I use Samba on a CentOS 6 server to share files between Windows, Linux and Mac clients. Guest access is allowed to all folders, but is read only, and there are several Samba accounts for writing files to the shares.
The purpose of this tutorial is to document, roughly, what my configuration was to set up Samba for sharing a couple of folders on the local network in this way.
Install Samba
Code:
# yum install samba
# service smb start
# service nmb start
# chkconfig nmb on
# chkconfig smb on
Create the sharing directories
(In my actual setup, I have used /etc/fstab to mount these directories on separate, large disks, so there's plenty of space. That's beyond the scope of this tutorial, but:
In order to support this model of guests having read only access, and granting write access only to known users, we need to have some users and groups set up at the Unix level. The users and groups at the Unix level map to some of the Samba users we will create later.
They are separate users -- having a Samba login and password doesn't mean you have to give the user in question shell access, because they are two separate accounts and can have two separate passwords. We simply use the users, as I said, to 'map' the Samba credentials to the Unix permissions on disk.
We will also create a group, samba-writers, to allow us to have group write access to the shared folders. I'll add my user account, peter, to this group.
Code:
# groupadd samba-writers
# usermod -a -G samba-writers peter
Let's set the permissions on our two shared folders for this group:
Mode '775' on a directory allows the user (peter), the group (samba-writers) to write files, and others (guests) to just read.
Now, let's add the mappings between Samba users and Unix users. Open /etc/samba/smbusers using your favourite text editor. I'll use vim throughout this guide.
Code:
# vim /etc/samba/smbusers
peter = peter
user1 = user1
user2 = user2
The example accounts user1 and user2 will be for our other Samba-enabled accounts.
Again, we will create Unix shell accounts for user1 and user2, but use different passwords for SMB and their Unix account, and not share the shell password with the users. They only need and want Samba access, so we won't let them log in to the shell.
First, we'll set my password for Samba. A different password from my shell login password.
Code:
# smbpasswd -a peter
('-a' to add the user for the first time. To change it later, just 'smbpasswd peter')
Now that our users are ready for Samba, we need to set up the Samba configuration to share the two folders we've created, and allow the right level of access to users, as well as to guests.
Code:
# vim /etc/samba/smb.conf
The default CentOS configuration file has quite a lot already in it. Look for the headings, and make these changes:
Under Network Related Options:
Code:
workgroup = WORKGROUP
server string = Server Shared Files
netbios name = MACHINENAME
hosts allow = 127. 192.168.0.
hosts deny = ALL
Set WORKGROUP to the workgroup name, if it's configured differently on your Windows clients. (On some older Windows versions, it may need to be MSHOME.)
Set MACHINENAME to the name you want the Samba server to have.
Finally, we use the 'hosts allow' and 'hosts deny' directives to force Samba only to serve to clients on the local network. In this case, 192.168.0.1 -- 192.168.0.254. You may want to change this to your IP addressing scheme in your network, or remove it to not restrict access to the local network.
Under Standalone Server Options:
Code:
security = user
passdb backend = tdbsam
map to guest = Bad Password
domain master = yes
Under Browser Control Options:
Code:
local master = yes
os level = 99
preferred master = yes
These directives aren't strictly necessary -- in fact, they may cause conflict if you're doing other Windows networking things on the same workgroup. 'os level = 99', combined with the other options, will force this machine to be the 'local master browser' (LMB) and the 'domain master browser' (DMB).
Whichever machine on the network has these roles is responsible for keeping a list of the other machines on the network. Clients use this list to look for other machines that have shared folders available. I've found that forcing my Samba server to be the LMB and DMB, as well as using it as a WINS server, speeds up the time it takes Windows to 'search' for other machines on the network by many many times. (Remember opening 'My Network Places' and clicking 'Show workgroup computers' only to have to wait 15 seconds while Explorer locks up? This avoids that.)
In more complex scenarios, you might not want to enable this to avoid conflict. For our small network scenario, it's a useful speed bonus and causes no problems.
Under Name Resolution:
Code:
wins support = yes
Samba becomes a WINS server, which again can help speed things up -- it means you can address other sharing computers by name without waiting for long periods for NetBIOS to resolve the name. (Some more tech info about this, if you're interested.)
You may want to configure your Windows machines' 'WINS server' IP address to point to your Samba server to get this benefit. (You might need to configure this in your router's DHCP settings for it to stick to all of them.)
