Linux pе -- SAMBA server - 鸟哥的 Linux 私房菜

̪sG2003/09/30

b@몺ϰ (LAN) pGO Windows qAϥΡyWھFzoӥ\ANiHP Windows qɩɮoIU@o LAN ̭ Linux DɡAګ Linux ][Jo Windows qyWھFzOHI]NOA Windows qiHzLyWھFzӦs Linux DWɮסIINO SAMBA oӦADnتFISAMBA OܦΪ@ӦAALiHz Linux b@ɮצA ( File Server )AôѾ LAN ̭ Windows ²檺NiH Linux Diɮתsʧ@CȦpA SAMBA ]iH Linux WLLA (Printer Server) AӤHıoA SAMBA LAN ^muOܤjINӪ@aI ^_^

@
zG
@@GSAMBA oivPW٪Ѩ
@@GSAMBA Υ\
@@GNetBIOS qTw
@@GSAMBA ϥΪ daemons
@@GsuҦ ( peer/peer, domain model )
MwG
@@Gϥ RPM
@@Gϥ Tarball
Server ݪ]wG
@@GSAMBA M󵲺c
@@GDWޥĳ
@@G¦]wy{P smb.conf DnW
@@GSƪ SAMBA ɮ׳]w ( testparm )
@@G]wݭnϥΪ̵nJ Workgroup ( smbpasswd )
@@G]wj쪺 Linux Samba PDC ( Primary Domain Controller )D
@@G]wLA ( Printer Server + LPRng t)
@@G]wLA ( Printer Server + CUPS t)
Client ݪ]wG
@@Gb Windows Ws Linux ɮת]w
@@Gb Linux Ws Windows ɮת]w
w譱G
@@GtX quota ӳWdϥΪ̪ϥΪŶ
@@Gp]w iptables
@@Gp]w daemons ץ\ ( hosts allow )
@@GnƥǤNNH
DJAG
@@GIbnJ̨T{PӨ Linux ɮvoI
@@GO SWAT ( Samba Web Administration Tool )
I^U
P LPI Y
ѦҸ귽G
Dm

SAMBA R

SAMBA

SAMBA oivPW٪Ѩ

Network File System, NFS

ӸƴNO Client ݤW partition @

Common Internet File System, CIFS

WھF

xIJMoⳡtΥiHۤqASDz Sun NݳoWRaHiiHNoⳡtΪB@zXӡAM Sun o]ɮ׸ƩOH

Server Message Block (SMB)

SMB

GALjդ@Ab Unix Like WiHɮ׸ƪ file system O NFSAb Windows WϥΪyWھFzҨϥΪɮרtΫh٬ Common Internet File System, CIFS

SAMBA Υ\

ɮ׻PLAȡF
iHѨϥΪ̵nJ SAMBA Dɪ{ҡAHѤP̪ӧOơF
iHi Windows WDWٸѪR (NetBIOS name)
iHi˸m ( Ҧp Zip, CDROM... )

ιҤ@

ιҤG

ιҤT

NetBIOS qTw

N NFS O[cb RPC Server W

NetBIOS ( Network Basic Input/Output System, NetBIOS )

NetBIOS over TCP/IP

Gγ\z|o{b Windows ]w̭``ݨ NetBEUI oөNNAOOHƹWAӬO NetBIOS Extened User Interface ²gA]O IBM b NetBIOS oiXӤ᪺}CMo̪޳NӬۦPALAڭ̥unD@²檺NiHFIҥHAbo̧ڭ̤w NetBEUI ӤСC
@

SAMBA ϥΪ daemons

WھF

ڭ̷QnnJY Windows DϥΥLҴѪɮ׸ƮɡAݭn[J Windows Ds ( Workgroup )AåBڭ̪]ݭn]w@ӥDW١A`NAoӥDWٸ Hostname O@˪A]oӥDW٬O[cb NetBIOS wWAڭ̥iH²檺٩IL NetBIOS Name nFCbP@ӸsշANetBIOS Name ݭnOW@LGI

nFAڭ̵nJӥDAणϥθӥDҴѪɮ׸٭n Windows DSѧڭ̨ϥΪvoIҥHAäOnJ Windows DAڭ̴NiHLθӥDɮ׸귽FC]NOApGD\AnJAOoS}귽zΡAAnJD]Lkdݹ𫍧wи̭ƪաI

smbd Go daemon Dn\NOΨӺ޲z SAMBA DɤؿBɮ׻PLeC
nmbd Go daemon hOΨӺ޲zsհաBNetBIOS name յѪRC

suҦ ( peer/peer, domain model )

peer/peer ( Workgroup model ) G

귽(Ϊ̬O@)

WھF

u@s(workgroup)

(1)pAΪ̬O (2)Sݭn``iɮ׸ƤɪҡAΪ̬O (3)CӨϥΪ̳W۾֦ӹq֦v(NOAӹqOϥΪ̪AӤOΪաI)

domain model G

Primary Domain Controller, PDC

MwˡG

ĳϥαzۤv distribution ҴѪ RPM ɮרӦw˳I

ϥ RPM Ӧw

sambaGoӮMDn]tF SAMBA Dn daemon ɮ ( smbd nmbd )B SAMBA ( document )BHΨLP SAMBA logrotate ]wɤζ}w]ﶵɮ׵F
samba-commonGoӮMhDnѤF SAMBA Dn]w (smb.conf) B smb.conf yk窥յ{ ( testparm )F
samba-clientGoӮMhѤF Linux SAMBA Client ݮɡAһݭnuOAҦp SAMBA ɮ׮榡 smbmount C

samba-server, samba-doc, samba-common, samba-client

[root@test root]# rpm -qa | grep samba
samba-common-2.2.7a-8.9.0
redhat-config-samba-1.0.4-1
samba-2.2.7a-8.9.0
samba-client-2.2.7a-8.9.0
`N@UAWܪҤlO Red Hat 9 ɮסA𫟺 redhat-config-samba
O Red Hat B~Ѫ]w\AiHΦw˥LաI

ϥ Tarball Ӧw

http://ftp.nsysu.edu.tw/Unix/Samba/

GUլOb Red Hat 9 Wi檺ApGztΨäO Red Hat 9 ɡAЪ`N source ӥؿU config.log ɮסA̭|O~T

[root@test root]# wget http://ftp.nsysu.edu.tw/Unix/Samba/samba-2.2.8a.tar.gz
GW}uO@ӽdҡAЦۦ줤sjǤUI
@
[root@test root]# cd /usr/local/src
[root@test src]# tar -zxvf /root/samba-2.2.8a.tar.gz
oӮɭԷ|@ӥؿ]XӡG /usr/local/src/samba-2.2.8a
@
[root@test src]# cd samba-2.2.8a #(boӥؿݤ@U README I)
[root@test samba-2.2.8a]# cd source
[root@test source]# ./configure --prefix=/usr/local/samba \
> --with-automount --with-smbmount --with-pam \
> --with-mmap --with-quotas --with-libsmbclient
٬OnƪLjդ@UG
1. ХH ./configure --help ݤ@U configure @ǬѼƥΪk
2. pGoͥ~AФnUi make ʧ@A]٬O諸I
3. U@oͥ~ɡAq`Oѩ@Ǩ祃w䤣쪺tGAаѦҦؿ
@ U config.log oɮתeA̭|O@ǿ~{C
@
[root@test source]# make #(}lisĶI)
oӹL{|@ǮɶA]L|NlX (source code) Hz𫍧]w
åH gcc o compiler ӶisĶIҥH|@ǮɶաI
@
[root@test source]# make install
NsĶi binary ɮצw˨ /usr/local/samba ̭hI
boӨҤlAӱzb]w SAMBA ɡAݭn /usr/local/samba I

Tarball

RPM

Server ݪ]w

UЧڭ̳H RPM w˪ SAMBA MӶi满

smb.conf

@kqAUkq

iptables P /etc/hosts.allow(deny)

SAMBA M󵲺c

SAMBA ]wɡG

/etc/samba/smb.confGoӴNO SAMBA ̥Dn]wɤFIb²檺]wAo]Oߤ@@ӳ]wɡI~AoɮץNt۷״IAҥHAb]weAШϥ vi nnԲӪ[ݤ@UoɮקaIoӳ]wɥDn]wⳡAOO [global] oӳ]wD\઺ءAHαUӪCӤɥXhؿݩʳ]wCڭ̷|b򪺳ihC

