Samba: Daraktan Tsare akan Debian

Barka dai abokai !. Idan muna son samun Server mai zaman kanta (Tsayayyar) don raba albarkatu ko dai daga tashar aikinmu; ko don karamin rukuni na inji; ko don LAN ba tare da mai kula da yanki irin na Microsoft ba, ya fi sauƙi a yi shi ta amfani da Samba.

Akwai wasu kayan aikin zane don wannan dalili, da kuma kayan aikin don gudanar da Samba ta yanar gizo «SWAT». Koyaya, muna bada shawara ga masu farawa waɗanda suka fara a wannan duniyar mai ban mamaki da hannu. Ba shi da wahala ko shaidan kamar yadda mutane da yawa suke zato. Kuma a yayin aiwatar kuna koyon abubuwa da yawa game da cibiyoyin sadarwar SMB / CIFS da kuma game da Izini da Hakki akan tsarin fayil ɗin Linux.

Kafin ci gaba, muna ba da shawarar karantawa:

• Samba: Gabatarwa da Dole
• Samba: Nemo hanyar sadarwar SMB / CIFS ba tare da Samba ba
• Samba: SmbClient
• Samba: CIFS-Utils

Ba za mu gani ba yadda zaka raba firinta ta amfani da Samba. Ga waɗanda suke son yin amfani da wannan ɗakunan don waɗannan dalilai, muna ba da shawarar karanta takaddun da ke biye kamar yadda aka nuna a ciki Samba: Gabatarwa da Dole. Hakanan zaka iya karanta labarin CUPS: Yadda ake amfani da kuma daidaita firintar ta hanya mai sauƙi.

Abubuwan mahimmanci don la'akari

• Duk da duk yanayin da yake tattare da Kundayen adireshi da kuma Masu Kula da Yankin su, wanda a lokuta da yawa ba lallai bane ko kuma amfani dasu da talauci, girka da daidaita sajan Samba mai zaman kansa IS zaɓi ne ingantacce kuma abin dogaro.
• Sabar mai zaman kanta na iya zama mai aminci ko rashin tsaro daidai da buƙatunmu, kuma za mu iya saita ta cikin sauƙi ko rikitarwa.
• Ana yin bayanan mai amfani akan sabar kanta inda albarkatun suke.
• Don mai amfani ya sami damar samun albarkatu daga komputa mai nisa, dole ne a yi musu rajista a cikin tushen mai amfani da Samba.
• Za mu iya ƙarawa kawai ga Samba mai amfani da bayanan waɗanda masu amfani suka riga sun wanzu a kan sabarmu ko na'urar tebur.
• A Standalone Samba Server bai BA samar da hanyar shiga ba, kamar mai kula da yanki yake yi. Hakanan baya samar da Shiga zuwa Yanki.
• Lessananan abin da muka canza da / ko ƙara sigogi zuwa fayil ɗin / da sauransu / smb.conf Ba tare da fara sanin dalla-dalla abin da muke son cimmawa ba, zai zama Mafi Kyau.
• Sabis ɗin raba albarkatu a Samba yana aiki akan tsarin fayil ɗin Linux, gami da mahimmancin tsaro. Ana warware matsaloli da yawa ta hanyar ba da hankali ga fayil da izini na kundin adireshi.
• Yana da mahimmanci fahimtar yadda za'a magance halayen tsarin fayil daga fayil ɗin smb.conf, kazalika da fahimtar yadda UNIX / Linux file system system ke aiki.
• Muna ba da shawarar kada a yi amfani da lafazi, kalmomi, ko sarari a cikin sunayen manyan fayiloli da abubuwan da aka raba. Zai fi dacewa amfani da ƙaramin rubutu don sunaye.
• Ba za a iya maimaita sunayen raba kan LAN ba. Kowane suna na musamman ne.
• Idan babu sabar WINS a cikin LAN ɗinmu, za mu iya yin Samba ɗinmu kamar haka ta ƙara cikin «duniya»Daga fayil smb.conf da siga lashe goyon baya = Ee., wanda aka bada shawarar sosai.

Samfurin saba

sunan: miwa. Yanada: abokai.cu. IP: 10.10.10.20. Masu amfani: xeon, zeus da triton. Groupsarin ƙungiyoyi: ƙidaya

Shigarwa

Ta hanyar Synaptik ne ko kuma ta hanyar Console mun girka kunshin samba.

sudo basira shigar samba

Yana da amfani sosai kuma shigar da kunshin smbclient. Za mu yi amfani da shi don rajista.

