Samba: Macmiil

Saaxiibbo waad salaaman tihiin !. Waxaan sii wadaynaa taxanaha Samba maanta waxaan arki doonaa xirmada macaamil, kaas oo na siinaya qalab taxane ah si aan ugu helno kheyraadka la wadaago ee Microsoft Windows iyo Samba server.

Had iyo jeer maskaxda ku hay inaan bixinno Bar Gelitaan barnaamijyada ama adeegyada aan wax ka qoro. MAYA Waxaan dooneynaa inaan badalno dukumiintiyada tirada badan ee inbadan, laakiin marar badan, aan ku heyno farahayaga keydka barnaamijyada. Tani waa sababta aan had iyo jeer u nidhaahno taas, wixii macluumaad dheeraad ah, nin, ama waxaan kugula talineynaa inaad aqriso dukumiintiyada lasocda, MAR WALBA KA HOR INTAAD baareynin internetka. Aad u xun dukumiinti badan oo laga heli karo meelaha lagu keydiyo ayaa ku qoran Ingiriis. Waxaan hadda haysannaa Software fara badan oo bilaash ah oo ay soo saareen kumanaan qof oo xiiseeya. Waxa ugu yar ee aan sameyn karno waa aqrinta iyo wax yar ka barashada sida loo isticmaalo. Waan hubaa in qaybteenu ay tahay mida u baahan dadaal ugu yar.

Horey, waxaan ka cudurdaaranayaa wixii iga dhaaf ama khaladaad aan ku talagalin. Wax ka qorida Suugaanta Samba waa hawl aad u dhib badan, xitaa haddii kaliya amar laga helo.

Kahor intaadan sii wadin, waxaan kugula talineynaa inaad aqriso:

• Samba: Intro loo baahan yahay
• Raadi shabakad SMB / CIFS la'aanteed Samba

Maqaalka waxaan arki doonaa:

• Macaamiil
• samba-common-bin
• Dejinta faylka /etc/resolv.conf
• Hordhaca kaydinta /etc/samba/smb.conf
• Adeegsiga SmbClient
• Resumen

Xidhmada macaamil Waxaan ku rakibi karnaa iyada oo loo marayo Synaptic ama khadka amarka. Sida xidid waxaan ku fulinnaa qunsuliyad:

aptitude show smbclient karti u rakib smbclient

Ogsoonow in baakadaha sidoo kale la rakibay samba-caadi y samba-caadi-biin. Barnaamijka Samba sidan oo kale lama rakibin, in kastoo SmbClient IF waa iska leh qaybta Samba.

Macaamiil

Xirmada ayaa na siineysa qalabka soo socda:

• helaa: Wuxuu liis gareeyaa macluumaadka ku saabsan kombiyuutarada ka jawaabaya weydiinta magaca SMB ee shabakadda hoose.
• macaamil: Macaamiil la mid ah ftp si loo helo kheyraadka la wadaago ee server-yada SMB / CIFS.
• smbget: Utility la mid ah wget si aad ugala soo baxdo feylasha serverka SMB.
• smbtar: Qoraalka Console ee ka shaqeeya shirkadda 'SmbClient' oo noo oggolaaneysa inaan ka sameysano nuqulo nuqul ah ilaha wadaagga ah ee SMB / CIFS si toos ah loogu duubay cajalad ku duuban UNIX.
• wax iibiya: Qalab lagu fuliyo howlaha macmiilka-MS-RPC ama Wicitaanka Nidaamka Fog ee Microsoft. Macluumaad dheeraad ah oo ku saabsan caawinta Windows.
• smbspool: Wuxuu u diraa feylka daabacaha SMB.
• smbtree: Qor ama browser SMB qaabka qoraalka. La mid ah "Shabakadda Deegaanka" ee kombiyuutarada Windows. Waxay ku daabacdaa geed leh dhammaan meerisyada la yaqaan, server-yada qayb kasta, iyo kheyraadka ay wadaagaan.
• smbcacls: Qalab lagu xakameynayo Liistada Xakamaynta Helitaanka NT ee galka ama faylasha la wadaago ee nooca SMB.
• smbcquotas: U-adeegsiga maareynta Kootada (kootada) saamiyada SMB.

