Ubuntu安装配置samba

1、安装samba服务

sudo apt-get install samba

2、添加samba用户

sudo useradd username

编辑用户密码

sudo smbpasswd -a username

删除用户

sudo smbpasswd -x username

3、修改smb.conf配置文件

sudo vim /etc/samba/smb.conf

在最后添加如下内容：

[Share]

comment = Share Folder

path = /home/Jacky/Desktop/samba

browseable = yes

writable = yes

4、重新启动samba服务

sudo /etc/init.d/samba restart

5、在windows中访问samba服务器

注意：

1)、关于selinux，请关闭selinux，在/etc/selinux/config中设置selinux为disabled。

2)、关于firewall设定：

详细可参考samba官网：http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-samba.html#firewallports

Using a Firewall

Many people use a firewall to deny access to services they do not want exposed outside their network. This can be a good idea, although I recommend using it in conjunction with the above methods so you are protected even if your firewall is not active for some reason.

If you are setting up a firewall, you need to know what TCP and UDP ports to allow and block. Samba uses the following:

Port 135/TCP - used by smbd

Port 137/UDP - used by nmbd

Port 138/UDP - used by nmbd

Port 139/TCP - used by smbd

Port 445/TCP - used by smbd

The last one is important because many older firewall setups may not be aware of it, given that this port was only added to the protocol in recent years.

When configuring a firewall, the high order ports (1024-65535) are often used for outgoing connections and therefore should be permitted through the firewall. It is prudent to block incoming packets on the high order ports except for established connections.

修改/etc/sysconfig/iptables

-A INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT

-A INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT

-A INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT

-A INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT

(说明：在httpd服务中，需开启80端口，开启方法添加如下一行：

-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT)

重启防火墙服务

service iptables restart

或/etc/rc.d/init.d/iptables restart

重启samba服务

/etc/rc.d/init.d/smb restart