一、samba匿名共享搭建：
mount /dev/cdrom /mnt
vi /etc/yum.repos.d/rhel.repo
[local]
name=lcoal
baseurl=file:///mnt
enabled=1
gpgcheck=0
:wq
关闭selinux
yum -y install samba
vi /etc/samba/smb.conf ##修改主配置文件
##删除注释:%g /^#/d 删除空行:%g /^$/d 删除样例行:%g /^;/d 删除多余空行；修改如下：
[global]
workgroup = MYGROUP
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
security = share
passdb backend = tdbsam
load printers = yes
cups options = raw
[public]
comment = Public Stuff
path = /opt/share
public = yes
writable = yes
printable = no
:wq
mkdir /opt/share
touch /opt/share/a.file
chmod 777 /opt/share
testparm ##测试配置是否有误
/etc/init.d/smb start
chkconfig smb on
netstat -utpln |grep mb ##TCP:139,445/UDP:137,138查看端口
防火墙配置：
iptables -I INPUT -m multiport -p tcp --dports 22,139,445 -j ACCEPT
iptables -I INPUT -m multiport -p udp --dports 137,138 -j ACCEPT
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -I INPUT -m state --state ESTABLISHED -j ACCEPT
iptables -I INPUT -i lo -j ACCEPT
/etc/init.d/iptables save
测试：
windows：
\\ip地址\public
二、samba用户认证的共享：注意匿名和认证选一个
创建用户：
useradd u01
useradd u02
pdbedit -a u01 ##将系统用户添加为smb用户
pdbedit -a u02
pdbedit -L ##查看smb用户
修改配置文件：
[root@smb ~]# vi /etc/samba/smb.conf
[global]
workgroup = MYGROUP
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
security = user ##用户认证的共享
passdb backend = tdbsam
load printers = yes
cups options = raw
[public]
comment = Public Stuff
path = /opt/share
public = no ##共享非公开
writable = no ##默认不可以写
valid users = u01, u02 ##允许访问的用户
write list = u01 ##有写入权限的用户
:wq
testparm
/etc/init.d/smb restart
netstat -utpln |grep mb
防火墙......
测试......
本文出自 “LP-linux” 博客，请务必保留此出处http://linuxlp.blog.51cto.com/11463376/1773547
原文地址：http://linuxlp.blog.51cto.com/11463376/1773547