samba-common-bin

Qeyb ahaan samba-caadi-biin wuxuu na siiyaa barnaamijyada soo socda:

• net: Adeegga uur qaadida inuu u shaqeeyo sida barnaamijka «net»Windows. Waa qalab lagu maareeyo server-yada Samba iyo serverka CIFS ee fog.
• eegid: NetBIOS ka badan macmiilka TCP / IP ee loo isticmaalay raadinta magaca NetBIOS.
• smbpasswd: Amarka noo oggolaanaya inaan beddelno lambarka sirta ee SMB ee isticmaale.
• imtixaan: Utility-ka oo naga caawiya inaan hubinno qaabeynta faylka qaabeynta guud ee Samba smb.conf.

Dhamaan amarrada kor ku xusan, shaqsi ahaan waxaan isticmaalay badiyaa imtixaan, macaan, smbtree, net y smbpasswd. Waxay noqon laheyd maqaal aad u dheer, iyo waliba caajis, in la koobo qof kasta oo ku lug leh.

Si loo tijaabiyo SmbClient, waxaan sameynay LAN yar oo leh qalabka soo socda:

w2003: Main Domain Controller ee Windows 2003 SP2, Enterprise Server, oo waliba bixiya adeegyada DNS iyo WINS. Magaca domain waa asxaabta.cu. Isticmaalayaasha ka diiwaangashan Domain-ka waa: cirifka, Legolas, dhuumaha y tallaabo. :-) Serverkaan waxaan ku leenahay galka la wadaago dhulka dhexe, kaas oo aan siinay rukhsad aqris tallaabo oo wax u akhri - wax u qor dhuumaha. Isticmaalaha cirifka Isaguna waa maamule domain.

miwheezy: Mashiinka leh Debian 7.0 "Wheezy", kaas oo aan ku rakibi doono xirmada macaamil.

saxda ah: Kooxda la socota Ubuntu 12.04 Server LTS iyo Gnome-Shell, oo aan sidoo kale ku rakibeyno xirmada 'SmbClient'. Waxaan ku biirnay kooxdan amigos.cu domain, si markaa dadka isticmaala ee ka diiwaangashan domain ay u bilaabi karaan fadhiga maxalliga ah. Sidaa darteed, waxaad ku leedahay koonto mashiin koontaroolaha bogga. Isaga sidee loo sameeyaa si aad ugu biirto Debian ama Ubuntu Diiwaanka Firfircoon ee Microsoft, waxaan ku arki doonaa maqaal mustaqbalka ah.

Dejinta faylka /etc/resolv.conf

Aad ayey muhiim u tahay inaan si sax ah u sheegno DNS-ka, gaar ahaan haddii aan haysanno LAN oo leh Microsoft Domain Controller. Tusaalaheena, IP-ga w2003.amigos.cu Waa 10.10.10.30. Sidaa darteed, feylka /etc/resolv.conf waxaa looga tagi doonaa waxyaabaha soo socda:

ka raadi asxaabta.cu magac bixiyaha 10.10.10.30

Haddii ay dhacdo inaanan haysan Shabakad-Maareeye-GNOME rakibay, tusaale ahaan, server-ka, ma dhaawaceyso in si sax ah loo caddeeyo xuduudaha hore ee faylka / Iwm / network / interfaces.

DNS-ka la rakibo marka aan xakameyno Domain Controller ee Microsoft, waxay leeyihiin taxane dhan oo diiwaanno dheeri ah, kuwaas oo iyaga si xoog leh ula falgalaya howlaha Tilmaamaha Firfircoon

Taxaddar kasta oo aan qaadno waa mid ansax ah si Samba ay si sax ah ugu shaqeyso mana ahan inaan madaxeenna ka jabinno khaladaadka qaabeynta ee aan awoodnay inaan iska ilaalino.

Hordhaca faylka /etc/samba/smb.conf

Markaanu rakibno xirmada macaamil, Faylka qaabeynta guud ee Samba Suite ayaa la abuuray: smb.conf.