/etc/samba/lmhostsGoɮתDnتb NetBIOS name PӥDW٪ IP AƹWALIO /etc/hosts \IuLo lmhosts DW٬O NetBIOS name In /etc/hosts dVFIѩثe SAMBA \VӶVjjAҥHq`unz@Ұ SAMBA ɡALNۤv LAN ̭q NetBIOS name IP TA]Aoɮ׳q`iHγ]wFI

/etc/samba/smbpasswdGoɮ׹w]äsbաILO SAMBA w]ϥΪ̱KXCڭ̳]w SAMBA AOYKAݭnϥΪ̿JbPKX~nJAɡAϥΪ̪KXw]NOmbo̫ ( MoAziHۦb smb.conf ̭]wKXmaαKXɦWALAڭ̳o̳Hw]Aӻ ) Cݭn`NOAoɮצ]]tFϥΪ̪KXAҥHAMv譱n`NաIoɮת֦̻ݭnO root ABv]w 600 ~I

SAMBA ɡG

smbd P nmbdGٰOoڭ̦bz쪺 SAMBA ݭnҰʪ daemons aHIIoӰɴNOӥDn daemons oICҰ SAMBA |ϥΨ쪺ӰɰաI

testparmGڭ̳]wF smb.conf oӥDn]wɤAӷQndݤ@U SAMBA Ҧ]wѼƻP smb.conf ]wجO_TɡANݭnϥγo testparm Ӭdo ( NO test parameters ²gI)IҥHACbק粒 smb.conf Aаȥnϥ testparm dݬݬO_]w~I

smbpasswdGpGz SAMBA ]wYAݭnWwϥΪ̪bPKXA򨺭ӱKXɮתإߴNݭnϥ smbpasswd ӫظm~iHIҥHoӫOPإ SAMBA KXI

smbclientGA Linux DQnǥѡyWھFz\ӬdݧOxqҤɥXӪؿP˸mɡANiHϥ smbclient ӬdݰաIoӫO]iHϥΦbۤv SAMBA DWAΨӬdݬO_]w\I

smbmountGb Windows Wڭ̥iH]wyϺоzӳsۤvDWAP˪Ab Linux WAڭ̥iHzL smbmount ӱNݥDɪɮ׻Pؿۤv Linux DWILAڭ̤]iHϥ mount oӫOӶiP˪\NOFC

SAMBA ؿG

/usr/share/doc/sambaGoӥؿ]tF SAMBA Ҧ޳NUI]NOAzw˦nF SAMBA Aztθ̭Nwgt۷״Iӧ㪺 SAMBA ϥΤUFIȱoaI ^_^AҥHAۦѦҳI

/var/log/sambaGoӥؿNO SAMBA w]nɩmؿFIpGz SAMBA ѬO]w_ӡASΪhóQHaH port 137~139 JIܡANǫ[aI

/usr/share/samba/codepagesGoӥؿ̭mNOUӻy䴩榡C|ҨӻAQz SAMBA 䴩ܡHNݭn codepage.950 oɮת䴩oIMաAb smb.conf ̭]wYiI

DWޥĳ

ĳzN /home oӥؿWߥX@ parition A~AŶ]nj@IA]CӨϥΪ̵nJ SAMBA tΪɭ

bw Linux ɭԡAĳݭnw X Window F
bW Linux ɡA/home ̦nWߥX@ partition AӥBwЪŶ̦nj@ǡF
/home WߥXӪ partition iHWi quota @~AHWdCӨϥΪ̯ϥΪ̤jwЮeqF
ѩ SAMBA iHLAAҥHĳLiHsb Linux DCL (LPT1)F
ѩ SAMBA @ӻȰw鷺 ( LAN ) Di}AҥHAi઺ܡA SAMBA DϥΤOd IP ӳ]wYi (Private IP)AMաA SAMBA O_ϥ private IP ٱozӺ쪺 IP qSʨӳWCHڭ̬sǨӻA]ǩҦq IP O Public IPA SAMBA pGϥ Private IP AMjaLksWڡI ^_^
pGz SAMBA Dϥ Public IP ɡAЯSOdNWdn𪺳]wAɶq LAN qiHsuiӧYiAn Internet }I

¦]wy{P smb.conf DnW

Primary Domain Controller, oڭ̷|b᭱i椶гI

bۤvqWw˥nwGNO NetBIOS ( ɭԷ|O NetBEUI I)w˫Ib]w̭]wnYiF
AӫhObɮ`޸̭]wnnɪؿBϺЩΪ̬O˸m(pL)F
MAoӤɥXӪNN@ձbαKX(pGݭn)A~ϥΪ̥iHϥγoձbKXnJ Windows DF
MN}lB@FI

Ѧ ϰ]w @`Adww骺suaI
Ab linux W SAMBA ]w smb.conf ̭]wnDҤ䴩U\AҦpO_ݭnKXBO_䴩 PDC F
Mb smb.conf b]wnQnɪؿPӥؿݩʡF
pGbBJ 2 ̭ smb.conf ɮפ]wɤkOݭnbPKXnJɡANH smbpasswd إߨϥΪ̪bPKXF
Ұ smb AȡA}lBoI

[root@test root]# cp /etc/samba/smb.conf /etc/samba/smb.conf.bak.raw
[root@test root]# vi /etc/samba/smb.conf
# oɮץNOܸԲӪɡAgTAڭ̨SNѪgUӡA
# o̪تOQjaA smb.conf eWI
[global]
   workgroup = birdhouse
   server string = Linux Samba Server
   netbios name = birdlinux
   client code page = 950
   printcap name = /etc/printcap
   load printers = yes
   printing = lprng
   log file = /var/log/samba/log.%m
   max log size = 500
# 500 ƦrO Kb I
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
# WXA`N [global] A [global] 쩳U [Webpage] ]w
# O [global] ]wءI [global] DneOPD]wI
# nUXӳ]wȡG
# workgroup@@ u@sաGP@ӰϰAn㦳ۦP workgroup
# netbios name DW١GoӥDWٴNO netbios WrIЪ`NApGA
# @@@@@@ S]w netbios name ܡAw] NetBIOS name |H
#@@@@@@@ HOSTNAME ӴNI
# server string oӬODAHKggSYI
# security@@@oӭnAOΨӳWw SAMBA DwnJءAUXءG
#@@@@@@@ share GiwnJAYS]wbPKX
#@@@@@@@ user@ G]wDKXɧ@nJɮסAoPU
#@@@@@@@@@@@@smb passwd file I
#@@@@@@@ domain GNOz SAMBA @ PDC oI
# log file@@@nɩmؿҦbI
# LXӳ]wؽаѦ man 5 smb.conf ڭ̩U]|CXXӱ`Ϊ
# ]wػ
@
[Webpage]
   comment      = My Home Page
   path         = /var/www/html
   read only    = no
   public       = yes
   writable = yes
   create mode = 0664
   directory mode = 0775
# oӳhOwCӤɪؿΪ̬O˸miv譱WwFI
# X²檺]wئG
# comment GoӥؿI
# path @@GoӶدu Linux ɮרtθ̭ؿAЬݩU
# read onlyGO_ŪH
# public@ GO_ҦiHnJϥΪ̬ݨoӶءH
# writable GO_iHgJHIo̻ݭn`N@UI read only P writable
#@@@@@@OZۦ]wȶܡHpG writable bo̳]w no AY
#@@@@@@igJA read only N۩ĲFHIӤ~OT]wH
#@@@@@@׬OG̫X{ӳ]wȬDn]wI
# create mode P directory mode PvI

@ӬO [global] D]wAoӬOC SAMBA Dݭn]wI̭WwP SAMBA DҦI

ܩ [Webpage] OHLO򪱷No̧ڭ|ӹڪҤlnFAzbϰHWھFnJYDAO|ݨӥDҴѪyؿΪ̸˸mWzܡHI Webpage NOWٰաI]NOAzHWھFnJ linux ɡAݨ쪺 Linux ҤɥXӪؿWٴNOyWebpagezաILAo Webpage uOb SAMBA AȷܪW٦ӤwAäOu Linux ɮרtΤWؿIo Webpage ҥNuؿnݩU]wتypathz]wؤ~Io]NOAzbWھFnJ Linux Aݨ Webpage oӥؿAηƹNLIUhAUӬݨ쪺eNO /var/www/html oӯu Linux ɮרtθ̭ƫI

ܼơG

log file = /var/log/samba/log.%m

zA| %m ڡHIIӴNO SAMBA ̭ܼƭȰաIb SAMBA AFKQϥΪ̪]wAҥH|\hܼƭȴѵtκ޲zӨϥΡADnܼƦUXӡG

%SGNثe]wحȡAҿתy]wحȡzNOb [ ] ̭eI|ҨӻG

[homes]
valid users = %S
....

