[linux] samba

■ 설치/업그레이드/삭제

  ● 패키지를 설치하려면 : rpm -ivh [rpm 파일명]
    예) rpm -ivh 패키지.1.1-4.i386.rpm
 
  ● 패키지를 업그레이드하려면 : rpm -Uvh [rpm 파일명]
    예) rpm -Uvh 패키지.1.1-5.i386.rpm
 
  ● 패키지를 제거하려면 : rpm -e [패키지 이름]
    예) rpm -evh 패키지

 ● 패키지가 설치되었는지 알아 보기 위해서는 : rpm -q [패키지 이름]
    예) rpm -q 패키지
 
  ● 설치된 패키지의 정보를 얻기 위해서는 : rpm -qi [패키지 이름]
    예) rpm -qi 패키지
 
  ● 패키지에 어떤 파일들이 속해 있는지 보려면 : rpm -ql [패키지 이름]
    예) rpm -ql 패키지
 
  ● 특정 파일이 속해 있는 패키지가 무엇인지 알아 보려면 : rpm -qf
    예) rpm -qf /usr/bin/some_executable

 

# cat /etc/samba/smb.conf
# netstat -nlp |grep smb
# /etc/rc.d/init.d/smb start
# rpm -qa |grep samba
# cat /etc/redhat-release
# ifconfig
# yum install samba*
# /etc/rc.d/init.d/smb start
# vi /etc/samba/smb.conf

############ /etc/samba/smb.conf 설정 내용 #############################

Last login: Thu May 20 09:07:17 2010 from 192.168.1.140
[root@remodel root]# cat /etc/samba/smb.conf
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#
#======================= Global Settings =====================================
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = Mshome

# server string is the equivalent of the NT Description field
   server string = Samba Server

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
   hosts allow = 192.168.1. 127.

# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   printcap name = /etc/printcap
   load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
;   printing = bsd

# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
;  guest account = pcguest

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/%m.log

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Security mode. Most people will want user level security. See
# security_level.txt for details.
   security = user
   #username map = /etc/samba/smbusers
# Use password server option only with security = server
;   password server = <NT-Server-Name>

# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
;  password level = 8
;  username level = 8

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
;  encrypt passwords = yes
;  smb passwd file = /etc/samba/smbpasswd

# The following are needed to allow password changing from Windows to
# update the Linux system password also.
# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
# NOTE2: You do NOT need these to allow workstations to change only
#        the encrypted SMB passwords. They allow the Unix password
#        to be kept in sync with the SMB password.
;  unix password sync = Yes
;  passwd program = /usr/bin/passwd %u
;  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*

# Unix users can map to different SMB User names
;  username map = /etc/samba/smbusers

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /etc/samba/smb.conf.%m

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
;   interfaces = 192.168.12.2/24 192.168.13.2/24

# Configure remote browse list synchronisation here
#  request announcement to, or browse list sync from:
#       a specific host or from / to a whole subnet (see below)
;   remote browse sync = 192.168.3.25 192.168.5.255
# Cause this host to announce itself to local subnets here
;   remote announce = 192.168.1.255 192.168.2.44

# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
;   local master = no

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 33

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
;   domain master = yes

# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
;   preferred master = yes

# Enable this if you want Samba to be a domain logon server for
# Windows95 workstations.
;   domain logons = yes

# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
;   logon script = %m.bat
# run a specific logon batch file per username
;   logon script = %U.bat

# Where to store roving profiles (only for Win95 and WinNT)
#        %L substitutes for this servers netbios name, %U is username
#        You must uncomment the [Profiles] share below
;   logon path = \\%L\Profiles\%U