• Had iyo jeer nuqul nuqul ah ka samee KA HOR inta aanad wax ka beddelin dhinac kasta.
• In kasta oo caawimaaddu ay tahay Ingiriis, waxaan kugula talineynaa IN AAD SI HELI U AKHRISO ka hor inta aanad u dhaqaaqin inaad beddesho cabbir kasta.
• Haddii aadan aqoon Ingiriis gabi ahaanba, fadlan beddel kaliya waxa lagu muujiyey suugaanta kala duwan, oo ay ku jiraan qodobkan.

smb.conf Waxay kakoobantahay macluumaadka qaabeynta saacadaha barnaamijyada Samba Suite. Nidaamkeeda waxaa lagu hubiyaa amarka imtixaan. Sida maqaallada dambe waxaan ku arki doonnaa wax badan oo ku saabsan feylkan, hadda waxaan isku koobi doonnaa tilmaamidda ugu yar ee isbeddelada lagama maarmaanka ah ee ay tahay inaan ku samaynno, xaaladda mashiinka Debian ama Ubuntu iyo in kuma biirin wax domain ah. Isbedelada waxaa lagu muujiyey geesinimo.

 [global] ## Browsing / Aqoonsiga ### # Ku bedel tan magaca kooxda / NT-domain magacaaga Samba qayb ayaa ka noqon doona workgroup = Saaxiibada
# Xarigga server wuxuu u dhigmaa NT Sharaxaadda xarigga server server =% h server # Windows Magaca Internet U Adeegida Qeybta: # WINS Support - Waxay u sheegtaa qeybta NMBD ee Samba si ay awood ugu siiso WINS Serverkeeda # guuleysto taageerada = maya # WINS Server - Wuxuu sheegaa qaybaha NMBD ee Samba inay noqdaan Macaamiil WINS # Xusuusin: Samba waxay noqon kartaa midkood WINS Server, ama Macaamiil WINS, laakiin MA AHA labadaba; guuleysto server = wxyz
guuleysto server = 10.10.10.30

### INTA KALE FILILKA WUXUU KU HAYSAA OO AAN LA ISBEDELIN

Taasi waa, isbeddelada la sameeyay waxay ku jiri doonaan xuduudaha kooxda shaqada y guuleysto server kaliya. Qaarkood waxay la yaabi doonaan isticmaalka WINS. Samba waxay si adag ugu talineysaa adeeggan adeegsiga shabakadaha SMB / CIFS, in IP-ga magacyada NetBIOS si sax ah loo xaliyo. Xitaa markii la rakibo Samba Domain Controller, feylka qaabeynta smb.conf NMBD daemon ayaa loo sheegay inuu u dhaqmo sidii serverka WINS, iyada oo la adeegsanayo cabbiraha ayaa ku guuleysanaya taageerada = haa, taas oo AAN loo baahnayn kiiskeena gaarka ah.

Waxaan hubineynaa qaabeynta faylka smb.conf:

xeon @ miwheezy: ~ $ testparm
Ku shub faylasha isku xirnaanta smb ka /etc/samba/smb.conf rlimit_max: kordhinta rlimit_max (1024) illaa ugu yaraan xadka Windows (16384) Qeybta howsha "[guryaha]" Qeybta howsha "[madbacadaha]" Qeybta howsha "[daabac $]" Loaded Adeegyada faylka OK. Doorka adeegaha: ROLE_STANDALONE
Taabo riix si aad u aragto qashin daadinta qeexitaankaaga adeegga [caalamiga ah] workgroup = FURENDS server string =% h khariidada serverka ee martida = Isticmaalaha Xun adeeca xayiraadaha pam = Haa pam password bedelka = Haa passwd program = / usr / bin / passwd% u passwd sheeko = * Gali \ dhuuji \ s * \ spassword: *% n \ n * Dib u qor \ snew \ s * \ spassword: *% n \ n * ereyga sirta ah ee la cusbooneysiiyey \ si guul leh *. unix password sync = Haa syslog = 0 file log = /var/log/samba/log.%m max log log = 1000 dns proxy = Maya guul server = 10.10.10.30 usershare u ogolow martida = Haa tallaabada argagaxa = / usr / share / samba / panic-action% d idmap config *: backend = tdb [.....]

