samba

#41

esvova, 1. Самба - сама по себе гаденький продукт, который периодами ламает сам себе обратную совместимость, неоднократно приходилось откатывать версии, переписывать конфиги и по всякому разному плясать вокруг этого убожества. За неимением виндовых компов - нет нужды и в smb.
2. Самба теоретически нужна в сетках где есть виндовые машины. Хотя на самом деле тоже не особо нужна. Логика проста - на каждом клиентском девайсе почему-то хотим держать отдельный сервер шары. Есть винхост - расшарьте на нем директорию. и перекидывайтесь через неё на весь десяток утройств внутри подсети, с клиентским подключением будет куда меньше проблем. Если нет нужды в доменной авторизации - то и самба-сервер разворчаивать смысла нет.
3. Несмотря на все минусы и костыли - до сих пор считается эталоном для файлообмена. Поднимите, если нужно со стороны линукс хоста - WebDAV, FTP, NFS сервисы и не надо будет плясать вокруг smb.

esvova · #42

Chocobo, Вот здесь понятней, буду пробовать FTP, он мне более понятен с винды еще. Просто хотелось как на windows открыл проводник нажал "сеть" и вот второй комп. Главное что кнопочка то присутствует.

#43

esvova, ну тут основной момент что между двумя линуксами оно также по клику может работать вполне. А гетерогенные сервисы накладывают свои сложности.
В общем-то стоит отметить линукс не особо виноват, что должным образом не всегда получается обыграть вендовые сетки

. Подключить винду к NFS например, тоже не везде там тривиальная задача, т.к. для нее этот сервис не родной)

#44

esvova, явно ругается на smb.conf. Убери все свои правки, для начала.

esvova · #45

di_mok, Убери все свои правки, для начала. Как?

#46

esvova, вот дефолтный конфиг самбы из актуальной 2:4.3.11+dfsg-0ubuntu0.16.04.12

Код: Выделить всё

▶ cat /etc/samba/smb.conf 
#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
#  - When such options are commented with ";", the proposed setting
#    differs from the default Samba behaviour
#  - When commented with "#", the proposed setting is the default
#    behaviour of Samba but the option is considered important
#    enough to be mentioned here
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not made any basic syntactic 
# errors. 

#======================= Global Settings =======================

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
   workgroup = WORKGROUP

# server string is the equivalent of the NT Description field
	server string = %h server (Samba, Ubuntu)

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
#   wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z

# This will prevent nmbd to search for NetBIOS names through DNS.
   dns proxy = no

#### Networking ####

# The specific set of interfaces / networks to bind to
# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred
;   interfaces = 127.0.0.0/8 eth0

# Only bind to the named interfaces and/or networks; you must use the
# 'interfaces' option above to use this.
# It is recommended that you enable this feature if your Samba machine is
# not protected by a firewall or is a firewall itself.  However, this
# option cannot handle dynamic or non-broadcast interfaces correctly.
;   bind interfaces only = yes



#### Debugging/Accounting ####

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m

# Cap the size of the individual log files (in KiB).
   max log size = 1000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
#   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.
   syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d


####### Authentication #######

# Server role. Defines in which mode Samba will operate. Possible
# values are "standalone server", "member server", "classic primary
# domain controller", "classic backup domain controller", "active
# directory domain controller". 
#
# Most people will want "standalone sever" or "member server".
# Running as "active directory domain controller" will require first
# running "samba-tool domain provision" to wipe databases and create a
# new domain.
   server role = standalone server

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.  
   passdb backend = tdbsam

   obey pam restrictions = yes

# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
   unix password sync = yes

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
# sending the correct chat script for the passwd program in Debian Sarge).
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
   pam password change = yes

# This option controls how unsuccessful authentication attempts are mapped
# to anonymous connections
   map to guest = bad user

########## Domains ###########

#
# The following settings only takes effect if 'server role = primary
# classic domain controller', 'server role = backup domain controller'
# or 'domain logons' is set 
#

# It specifies the location of the user's
# profile directory from the client point of view) The following
# required a [profiles] share to be setup on the samba server (see
# below)
;   logon path = \\%N\profiles\%U
# Another common choice is storing the profile in the user's home directory
# (this is Samba's default)
#   logon path = \\%N\%U\profile

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of a user's home directory (from the client
# point of view)
;   logon drive = H:
#   logon home = \\%N\%U

# The following setting only takes effect if 'domain logons' is set
# It specifies the script to run during logon. The script must be stored
# in the [netlogon] share
# NOTE: Must be store in 'DOS' file format convention
;   logon script = logon.cmd