# All NetBIOS names must be resolved to IP Addresses
# 'Name Resolve Order' allows the named resolution mechanism to be specified
# the default order is "host lmhosts wins bcast". "host" means use the unix
# system gethostbyname() function call that will use either /etc/hosts OR
# DNS or NIS depending on the settings of /etc/host.config, /etc/nsswitch.conf
# and the /etc/resolv.conf file. "host" therefore is system configuration
# dependant. This parameter is most often of use to prevent DNS lookups
# in order to resolve NetBIOS names to IP Addresses. Use with care!
# The example below excludes use of name resolution for machines that are NOT
# on the local network segment
# - OR - are not deliberately to be known via lmhosts or via WINS.
; name resolve order = wins lmhosts bcast

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
;   wins support = yes

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
#       Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z

# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one  WINS Server on the network. The default is NO.
;   wins proxy = yes

# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The built-in default for versions 1.9.17 is yes,
# this has been changed in version 1.9.18 to no.
   dns proxy = no

# Case Preservation can be handy - system default is _no_
# NOTE: These can be set on a per share basis
;  preserve case = no
;  short preserve case = no
# Default case is normally upper case for all DOS files
;  default case = lower
# Be very careful with case sensitivity - it can break things!
;  case sensitive = no

#============================ Share Definitions ==============================
;[homes]
;   comment = Home Directories
;   browseable = yes
;   writable = yes

# Un-comment the following and create the netlogon directory for Domain Logons
; [netlogon]
;   comment = Network Logon Service
;   path = /home/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no

# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
;[Profiles]
;    path = /home/profiles
;    browseable = no
;    guest ok = yes

# NOTE: If you have a BSD-style print system there is no need to
# specifically define each individual printer
;[printers]
;   comment = All Printers
;   path = /var/spool/samba
;   browseable = no
# Set public = yes to allow user 'guest account' to print
;   guest ok = no
;   writable = no
;   printable = yes

# This one is useful for people to share files
;[tmp]
;   comment = Temporary file space
;   path = /tmp
;   read only = no
;   public = yes

# A publicly accessible directory, but read only, except for people in
# the "staff" group
;[public]
;   comment = Public Stuff
;   path = /home/samba
;   public = yes
;   read only = yes
;   write list = @staff

# Other examples.
#
# A private printer, usable only by fred. Spool data will be placed in fred's
# home directory. Note that fred must have write access to the spool directory,
# wherever it is.
;[fredsprn]
;   comment = Fred's Printer
;   valid users = fred
;   path = /homes/fred
;   printer = freds_printer
;   public = no
;   writable = no
;   printable = yes

# A private directory, usable only by fred. Note that fred requires write
# access to the directory.
;[fredsdir]
;   comment = Fred's Service
;   path = /usr/somewhere/private
;   valid users = fred
;   public = no
;   writable = yes
;   printable = no

# a service which has a different directory for each machine that connects
# this allows you to tailor configurations to incoming machines. You could
# also use the %u option to tailor it by user name.
# The %m gets replaced with the machine name that is connecting.
;[pchome]
;  comment = PC Directories
;  path = /usr/pc/%m
;  public = no
;  writable = yes

# A publicly accessible directory, read/write to all users. Note that all files
# created in the directory by users will be owned by the default user, so
# any user with access can delete any other user's files. Obviously this
# directory must be writable by the default user. Another user could of course
# be specified, in which case all files would be owned by that user instead.
;[public]
;   path = /usr/somewhere/else/public
;   public = yes
;   only guest = yes
;   writable = yes
;   printable = no

# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
[jjang0u share]
   comment = publick share
   path = /var
   public = yes
   writable = yes
   printable = no
;   guest_ok =yes
   write list = @root
;    create mask = 0765
 

 