A cikin aikin, za a shigar da fakitin - amma a baya mun girka wasu abubuwan masu alaƙa da Suite- samba, samba-gama gari, samba-gama-bin y tdb-kayan aikin. Hakanan, an ƙirƙiri fayil ɗin /etc/samba/smb.conf. Za'a ƙirƙiri wannan fayil ɗin muddin an shigar da fakitin samba-gama gari y samba-gama-bin, kuma ba za a share shi daga tsarin ba har sai mun cire su.

Fayil na smb.conf shine mafi mahimmanci a cikin Samba Suite

Samba yana da adadi mai yawa na zaɓuɓɓukan daidaitawa, yawancin waɗanda ba a nuna su a cikin misali daga smb.conf wanda yake girka tsoho. Zaɓuɓɓukan sun yi sharhi tare da «;»Ana ɗauke da mahimmancin isa don nunawa kuma ƙimominsu na yau da kullun sun bambanta da halayen Samba. Zaɓuɓɓukan sanyi sun yi sharhi tare da «#«, Da Samba Predefinicións, kuma suna ma da muhimmanci a nuna.

Idan muna son ganin abubuwan cikin fayil din ba tare da yin la’akari da zabin da aka yi sharhi ba ko dai tare da «;"ko tare da"#«, Dole ne mu zartar:

 egrep -v '# |; | ^ * $' /etc/samba/smb.conf

Idan muna son ganin abun cikin fayil ɗin ba tare da yin la'akari da zaɓuɓɓukan da aka yi sharhi tare da «#«, Dole ne mu zartar:

egrep -v '# | ^ * $' /etc/samba/smb.conf

Abu na farko da za'a yi shine kwafin fayil /etc/samba/smb.conf. A cikin fayil ɗin kansa mun sami hanyar da Samba ke ba da shawarar yin kwafin aiki, wanda muke bayani dalla-dalla a ƙasa. Kamar yadda tushen muna aiwatarwa:

cd / sauransu / samba mv smb.conf smb.conf.master testparm -s smb.conf.master> smb.conf
tushen @ miwheezy: / sauransu / samba # ls -l
duka 32 -rw-r - r-- 1 tushen tushen 8 Nuwamba 10 2002 gdbcommands -rw-r - r - 1 tushen tushen 805 Aug 4 12:05 smb.conf -rw-r - r-- 1 tushen tushen 12173 4 Aug 12 05:XNUMX smb.conf.master

Lura da bambanci a cikin girma tsakanin smb.conf da aka samar ta wannan hanyar da asalin. Kamar yadda girman yake karami, aikin uwar garken yana ƙaruwa bisa ga abin da Teamungiyar Samba ta nuna.

Abun farko na fayil din /etc/samba/smb.conf Zai kasance (tuna cewa ba za mu haɓaka raɗaɗin bugawa ba):

[duniya]
        workgroup = FRIENDS netbios sunan = MIWHEEZY tsaro = mai amfani
        kirtanin sabar =% h taswirar sabar zuwa bako = Mummunan Mai amfani yayi biyayya ga pam ƙuntatawa = Ee pam kalmar canji canji = Ee passwd shirin = / usr / bin / passwd% u passwd chat = * Shigar \ snew \ s * \ kalmar sirri: *% n \ n * Sake rubutawa 'zuga' s * \ kalmar sirri $ unix kalmar wucewa sync = Ee syslog = 0 log fayil = /var/log/samba/log.%m max log size = 1000 dns wakili = Babu masu amfani da damar baƙi = Ee matsalar firgita = / usr / share / samba / firgita-aiki% d idmap jeri *: backend = tdb [gidajen] comment = Kundin adireshi na gida masu amfani ne masu amfani =% S ƙirƙirar abun rufe = 0700 kundin adireshi = 0700 browseable = A'a

Valuesimar da aka nuna da ƙarfin hali sune kawai waɗanda dole ne mu gyara da farko. Lura cewa, duk da kasancewa halin tsoho na Samba, mun fito fili mun bayyana zaɓin tsaro = mai amfani bai wa mahimmancinsa.