## Haddii aan ku sameyno saxda ah.amigos.cu, oo horey ugu soo biirtay ## bogga saaxiibada.cu, wax soo saarku wuu ka duwan yahay ## xoogaa

strides @ saxda ah: ~ $ testparm
Ku shub faylasha isku xirnaanta smb ka /etc/samba/smb.conf rlimit_max: kordhinta rlimit_max (1024) illaa ugu yaraan xadka Windows (16384) Faylasha adeegyada xareysan OK. Doorka adeegaha: ROLE_DOMAIN_MEMBER
Guji gala si aad u aragto qashin daadinta qeexidaada adeega [global] workgroup = AMIGOS realm = AMIGOS.CU security = ADS os level = 0 local master = Maya domain master = No shell shell = / bin / bash winbind enum users = Haa winbind enum kooxo = Haa winbind waxay isticmaalaan domainka caadiga = Haa idmap config BCTUK: range = 10000000-19000000 idmap config BCTUK: backend = rid idmap config *: range = 11000-20000 idmap config *: backend = tdb

Marka isbedelada la sameeyo, muhiim maahan in dib loo bilaabo wax adeeg ah waxaanan diyaar u nahay inaan adeegsano amarka macaamil.

Adeegsiga SmbClient

SmbClient asal ahaan waa amar konsole ah. Sidaa darteed waan ka faa'iideysan doonnaa.

En miwheezy.amigos.cu:

xeon @ miwheezy: ~ $ smbclient -L w2003
Gali sirta xeon: qaabeynta kalfadhiga waa lagu guuldareystay: NT_STATUS_LOGON_FAILURE

## Natiijo macquul ah, maadaama xeon uusan aheyn isticmaale diiwaangashan Domainka

xeon @ miwheezy: ~ $ smbclient -L w2003 -U talaabooyin
Gali lambarka sirta ah ee trancos: Domain = [FRIENDS] OS = [Windows Server 2003 3790 Service Pack 2] Server = [Windows Server 2003 5.2] Sharename Type Comment --------- ---- ------ - C $ Disk share Default IPC $ IPC Remote IPC ADMIN $ Disk Remote Admin SYSVOL Disk Logon share server 
    Dhulka Dhexe Disk      
    NETLOGON Disk Logon server share Domain = [FRIENDS] OS = [Windows Server 2003 3790 Service Pack 2] Server = [Windows Server 2003 5.2] Server Comment --------- ------- PRECISE Samba 3.6.3 .2003 W2003 Mastergroup Master --------- ------- ASXAABTA WXNUMX

## Eeg macluumaadka la wadaago tierramedia

xeon @ miwheezy: ~ $ smbclient // w2003 / dhulka dhexe -U elrond
Geli erayga sirta ah: Domain = [FRIENDS] OS = [Windows Server 2003 3790 Service Pack 2] Server = [Windows Server 2003 5.2] smb: \> dir NT_STATUS_ACCESS_DENIED listing * * smb: \> bixitaanka

## macquul ah !!!. In kasta oo elrond yahay maamule, haddana ma haysto rukhsad ku saabsan kheyraadka.

xeon @ miwheezy: ~ $ smbclient // w2003 / dhulka dhexe -U tillaabooyinka
Gali lambarka sirta ah ee trancos: Domain = [FRIENDS] OS = [Windows Server 2003 3790 Service Pack 2] Server = [Windows Server 2003 5.2] smb: \> dir. D 0 Sabti Jul 20 16:58:54 2013 .. D 0 Sabti Jul 20 16:58:54 2013 galka Pipin D 0 Sabti Jul 13 13:01:46 2013 Hawaii.Five-0.2010.S01E01.HDTV.XviD. avi A 366793752 Talaado Sep 21 22:51:12 2010 Hawaii.Five-0.2010.S01E01.HDTV.XviD.srt A 63362 Wed Sep 22 14:03:40 2010 40915 blocks of size 262144. 29215 blocks available smb: \> mkdir tijaabi NT_STATUS_ACCESS_DENIED sameynta tusaha fog \ tijaabada smb: \> bixitaanka

