公司各个部门之间有大量数据需要共享,所以决定部署一台Samba服务器,满足部门间分享数据的需要。
1.创建共享目录
共享数据需要我们先创建用于共享的目录。根据公司的情况,可以创建五个一级目录和四个部门共享目录,共享部门目录仅对部门内部员工共享数据,每个部门员工可以在相应的部门共享目录下创建自己的个人目录与文件;另一个公共共享目录,用于所有的部门之间相互访问彼此的数据,在公共共享目录下为每个部门创建每个部门的共享子目录。/ABC/sales目录为商务部共享目录,/ABC/design目录为设计部共享目录,/ABC/develop目录为开发部共享目录,/ABC/ops目录为运维部共享目录。另外,/ABC/share目录为整个公司的公共共享目录,用来部门间的数据共享,我们会在该目录下为每个部门创建相应的子目录。
mkdir -p /ABC/{sales,design,develop,ops,share/{design,develop,ops,sales}}
/ABC
├── design
├── develop
├── ops
├── sales
└── share
├── design
├── develop
├── ops
└── sales
2.添加账号
公司要求所有员工访问时都要用账户密码。初始状态下,我们为每个部门创建两个账户,并创建所有共享目录的管理员,以便后期可以根据公司情况添加或删除
1 2 3 4 5 6 7 8 9 | #!/bin/bash depart=(sales design develop ops) for g in ${depart[@]};do groupadd $g; for u in `seq 1 2`; do useradd -M -s /sbin/nologin -g $g ${g}$u; echo -e "101010\n101010"|smbpasswd -s -a ${g}$u; done done |
查看是否添加了用户
pdbedit -L
sales2:1006:
design2:1008:
sales1:1005:
design1:1007:
develop1:1009:
develop2:1010:
ops1:1011:
ops2:1012:
3.配置文件
创建完共享目录及系统账户后,修改Samba配置文件。
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 | [global] workgroup = STAT server string = ABC share log file = /var/log/samba/log.%m max log size = 50 security = user passdb backend = tdbsam load printers = yes cups options = raw [homes] comment = Home Directories browseable = no writable = yes [sales] comment = sales share path = /ABC/sales browseable = yes guest ok = no writable = no write list = @sales [design] comment = design share path = /ABC/design browseable = yes guest ok = no writable = no write list = @design [develop] comment = develop share path = /ABC/develop browseable = yes guest ok = no writable = no write list = @develop [ops] comment = ops share path = /ABC/ops browseable = yes guest ok = no writable = no write list = @ops [share] comment = common share path = /ABC/share browseable = yes guest ok = no writable = yes |
4.修改权限
为了使员工访问服务器共享资料,可以在属于共享目录下创建文件与目录,除了要在Samba配置文件中定义权限外,还要修改共享目录权限。
chmod 1770 /ABC/{desgin,sales,develop,ops} #添加了sticky权限
chmod 1777 /ABC/share
chown :design /ABC/desgin
chown :sales /ABC/sales
chown :develop /ABC/develop
chown :ops /ABC/ops
5.重启Samba服务
service smb restart