] valid users O\nJ̡A]w %S ܥinJϥΪ̳nJN㤵ѦpG test oӨϥΪ̵nJA [homes] N|۰ʪܦF [test] FIo˥iHդFܡHI %S ηNNObثe [ ] ̭eաI

%mGN Client ݪ NetBIOS DWٳIҦpWרҪnɡI
%MGN Client ݪ Internet DWٳINO HOSTNAMEC
%LGN SAMBA D NetBIOS DW١C

%HGNϥΪ̪aؿC

%UGNثenJϥΪ̪ϥΪ̦W

%gGNnJϥΪ̪sզW١C

%hGNثeo SAMBA D HOSTNAME I`NO hostname O NetBIOS name I

%IGN Client IP C

%TGNثePɶ

Sƪ SAMBA ɮ׳]w

Sƪ SAMBA ɮ

DwpɪpG

birdhouse

birdhome

share (share smb.conf ̭ security ]w)

]w lmhosts G

ƹWAoɮץثeOiHγ]wFILApGOI@IӬݡA]w@U]S򤣦nIboɮ׷Azn]wƫ²ANOC@ PC NetBIOS name Hι IP YiIHڬҡG

[root@test root]# vi /etc/samba/lmhosts
127.0.0.1 localhost
192.168.0.100 birdhome
192.168.0.110 birdbrother1
192.168.0.120 birdbrother2

bڪϺ`@TqAOO Linux D 192.168.0.100 HΨⳡ Windows D 192.168.0.110 120 AЪ`NIoTqu@sճO birdhouse ӹqWٽЭӧO birdbrother1, birdbrother2 PDW٩OIAjաAoӦW٬O NetBIOS name I

}l]w smb.confG

smb.conf

;

¦]wy{

[root@test root]# cd /etc/samba
[root@test samba]# cp smb.conf smb.conf.bak
# A̭n@ӷNOyƵLwzڡI
# ҥHANnƵLƥUӡI ^_^
@
[root@test samsa]# vi smb.conf
# U]w̰¦]wȡI̭nab security = share aI
[global]
   workgroup = birdhouse
   netbios name = birdhome
   server string = Bird's testing SAMBA Server
   client code page = 950
# o client code page ]w쪺ܡI] SAMBA 䴩hytsXA
# ڭ̲ߺDsX cp590 YO code page 950 oӽsXAҥHA
# Qnz SAMBA iHTb Windows WܥXANo[J
# client code page = 950 I (pGS]wAw]ȬO 850 OI)
# pG max log size = 0 ܡAܵnɮפjpSI
   log file = /var/log/samba/log.%m
   max log size = 0
   security = share
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = 192.168.0.100
   dns proxy = no
[tmp]
   comment = Temporary file space
   path = /tmp
# u}XӪ|bo̡I
   read only = no
   public = yes
# Wӳ]wbiDjaAiHs(read only = no)
# ]iHjad(public = yes)I
@
[root@test samba]# grep -v '^#' smb.conf |grep -v '^;'|grep -v '^$'
# oӰʧ@bT{@UW]wO_ۦPA]ɭԥi|ѰONY
# ]wѱOI ^_^

smb.conf ]wȻPҰ SAMBA G

[root@test samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[tmp]"
Loaded services file OK.
Press enter to see a dump of your service definitions <==o̫U Enter
# Global parameters
[global]
        client code page = 950
        code page directory = /usr/share/samba/codepages
        workgroup = birdhouse
        netbios name = birdhome
        netbios aliases =
        netbios scope =
        server string = Bird's test SAMBA Server
        interfaces = 192.168.0.100
        bind interfaces only = No
        security = SHARE
        encrypt passwords = No
.....
[tmp]
        comment = Temporary file space
        path = /tmp
        read only = No
        guest ok = Yes
# Aӷ|ݨpWeAo testparm iHΨӹݩҦ SAMBA ݩʡA
# oݩʫܦhOw]ȡIpGS smb.conf ̭]wɡANOw]ȡA
@
[root@test samba]# /etc/rc.d/init.d/smb restart
Shutting down SMB services:                                [ OK ]
Shutting down NMB services:                                [ OK ]
Starting SMB services:                                     [ OK ]
Starting NMB services:                                     [ OK ]
# Ъ`NAW /etc/rc.d/init.d/smb oɦWO Red Hat ]wȡA
# ܦhLM󤣨oOϥγoɦWIҦp OpenLinux ϥ samba oӡA
# ҥHбzȥϥ RPM O@UɮצW١AΪ̨ϥ
# <tab> tΦ۰ʸɻɦWANiHDOɦWoI
# t~ApeһA SAMBA |ҥΨ daemons AҥHoܨ OKI
@
[root@test samba]# netstat -tlunp | grep ':13'
tcp   0 0 0.0.0.0:139          0.0.0.0:*          LISTEN      4307/smbd
udp   0 0 192.168.0.100:137    0.0.0.0:*                      4311/nmbd
udp   0 0 0.0.0.0:137          0.0.0.0:*                      4311/nmbd
udp   0 0 192.168.0.100:138    0.0.0.0:*                      4311/nmbd
udp   0 0 0.0.0.0:138          0.0.0.0:*                      4311/nmbd
# pGݨoˡAINӨSDաI

pGzN]w𪺸ܡA@wnhݤ@U𪺳]wO_wgҰʤF 137 ~ 139 nJHI

Client ݪաG

Wߨt@ӳ`

[root@test root]# smbclient -L //birdhome
added interface ip=192.168.0.100 bcast=192.168.0.255 nmask=255.255.255.0
Password: <==o̫ Enter
Domain=[birdhouse] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]

        Sharename      Type      Comment
        ---------      ----      -------
       tmp          Disk     Temporary file space
        IPC$           IPC       IPC Service (Bird's testing SAMBA Server)
        ADMIN$         Disk      IPC Service (Bird's testing SAMBA Server)

        Server               Comment
        ---------            -------
       birdhome           Bird's testing SAMBA Server

        Workgroup            Master
        ---------            -------
       birdhouse          birdhome

`NAo̬OH netbios name DWٳI

LAݭnSOdNȬO Linux ɮvP SAMBA ]wvYIoӰDڭ̷|bwʻPDJA̭iԲӪI (GoӰḎ`oͦbϥΪ̨WA]yY SAMBA D]wziHLϥάYӥؿUɮסAOO_ϥΡAMonJ SAMBA ӨϥΪ̹ Linux ɮרtάO_svzI)
@

]wݭnϥΪ̵nJ Workgroup

ISAMBA ٯuO

peer/peer

suҦAаѦҫesuҦ@`

DwpɪpG

birdhouse

birdhome

user

aؿ

/home/public

]w lmhostsG

W@`

}l]w smb.conf smb.conf ]wѼơG

[root@test samsa]# vi smb.conf
[global]
@
# U@]w(DW١Bu@sյ)
   workgroup = birdhouse
   netbios name = birdhome
   server string = Bird's testing SAMBA Server
   client code page = 950
@
# PwnJTءAo security = user @wn]wA
# ӱKXݥ[KA~AKXɮשmb /etc/samba/smbpasswd ̭A
# oɮ׻ݭnۦ]w_ӳI@U|СI
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
@
# @ǻPwʦ]wA𫟺A hosts allow @II
# z]wF hosts allow Ab hosts allow ̭Ww IP
# NLknJ Linux SAMBA DISOdNoIpGzQn} IPA
# Ϊ̨ϥΨ޲zANn]w hosts allow FI
   hosts allow = 192.168.0. 127.
   log file = /var/log/samba/%m.log
   max log size = 0
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = 192.168.0.100
   dns proxy = no
@
# Uh]wCӨϥΪ̪aؿI
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775
# create mode OsإɮתvA directory mode hOsإؿv
# ܩ valid users hOviJ̡Ao̳]w %S IҥHA
# CӨϥΪ̴NiHiJۤvaؿFI
@
[public]
   comment = Public Stuff
   path = /home/public
   public = yes
   writable = yes
@
[root@test samba]# grep -v '^#' smb.conf |grep -v '^;'|grep -v '^$'
# oӰʧ@bT{@UW]wO_ۦPA]ɭԥi|ѰONY
# ]wѱOI ^_^
@
[root@test samba]# mkdir -p /home/public
# WJMn} /home/public AMAoӥؿNnsbڡI

nJoӥؿϥΪ̬O֡H

]wϥΪ̱bPKXG

b Linux oӨtΤUA{ǳݭno UID P GID ( User ID P Group ID ) A~֦ӨvA]~Aisɮ׵ʧ@I
Linux oӨtΪ UID P GID Pb۹YAqqOb /etc/passwd oɮ׷F
SAMBA ȥuO Linux U@MnAϥ SAMBA Ӷi Linux ɮרtήɡA٬OݭnH Linux tΤU UID P GID ǫhI