## Xusuusnow in horumarka uu leeyahay kaliya rukhsadaha aqrinta

xeon @ miwheezy: ~ $ smbclient // w2003 / dhulka dhexe -U pipin
Gali lambarka sirta ah ee pipin: Domain = [FRIENDS] OS = [Windows Server 2003 3790 Service Pack 2] Server = [Windows Server 2003 5.2] smb: \> dir. D 0 Sabti Jul 20 16:58:54 2013 .. D 0 Sabti Jul 20 16:58:54 2013 galka Pipin D 0 Sabti Jul 13 13:01:46 2013 Hawaii.Five-0.2010.S01E01.HDTV.XviD. Avi A 366793752 Talaado Sep 21 22:51:12 2010 Hawaii.Five-0.2010.S01E01.HDTV.XviD.srt A 63362 Wed Sep 22 14:03:40 2010 40915 blocks of size 262144. 29215 blocks available smb: \> mkdir try smb: \> dir. D 0 Sun Jul 21 14:21:30 2013 .. D 0 Sun Jul 21 14:21:30:2013 0 Galka Pipin D 13 Sabti Jul 13 01:46:2013 0.2010 Hawaii.Five-01.S01E366793752.HDTV.XviD. Avi A 21 Talaado Sep 22 51:12:2010 0.2010 Hawaii.Five-01.S01E63362.HDTV.XviD.srt A 22 Wed Sep 14 03:40:2010 0 imtixaanka D 21 Sun Jul 14 21:30:2013 40915 262144 blocks of size 29215. XNUMX blocks ayaa laga heli karaa smb: \>? ? allinfo altname archive blocksize cancel case_sensitive cd chmod chown dhow del dir du echo bixitaanka getfacl geteas hardlink caawimaad taariikhda iosize lcd link xiri yar ls l mask md mget mkdir more mput newer furan posix_encrypt posix_open posix_mkdir posix_rmdir putwdir printout putwlinkd rd recurse reget rename reput rm rmdir showacls set setmode stat symlink tar tarmode turjuma mugga furitaanka vuid wdel logon listconconconconconnect ..!             

## Liiska amarrada iyo hoosta, ka caawi amar ## Xusuusnow in smbclient u eg yahay macmiilka ftp.

smb: \> ka caawi helitaanka CAAWIM hel: [magaca deegaanka] hel feyl smb: \> bixitaan
xeon @ miwheezy: ~ $ ls -l
wadar 68 drwxr-xr-x 2 xeon xeon 4096 Jul 13 12:56 Desktop -rw-r - r-- 1 xeon xeon 63362 Jul 21 14:24 Hawaii .Five-0.2010.S01E01.HDTV.XviD.srt

## Runtii, feylka srt waxaa lagu soo guuriyey galka LACAGTII AAN QORAY EE AYAAN AHAY ## smbclient-ka.

xeon @ miwheezy: ~ $ man smb.conf> samba.man
xeon @ miwheezy: ~ $ ls -l
wadarta 420 drwxr-xr-x 2 xeon xeon 4096 Jul 13 12:56 Desktop -rw-r - r-- 1 xeon xeon 63362 Jul 21 14:24 Hawaii .Five-0.2010.S01E01.HDTV.XviD.srt -rw - r - r-- 1 xeon xeon 359814 21 Jul 14 30:XNUMX samba.man
xeon @ miwheezy: ~ $ smbclient // w2003 / dhulka dhexe -U pipin
Gali lambarka sirta ah ee pipin: Domain = [FRIENDS] OS = [Windows Server 2003 3790 Service Pack 2] Server = [Windows Server 2003 5.2] smb: \> dhig samba.man oo faylka samba.man gelinaya \ samba.man (10980,6) kb / s) (celcelis ahaan 10980,7 kb / s) smb: \> dir. D 0 Sun Jul 21 14:31:36 2013 .. D 0 Sun Jul 21 14: 31: 36 2013 0 Diiwaanka Pipin D 13 Sabti 13 01 46: 2013: 0.2010 01 Hawaii.Five-01.S366793752E21.HDTV.XviD. Avi A 22 Talaado Sep 51 12:2010:0.2010 01 Hawaii.Five-01.S63362E22.HDTV.XviD.srt A 14 Wed Sep 03 40:2010:0 21 imtixaanka D 14 Sun Jul 21 30:2013:359814 21 samba. Man A 14 Sun Jul 31 36: 2013: 40915 262144 29213 blocks oo cabirkeedu yahay XNUMX. XNUMX blocks ayaa laga heli karaa smb: \> bixitaan

