Difference between revisions of "OPS335 Samba Lab"

From CDOT Wiki
Jump to: navigation, search
(Configuring a Samba Server on Linux)
m (fixing warning.)
 
(26 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
[[Category:OPS335]][[Category:OPS335 Labs]]
 
[[Category:OPS335]][[Category:OPS335 Labs]]
 
=Samba - A Windows SMB/CIFS fileserver for UNIX=
 
=Samba - A Windows SMB/CIFS fileserver for UNIX=
 +
{{Admon/important|Warning| Make sure that your VMs are fully updated before you begin this lab. }}
 +
 
==Configuring a Samba Server on Linux==
 
==Configuring a Samba Server on Linux==
*On your host F16 system install Samba
+
*On your VM 2 install Samba
   yum install samba samba-client
+
   dnf install samba samba-client
*Create a backup of the file /etc/samba/smb.conf, and create a new one that includes the following:
+
*Create a backup of the file /etc/samba/smb.conf, and create a new one that includes only the following:
 
  [global]
 
  [global]
 
  workgroup = <yourlearnid>.org  
 
  workgroup = <yourlearnid>.org  
Line 10: Line 12:
 
  encrypt passwords = yes
 
  encrypt passwords = yes
 
  smb passwd file = /etc/samba/smbpasswd
 
  smb passwd file = /etc/samba/smbpasswd
hosts allow = 142.204.141.
+
 
; note: the above line will allow access from the Seneca domain in lab T2107
+
  [home]
   
 
  [homes]
 
 
  comment = "put your real name here without the quotes"
 
  comment = "put your real name here without the quotes"
 
  path = /home/<learnid>
 
  path = /home/<learnid>
valid users = <learnid>
 
; remember <learnid> is your learnid account name
 
 
  public = no
 
  public = no
 
  writable = yes
 
  writable = yes
 
  printable = no
 
  printable = no
 
  create mask = 0765
 
  create mask = 0765
 +
*Now add a parameter to the global section that will limit access to the share so that only machines in your virtual network and those in the lab room will be able to access it.
 +
*Add a parameter to the home section so that only your user account can access that share.
 
*Create a Samba password for user <learnid> with the command
 
*Create a Samba password for user <learnid> with the command
 
  smbpasswd -a <learnid>
 
  smbpasswd -a <learnid>
 +
*If you need to, you can change a user's password by using the command
 +
smbpasswd <username>
 
*Confirm the user you created has been added using the following command
 
*Confirm the user you created has been added using the following command
 
  pdbedit -L -v
 
  pdbedit -L -v
*You can change a user's password by using the command
+
*Test and review your configuration with the command
smbpasswd <learnid/username>
 
*Test your configuration with the command
 
 
  testparm
 
  testparm
*You can now start your Samba server
+
*You can now start your Samba server (smb.service) and ensure it will start at boot.  
systemctl start smb.service
+
*Modify the firewall on VM2 to allow samba traffic.
*Ensure your server starts at boot.  
 
*You will need to determine which ports you need to open to allow connections to your server.
 
 
*Test if you have a connection with the command
 
*Test if you have a connection with the command
  smbclient -U <learnid> -L f16
+
  smbclient -U <learnid> -L vm2
*If the previous command worked, try the connection from one of your VM's. You can view all available shares with the follow command:
+
*It will show you a list of all available shares.
smbclient -U <learnid> -L f16
 
  
 
=Connecting to a Linux SMB Server from a Linux Client=
 
=Connecting to a Linux SMB Server from a Linux Client=
Line 43: Line 40:
  
 
== Using smbclient ==
 
== Using smbclient ==
*Install samba-client on your vm01
+
*In a full installation you should not need to install samba-client on your host, but if it is not present then do so.
*From vm01 use the "smbclient" command in a terminal window.
+
*You will also need to install the cifs-utils package to be able to mount the filesystem.
  smbclient '\\f16\home' -U <learnid>
+
*From the host use the "smbclient" command in a terminal window.
 +
  smbclient '\\vm2\home' -U <learnid>
 
*After entering your password you should get a prompt similar to
 
*After entering your password you should get a prompt similar to
 
  smb: \>
 
  smb: \>
Line 51: Line 49:
 
  smb: \> ls
 
  smb: \> ls
 
  NT_STATUS_ACCESS_DENIED listing \*
 
  NT_STATUS_ACCESS_DENIED listing \*
*SE Linux should be in Enforcing and will need to be adjusted for this to work. Check the available booleans or your logs.
+
*SE Linux should be in Enforcing and will need to be adjusted (on the samba server) for this to work.
*Use the get and put commands (similar to ftp) to move files.
+
  setsebool -P samba_enable_home_dirs 1
 +
*Once you have access to the directory use the get and put commands (similar to ftp) to move files.
 
