samba

gate# cat smb.conf

[global]
   workgroup = CORPX
   security = share
   hosts allow = 192.168.X. 
[share]
   path = /var/samba
   guest ok = yes
   read only = no

gate# chmod 777 /var/samba

или

[global]
   workgroup = CORPX
   security = user
   hosts allow = 192.168.X. 
   map to guest = Bad User
[share]
   path = /var/samba
   guest ok = yes
   read only = no
   force user = nobody

gate# chmod -R nobody:nobody /var/samba

gate# testparm

gate# adduser user1
...
gate# adduser userN

gate# smbpasswd -a user1
...
gate# smbpasswd -a userN

gate# cat smb.conf

[global]
        workgroup = CORPX
        security = user
[share]
        path = /var/samba
#       valid users = user1, ... ,userN
        valid users = @wheel
        force user = nobody
        read only = No

gate# mkdir /var/samba

gate# chown -r nobody:nobody /var/samba

Или для всех пользователей с домашними каталогами

[global]
        workgroup = CORPX
        security = user
[homes]
        read only = no

!!! В FreeBSD samba должна быть скомпилирована с поддержкой ADS !!!

server# kadmin -l
kadmin> add -r cifs/gate.corp13.un
kadmin> add -r cifs/gate.CORP13.UN

kadmin> ext -k gatecifs.keytab cifs/gate.corp13.un
kadmin> ext -k gatecifs.keytab cifs/gate.CORP13.UN

server# kadmin.local
kadmin.local:  addprinc -randkey cifs/gate.corp13.un
kadmin.local:  addprinc -e rc4-hmac:normal -randkey cifs/gate.CORP13.UN

kadmin.local:  ktadd -k gatecifs.keytab cifs/gate.corp13.un
kadmin.local:  ktadd -k gatecifs.keytab cifs/gate.CORP13.UN

server# scp gatecifs.keytab student@gate:

Login: gatecifs
Password: Pa$$w0rd

Пароль не меняется и не устаревает

Устанавливаем Microsoft Windows Support Tools

Название сервиса HTTP обязательно заглавными буквами

C:\>ktpass -princ cifs/gate.corpX.un@CORPX.UN -mapuser gatecifs -pass 'Pa$$w0rd' -out gatecifs.keytab

C:\>pscp gatecifs.keytab student@gate:

gate# ktutil copy ~student/gatecifs.keytab /etc/krb5.keytab

gate# ktutil list

root@gate:~# ktutil
ktutil: rkt /usr/student/gatecifs.keytab
ktutil: list
ktutil: wkt /etc/krb5.keytab
ktutil: quit

root@gate:~# klist -k /etc/krb5.keytab

[gate.corp13.un:~] # cat /usr/local/etc/smb.conf
[global]
#  CHOOSE ONE FROM
#  kerberos method = system keytab
#  use kerberos keytab = yes
  realm = CORP13.UN
  security = ads
[homes]
        read only = no
[share]
        path = /tmp
        valid users = @group1
        read only = no
        force user = nobody

WINBIND синхронизация пользователей с Microsoft AD

gate# cat smb.conf
...
[user_write]
        path = /tmp
        valid users = CORPX\user1, CORPX\Administrator
        read only = no
[group_write]
        path = /tmp
        valid users = "@CORPX\domain users"
        read only = no
        force user = nobody