## Aynu hadda isku dayno amarka smbtree

xeon @ miwheezy: ~ $ smbtree
Gali sirta xeon: ASXAABTA \\ W2003 \\ PRECISE Samba 3.6.3 \\ PRECISE \ IPC $ IPC Service (Samba 3.6.3)
xeon @ miwheezy: ~ $ smbtree -U legolas
Gali sirta legolas: AMIGOS \\ W2003 \\ W2003 \ NETLOGON Logon server share \\ W2003 \ tierramedia \\ W2003 \ SYSVOL Logon server share \\ W2003 \ ADMIN $ Remote Admin \\ W2003 \ IPC $ Remote IPC \\ W2003 \ C $ Default share \\ PRECISE Samba 3.6.3 \\ PRECISE \ IPC $ IPC Service (Samba 3.6.3)

## U fiirso bixitaanka bixiyaha diiwaangashan iyo kuwa aan diiwaangashanayn

Resumen

• Had iyo jeer waxaa lagugula talinayaa inaad amarrada ku maamusho aqoonsiga isticmaale ka diiwaangashan domain xitaa haddii kumbuyuutarka macmiilku uusan ku biirin domainka. Dabcan waa inaan ogaanno aqoonsiga aqoonsiga adeegsadahaas ama inaan leenahay koontadeena isticmaale ee bogga.
• Laga soo bilaabo waxyaalaha kor ku xusan waxay raacaysaa IN AAN LAHAYN IN LAGU SAMEEYO MAGAALADA MACMIILKA MIDNIMO DOOQAN, illaa aan dooneyno inaan ku galno kumbuyuutarka macmiil ahaan isticmaale isticmaale. Xaqiiqdii, goobteyda shaqadu kuma soo biirto shirkadda shirkadeyda.
• Amarada heli y saaray waxay ka shaqeeyaan qaybta ilaa galka deegaanka ama mashiinka macmiilka ee smbclient-ka laga codsaday.
• Si aad u ogaatid dhammaan amarrada gudaha ee macaamil, waa inaan qornaa calaamada su'aasha ?.
• Haddii aan ka fulino isla howlihii hore kumbuyuutar horey loogu biiray domainka, natiijooyinka ayaa isku mid noqon doona. Waxaan ku hubinaynaa kankeena sax ah.amigos.cu.
• Isticmaalka SmbClient wuxuu ka sii gudbaa wixii aan ku aragnay maqaalka. Waxaan ku arki doonaa qoraallada soo socda.
• In kasta oo ay ku xoogan tahay bilow badan, Suugaanta Samba waxay u baahan tahay daraasad shaqsiyeed. Jawaabaha oo dhami ma ahan kuwa ku jira maqaallada ku yaal Tuulada WWW. Qaar badan oo iyaga ka mid ahna waxay ku jiraan luqadda Shakespeare.
• Ha ku niyad jabin khaladka ugu horeeya. Haddii aan baranno sida loo isticmaalo Samba Suite, wax badan ayaan ka baran doonnaa shabakadaha SMB / CIFS iyo gaar ahaan, shabakadaha Microsoft.

Ugu dambeyntiina, ku orod Nautilus ama baare fayl kale smb: // pipin @ w2003 / dhulka dhexe, si loo sameeyo xiriir ku saabsan ilahaas. Isku day inaad furto feylka .avi oo ay la socoto VLC ka dibna ay la socoto shirkadda Totem. Hesho gabagabadaada.

Taasina waa tan maanta, saaxiibayaal. Illaa xiisaha soo socda !!!.

My LAN: