Просмотр кода страницы Samba

== Компиляция исходного кода ==

[https://download.samba.org/pub/samba/ Исходный код]

==== Как контроллер домена Windows ====

 ./configure --prefix /opt/samba/4.10.18 --sysconfdir /opt/samba/conf \
 --localstatedir /opt/samba/var --with-privatedir /opt/samba/private --with-bind-dns-dir /opt/samba/bind-dns \
 --with-systemd --with-regedit && make

==== Файловая шара на SSSD ====

 ./configure --prefix /opt/samba/4.10.18 --sysconfdir /opt/samba/conf \
 --without-ldb-lmdb --without-winbind --without-ad-dc --without-lttng \
 --without-quotas --without-json --with-systemd \
 --disable-cups --disable-iprint --disable-avahi \
 --disable-python --disable-glusterfs

[https://fls.adm30.ru/s/kKmzdGANgyZWn5J Готовая сборка]

== samba.conf ==

==== Открытая шара ====

 [global]
 workgroup = SAMBA
 security = user
 passdb backend = tdbsam
 map to guest = bad user
 ntlm auth = yes #если с WinXP не получается аунтетифицироваться
 min protocol = NT1 #минимальная версия протокола CIFS/SMB 1
 
 [share]
 path = /mnt/share
 writable = yes
 guest ok = yes
 hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/~*/
 create mask = 0666
 directory mask = 2777
 
 [private]
 path = /mnt/private
 writable = yes
 guest ok = yes
 hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/~*/
 create mask = 0666
 directory mask = 2777
 browsable = no #скрыть ресурс

==== Шара с системными пользователями ====

 [global]
 workgroup = SAMBA
 security = user
 passdb backend = tdbsam
 
 [share]
 path = /home/smb/share
 writable = yes
 guest ok = no
 valid users = user
 hosts allow = 192.168.12.32/27, 192.168.9.240/28, 192.168.9.0
 hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/~*/
 create mask = 0660
 directory mask = 2770
 
 [cons]
 path = /home/smb/cons
 writable = yes
 guesk ok = yes
 browsable = no
 valid users = user, cons
 
 [admin]
 path = /home/smb/admin
 writable = yes
 guesk ok = no
 browsable = no
 valid users = admin
 create mask = 0660
 directory mask = 2770

==== Шара в домене (winbind) ====

 [global]
 workgroup = ABMK
 password server = dc.abmk.local
 realm = ABMK.LOCAL
 security = ads
 idmap config * : range = 16777216-33554431
 template shell = /bin/false
 kerberos method = secrets only
 winbind use default domain = true
 winbind offline logon = false
 encrypt passwords = yes
 client signing = yes
 client use spnego = yes
 wins support = no
 wins proxy = no
 passdb backend = tdbsam
 server string = Cloud File Server

==== Шара в домене (sssd) ====

 [global]
 workgroup = ABMK
 security = ads
 realm = ABMK.LOCAL
 client signing = yes
 client use spnego = yes
 password server = dc.abmk.local
 kerberos method = secrets and keytab

<code>net ads join -k</code>