===================================================================================================

o 삼바 공식사이트
http://www.samba.org/
http://mirror.korea.co.kr/samba/

o 설치에 앞서 기존 패키지를 삭제
[root@ora examples]# rpm -qa | grep samba
samba-common-2.2.1a-4
samba-2.2.1a-4
samba-client-2.2.1a-4
[root@ora examples]# rpm -e samba-client
[root@ora examples]# rpm -e samba
[root@ora examples]# rpm -e samba-common

o 다운로드/압축해제
[root@mail samba-3.0.7]# wget http://mirror.korea.co.kr/samba/ftp/samba-3.0.7.tar.gz
[root@mail html]# tar xzf samba-3.0.7.tar.gz
[root@mail html]# cd samba-3.0.7
[root@mail samba-3.0.7]#
[root@mail samba-3.0.7]# cd source/

o 환경설정/컴파일/설치/확인
[root@mail source]# ./configure --prefix=/usr/local/samba --with-automount --with-smbmount --with-pam --with-quotas

[root@mail source]# make
[root@mail source]# make install
[root@mail source]# ls /usr/local/samba
bin/ include/ lib/ man/ private/ sbin/ swat/ var/

o 설치후 작업( 설정파일, 데몬구동 스크립트 파일을 복사 )
[root@ora source]# cd ../examples

- 설정파일복사 / 링크
[root@ora examples]# cp smb.conf.default /usr/local/samba/lib/smb.conf
[root@mail examples]# mkdir /etc/samba
[root@mail examples]# ln -s /usr/local/samba/lib/smb.conf /etc/samba/smb.conf

- 구동스크립트 복사
# examples]# cd ../packaging/RedHat/
# RedHat]# cp smb.init /etc/init.d/smb
# RedHat]# cp samba.pamd /etc/pam.d/samba

[root@remodel setup]# pwd
/usr/local/src/samba-3.4.10/packaging/RHEL/setup
[root@remodel setup]# cp smb.init /etc/init.d/smb
[root@remodel setup]# cp samba.pamd /etc/pam.d/samba

[root@remodel init.d]# pwd
/etc/init.d
[root@remodel init.d]# chmod +x smb

- samba 의 데몬과 실행파일들을 PATH 변수의 디렉토리에 모두 링크
[root@ora RedHat]# ln -s /usr/local/samba/sbin/* /usr/sbin
[root@ora RedHat]# ln -s /usr/local/samba/bin/* /usr/bin

- samba 서버 시작
[root@ora RedHat]# /etc/init.d/smb start
- 포트확인
[root@ora RedHat]# netstat -nat | grep 139

tcp 0 0 0 .0 .0 .0:139 0 .0 .0 .0:* LISTEN

- 부팅시 3번 런레벨로 시작시 자동으로 실행되게 설정
[root@mail RedHat]# chkconfig --level 3 smb on
[root@mail RedHat]# chkconfig --list | grep smb
smb 0:off 1:off 2:off 3:on 4:off 5:off 6:off

 

######################
실행 smbpasswd
######################

[root@remodel bin]# /usr/local/samba/bin/smbpasswd -a root
New SMB password:
Retype new SMB password:
Added user root.

[root@kyungbuk samba]# /etc/init.d/smb restart
SMB 서비스를 종료함: [ 확인 ]
NMB 서비스를 종료함: [ 확인 ]
SMB서비스를 시작하고 있습니다: [ 확인 ]
NMB서비스를 시작하고 있습니다: [ 확인 ]

[root@kyungbuk samba]# ls
lmhosts secrets.tdb smb.conf <> smbusers

[root@kyungbuk samba]# vi smb.conf
[sambashare]
comment = 나만의공유
path = /sambashare
valid users = @tech, dbsecure ------> @tech는 tech 그룹에 속한자만, dbsecure는 사용자
writeable = yes
create mask = 0777
directory mask = 0777

<주의> Global 에
- Version , 2.x ----------------------------------------------
[1] client code page = 949 추가 (한글이름 사용이 깨짐 방지)
--------------------------------------------------------------

- Version , 3.x ----------------------------------------------
preserve case = yes
short preserve case = yes

dos charset = cp949
unix charset = cp949
--------------------------------------------------------------