ڭ̻ݭnzL SAMBA ҴѪ\Ӷi Linux sA Linux sOݭno Linux tΤW UID P GID A]Aڭ̵nJ SAMBA DɡAҧQ SAMBA oO Linux tθ̭bIo]NOAb SAMBA WϥΪ̱bAnO Linux b@ӡI

pGWziHzѤFANiHDUoӰ򥻳WhGy

b SAMBA DҴѯnJbAnb /etc/passwd ̭sbI

zA]NOApGzQnϥ ken nJ SAMBA DAb Linux WNnsb ken oӱbAp@ӡAzH ken nJ SAMBA DɡA SAMBA ~h /etc/passwd ۹ UID P GID AӴѱznJ SAMBA o{ǪvIoөNN۷nApGo̷dMAb᭱@ǥؿv]wN|qqdñFI

ҥHA

pGzݭnH bird oӱbnJ SAMBA ɡAåB Linux èS bird oӨϥΪ̡AIzNnϥ useradd Ө Linux tΦhX@ӦW bird bAM~iHӱbnJ SAMBA AI

åBAäOҦb /etc/passwd ̭biHΨӵnJ SAMBA DAnϥ SAMBA \ (NO smbpasswd oӫO) ҷsW SAMBA KX]wɸ̭b~iHϥ SAMBA nJIoܤhAӰ]@ӨҤlaI] Linux wg㦳 bird, bigbird, smallbird TӱbAӧڥuQn bird ϥ SAMBA ӤwALӱbQ}AڴNuno򰵧YiG

0. ھ smb.conf ]wAإߤ@ӱKXɡI
@ pGzOĤ@إ SAMBA ϥΪ̡A~ݭnioӰʧ@G
@ ]ڭ̦b smb.conf ̭]wKX smb passwd file = /etc/samba/smbpasswd
[root@test root]# cd /etc/samba
[root@test samba]# touch smbpasswd
[root@test samba]# chown root:root smbpasswd; chmod 600 smbpasswd
# Ъ`NA smbpasswd oɮװOFϥ SAMBA AϥΪ̱b
# PKXAҥHMu root ~iŪgFISOdNvڡI
@
1. }lإ߱KXG
[root@test samba]# smbpasswd -a bird
New SMB password: <==bo̿J bird KX
Retype new SMB password: <==AJ@M bird KX
Added user test.
# ЯSOdNA SAMBA KXOb /etc/samba/smbpasswd oɮפAMA
# ziHoɦW (b smb.conf ̭)AOA Linux tΪbKX
# Ob /etc/shadow Ao]NOA SAMBA AKXP Linux U
# bKXä@wnۦPIܩ smbpasswd ϥΤjPWXӰѼơG
@
2. smbpasswd yk
ykGsmbpasswd [-adem] username
ѼơG
   : pGS[W@ӰѼơAYysmbpasswd birdzɡAoܡG
@@ ק SAMBA KX(/etc/samba/smbpasswd)̭ bird oӱbKXI
@@ ]NOAKXɸ̭wgsb@ bird bFI
-a : b smbpasswd KXɸ̭sW@ӨϥΪ
-d : b smbpasswd KXɸ̭YӱbϥΪ̼ȮɵLkϥ SAMBA
@@ hF -d ѼƮɡAb smbpasswd ̭Y|hX@ D ѼơA
@@ NӱbثeLkϥγI
-e : P -d ѼƬۤϡAYӱb_ϥΡI
-m : username NX(Machine Account)AoӻP domain model I
dҡG
[root@test samba]# more smbpasswd
bird:1001:01FC5A6BE7BC6929AAD3B435B51404EE:0CB6948805F797BF2A82807973B89537:[UX         ]:LCT-3F1ECFE6:
[root@vbird samba]# smbpasswd -d bird
Disabled user bird.
[root@vbird samba]# more smbpasswd
bird:1001:01FC5A6BE7BC6929AAD3B435B51404EE:0CB6948805F797BF2A82807973B89537:[DUX        ]:LCT-3F1ED105:
# SOdNAϥ -d Aӱb|bKXɮ׸̭AS줤A
# hX@ D ѼơAӱbȮɵLkϥγI

bWҤlAڭ̶Ȧ} bird ~nJڭ̪DI~Ab smb.conf ̭ӳ]w valid users Ao valid users ҳWwiHϥ SAMBA bANOb /etc/samba/smbpasswd ̭X{boI

sҰ SAMBA AP Client ݪաG

[root@test samba]# testparm
[root@test samba]# /etc/rc.d/init.d/smb restart
[root@test samba]# smbclient -L //127.0.0.1
added interface ip=192.168.0.100 bcast=192.168.0.255 nmask=255.255.255.0
Password: <== Enter
Anonymousloginsuccessful
Domain=[BIRDHOUSE] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]
        Sharename      Type      Comment
        ---------      ----      -------
        public         Disk      Pulic Stuff
        IPC$           IPC       IPC Service (Bird's testing SAMBA Server)
        ADMIN$         Disk      IPC Service (Bird's testing SAMBA Server)
...()...
@
# `NݤWA]ڭ̨Sb smbclient wnJ̡AҥHnJ
# ᪺|QWΦW anonymous Iѩڭ̦} public ja
# sAҥH٬OݪNNI(Gڦٲ@ǿXI)
@
[root@test samba]# smbclient -L //127.0.0.1 -U bird
added interface ip=192.168.0.100 bcast=192.168.0.255 nmask=255.255.255.0
Password: <==o̽аȥJT bird SAMBA KXI
Domain=[BIRDHOUSE] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]
        Sharename      Type      Comment
        ---------      ----      -------
        public         Disk      Pulic Stuff
        IPC$           IPC       IPC Service (Bird's testing SAMBA Server)
        ADMIN$         Disk      IPC Service (Bird's testing SAMBA Server)
bird           Disk      Home Directories
...()...
@
# JӤ@UWUӤPICbh[F -U username (-U bird Ӧa)
# ѩnJ̪ܦ bird FA]ڭ̴NiHݨ bird aؿFI
# ]NOr@ڡIo˥iHMDFHI

v²G

writable, read only, public ѼơA|vTnJ̪vI

Qνs smb.conf Ӧh}LؿAåBSO`N Linux bӥؿUvIШϥ chown P chmod aI
Q smbpasswd ӷsWLϥΪ̨ /etc/samba/smbpasswd ̭hApGӱbèSX{b /etc/passwd ̭AХH useradd sWӱbF
׶i槹󪺳]wAХH testparm iT{AH /etc/rc.d/init.d/smb restart ӭsҰʡI

]wj쪺 Linux Samba PDC ( Primary Domain Controller )D

suk

domain model

ЯdNAڭ̩UO@²檺 PDC DApGzٻݭnB~ϺФɡAеozۤvзNI(ק smb.conf )

wpF[cG

ݭnC@boӺ줺 PC N (Machine account)Ao Machine account NOUӥD NetBIOS W١A]NO bird2000, bird98 DW١CLAЯSOdNAbU PC WDW٬ bird2000 P bird98AOb PDC bW٤WAݭn[W $ bݡA]NOb PDC Wݭn]w machine account bird2000$, P bird98$ ~I

