9.6. 安装Samba服务器

Samba服务器是Linux平台上的Windows文件服务器和打印服务器，可供Windows用户或Linux用户共同使用，是Linux与Windows之间信息沟通的桥梁。安装命令如下：

debian~:# apt-get install samba smbclient

samba是服务器软件包，smbclient是客户端软件包，可选安装。Samba服务器的配置文件叫smb.conf，位于/etc/samba/目录下。在/usr/share/samba/目录下也有一个smb.conf文件备份，如果你在配置服务器时把/etc/samba/smb.conf改乱了，就可以用该文件来恢复到初始状态。启动脚本位于/etc/init.d/目录下，叫samba，如果修改了smb.conf配置文件，可用samba restart命令重启Samba服务器。

/etc/default/samba文件可设置samba服务器的启动方式，是daemons还是inetd，默认的设置是采用daemons方式的：

# Defaults for samba initscript
# sourced by /etc/init.d/samba
# installed at /etc/default/samba by the maintainer scripts
#
#
# This is a POSIX shell fragment
#
# How should Samba (smbd) run? Possible values are "daemons"
#       or "inetd".
RUN_MODE="daemons"

关闭服务器可用smbcontrol这个程序。命令格式如下：

debian:~# smbcontrol smbd shutdown

为使Samba服务器正常使用，还需作一些设置。

• 在系统中创建test用户

  debian~:# useradd -m test
  

• 增加samba用户

  debian~:# smbpasswd -a test
  

  	samba的用户名必须与Linux系统的用户名一致，但密码可以不同。用户登录Sabma服务器时的密码是使用sabpasswd程序设置的密码。

• 修改/etc/samba/smb.conf文件，把安全级别设置成用户级。这样，连接Samba服务器的每个用户都需提供用户名和密码。我们还要启用加密密码功能，这样NT以上的系统才能正常连接Samba服务器。下面是一个配置文件示例。

  #
  # Sample configuration file for the Samba suite for Debian GNU/Linux.
  #
  #
  # This is the main Samba configuration file. You should read the
  # smb.conf(5) manual page in order to understand the options listed
  # here. Samba has a huge number of configurable options most of which
  # are not shown in this example
  #
  # Any line which starts with a ; (semi-colon) or a # (hash)
  # is a comment and is ignored. In this example we will use a #
  # for commentary and a ; for parts of the config file that you
  # may wish to enable
  #
  # NOTE: Whenever you modify this file you should run the command
  # "testparm" to check that you have not many any basic syntactic
  # errors.
  #
  #======================= Global Settings =======================
  [global]
  ## Browsing/Identification ###
  # Change this to the workgroup/NT-domain name your Samba server will part of
     workgroup = DEBIAN_FANS
  # server string is the equivalent of the NT Description field
     server string = %h server (Samba %v)
  # Windows Internet Name Serving Support Section:
  # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
  ;   wins support = no
  # WINS Server - Tells the NMBD components of Samba to be a WINS Client
  # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
  ;   wins server = w.x.y.z
  # This will prevent nmbd to search for NetBIOS names through DNS.
     dns proxy = no
  # What naming service and in what order should we use to resolve host names
  # to IP addresses
  ;   name resolve order = lmhosts host wins bcast
  
  #### Debugging/Accounting ####
  # This tells Samba to use a separate log file for each machine
  # that connects
     log file = /var/log/samba/log.%m
  # Put a capping on the size of the log files (in Kb).
     max log size = 1000
  # If you want Samba to only log through syslog then set the following
  # parameter to 'yes'.
  ;   syslog only = no
  # We want Samba to log a minimum amount of information to syslog. Everything
  # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
  # through syslog you should set the following parameter to something higher.
     syslog = 0
  # Do something sensible when Samba crashes: mail the admin a backtrace
     panic action = /usr/share/samba/panic-action %d
  
  ####### Authentication #######
  # "security = user" is always a good idea. This will require a Unix account
  # in this server for every user accessing the server. See
  # /usr/share/doc/samba-doc/htmldocs/ServerType.html in the samba-doc
  # package for details.
     security = user
  # You may wish to use password encryption.  See the section on
  # 'encrypt passwords' in the smb.conf(5) manpage before enabling.
     encrypt passwords = yes
  # If you are using encrypted passwords, Samba will need to know what
  # password database type you are using.
     passdb backend = tdbsam guest
     obey pam restrictions = yes
  ;   guest account = nobody
     invalid users = root
  # This boolean parameter controls whether Samba attempts to sync the Unix
  # password with the SMB password when the encrypted SMB password in the
  # passdb is changed.
  ;   unix password sync = no
  # For Unix password sync to work on a Debian GNU/Linux system, the following
  # parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for
  # sending the correct chat script for the passwd program in Debian Potato).
     passwd program = /usr/bin/passwd %u
     passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
  # This boolean controls whether PAM will be used for password changes
  # when requested by an SMB client instead of the program listed in
  # 'passwd program'. The default is 'no'.
  ;   pam password change = no
  
