Changes

Jump to: navigation, search

OPS335 Samba Lab

1,173 bytes removed, 17:15, 4 November 2015
m
fixing warning.
[[Category:OPS335]][[Category:OPS335 Labs]]
=Samba - A Windows SMB/CIFS fileserver for UNIX=
{{Admon/important|Warning| Make sure that your VMs are fully updated before you begin this lab. }}
 
==Configuring a Samba Server on Linux==
*On your VM 2 install Samba
dnf install samba samba-client
*Create a backup of the file /etc/samba/smb.conf, and create a new one that includes only the following:
[global]
workgroup = <yourlearnid>.org
server string = "put your real name here without the quotes"
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
[home]
comment = "put your real name here without the quotes"
path = /home/<learnid>
public = no
writable = yes
printable = no
create mask = 0765
*Now add a parameter to the global section that will limit access to the share so that only machines in your virtual network and those in the lab room will be able to access it.
*Add a parameter to the home section so that only your user account can access that share.
*Create a Samba password for user <learnid> with the command
smbpasswd -a <learnid>
*If you need to, you can change a user's password by using the command
smbpasswd <username>
*Confirm the user you created has been added using the following command
pdbedit -L -v
*Test and review your configuration with the command
testparm
*You can now start your Samba server (smb.service) and ensure it will start at boot.
*Modify the firewall on VM2 to allow samba traffic.
*Test if you have a connection with the command
smbclient -U <learnid> -L vm2
*It will show you a list of all available shares.
 