ѩ Windows NT ( Ҧp Windows 2000 oӧ@~t )Ĥ@nJ PDC ɡAݭnϥΨtκ޲zإ߳suAҥHA PDC ݭn]w root oӨϥΪ̱b~I~A PDC |hjMC PC nnJ PDC ɡAL machine account AҥHAb /etc/passwd P /etc/sabma/smbpasswd ̭ݭnPɨ㦳G(1)C machine account bF (2)root oӱbݭn[J smbpasswd ̭F (3)Qnϥ PDC nJӺ쪺ϥΪ̱bAҦpڭ̳oӮרҪ bird oӨϥΪ̡CҥHoAboӮרҤA /etc/passwd P /etc/samba/smbpasswd ݭnUbGbird2000$, bird98$, bird, root ܤ֭noǱbIpGٻݭn bird2, bird3... HnJܡANݭnϥ useradd smbpasswd sWϥΪoI(GSOSO`NA root bubz Windows 2000 Ϊ̬O Windows XP @~t ɤ~ݭn[J /etc/samba/smbpasswd ̭IoO]Ĥ@nJ PDC ɡAݭnH root ӳ]wn``su~I)

b SAMBA o PDC Wݭn}񪺥ؿǩOH

/home/samba/netlogonGϥΪ̦bL PC nJ PDC {ҮɡAPDC |̾ڨϥΪ̪]w(profile)ӰtmonJ̬ؿPv}AoӥؿNObmϥΪ̪]wɤFI]wɪɦWq` username.bat ALڳo̳]wCӤHϥ profile AҥHɦWΤ@ startup.bat IЪ`NAoɮץO DOS ɮסI

/home/userGϥΪ̪aؿڡI

/home/samba/profilesGCӨϥΪ̦bnJ SAMBA Ҽ PDC A٥iHoyۤv Windows ]wȡzIo]tFyڪ̷RBC Windows n骺]wBqT....@jơzCiHboӦa赹LgJOI

Ϻо

]w smb.conf ]wɡG

[root@test samsa]# vi smb.conf
[global]
#1.U@]w(DW١Bu@sյ)
   workgroup = birdhouse
   netbios name = birdhome
   server string = Bird's testing SAMBA Server
   client code page = 950
#2.KXPnɬTI
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   log file = /var/log/samba/%m.log
   max log size = 0
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
#3.LP domain Ѽ
   os level = 64
   preferred master = yes
   domain master    = yes
   local master     = yes
   domain logons    = yes
   logon script     = startup.bat
;   logon script     = %U.bat
   logon path       = \\%L\Profiles\%U
   wins support     = yes
   dns proxy        = no
   time server      = yes
# bW]wAOP domain model Ѽ
# os level      ܻPLDۤAo SAMBA ޲zšA]@I
# domain logons ܳo SAMBA DiH Widnows nJA (PDC)
# logon script ܷϥΪ̵nJAn̥hL profile ]wɡA
#               ڳo̱NCӨϥΪ̵nJɡAnh startup.bat oɮסA
#               oɮשmaNOU [netlogon] path
#               ]wؿAЯSOdN domain P netlogon YI
@
# Uh]wCӨϥΪ̪aؿI
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775
@
# Swb̥iHϥΩUoӳ]w
[netlogon]
   comment = Network Logon Service
   path = /home/samba/netlogon
   writable = no
   write list = bird root
   follow symlinks = yes
   guest ok = yes
@
# SSwb̡AҦp Windows 98 ϥΪ̡A|ϥΩU|I
[Profiles]
    path = /home/samba/profiles
    read only = no
    create mask = 0600
    directory mask = 0700
    browseable = no
@
[tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes
@
[root@test samba]# grep -v '^#' smb.conf |grep -v '^;'|grep -v '^$'
# oӰʧ@bT{@UW]wO_ۦPA]ɭԥi|ѰONY
# ]wѱOI ^_^
@
[root@test samba]# testparm | more
[root@test samba]# /etc/rc.d/init.d/smb restart

Bz PDC DһݭnUӥؿPɮסG

[root@test root]# mkdir /home/samba
[root@test root]# mkdir /home/samba/netlogon
[root@test root]# mkdir /home/samba/profiles
[root@test root]# cd /home/samba/netlogon
[root@test netlogon]# vi startup.tmp
net time \\birdhome /set /yes
net use U: \\birdhome\homes
net use T: \\birdhome\tmp
# net O Windows NT 쪺OΪkG
# net time Gܥثe (client) ϥΪɶnP \\server (bo̬O birdhome)
#            PBNIɭԦ] Server P Client PBAYǵ{
#            |DI
# net use [device:] [directory]
#      device:   device O Windows ϺмѰաI
#      directory O SAMBA D۹諸ؿI
#      bڳoӮרҷACӨϥΪ̵nJAL|bɮ`޷A
#      o{ U ѡAӥBeO \\birdhome\homes ۦPF
#      o{ T ѡAehO /tmp I
@
# SOdNA startup.bat nO DOS 榡AҥHb Linux WsɡA
# ٭n[W@ǯSഫʧ@I
[root@test netlogon]# cat -A startup.tmp | tr '$' '\r' > startup.bat
[root@test netlogon]# cat -A startup.bat
net time \\birdhome /set /yes^M$
net use U: \\birdhome\homes^M$
net use T: \\birdhome\tmp^M$
# ݨFܡHIC@檺̫᭱n[W ^M o Windows ǧ@~iHI
@
# ~Aڭ٭nNb bird2000 W bird oӨϥΪӤH]w
# LƻsL SAMBA DWIb Windows 2000 w]pUA bird
# oӤH]wȷ|ObG
C:\Documents and Settings\bird
# бNo bird ؿ㪺Lƻs /home/profiles/bird A]NOA
# b SAMBA D /home/profiles/bird ̭N Windows 2000
}l
Application Data
Favorites
My Documents
....
# ɮ׸ƳIMo˰G
[root@test netlogon]# cd /home/samba/profiles
[root@test profiles]# chown bird -R bird/
# oӮɭԱzӤwgN Windows bird oӤH]wȵLƻs
# /home/samba/profiles/bird F~I

צb@ Windows 2000 WAiHMΦP@ժӤH]w

]w Machine account P user account G

ڭ̤ݭnLaؿP Shell

[root@test root]# groupadd smbmachine
# VBird ɭԷ|ItAJMڪ /etc/passwd ̭| SAMBA ΪXA
# ڴNNoXӾNXkbSw group ANۭq@ӦW
# smbmachine Machine group nFI ^_^
[root@test root]# useradd -g smbmachine -d /dev/null -s /bin/false bird2000$
[root@test root]# useradd -g smbmachine -d /dev/null -s /bin/false bird98$
[root@test root]# smbpasswd -a -m bird2000$
[root@test root]# smbpasswd -a -m bird98$
# `NڡIhF@ -m ѼơAoӰѼƥN᭱ Machine account A
# ӤO@]w User account I
[root@test root]# usradd bird
[root@test root]# smbpasswd -a bird
# ] bird oӨϥΪ٨SQإߡAzӳo˫إߥLI
[root@test root]# smbpasswd -a root
# OonN root ]ih smbpasswd ̭I
# LAunb Windows 2000 nJ]wANiHN root FI

Client ݵnJ PDC GWindows 2000

H root nJ SAMBA PDC DA]wnsuA~⦨\

y}lz=>y]wz=>yxzAbX{yMsuzAX{pUG

bWAܡyѧOzAX{UG

ѩڭ̦boӳ]wAݭnDW٬ bird2000 Ӻ쬰 birdhouse AҥHAU@z Windows 2000 쥻]wäOo˪ѧOAAпܤWϥܪyezbX{JTDWٻPu@sաIܡyTwzMs}aI

s}A٬O^yѧOz(ĤGӨBJA]NOWWӹϥ)aAUyѧOzA|X{weAbUyU@BzA|X{pUϥܡG

WϥܽпܡyoxqOq@z~IMܡyU@BzX{pUeG

WϥܽпܡyڪqϥΤ@өΦhӺ쪺z~IMUU@BA|X{@ĵiTAiDzAznơAo]tFqW١BϥΪ̦WٵIbUU@BA|X{pUeG

o̽Ъ`NڡIĤ@nJɡAݭnbϥΪ̦W٪aJ root ~IӡyKXzO smbpasswd ]wKXAäO root b Linux t (/etc/shadow) ̭KXIndFIUU@BaI

ѩi|X{@ǤpDAҥHoӵe|ƪLX{աIsJ@Uڭ̪PDW٧aIUU@BG

AJ root P root KX ( /etc/samba/smbpasswd ̭KXơI)AgTIMUTwG

ݨoӵeɡAzӭnܰաI ^_^I]oNOTܤwgnJF PDC DաIxI|sWϥΪ̩OHIOA] SAMBA iHѤ@ӥ\ ( b smb.conf ̭]w add user script ءAаѦ man 5 smb.conf ) Ĥ@nJ PDC Windows 2000 iHϥ SAMBA Ѫ\Ө Linux DW[ϥΪ(PɷsWb /etc/passwd P /etc/samba/smbpasswd )ILAڤӫĳo˰աI]nsWϥΪ̡AunޤHnJ SAMBA DAϥ useradd P smbpasswd YiAhFoӥ\AıoIMINOF @_@IҥHAq`ڴNUyɤsWϥΪzAIo˴NwgO OK աI
U@bz]wL{AѬOX{UeG

