OPS335: File Servers

SAMBA SERVER RESOURCES

Online References:

• x

OVERVIEW

x

+++ Add Diagram +++

INVESTIGATION 1: INSTALLING & CONFIGURING A SAMBA SERVER

In this investigation, we will set up a Samba server on our VM2 machine. +++Complete this sentence +++

Perform the following steps:

1. Issue the following Linux command to install Samba server utlity:
   dnf install samba samba-client
   
2. Create a backup of the file /etc/samba/smb.conf, and create a new one that includes only the following:

[global]
workgroup = <yourlearnid>.org 
server string = "put your real name here without the quotes"
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
  
[home]
comment = "put your real name here without the quotes"
path = /home/<learnid>
public = no
writable = yes
printable = no
create mask = 0765

3. Now add a parameter to the global section that will limit access to the share so that only machines in your virtual network and those in the lab room will be able to access it.
4. Add a parameter to the home section so that only your user account can access that share.
5. Create a Samba password for user <learnid> with the command:
   smbpasswd -a <learnid>
6. If you need to, you can change a user's password by using the command:
   smbpasswd <username>
7. Confirm the user you created has been added using the following command:
   pdbedit -L -v
Test and review your configuration with the command:
testparm
8. You can now start your Samba server (smb.service) and ensure it will start at boot.
9. Modify the firewall on VM2 to allow samba traffic.
10. Test if you have a connection with the command:
    smbclient -U <learnid> -L vm2 (It will show you a list of all available shares.)

INVESTIGATION 2: CONNECTING TO A LINUX SAMBA SERVER FROM A LINUX CLIENT

There are many ways that a Linux client can connect to an SMB server.

Using smbclient

x

Perform the following steps:

1. In a full installation you should not need to install samba-client on your host, but if it is not present then do so.
2. You will also need to install the cifs-utils package to be able to mount the filesystem.
3. From the host use the "smbclient" command in a terminal window:
   smbclient '\\vm2\home' -U <learnid>
4. After entering your password you should get a prompt similar to:
   smb: \>
5. Enter the ls command to see a list of the files in your home directory:
   smb: \> ls
   
   - you may receive the following error:
   NT_STATUS_ACCESS_DENIED listing
   
   
6. SE Linux should be in Enforcing and will need to be adjusted (on the samba server) for this to work by issuing the command:
   setsebool -P samba_enable_home_dirs 1
7. Once you have access to the directory use the get and put commands (similar to ftp) to move files.
8. When you are finished close the connection.

Using 'mount -t cifs'

x

Perform the following steps:

1. The next way is to use the mount command.
2. Use the mount command on the host to mount your home directory by issuing the following commands:<br>mkdir /tmp/vm2-home
   mount -t cifs //vm2/home /tmp/vm2-home -o username=<learnid>
   ls /tmp/vm2-home

INVESTIGATION 3: CONNECTING TO A SAMBA SERVER FROM A WINDOWS CLIENT

x

Installing Windows VM & Configure Samba Server

• New procedures

Using Nautilus to browse Samba shares

• Use the "Places" menu from the desktop and open 'Browse Network'.
• From the menu in the side-bar of the files tool, choose 'Connect to Server'.
• Enter 'smb://vm2/home' as the location, and enter your samba password in the prompt.
  • Where vm2 is the name of the server, and home is the name of the directory it is sharing.
• After you have checked that you can access your files, unmount the share by right-clicking its icon in the side-bar and clicking 'Unmount'.

Using a browser

• You can also use a web browser with support for the SMB protocol such as Konqueror.
  • Note that firefox does not have such support.
• If Konqueror is not installed then install it with the command:

yum install kdebase

• Start Konqueror, the web/file browser, and in the address bar enter the following

smb://vm2/home

• Enter your username and password when prompted.
• Double click on a file you have some text in.
  • Open it with gedit, make some changes, and save it.
  • When prompted, choose to upload the file.
• Close Konqueror.
• cat the file on your VM2 to ensure the changes were properly uploaded.

COMPLETING THE LAB

Arrange proof that ...

EXPLORATION QUESTIONS

1. What does SMB stand for? CIFS?
2. What does the text inside square brackets in the smb.conf file mean? (e.g., "[home]").
3. Explain the meaning of the line "create mask = 0765" in the smb.conf file?
4. What does the smbpasswd command do?
5. What did the setsebool command do?