Idan babu sabar WINS a cikin LAN ɗinmu, za mu iya yin Samba ɗinmu kamar haka ta ƙara cikin «duniya»Daga fayil smb.conf da siga lashe goyon baya = Ee., wanda aka bada shawarar sosai.

Dokar Zinare: Theananan da muke canzawa da / ko ƙara sigogi zuwa fayil ɗin smb.conf ba tare da fara sanin dalla-dalla abin da muke son cimmawa ba, mafi kyau zai kasance.

Anan akwai taƙaitaccen taƙaitaccen wasu zaɓuɓɓukan da aka nuna. Don ƙarin bayani, don Allah gudu mutum smb.conf.

• rukuni: Gudanarwa wanda Aikin Aiki kayan aiki zasu bayyana yayin yin burauzar yanar gizo. Wannan ma'aunin kuma yana sarrafa sunan Yankin yayin aiki tare da zaɓi tsaro = yanki kuma a cikin abin da ƙungiyar ta shiga Domain. Za mu gan shi a cikin labarai na gaba. Matsayi na asali shine GASKIYA.
• sunan netbios: Sanya sunan NetBIOS wanda za'a san saba ta Samba akan hanyar sadarwa. Ta tsohuwa daidai yake da na farko bangaren FQDN daga mai gida. A cikin misalinmu FQDN na kungiyar ne miwheezy.amigos.cu. Zamu iya amfani da suna daban da wanda ya dauki bakuncin sabba din mu. A wannan yanayin yana da kyau a hada da rikodin CNAME a cikin namu DNS.
• tsaro: Sashin da ke shafar yadda abokan ciniki ke amsawa da Samba kuma yana ɗaya daga cikin mahimman bayanai a cikin fayil ɗin smb.conf. Matsayi na asali shine mai amfani.
• kirtanin sabar: Gudanar da wane suna aka nuna a cikin maganganun da suka bayyana a cikin burauzar yanar gizo kusa da sunan ƙungiyar.
• taswira zuwa bako: Sigogi wanda yake da amfani kawai yayin saita shi tsaro = mai amfani o tsaro = yanki. "Imar "Mai amfani mara kyau" ta gaya wa Samba ya ƙi kalmar sirri mara aiki, sai dai idan mai amfani ba ya wanzu, a cikin wannan yanayin za a kula da su a matsayin Baƙo ko "bako«. Idan ba mu son ba da izinin zaman baƙi, dole ne mu canza darajarta zuwa Kada, wanda shine ainihin ƙimar ƙaƙƙarfan, kuma kuma canza saitin Masu amfani da izinin baƙi a babu, wanda shine mahimmin ƙimar.
• yi biyayya ga ƙuntatawa na pam: Gudanarwa ko dole ne Samba yayi biyayya ga ƙuntatawa na PAM «Module Ingantaccen Module«, Game da Umarnin Gudanar da Lissafin Mai Amfani da Zama. Matsayi na asali shine babu.
• pam canza kalmar sirri: Ya gayawa Samba yayi amfani da PAM don canje-canjen kalmar sirri da abokin ciniki na SMB ya nema. Matsayi na asali shine babu.
• shirin passwd: Shirin da aka yi amfani da shi don saita kalmomin shiga na UNIX don masu amfani.
• passwd taɗi: Sarkar da ke sarrafa tattaunawar da ke faruwa tsakanin aljan smbd da shirin cikin gida don sauya kalmar sirri da aka bayyana a cikin siga na baya.
• unix kalmar aiki tare: Ya gayawa Samba yayi aiki tare da kalmar sirri ta SMB tare da lambar sirrin UNIX, in dai tsohon ya canza. Matsayi na asali shine babu.
• masu amfani masu amfani: Jerin masu amfani waɗanda aka ba su izinin shiga zuwa hannun jari.

Sake kunnawa ko Sake shigar da sabis ɗin Samba

Duk lokacin da muke yin canje-canje masu mahimmanci, musamman a ɓangaren «[duniya]"na smb.conf, dole ne mu sake farawa sabis ɗin. Idan mun riga mun sami masu amfani da sabar mu, duk lokacin da muka sake kunna Samba, za mu cire haɗin su. Wannan shine dalilin da ya sa, kuma kusan daga yanzu, za mu sake shigar da sabis ɗin ne kawai lokacin da muka ƙara ko gyara abubuwan da aka raba. Don sake kunna sabis ɗin, muna aiwatarwa azaman tushen:

sabis samba sake farawa

Don cajin sabis:

Sabba sabbi reload

Muna kara masu amfani da tsarin da kuma rumbun adana bayanan masu amfani da Samba

Za mu iya ƙarawa kawai ga Samba mai amfani da bayanan waɗanda masu amfani suka riga sun kasance akan sabar yankinmu.