ݤ@U /var/log/samba ̭nɸTAרO bird2000.log O bird2000 oDToI
pG٬OLkѨMAiHb lmhosts ̭W[ bird2000 IP PDW٪AMN samba y/etc/rc.d/init.d/smb stopzAݤ@qɶ NetBIOS WٸѪRɶOɡAAsҰ samba y/etc/rc.d/init.d/smb startzAMAs@J root KXӰʧ@I

zAN Windows 2000 s}AùX{ne|zݭnUyCtrl-Alt-Delz~X{nAåBbn|X{TӪŮ (pGuӪŮɡAЫUyﶵzAL\N|۰ʪX{FI) G

ϥΪ̦WGoӦW٥iH(1)JWindows 2000ϥΪ̦W١A]iH (2)J PDC WϥΪ̦W١AҦp bird F
KXGoӱKX]nWJϥΪ̡AݬOΪ̬O PDC DϥΪ̬۹KXF
nJGo̥iHܱzһݭnnJO٬O PDC oI]ݭnPWӶعI

]ڥH bird nJAåB BIRDHOUSE ӵnJA}ɮ`ޡA|opUϺоI

Client ݵnJ PDC GWindows 98

MୱAMbୱNƹвʨyWھFzWYAkA鷺eA|X{pUeG

TCP/IP wGoӥΨӳ]wA IP HκѼ
NetBEUI w

Client for Microsoft Networks

bWX{eAunʨӳAOO(1)ĿynJ Windows NT zo@(] SAMBA PDC O Windows NT tΰڡI)AåBb쪺aJzAڭ̳o̬O birdhouse IMUTwA|^eeAӦbeeAܡyѧOz|X{pUeG

bWeAаȥnqWٻPu@sէoIӤu@sմNOڭ̪ (birdhouse) ڡIMUTwAåBs}As}A|X{pUnJeI

ѦҸ귽

]wLA (printer server)

LPRng

CUPS ( Common Unix Printing System, CUPS )

/dev/lp0

/dev/lp1

TwLiHTXG

NLb Linux D LPT CLW ( NO 25 wӴ )F
}Lq (HNnFaI ^_^ )F
b Linux DW}@Ӳ׺ݾ ( Terminal ) AMJG

[root@test root]# echo "Hello world" > /dev/lp0

w LPRng MG

pGzO Red Hat o Linux distribution ϥΪ̡AЮXz쪩СAMNiHϥ RPM Ӧw LPRng F

LPRng xU̷s LPRng MG

http://www.lprng.com

ftp://ftp.lprng.com/pub/LPRng/LPRng/

NUӪM /usr/local UYAåB}l]wPwˡI( ]ڨSϥ SSL [KH Kerberos \AҥHNLFIԲӪ\ѼƽЦۦŪӥؿU INSTALL I)

[root@test root]# cd /usr/local/src
[root@test src]# tar -zxvf /root/LPRng-3.8.21.tgz
.....(|ͤ@ӦW LPTng-3.8.21 ɮ)...
[root@test src]# cd LPRng-3.8.21
@
[root@test LPRng-3.8.21]# ./configure --prefix=/usr/local/LPRng \
> --disable-keros_checks --disable-ssl --enable-nls
....( @qɶӶitνT{I )....
ĳiHϥ ./configure --help ӹݨC@ӳ]wتI
[root@test LPRng-3.8.21]# make clean all
....A@qɶӵݡ
[root@test LPRng-3.8.21]# make install # }lLwˤUhI
oӮɭԡA LPRng M󪺩ҦƳmb/usr/local/LPRng ̭FI
@
[root@test LPRng-3.8.21]# vi /etc/man.config
# boɮ׷[J@
MANPATH /usr/local/LPRng/man # VBird 2003/07/20
# o˥Ӧbiƪ man ɡANiHd LPRng ѼƤFI
# Ҧp man checkpcB man lprm ...

[roo@test LPRng-3.8.21]#vi /etc/profile
# boɮ׷A export PATH Ӧ椧eA[JG
PATH="$PATH":/usr/local/LPRng/bin:/usr/local/LPRng/sbin
# oˤ@ӡAӦbnJDANiHi LPRng O\I

]w LPRng ]wɡG

ڳo̤OH Red Hat 9 oӨϥ RPM w˻P Mandrake 9.1 H Tarball wˮɪ]wD

0. T{ lp oӨtαbO_sbH
[root@test root]# id lp
uid=4(lp) gid=7(lp) groups=7(lp)
U@X{Fy id: lp: No such user zɡA
аȥi橳Uʧ@AHsWL޲zbG
groupadd lp
useradd -s /sbin/nologin -d /var/spool/lpd -g lp -r lp
mkdir -p /var/spool/lpd/lp0
chown lp:lp -R /var/spool/lpd
pGztηNwgF lp oӱbAWʧ@NݭniI
@
1. ]wn printcap oӥDn]wɡI
[root@test root]# cp /etc/printcap /etc/printcap.bak.raw#uOƥ
[root@test root]# vi /etc/printcap
# pGOϥ Tarball w˪Aoɮצb /usr/local/LPRng/etc/printcap
lp0|HP-LaserJet-1100:\
        :sh:\
        :ml=0:\
        :mx=0:\
        :sd=/var/spool/lpd/lp0:\
        :lp=/dev/lp0:\
#WOG
# lp0@@Lb Linux W١AHP-LaserJet-1100 L lp0 OW
#@@@@Ъ`NA HP-LasetJet-1100 iHHN]wAO lp0 ̦nOdA
#@@@@]ӤeBz@ǬopI
# sh@@ O_LXYAo̧ڭ̨S]wYI
# ml, mx LTAo̧ڭ̤[I
# sd @@CLu@C(CLɮ׼Ȧsؿ)
# lp @@NOLڸ˸mNFI
# ƹWAIȦb lp P sd Ӥw ^_^

[root@test root]# checkpc -f
# oӫODnNOΨӽT{ printcap O_]wT@ӫOI
# pGϥ Tarball w˪B͡AХH /usr/local/LPRng/sbin/checkpc -f T{
@
2. ]w LPRng Dns]w lpd.perms
[root@test root]# vi /etc/lpd.perms
# oɮתenI]AΤFLϥΪ̬O_ϥαz Linux L
# perms NO permission NաI]NOA֯ϥ lpd o daemon
# lpd NO޲zL LPRng daemon oI
# 1. H IP ӤWӨϥ Linux Printer IP sAڳo̶}X
#@@192.168.0.0/255.255.255.0 oӺqI
REJECT SERVICE=X NOT REMOTEIP=127.0.0.1,192.168.0.0/255.255.255.0
#@@pGzQn[JL IP AiHb᭱Hr~jW[I
# 2. AӬO@Ǳﶵ
ACCEPT SERVICE=C LPC=lpd,status,printcap,hold,release,stop,start REMOTEGROUP=bird
ACCEPT SERVICE=M SAMEHOST SAMEUSER
ACCEPT SERVICE=M SERVER REMOTEUSER=root
DEFAULT ACCEPT
#@@ƹWAѩڭ̦bYٷ|~򪺳]wAҥHo̬]w@UYiI
@
3. ]w@UҰʪɮ
[root@test root]# vi /etc/rc.d/init.d/lpd
# pGOH RPM w˪ܡAoӨBJNΧ@FI
# ϥ Tarball wˮɡAw]SoɮסAziHgoˡG
#!/bin/sh
PATH=/usr/bin:/usr/sbin:/bin:/sbin:/usr/local/LPRng/sbin:/usr/local/LPRng/bin
export PATH
case "$1" in
@start)
@@@@# Start daemons.
@@@@@echo "Starting lpd: \c"; /usr/local/LPRng/sbin/lpd;
@@@@@echo "";
@@@@@;;
@stop)
@@@@# Stop daemons.
@@@@@printf "Shutting down lpd: "
@@@@@pkill lpd
@@@@@echo "done"
@@@@@;;
@*)
@@@@@echo "Usage: lpd {start|stop}"
@@@@@;;
esac@