# This allows Unix users to be created on the domain controller via the SAMR
# RPC pipe.  The example command creates a user account with a disabled Unix
# password; please adapt to your needs
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u

# This allows machine accounts to be created on the domain controller via the 
# SAMR RPC pipe.  
# The following assumes a "machines" group exists on the system
; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u

# This allows Unix groups to be created on the domain controller via the SAMR
# RPC pipe.  
; add group script = /usr/sbin/addgroup --force-badname %g

############ Misc ############

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /home/samba/etc/smb.conf.%m

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash

# Setup usershare options to enable non-root users to share folders
# with the net usershare command.

# Maximum number of usershare. 0 (default) means that usershare is disabled.
;   usershare max shares = 100

# Allow users who've been granted usershare privileges to create
# public shares, not just authenticated ones
   usershare allow guests = yes

#======================= Share Definitions =======================

# Un-comment the following (and tweak the other settings below to suit)
# to enable the default home directory shares. This will share each
# user's home directory as \\server\username
;[homes]
;   comment = Home Directories
;   browseable = no

# By default, the home directories are exported read-only. Change the
# next parameter to 'no' if you want to be able to write to them.
;   read only = yes

# File creation mask is set to 0700 for security reasons. If you want to
# create files with group=rw permissions, set next parameter to 0775.
;   create mask = 0700

# Directory creation mask is set to 0700 for security reasons. If you want to
# create dirs. with group=rw permissions, set next parameter to 0775.
;   directory mask = 0700

# By default, \\server\username shares can be connected to by anyone
# with access to the samba server.
# Un-comment the following parameter to make sure that only "username"
# can connect to \\server\username
# This might need tweaking when using external authentication schemes
;   valid users = %S

# Un-comment the following and create the netlogon directory for Domain Logons
# (you need to configure Samba to act as a domain controller too.)
;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   read only = yes

# Un-comment the following and create the profiles directory to store
# users profiles (see the "logon path" option above)
# (you need to configure Samba to act as a domain controller too.)
# The path below should be writable by all users so that their
# profile directory may be created the first time they log on
;[profiles]
;   comment = Users profiles
;   path = /home/samba/profiles
;   guest ok = no
;   browseable = no
;   create mask = 0600
;   directory mask = 0700

[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
# Uncomment to allow remote administration of Windows print drivers.
# You may need to replace 'lpadmin' with the name of the group your
# admin users are members of.
# Please note that you also need to set appropriate Unix permissions
# to the drivers directory for these users to have write rights in it
;   write list = root, @lpadmin

Можешь подменить на этот.

#47

esvova, и на будущее. Прежде чем менять какой-то конфиг - сделай его бекап.

esvova · #48

darkfenix, Да спасибо конечно делал уже замучился как их обзывать

#49

esvova, давай зайдём с другой стороны Создание сетевой папки в Nemo

#50

Отделили перевод - Установка Samba Server в Mint 18 [Перевод]

#51

В Минте 17.3 - самба третьей версии, в 18.х - четвертой. Руководства и конфиги от второй и третьей версии для четвертой напрямую не всегда подходят. На русском языке систематический информации по 4-ой версии очень мало. :(
А вообще - самба это такая штука, которую "по шагам" практически никогда объяснить не получится. Особенно если стоит вопрос по взаимодействию между виндой и линуксом. А уж настройки через GUI - они либо сразу работают, либо нет. На моей памяти еще никому не удавалось заставить ее работать через GUI, если не заработало само и сразу. Только через конфиги и консоль. И в общем-то крайне желательно хотя бы примерно понимать как этот протокол устроен, что такое netbios и master browser - это надо скорее по материалам микрософта изучать.

#52

Chocobo писал(а): ↑
18 фев 2018, 15:02
Можешь подменить на этот.

Код: Выделить всё

mugalem@mugalem-P35 ~ $ systemctl -l status smbd
● smbd.service - LSB: start Samba SMB/CIFS daemon (smbd)
   Loaded: loaded (/etc/init.d/smbd; bad; vendor preset: enabled)
   Active: active (running) since Вс 2018-02-18 22:12:53 MSK; 5s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 21328 ExecStart=/etc/init.d/smbd start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/smbd.service
           ├─21343 /usr/sbin/smbd -D
           ├─21344 /usr/sbin/smbd -D
           └─21346 /usr/sbin/smbd -D

фев 18 22:12:52 mugalem-P35 systemd[1]: Starting LSB: start Samba SMB/CIFS daemon (smbd)...
фев 18 22:12:53 mugalem-P35 smbd[21328]:  * Starting SMB/CIFS daemon smbd
фев 18 22:12:53 mugalem-P35 smbd[21328]:    ...done.
фев 18 22:12:53 mugalem-P35 systemd[1]: Started LSB: start Samba SMB/CIFS daemon (smbd).
mugalem@mugalem-P35 ~ $

Вау! типа заработало что ли?
UPD: А вот и ни фига. :(
В Дольфине ничего не появилось. Ни моих расшаренных папок, ни виндовых.

