Samba

Компиляция исходного кода

Исходный код

Как контроллер домена Windows

./configure --prefix /opt/samba/4.10.18 --sysconfdir /opt/samba/conf \
--localstatedir /opt/samba/var --with-privatedir /opt/samba/private --with-bind-dns-dir /opt/samba/bind-dns \
--with-systemd --with-regedit && make

Файловая шара на SSSD

./configure --prefix /opt/samba/4.10.18 --sysconfdir /opt/samba/conf \
--without-ldb-lmdb --without-winbind --without-ad-dc --without-lttng \
--without-quotas --without-json --with-systemd \
--disable-cups --disable-iprint --disable-avahi \
--disable-python --disable-glusterfs

Готовая сборка

samba.conf

Открытая шара

[global]
workgroup = SAMBA
security = user
passdb backend = tdbsam
map to guest = bad user
ntlm auth = yes #если с WinXP не получается аунтетифицироваться
min protocol = NT1 #минимальная версия протокола CIFS/SMB 1

[share]
path = /mnt/share
writable = yes
guest ok = yes
hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/~*/
create mask = 0666
directory mask = 2777

[private]
path = /mnt/private
writable = yes
guest ok = yes
hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/~*/
create mask = 0666
directory mask = 2777
browsable = no #скрыть ресурс

Шара с системными пользователями

[global]
workgroup = SAMBA
security = user
passdb backend = tdbsam

[share]
path = /home/smb/share
writable = yes
guest ok = no
valid users = user
hosts allow = 192.168.12.32/27, 192.168.9.240/28, 192.168.9.0
hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/~*/
create mask = 0660
directory mask = 2770

[cons]
path = /home/smb/cons
writable = yes
guesk ok = yes
browsable = no
valid users = user, cons

[admin]
path = /home/smb/admin
writable = yes
guesk ok = no
browsable = no
valid users = admin
create mask = 0660
directory mask = 2770

Шара в домене (winbind)

[global]
workgroup = ABMK
password server = dc.abmk.local
realm = ABMK.LOCAL
security = ads
idmap config * : range = 16777216-33554431
template shell = /bin/false
kerberos method = secrets only
winbind use default domain = true
winbind offline logon = false
encrypt passwords = yes
client signing = yes
client use spnego = yes
wins support = no
wins proxy = no
passdb backend = tdbsam
server string = Cloud File Server

Шара в домене (sssd)

[global]
workgroup = ABMK
security = ads
realm = ABMK.LOCAL
client signing = yes
client use spnego = yes
password server = dc.abmk.local
kerberos method = secrets and keytab

net ads join -k