Установка и конфигурирование Samba

character set = KOI8-R

client code page = 866

logon script = %U.bat

logon path = \\%N\Profiles\%U

domain logons = Yes

os level = 33

preferred master = Yes

domain master = Yes

dns proxy = Yes

wins proxy = Yes

wins support = Yes

hosts allow = x.x.x.

[homes]

comment = Home Directories

read only = No

create mask = 0600

browseable = No

[netlogon]

comment = Network Logon Service

path = /usr/local/samba/lib/netlogon

guest ok = No

public = No

share modes = No

locking = No

browseable = Yes

[Profiles]

comment = Users' Profiles

path = /usr/local/samba/profiles

read only = No

browseable = No

[Public]

comment = Public

path = /usr/pub

read only = No

create mask = 0650

Всё! Можно запускать:

host:~#/usr/local/samba/bin/smbd -D -d2

host:~#/usr/local/samba/bin/nmbd -D -d2

host:~#

После этого следует стандартная процедура подключения Windows NT Workstation к

PDC. Перегружаем Windows NT - можно попробовать зайти!

NT DOMAIN members

Сначала модифицируeтся файл smb.conf. Ниже приведены рабочие конфигурации файл-

и принт-сервера (участников NT DOMAIN).

Файл-сервер (пароли шифрованы и проверяются на указанном сервере, выполняющем

роль Primary DOMAIN controller):

используется тип security = domain.

# Samba config file created using SWAT

# Global parameters

workgroup = MYGROUP

netbios name = FSERVER1

server string = File-server 1

security = DOMAIN

encrypt passwords = Yes

password server = ASERVER

username map = /usr/local/samba/lib/username.map

log level = 2

log file = /usr/local/samba/var/log.%U

nt acl support = Yes

name resolve order = host wins bcast lmhosts

keepalive = 30

lpq cache time = 30

socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY SO_RCVBUF=4096

SO_SNDBUF=4096

load printers = No

character set = KOI8-R

client code page = 866

os level = 30

lm interval = 10

dns proxy = No

wins server = x.x.x.x

hosts allow = x.x.x.

wide links = No

[Public]

comment = Varios files

path =/pub/

read only = No

create mask = 0744

Print-сервер (пароли шифрованы, и проверяются на указанном сервер, выполняющем

роль Primary DOMAIN controller):

используется тип security = domain

# Samba config file created using SWAT

# Global parameters

[global]

workgroup = MYGROUP

netbios name = PSERVER1

server string = Print server

security = DOMAIN

encrypt passwords = Yes

password server = ASERVER

username map = /usr/local/samba/lib/username.map

log level = 2

syslog = 2

log file = /usr/local/samba/var/log.%U

name resolve order = host wins bcast lmhosts

keepalive = 60

lpq cache time = 5

socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY IPTOS_THROUGHPUT

SO_RCVBUF=4096 SO_SNDBUF=4096

load printers = No

os level = 30

wins server = x.x.x.x

hosts allow = x.x.x.

printing = lprng

wide links = No

[hp6p]

print command = /usr/local/bin/lpr -h -r -P%p %s; rm %s

lpq command = /usr/local/bin/lpq -P%p

lprm command = /usr/local/bin/lprm -P%p %j

comment = hp6p Laser Jet

path = /usr/local/samba/spool/hp6p

print ok = Yes

printer name = hp6p

[hp4000n]

print command = /usr/local/bin/lpr -h -r -P%p %s; rm %s

lpq command = /usr/local/bin/lpq -P%p

lprm command = /usr/local/bin/lprm -P%p %j

comment = hp4000n Laser Jet

path = /usr/local/samba/spool/hp4000n

print ok = Yes

printer name = hp4000n

[tek350e]

print command = /usr/local/bin/lpr -h -r -P%p %s; rm %s

lpq command = /usr/local/bin/lpq-P%p

lprm command = /usr/local/bin/lprm -P%p %j

comment = Tektronix 350 ext

path = /usr/local/samba/spool/tek350e

print ok = Yes

printer name = tek350e

Должна существовать Unix-учётная запись в passwd и shadow.

Нужно отметить, что файлы passwd и shadow должны содержать учётные записи

пользователей NT Domain (можно использовать username.map).

passwd:

...

username:x:1016:300:MYGROUP User,,,:/dev/null:/dev/null

...

shadow:

...

username:*:10666:0:99999:7:::

...

Добавление Samba-box в DOMAIN

После окончания конфигурации (при незапущенных демонах smbd и nmbd)

производиться добавление Samba-box в NT DOMAIN (используя Server Manager for

DOMAIN, если PDC - Windows NT Server или рассмотренную выше процедуру). Сначала

на PDC добавляем Samba-box. Далее используем smbpasswd:

host:~#/usr/local/samba/bin/smbpasswd -j MYGROUP -r PDC_netbios_name

Added interface ip=x.x.x.x broadcast=x.x.x.255 netmask=255.255.255.0

YYYY/MM/DD hh:mm:ss : change_trust_account_password:

Changed password for domain MYGROUP.

Joined domain MYGROUP.

host:~#

Можно запускать!

host:~#/usr/local/samba/bin/smbd -D -d2

host:~#/usr/local/samba/bin/nmbd -D -d2

host:~#