ҰʦLAȡG

[root@test root]# /etc/rc.d/init.d/lpd start
[root@test root]# netstat -tln
tcp 0 0 0.0.0.0:515 0.0.0.0:* LISTEN
[root@test root]# echo "/etc/rc.d/init.d/lpd start" >> /etc/rc.d/rc.local

sg smb.conf A[JL䴩G

[root@test root]# vi /etc/samba/smb.conf
# ަb̡A smb.conf MsLNOFIM[JUo@qG
[global]
   printcap name = /etc/printcap
   load printers = yes
   printing = lprng
# WoTw]ӷ|sb smb.conf AunoTA
# ñN歺 ; YiI`NAoTOsWI
@
# SOLdN@UALɬOg [printers] ]wӴѪI
[printers]
   comment      = HP LaserJet 1100
   printable    = yes
   browsable    = no
   public       = no
   validusers   = bird puma addida amani pada
   printing     = lprng
   path         = /var/spool/lpd/samba
@
# `N@UAWnabG
# printable@ݭnҰʬ yes
# validusers ݭnܴNЦۦ]wAڳo̶Ȥ\ϥΪ̵nJӤwI
# printing@ ]wϥ lprng oӺ޲z{
# path@@@ oӴNOLCAڱNL]wb /var/spool/lpd/samba
@
[root@test root]# mkdir -p /var/spool/lpd/samba
[root@test root]# chown root:root /var/spool/lpd/samba
[root@test root]# chmod 777 /var/spool/lpd/samba
[root@test root]# testparm
[root@test root]# /etc/rc.d/init.d/smb restart

@ǰDJA ( lprm, lpq... )

[root@test root]# lpq
# iHݦLA
Printer: lp0@test 'HP-LaserJet-1100'
Queue: no printable jobs in queue
Status: job 'cfA209test.vbird.idv.tw' removed at 13:29:24.163
[root@test root]# lprm all
# NҦLݦCLƳqqRI

]wLA ( Printer Server + CUPS t)

w CPUS MG

[root@test root]# rpm -qa | grep cups
cups-libs-1.1.17-13.3
cups-1.1.17-13.3
qtcups-2.0-15

]w CUPS ]w cupsd.conf ñҰ cupsG

[root@test root]# vi /etc/cups/cupsd.conf
# oɮת]w httpd.conf OIڭ̥unwӰѼƨӳ]wYiA
# OO / P /admin I]wu 192.168.0.0/24 iHnJI
<Location /admin>
AuthType Basic
AuthClass User
Order Deny,Allow
Deny From All
Allow From 192.168.0.0/24
# `N@UAW AuthClass User oӳ]wȡAiHzH Linux W
# User ӵnJ CUPS H]w Printer I
# o /admin ]weDnPyL޲zz]w
</Location>
@
<Location />
Order Deny,Allow
Deny From All
Allow From 192.168.0.0/24
# o / ]wȫhOMw֥iHnJϥ Printer OI
</Location>
@
[root@test root]# /etc/rc.d/init.d/cups start
[root@test root]# netstat -utln | grep 631
tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN
udp 0 0 0.0.0.0:631 0.0.0.0:*
# Ъ`NAҰʤF CUPS A|ͳo 631 foI

]wzĤ@LG

[root@test root]# lpadmin -p HP-1100-LaserJet -m laserjet.ppd -E \
> -v parallel:/dev/lp0
# ѼƻG
# -p ᭱LW١AW٥iHHKI
# -m ᭱LҲɮ(module interface file)
# -E hOAoӦLiHΨӶiCLNI
# -v ᭱hOyǦC parallelzΪ̬Oy socket zI
@
# H lpadmin ]wnLAӦLACQmb
# /etc/cups/printers.conf ̭I

sg smb.conf A[JL䴩G

[root@test root]# vi /etc/samba/smb.conf
# ަb̡A smb.conf MsLNOFIM[JUo@qG
[global]
   printcap name = cups
   load printers = yes
   printing = cups
@
[printers]
   comment      = HP LaserJet 1100
   printable    = yes
   browsable    = no
   public       = no
   validusers   = bird puma addida amani pada
   printing     = cups
   path         = /var/spool/lpd/samba
@
[root@test root]# mkdir -p /var/spool/lpd/samba
[root@test root]# chown root:root /var/spool/lpd/samba
[root@test root]# chmod 777 /var/spool/lpd/samba
[root@test root]# testparm
[root@test root]# /etc/rc.d/init.d/smb restart

bL]wAgo͹L@۷ɪƱAګFѩR]w LPRng H CUPS NOLk]wn Printer AMwgsWLFAONOLXӳOýXAܶ˸㵥ڪF@ѥhcdA̫ᳺMo{A~abyBIOS ]wzI˸ܡٰOoC}ɭԨtγ|hŪ BIOS ]wܡH@ӻAU DEL A|iJ BIOS ]weAbӵeAܬ]wѼơAP Parallel ءANyҲաz令 EPP/SPP aIo˴NiH䴩zLFIѧoIN]oӳ]wȡAF@ѪɶAٮt@IND{....

Client ݪ]wG

TCP/IP
NetBEUI

ϰ²

ҦqOP@ӡyu@s, Workgroup z
ҦqWSyNetBIOS DW١zC

b Windows Ws Linux ɮת]w

귽

WھF

GƹWAϥɮ`޴NiHiܦhɪu@FIרOysuϺоzسI

b Linux Ws Windows ɮת]w

smbclient ykСG
@
1. NetBIOS DɪؿAG
[root@test root]# smbclient -L \\netbiosname [-U username]
# o -L ѼƥDnتb netbiosname DѤؿA
# ݭndNOApGS[W -U username ɡAw]OHΦW
# anonymous ӵnJ NetBIOSname AҥHݨ쪺ؿγ\N|QI
# t~ANetBIOS DW٦b Linux UAݭnbe[Wy \\ zI
dҡG
[root@test root]# smbclient -L \\bird2000 -U bird
added interface ip=192.168.1.2 bcast=192.168.1.255 nmask=255.255.255.0
Password:
Domain=[BIRDHOUSE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]

        Sharename      Type      Comment
        ---------      ----      -------
        IPC$           IPC       IPC
        D$             Disk      w]@
        ADMIN$         Disk      ݺ޲z
        C$             Disk      w]@

Server Comment
--------- -------

Workgroup Master
--------- -------
# pWdҨӬݡAި \\bird2000 O Linux Samba ٬O Windows A
# iHܥXWeAb sharename aA bird oӨϥΪ
# nJɡAiHoϥΪؿI
@
2. HtAȡG
[root@test root]# smbclient -M netbiosname
# o -M O messages NALiHNƥH Windows winpopup {
# ӶǵӹqWϥΪ̳ID𫍧 winpopup I
dҡG
[root@test root]# smbclient -M bird2000
added interface ip=192.168.1.2 bcast=192.168.1.255 nmask=255.255.255.0
Connected. Type your message, ending it with a Control-D
Hello, How are you? <==̫o̬OU Ctrl + D ӵI
sent 21 bytes
# M bird2000 oq|X{pUeG

@
3. nJؿG
[root@test root]# smbclient '\\netbiosname\directory' [-U useranem] [-W workgroup]
# o~O smbclient ̥DnتաINOnJ NetBIOS DYӥؿA
# MiHϥ ftp \ӱNƤWǩΤUI
dҡG
[root@test root]# smbclient -L \\127.0.0.1 -U bird
added interface ip=192.168.1.2 bcast=192.168.1.255 nmask=255.255.255.0
Password:
Domain=[BIRDHOUSE] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]

        Sharename      Type      Comment
        ---------      ----      -------
        netlogon       Disk      Network Logon Service
        public         Disk      Public Stuff
        IPC$           IPC       IPC Service (Bird's testing SAMBA Server)
        ADMIN$         Disk      IPC Service (Bird's testing SAMBA Server)

        Server               Comment
        ---------            -------
        BIRDHOME             Bird's testing SAMBA Server

        Workgroup            Master
        ---------            -------
        BIRDHOUSE            BIRDHOME