Finally, at the bottom of the file, we add our shares:
Code:
[sharedfiles]
comment = Shared files for the network
path = /var/lib/samba/sharedstuff
guest ok = yes
writable = no
create mask = 0664
directory mask = 0775
force group = samba-writers
write list = @samba-writers
[Photos]
comment = Shared photos
path = /var/lib/samba/photos
guest ok = yes
writable = no
create mask = 0664
directory mask = 0775
force group = samba-writers
write list = @samba-writers
Each folder has its own name in brackets, followed by the options for that folder.
We use 'guest ok = yes' to allow guests, but 'writable = no' to make them read only. Anyone in the 'write list' (anyone in the group samba-writers) can write.
There are also other settings to set the default permisisons on files ('create mask = 0664', owner read+write, group read+write, others read only) and folders ('directory mask = 0775', owner read+write+enter, group read+write+enter, others read+enter).
Once we're done, save that file and quit the editor, and reload Samba:
Code:
# service smb restart
# service nmb restart
Just make sure your firewall is letting Samba through:
Code:
# system-config-firewall-tui
And we're ready to test!
Accessing the shares
Linux
Without logging in, we can access the shares by going to smb://machinename (or smb://192.168.0.whatever) in the address bar of the file manager. This works in most file managers.
To log in and have write access, you may have luck with a 'Connect to Server' window that lets you type in the username and password, like this one in the Ubuntu 12.04 desktop's File menu.
Under recent versions of Mac OS X, the server should appear right away in the Finder's sidebar. Simply click the server name to see the shares and browse them.
For write access, simply click the 'Connect As' button in the window and enter your username and password for SMB that you set up earlier.
If you don't see the server in the sidebar, (Lion is more temperamental than Snow Leopard was about this), press ⌘K to bring up the 'Connect to Server' dialogue. Type cifs://machinename or cifs://192.168.0.whatever and click OK to connect.
Windows
The server should show up in 'Network' for guest access.
The best way to log in and have write access, I have found, is to map the shared folder as a network drive. In an Explorer window, click 'Map Network Drive' in the toolbar (it's under the Tools menu on Windows XP and earlier).
Choose a drive letter, enter \\machinename\foldername as the path, and make sure you tick to 'Connect using different credentials'.
for me personal, i dont like gnome (to big, and not a nice look) and personal i hate the Nautilus... special when i run it under xfce. But - the xfce cant found the MTP mountet Xperia S Flash. I try everything, install erveryting out of the "softwareverwaltung" (<- sorry, dont know the english word for, but, you know the tool to install and de-install software, libaries tools and so far) that have someting to do with MTP.. under Gnome: no Problem: the device is found - but under xfce - no way... and if i start Natutilus under xfce, the whole desktop will changet to a gnome Shell - and when i close it, dont change back to xfce - even a reboot dont help (i realy hate gnome) - so, are there any libarys or tools or something to show my Android Smartphone mountet on the xfce desktop?
I left college in 1995, where I had been studying to be a Graphic Designer. My dad wanted the best for me and offered to get me my first computer. It was an Apple 2cx. I screwed it up almost immediately, and it never worked quite right. I was never able to use it for its true purpose, and, it was about as useful as a paperweight. Every once in awhile it'd boot up, give me hope and go back to useless. I got to the point where I just hated Mac. Every once in awhile, someone would give me an older Mac and it'd make me nuts. I'd keep this one Mac locked in the closet as a way of punishing it. I hated iPods; because, the interface resembled Mac too much.
A friend gave me an Optiplex SX260 with a missing HD. He suggested that I make a Linux Pendrive. I started with Mint, then tried SUSE, then a few different Ubuntus led me to Xubuntu 10. I tried Xubuntu 11, but, the Optiplex freaked and crashed. I'm back with 10.
Linux and I have a love/hate relationship; but, its far better than my Unix relationship, though I have a jailbroken iPhone. A few of my friends are IT guys that've given me just about all that they can give. Recently, one of them suggested that I use the repository to find a package that'll do what iTunes will do. I thought, crap, what's a repository again? So, I Googled it, and, I found this place. Bear with me, I want to do better.
im Installed my linux out from the windows with the wubi... and there the sice of the Installation partition is limitet to 30 gigs. is there any way to change the size of the dev/loop0 partition?
![[Image: linux-mint-logo.jpg]](http://linked.feedmebits.nl/linux-noob/news/linux-mint-logo.jpg){kind=logo}
![[Image: ubuntu-logo.png]](http://linked.feedmebits.nl/linux-noob/news/ubuntu-logo.png){kind=logo}
![[Image: squid-logo.png]](http://linked.feedmebits.nl/linux-noob/news/squid-logo.png){kind=logo}