# vi /etc/sysconfig/i18n

LANG="ko_KR.eucKR"
SUPPORTED="ko_KR.eucKR:ko_KR:ko"
SYSFONT="lat0-sun16"
SYSFONTACM="8859-15"

///////////////////////////// 참고 ///////////////////////////////////////

# Global parameters
[global]
dos charset = cp949
unix charset = cp949
workgroup = WORKGROUP
netbios name = FILESVR
server string = EVALI Samba File Server
# security = share
# null passwords = yes
encrypt passwords = yes
pam password change = Yes
passwd program = /usr/bin/smbpasswd %u
unix password sync = yes
admin users = root
log file = /var/log/samba/log.%m
deadtime = 30
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
guest account = guest
dns proxy = No
hosts allow = 61.75.77.,127.0.0.1
username map = /etc/samba/smbusers
guest ok = yes
veto files = /.?*/,/Desktop/,/Mail/
strict allocate = no

preserve case = yes

 

 

 

< error >

[root@localhost sbin]# /etc/init.d/smb start

Starting SMB services: smbd: error while loading shared libraries: libtalloc.so.1: cannot open shared object file: No such file or directory                                                           [FAILED]
Starting NMB services: nmbd: error while loading shared libraries: libtalloc.so.1: cannot open shared object file: No such file or directory                                                           [FAILED]

 

 

[root@localhost sbin]# ldd /usr/local/samba/sbin/smbd undefined
 linux-gate.so.1 =>  (0x00111000)
 libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x00112000)
 liblber-2.3.so.0 => /usr/lib/liblber-2.3.so.0 (0x0014c000)
 libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x0015a000)
 libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x001eb000)
 libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x0058f000)
 libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0x00173000)
 libcom_err.so.2 => /lib/libcom_err.so.2 (0x009b9000)
 libresolv.so.2 => /lib/libresolv.so.2 (0x00177000)
 libcrypt.so.1 => /lib/libcrypt.so.1 (0x00868000)
 libpam.so.0 => /lib/libpam.so.0 (0x0018a000)
 libacl.so.1 => /lib/libacl.so.1 (0x00197000)
 libattr.so.1 => /lib/libattr.so.1 (0x0019e000)
 libcap.so.1 => /lib/libcap.so.1 (0x001a3000)
 libnsl.so.1 => /lib/libnsl.so.1 (0x001a7000)
 libdl.so.2 => /lib/libdl.so.2 (0x001d8000)
 libpopt.so.0 => /usr/lib/libpopt.so.0 (0x001dc000)
 libtalloc.so.1 => not found
 libtdb.so.1 => not found
 libwbclient.so.0 => not found
 libc.so.6 => /lib/libc.so.6 (0x00260000)
 libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00393000)
 libssl.so.6 => /lib/libssl.so.6 (0x003ab000)
 libcrypto.so.6 => /lib/libcrypto.so.6 (0x003f0000)
 libaudit.so.0 => /lib/libaudit.so.0 (0x00525000)
 /lib/ld-linux.so.2 (0x001bd000)
 libz.so.1 => /usr/lib/libz.so.1 (0x00536000)

 

[root@remodel lib]# cd /usr/local/samba/lib
[root@localhost lib]# ln -s libtalloc.so libtalloc.so.1
[root@localhost lib]# ln -s libtdb.so libtdb.so.1undefined
[root@localhost lib]# ln -s libwbclient.so libwbclient.so.0
undefined //library 심볼릭 링크 설정

[root@localhost lib]# export LD_LIBRARY_PATH=/usr/local/samba/lib undefined
// LD_LIBRARY_PATH : 라이브러리가 있는 곳을 명시해 주는 환경변수

// LD_LIBRARY_PATH=설치한 samba/lib 위치 ,,, export LD_LIBRARY_PATH -- reboot시 다시 설정해야함

[root@localhost lib]# cat /usr/local/samba/lib >> /etc/ld.so.confundefined
// lib경로 추가

[root@localhost lib]# ldconfig