# H -L Ѽƹݤ@U 127.0.0.1 o IP ɱpAo{ bird iHnJ
# \\127.0.0.1\public oӥؿIѩ \ b bash ̭OSNqrA
# ҥHڭ̭nH޸ ' NؿӬA_ӳI
[root@test root]# smbclient '\\127.0.0.1\public' -U bird
added interface ip=192.168.1.2 bcast=192.168.1.255 nmask=255.255.255.0
Password:
Domain=[BIRDHOUSE] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]
smb: \> dir
# b smb UNOb \\127.0.0.1\public oӥؿUաIҥHA
# ڭ̥iHϥ dir, get, put `Ϊ ftp OӶiƶǿFI
? :CXҦiHΪOA`ΡI
cd :ܴ컷ݥDؿ
del :Yɮ
lcd :ܴݪؿ
ls :ݥثeҦbؿɮ
dir :P ls ۦP
get :U@ɮ
mget:Ujqɮ
mput:WǤjqɮ
put :Wǳ@ɮ
rm :Rɮ
# LOΪkаѦ man smbclient I

smbmount ykСG
@
[root@test root]# smbmount \\netbiosname\directory [-o options]
ѼƻG
netbiosname GiHO IP ]iHOڤWNetBIOSDW
-o ᭱Ѽ options `ΪUoǰѼơG
@username=AnJbGҦp username=bird
@password=AnJKXGݭnPW username ۹ڡI
@codepage=y榡GoӥiH]w䴩ytAҦpc餤Gcodepage=cp950
dҡG
# ]ڭnH bird AKX mypasswd ݥD \\birdhome\tmp
# ӥؿAåB Linux /home/birdhome oӥؿAp󰵡H
[root@test root]# smbclient -L \\birdhome -U bird
# H smbclient XiHؿIboӮרҤAڦ \\birdhome\tmp
# iHI
[root@test root]# smbmount '\\birdhome\tmp' /home/birdhome \
> -o username='bird',password='mypasswd',codepage='cp950'
# ALjդ@UA] \ b bash OSrAҥHɽЯSO
# ϥ ' ӱN \ ]w@rI٦Ab -o ᭱UѼƤA
# OHrӹj}IåB]wȳ̦n]ϥγ޸ ' ӳ]wI
[root@test root]# df
//birdhome/tmp 3020160 186880 2833280 7% /home/birdhome
# pWҥܡAAӴNiHݨؿ mount point աI

mount

[root@test root]# mount -t smbfs '\\birdhome\tmp' /home/birdhome \
> -o username=bird,password='mypasswd',iocharset='cp950'
# W iocharset P codepage OΨӳ]wytI

Linux pе -- ¦ǲ߽g

w譱

b Windows WA귽ɧAӥߧYNӤɪvIHקKp߳QJIΪ̳QPVfr|

tX quota ӳWdϥΪ̪ϥΪŶ

ӺϺЪŶO@ӿWߪ partition

Linux pе--¦ǲ߽g

ݡGbWDɭԡAڱN /dev/hda2 Wߤ@ partition /home oӥؿA{bQnW quota w bird oӨϥΪ̶iϺаtBAL hardlimit 50mb softlimit 40mb AаݾӰʧ@ӦpiH

sק /etc/fstab Aϱo /dev/hda2 o partition pUҼˡG

/dev/hda2 /home ext3 defaults,usrquota,grpquota 1 1

ק粒AФdUOoϥ mount -a d߬ݬݦS]w~ (W`@uI)AoӰʧ@pGoͿ~AаOoAi /etc/fstab קIЯSOdNڡI]gܡAܮeyLk`}~ҡI

Wzʧ@TwSDAЭs}Ұ quota 䴩G

sync; sync; sync; reboot

橳UOAإ quota һݭn]wɮסG

quotacheck -avug

SO`NApGWzʧ@o͡y䤣]wɡzN䪺TɡAziHo˰G

touch /home/aquota.user; touch /home/aquota.group

Mbi@ quotacheck YiI

Ұ quota oG

quotaon -av

]w bird ϺаtBG

edquota -u bird

Disk quotas for user test (uid 501):

Filesystem blocks soft hard inodes soft hard

/dev/hdb2 32 40000 50000 8 0 0

]ڭ̥uwwЪŶAw inode AҥHuneƦr׭qYiIЪ`NAƦr쬰 kbytes I

p]w iptables

{Ѻw

Ȱw 192.168.0.0/24 oӺ} SAMBAF
SAMBA port 137~139 tcp/udpF
SAMBA Dd eth0

/sbin/iptables -A INPUT -p tcp -i eth0 -s 192.168.0.0/24 --dport 137:139 -j ACCEPT

/sbin/iptables -A INPUT -p udp -i eth0 -s 192.168.0.0/24 --dport 137:139 -j ACCEPT

ALL : ALL

p]w daemons ץ\ ( hosts allow )

F iptables P TCP Wrappers o Linux ~A SAMBA ]NѤF𪺾աINOb /etc/samba/smb.conf oɮ׸̭ hosts allow P hosts deny ؤFIoӳ]wOb [global] ̭]wA@ӻAun]w hosts allow @NiHFI]SQ]w̭ IP Lkϥ SAMBA IHWҤlӻAڭ̶ȶ} 192.168.0.0/24 oӺiHϥ 137~139 port ALAboӺAڭ̤SȰw來q}AȡAҦp 192.168.0.1~192.168.0.5 AڥiHb smb.conf ̭h[o@G

hosts allow = 192.168.0.1 192.168.0.2 192.168.0.3 192.168.0.4 192.168.0.5

U IP HŮj}YiI~ApGzQnwӺӶ}AҦp 127.0.0.0/8 oӺAiHA[JG

hosts allow = 192.168.0.1 192.168.0.2 192.168.0.3 192.168.0.4 192.168.0.5 127.

o˴NiHFIp@ӡAMҦbq 192.168.0.0/24 iHյnJ SAMBA ( ]iHqL iptables Wh )ALo|Q SAMBA ]wצIonBڡHInBNObq̭յnJ SAMBA OoD SAMBA ڵ IP P]A|Qnɸ̭hAp@ӡAڭ̥iHQʪQΤR SAMBA nɡAHo{O_HQnJIΪ̬OYqO_wgQ`frҷPVOI

nƥǤNNH( /home, }񪺩NN, smb.conf, smbpasswd...)

/etc (]t /etc/passwd H /etc/samba ̭ơAҥHĳiHLƥU )
/home (٬OiHݤ@UAO_LDnILA@ӻA|OƥӤHƤhաI)
L smb.conf ̭]w}񪺥ؿC

DJA

log file = /var/log/samba/%m.log

/etc/rc.d/init.d/smb stop

( Samba Web Administration Tool )

I^U

(ݧs)

P LPI Y

b LPI http://www.lpi.org ̭쪺A(ݧs)

ѦҸ귽G

man 5 smb.conf
Study Area Ghttp://www.study-area.org/linux/servers/linux_samba.htm
ql Using SambaGhttp://de.samba.org/samba/ftp/docs/htmldocs/using_samba/index.html
Samba PDC FAQGhttp://de.samba.org/samba/ftp/docs/htmldocs/samba-pdc-faq.html
Samba PDC HOWTO: http://de.samba.org/samba/ftp/docs/htmldocs/samba-pdc-howto.html
SAMBA xGhttp://www.samba.org/
rondo SAMBA KޡGhttp://rondo.study-area.org/~linux/student_samba/server/samba/
̺ߪCLGhttp://www.imacat.idv.tw/tech/lnxprint.html

@ӻA SAMBA ϥΪ]wɩmb̡HɦWH
@ӫOiHΨӧP_ smb.conf oӳ]wɪTʡH
@ӫOiHΨӹ SAMBA DɥXؿH
smbmount \ରH
ڤѨϥ smbpasswd hsW@ϥΪ badbirdALiHnJڪ Linux SAMBA DAOLצpNOLksWCz{]iOH

eѦҥθѵ

² SAMBA A]w

2001/09/17Gn[Heg@ ^_^
2003/07/26GN 2001/09/17 ҼgeFjTת׭qAW[zHΧh]wءI
2003/09/10GN PDC ɥR󧹾A][JFӤHƪ Profiles b /home/samba/profiles FIPɥ[Jҫm߳
2003/09/30G[JF CUPS L䴩I
2005/10/17GSO`N쥻ثeOH samba 2.x ӼgA ҥHbsXWP̷s samba 3.0.x PCаѦҡG sX ͪԲӻI
ƧѡGϥΪ̥iHۤvKX觋G
http://moto.debian.org.tw/viewtopic.php?t=7732&
http://de.samba.org/samba/docs/using_samba/ch09.html