932
edits
Changes
m
hosts allow = 142.204.141. ; note: the above line will allow access from the Seneca domain in lab T2107 [homeshome]
valid users = <learnid>
; remember <learnid> is your learnid account name
*You can change a user's password by using the command smbpasswd <learnid/username>*Test and review your configuration with the command
Answer the following questions#Explain how While completing this lab you connected have gained experience using a service designed to your SMB server on Linux allow interaction from a Windows PCvariety of client tools on multiple OS platforms. List exactly what You have also experienced service related tools that allow you had to do on the Windows PC to test your Linux serverview configuration parameters and errors in real-time. Exploration questions:
#What is the purpose of the smbclient command?
fixing warning.
[[Category:OPS335]][[Category:OPS335 Labs]]
=Samba - A Windows SMB/CIFS fileserver for UNIX=
{{Admon/important|Warning| Make sure that your VMs are fully updated before you begin this lab. }}
==Configuring a Samba Server on Linux==
*On your host F16 system VM 2 install Samba yum dnf install samba samba-client*Create a backup of the file /etc/samba/smb.conf, and create a new one that includes only the following:
[global]
workgroup = <yourlearnid>.org
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
comment = "put your real name here without the quotes"
path = /home/<learnid>
public = no
writable = yes
printable = no
create mask = 0765
*Now add a parameter to the global section that will limit access to the share so that only machines in your virtual network and those in the lab room will be able to access it.
*Add a parameter to the home section so that only your user account can access that share.
*Create a Samba password for user <learnid> with the command
smbpasswd -a <learnid>
*If you need to, you can change a user's password by using the command
smbpasswd <username>
*Confirm the user you created has been added using the following command
pdbedit -L -v
testparm
*You can now start your Samba server systemctl start (smb.service*Ensure your server starts ) and ensure it will start at boot. *You will need to determine which ports you need to open Modify the firewall on VM2 to allow connections to your serversamba traffic.
*Test if you have a connection with the command
smbclient -U <learnid> -L f16vm2*If the previous command worked, try the connection from one It will show you a list of your VM's. You can view all available shares with the follow command: smbclient -U <learnid> -L f16.
=Connecting to a Linux SMB Server from a Linux Client=
== Using smbclient ==
*Install In a full installation you should not need to install samba-client on your vm01host, but if it is not present then do so.*You will also need to install the cifs-utils package to be able to mount the filesystem.*From vm01 the host use the "smbclient" command in a terminal window. smbclient '\\f16vm2\home' -U <learnid>
*After entering your password you should get a prompt similar to
smb: \>
smb: \> ls
NT_STATUS_ACCESS_DENIED listing \*
*SE Linux should be in Enforcing and will need to be adjusted (on the samba server) for this to work. Check the available booleans or your logs. setsebool -P samba_enable_home_dirs 1*Use Once you have access to the directory use the get and put commands (similar to ftp) to move files.
*When you are finished close the connection.
== Using 'mount -t cifs' ==
*The next way is to use the mount command.
*Use the mount command on vm01 the host to mount your home directory mkdir /tmp/f16vm2-home mount -t cifs //f16vm2/home /tmp/f16vm2-home -o username=<learnid> ls /tmp/f16vm2-home
== Using Nautilus to browse Samba shares ==
*Use the "Places" menu from a Gnome the desktop on vm01and open 'Browse Network'.*From the "Places" menu at in the top side-bar of the files tool, choose 'Connect to Server'. *Enter 'smb://vm2/home' as the location, and enter your screensamba password in the prompt.**Where vm2 is the name of the server, select "Network" and wait until home is the network scan completesname of the directory it is sharing. **Navigate to /tmp/f16After you have checked that you can access your files, unmount the share by right-clicking its icon in the side-homebar and clicking 'Unmount'.
== Using a browser ==
*You can also use a web browser with support for the SMB protocol such as Konqueror.**Note that firefox does not have such support.
*If Konqueror is not installed then install it with the command:
yum install kdebase
*Start Konqueror, the web/file browser, and in the address bar enter the follwingfollowing smb://f16vm2/home*Use the browser Enter your username and attempt to drag password when prompted.*Double click on a file you have some text in.**Open it with gedit, make some changes, and drop your files save it.**When prompted, choose to and from your Desktopupload the file.
*Close Konqueror.
*cat the file on your VM2 to ensure the changes were properly uploaded.
=Connecting to a Linux SMB Server from a Windows Client (Windows 7)=
*Power up a Windows 7 system in the lab and login using your LEARN username and password.
*Add the prerouting and forwarding rules to your Centos host's iptables necessary to redirect samba traffic from outside your network to your VM 2.*Open up Explorer and Right click on Computer > Map network drive.. > Select a Drive Letter and '\\<ip-address-of-f16-host>\home' > you will then be asked for your username and password.
*You should now be able to browser, drag and drop your files to and from the Windows machine.
==Completing the Lab==
#What is the purpose of the testparm command?
#What does SMB stand for? CIFS?
#What does the text inside square brackets in the smb.conf file mean? (e.g., "[homeshome]").
#Explain the meaning of the line "create mask = 0765" in the smb.conf file?
#What does the smbpasswd command do?
#What was did the exact mount setsebool command that you used in the last step of the labdo?