=Connecting to a Linux SMB Server from a Linux Client=
There are many ways that a Linux client can connect to an SMB server.
== Using smbclient ==
*In a full installation you should not need to install samba-client on your host, but if it is not present then do so.
*You will also need to install the cifs-utils package to be able to mount the filesystem.
*From the host use the "smbclient" command in a terminal window.
smbclient '\\vm2\home' -U <learnid>
*After entering your password you should get a prompt similar to
smb: \>
*Enter the ls command to see a list of the files in your home directory - you may receive the following error.
smb: \> ls
NT_STATUS_ACCESS_DENIED listing \*
*SE Linux should be in Enforcing and will need to be adjusted (on the samba server) for this to work.
setsebool -P samba_enable_home_dirs 1
*Once you have access to the directory use the get and put commands (similar to ftp) to move files.
*When you are finished close the connection.
[[Category:OPS335]][[Category:OPS335 Labs]]== Using 'mount -t cifs' ==FOCUS: SAMBA*The next way is to use the mount command.*Use the mount command on the host to mount your home directory mkdir /tmp/vm2-home mount -t cifs //vm2/home /tmp/vm2-home -o username=<learnid> ls /tmp/vm2-home
PART A: Connecting == Using Nautilus to a Linux SMB Server (Matrix) browse Samba shares ==*Use the "Places" menu from a Windows Client (Windows 7)Power up a Windows 7 system in the lab desktop and login using your LEARN username and passwordopen 'Browse Network'.You should see an icon *From the menu in the side-bar of Tux, the Linux penguinfiles tool, on your desktop. Double-click it choose 'Connect to login to your Matrix accountServer'. A window of *Enter 'smb://vm2/home' as the location, and enter your Matrix home directory should opensamba password in the prompt.Use **Where vm2 is the name of the mouse to drag server, and drop files to and from your Matrix account and your Windows 7 lab machinehome is the name of the directory it is sharing.Once *After you are satisfied have checked that you can easily move access your files to/from your Matrix account power off , unmount the PC.Set share by right-clicking its icon in the HD selector switch to boot from your Fedora 13 Linux drive side-bar and power on the PCclicking 'Unmount'.PART B: Connecting to a Linux SMB Server (Matrix) from a Linux Client (Fedora 13)
There are 4 ways that == Using a Linux client can connect to an SMB server. Start by logging into your Fedora 13 system as joker and opening a terminal window.The first way is to use the "Places" menu from a Gnome desktop:Switch to root and ensure you are using the default Fedora 13 firewall.As root, ensure Samba is installed. Use these two commands: "yum install samba" and "yum install samba-client"NOTE: Fedora encrypts passwords when authenticating SMB connections. Unfortunately Windows clients (here at Seneca) insist on passwords being sent in plain text. For this reason Matrix SMB is set to use plain text passwords. To change Fedora to use plain text passwords switch to root and edit the /etc/samba/smb.conf file and immediately after the [global] section header insert these two lines:client plaintext auth browser = yesclient lanman auth = yesCreate a new account on Fedora with the same name as your LEARN acount. Set the password to 'seneca99'.Logout of joker and login to Fedora using your LEARN name.Now try the following:From the "Places" menu at the top of your screen, select "Network" and wait until the network scan completes. Then click on the"Windows Network" and then click the "File" menu and select"Connect to Server" and input matrix.senecac.on.ca for the server, your username for the ShareName and UserName fields. Then click theConnect button. *You should now be able to browse your Matrix files.The second way is to can also use a web browser with support for the SMB protocol such as Konqueror.**Note that firefox does not have such support. *If Konqueror is not installed then install it with the command: ' yum install kdebase'. *Start Konqueror, the web/file browser, and in the Location edit box address bar enter the following: smb://matrixvm2/xxxxxxhomewhere xxxxxx is *Enter your Matrix usernameLogin to your Matrix account. Konqueror should open a window of your Matrix home directory. Use the mouse to drag and drop files to and from your Matrix account and your Fedora Linux machinepassword when prompted.Close Konqueror.The third way is to use the "smbclient" command *Double click on a file you have some text in a terminal window.At the command prompt enter the following: smbclient '\\matrix\xxxxxx' -U xxxxxx where xxxxxx is your Matrix usernameYou should get a prompt similar to smb: \>Enter the ls command to see a list of your Matrix files.Enter ? to see a list of smbclient commands.Use the get **Open it with gedit, make some changes, and put commands (similar to ftp) to move files to and from your Matrix account and your Fedora 13 Linux systemsave it.**When done enter the quit command.The fourth way is prompted, choose to use upload the mount commandfile. THIS PART IS IN RED BECAUSE IT PROBABLY WILL NOT WORK !Use the mount command to mount your matrix home directory. NOTE: This mount command will only work if your kernel was configured to allow mounting CIFS with unencrypted passwords*Close Konqueror. mount -t cifs //matrix/xxxxxx /mnt -o username=xxxxxxwhere xxxxxx is your your Matrix username.If *cat the previous step worked, browse file on your /mnt directory using cd and ls commands and when done use the umount command VM2 to unmount your Matrix home directory.PART C: Configuring an SMB Server on LinuxLogin to Fedora as joker and open a terminal window.Use "su -" to become root.Ensure SAMBA is installed: yum install sambaEdit the file /etc/samba/smb.conf, delete all original lines and include the following: [global] workgroup = OPS335 server string = "put your real name here without ensure the quotes" encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd hosts allow = 142.204.141changes were properly uploaded. ; note: the above line will allow access from the Seneca domain in lab T2107
[home] comment = "put your real name here without the quotes" path Connecting to a Linux SMB Server from a Windows Client (Windows 7)= /home/xxxxxxx valid users = xxxxxxx ; remember xxxxxxx is *Power up a Windows 7 system in the lab and login using your LEARN/MATRIX account name public = no writable = yes printable = no create mask = 0765You can comment out all other lines in the fileusername and password.Create a SAMBA password for user xxxxxxx with *Add the command smbpasswd -a xxxxxxxTest prerouting and forwarding rules to your Centos host's iptables necessary to redirect samba traffic from outside your configuration with the command testparmYou can now start network to your SAMBA server /etc/initVM 2.d/smb start or service smb startTest if you have a connection with the command smbclient -L 142*Open up Explorer and Right click on Computer > Map network drive.204.141.yyy > Select a Drive Letter and '\\<ip-Uxxxxxxx%pppppppwhere 142.204.141.yyy is your Fedora Linux IP addressand xxxxxxx is -of-host>\home' > you will then be asked for your Matrix account nameusername and ppppppp is your SAMBA password.If the previous command worked*You should now be able to browser, use another PC (Fedora then Windows) drag and drop your files to establish a connection with and from the SMB server on your Fedora Linux Windows machine. This step is important to ensure your SMB server on Linux is working. NOTE: If your set up looks correct but you can't connect to your SMB server from ==Completing the outside then Lab==While completing this lab you may need to adjust your firewall have gained experience using a service designed to allow SMB connectionsinteraction from a variety of client tools on multiple OS platforms.From another Linux PC, use the mount command You have also experienced service related tools that allow you to mount your home directory onto /mnt. Step 4 view configuration parameters and errors in PART B should help you with this. Record this command as you'll need it for PART Dreal-time.PART D: Answer the following questions
What is your full name and 9 digit Seneca student ID?In PART C step 9, explain how you connected to your SMB server on Linux from a Windows PC. List exactly what you had to do on the Windows PC to test your Linux server.Exploration questions:#What is the purpose of the testparm command?What is the purpose of the smbclient command?#What does SMB stand for? CIFS?#What does the text inside square brackets in the smb.conf file mean? (e.g., "[homeshome]").#Explain the meaning of the line "create mask = 0765" in the smb.conf file?#What does the smbpasswd command do?#What exact mount did the setsebool command did you use in PART C step 10do?
932
edits

Navigation menu