A cikin misalinmu, mai amfani xeon an kara shi yayin shigar Wheezy. Saboda haka, ba za mu ƙara shi ga masu amfani da ƙungiyar ba. Ungiyar masu amfani wanzu akan tsarin kuma an halicce shi yayin girkawa.

Wasu zaɓukan umarni smbpasswd Su ne:

• -a: Theara mai amfani da aka ƙayyade zuwa fayil na gida smbpasswd.
• -x: Mai amfani da aka nuna dole ne a cire shi daga fayil na gida smbpasswd. Sai kawai lokacin da smbpasswd gudu kamar yadda tushen.
• -d: Asusun mai amfani da aka nuna dole ne a kashe shi. Sai kawai a lokacin da smbpasswd gudu kamar yadda tushen.
• -e: Akasin zaɓi -d muddin aka kashe asusun mai amfani.

Don ƙirƙirar masu amfani a cikin ƙungiyarmu, muna yin ta da sanannen umarni adduser.

adduser karin zeus adduser triton

Don ƙirƙirar ƙungiyar lissafi:

addgroup masu kirgawa

Don ƙara masu amfani zuwa ga Samba database:

smbpasswd - tushen
smbpasswd -a xeon smbpasswd -a zeus smbpasswd -a triton

Mun shiga kungiyar lissafi ga masu amfani da muke so:

adduser xeon countus adduser zeus counters adduser xus

Ana ba da shawarar shiga kowane mai amfani da aka kirkira zuwa rukuni users, idan muna so mu ba da izini ga duk masu amfani waɗanda muka ƙirƙira, a kan takamaiman hanya. Hanya mafi sauƙi don haɗuwa da masu amfani da yawa zuwa rukuni shine ta hanyar gyara fayil ɗin kai tsaye / sauransu / rukuni, da kuma kara jerin masu amfani da wakafi ya rabu dasu. Kungiyar zasu iya jagorantar su lissafi. Muna ɗaukar cewa mun haɗu da masu amfani zuwa ƙungiyar users.

A kan tashar aiki, don cire masu amfani da aka ƙirƙira ta amfani adduser, dole ne mu shirya fayil ɗin /etc/gdm3/greeter.gsettings kuma rashin gamsuwa da zabin Disable-user-list = gaskiya ne, don haka ba a nuna jerin masu amfani lokacin shiga. Wannan shine daidaitacciyar halayyar kowane kwamfuta kwastomomin Windows da aka haɗa zuwa Domain.

Hakanan, idan muna son ƙirƙirar masu amfani kar su fara zaman nesa ta ciki ssh, muna shirya fayil din / sauransu / ssh / sshd_config kuma kara zuwa karshen fayil din wajan Masu Amfani. Misali:

[....] # da Kalubalen Kalubale Gaskatawa ga 'babu'. Yi amfani da PAM a AllowUsers xeon

Muna ƙara albarkatun da aka raba

Misali 1: Muna so mu raba babban fayil / gida / xeon / kiɗa ga duk masu amfani masu rajista. Izinin za a karanta-kawai. Da farko dai mun kirkiri fayil din / gida / xeon / kiɗa kuma muna saita mai shi da izini idan ya cancanta. Kamar yadda mai amfani Xeon muna aiwatarwa:

mkdir / gida / xeon / kiɗa ls -l / gida / xeon | kiɗa mai gaishe

Sannan a ƙarshen fayil ɗin smb.conf mun kara da wadannan:

[music-xeon] sharhi = hanyar fayil na kiɗa na kai tsaye = / gida / xeon / karanta waƙa kawai = Ee masu amfani masu amfani = @users karanta jerin = @users

Bayan gyare-gyare ga fayil ɗin, muna aiwatarwa testparm azaman mai amfani xeon kuma muna sake caji sabis ɗin kamar tushen. Hakanan zamu iya gudanar da umarnin duka biyu kamar tushen:

Sabbin samba reload

Don bincika sabon sabis ɗin da aka ƙaddara za mu iya yin shi ta aiwatar da umarni mai zuwa akan kwamfutar kanta:

smbclient -L localhost -U%

Misali 2: Muna so mu raba babban fayil / gida / xeon / kiɗa ga duk masu amfani masu rajista. Za a karanta / rubuta izinin xeon kuma karanta-kawai ga sauran masu amfani na ƙungiyar users. Ba mu da buƙatar gyara mai shi ko izini a kan babban fayil ɗin. Muna canza saitunan rabawa a cikin fayil ɗin kaɗan smb.conf.