*When you are finished close the connection.
 
*When you are finished close the connection.
  
 
== Using 'mount -t cifs' ==
 
== Using 'mount -t cifs' ==
 
*The next way is to use the mount command.
 
*The next way is to use the mount command.
*Use the mount command on vm01 to mount your home directory
+
*Use the mount command on the host to mount your home directory
  mkdir /tmp/f16-home
+
  mkdir /tmp/vm2-home
  mount -t cifs //f16/home /tmp/f16-home -o username=<learnid>
+
  mount -t cifs //vm2/home /tmp/vm2-home -o username=<learnid>
  ls /tmp/f16-home
+
  ls /tmp/vm2-home
  
 
== Using Nautilus to browse Samba shares ==
 
== Using Nautilus to browse Samba shares ==
*Use the "Places" menu from a Gnome desktop on vm01.
+
*Use the "Places" menu from the desktop and open 'Browse Network'.
*From the "Places" menu at the top of your screen, select "Network" and wait until the network scan completes.  
+
*From the menu in the side-bar of the files tool, choose 'Connect to Server'.
**Navigate to /tmp/f16-home.
+
*Enter 'smb://vm2/home' as the location, and enter your samba password in the prompt.
 +
**Where vm2 is the name of the server, and home is the name of the directory it is sharing.
 +
*After you have checked that you can access your files, unmount the share by right-clicking its icon in the side-bar and clicking 'Unmount'.
  
 
== Using a browser ==
 
== Using a browser ==
*You can also use a web browser with support for the SMB protocol such as Konqueror.  
+
*You can also use a web browser with support for the SMB protocol such as Konqueror.
 +
**Note that firefox does not have such support.  
 
*If Konqueror is not installed then install it with the command:  
 
*If Konqueror is not installed then install it with the command:  
 
  yum install kdebase
 
  yum install kdebase
*Start Konqueror, the web/file browser, and in the address bar enter the follwing
+
*Start Konqueror, the web/file browser, and in the address bar enter the following
  smb://f16/home
+
  smb://vm2/home
*Use the browser and attempt to drag and drop your files to and from your Desktop.
+
*Enter your username and password when prompted.
 +
*Double click on a file you have some text in.
 +
**Open it with gedit, make some changes, and save it.
 +
**When prompted, choose to upload the file.
 
*Close Konqueror.
 
*Close Konqueror.
 +
*cat the file on your VM2 to ensure the changes were properly uploaded.
  
 
=Connecting to a Linux SMB Server from a Windows Client (Windows 7)=
 
=Connecting to a Linux SMB Server from a Windows Client (Windows 7)=
 
*Power up a Windows 7 system in the lab and login using your LEARN username and password.
 
*Power up a Windows 7 system in the lab and login using your LEARN username and password.
*Open up Explorer and Right click on Computer > Map network drive.. > Select a Drive Letter and '\\<ip-address-of-f16-host>\home' > you will then be asked for your username and password.
+
*Add the prerouting and forwarding rules to your Centos host's iptables necessary to redirect samba traffic from outside your network to your VM 2.
 +
*Open up Explorer and Right click on Computer > Map network drive.. > Select a Drive Letter and '\\<ip-address-of-host>\home' > you will then be asked for your username and password.
 
*You should now be able to browser, drag and drop your files to and from the Windows machine.  
 
*You should now be able to browser, drag and drop your files to and from the Windows machine.  
 
==Completing the Lab==
 
==Completing the Lab==
Answer the following questions
+
While completing this lab you have gained experience using a service designed to allow interaction from a variety of client tools on multiple OS platforms. You have also experienced service related tools that allow you to view configuration parameters and errors in real-time.
#Explain how you connected to your SMB server on Linux from a Windows PC. List exactly what you had to do on the Windows PC to test your Linux server.
+
 
 +
Exploration questions:
 
#What is the purpose of the testparm command?
 
#What is the purpose of the testparm command?
#What is the purpose of the smbclient command?
 
 
#What does SMB stand for? CIFS?
 
#What does SMB stand for? CIFS?
#What does the text inside square brackets in the smb.conf file mean? (e.g., "[homes]").
+
#What does the text inside square brackets in the smb.conf file mean? (e.g., "[home]").
 
#Explain the meaning of the line "create mask = 0765" in the smb.conf file?
 
#Explain the meaning of the line "create mask = 0765" in the smb.conf file?
 
#What does the smbpasswd command do?
 