#53

slant писал(а): ↑
18 фев 2018, 21:57
А уж настройки через GUI

Стоп! Чётоянифиганепонял... Вот сделал я шару для Создание сетевой папки в Nemo Шара работает, как видно из скринов, а smb.conf девственно чист.

#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example
#
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
# - When such options are commented with ";", the proposed setting
# differs from the default Samba behaviour
# - When commented with "#", the proposed setting is the default
# behaviour of Samba but the option is considered important
# enough to be mentioned here
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not made any basic syntactic
# errors.

#======================= Global Settings =======================

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
workgroup = WORKGROUP

# server string is the equivalent of the NT Description field
server string = %h server (Samba, Ubuntu)

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
# wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
; wins server = w.x.y.z

# This will prevent nmbd to search for NetBIOS names through DNS.
dns proxy = no

#### Networking ####

# The specific set of interfaces / networks to bind to
# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred
; interfaces = 127.0.0.0/8 eth0

# Only bind to the named interfaces and/or networks; you must use the
# 'interfaces' option above to use this.
# It is recommended that you enable this feature if your Samba machine is
# not protected by a firewall or is a firewall itself. However, this
# option cannot handle dynamic or non-broadcast interfaces correctly.
; bind interfaces only = yes

#### Debugging/Accounting ####

# This tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/log.%m

# Cap the size of the individual log files (in KiB).
max log size = 1000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
# syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.
syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
panic action = /usr/share/samba/panic-action %d

####### Authentication #######

# Server role. Defines in which mode Samba will operate. Possible
# values are "standalone server", "member server", "classic primary
# domain controller", "classic backup domain controller", "active
# directory domain controller".
#
# Most people will want "standalone sever" or "member server".
# Running as "active directory domain controller" will require first
# running "samba-tool domain provision" to wipe databases and create a
# new domain.
server role = standalone server

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.
passdb backend = tdbsam

obey pam restrictions = yes

# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
unix password sync = yes

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
# sending the correct chat script for the passwd program in Debian Sarge).
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
pam password change = yes

# This option controls how unsuccessful authentication attempts are mapped
# to anonymous connections
map to guest = bad user

########## Domains ###########

#
# The following settings only takes effect if 'server role = primary
# classic domain controller', 'server role = backup domain controller'
# or 'domain logons' is set
#

# It specifies the location of the user's
# profile directory from the client point of view) The following
# required a [profiles] share to be setup on the samba server (see
# below)
; logon path = \\%N\profiles\%U
# Another common choice is storing the profile in the user's home directory
# (this is Samba's default)
# logon path = \\%N\%U\profile

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of a user's home directory (from the client
# point of view)
; logon drive = H:
# logon home = \\%N\%U

# The following setting only takes effect if 'domain logons' is set
# It specifies the script to run during logon. The script must be stored
# in the [netlogon] share
# NOTE: Must be store in 'DOS' file format convention
; logon script = logon.cmd

# This allows Unix users to be created on the domain controller via the SAMR
# RPC pipe. The example command creates a user account with a disabled Unix
# password; please adapt to your needs
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u

# This allows machine accounts to be created on the domain controller via the
# SAMR RPC pipe.
# The following assumes a "machines" group exists on the system
; add machine script = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u

# This allows Unix groups to be created on the domain controller via the SAMR
# RPC pipe.
; add group script = /usr/sbin/addgroup --force-badname %g

############ Misc ############

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
; include = /home/samba/etc/smb.conf.%m

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
; idmap uid = 10000-20000
; idmap gid = 10000-20000
; template shell = /bin/bash

# Setup usershare options to enable non-root users to share folders
# with the net usershare command.

# Maximum number of usershare. 0 (default) means that usershare is disabled.
; usershare max shares = 100

# Allow users who've been granted usershare privileges to create
# public shares, not just authenticated ones
usershare allow guests = yes

#======================= Share Definitions =======================

# Un-comment the following (and tweak the other settings below to suit)
# to enable the default home directory shares. This will share each
# user's home directory as \\server\username
;[homes]
; comment = Home Directories
; browseable = no