[music-xeon] sharhi = hanyar fayil na kiɗa na sirri = / gida / xeon / karanta kida kawai = Babu masu amfani masu amfani = @users rubuta jerin = xeon karanta jerin = @users

Misali 3: Muna so mu raba babban fayil / gida / xeon / lissafin kudi don rukunin masu amfani lissafi. Duk membobin ƙungiyar za su karanta izini. Masu amfani Triton y Zeus za su iya rubuta wa babban fayil ɗin da aka raba.

Yanzu IF dole ne mu canza mai shi da izinin izini na babban fayil ɗin lissafin kuɗi bayan halitta, don haka zasu iya rubutawa Triton y Zeus wanda memba ne na kungiyar lissafi. Dole ne kuma mu kula cewa mai amfani na ƙarshe wanda ya ƙirƙiri ko gyaggyara fayil bai zama mai cikakken mallakarsa ba, don haka sauran masu amfani (s) za su iya canza shi tare da izinin izini.

Yana da mahimmanci fahimtar yadda za'a magance halayen tsarin fayil daga smb.conf, kazalika da fahimtar yadda UNIX / Linux file system system ke aiki.

A waɗannan yanayin dole ne mu:

• Bayyana a cikin sauƙi wanda zai zama Mai amfani da Mai amfani da kuma wanda zai zama Rukuni na Mai mallakar Raba Raba.
• Bada izinin rubutawa zuwa Shafin Rabawa ta Rukuni na Mallaka.
• Bayyana kadan TAKALLA (Sa ID na Rukunin) na shugabanci yayin kirkirar sa.
• Bayyana da kyau a cikin fayil smb.conf hanyoyi na ƙirƙirar fayiloli da kundayen adireshi tsakanin abubuwan da muke dasu.

Kyakkyawan mafita mai sauƙi a aikace zamu sami idan muna aiwatarwa kamar yadda tushen:

mkdir / gida / xeon / lissafin mawaka -R tushe: kirgawa / gida / xeon / lissafin chmod -R g + ws / gida / xeon / lissafin ls -l / gida / xeon

Kuma muna ƙara waɗannan zuwa ƙarshen fayil ɗin smb.conf:

[lissafin kudi] sharhi = Jaka don hanyar masu lissafi = / gida / xeon / lissafin karatu kawai = Babu ingantattun masu amfani = @ akawu masu rubuta jerin = triton, zeus karanta jerin = @ akanta sun tilasta kirkirar yanayi = 0660 yanayin shugabanci mai karfi = 0770

Nan da nan muke bincika mahimmin tsari na smb.conf mediante testparm kuma muna sake caji sabis ɗin ta hanyar Sabba sabbi reload. Hakanan zamu iya gudu smbclient -L localhost -U%. akan sabar gida, kuma smbclient -L mywheezy -U% o smbclient -L mywheezy.friends.cu -U% daga computer mai nisa.

Lokaci shine daga kwamfyuta mai nisa muna haɗuwa da kayan da aka raba kuma muke yin duk gwajin da ake buƙata. Ana ba da shawarar duba yadda mai amfani wanda ya mallaki manyan fayiloli da fayiloli ya canza kamar yadda aka ƙirƙira su a cikin kayan.

Muhimmin: Mai amfani tushen ko mai amfani xeon kuma gabaɗaya kowane memba na ƙungiyar lissafi, zaku iya rubutawa daga zaman gida da aka fara akan wannan kwamfutar ko ta ssh, ma'ana, ba tare da amfani da yarjejeniyar SMB / CIFS ba. Idan ka ƙirƙiri babban fayil ko fayil a cikin gida, ka tuna sake sanya izinin da ya dace. Duba ta ls -l. Rashin yin abin da ke sama shine tushen rikicewa da yawa.

Abokai, ku gafarce ni tsawon labarin kuma ina fata zai amfane ku. Har zuwa kasada ta gaba!