  ########## Printing ##########
  # If you want to automatically load your printer list rather
  # than setting them up individually then you'll need this
  ;   load printers = yes
  # lpr(ng) printing. You may wish to override the location of the
  # printcap file
  ;   printing = bsd
  ;   printcap name = /etc/printcap
  # CUPS printing.  See also the cupsaddsmb(8) manpage in the
  # cupsys-client package.
  ;   printing = cups
  ;   printcap name = cups
  # When using [print$], root is implicitly a 'printer admin', but you can
  # also give this right to other users to add drivers and set printer
  # properties
  ;   printer admin = @ntadmin
  
  ######## File sharing ########
  # Name mangling options
  ;   preserve case = yes
  ;   short preserve case = yes
  
  ############ Misc ############
  # Using the following line enables you to customise your configuration
  # on a per machine basis. The %m gets replaced with the netbios name
  # of the machine that is connecting
  ;   include = /home/samba/etc/smb.conf.%m
  # Most people will find that this option gives better performance.
  # See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html
  # for details
  # You may want to add the following on a Linux system:
  #         SO_RCVBUF=8192 SO_SNDBUF=8192
     socket options = TCP_NODELAY
  # The following parameter is useful only if you have the linpopup package
  # installed. The samba maintainer and the linpopup maintainer are
  # working to ease installation and configuration of linpopup and samba.
  ;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
  # Domain Master specifies Samba to be the Domain Master Browser. If this
  # machine will be configured as a BDC (a secondary logon server), you
  # must set this to 'no'; otherwise, the default behavior is recommended.
  ;   domain master = auto
  # Some defaults for winbind (make sure you're not using the ranges
  # for something else.)
  ;   idmap uid = 10000-20000
  ;   idmap gid = 10000-20000
  ;   template shell = /bin/bash
  #======================= Share Definitions =======================
  [homes]
     comment = Home Directories
     browseable = yes
  # By default, the home directories are exported read-only. Change next
  # parameter to 'yes' if you want to be able to write to them.
     writable = no
  # File creation mask is set to 0700 for security reasons. If you want to
  # create files with group=rw permissions, set next parameter to 0775.
     create mask = 0700
  # Directory creation mask is set to 0700 for security reasons. If you want to
  # create dirs. with group=rw permissions, set next parameter to 0775.
     directory mask = 0700
  # Un-comment the following and create the netlogon directory for Domain Logons
  # (you need to configure Samba to act as a domain controller too.)
  ;[netlogon]
  ;   comment = Network Logon Service
  ;   path = /home/samba/netlogon
  ;   guest ok = yes
  ;   writable = no
  ;   share modes = no
  [printers]
     comment = All Printers
     browseable = no
     path = /tmp
     printable = yes
     public = no
     writable = no
     create mode = 0700
  # Windows clients look for this share name as a source of downloadable
  # printer drivers
  [print$]
     comment = Printer Drivers
     path = /var/lib/samba/printers
     browseable = yes
     read only = yes
     guest ok = no
  # Uncomment to allow remote administration of Windows print drivers.
  # Replace 'ntadmin' with the name of the group your admin users are
  # members of.
  ;   write list = root, @ntadmin
  # A sample share for sharing your CD-ROM with others.
  ;[cdrom]
  ;   comment = Samba server's CD-ROM
  ;   writable = no
  ;   locking = no
  ;   path = /cdrom
  ;   public = yes
  # The next two parameters show how to auto-mount a CD-ROM when the
  #       cdrom share is accesed. For this to work /etc/fstab must contain
  #       an entry like this:
  #
  #       /dev/scd0   /cdrom  iso9660 defaults,noauto,ro,user   0 0
  #
  # The CD-ROM gets unmounted automatically after the connection to the
  #
  # If you don't want to use auto-mounting/unmounting make sure the CD
  #       is mounted on /cdrom
  #
  ;   preexec = /bin/mount /cdrom
  ;   postexec = /bin/umount /cdrom
  [d]
  writable = yes
  path = /mnt/hda5
  valid users = root         #指定有效用户，只有root用户能访问该共享目录。
  create mask = 0660
  directory mask = 0770
  

这样，最基本的Samba服务器就设置好了，在Windows上就可用test用户名访问Samba服务器上的/home/test目录了。我们还设置了一个共享目录d，指向本机的/mnt/hda5目录。该共享只能由root用户访问。当然，同test用户一样，在连接前要先用smbpasswd -a root命令创建叫root的samba用户。在Linux下我们可以用smbclient //samba_server/sharename命令访问samba服务器共享目录。

Samba服务器的功能是很强大的，有关Samba服务器的详细配置和使用介绍请参考网站上的Samba学习笔记。