# By default, the home directories are exported read-only. Change the
# next parameter to 'no' if you want to be able to write to them.
; read only = yes

# File creation mask is set to 0700 for security reasons. If you want to
# create files with group=rw permissions, set next parameter to 0775.
; create mask = 0700

# Directory creation mask is set to 0700 for security reasons. If you want to
# create dirs. with group=rw permissions, set next parameter to 0775.
; directory mask = 0700

# By default, \\server\username shares can be connected to by anyone
# with access to the samba server.
# Un-comment the following parameter to make sure that only "username"
# can connect to \\server\username
# This might need tweaking when using external authentication schemes
; valid users = %S

# Un-comment the following and create the netlogon directory for Domain Logons
# (you need to configure Samba to act as a domain controller too.)
;[netlogon]
; comment = Network Logon Service
; path = /home/samba/netlogon
; guest ok = yes
; read only = yes

# Un-comment the following and create the profiles directory to store
# users profiles (see the "logon path" option above)
# (you need to configure Samba to act as a domain controller too.)
# The path below should be writable by all users so that their
# profile directory may be created the first time they log on
;[profiles]
; comment = Users profiles
; path = /home/samba/profiles
; guest ok = no
; browseable = no
; create mask = 0600
; directory mask = 0700

[printers]
comment = All Printers
browseable = no
path = /var/spool/samba
printable = yes
guest ok = no
read only = yes
create mask = 0700

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = no
# Uncomment to allow remote administration of Windows print drivers.
# You may need to replace 'lpadmin' with the name of the group your
# admin users are members of.
# Please note that you also need to set appropriate Unix permissions
# to the drivers directory for these users to have write rights in it
; write list = root, @lpadmin

Через ГУЙ как-то особо настраивается?

#54

Chocobo писал(а): ↑
18 фев 2018, 14:07
Поднимите, если нужно со стороны линукс хоста - WebDAV, FTP, NFS сервисы и не надо будет плясать вокруг smb.

я бы и рад, по большому счету мне эта самба не больно-то и уперлась.
Просто периодически необходимо файлами со второй машиной обмениваться.
У жены там принтер поновее, но подключенный по юсб (потому как еще раз бороться с этим Панасоником для подключения его по сети, я уже сдулся и не осилил), если документ какой важный, то лучше печатать, все-таки, на нем. Да сканер еще в этом МФУ.

Получается готовлю в интернете какой-нибудь комплект документов (счет, акт и счет-фактуру). Сохраняю его к себе на комп. Потом по почте пересылаю к жене на соседний комп. Она распечатывает. Я подписываю и ставлю печати. Она сканирует и отсылает мне обратно по почте. А я пересылаю дальше этот скан клиенту. И это все в одной комнате. Бред же!

#55

di_mok писал(а): ↑
18 фев 2018, 22:27
Через ГУЙ как-то особо настраивается?

Да. Причем еще и конфликтует с smb.conf

#56

Где же он кофиг хранит?

aleksdem · #57

esvova писал(а): ↑
18 фев 2018, 13:30
Я так понимаю, что на этом форуме никто толком не может объяснить, как запустить эту самбу.

А чем мой вариант не прокатил? Один текстовый файлик подредактировать под себя и systemctl restart smb. Проверено на центос, минтах и убунту. А забудьте про эти графические програмулинки для конфигурации.

#58

StarMAUGLI писал(а): ↑
18 фев 2018, 22:29
Просто периодически необходимо файлами со второй машиной обмениваться.

ну тк для этого, не обязательно иметь две шары с каждой стороны.
Расшарить вендопапку, и клиентом обмениваться через неё своими файлами)

aleksdem · #59

поставьте syncthing и обы клиента будут локально иметь актуальные файлы. Смысл выкладывать куда-то пропадёт

#60

aleksdem писал(а): ↑
19 фев 2018, 14:26
А чем мой вариант не прокатил?

Не показывает расшаренных папок ни в линуксе, ни в винде (из винды иногда по ip-адерсу видно расшаренную папку, но то есть, то нет - без всякой видимой зависимости от действий пользователя).
Судя по проведенным, расследованиям в LM18+ мантейнеры чего-то наворотили нового.
Установка Samba Server в Mint 18 [Перевод]
И самба новой версии. И какие-то пакеты были удалены. Старые подходы, почему-то не работают. Особенно, если чего-то уже пытался сделать, потом толком не вычищается (наверное, куда кешируется?) и вроде все правильно делаешь, а в результате - пшик.

Кто сейчас на конференции