#What does the smbpasswd command do?
#What was the exact mount command that you used in the last step of the lab?
+
#What did the setsebool command do?

Latest revision as of 17:15, 4 November 2015

Samba - A Windows SMB/CIFS fileserver for UNIX

Important.png
Warning
Make sure that your VMs are fully updated before you begin this lab.

Configuring a Samba Server on Linux

  • On your VM 2 install Samba
 dnf install samba samba-client
  • Create a backup of the file /etc/samba/smb.conf, and create a new one that includes only the following:
[global]
workgroup = <yourlearnid>.org 
server string = "put your real name here without the quotes"
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
  
[home]
comment = "put your real name here without the quotes"
path = /home/<learnid>
public = no
writable = yes
printable = no
create mask = 0765
  • Now add a parameter to the global section that will limit access to the share so that only machines in your virtual network and those in the lab room will be able to access it.
  • Add a parameter to the home section so that only your user account can access that share.
  • Create a Samba password for user <learnid> with the command
smbpasswd -a <learnid>
  • If you need to, you can change a user's password by using the command
smbpasswd <username>
  • Confirm the user you created has been added using the following command
pdbedit -L -v
  • Test and review your configuration with the command
testparm
  • You can now start your Samba server (smb.service) and ensure it will start at boot.
  • Modify the firewall on VM2 to allow samba traffic.
  • Test if you have a connection with the command
smbclient -U <learnid> -L vm2
  • It will show you a list of all available shares.

Connecting to a Linux SMB Server from a Linux Client

There are many ways that a Linux client can connect to an SMB server.

Using smbclient

  • In a full installation you should not need to install samba-client on your host, but if it is not present then do so.
  • You will also need to install the cifs-utils package to be able to mount the filesystem.
  • From the host use the "smbclient" command in a terminal window.
smbclient '\\vm2\home' -U <learnid>
  • After entering your password you should get a prompt similar to
smb: \>
  • Enter the ls command to see a list of the files in your home directory - you may receive the following error.
smb: \> ls
NT_STATUS_ACCESS_DENIED listing \*
  • SE Linux should be in Enforcing and will need to be adjusted (on the samba server) for this to work.
 setsebool -P samba_enable_home_dirs 1
  • Once you have access to the directory use the get and put commands (similar to ftp) to move files.
  • When you are finished close the connection.

Using 'mount -t cifs'

  • The next way is to use the mount command.
  • Use the mount command on the host to mount your home directory
mkdir /tmp/vm2-home
mount -t cifs //vm2/home /tmp/vm2-home -o username=<learnid>
ls /tmp/vm2-home

Using Nautilus to browse Samba shares

  • Use the "Places" menu from the desktop and open 'Browse Network'.
  • From the menu in the side-bar of the files tool, choose 'Connect to Server'.
  • Enter 'smb://vm2/home' as the location, and enter your samba password in the prompt.
    • Where vm2 is the name of the server, and home is the name of the directory it is sharing.
  • After you have checked that you can access your files, unmount the share by right-clicking its icon in the side-bar and clicking 'Unmount'.

Using a browser

  • You can also use a web browser with support for the SMB protocol such as Konqueror.
    • Note that firefox does not have such support.
  • If Konqueror is not installed then install it with the command:
yum install kdebase
  • Start Konqueror, the web/file browser, and in the address bar enter the following
smb://vm2/home
  • Enter your username and password when prompted.
  • Double click on a file you have some text in.
    • Open it with gedit, make some changes, and save it.
    • When prompted, choose to upload the file.
  • Close Konqueror.
  • cat the file on your VM2 to ensure the changes were properly uploaded.

Connecting to a Linux SMB Server from a Windows Client (Windows 7)

  • Power up a Windows 7 system in the lab and login using your LEARN username and password.
  • Add the prerouting and forwarding rules to your Centos host's iptables necessary to redirect samba traffic from outside your network to your VM 2.
  • Open up Explorer and Right click on Computer > Map network drive.. > Select a Drive Letter and '\\<ip-address-of-host>\home' > you will then be asked for your username and password.
  • You should now be able to browser, drag and drop your files to and from the Windows machine.

Completing the Lab

While completing this lab you have gained experience using a service designed to allow interaction from a variety of client tools on multiple OS platforms. You have also experienced service related tools that allow you to view configuration parameters and errors in real-time.

Exploration questions:

  1. What is the purpose of the testparm command?
  2. What does SMB stand for? CIFS?
  3. What does the text inside square brackets in the smb.conf file mean? (e.g., "[home]").
  4. Explain the meaning of the line "create mask = 0765" in the smb.conf file?
  5. What does the smbpasswd command do?
  6. What did the setsebool command do?